JDK-8317373 : Add Telia Root CA v2
  • Type: Enhancement
  • Component: security-libs
  • Sub-Component: java.security
  • Affected Version: 8,11,17,21,22
  • Priority: P2
  • Status: Resolved
  • Resolution: Fixed
  • Submitted: 2023-10-03
  • Updated: 2025-06-25
  • Resolved: 2023-10-20
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 11 JDK 17 JDK 21 JDK 22 JDK 7 JDK 8 Other
11.0.22-oracleFixed 17.0.10-oracleFixed 21.0.2Fixed 22 b21Fixed 7u411Fixed 8u401Fixed openjdk8u412,shenandoah8u402Fixed
Related Reports
Relates :  
JDK-8322704 - TeliaSonera root CA v2 is missing in cacerts
Sub Tasks
JDK-8318472 :  
Release Note: Added Telia Root CA v2 Certificate - Resolved
Description
Root certificate to download:  
https://support.trust.telia.com/repository/teliarootcav2_selfsigned.cer

Fingerprint of the root certificate:
Owner: CN=Telia Root CA v2, O=Telia Finland Oyj, C=FI
Issuer: CN=Telia Root CA v2, O=Telia Finland Oyj, C=FI
Serial number: 1675f27d6fe7ae3e4acbe095b059e
Valid from: Thu Nov 29 03:55:54 PST 2018 until: Sun Nov 29 03:55:54 PST 2043
Certificate fingerprints:
         SHA1: B9:99:CD:D1:73:50:8A:C4:47:05:08:9C:8C:88:FB:BE:A0:2B:40:CD
         SHA256: 24:2B:69:74:2F:CB:1E:5B:2A:BF:98:89:8B:94:57:21:87:54:4E:5B:4D:99:11:78:65:73:62:1F:6A:74:B8:2C
Signature algorithm name: SHA256withRSA


Test URLs:
Valid:  https://juolukka.cover.telia.fi:10600/
Revoked:  https://juolukka.cover.telia.fi:10601/
Expired:  https://juolukka.cover.telia.fi:10602/

Certificate revocation server URL (CRL and OCSP) :
CRL: http://httpcrl.trust.telia.com/teliarootcav2.crl 
OCSP: http://ocsp.trust.telia.com

Type:
This is multipurpose root (TLS, SMIME, ClientAuth, Signature)
Comments
Fix request [OpenJDK 8u]: Please approve this root CA addition for OpenJDK 8u. The JDK 11 patch applies clean after path shuffeling. Patch got reviewed by Paul Hohensee. Low risk, tests pass (including new one).
29-11-2023
A pull request was submitted for review. URL: https://git.openjdk.org/jdk8u-dev/pull/397 Date: 2023-11-28 16:18:12 +0000
28-11-2023
Fix request [OpenJDK 11u]: New root CA addition. I see Oracle backported it too. The JDK 17 patch is slightly modified but got trivially resolved. Patch got reviewed by Paul Hohensee. Tests pass (including new one).
07-11-2023
A pull request was submitted for review. URL: https://git.openjdk.org/jdk11u-dev/pull/2262 Date: 2023-11-06 19:34:27 +0000
06-11-2023
Fix request [17u] I backport this for parity with 17.0.10-oracle. One of the required updates of meta information. Trivial resolves needed. Tests pass. SAP nightly testing passed.
26-10-2023
A pull request was submitted for review. URL: https://git.openjdk.org/jdk17u-dev/pull/1916 Date: 2023-10-25 10:17:41 +0000
25-10-2023
[jdk21u-fix-request] Approval Request from Rajan Halade Fix Request jdk21u:, The fix is to add new root CA certificate. The patch applies cleanly and has good test coverage.
20-10-2023
A pull request was submitted for review. URL: https://git.openjdk.org/jdk21u/pull/278 Date: 2023-10-20 18:30:11 +0000
20-10-2023
Changeset: d3ebb4a1 Author: Rajan Halade <rhalade@openjdk.org> Date: 2023-10-20 18:25:09 +0000 URL: https://git.openjdk.org/jdk/commit/d3ebb4a155be8ed93e79b6b58c645e861ec30267
20-10-2023
A pull request was submitted for review. URL: https://git.openjdk.org/jdk/pull/16275 Date: 2023-10-19 19:40:24 +0000
19-10-2023