JDK-8341059 : Change Entrust TLS distrust date to November 12, 2024
  • Type: Enhancement
  • Component: security-libs
  • Sub-Component: javax.net.ssl
  • Priority: P2
  • Status: Resolved
  • Resolution: Fixed
  • Submitted: 2024-09-26
  • Updated: 2024-10-18
  • Resolved: 2024-09-27
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 11 JDK 17 JDK 21 JDK 23 JDK 24 JDK 7 JDK 8 Other
11.0.25-oracleFixed 17.0.13-oracleFixed 21.0.5-oracleFixed 23.0.1Fixed 24 b18Fixed 7u441Fixed 8u431Fixed openjdk8u432Fixed
Related Reports
CSR :  
JDK-8341087 - Change Entrust TLS distrust date to November 12, 2024
Relates :  
JDK-8337664 - Distrust TLS server certificates issued after Oct 2024 and anchored by Entrust Root CAs
Relates :  
JDK-8339495 - Release Note: Distrust TLS Server Certificates Anchored by Entrust Root Certificates and Issued After Nov 11, 2024
Description
Google has changed their distrust date for Entrust from November 1 to November 12, 2024 [1]. Entrust has also changed the date they plan to use SSL.com as the issuing CA for public TLS server certificates to November 12 [2]. Accordingly, to align with those updated dates, we will change our distrust date to November 12, 2024.

[1] https://security.googleblog.com/2024/06/sustaining-digital-certificate-security.html
[2] https://www.entrust.com/tls-certificate-information-center
Comments
[jdk8u-fix-request] Approval Request from Andrew Hughes Distrust date needs to be moved later across all updates that picked up [[JDK-8337664](https://bugs.openjdk.org/browse/JDK-8337664)](https://bugs.openjdk.org/browse/JDK-8337664). Patch did not backport cleanly but has been reviewed by Severin Gehwolf.
02-10-2024
A pull request was submitted for review. Branch: master URL: https://git.openjdk.org/jdk8u-dev/pull/588 Date: 2024-10-02 01:00:17 +0000
02-10-2024
A pull request was submitted for review. Branch: master URL: https://git.openjdk.org/jdk8u/pull/62 Date: 2024-10-01 19:05:00 +0000
01-10-2024
A pull request was submitted for review. Branch: master URL: https://git.openjdk.org/jdk11u/pull/100 Date: 2024-10-01 06:30:59 +0000
01-10-2024
A pull request was submitted for review. Branch: master URL: https://git.openjdk.org/jdk17u/pull/402 Date: 2024-10-01 06:28:56 +0000
01-10-2024
Critical request [21u,17u,11u] I backport this for parity with *-oracle. One of the required updates of meta information. 21: Adaptions of the change needed due to moved/renamed test files. 17, 11: the edited patch for 21 applies clean CSR etc. are available for all releases. The Entrust test passes and reproduces the error without the fix. SAP nightly testing passed.
01-10-2024
A pull request was submitted for review. Branch: master URL: https://git.openjdk.org/jdk21u/pull/456 Date: 2024-10-01 06:24:15 +0000
01-10-2024
[jdk21u-fix-request] Approval Request from Andrew Hughes Distrust date needs to be moved later across all updates that picked up [JDK-8337664](https://bugs.openjdk.org/browse/JDK-8337664). Patch did not backport cleanly and has been reviewed by Martin Balao.
28-09-2024
A pull request was submitted for review. Branch: master URL: https://git.openjdk.org/jdk21u-dev/pull/1015 Date: 2024-09-27 23:40:46 +0000
27-09-2024
The release note for this enhancement is JDK-8339495 which is shared with JDK-8337664.
27-09-2024
Changeset: f554c3ff Branch: master Author: Rajan Halade <rhalade@openjdk.org> Date: 2024-09-27 17:16:13 +0000 URL: https://git.openjdk.org/jdk/commit/f554c3ffce7599fdb535b03db4a6ea96870b3c2d
27-09-2024
[jdk23u-fix-request] Approval Request from Rajan Halade This fix updates the distrust date for Entrust and has a associated test update for verification. The backport is not clean because of test update in [JDK-8339560](https://bugs.openjdk.org/browse/JDK-8339560).
27-09-2024
A pull request was submitted for review. Branch: master URL: https://git.openjdk.org/jdk23u/pull/126 Date: 2024-09-27 16:46:38 +0000
27-09-2024
A pull request was submitted for review. Branch: master URL: https://git.openjdk.org/jdk/pull/21225 Date: 2024-09-27 16:22:04 +0000
27-09-2024