68e393c051d - platform/libcore

commit	68e393c051d3b5ed5b490f362c7ba97c75761ad8	[log] [tgz]
author	Sean Mullan <mullan@openjdk.org>	Fri Mar 01 00:55:45 2019 +0000
committer	Sean Mullan <mullan@openjdk.org>	Fri Mar 01 00:55:45 2019 +0000
tree	b1c3e087d816ed61b739d5c82810f3482f73e6c0
parent	ff8e80f8f9199b69b19ca0a9d9ac3b40c6aabd1f [diff]

8207258: Distrust TLS server certificates anchored by Symantec Root CAs

Add class CADistrustPolicy and distrust Symantec.

Reviewed-by: weijun

jdk/src/share/classes/sun/security/validator/CADistrustPolicy.java[Added - diff]
jdk/src/share/classes/sun/security/validator/EndEntityChecker.java[diff]
jdk/src/share/classes/sun/security/validator/SymantecTLSPolicy.java[Added - diff]
jdk/src/share/classes/sun/security/validator/Validator.java[diff]
jdk/src/share/lib/security/java.security-aix[diff]
jdk/src/share/lib/security/java.security-linux[diff]
jdk/src/share/lib/security/java.security-macosx[diff]
jdk/src/share/lib/security/java.security-solaris[diff]
jdk/src/share/lib/security/java.security-windows[diff]
jdk/test/lib/security/SecurityUtils.java[Added - diff]
jdk/test/sun/security/ssl/com/sun/net/ssl/internal/ssl/X509TrustManagerImpl/Symantec/Distrust.java[Added - diff]
jdk/test/sun/security/ssl/com/sun/net/ssl/internal/ssl/X509TrustManagerImpl/Symantec/appleistca2g1-chain.pem[Added - diff]
jdk/test/sun/security/ssl/com/sun/net/ssl/internal/ssl/X509TrustManagerImpl/Symantec/appleistca8g1-chain.pem[Added - diff]
jdk/test/sun/security/ssl/com/sun/net/ssl/internal/ssl/X509TrustManagerImpl/Symantec/geotrustglobalca-chain.pem[Added - diff]
jdk/test/sun/security/ssl/com/sun/net/ssl/internal/ssl/X509TrustManagerImpl/Symantec/geotrustprimarycag2-chain.pem[Added - diff]
jdk/test/sun/security/ssl/com/sun/net/ssl/internal/ssl/X509TrustManagerImpl/Symantec/geotrustprimarycag3-chain.pem[Added - diff]
jdk/test/sun/security/ssl/com/sun/net/ssl/internal/ssl/X509TrustManagerImpl/Symantec/geotrustuniversalca-chain.pem[Added - diff]
jdk/test/sun/security/ssl/com/sun/net/ssl/internal/ssl/X509TrustManagerImpl/Symantec/thawteprimaryrootca-chain.pem[Added - diff]
jdk/test/sun/security/ssl/com/sun/net/ssl/internal/ssl/X509TrustManagerImpl/Symantec/thawteprimaryrootcag2-chain.pem[Added - diff]
jdk/test/sun/security/ssl/com/sun/net/ssl/internal/ssl/X509TrustManagerImpl/Symantec/thawteprimaryrootcag3-chain.pem[Added - diff]
jdk/test/sun/security/ssl/com/sun/net/ssl/internal/ssl/X509TrustManagerImpl/Symantec/verisignclass3g3ca-chain.pem[Added - diff]
jdk/test/sun/security/ssl/com/sun/net/ssl/internal/ssl/X509TrustManagerImpl/Symantec/verisignclass3g4ca-chain.pem[Added - diff]
jdk/test/sun/security/ssl/com/sun/net/ssl/internal/ssl/X509TrustManagerImpl/Symantec/verisignclass3g5ca-chain.pem[Added - diff]
jdk/test/sun/security/ssl/com/sun/net/ssl/internal/ssl/X509TrustManagerImpl/Symantec/verisignclass3g5ca-codesigning-chain.pem[Added - diff]
jdk/test/sun/security/ssl/com/sun/net/ssl/internal/ssl/X509TrustManagerImpl/Symantec/verisignuniversalrootca-chain.pem[Added - diff]

25 files changed

tree: b1c3e087d816ed61b739d5c82810f3482f73e6c0