8341059: Change Entrust TLS distrust date to November 12, 2024

[gnu-andrew]

Hi all,

This pull request contains a backport of commit f554c3ff from the openjdk/jdk repository.

The commit being backported was authored by Rajan Halade on 27 Sep 2024 and was reviewed by Sean Mullan.

The commit does not apply cleanly to 21u-dev due to the absence of JDK-8339560. Equivalent changes to those in distrust/Entrust.java are applied to Entrust/Distrust.java instead.

The tests in test/jdk/sun/security/ssl/X509TrustManagerImpl/Entrust pass with the updated build and fail against 21.0.4.

Thanks!

---

Progress

• Change must not contain extraneous whitespace
• Commit message must refer to an issue
• Change must be properly reviewed

Error

 ⚠️ This PR only contains changes already present in the target

Issues

• JDK-8341059: Change Entrust TLS distrust date to November 12, 2024 (Enhancement - P2)
• JDK-8341087: Change Entrust TLS distrust date to November 12, 2024 (CSR)

Reviewers

• Martin Balao (@martinuy - Reviewer)

Reviewing

Using git

Checkout this PR locally:
$ git fetch https://git.openjdk.org/jdk21u-dev.git pull/1015/head:pull/1015
$ git checkout pull/1015

Update a local copy of the PR:
$ git checkout pull/1015
$ git pull https://git.openjdk.org/jdk21u-dev.git pull/1015/head

Using Skara CLI tools

Checkout this PR locally:
$ git pr checkout 1015

View PR using the GUI difftool:
$ git pr show -t 1015

Using diff file

Download this PR as a diff file:
https://git.openjdk.org/jdk21u-dev/pull/1015.diff

Webrev

Link to Webrev Comment

[bridgekeeper]

👋 Welcome back andrew! A progress list of the required criteria for merging this PR into master will be added to the body of your pull request. There are additional pull request commands available for use with this pull request.

[openjdk]

@gnu-andrew This change is no longer ready for integration - check the PR body for details.

[openjdk]

This backport pull request has now been updated with issue from the original commit.

[mlbridge]

Webrevs

• 00: Full (f1cd588a)

[martinuy]

Looks good to me.

[openjdk]

⚠️ @gnu-andrew This change is now ready for you to apply for maintainer approval. This can be done directly in each associated issue or by using the /approval command.

[gnu-andrew]

/approval request Distrust date needs to be moved later across all updates that picked up JDK-8337664. Patch did not backport cleanly and has been reviewed by Martin Balao.

[gnu-andrew]

Looks good to me.

Thanks Martin for the quick review.

[openjdk]

@gnu-andrew
8341059: The approval request has been created successfully.

[jerboaa]

@gnu-andrew Please integrate when you get a chance. Thanks!

[jerboaa]

Change of plans. I think we are going to integrate this with openjdk/jdk21u#456 instead so as to bring it to 21.0.5. Please close this one. Thanks!