On Oct 25, 2026, at 9:12 PM, Kurt Miller <[email protected]> wrote: > > New advisiory from Oracle: > > https://www.oracle.com/security-alerts/alert-cve-2026-114820.html > https://ops.java/emudhra > > So now in addition to blocking the eMudhra certs in blocked.certs > they need to be removed from cacerts as well. The new jdk-ca-certs > port can provide us with the cacerts but that's not easily back > ported to stable. > > Before we switch to jdk-ca-certs, this diff takes a copy of the > updated jdk-cacerts and puts in ../files. This interrum step is > so that we have something that can be backported to -stable/. > > Both my test program and CheckCerts from the emudra page above > pass with the below diff. > > okay? >
devel/jdk/files/cacerts attached.
cacerts.gz
Description: GNU Zip compressed data
