[11u] RFR: 8243559: Remove root certificates with 1024-bit keys

2021-03-30 Thread Doerr, Martin
Hi, JDK-8243559 is backported to 11.0.12-oracle. I'd like to backport it for parity. I had to integrate changes to the test VerifyCACerts.java manually: - Add bug ID. - Adapt COUNT. - Compute new CHECKSUM. - Remove verisigntsaca and thawtepremiumserverca in the last hunk. Bug: https://bugs.openj

Re: [11u] RFR: 8243559: Remove root certificates with 1024-bit keys

2021-03-16 Thread Severin Gehwolf
Hi Martin, On Mon, 2021-03-15 at 17:10 +, Doerr, Martin wrote: > 11u backport: > http://cr.openjdk.java.net/~mdoerr/8261209_xml_11u/webrev.00/ This doesn't look like the right webrev to me. Could you please double- check? Thanks, Severin

Re: [11u] RFR: 8243559: Remove root certificates with 1024-bit keys

2021-03-16 Thread Severin Gehwolf
On Tue, 2021-03-16 at 10:39 +, Doerr, Martin wrote: > http://cr.openjdk.java.net/~mdoerr/8243559_root_ca_11u/webrev.00/ This looks good to me. Thanks, Severin

RE: [11u] RFR: 8243559: Remove root certificates with 1024-bit keys

2021-03-30 Thread Doerr, Martin
> Subject: Re: [11u] RFR: 8243559: Remove root certificates with 1024-bit keys > > On Tue, 2021-03-16 at 10:39 +, Doerr, Martin wrote: > > http://cr.openjdk.java.net/~mdoerr/8243559_root_ca_11u/webrev.00/ > > This looks good to me. > > Thanks, > Severin

RE: [11u] RFR: 8243559: Remove root certificates with 1024-bit keys

2021-03-30 Thread Doerr, Martin
tin ; jdk-updates- > d...@openjdk.java.net; security-dev > Cc: Lindenmaier, Goetz ; Langer, Christoph > > Subject: Re: [11u] RFR: 8243559: Remove root certificates with 1024-bit keys > > Hi Martin, > > On Mon, 2021-03-15 at 17:10 +, Doerr, Martin wrote: > &g