Re: [8u] RFR: 8232019: Add LuxTrust certificate updates to the existing root program

2019-12-20 Thread Severin Gehwolf
On Fri, 2019-12-20 at 07:42 +, Andrew John Hughes wrote: > > On 19/12/2019 20:13, Severin Gehwolf wrote: > > snip... > > > > > > > Going on this & the similar Amazon fix, I'd say we should backport > > > JDK-8193255 & JDK-8225392 first. The previous updates which alter a > > > binary file h

Re: [8u] RFR: 8232019: Add LuxTrust certificate updates to the existing root program

2019-12-19 Thread Andrew John Hughes
On 19/12/2019 20:13, Severin Gehwolf wrote: snip... >>> >> >> Going on this & the similar Amazon fix, I'd say we should backport >> JDK-8193255 & JDK-8225392 first. The previous updates which alter a >> binary file have been pretty much unreviewable and, if there's a better >> solution to that,

RE: [8u] RFR: 8232019: Add LuxTrust certificate updates to the existing root program

2019-12-19 Thread Langer, Christoph
ev On Behalf Of > Severin Gehwolf > Sent: Donnerstag, 19. Dezember 2019 21:14 > To: Andrew John Hughes ; jdk8u-dev [email protected]> > Cc: security-dev > Subject: Re: [8u] RFR: 8232019: Add LuxTrust certificate updates to the > existing root program > > Hi Andrew,

Re: [8u] RFR: 8232019: Add LuxTrust certificate updates to the existing root program

2019-12-19 Thread Severin Gehwolf
Hi Andrew, On Thu, 2019-12-19 at 19:29 +, Andrew John Hughes wrote: > > On 17/12/2019 19:30, Severin Gehwolf wrote: > > Hi, > > > > Could I please get a review of this OpenJDK 8u backport of 8232019. The > > JDK 11 patch did not apply cleanly for a couple of reasons: > > > >1. 8u still

Re: [8u] RFR: 8232019: Add LuxTrust certificate updates to the existing root program

2019-12-19 Thread Andrew John Hughes
On 17/12/2019 19:30, Severin Gehwolf wrote: > Hi, > > Could I please get a review of this OpenJDK 8u backport of 8232019. The > JDK 11 patch did not apply cleanly for a couple of reasons: > >1. 8u still has the binary blob for cacerts (JDK-8193255 not > backported, yet). Instead, I've

RE: [8u] RFR: 8232019: Add LuxTrust certificate updates to the existing root program

2019-12-19 Thread Langer, Christoph
-Original Message- > From: jdk8u-dev On Behalf Of > Severin Gehwolf > Sent: Dienstag, 17. Dezember 2019 20:30 > To: jdk8u-dev > Cc: security-dev > Subject: [8u] RFR: 8232019: Add LuxTrust certificate updates to the existing > root program > > Hi, > >

[8u] RFR: 8232019: Add LuxTrust certificate updates to the existing root program

2019-12-17 Thread Severin Gehwolf
Hi, Could I please get a review of this OpenJDK 8u backport of 8232019. The JDK 11 patch did not apply cleanly for a couple of reasons: 1. 8u still has the binary blob for cacerts (JDK-8193255 not backported, yet). Instead, I've updated to the revision in jdk11u, performed a build