archive/jdk
1
0
Fork 0
mirror of https://github.com/openjdk/jdk.git synced 2025-08-27 06:45:07 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

8341059: Change Entrust TLS distrust date to November 12, 2024

Browse source 
Reviewed-by: mullan
This commit is contained in:
Rajan Halade 2024-09-27 17:16:13 +00:00
parent 65200a9589
commit f554c3ffce
4 changed files with 8 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

2
src/java.base/share/classes/sun/security/validator/CADistrustPolicy.java
View file

@ -57,7 +57,7 @@ enum CADistrustPolicy {
/**
* Distrust TLS Server certificates anchored by an Entrust root CA and
* issued after October 31, 2024. If enabled, this policy is currently
* issued after November 11, 2024. If enabled, this policy is currently
* enforced by the PKIX and SunX509 TrustManager implementations
* of the SunJSSE provider implementation.
*/

8
src/java.base/share/classes/sun/security/validator/EntrustTLSPolicy.java
View file

@ -88,8 +88,8 @@ final class EntrustTLSPolicy {
// Any TLS Server certificate that is anchored by one of the Entrust
// roots above and is issued after this date will be distrusted.
private static final LocalDate OCTOBER_31_2024 =
LocalDate.of(2024, Month.OCTOBER, 31);
private static final LocalDate NOVEMBER_11_2024 =
LocalDate.of(2024, Month.NOVEMBER, 11);
/**
* This method assumes the eeCert is a TLS Server Cert and chains back to
@ -111,8 +111,8 @@ final class EntrustTLSPolicy {
Date notBefore = chain[0].getNotBefore();
LocalDate ldNotBefore = LocalDate.ofInstant(notBefore.toInstant(),
ZoneOffset.UTC);
// reject if certificate is issued after October 31, 2024
checkNotBefore(ldNotBefore, OCTOBER_31_2024, anchor);
// reject if certificate is issued after November 11, 2024
checkNotBefore(ldNotBefore, NOVEMBER_11_2024, anchor);
}
}