Skip to content

Commit 2bb18d7

Browse files
fix
1 parent 94b6cad commit 2bb18d7

6 files changed

Lines changed: 0 additions & 79 deletions

File tree

.jcheck/conf

Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,7 @@
11
[general]
22
project=jdk-updates
33
jbs=JDK
4-
<<<<<<< HEAD
5-
version=11.0.27
6-
=======
74
version=11.0.28
8-
>>>>>>> jdk-11.0.28+6
95

106
[checks]
117
error=author,committer,reviewers,merge,issues,executable,symlink,message,hg-tag,whitespace,problemlists

make/autoconf/version-numbers

Lines changed: 0 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -28,20 +28,12 @@
2828

2929
DEFAULT_VERSION_FEATURE=11
3030
DEFAULT_VERSION_INTERIM=0
31-
<<<<<<< HEAD
32-
DEFAULT_VERSION_UPDATE=27
33-
=======
3431
DEFAULT_VERSION_UPDATE=28
35-
>>>>>>> jdk-11.0.28+6
3632
DEFAULT_VERSION_PATCH=0
3733
DEFAULT_VERSION_EXTRA1=0
3834
DEFAULT_VERSION_EXTRA2=0
3935
DEFAULT_VERSION_EXTRA3=0
40-
<<<<<<< HEAD
41-
DEFAULT_VERSION_DATE=2025-04-15
42-
=======
4336
DEFAULT_VERSION_DATE=2025-07-15
44-
>>>>>>> jdk-11.0.28+6
4537
DEFAULT_VERSION_CLASSFILE_MAJOR=55 # "`$EXPR $DEFAULT_VERSION_FEATURE + 44`"
4638
DEFAULT_VERSION_CLASSFILE_MINOR=0
4739
DEFAULT_ACCEPTABLE_BOOT_VERSIONS="10 11"

make/data/tzdata/VERSION

Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -21,8 +21,4 @@
2121
# or visit www.oracle.com if you need additional information or have any
2222
# questions.
2323
#
24-
<<<<<<< HEAD
25-
tzdata2025a
26-
=======
2724
tzdata2025b
28-
>>>>>>> jdk-11.0.28+6

src/java.base/share/classes/sun/security/validator/CamerfirmaTLSPolicy.java

Lines changed: 0 additions & 27 deletions
Original file line numberDiff line numberDiff line change
@@ -43,28 +43,6 @@ final class CamerfirmaTLSPolicy {
4343

4444
private static final Debug debug = Debug.getInstance("certpath");
4545

46-
<<<<<<< HEAD
47-
// SHA-256 certificate fingerprints of distrusted roots
48-
private static final Set<String> FINGERPRINTS = Set.of(
49-
// cacerts alias: camerfirmachamberscommerceca
50-
// DN: CN=Chambers of Commerce Root,
51-
// OU=http://www.chambersign.org,
52-
// O=AC Camerfirma SA CIF A82743287, C=EU
53-
"0C258A12A5674AEF25F28BA7DCFAECEEA348E541E6F5CC4EE63B71B361606AC3",
54-
// cacerts alias: camerfirmachambersca
55-
// DN: CN=Chambers of Commerce Root - 2008,
56-
// O=AC Camerfirma S.A., SERIALNUMBER=A82743287,
57-
// L=Madrid (see current address at www.camerfirma.com/address),
58-
// C=EU
59-
"063E4AFAC491DFD332F3089B8542E94617D893D7FE944E10A7937EE29D9693C0",
60-
// cacerts alias: camerfirmachambersignca
61-
// DN: CN=Global Chambersign Root - 2008,
62-
// O=AC Camerfirma S.A., SERIALNUMBER=A82743287,
63-
// L=Madrid (see current address at www.camerfirma.com/address),
64-
// C=EU
65-
"136335439334A7698016A0D324DE72284E079D7B5220BB8FBD747816EEBEBACA"
66-
);
67-
=======
6846
// SHA-256 certificate fingerprint of distrusted root for TLS
6947
// cacerts alias: camerfirmachambersca
7048
// DN: CN=Chambers of Commerce Root - 2008,
@@ -73,7 +51,6 @@ final class CamerfirmaTLSPolicy {
7351
// C=EU
7452
private static final String FINGERPRINT =
7553
"063E4AFAC491DFD332F3089B8542E94617D893D7FE944E10A7937EE29D9693C0";
76-
>>>>>>> jdk-11.0.28+6
7754

7855
// Any TLS Server certificate that is anchored by one of the Camerfirma
7956
// roots above and is issued after this date will be distrusted.
@@ -96,11 +73,7 @@ static void checkDistrust(X509Certificate[] chain)
9673
throw new ValidatorException("Cannot generate fingerprint for "
9774
+ "trust anchor of TLS server certificate");
9875
}
99-
<<<<<<< HEAD
100-
if (FINGERPRINTS.contains(fp)) {
101-
=======
10276
if (FINGERPRINT.equalsIgnoreCase(fp)) {
103-
>>>>>>> jdk-11.0.28+6
10477
Date notBefore = chain[0].getNotBefore();
10578
LocalDate ldNotBefore = LocalDate.ofInstant(notBefore.toInstant(),
10679
ZoneOffset.UTC);
Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1 @@
1-
<<<<<<< HEAD
2-
tzdata2025a
3-
=======
41
tzdata2025b
5-
>>>>>>> jdk-11.0.28+6

test/jdk/sun/security/ssl/X509TrustManagerImpl/distrust/Camerfirma.java

Lines changed: 0 additions & 32 deletions
Original file line numberDiff line numberDiff line change
@@ -21,19 +21,6 @@
2121
* questions.
2222
*/
2323

24-
<<<<<<< HEAD
25-
import java.io.File;
26-
import java.security.Security;
27-
import java.time.*;
28-
import java.util.*;
29-
import javax.net.ssl.*;
30-
31-
/**
32-
* @test
33-
* @bug 8346587
34-
* @summary Check that TLS Server certificates chaining back to distrusted
35-
* Camerfirma roots are invalid
36-
=======
3724
import javax.net.ssl.X509TrustManager;
3825
import java.io.File;
3926
import java.security.Security;
@@ -47,7 +34,6 @@
4734
* @bug 8346587 8350498
4835
* @summary Check that TLS Server certificates chaining back to distrusted
4936
* Camerfirma root are invalid
50-
>>>>>>> jdk-11.0.28+6
5137
* @library /test/lib
5238
* @modules java.base/sun.security.validator
5339
* @run main/othervm Camerfirma after policyOn invalid
@@ -58,33 +44,19 @@
5844

5945
public class Camerfirma {
6046

61-
<<<<<<< HEAD
62-
private static final String certPath = "chains" + File.separator + "camerfirma";
63-
64-
// Each of the roots have a test certificate chain stored in a file
65-
// named "<root>-chain.pem".
66-
private static String[] rootsToTest = new String[] {
67-
"camerfirmachamberscommerceca", "camerfirmachambersca",
68-
"camerfirmachambersignca"};
69-
=======
7047
private static final String CERT_PATH = "chains" + File.separator + "camerfirma";
7148

7249
// Each of the roots have a test certificate chain stored in a file
7350
// named "<root>-chain.pem".
7451
private static final String ROOT_TO_TEST = "camerfirmachambersca";
75-
>>>>>>> jdk-11.0.28+6
7652

7753
// Date after the restrictions take effect
7854
private static final ZonedDateTime DISTRUST_DATE =
7955
LocalDate.of(2025, 04, 16).atStartOfDay(ZoneOffset.UTC);
8056

8157
public static void main(String[] args) throws Exception {
8258

83-
<<<<<<< HEAD
84-
// All of the test certificates are signed with SHA-1 so we need
85-
=======
8659
// All the test certificates are signed with SHA-1, so we need
87-
>>>>>>> jdk-11.0.28+6
8860
// to remove the constraint that disallows SHA-1 certificates.
8961
String prop = Security.getProperty("jdk.certpath.disabledAlgorithms");
9062
String newProp = prop.replace(", SHA1 jdkCA & usage TLSServer", "");
@@ -98,10 +70,6 @@ public static void main(String[] args) throws Exception {
9870
};
9971

10072
Date notBefore = distrust.getNotBefore(DISTRUST_DATE);
101-
<<<<<<< HEAD
102-
distrust.testCertificateChain(certPath, notBefore, tms, rootsToTest);
103-
=======
10473
distrust.testCertificateChain(CERT_PATH, notBefore, tms, ROOT_TO_TEST);
105-
>>>>>>> jdk-11.0.28+6
10674
}
10775
}

0 commit comments

Comments
 (0)