Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8189131

Open-source the Oracle JDK Root Certificates

    XMLWordPrintable

Details

    Backports

      Description

        Move the root certificates that are delivered in the cacerts keystore in Oracle's JDK to OpenJDK so that there are no differences. The cacerts keystore in OpenJDK is currently empty and this prevents things like TLS from working out-of-the-box. This is part of the overall effort to make the OpenJDK and Oracle JDK builds the same.

        Each CA must must sign the Oracle Contributor Agreement (OCA) or an equivalent agreement that permits Oracle broad open sourcing rights of the roots before the certificates can be included. Those that do not sign an agreement will not be included. Those that take longer to process will be included in the next release (JDK 11). See the JEP (JDK-8191486) for more details.

        Attachments

          Issue Links

            backported by

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8223838 Open-source the Oracle JDK Root Certificates

            • P2 - Crashes, loss of data, severe memory leak.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8189356 Open-source the Oracle JDK Root Certificates

            • P2 - Crashes, loss of data, severe memory leak.
            • Closed

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8223236 Open-source the Oracle JDK Root Certificates

            • P2 - Crashes, loss of data, severe memory leak.
            • Closed
            blocks

            JEP - Java Enhancement Proposal JDK-8191486 JEP 319: Root Certificates

            • P3 - Major loss of function.
            • Closed
            duplicates

            Bug - A problem which impairs or prevents the functions of the product. JDK-8191300 InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty

            • P3 - Major loss of function.
            • Closed
            relates to

            Bug - A problem which impairs or prevents the functions of the product. JDK-8194170 Few tests fail after JDK-8189131 fix

            • P3 - Major loss of function.
            • Closed

            Enhancement - null JDK-8193255 Root Certificates should be stored in text format and assembled at build time

            • P4 - Minor loss of function, or other problem where easy workaround is present.
            • Resolved

            Enhancement - null JDK-8193447 Open-source the Oracle JDK Root Certificates (Phase 2)

            • P3 - Major loss of function.
            • Closed

            Bug - A problem which impairs or prevents the functions of the product. JDK-8194693 jdk considers one of its own root certificates insufficiently secure

            • P3 - Major loss of function.
            • Closed

            Bug - A problem which impairs or prevents the functions of the product. JDK-8194702 pkcs12 can be loaded with null password but certificates are missing

            • P3 - Major loss of function.
            • Closed

            Activity

              People

                rhalade Rajan Halade
                mullan Sean Mullan
                Votes:
                0 Vote for this issue
                Watchers:
                11 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved: