From aba919ab5007f9f814a429bc7c7b4f3993949345 Mon Sep 17 00:00:00 2001
From: Rajan Halade <rhalade@openjdk.org>
Date: Tue, 30 Apr 2019 12:53:32 -0700
Subject: [PATCH] 8222137: Remove T-Systems root CA certificate

Reviewed-by: mullan
---
 src/java.base/share/lib/security/cacerts      | Bin 103689 -> 102705 bytes
 .../security/lib/cacerts/VerifyCACerts.java   |   8 ++------
 2 files changed, 2 insertions(+), 6 deletions(-)

diff --git a/src/java.base/share/lib/security/cacerts b/src/java.base/share/lib/security/cacerts
index c77f5f0819f1954a679a60be5736b6e2e25f835a..c27ffd1807871f6474c578c88dadf8a13602e1b4 100644
GIT binary patch
delta 156
zcmV;N0Av4&ss^#51`Ph~{_Ow&00IC209>&QzaoR9Cby#|0S6Vgt3d%v1h=X?0RaZL
z_C*0@4Yy%g0T%?fTT=lC2Df=#0Wt}<UT*<U1h;By0rUg6t7ZYe1h=ho0UHXF^hFi7
zRDuCP0=LM00e1waz=#0^x0QqeD+H5OAQQJIkpa#Fx4Vo1R0I?&9vJcX={H+yu$SAK
K5d1(}%K9?7#5r*Q

delta 1078
zcmdnEh^=!K8_&PD|K2h%Ffaje>_(pbO7$`+sih^w$r-67sX3|H`ME{;`6bDTMhekc
zDcP|M42&uL2bqHzSR?dI4J;WLm=_x~G0!(>VrpN&%*4pV#HeP#%f_kI=F#?@mywZ`
zmBFCUklTQhjX9KsO_<5W)lkMj3dG?O7IuN!qYwhINWszFP~M<k79`CrEEb{*5)V#I
zRtPC7EiO@TPR%PxEizO#Py{Jp7M8-$9|Ux%g0rK7k%62zucf7dxq+pjk)ff1L6kVJ
zA((4qY-$PQ;&W3t#Pg_*qJo<yPxMx-U(LPP^g*|#$VQRY^)>=eEb~ocz1H1*mDoGg
z^GklpVyT3*B`Y12T5euh`m|y)Uk2maoxU+v=PvJ9;pA}t{Ni0rky(?Z*T~Ge#i6aL
z{xehA{o{kzI#sj33Nu}(GpRW=&xRp#_19ZGUyW?E*96?UcKBZNlv68sW*YHvc!Wh~
z{k~QIFd~A{Grq{tMwE@QFLv#!9h0}5o%eeAi!9wBliODBV@d;W-TrL&^IhQ#qaz`r
zE<8VHhrV5VUxH)7;<hf&cfqXvl0H}OMO4ndlqKV|`smf==QH@HJ$aZoqb%{n#F}e%
z438!Tv_G87^=$3*OR~qTYESRE#cXo5FPiad7W;OwZFx*y_0tOz8AVhL4_8X>`Wk#)
z{6S}xu6PdDX6?Dg2K>Nyl@(^;FkoY3{LjS5I{Ex1naTMxIO?aQM6R_=d9L|d_+QlF
zZsG6~EGi#L$`2$wPXGO~b6NBLX-zeGR}S00pVyGLTXV~ds*TnmuPw#h>!kX)|HvCg
z8nSFUC;nOIc#>J@Bc&Uip<8BntV;QHO~&koOGQ+avQ_x>uT=*A>*i<qcx(49V18`(
zVC9ud)t5G}cvNJwcHaMn`p74<UAKI*-f-4Za)!~<SBi-fo){|jnQZ*7Z|c=5aO-)O
zx#GUa<OiQxI}C%bgov~jRDRK8D_1Yom*3I#^WV{3H_V<izj>azeSdP)XSel@Q_Qb8
z_FPlGCU^d8hO|raqNrWVO(PdREnuC^ryM?W3Rmtf%VdqVNuMQJZv4J@o;8dqCA|5V
z()MFYj69;-Wo;N4*|uLYXY^*-F6YFU%Da75Fe5wL_7;CeF_!HMA{mW2w~J*n?q}Jq
zl+O5td9uhPf$fiz80}fMU(IKf=GyL7!&uI;{X->V7}NH>EsWYMlNHxUY`@yT_=0)+
qxgJJ;mdODM65D@wFrH%;DKN^((K=alZ`o&&MT_rE4-A{}kqZFcpQiZ$

diff --git a/test/jdk/sun/security/lib/cacerts/VerifyCACerts.java b/test/jdk/sun/security/lib/cacerts/VerifyCACerts.java
index f31d878d68..15576bf72f 100644
--- a/test/jdk/sun/security/lib/cacerts/VerifyCACerts.java
+++ b/test/jdk/sun/security/lib/cacerts/VerifyCACerts.java
@@ -25,7 +25,7 @@
 /**
  * @test
  * @bug 8189131 8198240 8191844 8189949 8191031 8196141 8204923 8195774 8199779
- *      8209452 8209506 8210432 8195793 8216577 8222089 8222133
+ *      8209452 8209506 8210432 8195793 8216577 8222089 8222133 8222137
  * @summary Check root CA entries in cacerts file
  */
 import java.io.File;
@@ -42,7 +42,7 @@ public class VerifyCACerts {
             + File.separator + "security" + File.separator + "cacerts";
 
     // The numbers of certs now.
-    private static final int COUNT = 93;
+    private static final int COUNT = 92;
 
     // map of cert alias to SHA-256 fingerprint
     private static final Map<String, String> FINGERPRINT_MAP
@@ -212,8 +212,6 @@ public class VerifyCACerts {
                     "03:76:AB:1D:54:C5:F9:80:3C:E4:B2:E2:01:A0:EE:7E:EF:7B:57:B6:36:E8:A9:3C:9B:8D:48:60:C9:6F:5F:A7");
             put("affirmtrustpremiumeccca [jdk]",
                     "BD:71:FD:F6:DA:97:E4:CF:62:D1:64:7A:DD:25:81:B0:7D:79:AD:F8:39:7E:B4:EC:BA:9C:5E:84:88:82:14:23");
-            put("deutschetelekomrootca2 [jdk]",
-                    "B6:19:1A:50:D0:C3:97:7F:7D:A9:9B:CD:AA:C8:6A:22:7D:AE:B9:67:9E:C7:0B:A3:B0:C9:D9:22:71:C1:70:D3");
             put("ttelesecglobalrootclass3ca [jdk]",
                     "FD:73:DA:D3:1C:64:4F:F1:B4:3B:EF:0C:CD:DA:96:71:0B:9C:D9:87:5E:CA:7E:31:70:7A:F3:E9:6D:52:2B:BD");
             put("ttelesecglobalrootclass2ca [jdk]",
@@ -247,8 +245,6 @@ public class VerifyCACerts {
             add("certplusclass3pprimaryca [jdk]");
             // Valid until: Tue Jul 09 14:40:36 EDT 2019
             add("utnuserfirstobjectca [jdk]");
-            // Valid until: Tue Jul 09 19:59:00 EDT 2019
-            add("deutschetelekomrootca2 [jdk]");
             // Valid until: Tue Jul 09 13:36:58 EDT 2019
             add("utnuserfirstclientauthemailca [jdk]");
             // Valid until: Tue Jul 09 14:19:22 EDT 2019