ssllabs / ssllabs-scan

A command-line reference-implementation client for SSL Labs APIs, designed for automated and/or bulk testing.

Home Page:https://www.ssllabs.com/projects/ssllabs-apis/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

HARICA's 2015 Roots not trusted by Java

AEtherC0r3 opened this issue · comments

The "SSL Server Test" reports certificates that chain to HARICA's 2015 Roots (https://crt.sh/?caID=14566, https://crt.sh/?caID=14546) as "not trusted by Java trust store".
e.g. https://www.ssllabs.com/ssltest/analyze.html?d=harica.gr&s=155.207.1.46

These root CAs have been included in the Java trust store since at least April 2021
https://www.oracle.com/java/technologies/javase/16all-relnotes.html
https://bugs.openjdk.org/browse/jdk-8256421