Comment 63 for bug 2036873

Revision history for this message
Thomas Ward (teward) wrote :

I had a bit of a chat with the Security team as part of a rubber-ducking session.

It was discussed that jtreg7 - the upstream test suite for OpenJDK - should only be running CA checks in *their test environments* and not at a distro-level, which should instead be ignored on Ubuntu.

With Marc Deslauriers' opinion matching mine, it's a suggestion that the CA Certificate checks in jtreg7 be disabled at the distro level. It makes sense for upstream to run this CA test, but not on Ubuntu where we separately manage certificates at the ca-certificates, etc. level.