Bug 1593737

Summary:	OpenJDK not read jssecacerts file [rhel-7.5.z]
Product:	Red Hat Enterprise Linux 7	Reporter:	Oneata Mircea Teodor <toneata>
Component:	java-1.8.0-openjdk	Assignee:	Andrew John Hughes <ahughes>
Status:	CLOSED ERRATA	QA Contact:	OpenJDK QA <java-qa>
Severity:	high	Docs Contact:
Priority:	high
Version:	7.4	CC:	ahughes, alanm, dbhole, dkochuka, jdoyle, jherrman, jvanek, sgehwolf, vchoudha, zzambers
Target Milestone:	rc	Keywords:	ZStream
Target Release:	---
Hardware:	x86_64
OS:	Linux
Whiteboard:
Fixed In Version:	java-1.8.0-openjdk-1.8.0.172-4.b11.el7_5	Doc Type:	Bug Fix
Doc Text:	OpenJDK was recently updated to support reading the system certificate authority /etc/pki/java/cacerts database directly. As a consequence, this removed the ability to read certificates from the user-provided /usr/lib/jvm/<NVRA-of-JDK>/jre/lib/security/jssecacert file. With this update, that ability is restored by reading from that file first, if available.	Story Points:	---
Clone Of:	1567204	Environment:
Last Closed:	2018-07-23 15:04:05 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1567204
Bug Blocks:

Description Oneata Mircea Teodor 2018-06-21 13:32:13 UTC

This bug has been copied from bug #1567204 and has been proposed to be backported to 7.5 z-stream (EUS).

Comment 4 zzambers 2018-07-02 13:12:30 UTC

manually tested in rhel-7.5 VM using reproducer from original bug:

version: java-1.8.0-openjdk-1.8.0.181-1.b04.el7_5.x86_64
result: PASSED

Comment 8 errata-xmlrpc 2018-07-23 15:04:05 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2018:2242