Liberica JDK 24.0.1+11: Release Notes$$$Published: April 15; 2025$$$$$$1. Version information$$$This document provides information about Liberica JDK 24.0.1 release.$$$$$$The full version string for this update release is 24.0.1+11. The version number is 24.$$$$$$Liberica JDK 24 is distributed as .apk; .rpm; .zip; .deb; and .tar.gz packages. Please select the most appropriate for your purposes.$$$$$$2. What’s New$$$This release contains the following updates and new features.$$$$$$Notable Changes$$$This is the list of the notable issues fixed in this release.$$$$$$Issue IDt$$$JDK-8346587$$$$$$Summary: Distrust TLS server certificates anchored by Camerfirma Root CAs$$$$$$Description: The JDK will stop trusting TLS server certificates issued after April 15; 2025 and anchored by Camerfirma root certificates; in line with similar plans announced by Google; Mozilla; Apple; and Microsoft. TLS server certificates issued on or before April 15; 2025 will continue to be trusted until they expire. Certificates issued after that date; and anchored by any of the Certificate Authorities in the table below; will be rejected. The restrictions are enforced in the JDK implementation (the SunJSSE Provider) of the Java Secure Socket Extension (JSSE) API. A TLS session will not be negotiated if the server’s certificate chain is anchored by any of the Certificate Authorities in the table below and the certificate has been issued after April 15; 2025.$$$$$$JDK-8347506$$$$$$Summary: Compatible OCSP readtimeout Property with OCSP Timeout$$$$$$Description: In JDK 21; an enhanced syntax for various timeout properties was released through JDK-8179502. This included a new system property; com.sun.security.ocsp.readtimeout; which allows users to control the timeout while reading OCSP responses after a successful TCP connection has been established. This changes the default posture of this property to be the value of the com.sun.security.ocsp.timeout system property from its original default of 15 seconds. If the com.sun.security.ocsp.timeout system property is also not set; then its default 15 second timeout is propagated to the default for com.sun.security.ocsp.readtimeout.$$$$$$JDK-8347965$$$$$$Summary: Update Timezone Data to 2025a$$$$$$Description: Update Timezone Data to 2025a in which Paraguay adopts permanent -03 starting spring 2024; Improve pre-1991 data for the Philippines; Etc/Unknown is now reserved.