EC LOTL trust anchors are changing

EC changed the LOTL (List of Possible Signers Certificates) trust anchors. Please note that those who have adopted the DigiDoc4j library must trust the corresponding trust anchors when using earlier versions (earlier than 5.0.0).

Manual update is necessary in two cases:

  1. a version older than 5.X.X is in use
  2. lotl-truststore was previously manually modified and no longer contains the original trust anchors (https://ec.europa.eu/digital-building-blocks/DSS/webapp-demo/oj-certificates)

For instructions on how to update manually, refer to: https://github.com/open-eid/digidoc4j/wiki/Questions-&-Answers#how-to-add-trust-for-new-eu-tsl-signing-certificates.