JDK-8204934 - OpenJDK - Windows - Digital Signatures

[Steve Hruda]

Hi,
two weeks ago I opened a issue at Oracle's bug database which was confirmed
and available at bugs.java.com & bugs.openjdk.java.net.

https://bugs.java.com/bugdatabase/view_bug.do?bug_id=JDK-8204934
https://bugs.openjdk.java.net/browse/JDK-8204934

Now it seems that the issue was deleted without any feedback.

My questions was related to the digital signatures of the official OpenJDK
zip.

All OracleJDK's *.exe and *.dll files have a valid Digital Signature but
the same files of the OpenJDK doesn't have one.

*e.g.: *java.dll & java.exe

Is that on purpose or is that an open issue which will be solved at the
final OpenJDK 11 build?

I asking because some end-users will be protected by Microsoft's AppLocker
which provides the possibility to define a whitelist of digital signatures.
Which means that *.dll's & *.exe files without an signature would be
blocked.

Best Regards,
Steve