Downstream builds [Re: OpenJDK 8u275 Released]

[Bernd Eckenfels]

Hello,

(Just in case you don’t get a qualified answer, here is my unqualified one ;)

As a customer of Azul I got confirmation that they work on a SA build. I would suspect they don’t provide this service for the community builds, but we will see.

But on the other hand, if you are not in a hurry, it might be a good idea to wait for the next quarter - when hopefully all backport issues are sorted out. I somewhat hesitate to release 8u275 with my product, only to learn I need to fix it again...

The good thing about the Zulu builds is, they do provide the old JSSE fallback, for now.

Gruss
Bernd
--
http://bernd.eckenfels.net
________________________________
Von: jdk8u-dev <jdk8u-dev-retn at openjdk.java.net> im Auftrag von Gregor Schmid <gschmidj at qfs.de>
Gesendet: Mittwoch, November 11, 2020 8:01 AM
An: jdk8u-dev at openjdk.java.net
Betreff: Downstream builds [Re: OpenJDK 8u275 Released]


Let me start with a big thank you to everyone working on Java and
specifically for the quick turnaround on this bugfix update.

It's been a few days since the release and so far I'm not seeing any
sign of the respective binary releases from Oracle, Adopt, Azul etc.
Given that this is an out-of-order release I wonder whether
binaries are going to be made available at all.

I have to make a decision whether to further hold back the next
release of our own product, go with 8u272 or stay at 8u262. We
specifically need the Zulu FX build, but I'm asking here on the list
because I thought others might be in a similar position and the
question might be of general interest.

Thanks in advance for any input on this.

Best regards,
    Greg

Andrew Hughes <gnu.andrew at redhat.com> writes:

> We are pleased to announce the release of OpenJDK 8u275.
>
> The source tarball is available from:
>
> * https://openjdk-sources.osci.io/openjdk8/openjdk8u275-ga.tar.xz
>
> The tarball is accompanied by a digital signature available at:
>
> * https://openjdk-sources.osci.io/openjdk8/openjdk8u275-ga.tar.xz.sig
>
> This is signed by our Red Hat OpenJDK key (openjdk at redhat.com):
>
> PGP Key: rsa4096/0x92EF8D39DC13168F (hkp://keys.gnupg.net)
> Fingerprint = CA5F 11C6 CE22 644D 42C6  AC44 92EF 8D39 DC13 168F
>
> SHA256 checksums:
>
> 6a83e8bd8caebf5dc8989a22925ac5598c9edb2ba8dcfad7472a5ff99a14c0e7  openjdk8u275-ga.tar.xz
> 59470aae52b243985ead16d619703c3b6275ca97e169d1a13dbdd223e9379519  openjdk8u275-ga.tar.xz.sig
>
> The checksums can be downloaded from:
>
> * https://openjdk-sources.osci.io/openjdk8/openjdk8u275-ga.sha256
>
> New in release OpenJDK 8u275 (2020-11-05):
> ===========================================
> Live versions of these release notes can be found at:
>   * https://bitly.com/openjdk8u275
>   * https://builds.shipilev.net/backports-monitor/release-notes-openjdk8u275.txt
>
> * Regression fixes
>   - JDK-8214440: ldap over a TLS connection negotiate failed with
> "javax.net.ssl.SSLPeerUnverifiedException: hostname of the server ''
> does not match the hostname in the server's certificate"
>   - JDK-8223940: Private key not supported by chosen signature algorithm
>   - JDK-8236512: PKCS11 Connection closed after Cipher.doFinal and NoPadding
>   - JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
>
> Thanks,
> --
> Andrew :)
>
> Senior Free Java Software Engineer
> OpenJDK Package Owner
> Red Hat, Inc. (http://www.redhat.com)
>
> PGP Key: ed25519/0xCFDA0F9B35964222 (hkp://keys.gnupg.net)
> Fingerprint = 5132 579D D154 0ED2 3E04  C5A0 CFDA 0F9B 3596 4222
>

--
Gregor Schmid

E: gregor.schmid at qfs.de
T: +49 8171 38648-11
F: +49 8171 38648-16

Quality First Software GmbH | www.qfs.de
Tulpenstr. 41 | 82538 Geretsried | Germany
GF Gregor Schmid, Dr. Martina Schmid, Karlheinz Kellerer
HRB München 140833

The data protection information in accordance with the EU General Data
Protection Regulation applies to authorized representatives /
authorized representatives of "legal persons" in accordance with Art.
12 ff. DS-GVO
https://www.qfs.de/fileadmin/Webdata/pdf/en/dsgvo.pdf