OpenJDK 8u322 Released
Andrew Hughes
gnu.andrew at redhat.com
Tue Feb 15 16:12:13 UTC 2022
On 16:02 Mon 31 Jan , Thorsten Glaser wrote:
snip...
> >
> > This is signed by our Red Hat OpenJDK key (openjdk at redhat.com):
> >
> > PGP Key: rsa4096/0x92EF8D39DC13168F (hkp://keys.gnupg.net)
> > Fingerprint = CA5F 11C6 CE22 644D 42C6 AC44 92EF 8D39 DC13 168F
>
> Would be nice to have a trust path to that (that doesn’t involve
> expired/revoked/1024-bit keys)… currently it looks like this:
>
> 92EF8D39DC13168F OpenJDK Team ← A5CD6035332FA671 Andrew Haley (rsa2048 2009-05-18)
>
> A5CD6035332FA671 ← 672F2227C2C07028 Andrew Haley (dsa1024 2003-05-15 revoked)
> A5CD6035332FA671 ← 33C16EF5E22673CF Andrew Gross (rsa4096 2018-01-18)
> A5CD6035332FA671 ← FBB7576BA7CB0B6B David Howells (rsa4096 2011-10-05)
> A5CD6035332FA671 ← F286F14F66484681 Omair Majid (rsa4096 2012-01-18 expired 2017)
> A5CD6035332FA671 ← 69DA36AE31C5C4B3 Andrew Dinn (rsa2048 2010-07-20)
>
> 33C16EF5E22673CF is not signed by anyone else.
> FBB7576BA7CB0B6B is not signed by anyone else.
> 69DA36AE31C5C4B3 is not signed by anyone else.
>
> F286F14F66484681 (expired) was signed
> by 3B96A578248BDC07 (Andrew Hughes) (rsa4096 2011-09-28 expired 2012)
>
> This is rather sad…
>
It is. It should at least be signed with my (current) key. It is locally,
so I guess I need to sync what I have to an appropriate key server.
Any recommendations? I have hkp://hkps.pool.sks-keyservers.net in my
config but a refresh with that seems to fail.
> bye,
> //mirabilos (Debian Developer)
> --
> Infrastrukturexperte • tarent solutions GmbH
> Am Dickobskreuz 10, D-53121 Bonn • http://www.tarent.de/
> Telephon +49 228 54881-393 • Fax: +49 228 54881-235
> HRB AG Bonn 5168 • USt-ID (VAT): DE122264941
> Geschäftsführer: Dr. Stefan Barth, Kai Ebenrett, Boris Esser, Alexander Steeg
>
> ****************************************************
> /⁀\ The UTF-8 Ribbon
> ╲ ╱ Campaign against Mit dem tarent-Newsletter nichts mehr verpassen:
> ╳ HTML eMail! Also, https://www.tarent.de/newsletter
> ╱ ╲ header encryption!
> ****************************************************
>
Thanks,
--
Andrew :)
Pronouns: he / him or they / them
Senior Free Java Software Engineer
OpenJDK Package Owner
Red Hat, Inc. (http://www.redhat.com)
PGP Key: ed25519/0xCFDA0F9B35964222 (hkp://keys.gnupg.net)
Fingerprint = 5132 579D D154 0ED2 3E04 C5A0 CFDA 0F9B 3596 4222
More information about the jdk8u-dev
mailing list