OpenJDK 8u322 Released

Thorsten Glaser t.glaser at tarent.de
Mon Jan 31 15:02:23 UTC 2022


Hi,

> We are pleased to announce the release of OpenJDK 8u322.
> 
> The source tarball is available from:

did you see my question regarding making the release, and subsequent
ones, available in the split format previous releases used to have?

> The tarball is accompanied by a digital signature available at:
> 
> * https://openjdk-sources.osci.io/openjdk8/openjdk8u322-ga.tar.xz.sig
> 
> This is signed by our Red Hat OpenJDK key (openjdk at redhat.com):
> 
> PGP Key: rsa4096/0x92EF8D39DC13168F (hkp://keys.gnupg.net)
> Fingerprint = CA5F 11C6 CE22 644D 42C6  AC44 92EF 8D39 DC13 168F

Would be nice to have a trust path to that (that doesn’t involve
expired/revoked/1024-bit keys)… currently it looks like this:

92EF8D39DC13168F OpenJDK Team ← A5CD6035332FA671 Andrew Haley (rsa2048 2009-05-18)

A5CD6035332FA671 ← 672F2227C2C07028 Andrew Haley (dsa1024 2003-05-15 revoked)
A5CD6035332FA671 ← 33C16EF5E22673CF Andrew Gross (rsa4096 2018-01-18)
A5CD6035332FA671 ← FBB7576BA7CB0B6B David Howells (rsa4096 2011-10-05)
A5CD6035332FA671 ← F286F14F66484681 Omair Majid (rsa4096 2012-01-18 expired 2017)
A5CD6035332FA671 ← 69DA36AE31C5C4B3 Andrew Dinn (rsa2048 2010-07-20)

33C16EF5E22673CF is not signed by anyone else.
FBB7576BA7CB0B6B is not signed by anyone else.
69DA36AE31C5C4B3 is not signed by anyone else.

F286F14F66484681 (expired) was signed
 by 3B96A578248BDC07 (Andrew Hughes) (rsa4096 2011-09-28 expired 2012)

This is rather sad…

bye,
//mirabilos (Debian Developer)
-- 
Infrastrukturexperte • tarent solutions GmbH
Am Dickobskreuz 10, D-53121 Bonn • http://www.tarent.de/
Telephon +49 228 54881-393 • Fax: +49 228 54881-235
HRB AG Bonn 5168 • USt-ID (VAT): DE122264941
Geschäftsführer: Dr. Stefan Barth, Kai Ebenrett, Boris Esser, Alexander Steeg

                        ****************************************************
/⁀\ The UTF-8 Ribbon
╲ ╱ Campaign against      Mit dem tarent-Newsletter nichts mehr verpassen:
 ╳  HTML eMail! Also,     https://www.tarent.de/newsletter
╱ ╲ header encryption!
                        ****************************************************


More information about the jdk8u-dev mailing list