infrastructure icon indicating copy to clipboard operation
infrastructure copied to clipboard
verified publisher icon adoptium

Add checksums to JDK10/16 downloads

Open sxa opened this issue 1 year ago • 0 comments

We don't have GPG signatures for the JDK10/16 downloads which we use for the boot JDKs for 11 and 17 as they were from the old adoptopenjdk project. Since those versions are now locked and won't be updated, we should verify the sha256sums of those downloads for each platform.

Other options:

  • Create GPG signatures from the existing binaries and publish them
  • Use JDK11 to bootstrap 11 (and 17 for 17)

sxa avatar Mar 10 '24 18:03 sxa