AWS corretto high security documentation change
Summary
Updated public key URL for verifying SIGNATURE file from 'B04F24E3.pub' to 'A122542AB04F24E3.pub'
Security assessment
The change updates the public key used for verifying download signatures, which is a security-critical change. This could indicate key rotation due to key compromise, expiration, or security policy update. Changing verification keys directly impacts software integrity verification.
Diff
diff --git a/corretto/latest/corretto-17-ug/downloads-list.md b/corretto/latest/corretto-17-ug/downloads-list.md index 77efaf560..6bce4107c 100644 --- a//corretto/latest/corretto-17-ug/downloads-list.md +++ b//corretto/latest/corretto-17-ug/downloads-list.md @@ -73 +73 @@ Notice that the above links follow this format: -The public key to verify the SIGNATURE file can be downloaded [here](https://corretto.aws/downloads/resources/17.0.18.9.1/B04F24E3.pub) +The public key to verify the SIGNATURE file can be downloaded [here](https://corretto.aws/downloads/resources/17.0.18.9.1/A122542AB04F24E3.pub)