AWS cloudhsm medium security documentation change

Service: cloudhsm · 2026-05-01 · Security-related medium

File: cloudhsm/latest/userguide/jarsigner_sign_jar_using_hsm_jarsigner_5.md

Summary

Updated JDK version support: Removed OpenJDK 8 instructions, added OpenJDK 25 support, and fixed classpath syntax

Security assessment

Removal of outdated OpenJDK 8 references mitigates risks from unsupported JDK versions. Added support for current JDK versions (17/21/25) ensures use of maintained releases with security patches. Syntax fix prevents misconfiguration risks.

Diff

diff --git a/cloudhsm/latest/userguide/jarsigner_sign_jar_using_hsm_jarsigner_5.md b/cloudhsm/latest/userguide/jarsigner_sign_jar_using_hsm_jarsigner_5.md
index b0862a6c5..0ce59475d 100644
--- a//cloudhsm/latest/userguide/jarsigner_sign_jar_using_hsm_jarsigner_5.md
+++ b//cloudhsm/latest/userguide/jarsigner_sign_jar_using_hsm_jarsigner_5.md
@@ -14,13 +14 @@ Linux;
-For OpenJDK 8
-    
-    
-    jarsigner -keystore example_keystore.store \
-    	-signedjar signthisclass_signed.jar \
-    	-sigalg sha512withrsa \
-    	-storetype CloudHSM \
-    	-J-classpath '-J/opt/cloudhsm/java/*:/usr/lib/jvm/java-1.8.0/lib/tools.jar' \
-    	-J-Djava.library.path=/opt/cloudhsm/lib \
-    	signthisclass.jar <key pair label>
-    						
-
-For OpenJDK 11, OpenJDK 17, and OpenJDK 21
+For OpenJDK 17, OpenJDK 21, and OpenJDK 25
@@ -41,13 +29 @@ Windows
-For OpenJDK8
-    
-    
-    jarsigner -keystore example_keystore.store `
-    	-signedjar signthisclass_signed.jar `
-    	-sigalg sha512withrsa `
-    	-storetype CloudHSM `
-    	-J-classpath '-JC:\Program Files\Amazon\CloudHSM\java\*;C:\Program Files\Java\jdk1.8.0_331\lib\tools.jar' `
-    	 "-J-Djava.library.path='C:\Program Files\Amazon\CloudHSM\lib\'" `
-    	signthisclass.jar <key pair label>
-    						
-
-For OpenJDK 11, OpenJDK 17, and OpenJDK 21
+For OpenJDK 17, OpenJDK 21, and OpenJDK 25
@@ -70,13 +46 @@ Linux
-For OpenJDK8
-    
-    
-    jarsigner -verify \
-    	-keystore example_keystore.store \
-    	-sigalg sha512withrsa \
-    	-storetype CloudHSM \
-    	-J-classpath '-J/opt/cloudhsm/java/*:/usr/lib/jvm/java-1.8.0/lib/tools.jar' \
-    	-J-Djava.library.path=/opt/cloudhsm/lib \
-    	signthisclass_signed.jar <key pair label>
-    						
-
-For OpenJDK 11, OpenJDK 17, and OpenJDK 21
+For OpenJDK 17, OpenJDK 21, and OpenJDK 25
@@ -97,13 +61 @@ Windows
-For OpenJDK 8
-    
-    
-    jarsigner -verify `
-    	-keystore example_keystore.store `
-    	-sigalg sha512withrsa `
-    	-storetype CloudHSM `
-    	-J-classpath '-JC:\Program Files\Amazon\CloudHSM\java\*;C:\Program Files\Java\jdk1.8.0_331\lib\tools.jar' `
-    	"-J-Djava.library.path='C:\Program Files\Amazon\CloudHSM\lib\'" `
-    	signthisclass_signed.jar <key pair label>
-    						
-
-For OpenJDK 11, OpenJDK 17, and OpenJDK 21
+For OpenJDK 17, OpenJDK 21, and OpenJDK 25
@@ -116 +68 @@ For OpenJDK 11, OpenJDK 17, and OpenJDK 21
-    	-J-classpath '-JC:\Program Files\Amazon\CloudHSM\java\*`
+    	-J-classpath '-JC:\Program Files\Amazon\CloudHSM\java\*'`