Update release notes for shenandoah-8u372-b07.
Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
Update generate_tarball.sh to add support for passing a boot JDK to the configure run
Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
Drop JDK-8275535/RH2053256 patch which is now upstream
Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
Drop hack for difference in local and portable build version
Replace local copies of JDK portable binaries with build dependencies
Include the java-1.8.0-openjdk-portable.spec file with instructions on how to rebuild.
Remove duplicate use of README.md inside the *-src package (it is no longer about sources)
Use portable build on x86_32 now one is available
** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
Resolves: rhbz#2185182
Resolves: rhbz#2189329
Resolves: rhbz#2188023
Update release notes for shenandoah-8u352-b08.
Fix broken links and missing release notes in older releases.
Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
Resolves: rhbz#2160111
Update release notes for shenandoah-8u362-b07.
Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
Update TestTranslations.java to test the new America/Ciudad_Juarez zone
Resolves: rhbz#2150196
Update release notes for shenandoah-8u362-b01.
Switch to EA mode for 8u362 pre-release builds.
Drop JDK-8195607/PR3776/RH1760437 now this is upstream
Related: rhbz#2150196
Update release notes for shenandoah-8u352-b08.
Switch to GA mode for final release.
Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
Add test to ensure timezones can be translated
Resolves: rhbz#2133695
Update release notes for shenandoah-8u352-b07.
Switch to EA mode for 8u352 pre-release builds.
Rebase FIPS patch against 8u352-b07
Resolves: rhbz#2130623
Use of the property can now be disabled using -Dsecurity.systemCACerts=
Move cacerts replacement to install section and retain original of this and tzdb.dat
Resolves: rhbz#2077006
There does not appear to be any value in having copy-jdk-config in
Flatpak builds (where a given Flatpak bundles one specific JDK, so no
need for a "Utility script to transfer JDKs configuration files
between updates or for archiving.")
And at least when trying to do a LibreOffice Flatpak build from Fedora
34 RPM specs (which includes java-11-openjdk among its components),
the #!/usr/bin/lua shebang in copy_jdk_configs.lua would have caused a
requirement on /usr/bin/lua, but which a lua RPM bundled in the
Flatpak would not provide (as it would provide /app/bin/lua instead).
And the easiest way to work around that issue is to just disable the
unnecessary copy-jdk-configs.
...after "Temporarily move x86 to use Zero in order to get a working build":
When building the
> if ${run_bootstrap} ; then
branch for suffix='' and loop='-main', the second
> buildjdk ${builddir} $(pwd)/${bootinstalldir}/images/%{jdkimage} "${maketargets}" ${debugbuild} ${link_opt}
uses the JDK (`$(pwd)/${bootinstalldir}/images/%{jdkimage}`) from the installjdk
on the previous line. But installjdk does
> rm ${imagepath}/lib/tzdb.dat
> ln -s %{_datadir}/javazi-1.8/tzdb.dat ${imagepath}/lib/tzdb.dat
which made that JDK's tzdb.dat link to /app/share/javazi-1.8/tzdb.dat
in a flatpak build (rather than the usual
/usr/share/javazi-1.8/tzdb.dat in a non-flatpak build) which is not
present at build-time (but will be present at runtime in at least the
LibreOffice flatpak, which bundles tzdata-java built for the flatpak
/app prefix). So using that JDK's compiler during the build kept
failing due to java.io.FileNotFoundException for its lib/tzdb.dat.
(This was not an issue prior to the recent change, as installjdk's
modification of lib/tzdb.dat used to be done only for the "Final setup
on the main image" at the very end of the build, not during the build
for JDKs that are themselves used later during the build.)
The easiest workaround for this issue appears to be to just not
bootstrap_build in the flatpak case, avoiding the situation that a JDK
whose lib/tzdb.dat has been modified through installjdk is used during
the build.
Resolves: rhbz#2102727
Update release notes for shenandoah-8u342-b06.
Switch to EA mode for 8u342 pre-release builds.
Print release file during build, which should now include a correct SOURCE value from .src-rev
Update tarball script with IcedTea GitHub URL and .src-rev generation
Use "git apply" with patches in the tarball script to allow binary diffs
Remove redundant "REPOS" variable from tarball script
Include script to generate bug list for release notes
Update tzdata requirement to 2022a to match JDK-8283350
Resolves: rhbz#2083322
* RH2036462: sun.security.pkcs11.wrapper.PKCS11.getInstance breakage
* RH2090378: Revert to disabling system security properties and FIPS mode support together
Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
Perform configuration changes (e.g. nss.cfg, nss.fips.cfg, tzdb.dat) in installjdk
Enable system security properties in the RPM (now disabled by default in the FIPS repo)
Improve security properties test to check both enabled and disabled behaviour
Run security properties test with property debugging on
Explicitly require crypto-policies during build and runtime for system security properties
Resolves: rhbz#2099801
Resolves: rhbz#2100678
* Family extracted to globals
* Fixing Bug 2001567 - update of JDK/JRE is removing its manually selected alterantives and select (as auto) system JDK/JRE
- The move of alternatives creation to posttrans to fix:
- Bug 1200302 - dnf reinstall breaks alternatives
- Had caused the alternatives to be removed, and then created again,
- instead of being added, and then removing the old, and thus persisting
- the selection in family
- Thus this fix, is storing the family of manually selected master, and if
- stored, then it is restoring the family of the master
* Resolves: rhbz#2008202
Introduce architecture restriction logic for the gdb test. (RH2041970)
Replace GCC 11 patch to remove use of the register keyword with correct fix to ADLC build (JDK-8281098)
Adjust JDK8199936/PR3533 -mstackrealign patch to instead pass -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4
Explicitly list JIT architectures rather than relying on those with slowdebug builds
Disable the serviceability agent on Zero architectures even when the architecture itself is supported
Add backport of JDK-8257794 to fix bogus assert on slowdebug x86-32 Zero builds
Related: rhbz#2022823
Update release notes for 8u322-b05.
Switch to EA mode.
Require tzdata 2021c as of JDK-8274407.
Require tzdata 2021e as of JDK-8275766.
Update tarball generation script to use git following shenandoah-jdk8u's move to github
Resolves: rhbz#2022823
Fedora 35 and better no longer ship the legacy secmod.db file as part
of the nss package. Explicitly tell OpenJDK to use sqlite-based sec
mode.
Resolves: rhbz#2023533
Port FIPS system detection support to OpenJDK 8u
Minor code cleanups on FIPS detection patch and check for SECMOD_GetSystemFIPSEnabled in configure.
Remove unneeded Requires on NSS as it will now be dynamically linked and detected by RPM.
Resolves: rhbz#1971696
Update release notes for 8u302-b08.
Switch to GA mode for final release.
Remove non-Free test and demo files from source tarball.
Resolves: rhbz#1967813
Update release notes for 8u302-b07.
Switch to EA mode.
Use the "reverse" build loop (debug first) as the main and only build loop to get more diagnostics.
Resolves: rhbz#1967813
Backport FIPS mode patch to java-1.8.0-openjdk, simplifying provider removal.
nss.fips.cfg needs to be moved to %%{etcjavadir} and symlinked into the JDK, like nss.cfg
SunPKCS11 runtime provider name is a concatenation of "SunPKCS11-" and the name in the config file.
Change nss.fips.cfg config name to "NSS-FIPS" to avoid confusion with nss.cfg.
Disable FIPS mode support unless com.redhat.fips is set to "true".
Add JDK-8195607/PR3776 to support NSS SQLite databases.
Use appropriate keystore types when in FIPS mode (RH1760838)
Enable alignment with FIPS crypto policy by default (-Dcom.redhat.fips=false to disable).
Disable TLSv1.3 when using the NSS-FIPS provider (RH1860986)
Move setup of JavaSecuritySystemConfiguratorAccess to Security class so it always occurs (RH1906862)
Add explicit runtime dependency on NSS for the PKCS11 provider in FIPS mode
Resolves: rhbz#1971696
