Commit Graph

52 Commits

Author SHA1 Message Date
Andrew Hughes
3bd296bf8b Detect NSS at runtime for FIPS detection
Turn off build-time NSS linking and go back to an explicit Requires on NSS

Resolves: rhbz#2052833
2022-02-28 05:58:15 +00:00
Andrew Hughes
eb9a49f69c Storing and restoring alternatives during update manually
* Family extracted to globals
* Fixing Bug 2001567 - update of JDK/JRE is removing its manually selected alterantives and select (as auto) system JDK/JRE
 - The move of alternatives creation to posttrans to fix:
 - Bug 1200302 - dnf reinstall breaks alternatives
 - Had caused the alternatives to be removed, and then created again,
 - instead of being added, and then removing the old, and thus persisting
 - the selection in family
 - Thus this fix, is storing the family of manually selected master, and if
 - stored, then it is restoring the family of the master

* Resolves: rhbz#2008202
2022-02-28 02:01:21 +00:00
Andrew Hughes
3cc08b65a2 Introduce tests/tests.yml, based on the one in RHEL 8
Resolves: rhbz#2058487
2022-02-27 03:14:27 +00:00
Andrew Hughes
5368472a23 Separate crypto policy initialisation from FIPS initialisation, now they are no longer interdependent
Resolves: rhbz#2052821
2022-02-23 18:00:32 +00:00
Andrew Hughes
01b1de5ea3 Fix FIPS issues in native code and with initialisation of java.security.Security
Resolves: rhbz#2023387
2022-02-22 04:27:44 +00:00
Andrew Hughes
cd6346ac8e Refactor build functions so we can build just HotSpot without any attempt at installation.
Introduce architecture restriction logic for the gdb test. (RH2041970)
Replace GCC 11 patch to remove use of the register keyword with correct fix to ADLC build (JDK-8281098)
Adjust JDK8199936/PR3533 -mstackrealign patch to instead pass -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4
Explicitly list JIT architectures rather than relying on those with slowdebug builds
Disable the serviceability agent on Zero architectures even when the architecture itself is supported
Add backport of JDK-8257794 to fix bogus assert on slowdebug x86-32 Zero builds

Related: rhbz#2022823
2022-02-21 15:29:05 +00:00
Andrew Hughes
bdb7928b49 Update to aarch64-shenandoah-jdk8u322-b06 (GA)
Update release notes for 8u322-b06.
Switch to GA mode for final release.

Resolves: rhbz#2039398
2022-02-18 01:59:09 +00:00
Andrew Hughes
63981d93e9 Update to aarch64-shenandoah-jdk8u322-b05 (EA)
Update release notes for 8u322-b05.
Switch to EA mode.
Require tzdata 2021c as of JDK-8274407.
Require tzdata 2021e as of JDK-8275766.
Update tarball generation script to use git following shenandoah-jdk8u's move to github

Resolves: rhbz#2022823
2022-02-16 01:29:37 +00:00
Andrew Hughes
9fd7b086e5 Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
Related: rhbz#2022823
2022-02-11 11:37:38 +00:00
Andrew Hughes
f459bf7287 Use 'sql:' prefix in nss.fips.cfg
Fedora 35 and better no longer ship the legacy secmod.db file as part
of the nss package. Explicitly tell OpenJDK to use sqlite-based sec
mode.

Resolves: rhbz#2023533
2021-12-06 01:03:47 +00:00
Andrew Hughes
9df29c5890 Update to aarch64-shenandoah-jdk8u312-b07 (GA)
Update release notes for 8u312-b07.
Switch to GA mode for final release.

Resolves: rhbz#2013844
2021-11-10 18:20:43 +00:00
Jiri Vanek
ac6e9295df alternatives creation moved to posttrans
- Thus fixing the old reisntall issue:
- https://bugzilla.redhat.com/show_bug.cgi?id=1200302
- https://bugzilla.redhat.com/show_bug.cgi?id=1976053
2021-11-09 14:51:24 +01:00
Andrew Hughes
a3c023b715 Add FIPS patch to allow plain key import.
Allow plain key import to be disabled with -Dcom.redhat.fips.plainKeySupport=false

Resolves: rhbz#1994676
2021-10-10 22:37:12 +01:00
Andrew Hughes
e1f737745d Update to aarch64-shenandoah-jdk8u312-b05 (EA)
Update release notes for 8u312-b05.

Resolves: rhbz#1999939
2021-10-04 03:29:31 +01:00
Andrew Hughes
d3bca21948 Update to aarch64-shenandoah-jdk8u312-b04 (EA)
Update release notes for 8u312-b04.

Related: rhbz#1999939
2021-09-27 15:10:15 +01:00
Andrew Hughes
1acd5bbdff Update to aarch64-shenandoah-jdk8u312-b03 (EA)
Update release notes for 8u312-b03.

Related: rhbz#1999939
2021-09-24 17:34:10 +01:00
Andrew Hughes
21c598bfa9 Reduce disk footprint by removing build artifacts by default.
Related: rhbz#1999939
2021-09-21 22:56:29 +01:00
Andrew Hughes
30f2a04008 Update to aarch64-shenandoah-jdk8u312-b02 (EA)
Update release notes for 8u312-b02.

Related: rhbz#1999939
2021-09-19 13:10:41 +01:00
Andrew Hughes
d3fceb0152 Update to aarch64-shenandoah-jdk8u312-b01 (EA)
Update release notes for 8u312-b01.
Switch to EA mode.
Remove "-clean" suffix as no 8u312 builds are unclean.

Related: rhbz#1999939
2021-09-13 23:46:02 +01:00
Andrew Hughes
f830fdccdc Add patch to login to the NSS software token when in FIPS mode.
Resolves: rhbz#1997363
2021-08-27 23:42:57 +01:00
Andrew Hughes
3034306917 Detect FIPS using SECMOD_GetSystemFIPSEnabled in the new libsystemconf JDK library.
Port FIPS system detection support to OpenJDK 8u
Minor code cleanups on FIPS detection patch and check for SECMOD_GetSystemFIPSEnabled in configure.
Remove unneeded Requires on NSS as it will now be dynamically linked and detected by RPM.

Resolves: rhbz#1971696
2021-08-27 18:23:26 +01:00
Florian Weimer
19e706d505 Rebuild for libffi transition (#1891914)
Related: #1891914
2021-08-25 09:41:32 +02:00
Mohan Boddu
198dc34251 Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
Related: rhbz#1991688
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
2021-08-09 21:03:57 +00:00
Andrew Hughes
eb98e068b7 Update to aarch64-shenandoah-jdk8u302-b08 (GA)
Update release notes for 8u302-b08.
Switch to GA mode for final release.
Remove non-Free test and demo files from source tarball.

Resolves: rhbz#1967813
2021-08-08 07:22:07 +01:00
Andrew Hughes
6f55767b15 Update to aarch64-shenandoah-jdk8u302-b07 (EA)
Update release notes for 8u302-b07.
Switch to EA mode.
Use the "reverse" build loop (debug first) as the main and only build loop to get more diagnostics.

Resolves: rhbz#1967813
2021-07-20 05:37:28 +01:00
Andrew Hughes
da15b5d337 Support the FIPS mode crypto policy.
Backport FIPS mode patch to java-1.8.0-openjdk, simplifying provider removal.
nss.fips.cfg needs to be moved to %%{etcjavadir} and symlinked into the JDK, like nss.cfg
SunPKCS11 runtime provider name is a concatenation of "SunPKCS11-" and the name in the config file.
Change nss.fips.cfg config name to "NSS-FIPS" to avoid confusion with nss.cfg.
Disable FIPS mode support unless com.redhat.fips is set to "true".
Add JDK-8195607/PR3776 to support NSS SQLite databases.
Use appropriate keystore types when in FIPS mode (RH1760838)
Enable alignment with FIPS crypto policy by default (-Dcom.redhat.fips=false to disable).
Disable TLSv1.3 when using the NSS-FIPS provider (RH1860986)
Move setup of JavaSecuritySystemConfiguratorAccess to Security class so it always occurs (RH1906862)
Add explicit runtime dependency on NSS for the PKCS11 provider in FIPS mode

Resolves: rhbz#1971696
2021-07-08 05:11:48 +01:00
Andrew Hughes
546ea4a501 Remove OpenJFX support as OpenJFX is not in RHEL.
Resolves: rhbz#1973522
2021-07-06 04:40:43 +01:00
Jiri
2e15fb4a88 removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction
Resolves: rhbz#1967813
2021-06-22 12:05:42 +02:00
Jiri
45e148ece1 adapted to newst cjc to fix issue with rpm 4.17
Resolves: rhbz#1967813
2021-06-22 12:05:26 +02:00
Andrew Hughes
39ba964aee Update to aarch64-shenandoah-jdk8u292-b10 (GA)
Update release notes for 8u292-b10.
Hardcode /usr/sbin/alternatives for Flatpak builds
Update tarball generation script to use PR3822 which handles JDK-8233228 & JDK-8035166 changes
Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
Require tzdata 2020f due to JDK-8259048
Require tzdata 2021a due to JDK-8260356

Resolves: rhbz#1967813
2021-06-17 15:53:41 +01:00
Andrew Hughes
f9ea8b08a8 Removal of atk accessibility bridge bindings:
Removed libatk-wrapper[.]so.* from global _privatelibs
Removed files_accessibility and java_accessibility_rpo macros
Removed patch1 rh1648242-accessible_toolkit_crash_do_not_break_jvm.patch and
  patch3 rh1648644-java_access_bridge_privileged_security.patch
Removal of accessibility{,-slowdebug,-fastdebug} subpackages
No longer creating symlinks of %%{_libdir}/java-atk-wrapper/libatk-wrapper.so.0 to
  libatk-wrapper.so and %%{_libdir}/java-atk-wrapper/java-atk-wrapper.jar to java-atk-wrapper.jar
No longer creating %%{_jvmdir}/%{jredir -- $suffix}/lib/accessibility.properties
  with content of "assistive_technologies=org.GNOME.Accessibility.AtkWrapper"
Removal of accessibility{,-slowdebug,-fastdebug} subpackages files sections
Fix upgrade path after removal of accessibility subpackage.  As main accessibility was
 requiring main package, main package no have to obsolete
 java-1.8.0-openjdk-accessibility-{release, slowdebug, fastdebug} < 1:1.8.0.282.b08-5
 otherwise update fails

Resolves: rhbz#1971728
2021-06-17 08:24:21 +01:00
Mohan Boddu
c84c3dfc29 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
2021-04-16 00:43:32 +00:00
DistroBaker
3674a0fb26 Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/java-1.8.0-openjdk.git#dfa3a28dae350edbf13d2e79c3f90f95deb54bb1
2021-02-01 11:00:58 +00:00
DistroBaker
860e204fcc Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/java-1.8.0-openjdk.git#1bf2c1361b250745a3c11d810f08af3d418e5728
2021-01-27 01:16:25 +00:00
DistroBaker
a96c7a2e24 Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/java-1.8.0-openjdk.git#394d30bddda472e3b69dd5d9f48f2dbf4503c1f0
2021-01-26 14:38:54 +00:00
DistroBaker
764c6e902a Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/java-1.8.0-openjdk.git#e5ff6faa6e954efe5e0c80d655715fbf68acae32
2021-01-25 03:16:46 +00:00
DistroBaker
d0303ffd31 Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/java-1.8.0-openjdk.git#5bfb5658af67bdba4de2d9009668453eb308657e
2021-01-24 16:29:13 +00:00
DistroBaker
19fe8e70fc Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/java-1.8.0-openjdk.git#795674edca85020d24f1abe8bda9cf018fd9113e
2021-01-15 17:22:16 +00:00
DistroBaker
6a39bd1576 Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/java-1.8.0-openjdk.git#0edc2332e208d54503e189eef358a8cf32d1deba
2021-01-06 18:19:58 +00:00
DistroBaker
5d190d3050 Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/java-1.8.0-openjdk.git#2d21fabf5055c8c8d6dc640f530a661684c1d67f
2021-01-05 10:39:24 +00:00
DistroBaker
848e1e4308 Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/java-1.8.0-openjdk.git#db53a2c1ca8ed8e38749bfc28beccff1c0385014
2020-12-30 07:40:59 +00:00
DistroBaker
58126a81ee Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/java-1.8.0-openjdk.git#887fd98b7511938279cd7bc3c77b41e0eb240fc2
2020-12-24 01:34:15 +00:00
DistroBaker
b912063ca2 Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/java-1.8.0-openjdk.git#23664c3b90063c7730e54f0ee8290343fb88fab2
2020-12-22 20:53:46 +00:00
DistroBaker
82526d2771 Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/java-1.8.0-openjdk.git#8a8ab814be43acd6cdc1e58212475cb2d79392a9
2020-12-22 03:05:23 +00:00
DistroBaker
216d8ab7b3 Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/java-1.8.0-openjdk.git#12a52127ab7ddcb452350514603f8b2790cdfc4e
2020-12-21 19:19:55 +00:00
DistroBaker
1876a0f8ad Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/java-1.8.0-openjdk.git#aa2fac59de9a77b026139755c77d0f89a671a3cc
2020-12-19 01:09:00 +00:00
DistroBaker
1406e35ef0 Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/java-1.8.0-openjdk.git#f40d1185163fbdbe6cedd0b04dabc7d20e436f5a
2020-12-18 21:35:56 +00:00
DistroBaker
64af1e4cdd Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/java-1.8.0-openjdk.git#277adb5a50fdc880e94d22742610cbf317b70ae5
2020-11-24 08:54:18 +00:00
Troy Dawson
712109234a RHEL 9.0.0 Alpha bootstrap
The content of this branch was automatically imported from Fedora ELN
with the following as its source:
https://src.fedoraproject.org/rpms/java-1.8.0-openjdk#1eff715bb4b00b53b1a335e18c9683f78af8f064
2020-11-18 09:50:55 -08:00
DistroBaker
0249f78fb4 Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/java-1.8.0-openjdk.git#f82ab873a867441cff43ed1c650217be652cf600
2020-11-01 06:55:06 +00:00