Commit Graph

596 Commits

Author SHA1 Message Date
Andrew Hughes
f2e995182a Separate crypto policy initialisation from FIPS initialisation, now they are no longer interdependent 2022-02-23 17:22:05 +00:00
Andrew Hughes
6d412ee58b Fix FIPS issues in native code and with initialisation of java.security.Security 2022-02-16 02:36:10 +00:00
Andrew Hughes
050fecd883 Update to aarch64-shenandoah-jdk8u322-b06 (EA)
Update release notes for 8u322-b06.
Switch to GA mode for final release.
2022-02-16 00:05:22 +00:00
Andrew Hughes
c867f608e3 Update to aarch64-shenandoah-jdk8u322-b05 (EA)
Update release notes for 8u322-b05.
Require tzdata 2021e as of JDK-8275766.
Update tarball generation script to use git following shenandoah-jdk8u's move to github
2022-02-15 16:45:42 +00:00
Andrew Hughes
d3b17054c2 Re-enable gdb backtrace check. 2022-02-08 15:48:38 +00:00
Andrew Hughes
2988ce90ff Temporarily move x86 to use Zero in order to get a working build
Introduce architecture restriction logic for the gdb test.
Disable on x86, x86_64, ppc64le & s390x while these are broken in rawhide.
Replace GCC 11 patch to remove use of the register keyword with correct fix to ADLC build (JDK-8281098)
Adjust JDK8199936/PR3533 -mstackrealign patch to instead pass -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4
Refactor build functions so we can build just HotSpot without any attempt at installation.
Explicitly list JIT architectures rather than relying on those with slowdebug builds
Disable the serviceability agent on Zero architectures even when the architecture itself is supported
Add backport of JDK-8257794 to fix bogus assert on slowdebug x86-32 Zero builds

Resolves: rhbz#2045726
Related: rhbz#2051302
Related: rhbz#2041970
2022-02-07 00:49:08 +00:00
Fedora Release Engineering
92c5ccf84c - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2022-01-20 13:39:33 +00:00
Andrew Hughes
e3e7a2f6b3 Update to aarch64-shenandoah-jdk8u322-b04 (EA)
Update release notes for 8u322-b04.
Require tzdata 2021c as of JDK-8274407.
2022-01-10 16:31:32 +00:00
Andrew Hughes
172b64584a Update to aarch64-shenandoah-jdk8u322-b03 (EA)
Update release notes for 8u322-b03.
2022-01-07 15:27:20 +00:00
Andrew Hughes
a0ac8516d6 Update to aarch64-shenandoah-jdk8u322-b02 (EA)
Update release notes for 8u322-b02.
2021-12-17 03:19:15 +00:00
Andrew Hughes
be50f32572 Update to aarch64-shenandoah-jdk8u322-b01 (EA)
Update release notes for 8u322-b01.
Switch to EA mode.
2021-12-14 02:24:08 +00:00
Andrew Hughes
0478a68d40 Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. 2021-12-06 00:42:17 +00:00
Severin Gehwolf
b1a7d3ba42 Use 'sql:' prefix in nss.fips.cfg
Fedora 35 and better no longer ship the legacy
secmod.db file as part of the nss package. Explicitly
tell OpenJDK to use sqlite-based sec mode.

Resolves: RHBZ#2019555
2021-11-05 18:31:57 +01:00
Andrew Hughes
06afebf801 Update to aarch64-shenandoah-jdk8u312-b07 (GA)
Update release notes for 8u312-b07.
Switch to GA mode for final release.
2021-10-20 01:46:06 +01:00
Andrew Hughes
38ede77603 Add FIPS patch to allow plain key import.
Allow plain key import to be disabled with -Dcom.redhat.fips.plainKeySupport=false
2021-10-10 22:01:50 +01:00
Andrew Hughes
afeb38682d Update to aarch64-shenandoah-jdk8u312-b05 (EA)
Update release notes for 8u312-b05.
2021-10-09 23:21:05 +01:00
Andrew Hughes
92642a8a96 Reduce disk footprint by removing build artifacts by default. 2021-10-01 16:29:42 +01:00
Andrew Hughes
5e8cea34ec Update to aarch64-shenandoah-jdk8u312-b04 (EA)
Update release notes for 8u312-b04.
2021-09-26 20:13:52 +01:00
Andrew Hughes
aa2c8f31b9 Add patch to login to the NSS software token when in FIPS mode. 2021-09-14 02:59:18 +01:00
Andrew Hughes
0cb1fbdb0b Update to aarch64-shenandoah-jdk8u312-b03 (EA)
Update release notes for 8u312-b03.
2021-09-13 12:33:47 +01:00
Andrew Hughes
12c54a64a1 Update to aarch64-shenandoah-jdk8u312-b02 (EA)
Update release notes for 8u312-b02.
2021-09-10 05:33:38 +01:00
Andrew Hughes
d57e765053 Detect FIPS using SECMOD_GetSystemFIPSEnabled in the new libsystemconf JDK library.
Port FIPS system detection support to OpenJDK 8u
Minor code cleanups on FIPS detection patch and check for SECMOD_GetSystemFIPSEnabled in configure.
Remove unneeded Requires on NSS as it will now be dynamically linked and detected by RPM.
2021-09-04 02:14:31 +01:00
Andrew Hughes
37a363e30c Update to aarch64-shenandoah-jdk8u312-b01 (EA)
Update release notes for 8u312-b01.
Switch to EA mode.
Remove "-clean" suffix as no 8u312 builds are unclean.
2021-09-01 23:23:51 +01:00
Jiri Vanek
ae9982ef76 alternatives creation moved to posttrans
Thus fixing the old reisntall issue:
https://bugzilla.redhat.com/show_bug.cgi?id=1200302
https://bugzilla.redhat.com/show_bug.cgi?id=1976053
2021-09-01 16:48:03 +02:00
Andrew Hughes
1b05b0ca2a Remove non-Free test and demo files from source tarball. 2021-08-08 05:41:58 +01:00
Fedora Release Engineering
dc1cbfccd1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2021-07-22 08:56:33 +00:00
Andrew Hughes
3c6c1a2a27 Update to aarch64-shenandoah-jdk8u302-b08 (EA)
Update release notes for 8u302-b08.
Switch to GA mode for final release.
2021-07-21 01:28:21 +01:00
Andrew Hughes
bc8a2c217a Update to aarch64-shenandoah-jdk8u302-b07 (EA)
Update release notes for 8u302-b07.
2021-07-08 02:37:19 +01:00
Andrew Hughes
35d7fdc77f Update to aarch64-shenandoah-jdk8u302-b06 (EA)
Update release notes for 8u302-b06.
2021-07-06 17:31:13 +01:00
Andrew Hughes
6d4aec5be3 Use the "reverse" build loop (debug first) as the main and only build loop to get more diagnostics. 2021-07-05 23:10:29 +01:00
Andrew Hughes
148101f0bc Update to aarch64-shenandoah-jdk8u302-b05 (EA)
Update release notes for 8u302-b05.
2021-07-02 17:28:50 +01:00
Andrew Hughes
cf02803a5d Update to aarch64-shenandoah-jdk8u302-b04 (EA)
Update release notes for 8u302-b04.
2021-07-01 05:31:56 +01:00
Andrew Hughes
585f29fea6 Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
2021-06-26 23:51:48 +01:00
Andrew Hughes
0e6069cde3 Support the FIPS mode crypto policy.
Backport FIPS mode patch to java-1.8.0-openjdk, simplifying provider removal.
nss.fips.cfg needs to be moved to %%{etcjavadir} and symlinked into the JDK, like nss.cfg
SunPKCS11 runtime provider name is a concatenation of "SunPKCS11-" and the name in the config file.
Change nss.fips.cfg config name to "NSS-FIPS" to avoid confusion with nss.cfg.
Disable FIPS mode support unless com.redhat.fips is set to "true".
Add JDK-8195607/PR3776 to support NSS SQLite databases.
Use appropriate keystore types when in FIPS mode (RH1760838)
Enable alignment with FIPS crypto policy by default (-Dcom.redhat.fips=false to disable).
Disable TLSv1.3 when using the NSS-FIPS provider (RH1860986)
Move setup of JavaSecuritySystemConfiguratorAccess to Security class so it always occurs (RH1906862)
Add explicit runtime dependency on NSS for the PKCS11 provider in FIPS mode
2021-06-08 05:46:02 +01:00
Andrew Hughes
9bb503395a Update to aarch64-shenandoah-jdk8u302-b03 (EA)
Update release notes for 8u302-b03.
2021-06-07 13:35:52 +01:00
Andrew Hughes
6d48cf0847 Update to aarch64-shenandoah-jdk8u302-b02 (EA)
Update release notes for 8u302-b02.
2021-06-04 06:51:37 +01:00
Andrew Hughes
4c96112694 Update to aarch64-shenandoah-jdk8u302-b01 (EA)
Update release notes for 8u302-b01.
Switch to EA mode.
2021-06-02 06:03:04 +01:00
Jiri
f2efa3b930 removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction 2021-05-10 20:34:52 +02:00
Sérgio M. Basto
808d7a0c2c Fix upgrade path after removal of accessibility subpackage. As main accessibility was requiring main package,
main package now have to obsolete java-1.8.0-openjdk-accessibility-{release, slowdebug, fastdebug} < 1:1.8.0.292.b06
  otherwise update fails
2021-05-04 11:22:44 +01:00
Jiri
7c44d4d12d Adapted to rpm 4.17 and cjc 4.0
As rpm 4.17 dropped arg from varaibale table, cjc now have to be sued as
module. cjc 4.0 was converted to module
2021-04-29 17:35:13 +02:00
Andrew Hughes
2e183d309d Update to aarch64-shenandoah-jdk8u292-b10 (GA)
Update release notes for 8u292-b10.
2021-04-22 01:15:41 +01:00
Andrew Hughes
2d9c5160dd Update to aarch64-shenandoah-jdk8u292-b09 (EA)
Update release notes for 8u292-b09.
2021-04-09 04:21:06 +01:00
Andrew Hughes
34aae23aaf Fix bad date in Changelog. 2021-04-08 07:18:29 +01:00
Andrew Hughes
5df61f34ef Update to aarch64-shenandoah-jdk8u292-b08 (EA)
Update release notes for 8u292-b08.
Require tzdata 2021a due to JDK-8260356
2021-04-08 07:13:15 +01:00
Andrew Hughes
b11200180b Update to aarch64-shenandoah-jdk8u292-b07 (EA)
Update release notes for 8u292-b07.
2021-03-30 04:17:23 +01:00
Jiri Vanek
0c79c1451e removal of atk accessibility bridge bindings:
- removed libatk-wrapper[.]so.* from global _privatelibs
- removed files_accessibility and java_accessibility_rpo macros
- removed patch1 rh1648242-accessible_toolkit_crash_do_not_break_jvm.patch and patch3 rh1648644-java_access_bridge_privileged_security.patch
- removal of accessibility{,-slowdebug,-fastdebug} subpackages
- no longer creating symlinks of %%{_libdir}/java-atk-wrapper/libatk-wrapper.so.0 libatk-wrapper.so and  %%{_libdir}/java-atk-wrapper/java-atk-wrapper.jar  java-atk-wrapper.jar
- no longer creating %%{_jvmdir}/%{jredir -- $suffix}/lib/accessibility.properties with content of "assistive_technologies=org.GNOME.Accessibility.AtkWrapper"
- removal of accessibility{,-slowdebug,-fastdebug} subpackages files sections
2021-03-24 11:18:46 +01:00
Andrew Hughes
4efcbc5b87 Update to aarch64-shenandoah-jdk8u292-b06 (EA)
Update release notes for 8u292-b06.
Require tzdata 2020f due to JDK-8259048
2021-03-22 04:00:13 +00:00
Andrew Hughes
a63448df0f Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
2021-03-19 02:46:15 +00:00
Andrew Hughes
c98058256b Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
2021-03-18 18:55:49 +00:00
Andrew Hughes
13bfe740ca Update to aarch64-shenandoah-jdk8u292-b05 (EA)
Update release notes for 8u292-b05.
2021-03-09 17:18:55 +00:00