Commit Graph

244 Commits

Author SHA1 Message Date
Andrew Hughes
0a8e5a5b64 Update to jdk-11.0.17+1
Update release notes to 11.0.17+1
Switch to EA mode for 11.0.17 pre-release builds.
Bump HarfBuzz bundled version to 4.4.1 following JDK-8289853
Bump FreeType bundled version to 2.12.1 following JDK-8290334
2022-09-06 03:20:38 +01:00
Andrew Hughes
5fe1cbafc2 Switch to static builds, reducing system dependencies and making build more portable 2022-09-02 03:16:46 +01:00
Andrew Hughes
6eee73b250 Update to jdk-11.0.16.1+1
Update release notes to 11.0.16.1+1
Add patch to provide translations for Europe/Kyiv added in tzdata2022b
Add test to ensure timezones can be translated
2022-08-24 05:00:12 +01:00
Andrew Hughes
bdbff6f646 Update to jdk-11.0.16+8
Update release notes to 11.0.16+8
Switch to GA mode for release
Exclude x86 where java_arches is undefined, in order to unbreak build
2022-07-24 04:37:15 +01:00
Jiri
afecab2b07 moved to build only on %%{java_arches}
-- https://fedoraproject.org/wiki/Changes/Drop_i686_JDKs
- reverted :
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild (always mess up release)
-- Try to build on x86 again by creating a husk of a JDK which does not depend on itself
-- Exclude x86 from builds as the bootstrap JDK is now completely broken and unusable
-- Replaced binaries and .so files with bash-stubs on i686
- added ExclusiveArch:  %%{java_arches}
-- this now excludes i686
-- this is safely backport-able to older fedoras, as the macro was  backported proeprly (with i686 included)
- https://bugzilla.redhat.com/show_bug.cgi?id=2104126
2022-07-22 13:08:59 +02:00
Fedora Release Engineering
a5da3a7ab4 Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2022-07-21 15:05:39 +00:00
Andrew Hughes
aa003f3fec Try to build on x86 again by creating a husk of a JDK which does not depend on itself 2022-07-19 00:53:56 +01:00
Andrew Hughes
6c5c08e884 Exclude x86 from builds as the bootstrap JDK is now completely broken and unusable 2022-07-17 02:45:22 +01:00
Andrew Hughes
c0922b743b Update to jdk-11.0.16+7
Update release notes to 11.0.16+7
Switch to EA mode for 11.0.16 pre-release builds.
Use same tarball naming style as java-17-openjdk and java-latest-openjdk
Drop JDK-8282004 patch which is now upstreamed under JDK-8282231
Drop JDK-8257794 patch now upstreamed
Print release file during build, which should now include a correct SOURCE value from .src-rev
Update tarball script with IcedTea GitHub URL and .src-rev generation
Use "git apply" with patches in the tarball script to allow binary diffs
Include script to generate bug list for release notes
Update tzdata requirement to 2022a to match JDK-8283350
Add additional patch during tarball generation to align tests with ECC changes
2022-07-14 16:15:37 +01:00
Andrew Hughes
61f3a55fb5 Explicitly require crypto-policies during build and runtime for system security properties 2022-07-14 16:41:35 +02:00
Jiri
25f3641c6c Replaced binaries and .so files with bash-stubs on i686
in preparation of the removal on that architecture
https://fedoraproject.org/wiki/Changes/Drop_i686_JDKs
2022-07-14 16:39:05 +02:00
FeRD (Frank Dana)
f03a305fe6 Add additional javadoc & javadoczip alternatives
Create additional alternatives linked from the javadocdir, named:
  * java-%{origin} / java-%{origin}.zip
  * java-%{javaver} / java-%{javaver}.zip
  * java-%{javaver}-%{origin} / java-%{javaver}-%{origin}.zip
2022-07-14 16:32:21 +02:00
Jiri Vanek
6c8bca2746 Fixed typo in updatever 2022-07-14 16:28:48 +02:00
Jiri Vanek
c8ee6b1f0a Make use of the vendor version string to store our version & release rather than an upstream release date
Include a test in the RPM to check the build has the correct vendor information.
Fix issue where CheckVendor.java test erroneously passes when it should fail.
Add proper quoting so '&' is not treated as a special character by the
shell.
2022-07-14 15:58:53 +02:00
Andrew Hughes
3d21de4f85 Rebase FIPS patches from fips branch and simplify by using a single patch from that repository
* RH2036462: sun.security.pkcs11.wrapper.PKCS11.getInstance breakage
* RH2090378: Revert to disabling system security properties and FIPS mode support together

Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
Enable system security properties in the RPM (now disabled by default in the FIPS repo)
Improve security properties test to check both enabled and disabled behaviour
Run security properties test with property debugging on
2022-07-07 02:28:45 +01:00
Francisco Ferrari Bihurriet
189cbcedc4 RH2007331: SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode
Use SunPKCS11 Attributes Configuration to set CKA_SIGN=true on SecretKey generate/import operations in FIPS mode, see:
https://docs.oracle.com/en/java/javase/11/security/pkcs11-reference-guide1.html#GUID-C4ABFACB-B2C9-4E71-A313-79F881488BB9__PKCS11-ATTRIBUTES-CONFIGURATION
2022-06-30 15:01:15 -03:00
Andrew Hughes
7d3e9dc3aa Update to jdk-11.0.15.0+10
Update release notes to 11.0.15.0+10
Switch to GA mode for release
2022-04-24 22:24:43 +01:00
Andrew Hughes
a86ee22a30 Update to jdk-11.0.15.0+8
Update release notes to 11.0.15.0+8
Rebase RH1996182 FIPS patch after JDK-8254410
2022-04-13 03:25:15 +01:00
Andrew Hughes
9f01982008 Update to jdk-11.0.15.0+1
Update release notes to 11.0.15.0+1
Switch to EA mode for 11.0.15 pre-release builds.
2022-04-12 18:04:53 +01:00
Andrew Hughes
021b8f123b Detect NSS at runtime for FIPS detection
Turn off build-time NSS linking and go back to an explicit Requires on NSS
2022-04-12 02:23:12 +01:00
Stephan Bergmann
1ac4052b44 Fix flatpak builds
...after 19065a8b01 "Temporarily move x86 to use
Zero in order to get a working build":

When building the

>       if ${run_bootstrap} ; then

branch for suffix='' and loop='-main', the second

>           buildjdk ${builddir} $(pwd)/${bootinstalldir}/images/%{jdkimage} "${maketargets}" ${debugbuild} ${link_opt}

uses the JDK (`$(pwd)/${bootinstalldir}/images/%{jdkimage}`) from the installjdk
on the previous line.  But installjdk does

> 	rm ${imagepath}/lib/tzdb.dat
> 	ln -s %{_datadir}/javazi-1.8/tzdb.dat ${imagepath}/lib/tzdb.dat

which made that JDK's tzdb.dat link to /app/share/javazi-1.8/tzdb.dat in a
flatpak build (rather than the usual /usr/share/javazi-1.8/tzdb.dat in a non-
flatpak build) which is not present at build-time (but will be present at
runtime in at least the LibreOffice flatpak, which bundles tzdata-java built for
the flatpak /app prefix).  So using that JDK's compiler during the build kept
failing due to java.io.FileNotFoundException for its lib/tzdb.dat.

(This was not an issue prior to 19065a8b01, as
installjdk's modification of lib/tzdb.dat used to be done only for the "Final
setup on the main image" at the very end of the build, not during the build for
JDKs that are themselves used later during the build.)

The easiest workaround for this issue appears to be to just not bootstrap_build
in the flatpak case, avoiding the situation that a JDK whose lib/tzdb.dat has
been modified through installjdk is used during the build.
2022-04-08 03:54:57 +01:00
Andrew Hughes
bdab54d339 Sync cleanups from release branch. 2022-02-17 17:38:23 +00:00
Andrew Hughes
5049a18bea Reinstate JIT builds on x86_32. 2022-02-16 21:38:12 +00:00
Jiri
ee1af94d18 Bumped release 2022-02-16 14:31:38 +01:00
Andrew Hughes
a0dbb38602 Correct previous commit 2022-02-14 21:08:58 +00:00
Jiri
5f2da117f7 Require tzdata 2021e as of JDK-8275766. 2022-02-12 17:04:14 +01:00
Andrew Hughes
7e66e0d62c Update to jdk-11.0.14.1+1
Update release notes to 11.0.14.1+1
2022-02-11 14:05:11 +00:00
Jiri Vanek
d693929c83 Storing and restoring alterntives during update manually
Fixing:
Bug 2001567 - update of JDK/JRE is removing its manually selected alterantives and select (as auto) system JDK/JRE

The move of alternatives creation to posttrans to fix:
Bug 1200302 - dnf reinstall breaks alternatives
Had caused the alternatives to be removed, and then created again,
instead of being added, and then removing the old, and thus persisting
the selection in family

Thus this fix, is storing the family of manually selected master, and if
stored, then it is restoring the family of the master
2022-02-11 10:04:52 +01:00
Jiri Vanek
567234139c family extracted to globals 2022-02-11 10:04:45 +01:00
Jiri Vanek
ac37f1de3e Providing proper provides for javadoc-zip subpk
Before this patch, the java-17-openjdk-javadoc-zip was not existing, and
instead of that, javadoc was provided by both
Factm, that both subpkgs should provide javadoc, should be kept
2022-02-11 10:04:39 +01:00
Andrew Hughes
125df0aed5 Re-enable gdb backtrace check. 2022-02-08 15:42:09 +00:00
Jiri
4666ebb41f Moved to stop being system JDK 2022-02-04 20:02:34 +01:00
Andrew Hughes
19065a8b01 Temporarily move x86 to use Zero in order to get a working build
Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
Refactor build functions so we can build just HotSpot without any attempt at installation.
Explicitly list JIT architectures rather than relying on those with slowdebug builds
Disable the serviceability agent on Zero architectures even when the architecture itself is supported
Add backport of JDK-8257794 to fix bogus assert on slowdebug x86-32 Zero builds
2022-02-04 17:14:21 +00:00
Andrew Hughes
6c8bcf1a23 Separate crypto policy initialisation from FIPS initialisation, now they are no longer interdependent 2022-01-24 19:03:43 +00:00
Andrew Hughes
93129901f7 Update to jdk-11.0.14.0+9
Update release notes to 11.0.14.0+9
Switch to GA mode for final release.
2022-01-24 02:13:58 +00:00
Fedora Release Engineering
11fc7fb37b - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2022-01-20 13:39:53 +00:00
Andrew Hughes
006245df65 Improve architecture restrictions for the gdb test.
Disable only on x86, x86_64, ppc64le & s390x while these are broken in rawhide.
2022-01-19 01:21:47 +00:00
Andrew Hughes
9a3935f9ea Fix FIPS issues in native code and with initialisation of java.security.Security 2022-01-18 02:21:22 +00:00
Andrew Hughes
75de074e84 Sync gdb test with java-1.8.0-openjdk and disable for now until gdb is fixed. 2022-01-17 00:41:46 +00:00
Andrew Hughes
97bfebb41c Update to jdk-11.0.14.0+8
Update release notes to 11.0.14.0+8
2022-01-16 04:02:28 +00:00
Andrew Hughes
2652be95f2 Update to jdk-11.0.14.0+1
Update release notes to 11.0.14.0+1
Switch to EA mode for 11.0.14 pre-release builds.
Rename blacklisted.certs to blocked.certs following JDK-8253866
Rebase RH1996182 login patch and drop redundant security policy extension after JDK-8269034
2021-12-13 05:18:54 +00:00
Andrew Hughes
3aa600bac9 Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. 2021-11-08 00:49:48 +00:00
Severin Gehwolf
633d5f0b03 Use 'sql:' prefix in nss.fips.cfg
Fedora 35 and better no longer ship the legacy
secmod.db file as part of the nss package. Explicitly
tell OpenJDK to use sqlite-based sec mode.

Resolves: RHBZ#2019555
2021-11-05 14:42:59 +01:00
Jiri Vanek
13b0ed6aba Added missing endif/if so javadoc is not tied with javadoc-zip 2021-11-04 20:52:16 +01:00
Jiri Vanek
2bfd45717e Fixed comment of for slowdebug to correct any debug 2021-11-04 20:51:03 +01:00
Jiri Vanek
a838289066 Replaced hardcoded 11 by featurever where apporpriate 2021-11-04 20:50:22 +01:00
Andrew Hughes
b6f1dacc01 Reduce disk footprint by removing build artifacts by default. 2021-10-26 16:43:24 +01:00
Andrew Hughes
71fb59352f Update to jdk-11.0.12.0+8
Update release notes to 11.0.12.0+8
Switch to GA mode for final release.
2021-10-20 01:19:40 +01:00
Andrew Hughes
afd7cc8846 Update to jdk-11.0.13.0+7
Update release notes to 11.0.13.0+7
2021-10-12 01:56:51 +01:00
Andrew Hughes
020aa81de3 Update to jdk-11.0.13.0+1
Update release notes to 11.0.13.0+1
Update tarball generation script to use git following OpenJDK 11u's move to github
Switch to EA mode for 11.0.13 pre-release builds.
Remove "-clean" suffix as no 11.0.13 builds are unclean.
Drop JDK-8269668 patch which is now applied upstream.
2021-10-12 00:18:06 +01:00