rpms/java-11-openjdk
7
0
Fork 0
Code Issues Pull Requests Releases Activity
256 Commits 10 Branches 76 Tags 3.5 MiB
6eee73b250
Commit Graph

256 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Andrew Hughes
ca39249070 Add patch to allow plain key import 
Allow plain key import to be disabled with -Dcom.redhat.fips.plainKeySupport=false
 2021-10-09 22:53:28 +01:00
Andrew Hughes
ad715cbd7d Restructure the build so a minimal initial build is then used for the final build (with docs) 
This reduces pressure on the system JDK and ensures the JDK being built can do a full build
 2021-10-04 17:57:15 +01:00
Andrew Hughes
83375279df Add patch to login to the NSS software token when in FIPS mode. 
Extend the default security policy to accomodate PKCS11 accessing jdk.internal.misc.
 2021-09-06 01:02:37 +01:00
Jiri Vanek
e782dfa8d3 added posttrans hook which persist sanity of dir->symlink 
in case of udpate from ancient versions
 2021-09-02 17:59:00 +02:00
Jiri Vanek
a7de280fe0 minor cosmetic improvements to make spec more comparable between variants 2021-09-02 17:44:53 +02:00
Jiri Vanek
5854bfce04 Fixed date 2021-08-31 17:42:49 +02:00
Jiri Vanek
1d49cce8be Bumped release to have set of two packages with posts change 2021-08-31 16:50:08 +02:00
Jiri Vanek
f2d7186c1f alternatives creation moved to posttrans 
Thus fixing the old reisntall issue:
https://bugzilla.redhat.com/show_bug.cgi?id=1200302
https://bugzilla.redhat.com/show_bug.cgi?id=1976053
 2021-08-30 16:21:11 +02:00
Andrew Hughes
5184e9134e Remove non-Free test from source tarball. 2021-08-09 02:15:00 +01:00
Severin Gehwolf
e2848ca819 Fix java.library.path issue on aarch64 (JDK-8269668) 
Resolves: rhbz#1977671
 2021-07-28 19:22:14 +01:00
Fedora Release Engineering
c40dc6eb2e - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2021-07-22 08:56:53 +00:00
Andrew Hughes
ca281c8fe6 Update to jdk-11.0.12.0+7 
Update release notes to 11.0.12.0+7
Switch to GA mode for final release.
 2021-07-21 05:57:34 +01:00
Andrew Hughes
f0bef6ebc0 Update to jdk-11.0.12.0+6 
Update release notes to 11.0.12.0+6
Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
 2021-07-09 04:24:11 +01:00
Andrew Hughes
f0e35f6c1a Update to jdk-11.0.12.0+4 
Update release notes to 11.0.12.0+4
Correct bug ID JDK-8264846 to intended ID of JDK-8264848
 2021-07-08 05:42:02 +01:00
Andrew Hughes
d13c101ca5 Update to jdk-11.0.12.0+3 
Update release notes to 11.0.12.0+3
 2021-07-07 06:47:21 +01:00
Andrew Hughes
bcc8874fb1 Use the "reverse" build loop (debug first) as the main and only build loop to get more diagnostics. 
Remove restriction on disabling product build, as debug packages no longer have javadoc packages.
 2021-07-02 17:55:19 +01:00
Andrew Hughes
0ff03bc290 Update to jdk-11.0.12.0+2 
Update release notes to 11.0.12.0+2
 2021-07-02 17:45:38 +01:00
Andrew Hughes
c73f8f24aa Update to jdk-11.0.12.0+1 
Update release notes to 11.0.12.0+1
Switch to EA mode for 11.0.12 pre-release builds.
Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
 2021-06-30 05:19:00 +01:00
Andrew Hughes
bd1d801cc3 Detect FIPS using SECMOD_GetSystemFIPSEnabled in the new libsystemconf JDK library. 
Minor code cleanups on FIPS detection patch and check for SECMOD_GetSystemFIPSEnabled in configure.
Remove unneeded Requires on NSS as it will now be dynamically linked and detected by RPM.
 2021-06-09 03:07:29 +01:00
Andrew Hughes
c96e1e74e2 Support the FIPS mode crypto policy (RH1655466) 
Update RH1655466 FIPS patch with changes in OpenJDK 8 version.
SunPKCS11 runtime provider name is a concatenation of "SunPKCS11-" and the name in the config file.
Change nss.fips.cfg config name to "NSS-FIPS" to avoid confusion with nss.cfg.
No need to substitute path to nss.fips.cfg as java.security file supports a java.home variable.
Disable FIPS mode support unless com.redhat.fips is set to "true".
Use appropriate keystore types when in FIPS mode (RH1818909)
Enable alignment with FIPS crypto policy by default (-Dcom.redhat.fips=false to disable).
Disable TLSv1.3 when the FIPS crypto policy and the NSS-FIPS provider are in use (RH1860986)
Add explicit runtime dependency on NSS for the PKCS11 provider in FIPS mode
Move setup of JavaSecuritySystemConfiguratorAccess to Security class so it always occurs (RH1915071)

Resolves: rhbz#1830090
 2021-06-02 17:54:48 +01:00
Jiri Vanek
0eeb4a6e13 removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction 2021-05-07 14:52:46 +02:00
Severin Gehwolf
aca26b36f4 Fix bogus date in changelog 2021-04-30 17:42:55 +02:00
Severin Gehwolf
4b607408ff Remove -fcommon work-around 
OpenJDK 11 code has been fixed with and no longer
needs the -fcommon workaround. Remove the option as
this could potentially mask code issues.
 2021-04-30 17:41:18 +02:00
Jiri
2adbf848e0 Adapted to rpm 4.17 and cjc 4.0 
As rpm 4.17 dropped arg from varaibale table, cjc now have to be sued as
module. cjc 4.0 was converted to module
 2021-04-29 16:59:13 +02:00
Andrew Hughes
16a1b06e71 Update to jdk-11.0.11.0+9 
Update release notes to 11.0.11.0+9
Switch to GA mode for final release.
Require tzdata 2021a to match upstream change JDK-8260356
 2021-04-22 02:32:07 +01:00
Stephan Bergmann
c45ae1042c Disable copy-jdk-configs for Flatpak builds 
There does not appear to be any value in having copy-jdk-config in Flatpak
builds (where a given Flatpak bundles one specific JDK, so no need for a
"Utility script to transfer JDKs configuration files between updates or for
archiving.")

And at least when trying to do a LibreOffice Flatpak build from Fedora 34 RPM
specs (which includes java-11-openjdk among its components), the #!/usr/bin/lua
shebang in copy_jdk_configs.lua would have caused a requirement on
/usr/bin/lua, but which a lua RPM bundled in the Flatpak would not provide (as
it would provide /app/bin/lua instead).  And the easiest way to work around that
issue is to just disable the unnecessary copy-jdk-configs.
 2021-04-20 08:52:48 +02:00
Andrew Hughes
5797fe9b4d Update to jdk-11.0.11.0+7 
Update release notes to 11.0.11.0+7
 2021-04-12 08:02:15 +01:00
Andrew Hughes
18e3f8cea4 Update to jdk-11.0.11.0+6 
Update release notes to 11.0.11.0+6
 2021-04-11 02:33:30 +01:00
Andrew Hughes
cb21ce7dd2 Update to jdk-11.0.11.0+5 
Update release notes to 11.0.11.0+5
 2021-04-06 20:37:58 +01:00
Andrew Hughes
23641ef4be Update tapsets from IcedTea 6.x repository with fix for JDK-8015774 changes (_heap->_heaps) 
Update icedtea_sync.sh with a VCS mode that retrieves sources from a Mercurial repository
 2021-03-29 17:05:58 +01:00
Andrew Hughes
84395ae871 Update to jdk-11.0.11.0+4 
Update release notes to 11.0.11.0+4
 2021-03-29 16:59:46 +01:00
Andrew Hughes
2a79062fb8 Fix issue where CheckVendor.java test erroneously passes when it should fail. 
Add proper quoting so '&' is not treated as a special character by the shell.
 2021-03-29 04:12:34 +01:00
Andrew Hughes
fb9cc46325 Update to jdk-11.0.11.0+3 
Update release notes to 11.0.11.0+3
Remove upstreamed patch JDK-8259949
 2021-03-09 18:46:53 +00:00
Andrew Hughes
d4c0bdce70 Update to jdk-11.0.11.0+2 
Update release notes to 11.0.11.0+2
 2021-03-03 02:25:51 +00:00
Andrew Hughes
e209f3da9e Update to jdk-11.0.11.0+1 
Update release notes to 11.0.11.0+1
Switch to EA mode for 11.0.11 pre-release builds.
Require tzdata 2020f to match upstream change JDK-8259048
 2021-02-24 03:05:11 +00:00
Andrew Hughes
7997be64b6 Hardcode /usr/sbin/alternatives for Flatpak builds 
/usr/sbin/alternatives is not under the Flatpak build's %{_prefix},
which is set to /app.

(See <https://pagure.io/packaging-committee/issue/848> "Clarify the
use of path macros with respect to build dependencies").

Found when trying to do a LibreOffice Flatpak build from RHEL RPM
specs, which includes java-1.8.0-openjdk among its components.
 2021-02-19 03:15:08 +00:00
Andrew Hughes
affa8f56ef Perform static library build on a separate source tree with bundled image libraries 
Make static library build optional
Based on initial work by Severin Gehwolf
 2021-02-17 18:10:13 +00:00
Andrew Hughes
dd24375015 Update to jdk-11.0.10.0+9 
Update release notes to 11.0.10.0+9
Switch to GA mode for final release.
 2021-02-01 01:25:32 +00:00
Fedora Release Engineering
3102f36e5f - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2021-01-26 14:42:31 +00:00
Andrew Hughes
6f7c0e716b Fix location and comment differences from RHEL. 2021-01-25 03:52:16 +00:00
Andrew Hughes
96d9c80a21 Following JDK-8005165, class data sharing can be enabled on all JIT architectures 2021-01-25 03:42:49 +00:00
Andrew Hughes
3fa84eff00 Include a test in the RPM to check the build has the correct vendor information. 2021-01-24 18:17:53 +00:00
Andrew Hughes
0b8fc9968d Update build documentation to reflect this is java-11-openjdk, not java-1.8.0-openjdk 
Remove redundant closure and immediate reopening of include_normal_build block.
 2021-01-24 17:20:20 +00:00
Andrew Hughes
214b0d1ac4 Use RSA as default for keytool, as DSA is disabled in all crypto policies except LEGACY 
Adjust RH1842572 patch due to context change from JDK-8213400
 2021-01-24 03:24:41 +00:00
Andrew Hughes
4581efb916 Need to support noarch for creating source RPMs for non-scratch builds. 2021-01-23 22:53:38 +00:00
Andrew Hughes
10631d6261 Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64) 2021-01-23 05:07:29 +00:00
Andrew Hughes
876286a0d4 Use -march=i686 for x86 builds if -fcf-protection is detected (needs CMOV) 2021-01-19 03:59:55 +00:00
Andrew Hughes
7f58eb6adf Update to jdk-11.0.10.0+8 
Update release notes to 11.0.10.0+8.
Update tarball generation script to use PR3818 which handles JDK-8171279 changes
Drop JDK-8250861 as applied upstream.
 2021-01-15 05:18:00 +00:00
Tom Stellard
4824868f52 Add BuildRequires: make 
https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot
 2021-01-05 15:32:46 +00:00
Jiri Vanek
452185ed63 Fixed typo in variable 2021-01-04 12:06:40 +01:00