Andrew Hughes
71fb59352f
Update to jdk-11.0.12.0+8
...
Update release notes to 11.0.12.0+8
Switch to GA mode for final release.
2021-10-20 01:19:40 +01:00
Andrew Hughes
afd7cc8846
Update to jdk-11.0.13.0+7
...
Update release notes to 11.0.13.0+7
2021-10-12 01:56:51 +01:00
Andrew Hughes
020aa81de3
Update to jdk-11.0.13.0+1
...
Update release notes to 11.0.13.0+1
Update tarball generation script to use git following OpenJDK 11u's move to github
Switch to EA mode for 11.0.13 pre-release builds.
Remove "-clean" suffix as no 11.0.13 builds are unclean.
Drop JDK-8269668 patch which is now applied upstream.
2021-10-12 00:18:06 +01:00
Andrew Hughes
ca39249070
Add patch to allow plain key import
...
Allow plain key import to be disabled with -Dcom.redhat.fips.plainKeySupport=false
2021-10-09 22:53:28 +01:00
Andrew Hughes
ad715cbd7d
Restructure the build so a minimal initial build is then used for the final build (with docs)
...
This reduces pressure on the system JDK and ensures the JDK being built can do a full build
2021-10-04 17:57:15 +01:00
Andrew Hughes
83375279df
Add patch to login to the NSS software token when in FIPS mode.
...
Extend the default security policy to accomodate PKCS11 accessing jdk.internal.misc.
2021-09-06 01:02:37 +01:00
Jiri Vanek
e782dfa8d3
added posttrans hook which persist sanity of dir->symlink
...
in case of udpate from ancient versions
2021-09-02 17:59:00 +02:00
Jiri Vanek
a7de280fe0
minor cosmetic improvements to make spec more comparable between variants
2021-09-02 17:44:53 +02:00
Jiri Vanek
5854bfce04
Fixed date
2021-08-31 17:42:49 +02:00
Jiri Vanek
1d49cce8be
Bumped release to have set of two packages with posts change
2021-08-31 16:50:08 +02:00
Jiri Vanek
f2d7186c1f
alternatives creation moved to posttrans
...
Thus fixing the old reisntall issue:
https://bugzilla.redhat.com/show_bug.cgi?id=1200302
https://bugzilla.redhat.com/show_bug.cgi?id=1976053
2021-08-30 16:21:11 +02:00
Andrew Hughes
5184e9134e
Remove non-Free test from source tarball.
2021-08-09 02:15:00 +01:00
Severin Gehwolf
e2848ca819
Fix java.library.path issue on aarch64 (JDK-8269668)
...
Resolves: rhbz#1977671
2021-07-28 19:22:14 +01:00
Fedora Release Engineering
c40dc6eb2e
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
...
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2021-07-22 08:56:53 +00:00
Andrew Hughes
ca281c8fe6
Update to jdk-11.0.12.0+7
...
Update release notes to 11.0.12.0+7
Switch to GA mode for final release.
2021-07-21 05:57:34 +01:00
Andrew Hughes
f0bef6ebc0
Update to jdk-11.0.12.0+6
...
Update release notes to 11.0.12.0+6
Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
2021-07-09 04:24:11 +01:00
Andrew Hughes
f0e35f6c1a
Update to jdk-11.0.12.0+4
...
Update release notes to 11.0.12.0+4
Correct bug ID JDK-8264846 to intended ID of JDK-8264848
2021-07-08 05:42:02 +01:00
Andrew Hughes
d13c101ca5
Update to jdk-11.0.12.0+3
...
Update release notes to 11.0.12.0+3
2021-07-07 06:47:21 +01:00
Andrew Hughes
bcc8874fb1
Use the "reverse" build loop (debug first) as the main and only build loop to get more diagnostics.
...
Remove restriction on disabling product build, as debug packages no longer have javadoc packages.
2021-07-02 17:55:19 +01:00
Andrew Hughes
0ff03bc290
Update to jdk-11.0.12.0+2
...
Update release notes to 11.0.12.0+2
2021-07-02 17:45:38 +01:00
Andrew Hughes
c73f8f24aa
Update to jdk-11.0.12.0+1
...
Update release notes to 11.0.12.0+1
Switch to EA mode for 11.0.12 pre-release builds.
Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
2021-06-30 05:19:00 +01:00
Andrew Hughes
bd1d801cc3
Detect FIPS using SECMOD_GetSystemFIPSEnabled in the new libsystemconf JDK library.
...
Minor code cleanups on FIPS detection patch and check for SECMOD_GetSystemFIPSEnabled in configure.
Remove unneeded Requires on NSS as it will now be dynamically linked and detected by RPM.
2021-06-09 03:07:29 +01:00
Andrew Hughes
c96e1e74e2
Support the FIPS mode crypto policy (RH1655466)
...
Update RH1655466 FIPS patch with changes in OpenJDK 8 version.
SunPKCS11 runtime provider name is a concatenation of "SunPKCS11-" and the name in the config file.
Change nss.fips.cfg config name to "NSS-FIPS" to avoid confusion with nss.cfg.
No need to substitute path to nss.fips.cfg as java.security file supports a java.home variable.
Disable FIPS mode support unless com.redhat.fips is set to "true".
Use appropriate keystore types when in FIPS mode (RH1818909)
Enable alignment with FIPS crypto policy by default (-Dcom.redhat.fips=false to disable).
Disable TLSv1.3 when the FIPS crypto policy and the NSS-FIPS provider are in use (RH1860986)
Add explicit runtime dependency on NSS for the PKCS11 provider in FIPS mode
Move setup of JavaSecuritySystemConfiguratorAccess to Security class so it always occurs (RH1915071)
Resolves: rhbz#1830090
2021-06-02 17:54:48 +01:00
Jiri Vanek
0eeb4a6e13
removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction
2021-05-07 14:52:46 +02:00
Severin Gehwolf
aca26b36f4
Fix bogus date in changelog
2021-04-30 17:42:55 +02:00
Severin Gehwolf
4b607408ff
Remove -fcommon work-around
...
OpenJDK 11 code has been fixed with and no longer
needs the -fcommon workaround. Remove the option as
this could potentially mask code issues.
2021-04-30 17:41:18 +02:00
Jiri
2adbf848e0
Adapted to rpm 4.17 and cjc 4.0
...
As rpm 4.17 dropped arg from varaibale table, cjc now have to be sued as
module. cjc 4.0 was converted to module
2021-04-29 16:59:13 +02:00
Andrew Hughes
16a1b06e71
Update to jdk-11.0.11.0+9
...
Update release notes to 11.0.11.0+9
Switch to GA mode for final release.
Require tzdata 2021a to match upstream change JDK-8260356
2021-04-22 02:32:07 +01:00
Stephan Bergmann
c45ae1042c
Disable copy-jdk-configs for Flatpak builds
...
There does not appear to be any value in having copy-jdk-config in Flatpak
builds (where a given Flatpak bundles one specific JDK, so no need for a
"Utility script to transfer JDKs configuration files between updates or for
archiving.")
And at least when trying to do a LibreOffice Flatpak build from Fedora 34 RPM
specs (which includes java-11-openjdk among its components), the #!/usr/bin/lua
shebang in copy_jdk_configs.lua would have caused a requirement on
/usr/bin/lua, but which a lua RPM bundled in the Flatpak would not provide (as
it would provide /app/bin/lua instead). And the easiest way to work around that
issue is to just disable the unnecessary copy-jdk-configs.
2021-04-20 08:52:48 +02:00
Andrew Hughes
5797fe9b4d
Update to jdk-11.0.11.0+7
...
Update release notes to 11.0.11.0+7
2021-04-12 08:02:15 +01:00
Andrew Hughes
18e3f8cea4
Update to jdk-11.0.11.0+6
...
Update release notes to 11.0.11.0+6
2021-04-11 02:33:30 +01:00
Andrew Hughes
cb21ce7dd2
Update to jdk-11.0.11.0+5
...
Update release notes to 11.0.11.0+5
2021-04-06 20:37:58 +01:00
Andrew Hughes
23641ef4be
Update tapsets from IcedTea 6.x repository with fix for JDK-8015774 changes (_heap->_heaps)
...
Update icedtea_sync.sh with a VCS mode that retrieves sources from a Mercurial repository
2021-03-29 17:05:58 +01:00
Andrew Hughes
84395ae871
Update to jdk-11.0.11.0+4
...
Update release notes to 11.0.11.0+4
2021-03-29 16:59:46 +01:00
Andrew Hughes
2a79062fb8
Fix issue where CheckVendor.java test erroneously passes when it should fail.
...
Add proper quoting so '&' is not treated as a special character by the shell.
2021-03-29 04:12:34 +01:00
Andrew Hughes
fb9cc46325
Update to jdk-11.0.11.0+3
...
Update release notes to 11.0.11.0+3
Remove upstreamed patch JDK-8259949
2021-03-09 18:46:53 +00:00
Andrew Hughes
d4c0bdce70
Update to jdk-11.0.11.0+2
...
Update release notes to 11.0.11.0+2
2021-03-03 02:25:51 +00:00
Andrew Hughes
e209f3da9e
Update to jdk-11.0.11.0+1
...
Update release notes to 11.0.11.0+1
Switch to EA mode for 11.0.11 pre-release builds.
Require tzdata 2020f to match upstream change JDK-8259048
2021-02-24 03:05:11 +00:00
Andrew Hughes
7997be64b6
Hardcode /usr/sbin/alternatives for Flatpak builds
...
/usr/sbin/alternatives is not under the Flatpak build's %{_prefix},
which is set to /app.
(See <https://pagure.io/packaging-committee/issue/848 > "Clarify the
use of path macros with respect to build dependencies").
Found when trying to do a LibreOffice Flatpak build from RHEL RPM
specs, which includes java-1.8.0-openjdk among its components.
2021-02-19 03:15:08 +00:00
Andrew Hughes
affa8f56ef
Perform static library build on a separate source tree with bundled image libraries
...
Make static library build optional
Based on initial work by Severin Gehwolf
2021-02-17 18:10:13 +00:00
Andrew Hughes
dd24375015
Update to jdk-11.0.10.0+9
...
Update release notes to 11.0.10.0+9
Switch to GA mode for final release.
2021-02-01 01:25:32 +00:00
Fedora Release Engineering
3102f36e5f
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
...
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2021-01-26 14:42:31 +00:00
Andrew Hughes
6f7c0e716b
Fix location and comment differences from RHEL.
2021-01-25 03:52:16 +00:00
Andrew Hughes
96d9c80a21
Following JDK-8005165, class data sharing can be enabled on all JIT architectures
2021-01-25 03:42:49 +00:00
Andrew Hughes
3fa84eff00
Include a test in the RPM to check the build has the correct vendor information.
2021-01-24 18:17:53 +00:00
Andrew Hughes
0b8fc9968d
Update build documentation to reflect this is java-11-openjdk, not java-1.8.0-openjdk
...
Remove redundant closure and immediate reopening of include_normal_build block.
2021-01-24 17:20:20 +00:00
Andrew Hughes
214b0d1ac4
Use RSA as default for keytool, as DSA is disabled in all crypto policies except LEGACY
...
Adjust RH1842572 patch due to context change from JDK-8213400
2021-01-24 03:24:41 +00:00
Andrew Hughes
4581efb916
Need to support noarch for creating source RPMs for non-scratch builds.
2021-01-23 22:53:38 +00:00
Andrew Hughes
10631d6261
Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
2021-01-23 05:07:29 +00:00
Andrew Hughes
876286a0d4
Use -march=i686 for x86 builds if -fcf-protection is detected (needs CMOV)
2021-01-19 03:59:55 +00:00