Commit Graph

257 Commits

Author SHA1 Message Date
Andrew Hughes
9a3935f9ea Fix FIPS issues in native code and with initialisation of java.security.Security 2022-01-18 02:21:22 +00:00
Andrew Hughes
75de074e84 Sync gdb test with java-1.8.0-openjdk and disable for now until gdb is fixed. 2022-01-17 00:41:46 +00:00
Andrew Hughes
97bfebb41c Update to jdk-11.0.14.0+8
Update release notes to 11.0.14.0+8
2022-01-16 04:02:28 +00:00
Andrew Hughes
2652be95f2 Update to jdk-11.0.14.0+1
Update release notes to 11.0.14.0+1
Switch to EA mode for 11.0.14 pre-release builds.
Rename blacklisted.certs to blocked.certs following JDK-8253866
Rebase RH1996182 login patch and drop redundant security policy extension after JDK-8269034
2021-12-13 05:18:54 +00:00
Andrew Hughes
3aa600bac9 Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. 2021-11-08 00:49:48 +00:00
Severin Gehwolf
633d5f0b03 Use 'sql:' prefix in nss.fips.cfg
Fedora 35 and better no longer ship the legacy
secmod.db file as part of the nss package. Explicitly
tell OpenJDK to use sqlite-based sec mode.

Resolves: RHBZ#2019555
2021-11-05 14:42:59 +01:00
Jiri Vanek
13b0ed6aba Added missing endif/if so javadoc is not tied with javadoc-zip 2021-11-04 20:52:16 +01:00
Jiri Vanek
2bfd45717e Fixed comment of for slowdebug to correct any debug 2021-11-04 20:51:03 +01:00
Jiri Vanek
a838289066 Replaced hardcoded 11 by featurever where apporpriate 2021-11-04 20:50:22 +01:00
Andrew Hughes
b6f1dacc01 Reduce disk footprint by removing build artifacts by default. 2021-10-26 16:43:24 +01:00
Andrew Hughes
71fb59352f Update to jdk-11.0.12.0+8
Update release notes to 11.0.12.0+8
Switch to GA mode for final release.
2021-10-20 01:19:40 +01:00
Andrew Hughes
afd7cc8846 Update to jdk-11.0.13.0+7
Update release notes to 11.0.13.0+7
2021-10-12 01:56:51 +01:00
Andrew Hughes
020aa81de3 Update to jdk-11.0.13.0+1
Update release notes to 11.0.13.0+1
Update tarball generation script to use git following OpenJDK 11u's move to github
Switch to EA mode for 11.0.13 pre-release builds.
Remove "-clean" suffix as no 11.0.13 builds are unclean.
Drop JDK-8269668 patch which is now applied upstream.
2021-10-12 00:18:06 +01:00
Andrew Hughes
ca39249070 Add patch to allow plain key import
Allow plain key import to be disabled with -Dcom.redhat.fips.plainKeySupport=false
2021-10-09 22:53:28 +01:00
Andrew Hughes
ad715cbd7d Restructure the build so a minimal initial build is then used for the final build (with docs)
This reduces pressure on the system JDK and ensures the JDK being built can do a full build
2021-10-04 17:57:15 +01:00
Andrew Hughes
83375279df Add patch to login to the NSS software token when in FIPS mode.
Extend the default security policy to accomodate PKCS11 accessing jdk.internal.misc.
2021-09-06 01:02:37 +01:00
Jiri Vanek
e782dfa8d3 added posttrans hook which persist sanity of dir->symlink
in case of udpate from ancient versions
2021-09-02 17:59:00 +02:00
Jiri Vanek
a7de280fe0 minor cosmetic improvements to make spec more comparable between variants 2021-09-02 17:44:53 +02:00
Jiri Vanek
5854bfce04 Fixed date 2021-08-31 17:42:49 +02:00
Jiri Vanek
1d49cce8be Bumped release to have set of two packages with posts change 2021-08-31 16:50:08 +02:00
Jiri Vanek
f2d7186c1f alternatives creation moved to posttrans
Thus fixing the old reisntall issue:
https://bugzilla.redhat.com/show_bug.cgi?id=1200302
https://bugzilla.redhat.com/show_bug.cgi?id=1976053
2021-08-30 16:21:11 +02:00
Andrew Hughes
5184e9134e Remove non-Free test from source tarball. 2021-08-09 02:15:00 +01:00
Severin Gehwolf
e2848ca819 Fix java.library.path issue on aarch64 (JDK-8269668)
Resolves: rhbz#1977671
2021-07-28 19:22:14 +01:00
Fedora Release Engineering
c40dc6eb2e - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2021-07-22 08:56:53 +00:00
Andrew Hughes
ca281c8fe6 Update to jdk-11.0.12.0+7
Update release notes to 11.0.12.0+7
Switch to GA mode for final release.
2021-07-21 05:57:34 +01:00
Andrew Hughes
f0bef6ebc0 Update to jdk-11.0.12.0+6
Update release notes to 11.0.12.0+6
Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
2021-07-09 04:24:11 +01:00
Andrew Hughes
f0e35f6c1a Update to jdk-11.0.12.0+4
Update release notes to 11.0.12.0+4
Correct bug ID JDK-8264846 to intended ID of JDK-8264848
2021-07-08 05:42:02 +01:00
Andrew Hughes
d13c101ca5 Update to jdk-11.0.12.0+3
Update release notes to 11.0.12.0+3
2021-07-07 06:47:21 +01:00
Andrew Hughes
bcc8874fb1 Use the "reverse" build loop (debug first) as the main and only build loop to get more diagnostics.
Remove restriction on disabling product build, as debug packages no longer have javadoc packages.
2021-07-02 17:55:19 +01:00
Andrew Hughes
0ff03bc290 Update to jdk-11.0.12.0+2
Update release notes to 11.0.12.0+2
2021-07-02 17:45:38 +01:00
Andrew Hughes
c73f8f24aa Update to jdk-11.0.12.0+1
Update release notes to 11.0.12.0+1
Switch to EA mode for 11.0.12 pre-release builds.
Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
2021-06-30 05:19:00 +01:00
Andrew Hughes
bd1d801cc3 Detect FIPS using SECMOD_GetSystemFIPSEnabled in the new libsystemconf JDK library.
Minor code cleanups on FIPS detection patch and check for SECMOD_GetSystemFIPSEnabled in configure.
Remove unneeded Requires on NSS as it will now be dynamically linked and detected by RPM.
2021-06-09 03:07:29 +01:00
Andrew Hughes
c96e1e74e2 Support the FIPS mode crypto policy (RH1655466)
Update RH1655466 FIPS patch with changes in OpenJDK 8 version.
SunPKCS11 runtime provider name is a concatenation of "SunPKCS11-" and the name in the config file.
Change nss.fips.cfg config name to "NSS-FIPS" to avoid confusion with nss.cfg.
No need to substitute path to nss.fips.cfg as java.security file supports a java.home variable.
Disable FIPS mode support unless com.redhat.fips is set to "true".
Use appropriate keystore types when in FIPS mode (RH1818909)
Enable alignment with FIPS crypto policy by default (-Dcom.redhat.fips=false to disable).
Disable TLSv1.3 when the FIPS crypto policy and the NSS-FIPS provider are in use (RH1860986)
Add explicit runtime dependency on NSS for the PKCS11 provider in FIPS mode
Move setup of JavaSecuritySystemConfiguratorAccess to Security class so it always occurs (RH1915071)

Resolves: rhbz#1830090
2021-06-02 17:54:48 +01:00
Jiri Vanek
0eeb4a6e13 removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction 2021-05-07 14:52:46 +02:00
Severin Gehwolf
aca26b36f4 Fix bogus date in changelog 2021-04-30 17:42:55 +02:00
Severin Gehwolf
4b607408ff Remove -fcommon work-around
OpenJDK 11 code has been fixed with and no longer
needs the -fcommon workaround. Remove the option as
this could potentially mask code issues.
2021-04-30 17:41:18 +02:00
Jiri
2adbf848e0 Adapted to rpm 4.17 and cjc 4.0
As rpm 4.17 dropped arg from varaibale table, cjc now have to be sued as
module. cjc 4.0 was converted to module
2021-04-29 16:59:13 +02:00
Andrew Hughes
16a1b06e71 Update to jdk-11.0.11.0+9
Update release notes to 11.0.11.0+9
Switch to GA mode for final release.
Require tzdata 2021a to match upstream change JDK-8260356
2021-04-22 02:32:07 +01:00
Stephan Bergmann
c45ae1042c Disable copy-jdk-configs for Flatpak builds
There does not appear to be any value in having copy-jdk-config in Flatpak
builds (where a given Flatpak bundles one specific JDK, so no need for a
"Utility script to transfer JDKs configuration files between updates or for
archiving.")

And at least when trying to do a LibreOffice Flatpak build from Fedora 34 RPM
specs (which includes java-11-openjdk among its components), the #!/usr/bin/lua
shebang in copy_jdk_configs.lua would have caused a requirement on
/usr/bin/lua, but which a lua RPM bundled in the Flatpak would not provide (as
it would provide /app/bin/lua instead).  And the easiest way to work around that
issue is to just disable the unnecessary copy-jdk-configs.
2021-04-20 08:52:48 +02:00
Andrew Hughes
5797fe9b4d Update to jdk-11.0.11.0+7
Update release notes to 11.0.11.0+7
2021-04-12 08:02:15 +01:00
Andrew Hughes
18e3f8cea4 Update to jdk-11.0.11.0+6
Update release notes to 11.0.11.0+6
2021-04-11 02:33:30 +01:00
Andrew Hughes
cb21ce7dd2 Update to jdk-11.0.11.0+5
Update release notes to 11.0.11.0+5
2021-04-06 20:37:58 +01:00
Andrew Hughes
23641ef4be Update tapsets from IcedTea 6.x repository with fix for JDK-8015774 changes (_heap->_heaps)
Update icedtea_sync.sh with a VCS mode that retrieves sources from a Mercurial repository
2021-03-29 17:05:58 +01:00
Andrew Hughes
84395ae871 Update to jdk-11.0.11.0+4
Update release notes to 11.0.11.0+4
2021-03-29 16:59:46 +01:00
Andrew Hughes
2a79062fb8 Fix issue where CheckVendor.java test erroneously passes when it should fail.
Add proper quoting so '&' is not treated as a special character by the shell.
2021-03-29 04:12:34 +01:00
Andrew Hughes
fb9cc46325 Update to jdk-11.0.11.0+3
Update release notes to 11.0.11.0+3
Remove upstreamed patch JDK-8259949
2021-03-09 18:46:53 +00:00
Andrew Hughes
d4c0bdce70 Update to jdk-11.0.11.0+2
Update release notes to 11.0.11.0+2
2021-03-03 02:25:51 +00:00
Andrew Hughes
e209f3da9e Update to jdk-11.0.11.0+1
Update release notes to 11.0.11.0+1
Switch to EA mode for 11.0.11 pre-release builds.
Require tzdata 2020f to match upstream change JDK-8259048
2021-02-24 03:05:11 +00:00
Andrew Hughes
7997be64b6 Hardcode /usr/sbin/alternatives for Flatpak builds
/usr/sbin/alternatives is not under the Flatpak build's %{_prefix},
which is set to /app.

(See <https://pagure.io/packaging-committee/issue/848> "Clarify the
use of path macros with respect to build dependencies").

Found when trying to do a LibreOffice Flatpak build from RHEL RPM
specs, which includes java-1.8.0-openjdk among its components.
2021-02-19 03:15:08 +00:00
Andrew Hughes
affa8f56ef Perform static library build on a separate source tree with bundled image libraries
Make static library build optional
Based on initial work by Severin Gehwolf
2021-02-17 18:10:13 +00:00
Andrew Hughes
dd24375015 Update to jdk-11.0.10.0+9
Update release notes to 11.0.10.0+9
Switch to GA mode for final release.
2021-02-01 01:25:32 +00:00
Fedora Release Engineering
3102f36e5f - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2021-01-26 14:42:31 +00:00
Andrew Hughes
6f7c0e716b Fix location and comment differences from RHEL. 2021-01-25 03:52:16 +00:00
Andrew Hughes
96d9c80a21 Following JDK-8005165, class data sharing can be enabled on all JIT architectures 2021-01-25 03:42:49 +00:00
Andrew Hughes
3fa84eff00 Include a test in the RPM to check the build has the correct vendor information. 2021-01-24 18:17:53 +00:00
Andrew Hughes
0b8fc9968d Update build documentation to reflect this is java-11-openjdk, not java-1.8.0-openjdk
Remove redundant closure and immediate reopening of include_normal_build block.
2021-01-24 17:20:20 +00:00
Andrew Hughes
214b0d1ac4 Use RSA as default for keytool, as DSA is disabled in all crypto policies except LEGACY
Adjust RH1842572 patch due to context change from JDK-8213400
2021-01-24 03:24:41 +00:00
Andrew Hughes
4581efb916 Need to support noarch for creating source RPMs for non-scratch builds. 2021-01-23 22:53:38 +00:00
Andrew Hughes
10631d6261 Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64) 2021-01-23 05:07:29 +00:00
Andrew Hughes
876286a0d4 Use -march=i686 for x86 builds if -fcf-protection is detected (needs CMOV) 2021-01-19 03:59:55 +00:00
Andrew Hughes
7f58eb6adf Update to jdk-11.0.10.0+8
Update release notes to 11.0.10.0+8.
Update tarball generation script to use PR3818 which handles JDK-8171279 changes
Drop JDK-8250861 as applied upstream.
2021-01-15 05:18:00 +00:00
Tom Stellard
4824868f52 Add BuildRequires: make
https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot
2021-01-05 15:32:46 +00:00
Jiri Vanek
452185ed63 Fixed typo in variable 2021-01-04 12:06:40 +01:00
Andrew Hughes
e474513f04 Update to jdk-11.0.10.0+1
Update release notes to 11.0.10.0+1
Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with RHEL version.
Cleanup debug package descriptions and version number placement.
Switch to EA mode for 11.0.10 pre-release builds.
Drop JDK-8222286 & JDK-8254177 as applied upstream
Use system harfbuzz now this is supported.
2020-12-23 08:18:45 +00:00
Jiri
3343ca44a4 fixed missing condition for fastdebug packages being counted as debug ones 2020-12-22 11:02:28 +01:00
Jiri
2e2947560c removed lib-style provides for fastdebug_suffix_unquoted 2020-12-20 16:16:23 +01:00
Jiri
4327dc9b52 Added few missing majorver into descriptions 2020-12-20 12:53:09 +01:00
Jiri
edadb626bc Introduced fastdebug build cycle and subpackages 2020-12-20 09:40:12 +01:00
Jiri Vanek
cef412cef7 Added checks and restrictions around alt-java 2020-12-18 15:25:39 +01:00
Jiri
9dd85aba4b Fixes comment for speculative store bypass patch 2020-12-07 20:05:31 +01:00
Jiri
3ad7305a74 Replaced alt-java palceholder by real pathced alt-java 2020-12-01 14:13:12 +01:00
Jiri
b1fa8704ee Create a copy of java as alt-java with alternatives and man pages
- java-11-openjdk doesn't have a JRE tree, so don't try and copy alt-java there...
2020-11-23 22:00:42 +01:00
Andrew Hughes
fadbaad5b8 Update release notes for 11.0.9.1 release. 2020-11-06 07:07:24 +00:00
Severin Gehwolf
a0e5d76a58 Update to jdk-11.0.9.1+1
This adds a single patch for JDK-8250861. A regression introduced
with 11.0.9+11.

RPM version stays as-is. Release bump only.
2020-11-05 10:14:02 +01:00
Andrew Hughes
bc920b44c4 Move all license files to NVR-specific JVM directory.
This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
2020-10-30 05:56:45 +00:00
Andrew Hughes
5f592b0eda Update to jdk-11.0.9+11
Update release notes for 11.0.9 release.
Add backport of JDK-8254177 to update to tzdata 2020b
Require tzdata 2020b due to resource changes in JDK-8254177
Fix directory ownership of static-libs package
2020-10-21 00:49:38 +00:00
Andrew Hughes
6b7cad5e57 Update to jdk-11.0.9+10 (EA) 2020-10-05 05:38:49 +00:00
Andrew Hughes
67ffad42bc Update to jdk-11.0.9+9 (EA) 2020-10-05 03:03:08 +00:00
Andrew Hughes
3559b479ed Update to jdk-11.0.9+8 (EA) 2020-10-01 02:22:15 +00:00
Andrew Hughes
e2ed7be248 Update to jdk-11.0.9+7 (EA) 2020-09-28 05:25:28 +00:00
Severin Gehwolf
74b1906293 Update static-libs packaging to new layout 2020-09-15 15:42:26 +02:00
Andrew Hughes
2a70366ba7 Update to jdk-11.0.9+6 (EA)
Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334

Resolves: rhbz#1869017
2020-09-15 13:07:43 +00:00
Andrew Hughes
2243b9c568 Update to jdk-11.0.9+5 (EA) 2020-09-15 03:11:11 +00:00
Andrew Hughes
3216606134 Update to jdk-11.0.9+4 (EA) 2020-09-04 16:36:26 +00:00
Andrew Hughes
a9d34fe47e Update to jdk-11.0.9+3 (EA) 2020-08-28 06:15:16 +00:00
Andrew Hughes
b981579504 Update to jdk-11.0.9+2 (EA)
With Shenandoah now upstream in OpenJDK 11, we can use jdk-updates/jdk11 directly
2020-08-13 20:08:18 +00:00
Andrew Hughes
d76f241e65 Cleanup architecture and JVM feature handling in preparation for using upstreamed Shenandoah. 2020-08-11 19:00:36 +00:00
Andrew Hughes
952bfa78b2 Update to shenandoah-jdk-11.0.9+1 (EA)
Switch to EA mode for 11.0.9 pre-release builds.
Drop JDK-8247874 backport now applied upstream.
JDK-8245832 increases the set of static libraries, so try and include them all with a wildcard.
2020-08-09 21:41:08 +00:00
Severin Gehwolf
b6bbc18e98 Disable LTO for a working f33 build 2020-07-29 18:16:23 +02:00
Fedora Release Engineering
2e6db5f90c - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-07-28 02:10:21 +00:00
Andrew Hughes
36133df273 Update to shenandoah-jdk-11.0.8+10 (GA)
Switch to GA mode for final release.
Update release notes with last minute fix (JDK-8248505).
2020-07-17 14:10:43 +00:00
Andrew Hughes
e718225bd1 Update to shenandoah-jdk-11.0.8+9 (EA)
Update release notes for 11.0.8 release.
2020-07-17 01:16:04 +00:00
Jiri
a3184a2c71 Revert "Rebuilt for JDK-11"
This reverts commit af4e2ba63d.
2020-07-10 13:15:45 +02:00
Jiri
af4e2ba63d Rebuilt for JDK-11 2020-07-10 11:39:48 +02:00
Jiri
0ba272cf22 Moving to BECOME system JDK 2020-07-09 17:05:45 +02:00
Andrew Hughes
61d486f627 Fix changes in Provides from system_jdk support.
Re-introduce java-openjdk-src & java-openjdk-demo for system_jdk builds.
Fix accidental renaming of java-openjdk-devel to java-devel-openjdk.
2020-07-09 14:22:52 +00:00
Andrew Hughes
5aa1da8fe9 Fix ChangeLog ordering issues, caused by recent merges. 2020-07-05 22:31:16 +00:00
Andrew Hughes
b976c137d0 Update to shenandoah-jdk-11.0.8+8 (EA) 2020-07-05 19:58:57 +00:00
Andrew Hughes
7621c1515f Update to shenandoah-jdk-11.0.8+7 (EA) 2020-07-04 23:31:57 +00:00
Andrew Hughes
e6ca779c69 Update to shenandoah-jdk-11.0.8+6 (EA) 2020-07-02 11:41:39 +00:00