Commit Graph

177 Commits

Author SHA1 Message Date
Andrew Hughes
c73f8f24aa Update to jdk-11.0.12.0+1
Update release notes to 11.0.12.0+1
Switch to EA mode for 11.0.12 pre-release builds.
Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
2021-06-30 05:19:00 +01:00
Andrew Hughes
bd1d801cc3 Detect FIPS using SECMOD_GetSystemFIPSEnabled in the new libsystemconf JDK library.
Minor code cleanups on FIPS detection patch and check for SECMOD_GetSystemFIPSEnabled in configure.
Remove unneeded Requires on NSS as it will now be dynamically linked and detected by RPM.
2021-06-09 03:07:29 +01:00
Andrew Hughes
c96e1e74e2 Support the FIPS mode crypto policy (RH1655466)
Update RH1655466 FIPS patch with changes in OpenJDK 8 version.
SunPKCS11 runtime provider name is a concatenation of "SunPKCS11-" and the name in the config file.
Change nss.fips.cfg config name to "NSS-FIPS" to avoid confusion with nss.cfg.
No need to substitute path to nss.fips.cfg as java.security file supports a java.home variable.
Disable FIPS mode support unless com.redhat.fips is set to "true".
Use appropriate keystore types when in FIPS mode (RH1818909)
Enable alignment with FIPS crypto policy by default (-Dcom.redhat.fips=false to disable).
Disable TLSv1.3 when the FIPS crypto policy and the NSS-FIPS provider are in use (RH1860986)
Add explicit runtime dependency on NSS for the PKCS11 provider in FIPS mode
Move setup of JavaSecuritySystemConfiguratorAccess to Security class so it always occurs (RH1915071)

Resolves: rhbz#1830090
2021-06-02 17:54:48 +01:00
Jiri Vanek
0eeb4a6e13 removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction 2021-05-07 14:52:46 +02:00
Severin Gehwolf
aca26b36f4 Fix bogus date in changelog 2021-04-30 17:42:55 +02:00
Severin Gehwolf
4b607408ff Remove -fcommon work-around
OpenJDK 11 code has been fixed with and no longer
needs the -fcommon workaround. Remove the option as
this could potentially mask code issues.
2021-04-30 17:41:18 +02:00
Jiri
2adbf848e0 Adapted to rpm 4.17 and cjc 4.0
As rpm 4.17 dropped arg from varaibale table, cjc now have to be sued as
module. cjc 4.0 was converted to module
2021-04-29 16:59:13 +02:00
Andrew Hughes
16a1b06e71 Update to jdk-11.0.11.0+9
Update release notes to 11.0.11.0+9
Switch to GA mode for final release.
Require tzdata 2021a to match upstream change JDK-8260356
2021-04-22 02:32:07 +01:00
Stephan Bergmann
c45ae1042c Disable copy-jdk-configs for Flatpak builds
There does not appear to be any value in having copy-jdk-config in Flatpak
builds (where a given Flatpak bundles one specific JDK, so no need for a
"Utility script to transfer JDKs configuration files between updates or for
archiving.")

And at least when trying to do a LibreOffice Flatpak build from Fedora 34 RPM
specs (which includes java-11-openjdk among its components), the #!/usr/bin/lua
shebang in copy_jdk_configs.lua would have caused a requirement on
/usr/bin/lua, but which a lua RPM bundled in the Flatpak would not provide (as
it would provide /app/bin/lua instead).  And the easiest way to work around that
issue is to just disable the unnecessary copy-jdk-configs.
2021-04-20 08:52:48 +02:00
Andrew Hughes
5797fe9b4d Update to jdk-11.0.11.0+7
Update release notes to 11.0.11.0+7
2021-04-12 08:02:15 +01:00
Andrew Hughes
18e3f8cea4 Update to jdk-11.0.11.0+6
Update release notes to 11.0.11.0+6
2021-04-11 02:33:30 +01:00
Andrew Hughes
cb21ce7dd2 Update to jdk-11.0.11.0+5
Update release notes to 11.0.11.0+5
2021-04-06 20:37:58 +01:00
Andrew Hughes
23641ef4be Update tapsets from IcedTea 6.x repository with fix for JDK-8015774 changes (_heap->_heaps)
Update icedtea_sync.sh with a VCS mode that retrieves sources from a Mercurial repository
2021-03-29 17:05:58 +01:00
Andrew Hughes
84395ae871 Update to jdk-11.0.11.0+4
Update release notes to 11.0.11.0+4
2021-03-29 16:59:46 +01:00
Andrew Hughes
2a79062fb8 Fix issue where CheckVendor.java test erroneously passes when it should fail.
Add proper quoting so '&' is not treated as a special character by the shell.
2021-03-29 04:12:34 +01:00
Andrew Hughes
fb9cc46325 Update to jdk-11.0.11.0+3
Update release notes to 11.0.11.0+3
Remove upstreamed patch JDK-8259949
2021-03-09 18:46:53 +00:00
Andrew Hughes
d4c0bdce70 Update to jdk-11.0.11.0+2
Update release notes to 11.0.11.0+2
2021-03-03 02:25:51 +00:00
Andrew Hughes
e209f3da9e Update to jdk-11.0.11.0+1
Update release notes to 11.0.11.0+1
Switch to EA mode for 11.0.11 pre-release builds.
Require tzdata 2020f to match upstream change JDK-8259048
2021-02-24 03:05:11 +00:00
Andrew Hughes
7997be64b6 Hardcode /usr/sbin/alternatives for Flatpak builds
/usr/sbin/alternatives is not under the Flatpak build's %{_prefix},
which is set to /app.

(See <https://pagure.io/packaging-committee/issue/848> "Clarify the
use of path macros with respect to build dependencies").

Found when trying to do a LibreOffice Flatpak build from RHEL RPM
specs, which includes java-1.8.0-openjdk among its components.
2021-02-19 03:15:08 +00:00
Andrew Hughes
affa8f56ef Perform static library build on a separate source tree with bundled image libraries
Make static library build optional
Based on initial work by Severin Gehwolf
2021-02-17 18:10:13 +00:00
Andrew Hughes
dd24375015 Update to jdk-11.0.10.0+9
Update release notes to 11.0.10.0+9
Switch to GA mode for final release.
2021-02-01 01:25:32 +00:00
Fedora Release Engineering
3102f36e5f - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2021-01-26 14:42:31 +00:00
Andrew Hughes
6f7c0e716b Fix location and comment differences from RHEL. 2021-01-25 03:52:16 +00:00
Andrew Hughes
96d9c80a21 Following JDK-8005165, class data sharing can be enabled on all JIT architectures 2021-01-25 03:42:49 +00:00
Andrew Hughes
3fa84eff00 Include a test in the RPM to check the build has the correct vendor information. 2021-01-24 18:17:53 +00:00
Andrew Hughes
0b8fc9968d Update build documentation to reflect this is java-11-openjdk, not java-1.8.0-openjdk
Remove redundant closure and immediate reopening of include_normal_build block.
2021-01-24 17:20:20 +00:00
Andrew Hughes
214b0d1ac4 Use RSA as default for keytool, as DSA is disabled in all crypto policies except LEGACY
Adjust RH1842572 patch due to context change from JDK-8213400
2021-01-24 03:24:41 +00:00
Andrew Hughes
4581efb916 Need to support noarch for creating source RPMs for non-scratch builds. 2021-01-23 22:53:38 +00:00
Andrew Hughes
10631d6261 Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64) 2021-01-23 05:07:29 +00:00
Andrew Hughes
876286a0d4 Use -march=i686 for x86 builds if -fcf-protection is detected (needs CMOV) 2021-01-19 03:59:55 +00:00
Andrew Hughes
7f58eb6adf Update to jdk-11.0.10.0+8
Update release notes to 11.0.10.0+8.
Update tarball generation script to use PR3818 which handles JDK-8171279 changes
Drop JDK-8250861 as applied upstream.
2021-01-15 05:18:00 +00:00
Tom Stellard
4824868f52 Add BuildRequires: make
https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot
2021-01-05 15:32:46 +00:00
Jiri Vanek
452185ed63 Fixed typo in variable 2021-01-04 12:06:40 +01:00
Andrew Hughes
e474513f04 Update to jdk-11.0.10.0+1
Update release notes to 11.0.10.0+1
Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with RHEL version.
Cleanup debug package descriptions and version number placement.
Switch to EA mode for 11.0.10 pre-release builds.
Drop JDK-8222286 & JDK-8254177 as applied upstream
Use system harfbuzz now this is supported.
2020-12-23 08:18:45 +00:00
Jiri
3343ca44a4 fixed missing condition for fastdebug packages being counted as debug ones 2020-12-22 11:02:28 +01:00
Jiri
2e2947560c removed lib-style provides for fastdebug_suffix_unquoted 2020-12-20 16:16:23 +01:00
Jiri
4327dc9b52 Added few missing majorver into descriptions 2020-12-20 12:53:09 +01:00
Jiri
edadb626bc Introduced fastdebug build cycle and subpackages 2020-12-20 09:40:12 +01:00
Jiri Vanek
cef412cef7 Added checks and restrictions around alt-java 2020-12-18 15:25:39 +01:00
Jiri
9dd85aba4b Fixes comment for speculative store bypass patch 2020-12-07 20:05:31 +01:00
Jiri
3ad7305a74 Replaced alt-java palceholder by real pathced alt-java 2020-12-01 14:13:12 +01:00
Jiri
b1fa8704ee Create a copy of java as alt-java with alternatives and man pages
- java-11-openjdk doesn't have a JRE tree, so don't try and copy alt-java there...
2020-11-23 22:00:42 +01:00
Andrew Hughes
fadbaad5b8 Update release notes for 11.0.9.1 release. 2020-11-06 07:07:24 +00:00
Severin Gehwolf
a0e5d76a58 Update to jdk-11.0.9.1+1
This adds a single patch for JDK-8250861. A regression introduced
with 11.0.9+11.

RPM version stays as-is. Release bump only.
2020-11-05 10:14:02 +01:00
Andrew Hughes
bc920b44c4 Move all license files to NVR-specific JVM directory.
This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
2020-10-30 05:56:45 +00:00
Andrew Hughes
5f592b0eda Update to jdk-11.0.9+11
Update release notes for 11.0.9 release.
Add backport of JDK-8254177 to update to tzdata 2020b
Require tzdata 2020b due to resource changes in JDK-8254177
Fix directory ownership of static-libs package
2020-10-21 00:49:38 +00:00
Andrew Hughes
6b7cad5e57 Update to jdk-11.0.9+10 (EA) 2020-10-05 05:38:49 +00:00
Andrew Hughes
67ffad42bc Update to jdk-11.0.9+9 (EA) 2020-10-05 03:03:08 +00:00
Andrew Hughes
3559b479ed Update to jdk-11.0.9+8 (EA) 2020-10-01 02:22:15 +00:00
Andrew Hughes
e2ed7be248 Update to jdk-11.0.9+7 (EA) 2020-09-28 05:25:28 +00:00