OpenJDK Runtime Environment 11
Go to file
Andrew Hughes e4c9f84506 Support the FIPS mode crypto policy (RH1655466)
Update RH1655466 FIPS patch with changes in OpenJDK 8 version.
SunPKCS11 runtime provider name is a concatenation of "SunPKCS11-" and the name in the config file.
Change nss.fips.cfg config name to "NSS-FIPS" to avoid confusion with nss.cfg.
No need to substitute path to nss.fips.cfg as java.security file supports a java.home variable.
Disable FIPS mode support unless com.redhat.fips is set to "true".
Use appropriate keystore types when in FIPS mode (RH1818909)
Enable alignment with FIPS crypto policy by default (-Dcom.redhat.fips=false to disable).
Disable TLSv1.3 when the FIPS crypto policy and the NSS-FIPS provider are in use (RH1860986)
Add explicit runtime dependency on NSS for the PKCS11 provider in FIPS mode
Move setup of JavaSecuritySystemConfiguratorAccess to Security class so it always occurs (RH1915071)

Resolves: rhbz#1971689
2021-07-06 19:00:18 +01:00
.gitignore Update to jdk-11.0.11.0+9 2021-07-06 03:42:00 +01:00
CheckVendor.java Merged update from upstream sources 2021-01-25 02:38:01 +00:00
gating.yaml Add gating.yaml from RHEL 2021-06-02 12:59:08 +02:00
generate_source_tarball.sh Merged update from upstream sources 2021-01-15 12:16:00 +00:00
icedtea_sync.sh Update to jdk-11.0.11.0+9 2021-07-06 03:42:00 +01:00
java-11-openjdk.spec Support the FIPS mode crypto policy (RH1655466) 2021-07-06 19:00:18 +01:00
jconsole.desktop.in RHEL 9.0.0 Alpha bootstrap 2020-10-15 14:00:52 +02:00
NEWS Update to jdk-11.0.11.0+9 2021-07-06 03:42:00 +01:00
nss.cfg.in RHEL 9.0.0 Alpha bootstrap 2020-10-15 14:00:52 +02:00
nss.fips.cfg.in Support the FIPS mode crypto policy (RH1655466) 2021-07-06 19:00:18 +01:00
pr3694-rh1340845-support_fedora_rhel_system_crypto_policy.patch RHEL 9.0.0 Alpha bootstrap 2020-10-15 14:00:52 +02:00
pr3695-toggle_system_crypto_policy.patch RHEL 9.0.0 Alpha bootstrap 2020-10-15 14:00:52 +02:00
README.md RHEL 9.0.0 Alpha bootstrap 2020-10-15 14:00:52 +02:00
remove-intree-libraries.sh Update to jdk-11.0.11.0+9 2021-07-06 03:42:00 +01:00
rh649512-remove_uses_of_far_in_jpeg_libjpeg_turbo_1_4_compat_for_jdk10_and_up.patch RHEL 9.0.0 Alpha bootstrap 2020-10-15 14:00:52 +02:00
rh1648242-accessible_toolkit_crash_do_not_break_jvm.patch RHEL 9.0.0 Alpha bootstrap 2020-10-15 14:00:52 +02:00
rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch RHEL 9.0.0 Alpha bootstrap 2020-10-15 14:00:52 +02:00
rh1648644-java_access_bridge_privileged_security.patch RHEL 9.0.0 Alpha bootstrap 2020-10-15 14:00:52 +02:00
rh1655466-global_crypto_and_fips.patch Support the FIPS mode crypto policy (RH1655466) 2021-07-06 19:00:18 +01:00
rh1750419-redhat_alt_java.patch Merged update from upstream sources 2020-12-18 19:56:48 +00:00
rh1818909-fips_default_keystore_type.patch Support the FIPS mode crypto policy (RH1655466) 2021-07-06 19:00:18 +01:00
rh1842572-rsa_default_for_keytool.patch Merged update from upstream sources 2021-01-24 10:43:32 +00:00
rh1860986-disable_tlsv1.3_in_fips_mode.patch Support the FIPS mode crypto policy (RH1655466) 2021-07-06 19:00:18 +01:00
rh1915071-always_initialise_configurator_access.patch Support the FIPS mode crypto policy (RH1655466) 2021-07-06 19:00:18 +01:00
sources Update to jdk-11.0.11.0+9 2021-07-06 03:42:00 +01:00
TestCryptoLevel.java RHEL 9.0.0 Alpha bootstrap 2020-10-15 14:00:52 +02:00
TestECDSA.java RHEL 9.0.0 Alpha bootstrap 2020-10-15 14:00:52 +02:00
TestSecurityProperties.java RHEL 9.0.0 Alpha bootstrap 2020-10-15 14:00:52 +02:00
update_package.sh RHEL 9.0.0 Alpha bootstrap 2020-10-15 14:00:52 +02:00

Package of LTS OpenJDK 11 OpenJDK have release cadence of 6 months. but 3/4 of them are Short Term Supported for 6 months only. This package is designed to harbore them. Currently it is build on openJDK 11. LTSs (next is 15) will go as separate packages.

JDK11 is last LTS release of Java platform. It is bringing many cool improvements - http://openjdk.java.net/projects/jdk/11/ and is landing to your Fedora. Where it will be maintained for several years. You will always be allowed to install Used LTSs in build root, and alongside via alternatives.

See announcement: http://mail.openjdk.java.net/pipermail/discuss/2017-September/004281.html See java SIG plans: https://jvanek.fedorapeople.org/devconf/2018/changesInjavaReleaseProcess.pdf

https://fedoraproject.org/wiki/Changes/java-11-openjdk-TechPreview