Commit Graph

95 Commits

Author SHA1 Message Date
Andrew Hughes
3cabaae06c January 2022 security update to jdk 17.0.2+8
Rebase RH1995150 & RH1996182 patches following JDK-8275863 addition to module-info.java
Rename libsvml.so to libjsvml.so following JDK-8276025
Drop JDK-8276572 patch which is now upstream

Related: RHEL-45216
2024-07-31 05:35:27 +01:00
Andrew Hughes
62b11125c4 Sync desktop files with upstream IcedTea release 3.15.0 using new script
Related: RHEL-45216
2024-07-31 05:35:23 +01:00
Andrew Hughes
2ccfe310f5 Use 'sql:' prefix in nss.fips.cfg as F35+ no longer ship the legacy secmod.db file as part of nss
Related: RHEL-45216
2024-07-31 05:35:20 +01:00
Andrew Hughes
d4468088af October CPU update to jdk 17.0.1+12
Dropped commented-out source line
Drop JDK-8272332 patch now included upstream.

Related: RHEL-45216
2024-07-31 05:35:18 +01:00
Release Configuration Management
b267c4cf63 Import java-17-openjdk
- Update to jdk-17+35, also known as jdk-17-ga.
- Remove boot JDKs in favour of OpenJDK 17 build now in the buildroot.
- Update buildjdkver to 17 so as to build with itself
- Add possibility to disable system crypto policy
- Add PR3695 to allow the system crypto policy to be turned off
- Re-enable TestSecurityProperties after inclusion of PR3695
- Added gating.yaml
- Fix patch rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch
- Use the "reverse" build loop (debug first) as the main and only build loop to get more diagnostics.
- Remove restriction on disabling product build, as debug packages no longer have javadoc packages.
- Update to jdk-17+33, including JDWP fix and July 2021 CPU
- Support the FIPS mode crypto policy (RH1655466)
- Update RH1655466 FIPS patch with changes in OpenJDK 8 version.
- SunPKCS11 runtime provider name is a concatenation of "SunPKCS11-" and the name in the config file.
- Change nss.fips.cfg config name to "NSS-FIPS" to avoid confusion with nss.cfg.
- No need to substitute path to nss.fips.cfg as java.security file supports a java.home variable.
- Disable FIPS mode support unless com.redhat.fips is set to "true".
- Use appropriate keystore types when in FIPS mode (RH1818909)
- Enable alignment with FIPS crypto policy by default (-Dcom.redhat.fips=false to disable).
- Disable TLSv1.3 when the FIPS crypto policy and the NSS-FIPS provider are in use (RH1860986)
- Add explicit runtime dependency on NSS for the PKCS11 provider in FIPS mode
- Move setup of JavaSecuritySystemConfiguratorAccess to Security class so it always occurs (RH1915071)
- Detect FIPS using SECMOD_GetSystemFIPSEnabled in the new libsystemconf JDK library.
- Minor code cleanups on FIPS detection patch and check for SECMOD_GetSystemFIPSEnabled in configure.
- Remove unneeded Requires on NSS as it will now be dynamically linked and detected by RPM.
- Add patch to disable non-FIPS crypto in the SUN and SunEC security providers.
- Add patch to login to the NSS software token when in FIPS mode.
- Fix unused function compiler warning found in systemconf.c
- Extend the default security policy to accomodate PKCS11 accessing jdk.internal.access.
- Add JDK-8272332 fix so we actually link against HarfBuzz.
- Update release notes to document the major changes between OpenJDK 11 & 17.
- Add FIPS patch to allow plain key import.
- Allow plain key import to be disabled with -Dcom.redhat.fips.plainKeySupport=false
- Patch syslookup.c so it actually has some code to be compiled into libsyslookup
- alternatives creation moved to posttrans
- Set LTS designator on RHEL, but not Fedora or EPEL.

Related: RHEL-45216
2024-07-31 05:35:08 +01:00
Andrew Hughes
59b5d9120d Remove unwanted imported Fedora version
Related: RHEL-45216
2024-07-31 01:09:04 +01:00
Troy Dawson
57c20fec25 Bump release for June 2024 mass rebuild 2024-06-24 08:52:22 -07:00
Jiri
1a69408279 bumped to repack use 10.0.7 portables 2024-01-25 14:47:54 +01:00
Jiri
4350d7269f Revert "Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild"
This reverts commit 5b10511275.
2024-01-25 14:46:46 +01:00
Jiri
2aab410d24 Revert "Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild"
This reverts commit 54c3deb20c.
2024-01-25 14:46:35 +01:00
Fedora Release Engineering
54c3deb20c Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild 2024-01-24 23:10:23 +00:00
Fedora Release Engineering
5b10511275 Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild 2024-01-20 23:30:24 +00:00
Jiri
0baf1086e8 Using generated sources for nearly whole debuginfo
cpio: jdk-17.0.9+9/make/NONE: Cannot stat: No such file or directory
cpio: jdk-17.0.9+9/make/hb-buffer-deserialize-json.hh: Cannot stat: No such file or directory
cpio: jdk-17.0.9+9/make/hb-buffer-deserialize-json.rl: Cannot stat: No such file or directory
cpio: jdk-17.0.9+9/make/hb-buffer-deserialize-text-glyphs.hh: Cannot stat: No such file or directory
cpio: jdk-17.0.9+9/make/hb-buffer-deserialize-text-glyphs.rl: Cannot stat: No such file or directory
cpio: jdk-17.0.9+9/make/hb-buffer-deserialize-text-unicode.hh: Cannot stat: No such file or directory
cpio: jdk-17.0.9+9/make/hb-buffer-deserialize-text-unicode.rl: Cannot stat: No such file or directory
cpio: jdk-17.0.9+9/make/hb-number-parser.hh: Cannot stat: No such file or directory
cpio: jdk-17.0.9+9/make/hb-number-parser.rl: Cannot stat: No such file or directory
cpio: jdk-17.0.9+9/make/hb-ot-shaper-indic-machine.hh: Cannot stat: No such file or directory
cpio: jdk-17.0.9+9/make/hb-ot-shaper-indic-machine.rl: Cannot stat: No such file or directory
cpio: jdk-17.0.9+9/make/hb-ot-shaper-khmer-machine.hh: Cannot stat: No such file or directory
cpio: jdk-17.0.9+9/make/hb-ot-shaper-khmer-machine.rl: Cannot stat: No such file or directory
cpio: jdk-17.0.9+9/make/hb-ot-shaper-myanmar-machine.hh: Cannot stat: No such file or directory
cpio: jdk-17.0.9+9/make/hb-ot-shaper-myanmar-machine.rl: Cannot stat: No such file or directory
cpio: jdk-17.0.9+9/make/hb-ot-shaper-use-machine.hh: Cannot stat: No such file or directory
cpio: jdk-17.0.9+9/make/hb-ot-shaper-use-machine.rl: Cannot stat: No such file or directory
cpio: jdk-17.0.9+9/make/hotspot/adGlobals_aarch64.hpp: Cannot stat: No such file or directory
cpio: jdk-17.0.9+9/make/hotspot/ad_aarch64.cpp: Cannot stat: No such file or directory
cpio: jdk-17.0.9+9/make/hotspot/ad_aarch64.hpp: Cannot stat: No such file or directory
cpio: jdk-17.0.9+9/make/hotspot/ad_aarch64_clone.cpp: Cannot stat: No such file or directory
cpio: jdk-17.0.9+9/make/hotspot/ad_aarch64_expand.cpp: Cannot stat: No such file or directory
cpio: jdk-17.0.9+9/make/hotspot/ad_aarch64_format.cpp: Cannot stat: No such file or directory
cpio: jdk-17.0.9+9/make/hotspot/ad_aarch64_gen.cpp: Cannot stat: No such file or directory
cpio: jdk-17.0.9+9/make/hotspot/ad_aarch64_misc.cpp: Cannot stat: No such file or directory
cpio: jdk-17.0.9+9/make/hotspot/ad_aarch64_pipeline.cpp: Cannot stat: No such file or directory
cpio: jdk-17.0.9+9/make/hotspot/dfa_aarch64.cpp: Cannot stat: No such file or directory

adapted tests to jdk17 like stile
2023-12-19 16:10:14 +01:00
Jiri
3188e193a8 proeprly filing debugsources pkg
by addedd symlinks restructuring the structure for original build sources
  according to logs, some are still missing
  probably generated during the build, and thus not existing in prep,
  when the sources subpkg is created after patching
2023-12-09 10:58:05 +01:00
Jiri
b82a5a9bf2 updated to OpenJDK 17.0.9 (2023-10-17) 2023-11-26 21:52:48 +01:00
Yaakov Selkowitz
efb675a100 Fix flatpak build
java-X-openjdk-portable must not be rebuilt for flatpaks, nor do we want
to rebuild tzdata for tzdata-java, so it will be added to the runtimes.
Therefore, we need to take into account the possibility of different
prefixes for those compared to java-X-openjdk.
2023-09-29 11:33:45 -04:00
Jiri
4c3d474cf2 updated to security 17.0.8.0.7 2023-08-07 09:45:12 +02:00
Fedora Release Engineering
b662247477 Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2023-07-20 07:52:29 +00:00
Jiri
c0918045ac excluding classes_nocoops.jsa on i686 and arm32 2023-05-15 15:20:34 +02:00
Jiri
d7d5b23be5 rebuilding aginst new portables:
- returned lost nss.fips.cfg
- enabled all crypto
- added and applied, on demand, patch2003 jdk8305995-footprint_regression_from_jdk_8224957
2023-05-15 14:06:33 +02:00
Severin Gehwolf
d9f80ff6e8 Enable CDS on power64 2023-05-10 16:03:21 +00:00
Severin Gehwolf
1bfd567e4e Fix packaging of CDS archives
The JDK build includes CDS archives, classes.jsa and classes_nocoops.jsa
already since JEP 341. Executing -Xshare:dump in the headless post
script breaks AppCDS workflows using dynamic dumps since that relies
on the base CDS archive from the JDK to be unchanged.
2023-05-10 15:47:59 +02:00
Jiri Vanek
ef51acd369 faking build-id in libjsvml.so 2023-05-09 15:04:22 +02:00
Jiri
2d22979ec6 returned news and samples 2023-04-29 14:02:19 +02:00
Jiri
116daaca3d Fixed path to staticlibs 2023-04-29 12:21:52 +02:00
Jiri
39ab93d80a added unzip
required by javadoc processing, minor formatting
2023-04-29 12:09:10 +02:00
Jiri
b2ce8b46b3 Reoved unused generate source tarball 2023-04-29 09:02:44 +02:00
Jiri
ffc22f550e updated to 17.0.7.0.7 underlying portables
now untarring enforced version
2023-04-28 17:59:44 +02:00
Jiri Vanek
b0bcd88d07 using icons from source package
- providing full sources via src package
- requiring exact version.reelase of portables
- returned libsystemconf.so
2023-04-20 15:09:40 +02:00
Jiri Vanek
c2dca7868d Indentation and other comsetic changes 2023-04-20 13:28:39 +02:00
Petra Mikova
863677b546 Added changelog and bumped release for versioned requires 2023-02-09 14:10:31 +01:00
Petra Mikova
cbf3c1cb6b Repacked portable now requires CPU patched portables 2023-02-09 13:38:13 +01:00
Petra Mikova
cc9c6480e1 Removed unnecessary coments 2023-02-09 13:34:24 +01:00
Petra Mikova
2e7c9d5f57 Return libfreetype.so to resoluve requires during install
Fixed changelog
2023-02-09 13:20:48 +01:00
Petra Mikova
6531a6457b initial repacking
Removed many pre-steps, build requires and patching. Removed build.
added dependencies on portables
extracted portabels to BUILD
keep systemtap
todo, repack it properly
removed nss setup, enabled buildr and tuned "install"
check debuginfo for jre only
Print release
repacked portables
Remove javadoc.zip only for release build
2023-02-09 13:10:16 +01:00
Andrew Hughes
7ff15df48d Update to jdk-17.0.6.0+10
Update release notes to 17.0.6.0+10
Switch to GA mode for release
2023-01-26 01:00:16 +00:00
Fedora Release Engineering
2eadc2e3b7 Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2023-01-19 13:35:16 +00:00
Andrew Hughes
f5df7fac4a Update FIPS support to bring in latest changes
* OJ1357: Fix issue on FIPS with a SecurityManager in place
2023-01-13 19:38:48 +00:00
Andrew Hughes
0855917e97 Update to jdk-17.0.6+9
Update release notes to 17.0.6+9
Drop local copy of JDK-8293834 now this is upstream
Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
Update TestTranslations.java to test the new America/Ciudad_Juarez zone
2023-01-04 03:06:30 +00:00
Stephan Bergmann
3db7152324 Fix flatpak builds
...after
<6eee73b250>
"Update to jdk-11.0.16.1+1" added the TestTranslations.java "test to ensure
timezones can be translated":  Similar to the previous
<1ac4052b44>
"Fix flatpak builds", during a flatpak build of java-11-openjdk its
.../images/jdk/lib/tzdb.dat is a dangling symlink to
/app/share/javazi-1.8/tzdb.dat (but which will be a working symlink in at least
the assembled LibreOffice flatpak).  That causes execution of
TestTranslations.java during the build to fail due to a
java.io.FileNotFoundException when trying to access that tzdb.dat.  The easiest
fix appears to be to just not run that specific test for a flatpak build.
2023-01-04 02:40:14 +00:00
Jiri Vanek
c59629db64 Bumped release 2022-12-07 16:46:55 +01:00
Andrew Hughes
fc0191002b Update FIPS support to bring in latest changes
* Add nss.fips.cfg support to OpenJDK tree
* RH2117972: Extend the support for NSS DBs (PKCS11) in FIPS mode
* Remove forgotten dead code from RH2020290 and RH2104724

Drop local nss.fips.cfg.in handling now this is handled in the patched OpenJDK build
2022-11-23 16:51:55 +00:00
Andrew Hughes
9253c5fd01 Update to jdk-17.0.6+1
Update release notes to 17.0.6+1
Switch to EA mode for 17.0.6 pre-release builds.
Re-enable EA upstream status check now it is being actively maintained.
Drop JDK-8294357 (tzdata2022d) & JDK-8295173 (tzdata2022e) local patches which are now upstream
Bump tzdata requirement to 2022e now the package is available in Fedora
2022-11-09 02:57:25 +00:00
Andrew Hughes
c0f97cd3e3 Update to jdk-17.0.5+8 (GA)
Update release notes to 17.0.5+8 (GA)
Switch to GA mode for final release.
The stdc++lib, zlib & freetype options should always be set from the global, so they are not altered for staticlibs builds
Remove freetype sources along with zlib sources
2022-10-19 21:21:26 +01:00
Andrew Hughes
48de3d829a Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
Update CLDR data with Europe/Kyiv (JDK-8293834)
Drop JDK-8292223 patch which we found to be unnecessary
Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
2022-10-14 20:37:50 +01:00
Andrew Hughes
344ea34bdd Update to jdk-17.0.5+7
Update release notes to 17.0.5+7
2022-10-04 02:40:20 +01:00
Andrew Hughes
3e49d2c00a Update to jdk-17.0.5+1
Update release notes to 17.0.5+1
Switch to EA mode for 17.0.5 pre-release builds.
Bump HarfBuzz bundled version to 4.4.1 following JDK-8289853
Bump FreeType bundled version to 2.12.1 following JDK-8290334
2022-10-03 04:17:10 +01:00
Andrew Hughes
b6fe100065 Switch to static builds, reducing system dependencies and making build more portable 2022-09-01 02:59:35 +01:00
Andrew Hughes
ea9509f5ca Update FIPS support to bring in latest changes
* RH2048582: Support PKCS#12 keystores
* RH2020290: Support TLS 1.3 in FIPS mode
2022-08-29 04:59:50 +01:00
Andrew Hughes
5dd4fd8561 Update to jdk-17.0.4.1+1
Update release notes to 17.0.4.1+1
Add patch to provide translations for Europe/Kyiv added in tzdata2022b
Add test to ensure timezones can be translated
2022-08-21 04:32:49 +01:00