b267c4cf63
- Update to jdk-17+35, also known as jdk-17-ga. - Remove boot JDKs in favour of OpenJDK 17 build now in the buildroot. - Update buildjdkver to 17 so as to build with itself - Add possibility to disable system crypto policy - Add PR3695 to allow the system crypto policy to be turned off - Re-enable TestSecurityProperties after inclusion of PR3695 - Added gating.yaml - Fix patch rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch - Use the "reverse" build loop (debug first) as the main and only build loop to get more diagnostics. - Remove restriction on disabling product build, as debug packages no longer have javadoc packages. - Update to jdk-17+33, including JDWP fix and July 2021 CPU - Support the FIPS mode crypto policy (RH1655466) - Update RH1655466 FIPS patch with changes in OpenJDK 8 version. - SunPKCS11 runtime provider name is a concatenation of "SunPKCS11-" and the name in the config file. - Change nss.fips.cfg config name to "NSS-FIPS" to avoid confusion with nss.cfg. - No need to substitute path to nss.fips.cfg as java.security file supports a java.home variable. - Disable FIPS mode support unless com.redhat.fips is set to "true". - Use appropriate keystore types when in FIPS mode (RH1818909) - Enable alignment with FIPS crypto policy by default (-Dcom.redhat.fips=false to disable). - Disable TLSv1.3 when the FIPS crypto policy and the NSS-FIPS provider are in use (RH1860986) - Add explicit runtime dependency on NSS for the PKCS11 provider in FIPS mode - Move setup of JavaSecuritySystemConfiguratorAccess to Security class so it always occurs (RH1915071) - Detect FIPS using SECMOD_GetSystemFIPSEnabled in the new libsystemconf JDK library. - Minor code cleanups on FIPS detection patch and check for SECMOD_GetSystemFIPSEnabled in configure. - Remove unneeded Requires on NSS as it will now be dynamically linked and detected by RPM. - Add patch to disable non-FIPS crypto in the SUN and SunEC security providers. - Add patch to login to the NSS software token when in FIPS mode. - Fix unused function compiler warning found in systemconf.c - Extend the default security policy to accomodate PKCS11 accessing jdk.internal.access. - Add JDK-8272332 fix so we actually link against HarfBuzz. - Update release notes to document the major changes between OpenJDK 11 & 17. - Add FIPS patch to allow plain key import. - Allow plain key import to be disabled with -Dcom.redhat.fips.plainKeySupport=false - Patch syslookup.c so it actually has some code to be compiled into libsyslookup - alternatives creation moved to posttrans - Set LTS designator on RHEL, but not Fedora or EPEL. Related: RHEL-45216
158 lines
4.1 KiB
Bash
158 lines
4.1 KiB
Bash
#!/bin/sh
|
|
|
|
# Arguments: <JDK TREE> <MINIMAL|FULL>
|
|
TREE=${1}
|
|
TYPE=${2}
|
|
|
|
ZIP_SRC=src/java.base/share/native/libzip/zlib/
|
|
JPEG_SRC=src/java.desktop/share/native/libjavajpeg/
|
|
GIF_SRC=src/java.desktop/share/native/libsplashscreen/giflib/
|
|
PNG_SRC=src/java.desktop/share/native/libsplashscreen/libpng/
|
|
LCMS_SRC=src/java.desktop/share/native/liblcms/
|
|
|
|
if test "x${TREE}" = "x"; then
|
|
echo "$0 <JDK_TREE> (MINIMAL|FULL)";
|
|
exit 1;
|
|
fi
|
|
|
|
if test "x${TYPE}" = "x"; then
|
|
TYPE=minimal;
|
|
fi
|
|
|
|
if test "x${TYPE}" != "xminimal" -a "x${TYPE}" != "xfull"; then
|
|
echo "Type must be minimal or full";
|
|
exit 2;
|
|
fi
|
|
|
|
echo "Removing in-tree libraries from ${TREE}"
|
|
echo "Cleansing operation: ${TYPE}";
|
|
|
|
cd ${TREE}
|
|
|
|
echo "Removing built-in libs (they will be linked)"
|
|
|
|
# On full runs, allow for zlib having already been deleted by minimal
|
|
echo "Removing zlib"
|
|
if [ "x${TYPE}" = "xminimal" -a ! -d ${ZIP_SRC} ]; then
|
|
echo "${ZIP_SRC} does not exist. Refusing to proceed."
|
|
exit 1
|
|
fi
|
|
rm -rvf ${ZIP_SRC}
|
|
|
|
# Minimal is limited to just zlib so finish here
|
|
if test "x${TYPE}" = "xminimal"; then
|
|
echo "Finished.";
|
|
exit 0;
|
|
fi
|
|
|
|
echo "Removing libjpeg"
|
|
if [ ! -f ${JPEG_SRC}/jdhuff.c ]; then # some file that should definitely exist
|
|
echo "${JPEG_SRC} does not contain jpeg sources. Refusing to proceed."
|
|
exit 1
|
|
fi
|
|
|
|
rm -vf ${JPEG_SRC}/jcomapi.c
|
|
rm -vf ${JPEG_SRC}/jdapimin.c
|
|
rm -vf ${JPEG_SRC}/jdapistd.c
|
|
rm -vf ${JPEG_SRC}/jdcoefct.c
|
|
rm -vf ${JPEG_SRC}/jdcolor.c
|
|
rm -vf ${JPEG_SRC}/jdct.h
|
|
rm -vf ${JPEG_SRC}/jddctmgr.c
|
|
rm -vf ${JPEG_SRC}/jdhuff.c
|
|
rm -vf ${JPEG_SRC}/jdhuff.h
|
|
rm -vf ${JPEG_SRC}/jdinput.c
|
|
rm -vf ${JPEG_SRC}/jdmainct.c
|
|
rm -vf ${JPEG_SRC}/jdmarker.c
|
|
rm -vf ${JPEG_SRC}/jdmaster.c
|
|
rm -vf ${JPEG_SRC}/jdmerge.c
|
|
rm -vf ${JPEG_SRC}/jdphuff.c
|
|
rm -vf ${JPEG_SRC}/jdpostct.c
|
|
rm -vf ${JPEG_SRC}/jdsample.c
|
|
rm -vf ${JPEG_SRC}/jerror.c
|
|
rm -vf ${JPEG_SRC}/jerror.h
|
|
rm -vf ${JPEG_SRC}/jidctflt.c
|
|
rm -vf ${JPEG_SRC}/jidctfst.c
|
|
rm -vf ${JPEG_SRC}/jidctint.c
|
|
rm -vf ${JPEG_SRC}/jidctred.c
|
|
rm -vf ${JPEG_SRC}/jinclude.h
|
|
rm -vf ${JPEG_SRC}/jmemmgr.c
|
|
rm -vf ${JPEG_SRC}/jmemsys.h
|
|
rm -vf ${JPEG_SRC}/jmemnobs.c
|
|
rm -vf ${JPEG_SRC}/jmorecfg.h
|
|
rm -vf ${JPEG_SRC}/jpegint.h
|
|
rm -vf ${JPEG_SRC}/jpeglib.h
|
|
rm -vf ${JPEG_SRC}/jquant1.c
|
|
rm -vf ${JPEG_SRC}/jquant2.c
|
|
rm -vf ${JPEG_SRC}/jutils.c
|
|
rm -vf ${JPEG_SRC}/jcapimin.c
|
|
rm -vf ${JPEG_SRC}/jcapistd.c
|
|
rm -vf ${JPEG_SRC}/jccoefct.c
|
|
rm -vf ${JPEG_SRC}/jccolor.c
|
|
rm -vf ${JPEG_SRC}/jcdctmgr.c
|
|
rm -vf ${JPEG_SRC}/jchuff.c
|
|
rm -vf ${JPEG_SRC}/jchuff.h
|
|
rm -vf ${JPEG_SRC}/jcinit.c
|
|
rm -vf ${JPEG_SRC}/jconfig.h
|
|
rm -vf ${JPEG_SRC}/jcmainct.c
|
|
rm -vf ${JPEG_SRC}/jcmarker.c
|
|
rm -vf ${JPEG_SRC}/jcmaster.c
|
|
rm -vf ${JPEG_SRC}/jcparam.c
|
|
rm -vf ${JPEG_SRC}/jcphuff.c
|
|
rm -vf ${JPEG_SRC}/jcprepct.c
|
|
rm -vf ${JPEG_SRC}/jcsample.c
|
|
rm -vf ${JPEG_SRC}/jctrans.c
|
|
rm -vf ${JPEG_SRC}/jdtrans.c
|
|
rm -vf ${JPEG_SRC}/jfdctflt.c
|
|
rm -vf ${JPEG_SRC}/jfdctfst.c
|
|
rm -vf ${JPEG_SRC}/jfdctint.c
|
|
rm -vf ${JPEG_SRC}/jversion.h
|
|
rm -vf ${JPEG_SRC}/README
|
|
|
|
echo "Removing giflib"
|
|
if [ ! -d ${GIF_SRC} ]; then
|
|
echo "${GIF_SRC} does not exist. Refusing to proceed."
|
|
exit 1
|
|
fi
|
|
rm -rvf ${GIF_SRC}
|
|
|
|
echo "Removing libpng"
|
|
if [ ! -d ${PNG_SRC} ]; then
|
|
echo "${PNG_SRC} does not exist. Refusing to proceed."
|
|
exit 1
|
|
fi
|
|
rm -rvf ${PNG_SRC}
|
|
|
|
echo "Removing lcms"
|
|
if [ ! -d ${LCMS_SRC} ]; then
|
|
echo "${LCMS_SRC} does not exist. Refusing to proceed."
|
|
exit 1
|
|
fi
|
|
rm -vf ${LCMS_SRC}/cmscam02.c
|
|
rm -vf ${LCMS_SRC}/cmscgats.c
|
|
rm -vf ${LCMS_SRC}/cmscnvrt.c
|
|
rm -vf ${LCMS_SRC}/cmserr.c
|
|
rm -vf ${LCMS_SRC}/cmsgamma.c
|
|
rm -vf ${LCMS_SRC}/cmsgmt.c
|
|
rm -vf ${LCMS_SRC}/cmshalf.c
|
|
rm -vf ${LCMS_SRC}/cmsintrp.c
|
|
rm -vf ${LCMS_SRC}/cmsio0.c
|
|
rm -vf ${LCMS_SRC}/cmsio1.c
|
|
rm -vf ${LCMS_SRC}/cmslut.c
|
|
rm -vf ${LCMS_SRC}/cmsmd5.c
|
|
rm -vf ${LCMS_SRC}/cmsmtrx.c
|
|
rm -vf ${LCMS_SRC}/cmsnamed.c
|
|
rm -vf ${LCMS_SRC}/cmsopt.c
|
|
rm -vf ${LCMS_SRC}/cmspack.c
|
|
rm -vf ${LCMS_SRC}/cmspcs.c
|
|
rm -vf ${LCMS_SRC}/cmsplugin.c
|
|
rm -vf ${LCMS_SRC}/cmsps2.c
|
|
rm -vf ${LCMS_SRC}/cmssamp.c
|
|
rm -vf ${LCMS_SRC}/cmssm.c
|
|
rm -vf ${LCMS_SRC}/cmstypes.c
|
|
rm -vf ${LCMS_SRC}/cmsvirt.c
|
|
rm -vf ${LCMS_SRC}/cmswtpnt.c
|
|
rm -vf ${LCMS_SRC}/cmsxform.c
|
|
rm -vf ${LCMS_SRC}/lcms2.h
|
|
rm -vf ${LCMS_SRC}/lcms2_internal.h
|
|
rm -vf ${LCMS_SRC}/lcms2_plugin.h
|