Test for java.security's existence in create-redhat-properties-files.bash

- Execute create-redhat-properties-files.bash with '-e' to exit on failure

Resolves: RHEL-142856

create-redhat-properties-files.bash

@@ -109,6 +109,8 @@ security.provider.8=
 keystore.type=pkcs12
 EOF
 
+# Make sure java.security exists before appending
+test -e "${SECURITY}"/java.security || ( echo "${SECURITY}/java.security not found" && false )
 cat >> "${SECURITY}"/java.security <<'EOF'
 
 #

java-25-openjdk.spec

@@ -2008,7 +2008,7 @@ function customisejdk() {
     if [ -d ${imagepath} ] ; then
         # Install crypto-policies FIPS configuration files and append
         # include line to java.security
-        bash -x %{SOURCE32} ${imagepath}/conf/security %{_libdir}/%{sdkdir -- ${suffix}}/libnssadapter.so
+        bash -ex %{SOURCE32} ${imagepath}/conf/security %{_libdir}/%{sdkdir -- ${suffix}}/libnssadapter.so
 
         # Use system-wide tzdata
         rm ${imagepath}/lib/tzdb.dat
@@ -2629,16 +2629,22 @@ exit 0
 %endif
 
 %changelog
+* Wed Jan 21 2026 Jiri Vanek <jvanek@redhat.com> - 1:25.0.2.0.10-1
+- Execute create-redhat-properties-files.bash with '-e' to exit on failure
+- Related: RHEL-142856
+
 * Mon Jan 12 2026 Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.2.0.10-1
 - Update to jdk-25.0.2+10 (GA)
 - Update release notes to 25.0.2+10
 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
 - Bump libpng version to 1.6.51 following JDK-8372534
 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch
+- Test for java.security's existence in create-redhat-properties-files.bash
 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
 - Resolves: RHEL-139577
 - Resolves: RHEL-143373
 - Resolves: RHEL-143368
+- Resolves: RHEL-142856
 
 * Mon Dec 08 2025 Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-2
 - Incorporate new FIPS patch for 25u