# RPM conditionals so as to be able to dynamically produce

# slowdebug/release builds. See:

# http://rpm.org/user_doc/conditional_builds.html

#

# Examples:

#

# Produce release, fastdebug *and* slowdebug builds on x86_64 (default):

# $ rpmbuild -ba java-1.8.0-openjdk.spec

#

# Produce only release builds (no debug builds) on x86_64:

# $ rpmbuild -ba java-1.8.0-openjdk.spec --without slowdebug --without fastdebug

#

# Only produce a release build on x86_64:

# $ rhpkg mockbuild --without slowdebug --without fastdebug

#

# Enable fastdebug builds by default on relevant arches.

%bcond_without fastdebug

# Enable slowdebug builds by default on relevant arches.

%bcond_without slowdebug

# Enable release builds by default on relevant arches.

%bcond_without release

# Remove build artifacts by default

%bcond_with artifacts

# Build a fresh libjvm.so for use in a copy of the bootstrap JDK

%bcond_without fresh_libjvm

# Build with system libraries

%bcond_with system_libs

# Define whether to use the bootstrap JDK directly or with a fresh libjvm.so

%if %{with fresh_libjvm}

%global build_hotspot_first 1

%else

%global build_hotspot_first 0

%endif

%if %{with system_libs}

%global system_libs 1

%global link_type system

%global jpeg_lib |libjavajpeg[.]so.*

%else

%global system_libs 0

%global link_type bundled

%global jpeg_lib |libjpeg[.]so.*

%endif

# Turn off the debug package as we just produce a bunch of tarballs

%define debug_package %{nil}

# note: parametrized macros are order-sensitive (unlike not-parametrized) even with normal macros

# also necessary when passing it as parameter to other macros. If not macro, then it is considered a switch

# see the difference between global and define:

# See https://github.com/rpm-software-management/rpm/issues/127 to comments at  "pmatilai commented on Aug 18, 2017"

# (initiated in https://bugzilla.redhat.com/show_bug.cgi?id=1482192)

%global debug_suffix_unquoted -slowdebug

%global fastdebug_suffix_unquoted -fastdebug

# quoted one for shell operations

%global debug_suffix "%{debug_suffix_unquoted}"

%global fastdebug_suffix "%{fastdebug_suffix_unquoted}"

%global normal_suffix ""

%global debug_warning This package is unoptimised with full debugging. Install only as needed and remove ASAP.

%global fastdebug_warning This package is optimised with full debugging. Install only as needed and remove ASAP.

%global debug_on unoptimised with full debugging on

%global fastdebug_on optimised with full debugging on

%global for_fastdebug for packages with debugging on and optimisation

%global for_debug for packages with debugging on and no optimisation

%if %{with release}

%global include_normal_build 1

%else

%global include_normal_build 0

%endif

%if %{include_normal_build}

%global normal_build %{normal_suffix}

%else

%global normal_build %{nil}

%endif

%global aarch64         aarch64 arm64 armv8

# we need to distinguish between big and little endian PPC64

%global ppc64le         ppc64le

%global ppc64be         ppc64 ppc64p7

# Set of architectures which support multiple ABIs

%global multilib_arches %{power64} sparc64 x86_64

# Set of architectures for which we build slowdebug builds

%global debug_arches    %{ix86} x86_64 sparcv9 sparc64 %{aarch64} %{power64}

# Set of architectures for which we build fastdebug builds

%global fastdebug_arches x86_64 ppc64le aarch64

# Set of architectures with a Just-In-Time (JIT) compiler

%global jit_arches      %{aarch64} %{ix86} %{power64} sparcv9 sparc64 x86_64

# Set of architectures which use the Zero assembler port (!jit_arches)

%global zero_arches %{arm} ppc s390 s390x

# Set of architectures which run a full bootstrap cycle

%global bootstrap_arches %{jit_arches} %{zero_arches}

# Set of architectures which support SystemTap tapsets

%global systemtap_arches %{jit_arches}

# Set of architectures which support the serviceability agent

%global sa_arches       %{ix86} x86_64 sparcv9 sparc64 %{aarch64}

# Set of architectures which support class data sharing

# See https://bugzilla.redhat.com/show_bug.cgi?id=513605

# MetaspaceShared::generate_vtable_methods is not implemented for the PPC JIT

%global share_arches    %{ix86} x86_64 sparcv9 sparc64 %{aarch64}

# Set of architectures which support Java Flight Recorder (JFR)

%global jfr_arches      %{jit_arches}

# Set of architectures for which alt-java has SSB mitigation

%global ssbd_arches x86_64

# Set of architectures where we verify backtraces with gdb

%global gdb_arches %{jit_arches} %{zero_arches}

# By default, we build a debug build during main build on JIT architectures

%if %{with slowdebug}

%ifarch %{debug_arches}

%global include_debug_build 1

%else

%global include_debug_build 0

%endif

%else

%global include_debug_build 0

%endif

# By default, we build a fastdebug build during main build only on fastdebug architectures

%if %{with fastdebug}

%ifarch %{fastdebug_arches}

%global include_fastdebug_build 1

%else

%global include_fastdebug_build 0

%endif

%else

%global include_fastdebug_build 0

%endif

%if %{include_debug_build}

%global slowdebug_build %{debug_suffix}

%else

%global slowdebug_build %{nil}

%endif

%if %{include_fastdebug_build}

%global fastdebug_build %{fastdebug_suffix}

%else

%global fastdebug_build %{nil}

%endif

# If you disable all builds, then the build fails

# Build and test slowdebug first as it provides the best diagnostics

%global build_loop  %{slowdebug_build} %{fastdebug_build} %{normal_build}

%if 0%{?flatpak}

%global bootstrap_build false

%else

%ifarch %{bootstrap_arches}

%global bootstrap_build true

%else

%global bootstrap_build false

%endif

%endif

%global bootstrap_targets images

%global release_targets images docs-zip

# No docs nor bootcycle for debug builds

%global debug_targets images

# Target to use to just build HotSpot

%global hotspot_target hotspot

# JDK to use for bootstrapping

# Use OpenJDK 7 where available (on RHEL) to avoid

# having to use the rhel-7.x-java-unsafe-candidate hack

%if ! 0%{?fedora} && 0%{?rhel} <= 7

%global buildjdkver 1.7.0

%else

%global buildjdkver 1.8.0

%endif

%global bootjdk /usr/lib/jvm/java-%{buildjdkver}-openjdk

# Filter out flags from the optflags macro that cause problems with the OpenJDK build

# We filter out -O flags so that the optimization of HotSpot is not lowered from O3 to O2

# We filter out -Wall which will otherwise cause HotSpot to produce hundreds of thousands of warnings (100+mb logs)

# We replace it with -Wformat (required by -Werror=format-security) and -Wno-cpp to avoid FORTIFY_SOURCE warnings

# We filter out -fexceptions as the HotSpot build explicitly does -fno-exceptions and it's otherwise the default for C++

%global ourflags %(echo %optflags | sed -e 's|-Wall|-Wformat -Wno-cpp|' | sed -r -e 's|-O[0-9]*||')

%global ourcppflags %(echo %ourflags | sed -e 's|-fexceptions||')

%global ourldflags %{__global_ldflags}

# With disabled nss is NSS deactivated, so NSS_LIBDIR can contain the wrong path

# the initialization must be here. Later the pkg-config have buggy behavior

# looks like openjdk RPM specific bug

# Always set this so the nss.cfg file is not broken

%global NSS_LIBDIR %(pkg-config --variable=libdir nss)

%global NSS_LIBS %(pkg-config --libs nss)

%global NSS_CFLAGS %(pkg-config --cflags nss-softokn)

# see https://bugzilla.redhat.com/show_bug.cgi?id=1332456

%global NSSSOFTOKN_BUILDTIME_NUMBER %(pkg-config --modversion nss-softokn || : )

%global NSS_BUILDTIME_NUMBER %(pkg-config --modversion nss || : )

# this is workaround for processing of requires during srpm creation

%global NSSSOFTOKN_BUILDTIME_VERSION %(if [ "x%{NSSSOFTOKN_BUILDTIME_NUMBER}" == "x" ] ; then echo "" ;else echo ">= %{NSSSOFTOKN_BUILDTIME_NUMBER}" ;fi)

%global NSS_BUILDTIME_VERSION %(if [ "x%{NSS_BUILDTIME_NUMBER}" == "x" ] ; then echo "" ;else echo ">= %{NSS_BUILDTIME_NUMBER}" ;fi)

# In some cases, the arch used by the JDK does

# not match _arch.

# Also, in some cases, the machine name used by SystemTap

# does not match that given by _target_cpu

%ifarch x86_64

%global archinstall amd64

%global stapinstall x86_64

%endif

%ifarch ppc

%global archinstall ppc

%global stapinstall powerpc

%endif

%ifarch %{ppc64be}

%global archinstall ppc64

%global stapinstall powerpc

%endif

%ifarch %{ppc64le}

%global archinstall ppc64le

%global stapinstall powerpc

%endif

%ifarch %{ix86}

%global archinstall i386

%global stapinstall i386

%endif

%ifarch ia64

%global archinstall ia64

%global stapinstall ia64

%endif

%ifarch s390

%global archinstall s390

%global stapinstall s390

%endif

%ifarch s390x

%global archinstall s390x

%global stapinstall s390

%endif

%ifarch %{arm}

%global archinstall arm

%global stapinstall arm

%endif

%ifarch %{aarch64}

%global archinstall aarch64

%global stapinstall arm64

%endif

# 32 bit sparc, optimized for v9

%ifarch sparcv9

%global archinstall sparc

%global stapinstall %{_target_cpu}

%endif

# 64 bit sparc

%ifarch sparc64

%global archinstall sparcv9

%global stapinstall %{_target_cpu}

%endif

# Need to support noarch for srpm build

%ifarch noarch

%global archinstall %{nil}

%global stapinstall %{nil}

%endif

# Always off in portables

%ifarch %{systemtap_arches}

%global with_systemtap 0

%else

%global with_systemtap 0

%endif

# New Version-String scheme-style defines

%global majorver 8

# Standard JPackage naming and versioning defines

%global origin          openjdk

%global origin_nice     OpenJDK

%global top_level_dir_name   %{origin}

# Settings for local security configuration

%global security_file %{top_level_dir_name}/jdk/src/share/lib/security/java.security-%{_target_os}

%global cacerts_file /etc/pki/java/cacerts

# Define vendor information used by OpenJDK

%global oj_vendor Red Hat, Inc.

%global oj_vendor_url "https://www.redhat.com/"

# Define what url should JVM offer in case of a crash report

# order may be important, epel may have rhel declared

%if 0%{?epel}

%global oj_vendor_bug_url  https://bugzilla.redhat.com/enter_bug.cgi?product=Fedora%20EPEL&component=%{component}&version=epel%{epel}

%else

%if 0%{?fedora}

# Does not work for rawhide, keeps the version field empty

%global oj_vendor_bug_url  https://bugzilla.redhat.com/enter_bug.cgi?product=Fedora&component=%{component}&version=%{fedora}

%else

%if 0%{?rhel}

%global oj_vendor_bug_url  https://bugzilla.redhat.com/enter_bug.cgi?product=Red%20Hat%20Enterprise%20Linux%20%{rhel}&component=%{component}

%else

%global oj_vendor_bug_url  https://bugzilla.redhat.com/enter_bug.cgi

%endif

%endif

%endif

# note, following three variables are sedded from update_sources if used correctly. Hardcode them rather there.

%global shenandoah_project      openjdk

%global shenandoah_repo         shenandoah-jdk8u

%global openjdk_revision        jdk8u372-b07

%global shenandoah_revision     shenandoah-%{openjdk_revision}

# Define old aarch64/jdk8u tree variables for compatibility

%global project         %{shenandoah_project}

%global repo            %{shenandoah_repo}

%global revision        %{shenandoah_revision}

# Define IcedTea version used for SystemTap tapsets and desktop file

%global icedteaver      3.15.0

# Define current Git revision for the FIPS support patches

%global fipsver 6d1aade0648

# Define current Git revision for the cacerts patch

%global cacertsver 8139f2361c2

# e.g. aarch64-shenandoah-jdk8u212-b04-shenandoah-merge-2019-04-30 -> aarch64-shenandoah-jdk8u212-b04

%global version_tag     %(VERSION=%{revision}; echo ${VERSION%%-shenandoah-merge*})

# eg # jdk8u60-b27 -> jdk8u60 or # aarch64-jdk8u60-b27 -> aarch64-jdk8u60  (dont forget spec escape % by %%)

%global whole_update    %(VERSION=%{version_tag}; echo ${VERSION%%-*})

# eg  jdk8u60 -> 60 or aarch64-jdk8u60 -> 60

%global updatever       %(VERSION=%{whole_update}; echo ${VERSION##*u})

# eg jdk8u60-b27 -> b27

%global buildver        %(VERSION=%{version_tag}; echo ${VERSION##*-})

%global rpmrelease      2

# Define milestone (EA for pre-releases, GA ("fcs") for releases)

# Release will be (where N is usually a number starting at 1):

# - 0.N%%{?extraver}%%{?dist} for EA releases,

# - N%%{?extraver}{?dist} for GA releases

%global is_ga           1

%if %{is_ga}

%global milestone          fcs

%global milestone_version  %{nil}

%global extraver %{nil}

%global eaprefix %{nil}

%else

%global milestone          ea

%global milestone_version  "-ea"

%global extraver .%{milestone}

%global eaprefix 0.

%endif

# priority must be 7 digits in total. The expression is workarounding tip

%global priority        %(TIP=1800%{updatever};  echo ${TIP/tip/999})

%global javaver         1.%{majorver}.0

# parametrized macros are order-sensitive

%global compatiblename  %{name}

%global fullversion     %{compatiblename}-%{version}-%{release}

# images stub

%global jdkimage       j2sdk-image

%global jreimage       j2re-image

# output dir stub

%define buildoutputdir() %{expand:build/jdk8.build%{?1}}

%define installoutputdir() %{expand:install/jdk8.install%{?1}}

%define packageoutputdir() %{expand:packages/jdk8.packages%{?1}}

# we can copy the javadoc to not arched dir, or make it not noarch

%define uniquejavadocdir()    %{expand:%{fullversion}%{?1}}

# main id and dir of this jdk

%define uniquesuffix()        %{expand:%{fullversion}.%{_arch}%{?1}}

%define jreportablenameimpl() %(echo %{uniquesuffix ""} | sed "s;el%{rhel}\\(_[0-9]\\)*;portable%{1}.jre;g")

%define jdkportablenameimpl() %(echo %{uniquesuffix ""} | sed "s;el%{rhel}\\(_[0-9]\\)*;portable%{1}.jdk;g")

%define jreportablearchive()  %{expand:%{jreportablenameimpl -- %%{1}}.tar.xz}

%define jdkportablearchive()  %{expand:%{jdkportablenameimpl -- %%{1}}.tar.xz}

%define jreportablename()     %{expand:%{jreportablenameimpl -- %%{1}}}

%define jdkportablename()     %{expand:%{jdkportablenameimpl -- %%{1}}}

%define docportablename() %(echo %{uniquesuffix ""} | sed "s;el%{rhel}\\(_[0-9]\\)*;portable.docs;g")

%define docportablearchive()  %{docportablename}.tar.xz

%define miscportablename() %(echo %{uniquesuffix ""} | sed "s;el%{rhel}\\(_[0-9]\\)*;portable.misc;g")

%define miscportablearchive()  %{miscportablename}.tar.xz

# Fix for https://bugzilla.redhat.com/show_bug.cgi?id=1111349.

# See also https://bugzilla.redhat.com/show_bug.cgi?id=1590796

# as to why some libraries *cannot* be excluded. In particular,

# these are:

# libjsig.so, libjava.so, libjawt.so, libjvm.so and libverify.so

%global _privatelibs libatk-wrapper[.]so.*|libattach[.]so.*|libawt_headless[.]so.*|libawt[.]so.*|libawt_xawt[.]so.*|libdt_socket[.]so.*|libfontmanager[.]so.*|libhprof[.]so.*|libinstrument[.]so.*|libj2gss[.]so.*|libj2pcsc[.]so.*|libj2pkcs11[.]so.*|libjaas_unix[.]so.*|libjava_crw_demo[.]so.*%{jpeg_lib}|libjdwp[.]so.*|libjli[.]so.*|libjsdt[.]so.*|libjsoundalsa[.]so.*|libjsound[.]so.*|liblcms[.]so.*|libmanagement[.]so.*|libmlib_image[.]so.*|libnet[.]so.*|libnio[.]so.*|libnpt[.]so.*|libsaproc[.]so.*|libsctp[.]so.*|libsplashscreen[.]so.*|libsunec[.]so.*|libsystemconf[.]so.*|libunpack[.]so.*|libzip[.]so.*|lib[.]so\\(SUNWprivate_.*

%global __provides_exclude ^(%{_privatelibs})$

%global __requires_exclude ^(%{_privatelibs})$

# Standard JPackage directories and symbolic links.

%global sdkdir()        %{expand:%{uniquesuffix %%1}}

%global jrelnk()        %{expand:jre-%{javaver}-%{origin}-%{version}-%{release}.%{_arch}%1}

%global jredir()        %{expand:%{sdkdir %%1}/jre}

%global sdkbindir()     %{expand:%{_jvmdir}/%{sdkdir %%1}/bin}

%global jrebindir()     %{expand:%{_jvmdir}/%{jredir %%1}/bin}

%global alt_java_name     alt-java

%global jvmjardir()     %{expand:%{_jvmjardir}/%{uniquesuffix %%1}}

%global rpm_state_dir %{_localstatedir}/lib/rpm-state/

# For flatpack builds hard-code /usr/sbin/alternatives,

# otherwise use %%{_sbindir} relative path.

%if 0%{?flatpak}

%global alternatives_requires /usr/sbin/alternatives

%else

%global alternatives_requires %{_sbindir}/alternatives

%endif

%if %{with_systemtap}

# Where to install systemtap tapset (links)

# We would like these to be in a package specific sub-dir,

# but currently systemtap doesn't support that, so we have to

# use the root tapset dir for now. To distinguish between 64

# and 32 bit architectures we place the tapsets under the arch

# specific dir (note that systemtap will only pickup the tapset

# for the primary arch for now). Systemtap uses the machine name

# aka target_cpu as architecture specific directory name.

%global tapsetroot /usr/share/systemtap

%global tapsetdirttapset %{tapsetroot}/tapset/

%global tapsetdir %{tapsetdirttapset}/%{stapinstall}

%endif

# Prevent brp-java-repack-jars from being run.

%global __jar_repack 0

# portables have grown out of its component, moving back to java-x-vendor

# this expression, when declared as global, filled component with java-x-vendor portable

%define component %(echo %{name} | sed "s;-portable;;g")

Name:    java-%{javaver}-%{origin}-portable

Version: %{javaver}.%{updatever}.%{buildver}

Release: %{?eaprefix}%{rpmrelease}%{?extraver}%{?dist}

# java-1.5.0-ibm from jpackage.org set Epoch to 1 for unknown reasons

# and this change was brought into RHEL-4. java-1.5.0-ibm packages

# also included the epoch in their virtual provides. This created a

# situation where in-the-wild java-1.5.0-ibm packages provided "java =

# 1:1.5.0". In RPM terms, "1.6.0 < 1:1.5.0" since 1.6.0 is

# interpreted as 0:1.6.0. So the "java >= 1.6.0" requirement would be

# satisfied by the 1:1.5.0 packages. Thus we need to set the epoch in

# JDK package >= 1.6.0 to 1, and packages referring to JDK virtual

# provides >= 1.6.0 must specify the epoch, "java >= 1:1.6.0".

Epoch:   1

Summary: %{origin_nice} %{majorver} Runtime Environment portable edition

Group:   Development/Languages

# HotSpot code is licensed under GPLv2

# JDK library code is licensed under GPLv2 with the Classpath exception

# The Apache license is used in code taken from Apache projects (primarily JAXP & JAXWS)

# DOM levels 2 & 3 and the XML digital signature schemas are licensed under the W3C Software License

# The JSR166 concurrency code is in the public domain

# The BSD and MIT licenses are used for a number of third-party libraries (see THIRD_PARTY_README)

# The OpenJDK source tree includes the JPEG library (IJG), zlib & libpng (zlib), giflib and LCMS (MIT)

# The test code includes copies of NSS under the Mozilla Public License v2.0

# The PCSClite headers are under a BSD with advertising license

# The elliptic curve cryptography (ECC) source code is licensed under the LGPLv2.1 or any later version

License:  ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib

URL:      http://openjdk.java.net/

# Shenandoah HotSpot

# aarch64-port/jdk8u-shenandoah contains an integration forest of

# OpenJDK 8u, the aarch64 port and Shenandoah

# To regenerate, use:

# VERSION=%%{shenandoah_revision}

# FILE_NAME_ROOT=%%{shenandoah_project}-%%{shenandoah_repo}-${VERSION}

# REPO_ROOT=<path to checked-out repository> generate_source_tarball.sh

# where the source is obtained from http://hg.openjdk.java.net/%%{project}/%%{repo}

Source0: %{shenandoah_project}-%{shenandoah_repo}-%{shenandoah_revision}-4curve.tar.xz

# Custom README for -src subpackage

Source2:  README.md

# Release notes

Source7: NEWS

# Use 'icedtea_sync.sh' to update the following

# They are based on code contained in the IcedTea project (3.x).

# Systemtap tapsets. Zipped up to keep it small.

# Disabled in portables

#Source8: tapsets-icedtea-%%{icedteaver}.tar.xz

# Desktop files. Adapted from IcedTea

# Disabled in portables

#Source9: jconsole.desktop.in

#Source10: policytool.desktop.in

# nss configuration file

Source11: nss.cfg.in

# Removed libraries that we link instead

Source12: remove-intree-libraries.sh

# Ensure we aren't using the limited crypto policy

Source13: TestCryptoLevel.java

# Ensure ECDSA is working

Source14: TestECDSA.java

# Verify system crypto (policy) can be disabled via a property

Source15: TestSecurityProperties.java

# Ensure vendor settings are correct

Source16: CheckVendor.java

# nss fips configuration file

Source17: nss.fips.cfg.in

# Ensure translations are available for new timezones

Source18: TestTranslations.java

# Disabled in portables

#Source20: repackReproduciblePolycies.sh

# New versions of config files with aarch64 support. This is not upstream yet.

Source100: config.guess

Source101: config.sub

############################################

#

# RPM/distribution specific patches

#

# This section includes patches specific to

# Fedora/RHEL which can not be upstreamed

# either in their current form or at all.

############################################

# Accessibility patches

# Ignore AWTError when assistive technologies are loaded

Patch1:   rh1648242-accessible_toolkit_crash_do_not_break_jvm.patch

# Turn on AssumeMP by default on RHEL systems

Patch534: rh1648246-always_instruct_vm_to_assume_multiple_processors_are_available.patch

# RH1648249: Add PKCS11 provider to java.security

Patch1000: rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch

# RH1582504: Use RSA as default for keytool, as DSA is disabled in all crypto policies except LEGACY

Patch1003: rh1582504-rsa_default_for_keytool.patch

# Crypto policy and FIPS support patches

# Patch is generated from the fips tree at https://github.com/rh-openjdk/jdk8u/tree/fips

# as follows: git diff %%{openjdk_revision} common jdk > fips-8u-$(git show -s --format=%h HEAD).patch

# Diff is limited to src and make subdirectories to exclude .github changes

# Fixes currently included:

# PR3183, RH1340845: Support Fedora/RHEL8 system crypto policy

# PR3655: Allow use of system crypto policy to be disabled by the user

# RH1655466: Support RHEL FIPS mode using SunPKCS11 provider

# RH1760838: No ciphersuites available for SSLSocket in FIPS mode

# RH1860986: Disable TLSv1.3 with the NSS-FIPS provider until PKCS#11 v3.0 support is available

# RH1906862: Always initialise JavaSecuritySystemConfiguratorAccess

# RH1929465: Improve system FIPS detection

# RH1996182: Login to the NSS software token in FIPS mode

# RH1991003: Allow plain key import unless com.redhat.fips.plainKeySupport is set to false

# RH2021263: Resolve outstanding FIPS issues

# RH2052819: Fix FIPS reliance on crypto policies

# RH2052829: Detect NSS at Runtime for FIPS detection

# RH2036462: sun.security.pkcs11.wrapper.PKCS11.getInstance breakage

# RH2090378: Revert to disabling system security properties and FIPS mode support together

Patch1001: fips-8u-%{fipsver}.patch

#############################################

#

# Upstreamable patches

#

# This section includes patches which need to

# be reviewed & pushed to the current development

# tree of OpenJDK.

#############################################

# PR2737: Allow multiple initialization of PKCS11 libraries

Patch5: pr2737-allow_multiple_pkcs11_library_initialisation_to_be_a_non_critical_error.patch

# Turn off strict overflow on IndicRearrangementProcessor{,2}.cpp following 8140543: Arrange font actions

Patch512: rh1649664-awt2dlibraries_compiled_with_no_strict_overflow.patch

# RH1337583, PR2974: PKCS#10 certificate requests now use CRLF line endings rather than system line endings

Patch523: pr2974-rh1337583-add_systemlineendings_option_to_keytool_and_use_line_separator_instead_of_crlf_in_pkcs10.patch

# PR3083, RH1346460: Regression in SSL debug output without an ECC provider

Patch528: pr3083-rh1346460-for_ssl_debug_return_null_instead_of_exception_when_theres_no_ecc_provider.patch

# PR2888: OpenJDK should check for system cacerts database (e.g. /etc/pki/java/cacerts)

# PR3575, RH1567204: System cacerts database handling should not affect jssecacerts

# RH2055274: Revert default keystore to JAVA_HOME/jre/lib/security/cacerts in portable builds

# Must be applied after the FIPS patch as it also changes java.security

# Patch is generated from the cacerts tree at https://github.com/rh-openjdk/jdk8u/tree/cacerts

# as follows: git diff fips > pr2888-rh2055274-support_system_cacerts-$(git show -s --format=%h HEAD).patch

Patch539: pr2888-rh2055274-support_system_cacerts-%{cacertsver}.patch

Patch541: rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch

# RH1750419: Enable build of speculative store bypass hardened alt-java (CVE-2018-3639)

Patch600: rh1750419-redhat_alt_java.patch

# JDK-8281098, PR3836: Extra compiler flags not passed to adlc build

Patch112: jdk8281098-pr3836-pass_compiler_flags_to_adlc.patch

#############################################

#

# Arch-specific upstreamable patches

#

# This section includes patches which need to

# be reviewed & pushed upstream and are specific

# to certain architectures. This usually means the

# current OpenJDK development branch, but may also

# include other trees e.g. for the AArch64 port for

# OpenJDK 8u.

#############################################

# s390: PR3593: Use "%z" for size_t on s390 as size_t != intptr_t

Patch103: pr3593-s390_use_z_format_specifier_for_size_t_arguments_as_size_t_not_equals_to_int.patch

# x86: S8199936, PR3533: HotSpot generates code with unaligned stack, crashes on SSE operations (-mstackrealign workaround)

Patch105: jdk8199936-pr3533-enable_mstackrealign_on_x86_linux_as_well_as_x86_mac_os_x.patch

# S390 ambiguous log2_intptr calls

Patch107: s390-8214206_fix.patch

#############################################

#

# Patches which need backporting to 8u

#

# This section includes patches which have

# been pushed upstream to the latest OpenJDK

# development tree, but need to be backported

# to OpenJDK 8u.

#############################################

# S8074839, PR2462: Resolve disabled warnings for libunpack and the unpack200 binary

# This fixes printf warnings that lead to build failure with -Werror=format-security from optflags

Patch502: pr2462-resolve_disabled_warnings_for_libunpack_and_the_unpack200_binary.patch

# PR3591: Fix for bug 3533 doesn't add -mstackrealign to JDK code

Patch571: jdk8199936-pr3591-enable_mstackrealign_on_x86_linux_as_well_as_x86_mac_os_x_jdk.patch

# 8143245, PR3548: Zero build requires disabled warnings

Patch574: jdk8143245-pr3548-zero_build_requires_disabled_warnings.patch

# s390: JDK-8203030, Type fixing for s390

Patch102: jdk8203030-zero_s390_31_bit_size_t_type_conflicts_in_shared_code.patch

# 8035341: Allow using a system installed libpng

Patch202: jdk8035341-allow_using_system_installed_libpng.patch

# 8042159: Allow using a system-installed lcms2

Patch203: jdk8042159-allow_using_system_installed_lcms2-root.patch

Patch204: jdk8042159-allow_using_system_installed_lcms2-jdk.patch

# JDK-8257794: Zero: assert(istate->_stack_limit == istate->_thread->last_Java_sp() + 1) failed: wrong on Linux/x86_32

Patch581: jdk8257794-remove_broken_assert.patch

# JDK-8186464, RH1433262: ZipFile cannot read some InfoZip ZIP64 zip files

Patch12: jdk8186464-rh1433262-zip64_failure.patch

#############################################

#

# Patches appearing in 8u382

#

# This section includes patches which are present

# in the listed OpenJDK 8u release and should be

# able to be removed once that release is out

# and used by this RPM.

#############################################

# JDK-8271199, RH2175317: Mutual TLS handshake fails signing client certificate with custom sensitive PKCS11 key

Patch2001: jdk8271199-rh2175317-custom_pkcs11_provider_support.patch

#############################################

#

# Patches ineligible for 8u

#

# This section includes patches which are present

# upstream, but ineligible for upstream 8u backport.

#############################################

# 8043805: Allow using a system-installed libjpeg

Patch201: jdk8043805-allow_using_system_installed_libjpeg.patch

#############################################

#

# Shenandoah fixes

#

# This section includes patches which are

# specific to the Shenandoah garbage collector

# and should be upstreamed to the appropriate

# trees.

#############################################

#############################################

#

# Non-OpenJDK fixes

#

# This section includes patches to code other

# that from OpenJDK.

#############################################

#############################################

#

# Dependencies

#

#############################################

BuildRequires: autoconf

BuildRequires: automake

BuildRequires: alsa-lib-devel

BuildRequires: binutils

BuildRequires: cups-devel

BuildRequires: desktop-file-utils

# elfutils only are OK for build without AOT

BuildRequires: elfutils-devel

BuildRequires: file

BuildRequires: fontconfig-devel

BuildRequires: freetype-devel

BuildRequires: gcc-c++

BuildRequires: gdb

BuildRequires: libxslt

BuildRequires: libX11-devel

BuildRequires: libXext-devel

BuildRequires: libXi-devel

BuildRequires: libXinerama-devel

BuildRequires: libXrender-devel

BuildRequires: libXt-devel

BuildRequires: libXtst-devel

# Requirement for setting up nss.cfg and nss.fips.cfg

BuildRequires: nss-devel

# Commented out for portable RHEL7 doesn't have this

# Requirement for system security property test

#BuildRequires: crypto-policies

BuildRequires: pkgconfig

BuildRequires: xorg-x11-proto-devel

BuildRequires: zip

BuildRequires: tar

BuildRequires: unzip

# Require a boot JDK which doesn't fail due to RH1482244

BuildRequires: java-%{buildjdkver}-openjdk-devel >= 1.7.0.151-2.6.11.3

# Zero-assembler build requirement

%ifarch %{zero_arches}

BuildRequires: libffi-devel

%endif

# 2023c required as of JDK-8305113

BuildRequires: tzdata-java >= 2023c

# Earlier versions have a bug in tree vectorization on PPC

BuildRequires: gcc >= 4.8.3-8

# cacerts build requirement.

BuildRequires: ca-certificates

%if %{with_systemtap}

BuildRequires: systemtap-sdt-devel

%endif

%if %{system_libs}

BuildRequires: giflib-devel

BuildRequires: lcms2-devel

BuildRequires: libjpeg-devel

BuildRequires: libpng-devel