# If debug is 1, OpenJDK is built with all debug info present.

%global debug 0

%global aarch64         aarch64 arm64 armv8

# sometimes we need to distinguish big and little endian PPC64

%global ppc64le         ppc64le

%global ppc64be         ppc64 ppc64p7

%global multilib_arches %{power64} sparc64 x86_64

%global jit_arches      %{ix86} x86_64 sparcv9 sparc64 %{aarch64} %{power64}

# With diabled nss is NSS deactivated, so in NSS_LIBDIR can be wrong path

# the initialisation must be here. LAter the pkg-connfig have bugy behaviour

#looks liekopenjdk RPM specific bug

# Always set this so the nss.cfg file is not broken

%global NSS_LIBDIR %(pkg-config --variable=libdir nss)

# fix for https://bugzilla.redhat.com/show_bug.cgi?id=1111349

%global _privatelibs libmawt[.]so.*

%global __provides_exclude ^(%{_privatelibs})$

%global __requires_exclude ^(%{_privatelibs})$

%ifarch x86_64

%global archinstall amd64

%endif

%ifarch ppc

%global archinstall ppc

%endif

%ifarch %{ppc64be}

%global archinstall ppc64

%endif

%ifarch %{ppc64le}

%global archinstall ppc64le

%endif

%ifarch %{ix86}

%global archinstall i386

%endif

%ifarch ia64

%global archinstall ia64

%endif

%ifarch s390

%global archinstall s390

%endif

%ifarch s390x

%global archinstall s390x

%endif

%ifarch %{arm}

%global archinstall arm

%endif

%ifarch %{aarch64}

%global archinstall aarch64

%endif

# 32 bit sparc, optimized for v9

%ifarch sparcv9

%global archinstall sparc

%endif

# 64 bit sparc

%ifarch sparc64

%global archinstall sparcv9

%endif

%ifnarch %{jit_arches}

%global archinstall %{_arch}

%endif

%if %{debug}

%global debugbuild slowdebug

%else

%global debugbuild release

%endif

%global buildoutputdir openjdk/build/jdk8.build

%ifarch %{jit_arches}

%global with_systemtap 1

%else

%global with_systemtap 0

%endif

# AArch64 currently uses a different OpenJDK source tarball

%ifarch %{aarch64}

%global openjdk_sourceid 1

%else

%global openjdk_sourceid 0

%endif

# Convert an absolute path to a relative path.  Each symbolic link is

# specified relative to the directory in which it is installed so that

# it will resolve properly within chrooted installations.

%global script 'use File::Spec; print File::Spec->abs2rel($ARGV[0], $ARGV[1])'

%global abs2rel %{__perl} -e %{script}

# Standard JPackage naming and versioning defines.

%global origin          openjdk

%global updatever       65

%global buildver        b17

%global aarch64_updatever 65

%global aarch64_buildver b17

%global aarch64_changesetid aarch64-jdk8u%{aarch64_updatever}-%{aarch64_buildver}

# priority must be 7 digits in total

%global priority        00000%{updatever}

%global javaver         1.8.0

# Standard JPackage directories and symbolic links.

%global sdkdir          %{uniquesuffix}

%global jrelnk          jre-%{javaver}-%{origin}-%{version}-%{release}.%{_arch}

%global jredir          %{sdkdir}/jre

%global sdkbindir       %{_jvmdir}/%{sdkdir}/bin

%global jrebindir       %{_jvmdir}/%{jredir}/bin

%global jvmjardir       %{_jvmjardir}/%{uniquesuffix}

%global fullversion     %{name}-%{version}-%{release}

%global uniquesuffix          %{fullversion}.%{_arch}

#we can copy the javadoc to not arched dir, or made it not noarch

%global uniquejavadocdir       %{fullversion}

%if %{with_systemtap}

# Where to install systemtap tapset (links)

# We would like these to be in a package specific subdir,

# but currently systemtap doesn't support that, so we have to

# use the root tapset dir for now. To distinquish between 64

# and 32 bit architectures we place the tapsets under the arch

# specific dir (note that systemtap will only pickup the tapset

# for the primary arch for now). Systemtap uses the machine name

# aka build_cpu as architecture specific directory name.

%global tapsetroot /usr/share/systemtap

%global tapsetdir %{tapsetroot}/tapset/%{_build_cpu}

%endif

# Prevent brp-java-repack-jars from being run.

%global __jar_repack 0

Name:    java-%{javaver}-%{origin}

Version: %{javaver}.%{updatever}

Release: 2.%{buildver}%{?dist}

# java-1.5.0-ibm from jpackage.org set Epoch to 1 for unknown reasons,

# and this change was brought into RHEL-4.  java-1.5.0-ibm packages

# also included the epoch in their virtual provides.  This created a

# situation where in-the-wild java-1.5.0-ibm packages provided "java =

# 1:1.5.0".  In RPM terms, "1.6.0 < 1:1.5.0" since 1.6.0 is

# interpreted as 0:1.6.0.  So the "java >= 1.6.0" requirement would be

# satisfied by the 1:1.5.0 packages.  Thus we need to set the epoch in

# JDK package >= 1.6.0 to 1, and packages referring to JDK virtual

# provides >= 1.6.0 must specify the epoch, "java >= 1:1.6.0".

Epoch:   1

Summary: OpenJDK Runtime Environment

Group:   Development/Languages

License:  ASL 1.1 and ASL 2.0 and GPL+ and GPLv2 and GPLv2 with exceptions and LGPL+ and LGPLv2 and MPLv1.0 and MPLv1.1 and Public Domain and W3C

URL:      http://openjdk.java.net/

# Sources from internal security patched trees.

# ./generate_local_tarball.sh <path to 8u65 sources> jdk8u%%{updatever}-%%{buildver}

# ./generate_local_tarball.sh <path to aarch64-port 8u65 sources> %%{aarch64_changesetid}

Source0:  jdk8u-jdk8u%{updatever}-%{buildver}.tar.xz

Source1:  jdk8u-%{aarch64_changesetid}.tar.xz

# Custom README for -src subpackage

Source2:  README.src

# Use 'generate_tarballs.sh' to generate the following tarballs

# They are based on code contained in the IcedTea7 project.

# Systemtap tapsets. Zipped up to keep it small.

Source8: systemtap-tapset.tar.gz

# Desktop files. Adapated from IcedTea.

Source9: jconsole.desktop.in

Source10: policytool.desktop.in

# nss configuration file

Source11: nss.cfg

# Removed libraries that we link instead

Source12: %{name}-remove-intree-libraries.sh

# Ensure we aren't using the limited crypto policy

Source13: TestCryptoLevel.java

Source20: repackReproduciblePolycies.sh

# New versions of config files with aarch64 support. This is not upstream yet.

Source100: config.guess

Source101: config.sub

# RPM/distribution specific patches

# Ignore AWTError when assistive technologies are loaded 

Patch1:   %{name}-accessible-toolkit.patch

# Restrict access to java-atk-wrapper classes

Patch3: java-atk-wrapper-security.patch

# RHBZ 808293

Patch4: %{name}-PStack-808293.patch

# Allow multiple initialization of PKCS11 libraries

Patch5: multiple-pkcs11-library-init.patch

# Include all sources in src.zip

Patch7: include-all-srcs.patch

# Problem discovered with make 4.0

Patch12: removeSunEcProvider-RH1154143.patch

Patch13: libjpeg-turbo-1.4-compat.patch

#

# OpenJDK specific patches

#

# JVM heap size changes for s390 (thanks to aph)

Patch100: %{name}-s390-java-opts.patch

# Type fixing for s390

Patch102: %{name}-size_t.patch

Patch201: system-libjpeg.patch

Patch202: system-libpng.patch

Patch203: system-lcms.patch

Patch300: jstack-pr1845.patch

# Fixes StackOverflowError on ARM32 bit Zero. See RHBZ#1206656

Patch403: rhbz1206656_fix_current_stack_pointer.patch

# PR2095, RH1163501: 2048-bit DH upper bound too small for Fedora infrastructure (sync with IcedTea 2.x)

Patch504: rh1163501.patch

# S4890063, PR2304, RH1214835: HPROF: default text truncated when using doe=n option (upstreaming post-CPU 2015/07)

Patch511: rh1214835.patch

# RH1191652; fix name of ppc64le architecture

Patch600: %{name}-rh1191652-hotspot.patch

Patch601: %{name}-rh1191652-root.patch

Patch602: %{name}-rh1191652-jdk.patch

Patch603: %{name}-rh1191652-hotspot-aarch64.patch

Patch9999: enableArm64.patch

BuildRequires: autoconf

BuildRequires: automake

BuildRequires: alsa-lib-devel

BuildRequires: binutils

BuildRequires: cups-devel

BuildRequires: desktop-file-utils

BuildRequires: fontconfig

BuildRequires: freetype-devel

BuildRequires: giflib-devel

BuildRequires: gcc-c++

BuildRequires: gtk2-devel

BuildRequires: lcms2-devel

BuildRequires: libjpeg-devel

BuildRequires: libpng-devel

BuildRequires: libxslt

BuildRequires: libX11-devel

BuildRequires: libXi-devel

BuildRequires: libXinerama-devel

BuildRequires: libXt-devel

BuildRequires: libXtst-devel

# Requirements for setting up the nss.cfg

BuildRequires: nss-devel

BuildRequires: pkgconfig

BuildRequires: xorg-x11-proto-devel

#BuildRequires: redhat-lsb

BuildRequires: zip

BuildRequires: java-1.7.0-openjdk-devel

# Zero-assembler build requirement.

%ifnarch %{jit_arches}

BuildRequires: libffi-devel

%endif

# cacerts build requirement.

BuildRequires: openssl

# execstack build requirement.

# no prelink on ARM yet

%ifnarch %{arm} %{aarch64} %{ppc64le}

BuildRequires: prelink

%endif

%if %{with_systemtap}

BuildRequires: systemtap-sdt-devel

%endif

Requires: fontconfig

Requires: xorg-x11-fonts-Type1

# Requires rest of java

Requires: %{name}-headless = %{epoch}:%{version}-%{release}

OrderWithRequires: %{name}-headless = %{epoch}:%{version}-%{release}

# Standard JPackage base provides.

Provides: jre-%{javaver}-%{origin} = %{epoch}:%{version}-%{release}

Provides: jre-%{origin} = %{epoch}:%{version}-%{release}

Provides: jre-%{javaver} = %{epoch}:%{version}-%{release}

Provides: java-%{javaver} = %{epoch}:%{version}-%{release}

Provides: jre = %{javaver}

Provides: java-%{origin} = %{epoch}:%{version}-%{release}

Provides: java = %{epoch}:%{javaver}

# Standard JPackage extensions provides.

Provides: java-fonts = %{epoch}:%{version}

%description

The OpenJDK runtime environment.

%package headless

Summary: OpenJDK Runtime Environment

Group:   Development/Languages

# Require /etc/pki/java/cacerts.

Requires: ca-certificates

# Require jpackage-utils for ownership of /usr/lib/jvm/

Requires: jpackage-utils

# Require zoneinfo data provided by tzdata-java subpackage.

Requires: tzdata-java

# Post requires alternatives to install tool alternatives.

Requires(post):   %{_sbindir}/alternatives

# Postun requires alternatives to uninstall tool alternatives.

Requires(postun): %{_sbindir}/alternatives

# Standard JPackage base provides.

Provides: jre-%{javaver}-%{origin}-headless = %{epoch}:%{version}-%{release}

Provides: jre-%{origin}-headless = %{epoch}:%{version}-%{release}

Provides: jre-%{javaver}-headless = %{epoch}:%{version}-%{release}

Provides: java-%{javaver}-headless = %{epoch}:%{version}-%{release}

Provides: jre-headless = %{epoch}:%{javaver}

Provides: java-%{origin}-headless = %{epoch}:%{version}-%{release}

Provides: java-headless = %{epoch}:%{javaver}

# Standard JPackage extensions provides.

Provides: jndi = %{epoch}:%{version}

Provides: jndi-ldap = %{epoch}:%{version}

Provides: jndi-cos = %{epoch}:%{version}

Provides: jndi-rmi = %{epoch}:%{version}

Provides: jndi-dns = %{epoch}:%{version}

Provides: jaas = %{epoch}:%{version}

Provides: jsse = %{epoch}:%{version}

Provides: jce = %{epoch}:%{version}

Provides: jdbc-stdext = 4.1

Provides: java-sasl = %{epoch}:%{version}

%description headless

The OpenJDK runtime environment without audio and video support.

%package devel

Summary: OpenJDK Development Environment

Group:   Development/Tools

# Require base package.

Requires:         %{name} = %{epoch}:%{version}-%{release}

OrderWithRequires: %{name}-headless = %{epoch}:%{version}-%{release}

# Post requires alternatives to install tool alternatives.

Requires(post):   %{_sbindir}/alternatives

# Postun requires alternatives to uninstall tool alternatives.

Requires(postun): %{_sbindir}/alternatives

# Standard JPackage devel provides.

#Provides: java-sdk-%{javaver}-%{origin} = %{epoch}:%{version}

#Provides: java-sdk-%{javaver} = %{epoch}:%{version}

#Provides: java-sdk-%{origin} = %{epoch}:%{version}

#Provides: java-sdk = %{epoch}:%{javaver}

#Provides: java-%{javaver}-devel = %{epoch}:%{version}

#Provides: java-devel-%{origin} = %{epoch}:%{version}

#Provides: java-devel = %{epoch}:%{javaver}

%description devel

The OpenJDK development tools.

%package demo

Summary: OpenJDK Demos

Group:   Development/Languages

Requires: %{name} = %{epoch}:%{version}-%{release}

OrderWithRequires: %{name}-headless = %{epoch}:%{version}-%{release}

%description demo

The OpenJDK demos.

%package src

Summary: OpenJDK Source Bundle

Group:   Development/Languages

Requires: %{name} = %{epoch}:%{version}-%{release}

%description src

The OpenJDK source bundle.

%package javadoc

Summary: OpenJDK API Documentation

Group:   Documentation

Requires: jpackage-utils

BuildArch: noarch

OrderWithRequires: %{name}-headless = %{epoch}:%{version}-%{release}

# Post requires alternatives to install javadoc alternative.

Requires(post):   %{_sbindir}/alternatives

# Postun requires alternatives to uninstall javadoc alternative.

Requires(postun): %{_sbindir}/alternatives

# Standard JPackage javadoc provides.

Provides: java-javadoc = %{epoch}:%{version}-%{release}

Provides: java-%{javaver}-javadoc = %{epoch}:%{version}-%{release}

%description javadoc

The OpenJDK API documentation.

%package accessibility

Summary: OpenJDK accessibility connector

Requires: java-atk-wrapper

Requires: %{name} = %{epoch}:%{version}-%{release}

OrderWithRequires: %{name}-headless = %{epoch}:%{version}-%{release}

%description accessibility

Enables accessibility support in OpenJDK by using java-atk-wrapper. This allows

compatible at-spi2 based accessibility programs to work for AWT and Swing-based

programs.

Please note, the java-atk-wrapper is still in beta, and OpenJDK itself is still

being tuned to be working with accessibility features. There are known issues

with accessibility on, so please do not install this package unless you really

need to.

%prep

%setup -q -c -n %{uniquesuffix} -T -a %{openjdk_sourceid}

# https://bugzilla.redhat.com/show_bug.cgi?id=1189084

prioritylength=`expr length %{priority}`

if [ $prioritylength -ne 7 ] ; then

 echo "priority must be 7 digits in total, violated"

 exit 14

fi

ln -s openjdk jdk8

cp %{SOURCE2} .

# replace outdated configure guess script

#

# the configure macro will do this too, but it also passes a few flags not

# supported by openjdk configure script

cp %{SOURCE100} openjdk/common/autoconf/build-aux/

cp %{SOURCE101} openjdk/common/autoconf/build-aux/

# OpenJDK patches

# Remove libraries that are linked

sh %{SOURCE12}

#pure aarch64 forest does not have them

%ifnarch %{aarch64}

# Add AArch64 support to configure & JDK build

%patch9999

%endif

%patch201

%patch202

%patch203

%ifnarch %{aarch64}

%endif

%patch1

%patch3

%patch4

%patch5

%patch7

%patch12

%patch13

# s390 build fixes

%ifarch s390

%patch100

%patch102

%endif

# Zero PPC fixes.

%patch403

# HotSpot ppc64le patch is different depending

# on whether we are using 2.5 or 2.6 HotSpot.

%ifarch %{aarch64}

%patch603

%else

%patch600

%endif

#pure aarch64 forest does not have them

%ifnarch %{aarch64}

%patch601

%patch602

%endif

%patch504

%patch511

# Extract systemtap tapsets

%if %{with_systemtap}

tar xzf %{SOURCE8}

%patch300

for file in tapset/*.in; do

    OUTPUT_FILE=`echo $file | sed -e s:%{javaver}\.stp\.in$:%{version}-%{release}.%{_arch}.stp:g`

    sed -e s:@ABS_SERVER_LIBJVM_SO@:%{_jvmdir}/%{sdkdir}/jre/lib/%{archinstall}/server/libjvm.so:g $file > $file.1

# TODO find out which architectures other than i686 have a client vm

%ifarch %{ix86}

    sed -e s:@ABS_CLIENT_LIBJVM_SO@:%{_jvmdir}/%{sdkdir}/jre/lib/%{archinstall}/client/libjvm.so:g $file.1 > $OUTPUT_FILE

%else

    sed -e '/@ABS_CLIENT_LIBJVM_SO@/d' $file.1 > $OUTPUT_FILE

%endif

    sed -i -e s:@ABS_JAVA_HOME_DIR@:%{_jvmdir}/%{sdkdir}:g $OUTPUT_FILE

    sed -i -e s:@INSTALL_ARCH_DIR@:%{archinstall}:g $OUTPUT_FILE

done

# systemtap tapsets ends

%endif

# Prepare desktop files

for file in %{SOURCE9} %{SOURCE10} ; do

    OUTPUT_FILE=`basename $file | sed -e s:\.in$::g`

    sed -e s:#JAVA_HOME#:%{sdkbindir}:g $file > $OUTPUT_FILE

    sed -i -e  s:#JRE_HOME#:%{jrebindir}:g $OUTPUT_FILE

    sed -i -e  s:#ARCH#:%{version}-%{release}.%{_arch}:g $OUTPUT_FILE

done

%build

# How many cpu's do we have?

export NUM_PROC=`/usr/bin/getconf _NPROCESSORS_ONLN 2> /dev/null || :`

export NUM_PROC=${NUM_PROC:-1}

# Build IcedTea and OpenJDK.

%ifarch s390x sparc64 alpha %{power64} %{aarch64}

export ARCH_DATA_MODEL=64

%endif

%ifarch alpha

export CFLAGS="$CFLAGS -mieee"

%endif

EXTRA_CFLAGS="-fstack-protector-strong"

# PPC/PPC64 needs -fno-tree-vectorize since -O3 would

# otherwise generate wrong code producing segfaults.

%ifarch %{power64} ppc

EXTRA_CFLAGS="$EXTRA_CFLAGS -fno-tree-vectorize"

# fix rpmlint warnings

EXTRA_CFLAGS="$EXTRA_CFLAGS -fno-strict-aliasing"

%endif

export EXTRA_CFLAGS

(cd openjdk/common/autoconf

 bash ./autogen.sh

)

mkdir -p %{buildoutputdir}

pushd %{buildoutputdir}

bash ../../configure \

%ifnarch %{jit_arches}

    --with-jvm-variants=zero \

%endif

    --disable-zip-debug-info \

    --with-milestone="fcs" \

    --with-update-version=%{updatever} \

    --with-build-number=%{buildver} \

%ifarch %{aarch64}

    --with-user-release-suffix="aarch64-%{aarch64_updatever}-%{aarch64_buildver}-%{aarch64_changesetid}" \

%endif

    --with-boot-jdk=/usr/lib/jvm/java-1.7.0-openjdk \

    --with-debug-level=%{debugbuild} \

    --enable-unlimited-crypto \

    --with-zlib=system \

    --with-libjpeg=system \

    --with-giflib=system \

    --with-libpng=system \

    --with-lcms=bundled \

    --with-stdc++lib=dynamic \

    --with-extra-cxxflags="$EXTRA_CPP_FLAGS" \

    --with-extra-cflags="$EXTRA_CFLAGS" \

    --with-num-cores="$NUM_PROC"

cat spec.gmk

cat hotspot-spec.gmk

# The combination of FULL_DEBUG_SYMBOLS=0 and ALT_OBJCOPY=/does_not_exist

# disables FDS for all build configs and reverts to pre-FDS make logic.

# STRIP_POLICY=none says don't do any stripping. DEBUG_BINARIES=true says

# ignore all the other logic about which debug options and just do '-g'.

make \

    DEBUG_BINARIES=true \

    JAVAC_FLAGS=-g \

    STRIP_POLICY=no_strip \

    POST_STRIP_CMD="" \

    LOG=trace \

    all

# the build (erroneously) removes read permissions from some jars

# this is a regression in OpenJDK 7 (our compiler):

# http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=1437

find images/j2sdk-image -iname '*.jar' -exec chmod ugo+r {} \;

chmod ugo+r images/j2sdk-image/lib/ct.sym

# remove redundant *diz and *debuginfo files

find images/j2sdk-image -iname '*.diz' -exec rm {} \;

find images/j2sdk-image -iname '*.debuginfo' -exec rm {} \;

popd >& /dev/null

# Install nss.cfg right away as we will be using the JRE above

export JAVA_HOME=$(pwd)/%{buildoutputdir}/images/j2sdk-image

# Install nss.cfg right away as we will be using the JRE above

install -m 644 %{SOURCE11} $JAVA_HOME/jre/lib/security/

# Copy tz.properties

echo "sun.zoneinfo.dir=/usr/share/javazi" >> $JAVA_HOME/jre/lib/tz.properties

# Check unlimited policy has been used

$JAVA_HOME/bin/javac -d . %{SOURCE13}

$JAVA_HOME/bin/java TestCryptoLevel

# Check debug symbols are present and can identify code

SERVER_JVM="$JAVA_HOME/jre/lib/%{archinstall}/server/libjvm.so"

if [ -f "$SERVER_JVM" ] ; then

  nm -aCl "$SERVER_JVM" | grep javaCalls.cpp

fi

CLIENT_JVM="$JAVA_HOME/jre/lib/%{archinstall}/client/libjvm.so"

if [ -f "$CLIENT_JVM" ] ; then

  nm -aCl "$CLIENT_JVM" | grep javaCalls.cpp

fi

ZERO_JVM="$JAVA_HOME/jre/lib/%{archinstall}/zero/libjvm.so"

if [ -f "$ZERO_JVM" ] ; then

  nm -aCl "$ZERO_JVM" | grep javaCalls.cpp

fi

# Check src.zip has all sources. See RHBZ#1130490

jar -tf $JAVA_HOME/src.zip | grep Unsafe

%install

rm -rf $RPM_BUILD_ROOT

STRIP_KEEP_SYMTAB=libjvm*

# there used to be and link to soundfont

# will be replaced by fix of http://mail.openjdk.java.net/pipermail/sound-dev/2015-October/000352.html

# once done, and have to go to fedora first. Removed from rhel7 for now

pushd %{buildoutputdir}/images/j2sdk-image

#install jsa directories so we can owe them

mkdir -p $RPM_BUILD_ROOT%{_jvmdir}/%{jredir}/lib/%{archinstall}/server/

mkdir -p $RPM_BUILD_ROOT%{_jvmdir}/%{jredir}/lib/%{archinstall}/client/

  # Install main files.

  install -d -m 755 $RPM_BUILD_ROOT%{_jvmdir}/%{sdkdir}

  cp -a bin include lib src.zip $RPM_BUILD_ROOT%{_jvmdir}/%{sdkdir}

  install -d -m 755 $RPM_BUILD_ROOT%{_jvmdir}/%{jredir}

  cp -a jre/bin jre/lib $RPM_BUILD_ROOT%{_jvmdir}/%{jredir}

%if %{with_systemtap}

  # Install systemtap support files.

  install -dm 755 $RPM_BUILD_ROOT%{_jvmdir}/%{sdkdir}/tapset

  cp -a $RPM_BUILD_DIR/%{uniquesuffix}/tapset/*.stp $RPM_BUILD_ROOT%{_jvmdir}/%{sdkdir}/tapset/

  install -d -m 755 $RPM_BUILD_ROOT%{tapsetdir}

  pushd $RPM_BUILD_ROOT%{tapsetdir}

    RELATIVE=$(%{abs2rel} %{_jvmdir}/%{sdkdir}/tapset %{tapsetdir})

    ln -sf $RELATIVE/*.stp .

  popd

%endif

  # Install cacerts symlink.

  rm -f $RPM_BUILD_ROOT%{_jvmdir}/%{jredir}/lib/security/cacerts

  pushd $RPM_BUILD_ROOT%{_jvmdir}/%{jredir}/lib/security

    RELATIVE=$(%{abs2rel} %{_sysconfdir}/pki/java \

      %{_jvmdir}/%{jredir}/lib/security)

    ln -sf $RELATIVE/cacerts .

  popd

  # Install extension symlinks.

  install -d -m 755 $RPM_BUILD_ROOT%{jvmjardir}

  pushd $RPM_BUILD_ROOT%{jvmjardir}

    RELATIVE=$(%{abs2rel} %{_jvmdir}/%{jredir}/lib %{jvmjardir})

    ln -sf $RELATIVE/jsse.jar jsse-%{version}.jar

    ln -sf $RELATIVE/jce.jar jce-%{version}.jar

    ln -sf $RELATIVE/rt.jar jndi-%{version}.jar

    ln -sf $RELATIVE/rt.jar jndi-ldap-%{version}.jar

    ln -sf $RELATIVE/rt.jar jndi-cos-%{version}.jar

    ln -sf $RELATIVE/rt.jar jndi-rmi-%{version}.jar

    ln -sf $RELATIVE/rt.jar jaas-%{version}.jar

    ln -sf $RELATIVE/rt.jar jdbc-stdext-%{version}.jar

    ln -sf jdbc-stdext-%{version}.jar jdbc-stdext-3.0.jar

    ln -sf $RELATIVE/rt.jar sasl-%{version}.jar

    for jar in *-%{version}.jar

    do

      if [ x%{version} != x%{javaver} ]

      then

        ln -sf $jar $(echo $jar | sed "s|-%{version}.jar|-%{javaver}.jar|g")

      fi

      ln -sf $jar $(echo $jar | sed "s|-%{version}.jar|.jar|g")

    done

  popd

  # Install JCE policy symlinks.

  install -d -m 755 $RPM_BUILD_ROOT%{_jvmprivdir}/%{uniquesuffix}/jce/vanilla

  # Install versioned symlinks.

  pushd $RPM_BUILD_ROOT%{_jvmdir}

    ln -sf %{jredir} %{jrelnk}

  popd

  pushd $RPM_BUILD_ROOT%{_jvmjardir}

    ln -sf %{sdkdir} %{jrelnk}

  popd

  # Remove javaws man page

  rm -f man/man1/javaws*

  # Install man pages.

  install -d -m 755 $RPM_BUILD_ROOT%{_mandir}/man1

  for manpage in man/man1/*

  do

    # Convert man pages to UTF8 encoding.

    iconv -f ISO_8859-1 -t UTF8 $manpage -o $manpage.tmp

    mv -f $manpage.tmp $manpage

    install -m 644 -p $manpage $RPM_BUILD_ROOT%{_mandir}/man1/$(basename \