# debug_package %%{nil} is portable-jdks specific

%define  debug_package %{nil}

# RPM conditionals so as to be able to dynamically produce

# slowdebug/release builds. See:

# http://rpm.org/user_doc/conditional_builds.html

#

# Examples:

#

# Produce release, fastdebug *and* slowdebug builds on x86_64 (default):

# $ rpmbuild -ba java-11-openjdk.spec

#

# Produce only release builds (no slowdebug builds) on x86_64:

# $ rpmbuild -ba java-11-openjdk.spec --without slowdebug --without fastdebug

#

# Only produce a release build on x86_64:

# $ rhpkg mockbuild --without slowdebug --without fastdebug

# Enable fastdebug builds by default on relevant arches.

%bcond_without fastdebug

# Enable slowdebug builds by default on relevant arches.

%bcond_without slowdebug

# Enable release builds by default on relevant arches.

%bcond_without release

# Enable static library builds by default.

%bcond_without staticlibs

# Remove build artifacts by default

%bcond_with artifacts

# Build a fresh libjvm.so for use in a copy of the bootstrap JDK

%bcond_without fresh_libjvm

# Build with system libraries

%bcond_with system_libs

# Workaround for stripping of debug symbols from static libraries

%if %{with staticlibs}

%define __brp_strip_static_archive %{nil}

%global include_staticlibs 1

%else

%global include_staticlibs 0

%endif

# Define whether to use the bootstrap JDK directly or with a fresh libjvm.so

%if %{with fresh_libjvm}

%global build_hotspot_first 1

%else

%global build_hotspot_first 0

%endif

%if %{with system_libs}

%global system_libs 1

%global link_type system

%global freetype_lib %{nil}

%else

%global system_libs 0

%global link_type bundled

%global freetype_lib |libfreetype[.]so.*

%endif

# The -g flag says to use strip -g instead of full strip on DSOs or EXEs.

# This fixes detailed NMT and other tools which need minimal debug info.

# See: https://bugzilla.redhat.com/show_bug.cgi?id=1520879

%global _find_debuginfo_opts -g

# note: parametrized macros are order-sensitive (unlike not-parametrized) even with normal macros

# also necessary when passing it as parameter to other macros. If not macro, then it is considered a switch

# see the difference between global and define:

# See https://github.com/rpm-software-management/rpm/issues/127 to comments at  "pmatilai commented on Aug 18, 2017"

# (initiated in https://bugzilla.redhat.com/show_bug.cgi?id=1482192)

%global debug_suffix_unquoted -slowdebug

%global fastdebug_suffix_unquoted -fastdebug

%global main_suffix_unquoted -main

%global staticlibs_suffix_unquoted -staticlibs

# quoted one for shell operations

%global debug_suffix "%{debug_suffix_unquoted}"

%global fastdebug_suffix "%{fastdebug_suffix_unquoted}"

%global normal_suffix ""

%global main_suffix "%{main_suffix_unquoted}"

%global staticlibs_suffix "%{staticlibs_suffix_unquoted}"

%global debug_warning This package is unoptimised with full debugging. Install only as needed and remove ASAP.

%global fastdebug_warning This package is optimised with full debugging. Install only as needed and remove ASAP.

%global debug_on unoptimised with full debugging on

%global fastdebug_on optimised with full debugging on

%global for_fastdebug for packages with debugging on and optimisation

%global for_debug for packages with debugging on and no optimisation

%if %{with release}

%global include_normal_build 1

%else

%global include_normal_build 0

%endif

%if %{include_normal_build}

%global normal_build %{normal_suffix}

%else

%global normal_build %{nil}

%endif

# We have hardcoded list of files, which  is appearing in alternatives, and in files

# in alternatives those are slaves and master, very often triplicated by man pages

# in files all masters and slaves are ghosted

# the ghosts are here to allow installation via query like `dnf install /usr/bin/java`

# you can list those files, with appropriate sections: cat *.spec | grep -e --install -e --slave -e post_

# TODO - fix those hardcoded lists via single list

# Those files must *NOT* be ghosted for *slowdebug* packages

# FIXME - if you are moving jshell or jlink or similar, always modify all three sections

# you can check via headless and devels:

#    rpm -ql --noghost java-11-openjdk-headless-11.0.1.13-8.fc29.x86_64.rpm  | grep bin

# == rpm -ql           java-11-openjdk-headless-slowdebug-11.0.1.13-8.fc29.x86_64.rpm  | grep bin

# != rpm -ql           java-11-openjdk-headless-11.0.1.13-8.fc29.x86_64.rpm  | grep bin

# similarly for other %%{_jvmdir}/{jre,java} and %%{_javadocdir}/{java,java-zip}

%define is_release_build() %( if [ "%{?1}" == "%{debug_suffix_unquoted}" -o "%{?1}" == "%{fastdebug_suffix_unquoted}" ]; then echo "0" ; else echo "1"; fi )

# while JDK is a techpreview(is_system_jdk=0), some provides are turned off. Once jdk stops to be an techpreview, move it to 1

# as sytem JDK, we mean any JDK which can run whole system java stack without issues (like bytecode issues, module issues, dependencies...)

%global is_system_jdk 0

%global aarch64         aarch64 arm64 armv8

# we need to distinguish between big and little endian PPC64

%global ppc64le         ppc64le

%global ppc64be         ppc64 ppc64p7

# Set of architectures which support multiple ABIs

%global multilib_arches %{power64} sparc64 x86_64

# Set of architectures for which we build slowdebug builds

%global debug_arches    %{ix86} x86_64 sparcv9 sparc64 %{aarch64} %{power64} s390x

# Set of architectures for which we build fastdebug builds

%global fastdebug_arches x86_64 ppc64le aarch64

# Set of architectures with a Just-In-Time (JIT) compiler

%global jit_arches      %{arm} %{aarch64} %{ix86} %{power64} s390x sparcv9 sparc64 x86_64

# Set of architectures which use the Zero assembler port (!jit_arches)

%global zero_arches ppc s390

# Set of architectures which run a full bootstrap cycle

%global bootstrap_arches %{jit_arches}

# Set of architectures which support SystemTap tapsets

%global systemtap_arches %{jit_arches}

# Set of architectures with a Ahead-Of-Time (AOT) compiler

%global aot_arches      x86_64 %{aarch64}

# Set of architectures which support the serviceability agent

%global sa_arches       %{ix86} x86_64 sparcv9 sparc64 %{aarch64} %{power64} %{arm}

# Set of architectures which support class data sharing

# As of JDK-8005165 in OpenJDK 10, class sharing is not arch-specific

# However, it does segfault on the Zero assembler port, so currently JIT only

%global share_arches    %{jit_arches}

# Set of architectures for which we build the Shenandoah garbage collector

%global shenandoah_arches x86_64 %{aarch64}

# Set of architectures for which we build the Z garbage collector

%global zgc_arches x86_64

# Set of architectures for which alt-java has SSB mitigation

%global ssbd_arches x86_64

# Set of architectures where we verify backtraces with gdb

# s390x fails on RHEL 7 so we exclude it there

%if (0%{?rhel} > 0 && 0%{?rhel} < 8)

%global gdb_arches %{arm} %{aarch64} %{ix86} %{power64} sparcv9 sparc64 x86_64 %{zero_arches}

%else

%global gdb_arches %{jit_arches} %{zero_arches}

%endif

# By default, we build a slowdebug build during main build on JIT architectures

%if %{with slowdebug}

%ifarch %{debug_arches}

%global include_debug_build 1

%else

%global include_debug_build 0

%endif

%else

%global include_debug_build 0

%endif

# On certain architectures, we compile the Shenandoah GC

%ifarch %{shenandoah_arches}

%global use_shenandoah_hotspot 1

%global shenandoah_feature shenandoahgc

%else

%global use_shenandoah_hotspot 0

%global shenandoah_feature -shenandoahgc

%endif

# On certain architectures, we compile the ZGC

%ifarch %{zgc_arches}

%global use_zgc_hotspot 1

%global zgc_feature zgc

%else

%global use_zgc_hotspot 0

%global zgc_feature -zgc

%endif

# By default, we build a fastdebug build during main build only on fastdebug architectures

%if %{with fastdebug}

%ifarch %{fastdebug_arches}

%global include_fastdebug_build 1

%else

%global include_fastdebug_build 0

%endif

%else

%global include_fastdebug_build 0

%endif

%if %{include_debug_build}

%global slowdebug_build %{debug_suffix}

%else

%global slowdebug_build %{nil}

%endif

%if %{include_fastdebug_build}

%global fastdebug_build %{fastdebug_suffix}

%else

%global fastdebug_build %{nil}

%endif

# If you disable all builds, then the build fails

# Build and test slowdebug first as it provides the best diagnostics

%global build_loop %{slowdebug_build} %{fastdebug_build} %{normal_build}

%if %{include_staticlibs}

%global staticlibs_loop %{staticlibs_suffix}

%else

%global staticlibs_loop %{nil}

%endif

%if 0%{?flatpak}

%global bootstrap_build false

%else

%ifarch %{bootstrap_arches}

%global bootstrap_build true

%else

%global bootstrap_build false

%endif

%endif

%if %{include_staticlibs}

# Extra target for producing the static-libraries. Separate from

# other targets since this target is configured to use in-tree

# AWT dependencies: lcms, libjpeg, libpng, libharfbuzz, giflib

# and possibly others

%global static_libs_target static-libs-image

%else

%global static_libs_target %{nil}

%endif

# The static libraries are produced under the same configuration as the main

# build for portables, as we expect in-tree libraries to be used throughout.

# If system libraries are enabled, the static libraries will also use them

# which may cause issues.

%global bootstrap_targets images %{static_libs_target} legacy-jre-image

%global release_targets images docs-zip %{static_libs_target} legacy-jre-image

# No docs nor bootcycle for debug builds

%global debug_targets images %{static_libs_target} legacy-jre-image

# Target to use to just build HotSpot

%global hotspot_target hotspot

# JDK to use for bootstrapping

%global bootjdk /usr/lib/jvm/java-%{buildjdkver}-openjdk

# Disable LTO as this causes build failures at the moment.

# See RHBZ#1861401

%define _lto_cflags %{nil}

# Filter out flags from the optflags macro that cause problems with the OpenJDK build

# We filter out -O flags so that the optimization of HotSpot is not lowered from O3 to O2

# We filter out -Wall which will otherwise cause HotSpot to produce hundreds of thousands of warnings (100+mb logs)

# We replace it with -Wformat (required by -Werror=format-security) and -Wno-cpp to avoid FORTIFY_SOURCE warnings

# We filter out -fexceptions as the HotSpot build explicitly does -fno-exceptions and it's otherwise the default for C++

%global ourflags %(echo %optflags | sed -e 's|-Wall|-Wformat -Wno-cpp|' | sed -r -e 's|-O[0-9]*||')

%global ourcppflags %(echo %ourflags | sed -e 's|-fexceptions||')

%global ourldflags %{__global_ldflags}

# With disabled nss is NSS deactivated, so NSS_LIBDIR can contain the wrong path

# the initialization must be here. Later the pkg-config have buggy behavior

# looks like openjdk RPM specific bug

# Always set this so the nss.cfg file is not broken

%global NSS_LIBDIR %(pkg-config --variable=libdir nss)

# In some cases, the arch used by the JDK does

# not match _arch.

# Also, in some cases, the machine name used by SystemTap

# does not match that given by _target_cpu

%ifarch x86_64

%global archinstall amd64

%global stapinstall x86_64

%endif

%ifarch ppc

%global archinstall ppc

%global stapinstall powerpc

%endif

%ifarch %{ppc64be}

%global archinstall ppc64

%global stapinstall powerpc

%endif

%ifarch %{ppc64le}

%global archinstall ppc64le

%global stapinstall powerpc

%endif

%ifarch %{ix86}

%global archinstall i686

%global stapinstall i386

%endif

%ifarch ia64

%global archinstall ia64

%global stapinstall ia64

%endif

%ifarch s390

%global archinstall s390

%global stapinstall s390

%endif

%ifarch s390x

%global archinstall s390x

%global stapinstall s390

%endif

%ifarch %{arm}

%global archinstall arm

%global stapinstall arm

%endif

%ifarch %{aarch64}

%global archinstall aarch64

%global stapinstall arm64

%endif

# 32 bit sparc, optimized for v9

%ifarch sparcv9

%global archinstall sparc

%global stapinstall %{_target_cpu}

%endif

# 64 bit sparc

%ifarch sparc64

%global archinstall sparcv9

%global stapinstall %{_target_cpu}

%endif

# Need to support noarch for srpm build

%ifarch noarch

%global archinstall %{nil}

%global stapinstall %{nil}

%endif

# always off for portable builds

%ifarch %{systemtap_arches}

%global with_systemtap 0

%else

%global with_systemtap 0

%endif

# New Version-String scheme-style defines

%global featurever 11

%global interimver 0

%global updatever 19

%global patchver 0

# buildjdkver is usually same as %%{featurever},

# but in time of bootstrap of next jdk, it is featurever-1,

# and this it is better to change it here, on single place

%global buildjdkver %{featurever}

# Add LTS designator for RHEL builds

%if 0%{?rhel}

  %global lts_designator "LTS"

  %global lts_designator_zip -%{lts_designator}

%else

  %global lts_designator ""

  %global lts_designator_zip ""

%endif

# Define vendor information used by OpenJDK

%global oj_vendor Red Hat, Inc.

%global oj_vendor_url https://www.redhat.com/

# Define what url should JVM offer in case of a crash report

# order may be important, epel may have rhel declared

%if 0%{?epel}

%global oj_vendor_bug_url  https://bugzilla.redhat.com/enter_bug.cgi?product=Fedora%20EPEL&component=%{component}&version=epel%{epel}

%else

%if 0%{?fedora}

# Does not work for rawhide, keeps the version field empty

%global oj_vendor_bug_url  https://bugzilla.redhat.com/enter_bug.cgi?product=Fedora&component=%{component}&version=%{fedora}

%else

%if 0%{?rhel}

%global oj_vendor_bug_url  https://bugzilla.redhat.com/enter_bug.cgi?product=Red%20Hat%20Enterprise%20Linux%20%{rhel}&component=%{component}

%else

%global oj_vendor_bug_url  https://bugzilla.redhat.com/enter_bug.cgi

%endif

%endif

%endif

%global oj_vendor_version (Red_Hat-%{version}-%{rpmrelease})

# Define IcedTea version used for SystemTap tapsets and desktop file

%global icedteaver      6.0.0pre00-c848b93a8598

# Define current Git revision for the FIPS support patches

%global fipsver b34fb09a5c

# Standard JPackage naming and versioning defines

%global origin          openjdk

%global origin_nice     OpenJDK

%global top_level_dir_name   %{origin}

%global top_level_dir_name_backup %{top_level_dir_name}-backup

%global buildver        7

%global rpmrelease      2

#%%global tagsuffix     %%{nil}

# Priority must be 8 digits in total; up to openjdk 1.8, we were using 18..... so when we moved to 11, we had to add another digit

%if %is_system_jdk

# Using 10 digits may overflow the int used for priority, so we combine the patch and build versions

# It is very unlikely we will ever have a patch version > 4 or a build version > 20, so we combine as (patch * 20) + build.

# This means 11.0.9.0+11 would have had a priority of 11000911 as before

# A 11.0.9.1+1 would have had a priority of 11000921 (20 * 1 + 1), thus ensuring it is bigger than 11.0.9.0+11

%global combiver $( expr 20 '*' %{patchver} + %{buildver} )

%global priority %( printf '%02d%02d%02d%02d' %{featurever} %{interimver} %{updatever} %{combiver} )

%else

# for techpreview, using 1, so slowdebugs can have 0

%global priority %( printf '%08d' 1 )

%endif

%global newjavaver %{featurever}.%{interimver}.%{updatever}.%{patchver}

# Strip up to 6 trailing zeros in newjavaver, as the JDK does, to get the correct version used in filenames

%global filever %(svn=%{newjavaver}; for i in 1 2 3 4 5 6 ; do svn=${svn%%.0} ; done; echo ${svn})

# The tag used to create the OpenJDK tarball

%global vcstag jdk-%{filever}+%{buildver}%{?tagsuffix:-%{tagsuffix}}

%global javaver         %{featurever}

# Define milestone (EA for pre-releases, GA for releases)

# Release will be (where N is usually a number starting at 1):

# - 0.N%%{?extraver}%%{?dist} for EA releases,

# - N%%{?extraver}{?dist} for GA releases

%global is_ga           1

%if %{is_ga}

%global ea_designator ""

%global ea_designator_zip ""

%global extraver %{nil}

%global eaprefix %{nil}

%else

%global ea_designator ea

%global ea_designator_zip -%{ea_designator}

%global extraver .%{ea_designator}

%global eaprefix 0.

%endif

# parametrized macros are order-sensitive

%global compatiblename  java-%{featurever}-%{origin}

%global fullversion     %{compatiblename}-%{version}-%{release}

# images directories from upstream build

%global jdkimage                jdk

%global static_libs_image       static-libs

# output dir stub

%define buildoutputdir() %{expand:build/jdk%{featurever}.build%{?1}}

%define installoutputdir() %{expand:install/jdk%{featurever}.install%{?1}}

%define packageoutputdir() %{expand:packages/jdk%{featurever}.packages%{?1}}

# we can copy the javadoc to not arched dir, or make it not noarch

%define uniquejavadocdir()    %{expand:%{fullversion}.%{_arch}%{?1}}

# main id and dir of this jdk

%define uniquesuffix()        %{expand:%{fullversion}.%{_arch}%{?1}}

# portable only declarations

%global jreimage                jre

%define jreportablenameimpl() %(echo %{uniquesuffix ""} | sed "s;el8\\(_[0-9]\\)*;portable%{1}.jre.;g" | sed "s;openjdkportable;el;g")

%define jdkportablenameimpl() %(echo %{uniquesuffix ""} | sed "s;el8\\(_[0-9]\\)*;portable%{1}.jdk.;g" | sed "s;openjdkportable;el;g")

%define staticlibsportablenameimpl() %(echo %{uniquesuffix ""} | sed "s;el8\\(_[0-9]\\)*;portable%{1}.static-libs.;g" | sed "s;openjdkportable;el;g")

%define jreportablearchive()  %{expand:%{jreportablenameimpl -- %%{1}}.tar.xz}

%define jdkportablearchive()  %{expand:%{jdkportablenameimpl -- %%{1}}.tar.xz}

%define staticlibsportablearchive()  %{expand:%{staticlibsportablenameimpl -- %%{1}}.tar.xz}

%define jreportablename()     %{expand:%{jreportablenameimpl -- %%{1}}}

%define jdkportablename()     %{expand:%{jdkportablenameimpl -- %%{1}}}

# Intentionally use jdkportablenameimpl here since we want to have static-libs files overlayed on

# top of the JDK archive

%define staticlibsportablename()     %{expand:%{jdkportablenameimpl -- %%{1}}}

%define docportablename() %(echo %{uniquesuffix ""} | sed "s;el8\\(_[0-9]\\)*;portable.docs.;g" | sed "s;openjdkportable;el;g")

%define docportablearchive()  %{docportablename}.tar.xz

%define miscportablename() %(echo %{uniquesuffix ""} | sed "s;el8\\(_[0-9]\\)*;portable.misc.;g" | sed "s;openjdkportable;el;g")

%define miscportablearchive()  %{miscportablename}.tar.xz

#################################################################

# fix for https://bugzilla.redhat.com/show_bug.cgi?id=1111349

#         https://bugzilla.redhat.com/show_bug.cgi?id=1590796#c14

#         https://bugzilla.redhat.com/show_bug.cgi?id=1655938

%global _privatelibs libsplashscreen[.]so.*|libawt_xawt[.]so.*|libjli[.]so.*|libattach[.]so.*|libawt[.]so.*|libextnet[.]so.*|libawt_headless[.]so.*|libdt_socket[.]so.*|libfontmanager[.]so.*|libinstrument[.]so.*|libj2gss[.]so.*|libj2pcsc[.]so.*|libj2pkcs11[.]so.*|libjaas[.]so.*|libjavajpeg[.]so.*|libjdwp[.]so.*|libjimage[.]so.*|libjsound[.]so.*|liblcms[.]so.*|libmanagement[.]so.*|libmanagement_agent[.]so.*|libmanagement_ext[.]so.*|libmlib_image[.]so.*|libnet[.]so.*|libnio[.]so.*|libprefs[.]so.*|librmi[.]so.*|libsaproc[.]so.*|libsctp[.]so.*|libsunec[.]so.*|libsystemconf[.]so.*|libunpack[.]so.*|libzip[.]so.*%{freetype_lib}

%global _publiclibs libjawt[.]so.*|libjava[.]so.*|libjvm[.]so.*|libverify[.]so.*|libjsig[.]so.*

%if %is_system_jdk

%global __provides_exclude ^(%{_privatelibs})$

%global __requires_exclude ^(%{_privatelibs})$

# Never generate lib-style provides/requires for any debug packages

%global __provides_exclude_from ^.*/%{uniquesuffix -- %{debug_suffix_unquoted}}/.*$

%global __requires_exclude_from ^.*/%{uniquesuffix -- %{debug_suffix_unquoted}}/.*$

%global __provides_exclude_from ^.*/%{uniquesuffix -- %{fastdebug_suffix_unquoted}}/.*$

%global __requires_exclude_from ^.*/%{uniquesuffix -- %{fastdebug_suffix_unquoted}}/.*$

%else

# Don't generate provides/requires for JDK provided shared libraries at all.

%global __provides_exclude ^(%{_privatelibs}|%{_publiclibs})$

%global __requires_exclude ^(%{_privatelibs}|%{_publiclibs})$

%endif

%global etcjavasubdir     %{_sysconfdir}/java/java-%{javaver}-%{origin}

%define etcjavadir()      %{expand:%{etcjavasubdir}/%{uniquesuffix -- %{?1}}}

# Standard JPackage directories and symbolic links.

%define sdkdir()        %{expand:%{uniquesuffix -- %{?1}}}

%define jrelnk()        %{expand:jre-%{javaver}-%{origin}-%{version}-%{release}.%{_arch}%{?1}}

%define sdkbindir()     %{expand:%{_jvmdir}/%{sdkdir -- %{?1}}/bin}

%define jrebindir()     %{expand:%{_jvmdir}/%{sdkdir -- %{?1}}/bin}

%global alt_java_name     alt-java

%global rpm_state_dir %{_localstatedir}/lib/rpm-state/

# For flatpack builds hard-code /usr/sbin/alternatives,

# otherwise use %%{_sbindir} relative path.

%if 0%{?flatpak}

%global alternatives_requires /usr/sbin/alternatives

%else

%global alternatives_requires %{_sbindir}/alternatives

%endif

%if %{with_systemtap}

# Where to install systemtap tapset (links)

# We would like these to be in a package specific sub-dir,

# but currently systemtap doesn't support that, so we have to

# use the root tapset dir for now. To distinguish between 64

# and 32 bit architectures we place the tapsets under the arch

# specific dir (note that systemtap will only pickup the tapset

# for the primary arch for now). Systemtap uses the machine name

# aka target_cpu as architecture specific directory name.

%global tapsetroot /usr/share/systemtap

%global tapsetdirttapset %{tapsetroot}/tapset/

%global tapsetdir %{tapsetdirttapset}/%{stapinstall}

%endif

# Portables have no repo (requires/provides), but these are awesome for orientation in spec

# Also scriptlets are happily missing and files are handled old fashion

# not-duplicated requires/provides/obsoletes for normal/debug packages

%define java_rpo() %{expand:

}

%define java_devel_rpo() %{expand:

}

%define java_static_libs_rpo() %{expand:

}

%define java_unstripped_rpo() %{expand:

}

%define java_docs_rpo() %{expand:

}

%define java_misc_rpo() %{expand:

}

# Prevent brp-java-repack-jars from being run

%global __jar_repack 0

# portables have grown out of its component, moving back to java-x-vendor

# this expression, when declared as global, filled component with java-x-vendor portable

%define component %(echo %{name} | sed "s;-portable;;g")

Name:    java-%{javaver}-%{origin}-portable

Version: %{newjavaver}.%{buildver}

Release: %{?eaprefix}%{rpmrelease}%{?extraver}%{?dist}

# java-1.5.0-ibm from jpackage.org set Epoch to 1 for unknown reasons

# and this change was brought into RHEL-4. java-1.5.0-ibm packages

# also included the epoch in their virtual provides. This created a

# situation where in-the-wild java-1.5.0-ibm packages provided "java =

# 1:1.5.0". In RPM terms, "1.6.0 < 1:1.5.0" since 1.6.0 is

# interpreted as 0:1.6.0. So the "java >= 1.6.0" requirement would be

# satisfied by the 1:1.5.0 packages. Thus we need to set the epoch in

# JDK package >= 1.6.0 to 1, and packages referring to JDK virtual

# provides >= 1.6.0 must specify the epoch, "java >= 1:1.6.0".

Epoch:   1

Summary: %{origin_nice} %{featurever} Runtime Environment portable edition

%if 0%{?rhel} <= 8

Group:   Development/Languages

%endif

# HotSpot code is licensed under GPLv2

# JDK library code is licensed under GPLv2 with the Classpath exception

# The Apache license is used in code taken from Apache projects (primarily xalan & xerces)

# DOM levels 2 & 3 and the XML digital signature schemas are licensed under the W3C Software License

# The JSR166 concurrency code is in the public domain

# The BSD and MIT licenses are used for a number of third-party libraries (see ADDITIONAL_LICENSE_INFO)

# The OpenJDK source tree includes:

# - JPEG library (IJG), zlib & libpng (zlib), giflib (MIT), harfbuzz (ISC),

# - freetype (FTL), jline (BSD) and LCMS (MIT)

# - jquery (MIT), jdk.crypto.cryptoki PKCS 11 wrapper (RSA)

# - public_suffix_list.dat from publicsuffix.org (MPLv2.0)

# The test code includes copies of NSS under the Mozilla Public License v2.0

# The PCSClite headers are under a BSD with advertising license

# The elliptic curve cryptography (ECC) source code is licensed under the LGPLv2.1 or any later version

License:  ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA

URL:      http://openjdk.java.net/

# to regenerate source0 (jdk) run update_package.sh

# update_package.sh contains hard-coded repos, revisions, tags, and projects to regenerate the source archives

Source0: openjdk-jdk%{featurever}u-%{vcstag}-4curve.tar.xz

# Use 'icedtea_sync.sh' to update the following

# They are based on code contained in the IcedTea project (6.x).

# Systemtap tapsets. Zipped up to keep it small.

# Disabled in portables

#Source8: tapsets-icedtea-%%{icedteaver}.tar.xz

# Desktop files. Adapted from IcedTea

# Disabled in portables

#Source9: jconsole.desktop.in

# Release notes

Source10: NEWS

# nss configuration file

Source11: nss.cfg.in

# Removed libraries that we link instead

Source12: remove-intree-libraries.sh

# Ensure we aren't using the limited crypto policy

Source13: TestCryptoLevel.java

# Ensure ECDSA is working

Source14: TestECDSA.java

# Verify system crypto (policy) can be disabled via a property

Source15: TestSecurityProperties.java

# Ensure vendor settings are correct

Source16: CheckVendor.java

# nss fips configuration file

Source17: nss.fips.cfg.in

# Ensure translations are available for new timezones

Source18: TestTranslations.java

############################################

#

# RPM/distribution specific patches

#

############################################

# Ignore AWTError when assistive technologies are loaded

Patch1:    rh1648242-accessible_toolkit_crash_do_not_break_jvm.patch

# NSS via SunPKCS11 Provider (disabled due to memory leak).

Patch1000: rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch

# RH1750419: enable build of speculative store bypass hardened alt-java (CVE-2018-3639)

Patch600: rh1750419-redhat_alt_java.patch

# RH1582504: Use RSA as default for keytool, as DSA is disabled in all crypto policies except LEGACY

Patch1003: rh1842572-rsa_default_for_keytool.patch

# Crypto policy and FIPS support patches

# Patch is generated from the fips tree at https://github.com/rh-openjdk/jdk11u/tree/fips

# as follows: git diff %%{vcstag} src make test > fips-11u-$(git show -s --format=%h HEAD).patch

# Diff is limited to src and make subdirectories to exclude .github changes

# Fixes currently included:

# PR3694, RH1340845: Add security.useSystemPropertiesFile option to java.security to use system crypto policy

# PR3695: Allow use of system crypto policy to be disabled by the user

# RH1655466: Support RHEL FIPS mode using SunPKCS11 provider

# RH1818909: No ciphersuites availale for SSLSocket in FIPS mode

# RH1860986: Disable TLSv1.3 with the NSS-FIPS provider until PKCS#11 v3.0 support is available

# RH1915071: Always initialise JavaSecuritySystemConfiguratorAccess

# RH1929465: Improve system FIPS detection

# RH1996182: Login to the NSS software token in FIPS mode

# RH1991003: Allow plain key import unless com.redhat.fips.plainKeySupport is set to false

# RH2021263: Make sure java.security.Security is initialised when retrieving JavaSecuritySystemConfiguratorAccess instance

# RH2021263: Return in C code after having generated Java exception

# RH2052819: Improve Security initialisation, now FIPS support no longer relies on crypto policy support

# RH2051605: Detect NSS at Runtime for FIPS detection

# RH2052819: Fix FIPS reliance on crypto policies

# RH2036462: sun.security.pkcs11.wrapper.PKCS11.getInstance breakage

# RH2090378: Revert to disabling system security properties and FIPS mode support together

Patch1001: fips-11u-%{fipsver}.patch

#############################################

#

# Shenandoah specific patches

#

#############################################

# Currently empty

#############################################

#

# Upstreamable patches

#

# This section includes patches which need to

# be reviewed & pushed to the current development

# tree of OpenJDK.

#############################################

Patch3:    rh649512-remove_uses_of_far_in_jpeg_libjpeg_turbo_1_4_compat_for_jdk10_and_up.patch

#############################################

#

# Backportable patches

#

# This section includes patches which are

# present in the current development tree, but

# need to be reviewed & pushed to the appropriate

# updates tree of OpenJDK.

#############################################

Patch2001: jdk8242332-rh2108712-sha3-sunpkcs11.patch

#############################################

#

# Patches appearing in 11.0.20

#

# This section includes patches which are present

# in the listed OpenJDK 11u release and should be

# able to be removed once that release is out

# and used by this RPM.

#############################################

# JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile

Patch2002: jdk8274864-remove_amman_cairo_hacks.patch

# JDK-8305113: (tz) Update Timezone Data to 2023c

Patch2003: jdk8305113-tzdata2023c.patch

#############################################

#

# Portable build specific patches

#

#############################################

BuildRequires: autoconf

BuildRequires: automake

BuildRequires: alsa-lib-devel

BuildRequires: binutils

BuildRequires: cups-devel

BuildRequires: desktop-file-utils

# elfutils only are OK for build without AOT

BuildRequires: elfutils-devel