source: general/prog/openjdk.xml@ 77a6d25

10.0 10.1 11.0 11.1 11.2 11.3 12.0 12.1 7.10 8.0 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind kea ken/TL2024 ken/inkscape-core-mods ken/tuningfonts lazarus lxqt nosym perl-modules plabs/newcss plabs/python-mods python3.11 qt5new rahul/power-profiles-daemon renodr/vulkan-addition trunk upgradedb xry111/intltool xry111/llvm18 xry111/soup3 xry111/test-20220226 xry111/xf86-video-removal
Last change on this file since 77a6d25 was 77a6d25, checked in by Igor Živković <igor@…>, 8 years ago

misspellings

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@17675 af4574ff-66df-0310-9fd7-8a98e5e911e0
  • Property mode set to 100644
File size: 45.9 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY ojdk-upd "92">
8 <!ENTITY ojdk-bd "b14">
9 <!ENTITY ojdk-tarball "jdk8u&ojdk-upd;-&ojdk-bd;.tar.bz2">
10 <!ENTITY ojdk-repo "http://hg.openjdk.java.net/jdk8u/jdk8u">
11 <!ENTITY ojdk-download "&ojdk-repo;/archive/&ojdk-tarball;">
12
13 <!ENTITY anduin-download "&sources-anduin-http;/OpenJDK/OpenJDK-&openjdk-version;">
14
15 <!ENTITY ojdk-md5sum "226f9051e34b70fbff031ec9d959773d">
16 <!ENTITY ojdk-size "399 KB">
17
18 <!ENTITY corba-md5sum "9619e84a600aaf81737f7ed71430d3aa">
19 <!ENTITY hotspot-md5sum "21e8fdc20ab17e7399752ef74c8e03e2">
20 <!ENTITY jaxp-md5sum "567189edafbe0aabaff2d75d86c05456">
21 <!ENTITY jaxws-md5sum "3e7db7d843ebbcd5eb2ba0a9e7e275d7">
22 <!ENTITY jdk-md5sum "b06f2e3504357820bb3dd29e19ccfc0d">
23 <!ENTITY langtools-md5sum "afbe0e3a8c0e9e2beac5567e1084f3ee">
24 <!ENTITY nashorn-md5sum "e3641526c2875b5d4d1414980769f6ea">
25 <!ENTITY total-download-size "63 MB">
26
27 <!ENTITY jtreg-version "4.1-b12-496">
28 <!ENTITY jtreg-download "&anduin-download;/jtreg-&jtreg-version;.tar.gz">
29 <!ENTITY jtreg-md5sum "00eb03c5754b5de953d2cec268f9e73e">
30 <!ENTITY jtreg-size "7.4 MB">
31
32 <!ENTITY icedtea-web-download "http://icedtea.classpath.org/download/source/icedtea-web-&icedtea-web-version;.tar.gz">
33
34 <!ENTITY ojdk-buildsize "3.7 GB (additional 546 MB for tests)">
35 <!ENTITY ojdk-time "12 SBU (additional 130 SBU for tests)">
36]>
37
38<sect1 id="openjdk"
39 xreflabel="OpenJDK-&openjdk-version;">
40 <?dbhtml filename="openjdk.html" ?>
41
42 <sect1info>
43 <othername>$LastChangedBy$</othername>
44 <date>$Date$</date>
45 </sect1info>
46
47 <title>OpenJDK-&openjdk-version;</title>
48
49 <indexterm zone="openjdk">
50 <primary sortas="a-OpenJDK">OpenJDK</primary>
51 </indexterm>
52
53 <sect2 role="package">
54 <title>Introduction to OpenJDK</title>
55
56 <para>
57 <application>OpenJDK</application> is an open-source implementation
58 of Oracle's Java Standard Edition platform.
59 <application>OpenJDK</application> is useful for developing
60 <application>Java</application> programs, and provides a complete
61 runtime environment to run <application>Java</application> programs.
62 </para>
63
64 &lfs79_checked;&gcc6_checked;
65
66 <note>
67 <para>
68 A browser plugin and webstart implementation, as well as a
69 pulseaudio sound backend are provided by the Icedtea project. To provide
70 a complete implementation, you will need to later install
71 <xref linkend="icedtea-web"/> and <xref linkend="icedtea-sound"/>.
72 </para>
73 </note>
74
75 <para>
76 OpenJDK is GPL'd code, with a special exception made for non-free
77 projects to use these classes in their proprietary products.
78 In similar fashion to the LGPL, which allows non-free programs to link
79 to libraries provided by free software, the
80 <ulink url="http://openjdk.java.net/legal/gplv2+ce.html">GNU
81 General Public License, version 2, with the Classpath Exception</ulink>
82 allows third party programs to use classes provided by free software
83 without the requirement that the third party software also be free. As
84 with the LGPL, any modifications made to the free software portions of a
85 third party application, must also be made freely available.
86 </para>
87
88 <note>
89 <para>
90 The <application>OpenJDK</application> source includes a very
91 thorough, open source test suite using the
92 <application>JTreg</application> test harness. The testing instructions
93 below allow to test the just built JDK for reasonable compatibility
94 with the proprietary Oracle JDK. However, in order for an independent
95 implementation to claim compatibility, it must pass a proprietary
96 <application>JCK/TCK</application> test suite. No claims of
97 compatibility, even partial compatibility, may be made without passing
98 an approved test suite.
99 </para>
100
101 <para>
102 Oracle does provide free community access, on a case by case basis, to
103 a closed toolkit to ensure 100% compatibility with its proprietary JDK.
104 Neither the binary version provided on the <xref linkend="java"/> page
105 nor the JVM built with the instructions below have been tested against
106 the <ulink
107 url="http://openjdk.java.net/groups/conformance/JckAccess/jck-access.html">
108 TCK</ulink>. Any version that is built using the instructions given,
109 cannot claim to be compatible with the proprietary JDK, without the
110 user applying for, and completing the compatibility tests themselves.
111 </para>
112
113 <para>
114 With that in mind, the binaries produced using this build method are
115 regularly tested against the TCK by the members listed on the site
116 above. In addition to the community license above, an educational,
117 non-commercial license for the TCK can be obtained from <ulink
118 url="http://www.oracle.com/technetwork/java/index-137188.html">
119 here</ulink>.
120 </para>
121 </note>
122
123 <bridgehead renderas="sect3">Source Package Information</bridgehead>
124 <itemizedlist spacing="compact">
125 <listitem>
126 <para>OpenJDK Root Package
127 <simplelist>
128 <member>Download: <ulink url="&ojdk-download;"/></member>
129 <member>Download MD5 sum: &ojdk-md5sum;</member>
130 <member>Download Size: &ojdk-size;</member>
131 </simplelist>
132 </para>
133 </listitem>
134 <listitem>
135 <para>
136 In addition to the root package, the instructions below first
137 download seven subproject tarballs,
138 whose total size is &total-download-size;.
139 </para>
140 </listitem>
141 <listitem>
142 <para>Estimated disk space required: &ojdk-buildsize;</para>
143 </listitem>
144 <listitem>
145 <para>Estimated build time: &ojdk-time;</para>
146 </listitem>
147 </itemizedlist>
148
149 <bridgehead renderas="sect3">Additional Downloads</bridgehead>
150
151 <itemizedlist spacing='compact'>
152 <listitem>
153 <para>Optional test harness
154 <simplelist>
155 <member>Download: <ulink url="&jtreg-download;"/></member>
156 <member>Download MD5 sum: &jtreg-md5sum;</member>
157 <member>Download Size: &jtreg-size;</member>
158 </simplelist>
159 </para>
160 </listitem>
161 <listitem>
162 <para>
163 Optional package (to get an icon for the
164 <filename>openjdk-8-policytool.desktop</filename> file):
165 <ulink url="&icedtea-web-download;"/>
166 </para>
167 </listitem>
168 </itemizedlist>
169
170 <bridgehead renderas="sect3">OpenJDK Dependencies</bridgehead>
171
172 <bridgehead renderas="sect4">Required Dependencies</bridgehead>
173 <para role="required">
174 An existing binary (<xref linkend="java"/> or an earlier built
175 version of this package. The instructions below assume that
176 you are using <xref linkend="ojdk-conf"/>),
177 <xref linkend="alsa-lib"/>,
178 <xref linkend="cpio"/>,
179 <xref linkend="cups"/>,
180 <xref linkend="unzip"/>,
181 <xref linkend="which"/>,
182 <xref linkend="xorg7-lib"/>, and
183 <xref linkend="zip"/>
184 </para>
185
186 <bridgehead renderas="sect4">Recommended</bridgehead>
187 <para role="recommended">
188 <xref linkend="cacerts"/>,
189 <xref linkend="giflib"/>, and
190 <xref linkend="wget"/>
191 </para>
192
193 <bridgehead renderas="sect4">Optional</bridgehead>
194 <para role="optional">
195 <xref linkend="mercurial"/> and
196 an X Window manager such as <xref linkend="twm"/> (for the tests)
197 </para>
198
199 <para condition="html" role="usernotes">User Notes:
200 <ulink url="&blfs-wiki;/openjdk"/></para>
201
202 </sect2>
203
204 <sect2 role="installation">
205 <title>Installation of OpenJDK</title>
206
207 <para>
208 Unlike other packages in BLFS, the <application>OpenJDK</application>
209 source packages are distributed in multiple tar balls. You need to first
210 extract the source root from <filename>&ojdk-tarball;</filename>, change
211 into the extracted directory, then proceed with the following
212 instructions:
213 </para>
214
215<screen><userinput>cat &gt; subprojects.md5 &lt;&lt; EOF &amp;&amp;
216&corba-md5sum; corba.tar.bz2
217&hotspot-md5sum; hotspot.tar.bz2
218&jaxp-md5sum; jaxp.tar.bz2
219&jaxws-md5sum; jaxws.tar.bz2
220&langtools-md5sum; langtools.tar.bz2
221&jdk-md5sum; jdk.tar.bz2
222&nashorn-md5sum; nashorn.tar.bz2
223EOF
224
225for subproject in corba hotspot jaxp jaxws langtools jdk nashorn; do
226 wget -c &ojdk-repo;/${subproject}/archive/&ojdk-tarball; \
227 -O ${subproject}.tar.bz2
228done &amp;&amp;
229
230md5sum -c subprojects.md5 &amp;&amp;
231
232for subproject in corba hotspot jaxp jaxws langtools jdk nashorn; do
233 mkdir -pv ${subproject} &amp;&amp;
234 tar -xf ${subproject}.tar.bz2 --strip-components=1 -C ${subproject}
235done</userinput></screen>
236
237 <para>
238 If you have downloaded the optional test harness, unpack it too:
239 </para>
240
241<screen><userinput>tar -xf ../jtreg-&jtreg-version;.tar.gz</userinput></screen>
242
243<!--TODO: it might be better to add instructions for the cacerts file at
244this place and to use the switch "with-cacerts-file" -->
245
246 <note>
247 <para>
248 Before proceeding, you should ensure that your environment
249 <envar>PATH</envar> variable contains the location of the Java
250 compilers used for bootstrapping <application>OpenJDK</application>.
251 This is the only requirement for the environment. Modern Java
252 installations do not need <envar>JAVA_HOME</envar> and
253 <envar>CLASSPATH</envar> is not used here. Furthermore, OpenJDK
254 developers recommend to unset <envar>JAVA_HOME</envar>.
255 </para>
256
257 <para>
258 The build system does not support the <option>-j</option> switch in
259 <envar>MAKEFLAGS</envar>.
260 </para>
261 </note>
262
263 <para>
264 Configure and build the package with the following commands
265 (--with-milestone value can be modified to fit user preferences):
266 </para>
267
268<screen><userinput>unset JAVA_HOME &amp;&amp;
269sh ./configure \
270 --with-update-version=&ojdk-upd; \
271 --with-build-number=&ojdk-bd; \
272 --with-milestone=BLFS \
273 --enable-unlimited-crypto \
274 --with-zlib=system \
275 --with-giflib=system \
276 --with-extra-cflags="-std=c++98 -Wno-error -fno-delete-null-pointer-checks -fno-lifetime-dse" \
277 --with-extra-cxxflags="-std=c++98 -fno-delete-null-pointer-checks -fno-lifetime-dse" &amp;&amp;
278make DEBUG_BINARIES=true SCTP_WERROR= all &amp;&amp;
279find build/*/images/j2sdk-image -iname \*.diz -delete
280</userinput></screen>
281
282 <note>
283 <para>
284 Testing will involve the interplay of pairs of JVMs using the
285 networking interface, so networking must be started. If it
286 isn't, not only will these tests fail, but the test cleanup
287 will leave orphaned JVMs running. There will be many of
288 them. Rebooting may be the easiest recovery.
289 </para>
290 </note>
291
292 <para>
293 Testing the newly built JVM involves several steps.
294 First, it is better to run the test suite in a frame buffer on a
295 different display, using Xvfb:
296 </para>
297
298<!-- Careful with the && below:
299"export DISPLAY=... && somecommand &" exports only DISPLAY to "somecommand"
300but not to the current environment, and
301"echo $! .... &&" does not echo the right PID. So all && suppressed.-->
302<screen role='nodump'><userinput>if [ -n "$DISPLAY" ]; then
303 OLD_DISP=$DISPLAY
304fi
305export DISPLAY=:20
306nohup Xvfb $DISPLAY \
307 -fbdir $(pwd) \
308 -pixdepths 8 16 24 32 > Xvfb.out 2>&amp;1 &amp;
309echo $! > Xvfb.pid
310echo Waiting for Xvfb to initialize; sleep 1
311nohup twm -display $DISPLAY \
312 -f /dev/null > twm.out 2>&amp;1 &amp;
313echo $! > twm.pid
314echo Waiting for twm to initialize; sleep 1
315xhost +</userinput></screen>
316
317 <para>
318 Then, it is necessary to modify some files<!-- (replace &lt;N&gt; with the
319 number of JAVA VM allowed to run concurrently)-->:
320 </para>
321
322<screen role='nodump'><userinput>echo -e "
323jdk_all = :jdk_core \\
324 :jdk_svc \\
325 :jdk_beans \\
326 :jdk_imageio \\
327 :jdk_sound \\
328 :jdk_sctp \\
329 com/sun/awt \\
330 javax/accessibility \\
331 javax/print \\
332 sun/pisces \\
333 com/sun/java/swing" >> jdk/test/TEST.groups &amp;&amp;
334sed -e 's/all:.*jck.*/all: jtreg/' \
335 -e '/^JTREG /s@\$(JT_PLATFORM)/@@' \
336 -i langtools/test/Makefile<!-- &amp;&amp;
337sed -i 's@/win32@@' jdk/test/Makefile &amp;&amp;
338sed -e 's@JTREG_HOME@JT_PLATFORM="" &amp;@' \
339 -e 's@TEST="@CONCURRENCY=&lt;N&gt; &amp;@' \
340 -i test/Makefile--></userinput></screen>
341
342 <para>
343 Some variables have to be set:
344 </para>
345
346<screen role='nodump'><userinput>JT_JAVA=$(type -p javac | sed 's@/bin.*@@') &amp;&amp;
347JT_HOME=$(pwd)/jtreg &amp;&amp;
348PRODUCT_HOME=$(echo $(pwd)/build/*/images/j2sdk-image)</userinput></screen>
349
350 <para>
351 The tests are run as follows:
352 </para>
353
354<!-- no && here either, because the first "make" may return an error -->
355<screen role='nodump'><userinput>LANG=C make -k -C test \
356 JT_HOME=${JT_HOME} \
357 JT_JAVA=${JT_JAVA} \
358 PRODUCT_HOME=${PRODUCT_HOME} all
359LANG=C ${JT_HOME}/bin/jtreg -a -v:fail,error \
360 -dir:$(pwd)/hotspot/test \
361 -k:\!ignore \
362 -jdk:${PRODUCT_HOME} \
363<!-- -agentvm -conc:&lt;N&gt; \
364--> :jdk</userinput></screen>
365
366 <para>
367 The test results can be compared to <ulink
368 url="http://download.java.net/openjdk/testresults/8/">these
369 results</ulink>, although they usually are run on a newer version. Some
370 failures can be expected, the number of which depends on various
371 conditions, like whether the computer is connected to network. Also, some
372 tests may timeout if the machine is under load. Those are the reasons for
373 considering the tests optional, although we would rather recommend them.
374 </para>
375
376 <para>
377 Next some cleanup has to be done. The instructions below only stop the
378 frame buffer, but it has been reported that some java VM may be left
379 running after the tests, so it is necessary to check orphaned processes:
380 </para>
381
382<screen role='nodump'><userinput>kill -9 `cat twm.pid` &amp;&amp;
383kill -9 `cat Xvfb.pid` &amp;&amp;
384rm -f Xvfb.out twm.out &amp;&amp;
385rm -f Xvfb.pid twm.pid &amp;&amp;
386if [ -n "$OLD_DISP" ]; then
387 DISPLAY=$OLD_DISP
388fi</userinput></screen>
389
390 <para>Install the package with the following commands as the
391 <systemitem class="username">root</systemitem> user:</para>
392
393<screen role="root"><userinput>cp -RT build/*/images/j2sdk-image /opt/OpenJDK-&openjdk-version; &amp;&amp;
394chown -R root:root /opt/OpenJDK-&openjdk-version;</userinput></screen>
395
396 <para>
397 There are now two <application>OpenJDK</application> SDKs installed
398 in <filename class="directory">/opt</filename>. You should decide on
399 which one you would like to use as the default. Normally, you would opt
400 for the just installed <application>OpenJDK</application>. If so, do
401 the following as the <systemitem class="username">root</systemitem>
402 user:
403 </para>
404
405<screen role="root"><userinput>ln -v -nsf OpenJDK-&openjdk-version; /opt/jdk</userinput></screen>
406
407 <para>If desired, you may install a .desktop file corresponding to an entry
408 in a desktop menu for <command>policytool</command>. First, you need to
409 obtain an icon from <xref linkend="icedtea-web"/>:</para>
410
411<screen><userinput>tar -xf ../icedtea-web-&icedtea-web-version;.tar.gz \
412 icedtea-web-&icedtea-web-version;/javaws.png \
413 --strip-components=1</userinput></screen>
414
415 <para>Now, as <systemitem class="username">root</systemitem> user:</para>
416
417<screen role="root"><userinput>mkdir -pv /usr/share/applications &amp;&amp;
418
419cat &gt; /usr/share/applications/openjdk-8-policytool.desktop &lt;&lt; "EOF" &amp;&amp;
420<literal>[Desktop Entry]
421Name=OpenJDK Java Policy Tool
422Name[pt_BR]=OpenJDK Java - Ferramenta de Pol&#237;tica
423Comment=OpenJDK Java Policy Tool
424Comment[pt_BR]=OpenJDK Java - Ferramenta de Pol&#237;tica
425Exec=/opt/jdk/bin/policytool
426Terminal=false
427Type=Application
428Icon=javaws
429Categories=Settings;</literal>
430EOF
431
432install -v -Dm0644 javaws.png /usr/share/pixmaps/javaws.png</userinput></screen>
433
434 <para>The choice of pt_BR is just an example. You can add any translation
435 by adding lines corresponding to your locale, e.g. for fr_FR,
436 <quote>Name[fr_FR]=</quote> and <quote>Comment[fr_FR]=</quote> with the
437 appropriate text as values.</para>
438
439 </sect2>
440
441 <sect2 role="commands">
442 <title>Command Explanations</title>
443
444 <para>
445 <command>sh configure...</command>: the top level
446 <filename>configure</filename> is a wrapper around the autotools one.
447 It is not executable and must be run through <command>sh</command>.
448 </para>
449
450 <para>
451 <option>--with-boot-jdk</option>: This switch provides the
452 location of the temporary <application>JDK</application>. It is normally
453 not needed if <command>java</command> is found in the <envar>PATH</envar>.
454 </para>
455
456 <para>
457 <parameter>--with-update-version</parameter>: Currently, the build
458 system does not include the update number in the version string. It has
459 to be specified here.
460 </para>
461
462 <para>
463 <parameter>--with-build-number</parameter>: Again, the build
464 system does not include the build number in the version string. It has
465 to be specified here too.
466 </para>
467
468 <para>
469 <parameter>--with-milestone</parameter>: Used to customize the
470 version string.
471 </para>
472
473 <para>
474 <parameter>--enable-unlimited-crypto</parameter>: Because of limitations
475 on the usage of cryptography in some countries, there is the possibility
476 to limit the size of encryption keys and the use of some algorithms in a
477 policy file. This switch allows to ship a policy file with no
478 restriction. It is the responsibility of the user to ensure proper
479 adherence to the law.
480 </para>
481
482 <para>
483 <parameter>--with-zlib=system, --with-giflib=system</parameter>: Allows
484 to use the system libraries instead of the bundled ones.
485 </para>
486
487 <para>
488 <parameter>--with-extra-cflags=... --with-extra-cxxflags=...</parameter>:
489 Works around some defects in the code brought to light by the GCC 6
490 more rigorous checking of the C/C++ constructs. Remove those switches
491 if compiling with GCC 5.
492 </para>
493
494 <para>
495 <option>--with-jobs=N</option>: Allows setting the number
496 of jobs for <command>make</command> equal to N. The default is the
497 result of a calculation involving the available memory and the number
498 of processors. Note that even if you specify N=1, some parallelization
499 may be used during the build. The SBU given above are with parallel jobs
500 disabled, on a single processor, single core, virtual machine.
501 </para>
502
503 <para>
504 <option>--with-cacerts-file=...</option>: Specifies where to find a
505 <filename>cacerts</filename> file, typically <filename>
506 /opt/jdk/jre/lib/security</filename>. Otherwise, an empty one is created.
507 You can get it from an earlier version of the package, or use the
508 script below to generate one.
509 </para>
510
511 <para>
512 <command>make DEBUG_BINARIES=true SCTP_WERROR= all</command>: The build
513 fails on 32 bit machines if DEBUG_BINARIES is not set to true. Unsetting
514 SCTP_WERROR is part of the workarounds needed to use GCC 6. You may omit
515 that part of the command if using GCC 5.
516 </para>
517
518 <para>
519 <command>find ... -iname '*.diz' -delete</command>: This command
520 removes redundant files.
521 </para>
522
523 </sect2>
524
525 <sect2 role="configuration"
526 id="openjdk-config"
527 xreflabel="Configuring OpenJDK">
528 <title>Configuring OpenJDK</title>
529
530 <sect3>
531 <title>Configuration Information</title>
532
533 <para>
534 Normally, the JAVA environment has been configured after installing
535 the binary version, and can be used with the just built package as well.
536 Review <xref linkend="ojdk-conf"/> in case you want to modify
537 something.
538 </para>
539
540 <para>
541 To test if the man pages are correctly installed, issue
542 <command>source /etc/profile</command> and <command>man java</command>
543 to display the respective man page.
544 </para>
545
546 </sect3>
547
548 <sect3 id='ojdk-certs' xreflabel='JRE Certificate Authority Certificates'>
549 <title>Install or update the JRE Certificate Authority Certificates
550 (cacerts) file</title>
551
552 <para>
553 <application>OpenJDK</application> uses its own format for the
554 CA certificates. Those certificates are located in a file named
555 <filename>/opt/jdk/jre/lib/security/cacerts</filename>. That file
556 may be generated from the one installed using the instructions on the
557 <xref linkend="cacerts"/> page, with the following procedure.
558 First, generate the <command>mkcacerts</command> script
559 as the <systemitem class="username">root</systemitem> user:
560 </para>
561
562<screen role="root"><userinput>cat &gt; /opt/jdk/bin/mkcacerts &lt;&lt; "EOF"
563<literal>#!/bin/sh
564# Simple script to extract x509 certificates and create a JRE cacerts file.
565
566function get_args()
567 {
568 if test -z "${1}" ; then
569 showhelp
570 exit 1
571 fi
572
573 while test -n "${1}" ; do
574 case "${1}" in
575 -f | --cafile)
576 check_arg $1 $2
577 CAFILE="${2}"
578 shift 2
579 ;;
580 -d | --cadir)
581 check_arg $1 $2
582 CADIR="${2}"
583 shift 2
584 ;;
585 -o | --outfile)
586 check_arg $1 $2
587 OUTFILE="${2}"
588 shift 2
589 ;;
590 -k | --keytool)
591 check_arg $1 $2
592 KEYTOOL="${2}"
593 shift 2
594 ;;
595 -s | --openssl)
596 check_arg $1 $2
597 OPENSSL="${2}"
598 shift 2
599 ;;
600 -h | --help)
601 showhelp
602 exit 0
603 ;;
604 *)
605 showhelp
606 exit 1
607 ;;
608 esac
609 done
610 }
611
612function check_arg()
613 {
614 echo "${2}" | grep -v "^-" > /dev/null
615 if [ -z "$?" -o ! -n "$2" ]; then
616 echo "Error: $1 requires a valid argument."
617 exit 1
618 fi
619 }
620
621# The date binary is not reliable on 32bit systems for dates after 2038
622function mydate()
623 {
624 local y=$( echo $1 | cut -d" " -f4 )
625 local M=$( echo $1 | cut -d" " -f1 )
626 local d=$( echo $1 | cut -d" " -f2 )
627 local m
628
629 if [ ${d} -lt 10 ]; then d="0${d}"; fi
630
631 case $M in
632 Jan) m="01";;
633 Feb) m="02";;
634 Mar) m="03";;
635 Apr) m="04";;
636 May) m="05";;
637 Jun) m="06";;
638 Jul) m="07";;
639 Aug) m="08";;
640 Sep) m="09";;
641 Oct) m="10";;
642 Nov) m="11";;
643 Dec) m="12";;
644 esac
645
646 certdate="${y}${m}${d}"
647 }
648
649function showhelp()
650 {
651 echo "`basename ${0}` creates a valid cacerts file for use with IcedTea."
652 echo ""
653 echo " -f --cafile The path to a file containing PEM"
654 echo " formated CA certificates. May not be"
655 echo " used with -d/--cadir."
656 echo ""
657 echo " -d --cadir The path to a directory of PEM formatted"
658 echo " CA certificates. May not be used with"
659 echo " -f/--cafile."
660 echo ""
661 echo " -o --outfile The path to the output file."
662 echo ""
663 echo " -k --keytool The path to the java keytool utility."
664 echo ""
665 echo " -s --openssl The path to the openssl utility."
666 echo ""
667 echo " -h --help Show this help message and exit."
668 echo ""
669 echo ""
670 }
671
672# Initialize empty variables so that the shell does not pollute the script
673CAFILE=""
674CADIR=""
675OUTFILE=""
676OPENSSL=""
677KEYTOOL=""
678certdate=""
679date=""
680today=$( date +%Y%m%d )
681
682# Process command line arguments
683get_args ${@}
684
685# Handle common errors
686if test "${CAFILE}x" == "x" -a "${CADIR}x" == "x" ; then
687 echo "ERROR! You must provide an x509 certificate store!"
688 echo "\'$(basename ${0}) --help\' for more info."
689 echo ""
690 exit 1
691fi
692
693if test "${CAFILE}x" != "x" -a "${CADIR}x" != "x" ; then
694 echo "ERROR! You cannot provide two x509 certificate stores!"
695 echo "\'$(basename ${0}) --help\' for more info."
696 echo ""
697 exit 1
698fi
699
700if test "${KEYTOOL}x" == "x" ; then
701 echo "ERROR! You must provide a valid keytool program!"
702 echo "\'$(basename ${0}) --help\' for more info."
703 echo ""
704 exit 1
705fi
706
707if test "${OPENSSL}x" == "x" ; then
708 echo "ERROR! You must provide a valid path to openssl!"
709 echo "\'$(basename ${0}) --help\' for more info."
710 echo ""
711 exit 1
712fi
713
714if test "${OUTFILE}x" == "x" ; then
715 echo "ERROR! You must provide a valid output file!"
716 echo "\'$(basename ${0}) --help\' for more info."
717 echo ""
718 exit 1
719fi
720
721# Get on with the work
722
723# If using a CAFILE, split it into individual files in a temp directory
724if test "${CAFILE}x" != "x" ; then
725 TEMPDIR=`mktemp -d`
726 CADIR="${TEMPDIR}"
727
728 # Get a list of staring lines for each cert
729 CERTLIST=`grep -n "^-----BEGIN" "${CAFILE}" | cut -d ":" -f 1`
730
731 # Get a list of ending lines for each cert
732 ENDCERTLIST=`grep -n "^-----END" "${CAFILE}" | cut -d ":" -f 1`
733
734 # Start a loop
735 for certbegin in `echo "${CERTLIST}"` ; do
736 for certend in `echo "${ENDCERTLIST}"` ; do
737 if test "${certend}" -gt "${certbegin}"; then
738 break
739 fi
740 done
741 sed -n "${certbegin},${certend}p" "${CAFILE}" > "${CADIR}/${certbegin}.pem"
742 keyhash=`${OPENSSL} x509 -noout -in "${CADIR}/${certbegin}.pem" -hash`
743 echo "Generated PEM file with hash: ${keyhash}."
744 done
745fi
746
747# Write the output file
748for cert in `find "${CADIR}" -type f -name "*.pem" -o -name "*.crt"`
749do
750
751 # Make sure the certificate date is valid...
752 date=$( ${OPENSSL} x509 -enddate -in "${cert}" -noout | sed 's/^notAfter=//' )
753 mydate "${date}"
754 if test "${certdate}" -lt "${today}" ; then
755 echo "${cert} expired on ${certdate}! Skipping..."
756 unset date certdate
757 continue
758 fi
759 unset date certdate
760 ls "${cert}"
761 tempfile=`mktemp`
762 certbegin=`grep -n "^-----BEGIN" "${cert}" | cut -d ":" -f 1`
763 certend=`grep -n "^-----END" "${cert}" | cut -d ":" -f 1`
764 sed -n "${certbegin},${certend}p" "${cert}" > "${tempfile}"
765 echo yes | env LC_ALL=C "${KEYTOOL}" -import \
766 -alias `basename "${cert}"` \
767 -keystore "${OUTFILE}" \
768 -storepass 'changeit' \
769 -file "${tempfile}"
770 rm "${tempfile}"
771done
772
773if test "${TEMPDIR}x" != "x" ; then
774 rm -rf "${TEMPDIR}"
775fi
776exit 0</literal>
777EOF
778
779chmod -c 0755 /opt/jdk/bin/mkcacerts</userinput></screen>
780
781 <note>
782 <para>
783 Doing a very large copy/paste directly to a terminal may result in a
784 corrupted file. Copying to an editor may overcome this issue.
785 </para>
786 </note>
787
788 <para>
789 Generate the <application>OpenJDK</application> <filename>cacerts</filename>
790 file as the <systemitem class="username">root</systemitem> user:
791 </para>
792
793<screen role="root"><userinput>if [ -f /opt/jdk/jre/lib/security/cacerts ]; then
794 mv /opt/jdk/jre/lib/security/cacerts \
795 /opt/jdk/jre/lib/security/cacerts.bak
796fi &amp;&amp;
797/opt/jdk/bin/mkcacerts \
798 -d "/etc/ssl/certs/" \
799 -k "/opt/jdk/bin/keytool" \
800 -s "/usr/bin/openssl" \
801 -o "/opt/jdk/jre/lib/security/cacerts"</userinput></screen>
802
803 <para>Use the following commands to check if the
804 <filename>cacerts</filename> file has been successfully installed:</para>
805
806<screen role="root"><userinput>cd /opt/jdk
807bin/keytool -list -keystore jre/lib/security/cacerts</userinput></screen>
808
809 <para>At the prompt "Enter keystore password:", press the "Enter" key if
810 there is no keystore password defined. If the <filename>cacerts</filename>
811 file was installed correctly, you will see a list of the certificates with
812 related information for each one. If not, you need to reinstall
813 them.</para>
814
815 </sect3>
816
817 </sect2>
818
819 <sect2 role="content">
820 <title>Contents</title>
821
822 <segmentedlist>
823 <segtitle>Installed Programs</segtitle>
824 <segtitle>Installed Libraries</segtitle>
825 <segtitle>Installed Directory</segtitle>
826
827 <seglistitem>
828 <seg>appletviewer, extcheck, idlj, jar,
829 jarsigner, java, javac, javadoc, javah, javap, java-rmi.cgi,
830 jcmd, jconsole, jdb, jdeps, jhat, jinfo, jjs, jmap, jps,
831 jrunscript, jsadebugd, jstack, jstat, jstatd, keytool, mkcacerts,
832 native2ascii, orbd, pack200, policytool, rmic, rmid, rmiregistry,
833 schemagen, serialver, servertool, tnameserv, unpack200,
834 wsgen, wsimport, and xjc</seg>
835 <seg>/opt/OpenJDK-&openjdk-version;/lib/*, and
836 /opt/OpenJDK-&openjdk-version;/jre/lib/*</seg>
837 <seg>/opt/OpenJDK-&openjdk-version;</seg>
838 </seglistitem>
839 </segmentedlist>
840
841 <variablelist>
842 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
843 <?dbfo list-presentation="list"?>
844 <?dbhtml list-presentation="table"?>
845
846 <varlistentry id="appletviewer">
847 <term><command>appletviewer</command></term>
848 <listitem>
849 <para>allows to run applets outside of a web browser.</para>
850 <indexterm zone="openjdk appletviewer">
851 <primary sortas="b-appletviewer">appletviewer</primary>
852 </indexterm>
853 </listitem>
854 </varlistentry>
855
856 <varlistentry id="extcheck">
857 <term><command>extcheck</command></term>
858 <listitem>
859 <para>checks a specified jar file for title and version conflicts
860 with any extensions installed in the
861 <application>OpenJDK</application> software.</para>
862 <indexterm zone="openjdk extcheck">
863 <primary sortas="b-extcheck">extcheck</primary>
864 </indexterm>
865 </listitem>
866 </varlistentry>
867
868 <varlistentry id="idlj">
869 <term><command>idlj</command></term>
870 <listitem>
871 <para>generates Java bindings from a given IDL file.</para>
872 <indexterm zone="openjdk idlj">
873 <primary sortas="b-idlj">idlj</primary>
874 </indexterm>
875 </listitem>
876 </varlistentry>
877
878 <varlistentry id="jar">
879 <term><command>jar</command></term>
880 <listitem>
881 <para>combines multiple files into a single jar archive.</para>
882 <indexterm zone="openjdk jar">
883 <primary sortas="b-jar">jar</primary>
884 </indexterm>
885 </listitem>
886 </varlistentry>
887
888 <varlistentry id="jarsigner">
889 <term><command>jarsigner</command></term>
890 <listitem>
891 <para>signs jar files and verifies the signatures and integrity
892 of a signed jar file.</para>
893 <indexterm zone="openjdk jarsigner">
894 <primary sortas="b-jarsigner">jarsigner</primary>
895 </indexterm>
896 </listitem>
897 </varlistentry>
898
899 <varlistentry id="java-prog">
900 <term><command>java</command></term>
901 <listitem>
902 <para>launches a Java application by starting a Java runtime
903 environment, loading a specified class and invoking its main
904 method.</para>
905 <indexterm zone="openjdk java-prog">
906 <primary sortas="b-java-prog">java</primary>
907 </indexterm>
908 </listitem>
909 </varlistentry>
910
911 <varlistentry id="javac">
912 <term><command>javac</command></term>
913 <listitem>
914 <para>reads class and interface definitions, written in the
915 Java programming language, and compiles them into bytecode
916 class files.</para>
917 <indexterm zone="openjdk javac">
918 <primary sortas="b-javac">javac</primary>
919 </indexterm>
920 </listitem>
921 </varlistentry>
922
923 <varlistentry id="javadoc">
924 <term><command>javadoc</command></term>
925 <listitem>
926 <para>parses the declarations and documentation comments in a
927 set of Java source files and produces a corresponding set of
928 HTML pages describing the classes, interfaces, constructors,
929 methods, and fields.</para>
930 <indexterm zone="openjdk javadoc">
931 <primary sortas="b-javadoc">javadoc</primary>
932 </indexterm>
933 </listitem>
934 </varlistentry>
935
936 <varlistentry id="javah">
937 <term><command>javah</command></term>
938 <listitem>
939 <para>generates C header and source files
940 that are needed to implement native methods.</para>
941 <indexterm zone="openjdk javah">
942 <primary sortas="b-javah">javah</primary>
943 </indexterm>
944 </listitem>
945 </varlistentry>
946
947 <varlistentry id="javap">
948 <term><command>javap</command></term>
949 <listitem>
950 <para>disassembles a Java class file.</para>
951 <indexterm zone="openjdk javap">
952 <primary sortas="b-javap">javap</primary>
953 </indexterm>
954 </listitem>
955 </varlistentry>
956
957 <varlistentry id="java-rmi.cgi">
958 <term><command>java-rmi.cgi</command></term>
959 <listitem>
960 <para>is the Java RMI client.</para>
961 <indexterm zone="openjdk java-rmi.cgi">
962 <primary sortas="b-java-rmi.cgi">java-rmi.cgi</primary>
963 </indexterm>
964 </listitem>
965 </varlistentry>
966
967 <varlistentry id="jcmd">
968 <term><command>jcmd</command></term>
969 <listitem>
970 <para>is a utility to send diagnostic command requests to a running
971 Java Virtual Machine.</para>
972 <indexterm zone="openjdk jcmd">
973 <primary sortas="b-jcmd">jcmd</primary>
974 </indexterm>
975 </listitem>
976 </varlistentry>
977
978 <varlistentry id="jconsole">
979 <term><command>jconsole</command></term>
980 <listitem>
981 <para>is a graphical console tool to monitor and manage both
982 local and remote Java applications and virtual machines.</para>
983 <indexterm zone="openjdk jconsole">
984 <primary sortas="b-jconsole">jconsole</primary>
985 </indexterm>
986 </listitem>
987 </varlistentry>
988
989 <varlistentry id="jdb">
990 <term><command>jdb</command></term>
991 <listitem>
992 <para>is a simple command-line debugger for Java classes.</para>
993 <indexterm zone="openjdk jdb">
994 <primary sortas="b-jdb">jdb</primary>
995 </indexterm>
996 </listitem>
997 </varlistentry>
998
999 <varlistentry id="jdeps">
1000 <term><command>jdeps</command></term>
1001 <listitem>
1002 <para>shows the package-level or class-level dependencies of
1003 Java class files.</para>
1004 <indexterm zone="openjdk jdeps">
1005 <primary sortas="b-jdeps">jdeps</primary>
1006 </indexterm>
1007 </listitem>
1008 </varlistentry>
1009
1010 <varlistentry id="jhat">
1011 <term><command>jhat</command></term>
1012 <listitem>
1013 <para>parses a java heap dump file and allows viewing it
1014 in a web browser.</para>
1015 <indexterm zone="openjdk jhat">
1016 <primary sortas="b-jhat">jhat</primary>
1017 </indexterm>
1018 </listitem>
1019 </varlistentry>
1020
1021 <varlistentry id="jinfo">
1022 <term><command>jinfo</command></term>
1023 <listitem>
1024 <para>prints Java configuration information for a given Java
1025 process, core file, or a remote debug server.</para>
1026 <indexterm zone="openjdk jinfo">
1027 <primary sortas="b-jinfo">jinfo</primary>
1028 </indexterm>
1029 </listitem>
1030 </varlistentry>
1031
1032 <varlistentry id="jjs">
1033 <term><command>jjs</command></term>
1034 <listitem>
1035 <para>is a command-line tool used to invoke the Nashorn engine. It
1036 can be used to interpret one or several script files, or to run
1037 an interactive shell.</para>
1038 <indexterm zone="openjdk jjs">
1039 <primary sortas="b-jjs">jjs</primary>
1040 </indexterm>
1041 </listitem>
1042 </varlistentry>
1043
1044 <varlistentry id="jmap">
1045 <term><command>jmap</command></term>
1046 <listitem>
1047 <para>prints shared object memory maps or heap memory details
1048 of a given process, core file, or a remote debug server.</para>
1049 <indexterm zone="openjdk jmap">
1050 <primary sortas="b-jmap">jmap</primary>
1051 </indexterm>
1052 </listitem>
1053 </varlistentry>
1054
1055 <varlistentry id="jps">
1056 <term><command>jps</command></term>
1057 <listitem>
1058 <para>lists the instrumented JVMs on the target system.</para>
1059 <indexterm zone="openjdk jps">
1060 <primary sortas="b-jps">jps</primary>
1061 </indexterm>
1062 </listitem>
1063 </varlistentry>
1064
1065 <varlistentry id="jrunscript">
1066 <term><command>jrunscript</command></term>
1067 <listitem>
1068 <para>is a command line script shell.</para>
1069 <indexterm zone="openjdk jrunscript">
1070 <primary sortas="b-jrunscript">jrunscript</primary>
1071 </indexterm>
1072 </listitem>
1073 </varlistentry>
1074
1075 <varlistentry id="jsadebugd">
1076 <term><command>jsadebugd</command></term>
1077 <listitem>
1078 <para>attaches to a Java process or core file and acts as a
1079 debug server.</para>
1080 <indexterm zone="openjdk jsadebugd">
1081 <primary sortas="b-jsadebugd">jsadebugd</primary>
1082 </indexterm>
1083 </listitem>
1084 </varlistentry>
1085
1086 <varlistentry id="jstack">
1087 <term><command>jstack</command></term>
1088 <listitem>
1089 <para>prints Java stack traces of Java threads for a given
1090 Java process, core file, or a remote debug server.</para>
1091 <indexterm zone="openjdk jstack">
1092 <primary sortas="b-jstack">jstack</primary>
1093 </indexterm>
1094 </listitem>
1095 </varlistentry>
1096
1097 <varlistentry id="jstat">
1098 <term><command>jstat</command></term>
1099 <listitem>
1100 <para>displays performance statistics for an instrumented JVM.</para>
1101 <indexterm zone="openjdk jstat">
1102 <primary sortas="b-jstat">jstat</primary>
1103 </indexterm>
1104 </listitem>
1105 </varlistentry>
1106
1107 <varlistentry id="jstatd">
1108 <term><command>jstatd</command></term>
1109 <listitem>
1110 <para>is an RMI server application that monitors for the creation
1111 and termination of instrumented JVMs.</para>
1112 <indexterm zone="openjdk jstatd">
1113 <primary sortas="b-jstatd">jstatd</primary>
1114 </indexterm>
1115 </listitem>
1116 </varlistentry>
1117
1118 <varlistentry id="keytool">
1119 <term><command>keytool</command></term>
1120 <listitem>
1121 <para>is a key and certificate management utility.</para>
1122 <indexterm zone="openjdk keytool">
1123 <primary sortas="b-keytool">keytool</primary>
1124 </indexterm>
1125 </listitem>
1126 </varlistentry>
1127
1128 <varlistentry id="mkcacerts">
1129 <term><command>mkcacerts</command></term>
1130 <listitem>
1131 <para> is a simple script to extract x509 certificates and create
1132 a JRE cacerts file using <command>keytool</command>.</para>
1133 <indexterm zone="openjdk mkcacerts">
1134 <primary sortas="b-mkcacerts">mkcacerts</primary>
1135 </indexterm>
1136 </listitem>
1137 </varlistentry>
1138
1139 <varlistentry id="native2ascii">
1140 <term><command>native2ascii</command></term>
1141 <listitem>
1142 <para> converts files that contain non-supported character encoding
1143 into files containing Latin-1 or Unicode-encoded characters.</para>
1144 <indexterm zone="openjdk native2ascii">
1145 <primary sortas="b-native2ascii">native2ascii</primary>
1146 </indexterm>
1147 </listitem>
1148 </varlistentry>
1149
1150 <varlistentry id="orbd">
1151 <term><command>orbd</command></term>
1152 <listitem>
1153 <para>is used to enable clients to transparently locate and invoke
1154 persistent objects on servers in the CORBA environment.</para>
1155 <indexterm zone="openjdk orbd">
1156 <primary sortas="b-orbd">orbd</primary>
1157 </indexterm>
1158 </listitem>
1159 </varlistentry>
1160
1161 <varlistentry id="pack200">
1162 <term><command>pack200</command></term>
1163 <listitem>
1164 <para>is a Java application that transforms a jar file into a
1165 compressed pack200 file using the Java gzip compressor.</para>
1166 <indexterm zone="openjdk pack200">
1167 <primary sortas="b-pack200">pack200</primary>
1168 </indexterm>
1169 </listitem>
1170 </varlistentry>
1171
1172 <varlistentry id="policytool">
1173 <term><command>policytool</command></term>
1174 <listitem>
1175 <para>creates and manages a policy file graphically.</para>
1176 <indexterm zone="openjdk policytool">
1177 <primary sortas="b-policytool">policytool</primary>
1178 </indexterm>
1179 </listitem>
1180 </varlistentry>
1181
1182 <varlistentry id="rmic">
1183 <term><command>rmic</command></term>
1184 <listitem>
1185 <para>generates stub and skeleton class files for remote objects
1186 from the names of compiled Java classes that contain remote
1187 object implementations.</para>
1188 <indexterm zone="openjdk rmic">
1189 <primary sortas="b-rmic">rmic</primary>
1190 </indexterm>
1191 </listitem>
1192 </varlistentry>
1193
1194 <varlistentry id="rmid">
1195 <term><command>rmid</command></term>
1196 <listitem>
1197 <para>starts the activation system daemon.</para>
1198 <indexterm zone="openjdk rmid">
1199 <primary sortas="b-rmid">rmid</primary>
1200 </indexterm>
1201 </listitem>
1202 </varlistentry>
1203
1204 <varlistentry id="rmiregistry">
1205 <term><command>rmiregistry</command></term>
1206 <listitem>
1207 <para>creates and starts a remote object registry on the specified
1208 port on the current host.</para>
1209 <indexterm zone="openjdk rmiregistry">
1210 <primary sortas="b-rmiregistry">rmiregistry</primary>
1211 </indexterm>
1212 </listitem>
1213 </varlistentry>
1214
1215 <varlistentry id="schemagen">
1216 <term><command>schemagen</command></term>
1217 <listitem>
1218 <para>is a Java XML binding schema generator.</para>
1219 <indexterm zone="openjdk schemagen">
1220 <primary sortas="b-schemagen">schemagen</primary>
1221 </indexterm>
1222 </listitem>
1223 </varlistentry>
1224
1225 <varlistentry id="serialver">
1226 <term><command>serialver</command></term>
1227 <listitem>
1228 <para>returns the serialVersionUID for one or more classes in a
1229 form suitable for copying into an evolving class.</para>
1230 <indexterm zone="openjdk serialver">
1231 <primary sortas="b-serialver">serialver</primary>
1232 </indexterm>
1233 </listitem>
1234 </varlistentry>
1235
1236 <varlistentry id="servertool">
1237 <term><command>servertool</command></term>
1238 <listitem>
1239 <para>provides an ease-of-use interface for application programmers
1240 to register, unregister, startup and shutdown a server.</para>
1241 <indexterm zone="openjdk servertool">
1242 <primary sortas="b-servertool">servertool</primary>
1243 </indexterm>
1244 </listitem>
1245 </varlistentry>
1246
1247 <varlistentry id="tnameserv">
1248 <term><command>tnameserv</command></term>
1249 <listitem>
1250 <para>starts the Java IDL name server.</para>
1251 <indexterm zone="openjdk tnameserv">
1252 <primary sortas="b-tnameserv">tnameserv</primary>
1253 </indexterm>
1254 </listitem>
1255 </varlistentry>
1256
1257 <varlistentry id="unpack200">
1258 <term><command>unpack200</command></term>
1259 <listitem>
1260 <para>is a native implementation that transforms a packed file
1261 produced by <application>pack200</application> into a jar
1262 file.</para>
1263 <indexterm zone="openjdk unpack200">
1264 <primary sortas="b-unpack200">unpack200</primary>
1265 </indexterm>
1266 </listitem>
1267 </varlistentry>
1268
1269 <varlistentry id="wsgen">
1270 <term><command>wsgen</command></term>
1271 <listitem>
1272 <para>generates JAX-WS portable artifacts used in JAX-WS
1273 web services.</para>
1274 <indexterm zone="openjdk wsgen">
1275 <primary sortas="b-wsgen">wsgen</primary>
1276 </indexterm>
1277 </listitem>
1278 </varlistentry>
1279
1280 <varlistentry id="wsimport">
1281 <term><command>wsimport</command></term>
1282 <listitem>
1283 <para>generates JAX-WS portable artifacts.</para>
1284 <indexterm zone="openjdk wsimport">
1285 <primary sortas="b-wsimport">wsimport</primary>
1286 </indexterm>
1287 </listitem>
1288 </varlistentry>
1289
1290 <varlistentry id="xjc">
1291 <term><command>xjc</command></term>
1292 <listitem>
1293 <para>is a Java XML binding compiler.</para>
1294 <indexterm zone="openjdk xjc">
1295 <primary sortas="b-xjc">xjc</primary>
1296 </indexterm>
1297 </listitem>
1298 </varlistentry>
1299
1300 </variablelist>
1301
1302 </sect2>
1303
1304</sect1>
Note: See TracBrowser for help on using the repository browser.