source: general/prog/openjdk.xml@ 29066a3

10.0 10.1 11.0 11.1 11.2 11.3 12.0 12.1 7.10 7.6 7.6-blfs 7.6-systemd 7.7 7.8 7.9 8.0 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind gnome kde5-13430 kde5-14269 kde5-14686 kea ken/TL2024 ken/inkscape-core-mods ken/tuningfonts krejzi/svn lazarus lxqt nosym perl-modules plabs/newcss plabs/python-mods python3.11 qt5new rahul/power-profiles-daemon renodr/vulkan-addition systemd-11177 systemd-13485 trunk upgradedb xry111/intltool xry111/llvm18 xry111/soup3 xry111/test-20220226 xry111/xf86-video-removal
Last change on this file since 29066a3 was 29066a3, checked in by Pierre Labastie <pieere@…>, 10 years ago

Update to OpenJDK-1.7.0.55/Icedtea-2.4.7. Fixes ticket 4966

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@12980 af4574ff-66df-0310-9fd7-8a98e5e911e0
  • Property mode set to 100644
File size: 44.4 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY anduin-download "http://anduin.linuxfromscratch.org/files/BLFS/OpenJDK-&openjdk-version;">
8 <!ENTITY icedtea-download "http://icedtea.classpath.org/download/source/icedtea-&icedtea-version;.tar.xz">
9
10 <!ENTITY icedtea-md5sum "f6b28633b9978fadc724247cfc264ff0">
11 <!ENTITY icedtea-size "3.3 MB">
12
13 <!ENTITY corba-download "&anduin-download;/corba.tar.gz">
14 <!ENTITY corba-md5sum "0a8f2235307b68553865ac38192690c7">
15 <!ENTITY corba-size "1.4 MB">
16
17 <!ENTITY hotspot-download "&anduin-download;/hotspot.tar.gz">
18 <!ENTITY hotspot-md5sum "0381ef3920f1ff5c8ac6c8860974d8cc">
19 <!ENTITY hotspot-size "9.3 MB">
20
21 <!ENTITY jaxp-download "&anduin-download;/jaxp.tar.gz">
22 <!ENTITY jaxp-md5sum "ba7a21a3ef2ce5d0d47c7015e43c5dcf">
23 <!ENTITY jaxp-size "3.7 MB">
24
25 <!ENTITY jaxws-download "&anduin-download;/jaxws.tar.gz">
26 <!ENTITY jaxws-md5sum "9ef2ea5b1e87777c75a72e1dca6fab1d">
27 <!ENTITY jaxws-size "2.6 MB">
28
29 <!ENTITY jdk-download "&anduin-download;/jdk.tar.gz">
30 <!ENTITY jdk-md5sum "cea74e96852bf017f73222fa7045daee">
31 <!ENTITY jdk-size "38.1 MB">
32
33 <!ENTITY langtools-download "&anduin-download;/langtools.tar.gz">
34 <!ENTITY langtools-md5sum "449cec19b80ab70935d02d03e3cbc568">
35 <!ENTITY langtools-size "2.2 MB">
36
37 <!ENTITY openjdk-download "&anduin-download;/openjdk.tar.gz">
38 <!ENTITY openjdk-md5sum "b0295fd54825d3f47d47de81d81a475a">
39 <!ENTITY openjdk-size "135 KB">
40
41 <!ENTITY rhino-download "https://github.com/downloads/mozilla/rhino/rhino1_7R4.zip">
42 <!ENTITY rhino-md5sum "ad67a3dff135e3a70f0c3528a2d6edf2">
43 <!ENTITY rhino-size "6.2 MB">
44
45 <!ENTITY openjdk-buildsize "8.5-11 GB">
46 <!ENTITY openjdk-time "34-37 SBU (an additional 100 SBU for testsuite)">
47]>
48
49<sect1 id="openjdk" xreflabel="OpenJDK-&openjdk-version;/IcedTea-&icedtea-version;">
50 <?dbhtml filename="openjdk.html" ?>
51
52 <sect1info>
53 <othername>$LastChangedBy$</othername>
54 <date>$Date$</date>
55 </sect1info>
56
57 <title>OpenJDK-&openjdk-version;/IcedTea-&icedtea-version;</title>
58
59 <indexterm zone="openjdk">
60 <primary sortas="a-OpenJDK">OpenJDK</primary>
61 </indexterm>
62
63 <sect2 role="package">
64 <title>Introduction to OpenJDK and IcedTea</title>
65
66 <para><application>IcedTea</application> provides a build harness for the
67 <application>OpenJDK</application> package, Oracle's open-sourced
68 <application>Java</application> development environment. In order to
69 provide a completely free runtime environment, similar to Oracle's closed
70 distribution, the <application>IcedTea</application> build harness also
71 provides free, and arguably better versions of parts of the JDK which
72 have not been open-sourced to date. <application>OpenJDK</application> is
73 useful for developing <application>Java</application> programs and provides
74 a complete runtime environment to run <application>Java</application>
75 programs.</para>
76
77 &lfs75_checked;
78
79 <note><para>The browser plugin and webstart implementation have been split
80 off into a separate project. To provide a complete implementation, you will
81 need to later install <xref linkend="icedtea-web"/>.</para></note>
82
83 <para>OpenJDK is GPL'd code, however, it should be explained that there has
84 been a special exception made for non-free projects to use these classes in
85 their proprietary products. In similar fashion to the LGPL, which
86 allows non-free programs to link to libraries provided by free software,
87 the <ulink url="http://openjdk.java.net/legal/gplv2+ce.html">GNU
88 General Public License, version 2, with the Classpath Exception</ulink>
89 allows third party programs to use classes provided by free software
90 without the requirement that the third party software also be free. As with
91 the LGPL, any modifications made to the free software portions of a
92 third party application, must also be made freely available.</para>
93
94 <note>
95 <para>The IcedTea build environment includes a very thorough, open source
96 test suite titled <application>JTreg</application>.
97 <application>JTreg</application> is intended to test the just built JDK
98 for reasonable compatibility with the closed Oracle JDK. However, in
99 order for an independent implementation to claim compatibility, including
100 the Oracle sponsored <application>OpenJDK</application> project, it must
101 pass a closed <application>JCK/TCK</application> test suite. No claims
102 of compatibility, even partial compatibility, may be made without
103 passing an approved test suite.</para>
104
105 <para>Oracle does provide free community access, on a case by case basis,
106 to a closed toolkit to ensure 100% compatibility with its proprietary JDK.
107 The binary version provided here has not been tested against the
108 <ulink url="http://openjdk.java.net/groups/conformance/JckAccess/jck-access.html">
109 TCK</ulink>. Any version that is built using the instructions given,
110 cannot claim to be compatible with the proprietary JDK, without the user
111 applying for, and completing the compatibility tests themselves.</para>
112
113 <para>With that in mind, the binaries produced using this build method are
114 regularly tested against the TCK by the members listed on the site above.
115 In addition to the community license above, an educational, non-commercial
116 license for the TCK can be obtained from
117 <ulink url="http://www.oracle.com/technetwork/java/index-137188.html">
118 here</ulink>.</para>
119 </note>
120
121 <bridgehead renderas="sect3">Source Package Information</bridgehead>
122 <itemizedlist spacing="compact">
123 <listitem>
124 <para>IcedTea Source Package
125 <simplelist>
126 <member>Download: <ulink url="&icedtea-download;"/></member>
127 <member>Download MD5 sum: &icedtea-md5sum;</member>
128 <member>Download Size: &icedtea-size;</member>
129 </simplelist>
130 </para>
131 </listitem>
132 </itemizedlist>
133
134 <para>The following may be downladed separately or be done as a
135 part of the <command>make</command> process. For convenience
136 the BLFS editors have made the files available in an LFS website.
137 The files are not distributed with versions, but extracted from
138 the OpenJDK version control system at specified (tagged) points.</para>
139
140 <itemizedlist spacing="compact">
141 <listitem>
142 <para>Corba Source
143 <simplelist>
144 <member>Download: <ulink url="&corba-download;"/></member>
145 <member>Download MD5 sum: &corba-md5sum;</member>
146 <member>Download Size: &corba-size;</member>
147 </simplelist>
148 </para>
149 </listitem>
150 <listitem>
151 <para>Hotspot Source
152 <simplelist>
153 <member>Download: <ulink url="&hotspot-download;"/></member>
154 <member>Download MD5 sum: &hotspot-md5sum;</member>
155 <member>Download Size: &hotspot-size;</member>
156 </simplelist>
157 </para>
158 </listitem>
159 <listitem>
160 <para>IcedTea Build Source
161 <simplelist>
162 <member>Download: <ulink url="&openjdk-download;"/></member>
163 <member>Download MD5 sum: &openjdk-md5sum;</member>
164 <member>Download Size: &openjdk-size;</member>
165 </simplelist>
166 </para>
167 </listitem>
168 <listitem>
169 <para>JAXP Source
170 <simplelist>
171 <member>Download: <ulink url="&jaxp-download;"/></member>
172 <member>Download MD5 sum: &jaxp-md5sum;</member>
173 <member>Download Size: &jaxp-size;</member>
174 </simplelist>
175 </para>
176 </listitem>
177 <listitem>
178 <para>JAXWS Source
179 <simplelist>
180 <member>Download: <ulink url="&jaxws-download;"/></member>
181 <member>Download MD5 sum: &jaxws-md5sum;</member>
182 <member>Download Size: &jaxws-size;</member>
183 </simplelist>
184 </para>
185 </listitem>
186 <listitem>
187 <para>Langtools Source
188 <simplelist>
189 <member>Download: <ulink url="&langtools-download;"/></member>
190 <member>Download MD5 sum: &langtools-md5sum;</member>
191 <member>Download Size: &langtools-size;</member>
192 </simplelist>
193 </para>
194 </listitem>
195 <listitem>
196 <para>OpenJDK Source
197 <simplelist>
198 <member>Download: <ulink url="&jdk-download;"/></member>
199 <member>Download MD5 sum: &jdk-md5sum;</member>
200 <member>Download Size: &jdk-size;</member>
201 </simplelist>
202 </para>
203 </listitem>
204 <listitem>
205 <para>Estimated disk space required: &openjdk-buildsize;</para>
206 </listitem>
207 <listitem>
208 <para>Estimated build time: &openjdk-time;</para>
209 </listitem>
210 </itemizedlist>
211
212 <bridgehead renderas="sect3">Additional Downloads</bridgehead>
213
214 <bridgehead renderas="sect4">Required Patches</bridgehead>
215 <itemizedlist spacing='compact'>
216 <listitem>
217 <para><ulink
218 url="&patch-root;/icedtea-&icedtea-version;-add_cacerts-1.patch"/></para>
219 </listitem>
220 <listitem>
221 <para><ulink
222 url="&patch-root;/icedtea-&icedtea-version;-fixed_paths-1.patch"/></para>
223 </listitem>
224 <listitem>
225 <para><ulink
226 url="&patch-root;/icedtea-&icedtea-version;-fix_tests-1.patch"/></para>
227 </listitem>
228<!-- <listitem>
229 <para><ulink
230 url="&patch-root;/icedtea-&icedtea-version;-upstream_fix-1.patch"/></para>
231 </listitem>-->
232 </itemizedlist>
233
234 <bridgehead renderas="sect4">Required JAR</bridgehead>
235 <itemizedlist spacing='compact'>
236 <listitem>
237 <para>Rhino Java Script
238 <simplelist>
239 <member>Download: <ulink url="&rhino-download;"/></member>
240 <member>Download MD5 sum: &rhino-md5sum;</member>
241 <member>Download Size: &rhino-size;</member>
242 </simplelist>
243 </para>
244 </listitem>
245 </itemizedlist>
246 <bridgehead renderas="sect3">OpenJDK Dependencies</bridgehead>
247
248 <bridgehead renderas="sect4">Required Dependencies</bridgehead>
249 <para role="required">
250 An existing binary ( <xref linkend="java"/> or an earlier built
251 version of this package),
252 <xref linkend="alsa-lib"/>,
253 <xref linkend="apache-ant"/>,
254 <xref linkend="attr"/>,
255 <xref linkend="cacerts"/>,
256 <xref linkend="cpio"/>,
257 <xref linkend="cups"/>,
258 <xref linkend="gtk2"/>,
259 <xref linkend="giflib"/>,
260 <xref linkend="unzip"/>,
261 <xref linkend="wget"/>,
262 <xref linkend="which"/>,
263 <xref linkend="xorg7-lib"/>, and
264 <xref linkend="zip"/>
265 </para>
266
267 <bridgehead renderas="sect4">Recommended</bridgehead>
268 <para role="recommended">
269 <xref linkend="nss"/>
270 </para>
271
272 <bridgehead renderas="sect4">Optional</bridgehead>
273 <para role="optional">
274 <xref linkend="libxslt"/>,
275 <xref linkend="lsb-release"/>,
276 <xref linkend="mercurial"/>,
277 <xref linkend="mitkrb"/>,
278 <xref linkend="pulseaudio"/>, and
279 <xref linkend="xorg-server"/> (for the tests)
280 </para>
281
282 <para condition="html" role="usernotes">User Notes:
283 <ulink url="&blfs-wiki;/openjdk"/></para>
284
285 </sect2>
286
287 <sect2 role="installation">
288 <title>Installation of OpenJDK</title>
289
290 <note><para>The source build of OpenJDK requires <xref
291 linkend="apache-ant"/>. You'll need to build that first to satisfy the
292 circular dependency, and return to this section to continue building
293 OpenJDK.</para></note>
294
295 <para>Unlike other packages in BLFS, the <application>OpenJDK</application>
296 source packages are distributed in multiple downloads. Since the IcedTea
297 build harness will be used to build <application>OpenJDK</application>,
298 begin by extracting the IcedTea package and changing into the
299 extracted directory.</para>
300
301 <para>The IcedTea <application>OpenJDK</application> distribution requires
302 that <filename>js.jar</filename> (from the Rhino package) be in place in
303 order to provide a java-script implementation for the free JDK. If you have
304 not installed the js.jar file in another way, do so with the following
305 commands as the <systemitem class="username">root</systemitem> user:</para>
306
307<screen role="root"><userinput>unzip ../rhino1_7R4.zip &amp;&amp;
308install -v -d -m755 /usr/share/java &amp;&amp;
309install -v -m755 rhino1_7R4/*.jar /usr/share/java</userinput></screen>
310
311 <para>As mentioned previously, <application>OpenJDK</application> is
312 composed of several individual projects of the proprietary
313 <application>JDK</application> that have been relicensed under an open
314 source license. If you have already downoaded all of the individual
315 components, place them into the source tree with the following commands:</para>
316
317<screen><userinput>cp -v ../corba.tar.gz . &amp;&amp;
318cp -v ../hotspot.tar.gz . &amp;&amp;
319cp -v ../jaxp.tar.gz . &amp;&amp;
320cp -v ../jaxws.tar.gz . &amp;&amp;
321cp -v ../jdk.tar.gz . &amp;&amp;
322cp -v ../langtools.tar.gz . &amp;&amp;
323cp -v ../openjdk.tar.gz .</userinput></screen>
324
325<!-- Remove for 2.4.7:
326 <para>Apply a patch to fix a defect in <command>configure</command>:</para>
327
328<screen><userinput>patch -Np1 -i ../icedtea-&icedtea-version;-upstream_fix-1.patch</userinput></screen>
329-->
330 <para>Apply a patch to generate a valid cacerts file using the system CA
331 certificates:</para>
332
333<screen><userinput>patch -Np1 -i ../icedtea-&icedtea-version;-add_cacerts-1.patch</userinput></screen>
334
335 <para>Apply a patch to replace fixed paths with ones appropriate for
336 BLFS:</para>
337
338<screen><userinput>patch -Np1 -i ../icedtea-&icedtea-version;-fixed_paths-1.patch</userinput></screen>
339
340 <para>Apply a patch to exclude known broken tests from the test suite:</para>
341
342<screen><userinput>patch -Np1 -i ../icedtea-&icedtea-version;-fix_tests-1.patch</userinput></screen>
343
344 <para>Configure and build the package with the following commands
345 (--with-pkgversion and --with-version-suffix values can be modified to fit
346 user preferences):</para>
347
348<screen><userinput>unset JAVA_HOME &amp;&amp;
349./autogen.sh &amp;&amp;
350./configure --with-jdk-home=/opt/OpenJDK-&openjdk-version;-bin \
351 --with-version-suffix=BLFS \
352 --enable-nss \
353 --disable-system-kerberos \
354 --with-parallel-jobs=$(getconf _NPROCESSORS_ONLN) &amp;&amp;
355make</userinput></screen>
356
357 <note><para>If you have not installed the tarballs specified above,
358 they will be automatically downloaded here.</para></note>
359
360 <para>To test the results, issue: <command>make jtregcheck</command>. The
361 included version of <application>jtreg</application> is old, and the test
362 suite is also very dependent on the host system and the environment that it
363 is run in. You should expect to see anywhere between 40 and 100 failures in
364 jdk with up to 10 errors in the tests themselves. The majority of the
365 6000+ tests should pass. The reason for the greatly varying results is due
366 to how stringent the testing environment must be. Varying architectures,
367 different versions of dependent libraries, unexpected X Window environment
368 and window managers, the CA certificates used to generate the
369 <filename>cacerts</filename> file, and even any user input or power
370 management or screen saver interruptions during the testing can lead to
371 various failures. While the known broken tests have been removed, with the
372 fix_tests patch above, the graphics tests failures cannot be pre-determined
373 (short of removing them all). The best bet for the minimal number of
374 failures is to run the test suite in a framebuffer on a different screen
375 (Xvfb). Even still, disk I/O can cause failures.</para>
376
377<screen role='nodump'><userinput>export DISPLAY=:20 &amp;&amp;
378Xvfb :20 -screen 0 1x1x24 -ac&amp;
379echo $!> Xvfb.pid &amp;&amp;
380make -k jtregcheck &amp;&amp;
381kill -9 `cat Xvfb.pid` &amp;&amp;
382unset DISPLAY &amp;&amp;
383rm -f Xvfb.pid</userinput></screen>
384
385 <para>Install the package with the following commands as the
386 <systemitem class="username">root</systemitem> user:</para>
387
388<screen role="root"><userinput>chmod 0644 openjdk.build/j2sdk-image/lib/sa-jdi.jar &amp;&amp;
389cp -R openjdk.build/j2sdk-image /opt/OpenJDK-&openjdk-version; &amp;&amp;
390chown -R root:root /opt/OpenJDK-&openjdk-version;</userinput></screen>
391
392 </sect2>
393
394 <sect2 role="commands">
395 <title>Command Explanations</title>
396
397 <para><command>./autogen.sh</command>: This command forces rebuilding of
398 auto-generated files to account for new options added to
399 <filename>configure</filename>.</para>
400
401 <para><parameter>--with-jdk-home</parameter>: This switch provides the
402 location of the temporary <application>JDK</application>.</para>
403
404 <para><option>--with-pkgversion</option>: This switch can be used
405 to modify the version string in addition to "IcedTea".</para>
406
407 <para><parameter>--with-version-suffix</parameter>: This switch appends
408 the given text to the JDK version string.</para>
409
410 <para><parameter>--enable-nss</parameter>: Enable inclusion of NSS
411 security provider.</para>
412
413 <para><parameter>--disable-system-kerberos</parameter>: Remove this switch,
414 if <xref linkend="mitkrb"/> is installed.</para>
415
416 <para><parameter>--with-parallel-jobs=$(getconf _NPROCESSORS_ONLN)</parameter>:
417 This switch sets the compiler to use all your CPUs in parallel and speed
418 up the build.</para>
419
420 <para><command>chmod -v 0644 ...sa-jdi.jar</command>: Fix permissions
421 in a generated file so all users can access it.</para>
422
423 <para><option>--enable-pulse-java</option>: This switch enables
424 building of the pulseaudio libraries (needed to provide a complete
425 implementation that is reasonably compatible with the proprietary
426 JDK). <xref linkend="pulseaudio"/> needs to be installed.</para>
427
428 </sect2>
429
430 <sect2 role="configuration" id="openjdk-config" xreflabel="Configuring OpenJDK" >
431 <title>Configuring OpenJDK</title>
432
433 <sect3>
434 <title>Configuration Information</title>
435
436 <para>There are now two <application>OpenJDK</application> SDKs
437 installed in <filename>/opt</filename>. You should decide on which one
438 you would like to use as the default. For example if you decide to use
439 the precompiled <application>OpenJDK</application>, do the following as
440 the <systemitem class="username">root</systemitem> user:</para>
441
442<screen role="root"><userinput>ln -v -nsf OpenJDK-&openjdk-version;-bin /opt/jdk</userinput></screen>
443
444 <para>The information below assumes your system is set up using the
445 instructions found in <quote><xref
446 linkend="postlfs-config-profile"/></quote>. You may need to extract the
447 relevant information below and incorporate it into your system's startup
448 files if your system is set up differently.</para>
449
450 <para>Add the following <filename>openjdk.sh</filename> shell startup
451 file to the <filename>/etc/profile.d</filename> directory with the
452 following commands as the <systemitem class="username">root</systemitem>
453 user:</para>
454
455<screen role="root"><userinput>cat &gt; /etc/profile.d/openjdk.sh &lt;&lt; "EOF"
456<literal># Begin /etc/profile.d/openjdk.sh
457
458# Set JAVA_HOME directory
459JAVA_HOME=/opt/jdk
460
461# Adjust PATH
462pathappend $JAVA_HOME/bin PATH
463
464# Auto Java CLASSPATH
465# Copy jar files to, or create symlinks in this directory
466
467AUTO_CLASSPATH_DIR=/usr/share/java
468
469pathprepend . CLASSPATH
470
471for dir in `find ${AUTO_CLASSPATH_DIR} -type d 2>/dev/null`; do
472 pathappend $dir CLASSPATH
473done
474
475for jar in `find ${AUTO_CLASSPATH_DIR} -name "*.jar" 2>/dev/null`; do
476 pathappend $jar CLASSPATH
477done
478
479export JAVA_HOME CLASSPATH
480unset AUTO_CLASSPATH_DIR dir jar
481
482# End /etc/profile.d/openjdk.sh</literal>
483EOF</userinput></screen>
484
485 <para>Finally, add the man pages to <application>man_db</application>'s
486 configuration. As the <systemitem class="username">root</systemitem>
487 user:</para>
488
489<screen role="root"><userinput>cat &gt;&gt; /etc/man_db.conf &lt;&lt; "EOF" &amp;&amp;
490<literal>MANDATORY_MANPATH /opt/jdk/man
491MANPATH_MAP /opt/jdk/bin /opt/jdk/man
492MANDB_MAP /opt/jdk/man /var/cache/man/jdk</literal>
493EOF
494
495mandb -c /opt/jdk/man</userinput></screen>
496
497 </sect3>
498
499 <sect3 id='ojdk-certs'>
500 <title>Install or update the JRE Certificate Authority Certificates (cacerts) file</title>
501
502 <para>Use the following procedure to check if the
503 <filename>cacerts</filename> file was successfully installed during the
504 OpenJDK build. Also, if the <xref linkend="cacerts"/> have been updated,
505 the following instructions will generate a new JRE
506 <filename>cacerts</filename> file. First, check if the
507 <filename>cacerts</filename> have been successfully installed: </para>
508
509<screen role="root"><userinput>cd /opt/jdk
510bin/keytool -list -keystore jre/lib/security/cacerts</userinput></screen>
511
512 <para>At the prompt "Enter keystore password:", press the "Enter" key if
513 there is no keystore password defined. If the
514 <filename>cacerts</filename> were installed correctly, you will see a
515 list of the certificates with related information for each one. If not,
516 you need to manually install them. First, generate the
517 <command>mkcacerts</command> script as the
518 <systemitem class="username">root</systemitem> user:</para>
519
520<screen role="root"><userinput>cat &gt; /opt/jdk/bin/mkcacerts &lt;&lt; "EOF"
521<literal>#!/bin/sh
522# Simple script to extract x509 certificates and create a JRE cacerts file.
523
524function get_args()
525 {
526 if test -z "${1}" ; then
527 showhelp
528 exit 1
529 fi
530
531 while test -n "${1}" ; do
532 case "${1}" in
533 -f | --cafile)
534 check_arg $1 $2
535 CAFILE="${2}"
536 shift 2
537 ;;
538 -d | --cadir)
539 check_arg $1 $2
540 CADIR="${2}"
541 shift 2
542 ;;
543 -o | --outfile)
544 check_arg $1 $2
545 OUTFILE="${2}"
546 shift 2
547 ;;
548 -k | --keytool)
549 check_arg $1 $2
550 KEYTOOL="${2}"
551 shift 2
552 ;;
553 -s | --openssl)
554 check_arg $1 $2
555 OPENSSL="${2}"
556 shift 2
557 ;;
558 -h | --help)
559 showhelp
560 exit 0
561 ;;
562 *)
563 showhelp
564 exit 1
565 ;;
566 esac
567 done
568 }
569
570function check_arg()
571 {
572 echo "${2}" | grep -v "^-" > /dev/null
573 if [ -z "$?" -o ! -n "$2" ]; then
574 echo "Error: $1 requires a valid argument."
575 exit 1
576 fi
577 }
578
579# The date binary is not reliable on 32bit systems for dates after 2038
580function mydate()
581 {
582 local y=$( echo $1 | cut -d" " -f4 )
583 local M=$( echo $1 | cut -d" " -f1 )
584 local d=$( echo $1 | cut -d" " -f2 )
585 local m
586
587 if [ ${d} -lt 10 ]; then d="0${d}"; fi
588
589 case $M in
590 Jan) m="01";;
591 Feb) m="02";;
592 Mar) m="03";;
593 Apr) m="04";;
594 May) m="05";;
595 Jun) m="06";;
596 Jul) m="07";;
597 Aug) m="08";;
598 Sep) m="09";;
599 Oct) m="10";;
600 Nov) m="11";;
601 Dec) m="12";;
602 esac
603
604 certdate="${y}${m}${d}"
605 }
606
607function showhelp()
608 {
609 echo "`basename ${0}` creates a valid cacerts file for use with IcedTea."
610 echo ""
611 echo " -f --cafile The path to a file containing PEM formated CA"
612 echo " certificates. May not be used with -d/--cadir."
613 echo " -d --cadir The path to a diectory of PEM formatted CA"
614 echo " certificates. May not be used with -f/--cafile."
615 echo " -o --outfile The path to the output file."
616 echo ""
617 echo " -k --keytool The path to the java keytool utility."
618 echo ""
619 echo " -s --openssl The path to the openssl utility."
620 echo ""
621 echo " -h --help Show this help message and exit."
622 echo ""
623 echo ""
624 }
625
626# Initialize empty variables so that the shell does not pollute the script
627CAFILE=""
628CADIR=""
629OUTFILE=""
630OPENSSL=""
631KEYTOOL=""
632certdate=""
633date=""
634today=$( date +%Y%m%d )
635
636# Process command line arguments
637get_args ${@}
638
639# Handle common errors
640if test "${CAFILE}x" == "x" -a "${CADIR}x" == "x" ; then
641 echo "ERROR! You must provide an x509 certificate store!"
642 echo "\'$(basename ${0}) --help\' for more info."
643 echo ""
644 exit 1
645fi
646
647if test "${CAFILE}x" != "x" -a "${CADIR}x" != "x" ; then
648 echo "ERROR! You cannot provide two x509 certificate stores!"
649 echo "\'$(basename ${0}) --help\' for more info."
650 echo ""
651 exit 1
652fi
653
654if test "${KEYTOOL}x" == "x" ; then
655 echo "ERROR! You must provide a valid keytool program!"
656 echo "\'$(basename ${0}) --help\' for more info."
657 echo ""
658 exit 1
659fi
660
661if test "${OPENSSL}x" == "x" ; then
662 echo "ERROR! You must provide a valid path to openssl!"
663 echo "\'$(basename ${0}) --help\' for more info."
664 echo ""
665 exit 1
666fi
667
668if test "${OUTFILE}x" == "x" ; then
669 echo "ERROR! You must provide a valid output file!"
670 echo "\'$(basename ${0}) --help\' for more info."
671 echo ""
672 exit 1
673fi
674
675# Get on with the work
676
677# If using a CAFILE, split it into individual files in a temp directory
678if test "${CAFILE}x" != "x" ; then
679 TEMPDIR=`mktemp -d`
680 CADIR="${TEMPDIR}"
681
682 # Get a list of staring lines for each cert
683 CERTLIST=`grep -n "^-----BEGIN" "${CAFILE}" | cut -d ":" -f 1`
684
685 # Get a list of ending lines for each cert
686 ENDCERTLIST=`grep -n "^-----END" "${CAFILE}" | cut -d ":" -f 1`
687
688 # Start a loop
689 for certbegin in `echo "${CERTLIST}"` ; do
690 for certend in `echo "${ENDCERTLIST}"` ; do
691 if test "${certend}" -gt "${certbegin}"; then
692 break
693 fi
694 done
695 sed -n "${certbegin},${certend}p" "${CAFILE}" > "${CADIR}/${certbegin}.pem"
696 keyhash=`${OPENSSL} x509 -noout -in "${CADIR}/${certbegin}.pem" -hash`
697 echo "Generated PEM file with hash: ${keyhash}."
698 done
699fi
700
701# Write the output file
702for cert in `find "${CADIR}" -type f -name "*.pem" -o -name "*.crt"`
703do
704
705 # Make sure the certificate date is valid...
706 date=$( ${OPENSSL} x509 -enddate -in "${cert}" -noout | sed 's/^notAfter=//' )
707 mydate "${date}"
708 if test "${certdate}" -lt "${today}" ; then
709 echo "${cert} expired on ${certdate}! Skipping..."
710 unset date certdate
711 continue
712 fi
713 unset date certdate
714 ls "${cert}"
715 tempfile=`mktemp`
716 certbegin=`grep -n "^-----BEGIN" "${cert}" | cut -d ":" -f 1`
717 certend=`grep -n "^-----END" "${cert}" | cut -d ":" -f 1`
718 sed -n "${certbegin},${certend}p" "${cert}" > "${tempfile}"
719 echo yes | env LC_ALL=C "${KEYTOOL}" -import -alias `basename "${cert}"` -keystore \
720 "${OUTFILE}" -storepass 'changeit' -file "${tempfile}"
721 rm "${tempfile}"
722done
723
724if test "${TEMPDIR}x" != "x" ; then
725 rm -rf "${TEMPDIR}"
726fi
727exit 0</literal>
728EOF
729
730chmod -c 0755 /opt/jdk/bin/mkcacerts</userinput></screen>
731
732 <note>
733 <para>
734 Doing a very large copy/paste directly to a terminal may result in a
735 corrupted file. Copying to an editor may overcome this issue.
736 </para>
737 </note>
738
739 <para>First, make a backup of the
740 <filename>/opt/jdk/jre/lib/security/cacerts</filename> file, if there is
741 any. To create a new one, as the
742 <systemitem class="username">root</systemitem> user:</para>
743
744<screen role="root"><userinput>/opt/jdk/bin/mkcacerts -d "/etc/ssl/certs/" -k "/opt/jdk/bin/keytool" \
745 -s "/usr/bin/openssl" -o "/opt/jdk/jre/lib/security/cacerts"</userinput></screen>
746
747 </sect3>
748
749 </sect2>
750
751 <sect2 role="content">
752 <title>Contents</title>
753
754 <segmentedlist>
755 <segtitle>Installed Programs</segtitle>
756 <segtitle>Installed Libraries</segtitle>
757 <segtitle>Installed Directory</segtitle>
758
759 <seglistitem>
760 <seg>appletviewer, apt, extcheck, idlj, jar,
761 jarsigner, java, javac, javadoc, javah, javap, java-rmi.cgi,
762 jcmd, jconsole, jdb, jhat, jinfo, jmap, jps,
763 jrunscript, jsadebugd, jstack, jstat, jstatd, keytool,
764 native2ascii, orbd, pack200, policytool, rmic, rmid, rmiregistry,
765 schemagen, serialver, servertool, tnameserv, unpack200,
766 wsgen, wsimport, and xjc</seg>
767 <seg>/opt/OpenJDK-&openjdk-version;/lib/*, and
768 /opt/OpenJDK-&openjdk-version;/jre/lib/*</seg>
769 <seg>/opt/OpenJDK-&openjdk-version;</seg>
770 </seglistitem>
771 </segmentedlist>
772
773 <variablelist>
774 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
775 <?dbfo list-presentation="list"?>
776 <?dbhtml list-presentation="table"?>
777
778 <varlistentry id="appletviewer">
779 <term><command>appletviewer</command></term>
780 <listitem>
781 <para>allows you to run applets outside of a web browser.</para>
782 <indexterm zone="openjdk appletviewer">
783 <primary sortas="b-appletviewer">appletviewer</primary>
784 </indexterm>
785 </listitem>
786 </varlistentry>
787
788 <varlistentry id="apt">
789 <term><command>apt</command></term>
790 <listitem>
791 <para>is an annotation processing tool.</para>
792 <indexterm zone="openjdk apt">
793 <primary sortas="b-apt">apt</primary>
794 </indexterm>
795 </listitem>
796 </varlistentry>
797
798 <varlistentry id="extcheck">
799 <term><command>extcheck</command></term>
800 <listitem>
801 <para>checks a specified jar file for title and version conflicts
802 with any extensions installed in the
803 <application>OpenJDK</application> software.</para>
804 <indexterm zone="openjdk extcheck">
805 <primary sortas="b-extcheck">extcheck</primary>
806 </indexterm>
807 </listitem>
808 </varlistentry>
809
810 <varlistentry id="idlj">
811 <term><command>idlj</command></term>
812 <listitem>
813 <para>generates Java bindings from a given IDL file.</para>
814 <indexterm zone="openjdk idlj">
815 <primary sortas="b-idlj">idlj</primary>
816 </indexterm>
817 </listitem>
818 </varlistentry>
819
820 <varlistentry id="jar">
821 <term><command>jar</command></term>
822 <listitem>
823 <para>combines multiple files into a single jar archive.</para>
824 <indexterm zone="openjdk jar">
825 <primary sortas="b-jar">jar</primary>
826 </indexterm>
827 </listitem>
828 </varlistentry>
829
830 <varlistentry id="jarsigner">
831 <term><command>jarsigner</command></term>
832 <listitem>
833 <para>signs jar files and verifies the signatures and integrity
834 of a signed jar file.</para>
835 <indexterm zone="openjdk jarsigner">
836 <primary sortas="b-jarsigner">jarsigner</primary>
837 </indexterm>
838 </listitem>
839 </varlistentry>
840
841 <varlistentry id="java-prog">
842 <term><command>java</command></term>
843 <listitem>
844 <para>launches a Java application by starting a Java runtime
845 environment, loading a specified class and invoking its main
846 method.</para>
847 <indexterm zone="openjdk java-prog">
848 <primary sortas="b-java-prog">java</primary>
849 </indexterm>
850 </listitem>
851 </varlistentry>
852
853 <varlistentry id="javac">
854 <term><command>javac</command></term>
855 <listitem>
856 <para>reads class and interface definitions, written in the
857 Java programming language, and compiles them into bytecode
858 class files.</para>
859 <indexterm zone="openjdk javac">
860 <primary sortas="b-javac">javac</primary>
861 </indexterm>
862 </listitem>
863 </varlistentry>
864
865 <varlistentry id="javadoc">
866 <term><command>javadoc</command></term>
867 <listitem>
868 <para>parses the declarations and documentation comments in a
869 set of Java source files and produces a corresponding set of
870 HTML pages describing the classes, interfaces,constructors,
871 methods, and fields.</para>
872 <indexterm zone="openjdk javadoc">
873 <primary sortas="b-javadoc">javadoc</primary>
874 </indexterm>
875 </listitem>
876 </varlistentry>
877
878 <varlistentry id="javah">
879 <term><command>javah</command></term>
880 <listitem>
881 <para>generates C header and source files
882 that are needed to implement native methods.</para>
883 <indexterm zone="openjdk javah">
884 <primary sortas="b-javah">javah</primary>
885 </indexterm>
886 </listitem>
887 </varlistentry>
888
889 <varlistentry id="javap">
890 <term><command>javap</command></term>
891 <listitem>
892 <para>disassembles a Java class file.</para>
893 <indexterm zone="openjdk javap">
894 <primary sortas="b-javap">javap</primary>
895 </indexterm>
896 </listitem>
897 </varlistentry>
898
899 <varlistentry id="java-rmi.cgi">
900 <term><command>java-rmi.cgi</command></term>
901 <listitem>
902 <para>is the Java RMI client.</para>
903 <indexterm zone="openjdk java-rmi.cgi">
904 <primary sortas="b-java-rmi.cgi">java-rmi.cgi</primary>
905 </indexterm>
906 </listitem>
907 </varlistentry>
908
909 <varlistentry id="jcmd">
910 <term><command>jcmd</command></term>
911 <listitem>
912 <para>is a utility to send diagnostic command requests to a running
913 Java Virtual Machine.</para>
914 <indexterm zone="openjdk jcmd">
915 <primary sortas="b-jcmd">jcmd</primary>
916 </indexterm>
917 </listitem>
918 </varlistentry>
919
920 <varlistentry id="jconsole">
921 <term><command>jconsole</command></term>
922 <listitem>
923 <para>is a graphical console tool to monitor and manage both
924 local and remote Java applications and virtual machines.</para>
925 <indexterm zone="openjdk jconsole">
926 <primary sortas="b-jconsole">jconsole</primary>
927 </indexterm>
928 </listitem>
929 </varlistentry>
930
931 <varlistentry id="jdb">
932 <term><command>jdb</command></term>
933 <listitem>
934 <para>is a simple command-line debugger for Java classes.</para>
935 <indexterm zone="openjdk jdb">
936 <primary sortas="b-jdb">jdb</primary>
937 </indexterm>
938 </listitem>
939 </varlistentry>
940
941 <varlistentry id="jhat">
942 <term><command>jhat</command></term>
943 <listitem>
944 <para>parses a java heap dump file and allows viewing
945 in a web browser.</para>
946 <indexterm zone="openjdk jhat">
947 <primary sortas="b-jhat">jhat</primary>
948 </indexterm>
949 </listitem>
950 </varlistentry>
951
952 <varlistentry id="jinfo">
953 <term><command>jinfo</command></term>
954 <listitem>
955 <para>prints Java configuration information for a given Java
956 process, core file, or a remote debug server.</para>
957 <indexterm zone="openjdk jinfo">
958 <primary sortas="b-jinfo">jinfo</primary>
959 </indexterm>
960 </listitem>
961 </varlistentry>
962
963 <varlistentry id="jmap">
964 <term><command>jmap</command></term>
965 <listitem>
966 <para>prints shared object memory maps or heap memory details
967 of a given process, core file, or a remote debug server.</para>
968 <indexterm zone="openjdk jmap">
969 <primary sortas="b-jmap">jmap</primary>
970 </indexterm>
971 </listitem>
972 </varlistentry>
973
974 <varlistentry id="jps">
975 <term><command>jps</command></term>
976 <listitem>
977 <para>lists the instrumented JVMs on the target system.</para>
978 <indexterm zone="openjdk jps">
979 <primary sortas="b-jps">jps</primary>
980 </indexterm>
981 </listitem>
982 </varlistentry>
983
984 <varlistentry id="jrunscript">
985 <term><command>jrunscript</command></term>
986 <listitem>
987 <para>is a command line script shell.</para>
988 <indexterm zone="openjdk jrunscript">
989 <primary sortas="b-jrunscript">jrunscript</primary>
990 </indexterm>
991 </listitem>
992 </varlistentry>
993
994 <varlistentry id="jsadebugd">
995 <term><command>jsadebugd</command></term>
996 <listitem>
997 <para>attaches to a Java process or core file and acts as a
998 debug server.</para>
999 <indexterm zone="openjdk jsadebugd">
1000 <primary sortas="b-jsadebugd">jsadebugd</primary>
1001 </indexterm>
1002 </listitem>
1003 </varlistentry>
1004
1005 <varlistentry id="jstack">
1006 <term><command>jstack</command></term>
1007 <listitem>
1008 <para>prints Java stack traces of Java threads for a given
1009 Java process, core file, or a remote debug server.</para>
1010 <indexterm zone="openjdk jstack">
1011 <primary sortas="b-jstack">jstack</primary>
1012 </indexterm>
1013 </listitem>
1014 </varlistentry>
1015
1016 <varlistentry id="jstat">
1017 <term><command>jstat</command></term>
1018 <listitem>
1019 <para>displays performance statistics for an instrumented JVM.</para>
1020 <indexterm zone="openjdk jstat">
1021 <primary sortas="b-jstat">jstat</primary>
1022 </indexterm>
1023 </listitem>
1024 </varlistentry>
1025
1026 <varlistentry id="jstatd">
1027 <term><command>jstatd</command></term>
1028 <listitem>
1029 <para>is an RMI server application that monitors for the creation
1030 and termination of instrumented JVMs.</para>
1031 <indexterm zone="openjdk jstatd">
1032 <primary sortas="b-jstatd">jstatd</primary>
1033 </indexterm>
1034 </listitem>
1035 </varlistentry>
1036
1037 <varlistentry id="keytool">
1038 <term><command>keytool</command></term>
1039 <listitem>
1040 <para>is a key and certificate management utility.</para>
1041 <indexterm zone="openjdk keytool">
1042 <primary sortas="b-keytool">keytool</primary>
1043 </indexterm>
1044 </listitem>
1045 </varlistentry>
1046
1047 <varlistentry id="native2ascii">
1048 <term><command>native2ascii</command></term>
1049 <listitem>
1050 <para> converts files that contain non-supported character encoding
1051 into files containing Latin-1 or Unicode-encoded characters.</para>
1052 <indexterm zone="openjdk native2ascii">
1053 <primary sortas="b-native2ascii">native2ascii</primary>
1054 </indexterm>
1055 </listitem>
1056 </varlistentry>
1057
1058 <varlistentry id="orbd">
1059 <term><command>orbd</command></term>
1060 <listitem>
1061 <para>is used to enable clients to transparently locate and invoke
1062 persistent objects on servers in the CORBA environment.</para>
1063 <indexterm zone="openjdk orbd">
1064 <primary sortas="b-orbd">orbd</primary>
1065 </indexterm>
1066 </listitem>
1067 </varlistentry>
1068
1069 <varlistentry id="pack200">
1070 <term><command>pack200</command></term>
1071 <listitem>
1072 <para>is a Java application that transforms a jar file into a
1073 compressed pack200 file using the Java gzip compressor.</para>
1074 <indexterm zone="openjdk pack200">
1075 <primary sortas="b-pack200">pack200</primary>
1076 </indexterm>
1077 </listitem>
1078 </varlistentry>
1079
1080 <varlistentry id="policytool">
1081 <term><command>policytool</command></term>
1082 <listitem>
1083 <para>creates and manages a policy file graphically.</para>
1084 <indexterm zone="openjdk policytool">
1085 <primary sortas="b-policytool">policytool</primary>
1086 </indexterm>
1087 </listitem>
1088 </varlistentry>
1089
1090 <varlistentry id="rmic">
1091 <term><command>rmic</command></term>
1092 <listitem>
1093 <para>generates stub and skeleton class files for remote objects
1094 from the names of compiled Java classes that contain remote
1095 object implementations.</para>
1096 <indexterm zone="openjdk rmic">
1097 <primary sortas="b-rmic">rmic</primary>
1098 </indexterm>
1099 </listitem>
1100 </varlistentry>
1101
1102 <varlistentry id="rmid">
1103 <term><command>rmid</command></term>
1104 <listitem>
1105 <para>starts the activation system daemon.</para>
1106 <indexterm zone="openjdk rmid">
1107 <primary sortas="b-rmid">rmid</primary>
1108 </indexterm>
1109 </listitem>
1110 </varlistentry>
1111
1112 <varlistentry id="rmiregistry">
1113 <term><command>rmiregistry</command></term>
1114 <listitem>
1115 <para>creates and starts a remote object registry on the specified
1116 port on the current host.</para>
1117 <indexterm zone="openjdk rmiregistry">
1118 <primary sortas="b-rmiregistry">rmiregistry</primary>
1119 </indexterm>
1120 </listitem>
1121 </varlistentry>
1122
1123 <varlistentry id="schemagen">
1124 <term><command>schemagen</command></term>
1125 <listitem>
1126 <para>is a Java XML binding schema generator.</para>
1127 <indexterm zone="openjdk schemagen">
1128 <primary sortas="b-schemagen">schemagen</primary>
1129 </indexterm>
1130 </listitem>
1131 </varlistentry>
1132
1133 <varlistentry id="serialver">
1134 <term><command>serialver</command></term>
1135 <listitem>
1136 <para>returns the serialVersionUID for one or more classes in a
1137 form suitable for copying into an evolving class.</para>
1138 <indexterm zone="openjdk serialver">
1139 <primary sortas="b-serialver">serialver</primary>
1140 </indexterm>
1141 </listitem>
1142 </varlistentry>
1143
1144 <varlistentry id="servertool">
1145 <term><command>servertool</command></term>
1146 <listitem>
1147 <para>provides an ease-of-use interface for application programmers
1148 to register, unregister, startup and shutdown a server.</para>
1149 <indexterm zone="openjdk servertool">
1150 <primary sortas="b-servertool">servertool</primary>
1151 </indexterm>
1152 </listitem>
1153 </varlistentry>
1154
1155 <varlistentry id="tnameserv">
1156 <term><command>tnameserv</command></term>
1157 <listitem>
1158 <para>starts the Java IDL name server.</para>
1159 <indexterm zone="openjdk tnameserv">
1160 <primary sortas="b-tnameserv">tnameserv</primary>
1161 </indexterm>
1162 </listitem>
1163 </varlistentry>
1164
1165 <varlistentry id="unpack200">
1166 <term><command>unpack200</command></term>
1167 <listitem>
1168 <para>is a native implementation that transforms a packed file
1169 produced by <application>pack200</application> into a jar
1170 file.</para>
1171 <indexterm zone="openjdk unpack200">
1172 <primary sortas="b-unpack200">unpack200</primary>
1173 </indexterm>
1174 </listitem>
1175 </varlistentry>
1176
1177 <varlistentry id="wsgen">
1178 <term><command>wsgen</command></term>
1179 <listitem>
1180 <para>generates JAX-WS portable artifacts used in JAX-WS
1181 web services.</para>
1182 <indexterm zone="openjdk wsgen">
1183 <primary sortas="b-wsgen">wsgen</primary>
1184 </indexterm>
1185 </listitem>
1186 </varlistentry>
1187
1188 <varlistentry id="wsimport">
1189 <term><command>wsimport</command></term>
1190 <listitem>
1191 <para>generates JAX-WS portable artifacts.</para>
1192 <indexterm zone="openjdk wsimport">
1193 <primary sortas="b-wsimport">wsimport</primary>
1194 </indexterm>
1195 </listitem>
1196 </varlistentry>
1197
1198 <varlistentry id="xjc">
1199 <term><command>xjc</command></term>
1200 <listitem>
1201 <para>is a Java XML binding compiler.</para>
1202 <indexterm zone="openjdk xjc">
1203 <primary sortas="b-xjc">xjc</primary>
1204 </indexterm>
1205 </listitem>
1206 </varlistentry>
1207
1208 </variablelist>
1209
1210 </sect2>
1211
1212</sect1>
Note: See TracBrowser for help on using the repository browser.