source: general/prog/openjdk.xml@ 406d365

10.0 10.1 11.0 11.1 11.2 11.3 12.0 12.1 7.10 7.5 7.6 7.6-blfs 7.6-systemd 7.7 7.8 7.9 8.0 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind gnome kde5-13430 kde5-14269 kde5-14686 kea ken/TL2024 ken/inkscape-core-mods ken/tuningfonts krejzi/svn lazarus lxqt nosym perl-modules plabs/newcss plabs/python-mods python3.11 qt5new rahul/power-profiles-daemon renodr/vulkan-addition systemd-11177 systemd-13485 trunk upgradedb xry111/intltool xry111/llvm18 xry111/soup3 xry111/test-20220226 xry111/xf86-video-removal
Last change on this file since 406d365 was 406d365, checked in by Fernando de Oliveira <fernando@…>, 10 years ago

Update to gnutls-3.2.11. OpenJDK-1.7.0.51/IcedTea-2.4.5: add alsa-lib-1.0.27.2, libxslt-1.1.28, and Mercurial-2.9 as optional dependencies.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@12710 af4574ff-66df-0310-9fd7-8a98e5e911e0
  • Property mode set to 100644
File size: 43.8 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY anduin-download "http://anduin.linuxfromscratch.org/files/BLFS/OpenJDK-&openjdk-version;">
8 <!ENTITY icedtea-download "http://icedtea.classpath.org/download/source/icedtea-&icedtea-version;.tar.xz">
9
10 <!ENTITY icedtea-md5sum "3a2051b025d73534f14531c783de4455">
11 <!ENTITY icedtea-size "3.3 MB">
12
13 <!ENTITY corba-download "&anduin-download;/corba.tar.gz">
14 <!ENTITY corba-md5sum "adf888756629bdcb37f71451269ac42e">
15 <!ENTITY corba-size "1.4 MB">
16
17 <!ENTITY hotspot-download "&anduin-download;/hotspot.tar.gz">
18 <!ENTITY hotspot-md5sum "67bb16313215e6da72bda7dc0090bb6a">
19 <!ENTITY hotspot-size "9.2 MB">
20
21 <!ENTITY jaxp-download "&anduin-download;/jaxp.tar.gz">
22 <!ENTITY jaxp-md5sum "1c42344779d49baed24724535a7e2c9b">
23 <!ENTITY jaxp-size "3.8 MB">
24
25 <!ENTITY jaxws-download "&anduin-download;/jaxws.tar.gz">
26 <!ENTITY jaxws-md5sum "256148d7e7f5619addde91fd14bc3361">
27 <!ENTITY jaxws-size "2.7 MB">
28
29 <!ENTITY jdk-download "&anduin-download;/jdk.tar.gz">
30 <!ENTITY jdk-md5sum "3370074398071b4104e0e89efc9a4a56">
31 <!ENTITY jdk-size "39 MB">
32
33 <!ENTITY langtools-download "&anduin-download;/langtools.tar.gz">
34 <!ENTITY langtools-md5sum "7605555236ffd8ac6bdedc6bc9b61c26">
35 <!ENTITY langtools-size "2.2 MB">
36
37 <!ENTITY openjdk-download "&anduin-download;/openjdk.tar.gz">
38 <!ENTITY openjdk-md5sum "09b9db8ca0b833070326573c3dac56e2">
39 <!ENTITY openjdk-size "136 KB">
40
41 <!ENTITY rhino-download "ftp://ftp.mozilla.org/pub/mozilla.org/js/rhino1_7R3.zip">
42 <!ENTITY rhino-md5sum "99d94103662a8d0b571e247a77432ac5">
43 <!ENTITY rhino-size "4.5 MB">
44
45 <!ENTITY openjdk-buildsize "8.5-11 GB">
46 <!ENTITY openjdk-time "34-37 SBU (an additional 100 SBU for testsuite)">
47]>
48
49<sect1 id="openjdk" xreflabel="OpenJDK-&openjdk-version;/IcedTea-&icedtea-version;">
50 <?dbhtml filename="openjdk.html" ?>
51
52 <sect1info>
53 <othername>$LastChangedBy$</othername>
54 <date>$Date$</date>
55 </sect1info>
56
57 <title>OpenJDK-&openjdk-version;/IcedTea-&icedtea-version;</title>
58
59 <indexterm zone="openjdk">
60 <primary sortas="a-OpenJDK">OpenJDK</primary>
61 </indexterm>
62
63 <sect2 role="package">
64 <title>Introduction to OpenJDK and IcedTea</title>
65
66 <para><application>IcedTea</application> provides a build harness for the
67 <application>OpenJDK</application> package, Oracle's open-sourced
68 <application>Java</application> development environment. In order to
69 provide a completely free runtime environment, similar to Oracle's closed
70 distribution, the <application>IcedTea</application> build harness also
71 provides free, and arguably better versions of parts of the JDK which
72 have not been open-sourced to date. <application>OpenJDK</application> is
73 useful for developing <application>Java</application> programs and provides
74 a complete runtime environment to run <application>Java</application>
75 programs.</para>
76
77 &lfs74_checked;
78
79 <note><para>The browser plugin and webstart implementation have been split
80 off into a separate project. To provide a complete implementation, you will
81 need to later install <xref linkend="icedtea-web"/>.</para></note>
82
83 <para>OpenJDK is GPL'd code, however, it should be explained that there has
84 been a special exception made for non-free projects to use these classes in
85 their proprietary products. In similar fashion to the LGPL, which
86 allows non-free programs to link to libraries provided by free software,
87 the <ulink url="http://openjdk.java.net/legal/gplv2+ce.html">GNU
88 General Public License, version 2, with the Classpath Exception</ulink>
89 allows third party programs to use classes provided by free software
90 without the requirement that the third party software also be free. As with
91 the LGPL, any modifications made to the free software portions of a
92 third party application, must also be made freely available.</para>
93
94 <note>
95 <para>The IcedTea build environment includes a very thorough, open source
96 test suite titled <application>JTreg</application>.
97 <application>JTreg</application> is intended to test the just built JDK
98 for reasonable compatibility with the closed Oracle JDK. However, in
99 order for an independent implementation to claim compatibility, including
100 the Oracle sponsored <application>OpenJDK</application> project, it must
101 pass a closed <application>JCK/TCK</application> test suite. No claims
102 of compatibility, even partial compatibility, may be made without
103 passing an approved test suite.</para>
104
105 <para>Oracle does provide free community access, on a case by case basis,
106 to a closed toolkit to ensure 100% compatibility with its proprietary JDK.
107 The binary version provided here has not been tested against the
108 <ulink url="http://openjdk.java.net/groups/conformance/JckAccess/jck-access.html">
109 TCK</ulink>. Any version that is built using the instructions given,
110 cannot claim to be compatible with the proprietary JDK, without the user
111 applying for, and completing the compatibility tests themselves.</para>
112
113 <para>With that in mind, the binaries produced using this build method are
114 regularly tested against the TCK by the members listed on the site above.
115 In addition to the community license above, an educational, non-commercial
116 license for the TCK can be obtained from
117 <ulink url="http://www.oracle.com/technetwork/java/index-137188.html">
118 here</ulink>.</para>
119 </note>
120
121 <bridgehead renderas="sect3">Source Package Information</bridgehead>
122 <itemizedlist spacing="compact">
123 <listitem>
124 <para>IcedTea Source Package
125 <simplelist>
126 <member>Download: <ulink url="&icedtea-download;"/></member>
127 <member>Download MD5 sum: &icedtea-md5sum;</member>
128 <member>Download Size: &icedtea-size;</member>
129 </simplelist>
130 </para>
131 </listitem>
132 </itemizedlist>
133
134 <para>The following may be downladed separately or be done as a
135 part of the <command>make</command> process. For convenience
136 the BLFS editors have made the files available in an LFS website.
137 The files are not distributed with versions, but extracted from
138 the OpenJDK version control system at specified (tagged) points.</para>
139
140 <itemizedlist spacing="compact">
141 <listitem>
142 <para>Corba Source
143 <simplelist>
144 <member>Download: <ulink url="&corba-download;"/></member>
145 <member>Download MD5 sum: &corba-md5sum;</member>
146 <member>Download Size: &corba-size;</member>
147 </simplelist>
148 </para>
149 </listitem>
150 <listitem>
151 <para>Hotspot Source
152 <simplelist>
153 <member>Download: <ulink url="&hotspot-download;"/></member>
154 <member>Download MD5 sum: &hotspot-md5sum;</member>
155 <member>Download Size: &hotspot-size;</member>
156 </simplelist>
157 </para>
158 </listitem>
159 <listitem>
160 <para>IcedTea Build Source
161 <simplelist>
162 <member>Download: <ulink url="&openjdk-download;"/></member>
163 <member>Download MD5 sum: &openjdk-md5sum;</member>
164 <member>Download Size: &openjdk-size;</member>
165 </simplelist>
166 </para>
167 </listitem>
168 <listitem>
169 <para>JAXP Source
170 <simplelist>
171 <member>Download: <ulink url="&jaxp-download;"/></member>
172 <member>Download MD5 sum: &jaxp-md5sum;</member>
173 <member>Download Size: &jaxp-size;</member>
174 </simplelist>
175 </para>
176 </listitem>
177 <listitem>
178 <para>JAXWS Source
179 <simplelist>
180 <member>Download: <ulink url="&jaxws-download;"/></member>
181 <member>Download MD5 sum: &jaxws-md5sum;</member>
182 <member>Download Size: &jaxws-size;</member>
183 </simplelist>
184 </para>
185 </listitem>
186 <listitem>
187 <para>Langtools Source
188 <simplelist>
189 <member>Download: <ulink url="&langtools-download;"/></member>
190 <member>Download MD5 sum: &langtools-md5sum;</member>
191 <member>Download Size: &langtools-size;</member>
192 </simplelist>
193 </para>
194 </listitem>
195 <listitem>
196 <para>OpenJDK Source
197 <simplelist>
198 <member>Download: <ulink url="&jdk-download;"/></member>
199 <member>Download MD5 sum: &jdk-md5sum;</member>
200 <member>Download Size: &jdk-size;</member>
201 </simplelist>
202 </para>
203 </listitem>
204 <listitem>
205 <para>Estimated disk space required: &openjdk-buildsize;</para>
206 </listitem>
207 <listitem>
208 <para>Estimated build time: &openjdk-time;</para>
209 </listitem>
210 </itemizedlist>
211
212 <bridgehead renderas="sect3">Additional Downloads</bridgehead>
213
214 <bridgehead renderas="sect4">Required Patches</bridgehead>
215 <itemizedlist spacing='compact'>
216 <listitem>
217 <para><ulink
218 url="&patch-root;/icedtea-&icedtea-version;-add_cacerts-1.patch"/></para>
219 </listitem>
220 <listitem>
221 <para><ulink
222 url="&patch-root;/icedtea-&icedtea-version;-fixed_paths-1.patch"/></para>
223 </listitem>
224 <listitem>
225 <para><ulink
226 url="&patch-root;/icedtea-&icedtea-version;-fix_tests-1.patch"/></para>
227 </listitem>
228 </itemizedlist>
229
230 <bridgehead renderas="sect4">Required JAR</bridgehead>
231 <itemizedlist spacing='compact'>
232 <listitem>
233 <para>Rhino Java Script
234 <simplelist>
235 <member>Download: <ulink url="&rhino-download;"/></member>
236 <member>Download MD5 sum: &rhino-md5sum;</member>
237 <member>Download Size: &rhino-size;</member>
238 </simplelist>
239 </para>
240 </listitem>
241 </itemizedlist>
242 <bridgehead renderas="sect3">OpenJDK Dependencies</bridgehead>
243
244 <bridgehead renderas="sect4">Required Dependencies</bridgehead>
245 <para role="required">
246 An existing binary ( <xref linkend="java"/> or an earlier built
247 version of this package,
248 <xref linkend="apache-ant"/>,
249 <xref linkend="cacerts"/>,
250 <xref linkend="cpio"/>,
251 <xref linkend="cups"/>,
252 <xref linkend="gtk3"/>,
253 <xref linkend="giflib"/>,
254 <xref linkend="nspr"/>,
255 <xref linkend="unzip"/>,
256 <xref linkend="wget"/>,
257 <xref linkend="which"/>,
258 <xref linkend="xorg7-lib"/>, and
259 <xref linkend="zip"/>
260 </para>
261
262 <bridgehead renderas="sect4">Optional</bridgehead>
263 <para role="optional">
264 <xref linkend="alsa-lib"/>,
265 <xref linkend="libxslt"/>,
266 <xref linkend="lsb-release"/>,
267 <xref linkend="mercurial"/>,
268 <xref linkend="mitkrb"/>, and
269 <xref linkend="pulseaudio"/>
270 </para>
271
272 <para condition="html" role="usernotes">User Notes:
273 <ulink url="&blfs-wiki;/openjdk"/></para>
274
275 </sect2>
276
277 <sect2 role="installation">
278 <title>Installation of OpenJDK</title>
279
280 <note><para>The source build of OpenJDK requires <xref
281 linkend="apache-ant"/>. You'll need to build that first to satisfy the
282 circular dependency, and return to this section to continue building
283 OpenJDK.</para></note>
284
285 <para>Unlike other packages in BLFS, the <application>OpenJDK</application>
286 source packages are distributed in multiple downloads. Since the IcedTea
287 build harness will be used to build <application>OpenJDK</application>,
288 begin by extracting the IcedTea package and changing into the
289 extracted directory.</para>
290
291 <para>The IcedTea <application>OpenJDK</application> distribution requires
292 that <filename>js.jar</filename> (from the Rhino package) be in place in
293 order to provide a java-script implementation for the free JDK. If you have
294 not installed the js.jar file in another way, do so with the following
295 commands as the <systemitem class="username">root</systemitem> user:</para>
296
297<screen role="root"><userinput>unzip ../rhino1_7R3.zip &amp;&amp;
298install -v -d -m755 /usr/share/java &amp;&amp;
299install -v -m755 rhino1_7R3/*.jar /usr/share/java</userinput></screen>
300
301 <para>As mentioned previously, <application>OpenJDK</application> is
302 composed of several individual projects of the proprietary
303 <application>JDK</application> that have been relicensed under an open
304 source license. If you have already downoaded all of the individual
305 components, place them into the source tree with the following commands:</para>
306
307<screen><userinput>cp -v ../corba.tar.gz . &amp;&amp;
308cp -v ../hotspot.tar.gz . &amp;&amp;
309cp -v ../jaxp.tar.gz . &amp;&amp;
310cp -v ../jaxws.tar.gz . &amp;&amp;
311cp -v ../jdk.tar.gz . &amp;&amp;
312cp -v ../langtools.tar.gz . &amp;&amp;
313cp -v ../openjdk.tar.gz .</userinput></screen>
314
315 <para>Apply a patch to generate a valid cacerts file using the system CA
316 certificates:</para>
317
318<screen><userinput>patch -Np1 -i ../icedtea-&icedtea-version;-add_cacerts-1.patch</userinput></screen>
319
320 <para>Apply a patch to replace fixed paths with ones appropriate for
321 BLFS:</para>
322
323<screen><userinput>patch -Np1 -i ../icedtea-&icedtea-version;-fixed_paths-1.patch</userinput></screen>
324
325 <para>Apply a patch to exclude known broken tests from the test suite:</para>
326
327<screen><userinput>patch -Np1 -i ../icedtea-&icedtea-version;-fix_tests-1.patch</userinput></screen>
328
329 <para>Configure and build the package with the following commands
330 (--with-pkgversion and --with-version-suffix values can be modified to fit
331 user preferences):</para>
332
333<screen><userinput>unset JAVA_HOME &amp;&amp;
334./autogen.sh &amp;&amp;
335./configure --with-jdk-home=/opt/OpenJDK-&openjdk-version;-bin \
336 --with-version-suffix=BLFS \
337 --enable-nss \
338 --disable-system-kerberos \
339 --with-parallel-jobs=$(getconf _NPROCESSORS_ONLN) &amp;&amp;
340make</userinput></screen>
341
342 <note><para>If you have not installed the tarballs specified above,
343 they will be automatically downloaded here.</para></note>
344
345 <para>To test the results, issue: <command>make jtregcheck</command>. The
346 included version of <application>jtreg</application> is old, and the test
347 suite is also very dependent on the host system and the environment that it
348 is run in. You should expect to see anywhere between 40 and 100 failures in
349 jdk with up to 10 errors in the tests themselves. The majority of the
350 6000+ tests should pass. The reason for the greatly varying results is due
351 to how stringent the testing environment must be. Varying architectures,
352 different versions of dependent libraries, unexpected X Window environment
353 and window managers, the CA certificates used to generate the
354 <filename>cacerts</filename> file, and even any user input or power
355 management or screen saver interruptions during the testing can lead to
356 various failures. While the known broken tests have been removed, with the
357 fix_tests patch above, the graphics tests failures cannot be pre-determined
358 (short of removing them all). The best bet for the minimal number of
359 failures is to run the test suite in a framebuffer on a different screen
360 (Xvfb). Even still, disk I/O can cause failures.</para>
361
362<screen><userinput>export DISPLAY=:20 &amp;&amp;
363Xvfb :20 -screen 0 1x1x24 -ac&amp;
364echo $!> Xvfb.pid &amp;&amp;
365make -k jtregcheck &amp;&amp;
366kill -9 `cat Xvfb.pid` &amp;&amp;
367unset DISPLAY &amp;&amp;
368rm -f Xvfb.pid</userinput></screen>
369
370 <para>Install the package with the following commands as the
371 <systemitem class="username">root</systemitem> user:</para>
372
373<screen role="root"><userinput>chmod 0644 openjdk.build/j2sdk-image/lib/sa-jdi.jar &amp;&amp;
374cp -R openjdk.build/j2sdk-image /opt/OpenJDK-&openjdk-version; &amp;&amp;
375chown -R root:root /opt/OpenJDK-&openjdk-version;</userinput></screen>
376
377 </sect2>
378
379 <sect2 role="commands">
380 <title>Command Explanations</title>
381
382 <para><command>./autogen.sh</command>: This command forces rebuilding of
383 auto-generated files to account for new options added to
384 <filename>configure</filename>.</para>
385
386 <para><parameter>--with-jdk-home</parameter>: This switch provides the
387 location of the temporary <application>JDK</application>.</para>
388
389 <para><parameter>--with-pkgversion</parameter>: This switch can be used
390 to modify the version string in addition to "IcedTea".</para>
391
392 <para><parameter>--with-version-suffix</parameter>: This switch appends
393 the given text to the JDK version string.</para>
394
395 <para><parameter>--disable-system-kerberos</parameter>: Remove this switch,
396 if <xref linkend="mitkrb"/> is installed.</para>
397
398 <para><parameter>--with-parallel-jobs=$(getconf _NPROCESSORS_ONLN)</parameter>:
399 This switch sets the compiler to use all your CPUs in parallel and speed
400 up the build.</para>
401
402 <para><command>chmod -v 0644 ...sa-jdi.jar</command>: Fix permissions
403 in a generated file so all users can access it.</para>
404
405 <para><option>--enable-pulse-java</option>: This switch enables
406 building of the pulseaudio libraries (needed to provide a complete
407 implementation that is reasonably compatible with the proprietary
408 JDK). <xref linkend="pulseaudio"/> needs to be installed.</para>
409
410 </sect2>
411
412 <sect2 role="configuration" id="openjdk-config" xreflabel="Configuring OpenJDK" >
413 <title>Configuring OpenJDK</title>
414
415 <sect3>
416 <title>Configuration Information</title>
417
418 <para>There are now two <application>OpenJDK</application> SDKs
419 installed in <filename>/opt</filename>. You should decide on which one
420 you would like to use as the default. For example if you decide to use
421 the precompiled <application>OpenJDK</application>, do the following as
422 the <systemitem class="username">root</systemitem> user:</para>
423
424<screen role="root"><userinput>ln -v -nsf OpenJDK-&openjdk-version;-bin /opt/jdk</userinput></screen>
425
426 <para>The information below assumes your system is set up using the
427 instructions found in <quote><xref
428 linkend="postlfs-config-profile"/></quote>. You may need to extract the
429 relevant information below and incorporate it into your system's startup
430 files if your system is set up differently.</para>
431
432 <para>Add the following <filename>openjdk.sh</filename> shell startup
433 file to the <filename>/etc/profile.d</filename> directory with the
434 following commands as the <systemitem class="username">root</systemitem>
435 user:</para>
436
437<screen role="root"><userinput>cat &gt; /etc/profile.d/openjdk.sh &lt;&lt; "EOF"
438<literal># Begin /etc/profile.d/openjdk.sh
439
440# Set JAVA_HOME directory
441JAVA_HOME=/opt/jdk
442
443# Adjust PATH
444pathappend $JAVA_HOME/bin PATH
445
446# Adjust MANPATH
447pathappend $JAVA_HOME/man MANPATH
448
449# Auto Java CLASSPATH
450# Copy jar files to, or create symlinks in this directory
451
452AUTO_CLASSPATH_DIR=/usr/share/java
453
454pathprepend . CLASSPATH
455
456for dir in `find ${AUTO_CLASSPATH_DIR} -type d 2>/dev/null`; do
457 pathappend $dir CLASSPATH
458done
459
460for jar in `find ${AUTO_CLASSPATH_DIR} -name "*.jar" 2>/dev/null`; do
461 pathappend $jar CLASSPATH
462done
463
464export JAVA_HOME CLASSPATH
465unset AUTO_CLASSPATH_DIR dir jar
466
467# End /etc/profile.d/openjdk.sh</literal>
468EOF</userinput></screen>
469
470 <para>Finally, add the man pages to <application>man_db</application>'s
471 configuration. As the <systemitem class="username">root</systemitem>
472 user:</para>
473
474<screen><userinput>cat &gt;&gt; /etc/man_db.conf &lt;&lt; "EOF" &amp;&amp;
475<literal>MANDATORY_MANPATH /opt/jdk/man
476MANPATH_MAP /opt/jdk/bin /opt/jdk/man
477MANDB_MAP /opt/jdk/man /var/cache/man/jdk</literal>
478EOF
479
480mandb -c /opt/jdk/man</userinput></screen>
481
482 </sect3>
483
484 <sect3 id='ojdk-certs'>
485 <title>Install or update the JRE Certificate Authority Certificates (cacerts) file</title>
486
487 <para>Use the following procedure to check if the
488 <filename>cacerts</filename> file was successfully installed during the
489 OpenJDK build. Also, if the <xref linkend="cacerts"/> have been updated,
490 the following instructions will generate a new JRE
491 <filename>cacerts</filename> file. First, check if the
492 <filename>cacerts</filename> have been successfully installed: </para>
493
494<screen role="root"><userinput>cd /opt/jdk
495bin/keytool -list -keystore jre/lib/security/cacerts</userinput></screen>
496
497 <para>At the prompt "Enter keystore password:", press the "Enter" key if
498 there is no keystore password defined. If the
499 <filename>cacerts</filename> were installed correctly, you will see a
500 list of the certificates with related information for each one. If not,
501 you need to manually install them. First, generate the
502 <command>mkcacerts</command> script as the
503 <systemitem class="username">root</systemitem> user:</para>
504
505<screen role="root"><userinput>cat &gt; /opt/jdk/bin/mkcacerts &lt;&lt; "EOF"
506<literal>#!/bin/sh
507# Simple script to extract x509 certificates and create a JRE cacerts file.
508
509function get_args()
510 {
511 if test -z "${1}" ; then
512 showhelp
513 exit 1
514 fi
515
516 while test -n "${1}" ; do
517 case "${1}" in
518 -f | --cafile)
519 check_arg $1 $2
520 CAFILE="${2}"
521 shift 2
522 ;;
523 -d | --cadir)
524 check_arg $1 $2
525 CADIR="${2}"
526 shift 2
527 ;;
528 -o | --outfile)
529 check_arg $1 $2
530 OUTFILE="${2}"
531 shift 2
532 ;;
533 -k | --keytool)
534 check_arg $1 $2
535 KEYTOOL="${2}"
536 shift 2
537 ;;
538 -s | --openssl)
539 check_arg $1 $2
540 OPENSSL="${2}"
541 shift 2
542 ;;
543 -h | --help)
544 showhelp
545 exit 0
546 ;;
547 *)
548 showhelp
549 exit 1
550 ;;
551 esac
552 done
553 }
554
555function check_arg()
556 {
557 echo "${2}" | grep -v "^-" > /dev/null
558 if [ -z "$?" -o ! -n "$2" ]; then
559 echo "Error: $1 requires a valid argument."
560 exit 1
561 fi
562 }
563
564# The date binary is not reliable on 32bit systems for dates after 2038
565function mydate()
566 {
567 local y=$( echo $1 | cut -d" " -f4 )
568 local M=$( echo $1 | cut -d" " -f1 )
569 local d=$( echo $1 | cut -d" " -f2 )
570 local m
571
572 if [ ${d} -lt 10 ]; then d="0${d}"; fi
573
574 case $M in
575 Jan) m="01";;
576 Feb) m="02";;
577 Mar) m="03";;
578 Apr) m="04";;
579 May) m="05";;
580 Jun) m="06";;
581 Jul) m="07";;
582 Aug) m="08";;
583 Sep) m="09";;
584 Oct) m="10";;
585 Nov) m="11";;
586 Dec) m="12";;
587 esac
588
589 certdate="${y}${m}${d}"
590 }
591
592function showhelp()
593 {
594 echo "`basename ${0}` creates a valid cacerts file for use with IcedTea."
595 echo ""
596 echo " -f --cafile The path to a file containing PEM formated CA"
597 echo " certificates. May not be used with -d/--cadir."
598 echo " -d --cadir The path to a diectory of PEM formatted CA"
599 echo " certificates. May not be used with -f/--cafile."
600 echo " -o --outfile The path to the output file."
601 echo ""
602 echo " -k --keytool The path to the java keytool utility."
603 echo ""
604 echo " -s --openssl The path to the openssl utility."
605 echo ""
606 echo " -h --help Show this help message and exit."
607 echo ""
608 echo ""
609 }
610
611# Initialize empty variables so that the shell does not pollute the script
612CAFILE=""
613CADIR=""
614OUTFILE=""
615OPENSSL=""
616KEYTOOL=""
617certdate=""
618date=""
619today=$( date +%Y%m%d )
620
621# Process command line arguments
622get_args ${@}
623
624# Handle common errors
625if test "${CAFILE}x" == "x" -a "${CADIR}x" == "x" ; then
626 echo "ERROR! You must provide an x509 certificate store!"
627 echo "\'$(basename ${0}) --help\' for more info."
628 echo ""
629 exit 1
630fi
631
632if test "${CAFILE}x" != "x" -a "${CADIR}x" != "x" ; then
633 echo "ERROR! You cannot provide two x509 certificate stores!"
634 echo "\'$(basename ${0}) --help\' for more info."
635 echo ""
636 exit 1
637fi
638
639if test "${KEYTOOL}x" == "x" ; then
640 echo "ERROR! You must provide a valid keytool program!"
641 echo "\'$(basename ${0}) --help\' for more info."
642 echo ""
643 exit 1
644fi
645
646if test "${OPENSSL}x" == "x" ; then
647 echo "ERROR! You must provide a valid path to openssl!"
648 echo "\'$(basename ${0}) --help\' for more info."
649 echo ""
650 exit 1
651fi
652
653if test "${OUTFILE}x" == "x" ; then
654 echo "ERROR! You must provide a valid output file!"
655 echo "\'$(basename ${0}) --help\' for more info."
656 echo ""
657 exit 1
658fi
659
660# Get on with the work
661
662# If using a CAFILE, split it into individual files in a temp directory
663if test "${CAFILE}x" != "x" ; then
664 TEMPDIR=`mktemp -d`
665 CADIR="${TEMPDIR}"
666
667 # Get a list of staring lines for each cert
668 CERTLIST=`grep -n "^-----BEGIN" "${CAFILE}" | cut -d ":" -f 1`
669
670 # Get a list of ending lines for each cert
671 ENDCERTLIST=`grep -n "^-----END" "${CAFILE}" | cut -d ":" -f 1`
672
673 # Start a loop
674 for certbegin in `echo "${CERTLIST}"` ; do
675 for certend in `echo "${ENDCERTLIST}"` ; do
676 if test "${certend}" -gt "${certbegin}"; then
677 break
678 fi
679 done
680 sed -n "${certbegin},${certend}p" "${CAFILE}" > "${CADIR}/${certbegin}.pem"
681 keyhash=`${OPENSSL} x509 -noout -in "${CADIR}/${certbegin}.pem" -hash`
682 echo "Generated PEM file with hash: ${keyhash}."
683 done
684fi
685
686# Write the output file
687for cert in `find "${CADIR}" -type f -name "*.pem" -o -name "*.crt"`
688do
689
690 # Make sure the certificate date is valid...
691 date=$( ${OPENSSL} x509 -enddate -in "${cert}" -noout | sed 's/^notAfter=//' )
692 mydate "${date}"
693 if test "${certdate}" -lt "${today}" ; then
694 echo "${cert} expired on ${certdate}! Skipping..."
695 unset date certdate
696 continue
697 fi
698 unset date certdate
699 ls "${cert}"
700 tempfile=`mktemp`
701 certbegin=`grep -n "^-----BEGIN" "${cert}" | cut -d ":" -f 1`
702 certend=`grep -n "^-----END" "${cert}" | cut -d ":" -f 1`
703 sed -n "${certbegin},${certend}p" "${cert}" > "${tempfile}"
704 echo yes | env LC_ALL=C "${KEYTOOL}" -import -alias `basename "${cert}"` -keystore \
705 "${OUTFILE}" -storepass 'changeit' -file "${tempfile}"
706 rm "${tempfile}"
707done
708
709if test "${TEMPDIR}x" != "x" ; then
710 rm -rf "${TEMPDIR}"
711fi
712exit 0</literal>
713EOF
714
715chmod -c 0755 /opt/jdk/bin/mkcacerts</userinput></screen>
716
717 <note>
718 <para>
719 Doing a very large copy/paste directly to a terminal may result in a
720 corrupted file. Copying to an editor may overcome this issue.
721 </para>
722 </note>
723
724 <para>First, make a backup of the
725 <filename>/opt/jdk/jre/lib/security/cacerts</filename> file, if there is
726 any. To create a new one, as the
727 <systemitem class="username">root</systemitem> user:</para>
728
729<screen><userinput>/opt/jdk/bin/mkcacerts -d "/etc/ssl/certs/" -k "/opt/jdk/bin/keytool" \
730 -s "/usr/bin/openssl" -o "/opt/jdk/jre/lib/security/cacerts"</userinput></screen>
731
732 </sect3>
733
734 </sect2>
735
736 <sect2 role="content">
737 <title>Contents</title>
738
739 <segmentedlist>
740 <segtitle>Installed Programs</segtitle>
741 <segtitle>Installed Libraries</segtitle>
742 <segtitle>Installed Directory</segtitle>
743
744 <seglistitem>
745 <seg>appletviewer, apt, extcheck, idlj, jar,
746 jarsigner, java, javac, javadoc, javah, javap, java-rmi.cgi,
747 jcmd, jconsole, jdb, jhat, jinfo, jmap, jps,
748 jrunscript, jsadebugd, jstack, jstat, jstatd, keytool,
749 native2ascii, orbd, pack200, policytool, rmic, rmid, rmiregistry,
750 schemagen, serialver, servertool, tnameserv, unpack200,
751 wsgen, wsimport, and xjc</seg>
752 <seg>/opt/OpenJDK-&openjdk-version;/lib/*, and
753 /opt/OpenJDK-&openjdk-version;/jre/lib/*</seg>
754 <seg>/opt/OpenJDK-&openjdk-version;</seg>
755 </seglistitem>
756 </segmentedlist>
757
758 <variablelist>
759 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
760 <?dbfo list-presentation="list"?>
761 <?dbhtml list-presentation="table"?>
762
763 <varlistentry id="appletviewer">
764 <term><command>appletviewer</command></term>
765 <listitem>
766 <para>allows you to run applets outside of a web browser.</para>
767 <indexterm zone="openjdk appletviewer">
768 <primary sortas="b-appletviewer">appletviewer</primary>
769 </indexterm>
770 </listitem>
771 </varlistentry>
772
773 <varlistentry id="apt">
774 <term><command>apt</command></term>
775 <listitem>
776 <para>is an annotation processing tool.</para>
777 <indexterm zone="openjdk apt">
778 <primary sortas="b-apt">apt</primary>
779 </indexterm>
780 </listitem>
781 </varlistentry>
782
783 <varlistentry id="extcheck">
784 <term><command>extcheck</command></term>
785 <listitem>
786 <para>checks a specified jar file for title and version conflicts
787 with any extensions installed in the
788 <application>OpenJDK</application> software.</para>
789 <indexterm zone="openjdk extcheck">
790 <primary sortas="b-extcheck">extcheck</primary>
791 </indexterm>
792 </listitem>
793 </varlistentry>
794
795 <varlistentry id="idlj">
796 <term><command>idlj</command></term>
797 <listitem>
798 <para>generates Java bindings from a given IDL file.</para>
799 <indexterm zone="openjdk idlj">
800 <primary sortas="b-idlj">idlj</primary>
801 </indexterm>
802 </listitem>
803 </varlistentry>
804
805 <varlistentry id="jar">
806 <term><command>jar</command></term>
807 <listitem>
808 <para>combines multiple files into a single jar archive.</para>
809 <indexterm zone="openjdk jar">
810 <primary sortas="b-jar">jar</primary>
811 </indexterm>
812 </listitem>
813 </varlistentry>
814
815 <varlistentry id="jarsigner">
816 <term><command>jarsigner</command></term>
817 <listitem>
818 <para>signs jar files and verifies the signatures and integrity
819 of a signed jar file.</para>
820 <indexterm zone="openjdk jarsigner">
821 <primary sortas="b-jarsigner">jarsigner</primary>
822 </indexterm>
823 </listitem>
824 </varlistentry>
825
826 <varlistentry id="java-prog">
827 <term><command>java</command></term>
828 <listitem>
829 <para>launches a Java application by starting a Java runtime
830 environment, loading a specified class and invoking its main
831 method.</para>
832 <indexterm zone="openjdk java-prog">
833 <primary sortas="b-java-prog">java</primary>
834 </indexterm>
835 </listitem>
836 </varlistentry>
837
838 <varlistentry id="javac">
839 <term><command>javac</command></term>
840 <listitem>
841 <para>reads class and interface definitions, written in the
842 Java programming language, and compiles them into bytecode
843 class files.</para>
844 <indexterm zone="openjdk javac">
845 <primary sortas="b-javac">javac</primary>
846 </indexterm>
847 </listitem>
848 </varlistentry>
849
850 <varlistentry id="javadoc">
851 <term><command>javadoc</command></term>
852 <listitem>
853 <para>parses the declarations and documentation comments in a
854 set of Java source files and produces a corresponding set of
855 HTML pages describing the classes, interfaces,constructors,
856 methods, and fields.</para>
857 <indexterm zone="openjdk javadoc">
858 <primary sortas="b-javadoc">javadoc</primary>
859 </indexterm>
860 </listitem>
861 </varlistentry>
862
863 <varlistentry id="javah">
864 <term><command>javah</command></term>
865 <listitem>
866 <para>generates C header and source files
867 that are needed to implement native methods.</para>
868 <indexterm zone="openjdk javah">
869 <primary sortas="b-javah">javah</primary>
870 </indexterm>
871 </listitem>
872 </varlistentry>
873
874 <varlistentry id="javap">
875 <term><command>javap</command></term>
876 <listitem>
877 <para>disassembles a Java class file.</para>
878 <indexterm zone="openjdk javap">
879 <primary sortas="b-javap">javap</primary>
880 </indexterm>
881 </listitem>
882 </varlistentry>
883
884 <varlistentry id="java-rmi.cgi">
885 <term><command>java-rmi.cgi</command></term>
886 <listitem>
887 <para>is the Java RMI client.</para>
888 <indexterm zone="openjdk java-rmi.cgi">
889 <primary sortas="b-java-rmi.cgi">java-rmi.cgi</primary>
890 </indexterm>
891 </listitem>
892 </varlistentry>
893
894 <varlistentry id="jcmd">
895 <term><command>jcmd</command></term>
896 <listitem>
897 <para>is a utility to send diagnostic command requests to a running
898 Java Virtual Machine.</para>
899 <indexterm zone="openjdk jcmd">
900 <primary sortas="b-jcmd">jcmd</primary>
901 </indexterm>
902 </listitem>
903 </varlistentry>
904
905 <varlistentry id="jconsole">
906 <term><command>jconsole</command></term>
907 <listitem>
908 <para>is a graphical console tool to monitor and manage both
909 local and remote Java applications and virtual machines.</para>
910 <indexterm zone="openjdk jconsole">
911 <primary sortas="b-jconsole">jconsole</primary>
912 </indexterm>
913 </listitem>
914 </varlistentry>
915
916 <varlistentry id="jdb">
917 <term><command>jdb</command></term>
918 <listitem>
919 <para>is a simple command-line debugger for Java classes.</para>
920 <indexterm zone="openjdk jdb">
921 <primary sortas="b-jdb">jdb</primary>
922 </indexterm>
923 </listitem>
924 </varlistentry>
925
926 <varlistentry id="jhat">
927 <term><command>jhat</command></term>
928 <listitem>
929 <para>parses a java heap dump file and allows viewing
930 in a web browser.</para>
931 <indexterm zone="openjdk jhat">
932 <primary sortas="b-jhat">jhat</primary>
933 </indexterm>
934 </listitem>
935 </varlistentry>
936
937 <varlistentry id="jinfo">
938 <term><command>jinfo</command></term>
939 <listitem>
940 <para>prints Java configuration information for a given Java
941 process, core file, or a remote debug server.</para>
942 <indexterm zone="openjdk jinfo">
943 <primary sortas="b-jinfo">jinfo</primary>
944 </indexterm>
945 </listitem>
946 </varlistentry>
947
948 <varlistentry id="jmap">
949 <term><command>jmap</command></term>
950 <listitem>
951 <para>prints shared object memory maps or heap memory details
952 of a given process, core file, or a remote debug server.</para>
953 <indexterm zone="openjdk jmap">
954 <primary sortas="b-jmap">jmap</primary>
955 </indexterm>
956 </listitem>
957 </varlistentry>
958
959 <varlistentry id="jps">
960 <term><command>jps</command></term>
961 <listitem>
962 <para>lists the instrumented JVMs on the target system.</para>
963 <indexterm zone="openjdk jps">
964 <primary sortas="b-jps">jps</primary>
965 </indexterm>
966 </listitem>
967 </varlistentry>
968
969 <varlistentry id="jrunscript">
970 <term><command>jrunscript</command></term>
971 <listitem>
972 <para>is a command line script shell.</para>
973 <indexterm zone="openjdk jrunscript">
974 <primary sortas="b-jrunscript">jrunscript</primary>
975 </indexterm>
976 </listitem>
977 </varlistentry>
978
979 <varlistentry id="jsadebugd">
980 <term><command>jsadebugd</command></term>
981 <listitem>
982 <para>attaches to a Java process or core file and acts as a
983 debug server.</para>
984 <indexterm zone="openjdk jsadebugd">
985 <primary sortas="b-jsadebugd">jsadebugd</primary>
986 </indexterm>
987 </listitem>
988 </varlistentry>
989
990 <varlistentry id="jstack">
991 <term><command>jstack</command></term>
992 <listitem>
993 <para>prints Java stack traces of Java threads for a given
994 Java process, core file, or a remote debug server.</para>
995 <indexterm zone="openjdk jstack">
996 <primary sortas="b-jstack">jstack</primary>
997 </indexterm>
998 </listitem>
999 </varlistentry>
1000
1001 <varlistentry id="jstat">
1002 <term><command>jstat</command></term>
1003 <listitem>
1004 <para>displays performance statistics for an instrumented JVM.</para>
1005 <indexterm zone="openjdk jstat">
1006 <primary sortas="b-jstat">jstat</primary>
1007 </indexterm>
1008 </listitem>
1009 </varlistentry>
1010
1011 <varlistentry id="jstatd">
1012 <term><command>jstatd</command></term>
1013 <listitem>
1014 <para>is an RMI server application that monitors for the creation
1015 and termination of instrumented JVMs.</para>
1016 <indexterm zone="openjdk jstatd">
1017 <primary sortas="b-jstatd">jstatd</primary>
1018 </indexterm>
1019 </listitem>
1020 </varlistentry>
1021
1022 <varlistentry id="keytool">
1023 <term><command>keytool</command></term>
1024 <listitem>
1025 <para>is a key and certificate management utility.</para>
1026 <indexterm zone="openjdk keytool">
1027 <primary sortas="b-keytool">keytool</primary>
1028 </indexterm>
1029 </listitem>
1030 </varlistentry>
1031
1032 <varlistentry id="native2ascii">
1033 <term><command>native2ascii</command></term>
1034 <listitem>
1035 <para> converts files that contain non-supported character encoding
1036 into files containing Latin-1 or Unicode-encoded characters.</para>
1037 <indexterm zone="openjdk native2ascii">
1038 <primary sortas="b-native2ascii">native2ascii</primary>
1039 </indexterm>
1040 </listitem>
1041 </varlistentry>
1042
1043 <varlistentry id="orbd">
1044 <term><command>orbd</command></term>
1045 <listitem>
1046 <para>is used to enable clients to transparently locate and invoke
1047 persistent objects on servers in the CORBA environment.</para>
1048 <indexterm zone="openjdk orbd">
1049 <primary sortas="b-orbd">orbd</primary>
1050 </indexterm>
1051 </listitem>
1052 </varlistentry>
1053
1054 <varlistentry id="pack200">
1055 <term><command>pack200</command></term>
1056 <listitem>
1057 <para>is a Java application that transforms a jar file into a
1058 compressed pack200 file using the Java gzip compressor.</para>
1059 <indexterm zone="openjdk pack200">
1060 <primary sortas="b-pack200">pack200</primary>
1061 </indexterm>
1062 </listitem>
1063 </varlistentry>
1064
1065 <varlistentry id="policytool">
1066 <term><command>policytool</command></term>
1067 <listitem>
1068 <para>creates and manages a policy file graphically.</para>
1069 <indexterm zone="openjdk policytool">
1070 <primary sortas="b-policytool">policytool</primary>
1071 </indexterm>
1072 </listitem>
1073 </varlistentry>
1074
1075 <varlistentry id="rmic">
1076 <term><command>rmic</command></term>
1077 <listitem>
1078 <para>generates stub and skeleton class files for remote objects
1079 from the names of compiled Java classes that contain remote
1080 object implementations.</para>
1081 <indexterm zone="openjdk rmic">
1082 <primary sortas="b-rmic">rmic</primary>
1083 </indexterm>
1084 </listitem>
1085 </varlistentry>
1086
1087 <varlistentry id="rmid">
1088 <term><command>rmid</command></term>
1089 <listitem>
1090 <para>starts the activation system daemon.</para>
1091 <indexterm zone="openjdk rmid">
1092 <primary sortas="b-rmid">rmid</primary>
1093 </indexterm>
1094 </listitem>
1095 </varlistentry>
1096
1097 <varlistentry id="rmiregistry">
1098 <term><command>rmiregistry</command></term>
1099 <listitem>
1100 <para>creates and starts a remote object registry on the specified
1101 port on the current host.</para>
1102 <indexterm zone="openjdk rmiregistry">
1103 <primary sortas="b-rmiregistry">rmiregistry</primary>
1104 </indexterm>
1105 </listitem>
1106 </varlistentry>
1107
1108 <varlistentry id="schemagen">
1109 <term><command>schemagen</command></term>
1110 <listitem>
1111 <para>is a Java XML binding schema generator.</para>
1112 <indexterm zone="openjdk schemagen">
1113 <primary sortas="b-schemagen">schemagen</primary>
1114 </indexterm>
1115 </listitem>
1116 </varlistentry>
1117
1118 <varlistentry id="serialver">
1119 <term><command>serialver</command></term>
1120 <listitem>
1121 <para>returns the serialVersionUID for one or more classes in a
1122 form suitable for copying into an evolving class.</para>
1123 <indexterm zone="openjdk serialver">
1124 <primary sortas="b-serialver">serialver</primary>
1125 </indexterm>
1126 </listitem>
1127 </varlistentry>
1128
1129 <varlistentry id="servertool">
1130 <term><command>servertool</command></term>
1131 <listitem>
1132 <para>provides an ease-of-use interface for application programmers
1133 to register, unregister, startup and shutdown a server.</para>
1134 <indexterm zone="openjdk servertool">
1135 <primary sortas="b-servertool">servertool</primary>
1136 </indexterm>
1137 </listitem>
1138 </varlistentry>
1139
1140 <varlistentry id="tnameserv">
1141 <term><command>tnameserv</command></term>
1142 <listitem>
1143 <para>starts the Java IDL name server.</para>
1144 <indexterm zone="openjdk tnameserv">
1145 <primary sortas="b-tnameserv">tnameserv</primary>
1146 </indexterm>
1147 </listitem>
1148 </varlistentry>
1149
1150 <varlistentry id="unpack200">
1151 <term><command>unpack200</command></term>
1152 <listitem>
1153 <para>is a native implementation that transforms a packed file
1154 produced by <application>pack200</application> into a jar
1155 file.</para>
1156 <indexterm zone="openjdk unpack200">
1157 <primary sortas="b-unpack200">unpack200</primary>
1158 </indexterm>
1159 </listitem>
1160 </varlistentry>
1161
1162 <varlistentry id="wsgen">
1163 <term><command>wsgen</command></term>
1164 <listitem>
1165 <para>generates JAX-WS portable artifacts used in JAX-WS
1166 web services.</para>
1167 <indexterm zone="openjdk wsgen">
1168 <primary sortas="b-wsgen">wsgen</primary>
1169 </indexterm>
1170 </listitem>
1171 </varlistentry>
1172
1173 <varlistentry id="wsimport">
1174 <term><command>wsimport</command></term>
1175 <listitem>
1176 <para>generates JAX-WS portable artifacts.</para>
1177 <indexterm zone="openjdk wsimport">
1178 <primary sortas="b-wsimport">wsimport</primary>
1179 </indexterm>
1180 </listitem>
1181 </varlistentry>
1182
1183 <varlistentry id="xjc">
1184 <term><command>xjc</command></term>
1185 <listitem>
1186 <para>is a Java XML binding compiler.</para>
1187 <indexterm zone="openjdk xjc">
1188 <primary sortas="b-xjc">xjc</primary>
1189 </indexterm>
1190 </listitem>
1191 </varlistentry>
1192
1193 </variablelist>
1194
1195 </sect2>
1196
1197</sect1>
Note: See TracBrowser for help on using the repository browser.