source: general/prog/openjdk.xml@ 8b9034a

10.0 10.1 11.0 11.1 11.2 11.3 12.0 12.1 7.10 7.4 7.5 7.6 7.6-blfs 7.6-systemd 7.7 7.8 7.9 8.0 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind gnome kde5-13430 kde5-14269 kde5-14686 kea ken/TL2024 ken/inkscape-core-mods ken/tuningfonts krejzi/svn lazarus lxqt nosym perl-modules plabs/newcss plabs/python-mods python3.11 qt5new rahul/power-profiles-daemon renodr/vulkan-addition systemd-11177 systemd-13485 trunk upgradedb xry111/intltool xry111/llvm18 xry111/soup3 xry111/test-20220226 xry111/xf86-video-removal
Last change on this file since 8b9034a was 8b9034a, checked in by Bruce Dubbs <bdubbs@…>, 11 years ago

Add instructions to create caceerts for Open JDK.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@11820 af4574ff-66df-0310-9fd7-8a98e5e911e0
  • Property mode set to 100644
File size: 42.9 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY anduin-download "http://anduin.linuxfromscratch.org/files/BLFS/OpenJDK-&openjdk-version;">
8 <!ENTITY icedtea-download "http://icedtea.classpath.org/download/source/icedtea-&icedtea-version;.tar.gz">
9
10 <!ENTITY icedtea-md5sum "cbdefd7d385c61a457924bfbee87e643">
11 <!ENTITY icedtea-size "4.6 MB">
12
13 <!ENTITY corba-download "&anduin-download;/corba.tar.gz">
14 <!ENTITY corba-md5sum "b4a1f9a5553f92d285bff3f8076e61dd">
15 <!ENTITY corba-size "1.4 MB">
16
17 <!ENTITY hotspot-download "&anduin-download;/hotspot.tar.gz">
18 <!ENTITY hotspot-md5sum "42bfcd67d4649b3eb30649a010b9ac0a">
19 <!ENTITY hotspot-size "9.2 MB">
20
21 <!ENTITY jaxp-download "&anduin-download;/jaxp.tar.gz">
22 <!ENTITY jaxp-md5sum "38834edb77ed2fd8e8828100deb6e943">
23 <!ENTITY jaxp-size "3.7 MB">
24
25 <!ENTITY jaxws-download "&anduin-download;/jaxws.tar.gz">
26 <!ENTITY jaxws-md5sum "1426837479d61010728655315456a3d5">
27 <!ENTITY jaxws-size "2.7 MB">
28
29 <!ENTITY jdk-download "&anduin-download;/jdk.tar.gz">
30 <!ENTITY jdk-md5sum "9e71e7ad6ace7ce629e26088950ec32d">
31 <!ENTITY jdk-size "44 MB">
32
33 <!ENTITY langtools-download "&anduin-download;/langtools.tar.gz">
34 <!ENTITY langtools-md5sum "86f728535c6edb7b7ea2d567f2fcff87">
35 <!ENTITY langtools-size "2.3 MB">
36
37 <!ENTITY openjdk-download "&anduin-download;/openjdk.tar.gz">
38 <!ENTITY openjdk-md5sum "165e07ce440848e437f74851f09cce81">
39 <!ENTITY openjdk-size "136 KB">
40
41 <!ENTITY rhino-download "ftp://ftp.mozilla.org/pub/mozilla.org/js/rhino1_7R3.zip">
42 <!ENTITY rhino-md5sum "99d94103662a8d0b571e247a77432ac5">
43 <!ENTITY rhino-size "4.5 MB">
44
45 <!ENTITY openjdk-buildsize "8.1-9.2 GB">
46 <!ENTITY openjdk-time "47 SBU (an additional 156 SBU for testsuite)">
47]>
48
49<sect1 id="openjdk" xreflabel="OpenJDK-&openjdk-version;/IcedTea-&icedtea-version;">
50 <?dbhtml filename="openjdk.html" ?>
51
52 <sect1info>
53 <othername>$LastChangedBy$</othername>
54 <date>$Date$</date>
55 </sect1info>
56
57 <title>OpenJDK-&openjdk-version;/IcedTea-&icedtea-version;</title>
58
59 <indexterm zone="openjdk">
60 <primary sortas="a-OpenJDK">OpenJDK</primary>
61 </indexterm>
62
63 <sect2 role="package">
64 <title>Introduction to OpenJDK and IcedTea</title>
65
66 <para><application>IcedTea</application> provides a build harness for the
67 <application>OpenJDK</application> package, Oracle's open-sourced
68 <application>Java</application> development environment. In order to
69 provide a completely free runtime environment, similar to Oracle's closed
70 distribution, the <application>IcedTea</application> build harness also
71 provides free, and arguably better versions of parts of the JDK which
72 have not been open-sourced to date. <application>OpenJDK</application> is
73 useful for developing <application>Java</application> programs and provides
74 a complete runtime environment to run <application>Java</application>
75 programs.</para>
76
77 &lfs74_checked;
78
79 <note><para>The browser plugin and webstart implementation have been split
80 off into a separate project. To provide a complete implementation, you will
81 need to later install <xref linkend="icedtea-web"/>.</para></note>
82
83 <para>OpenJDK is GPL'd code, however, it should be explained that there has
84 been a special exception made for non-free projects to use these classes in
85 their proprietary products. In similar fashion to the LGPL, which
86 allows non-free programs to link to libraries provided by free software,
87 the <ulink url="http://openjdk.java.net/legal/gplv2+ce.html">GNU
88 General Public License, version 2, with the Classpath Exception</ulink>
89 allows third party programs to use classes provided by free software
90 without the requirement that the third party software also be free. As with
91 the LGPL, any modifications made to the free software portions of a
92 third party application, must also be made freely available.</para>
93
94 <note>
95 <para>The IcedTea build environment includes a very thorough, open source
96 test suite titled <application>JTreg</application>.
97 <application>JTreg</application> is intended to test the just built JDK
98 for reasonable compatibility with the closed Oracle JDK. However, in
99 order for an independent implementation to claim compatibility, including
100 the Oracle sponsored <application>OpenJDK</application> project, it must
101 pass a closed <application>JCK/TCK</application> test suite. No claims
102 of compatibility, even partial compatibility, may be made without
103 passing an approved test suite.</para>
104
105 <para>Oracle does provide free community access, on a case by case basis,
106 to a closed toolkit to ensure 100% compatibility with its proprietary JDK.
107 The binary version provided here has not been tested against the
108 <ulink url="http://openjdk.java.net/groups/conformance/JckAccess/jck-access.html">
109 TCK</ulink>. Any version that is built using the instructions given,
110 cannot claim to be compatible with the proprietary JDK, without the user
111 applying for, and completing the compatibility tests themselves.</para>
112
113 <para>With that in mind, the binaries produced using this build method are
114 regularly tested against the TCK by the members listed on the site above.
115 In addition to the community license above, an educational, non-commercial
116 license for the TCK can be obtained from
117 <ulink url="http://www.oracle.com/technetwork/java/index-137188.html">
118 here</ulink>.</para>
119 </note>
120
121 <bridgehead renderas="sect3">Source Package Information</bridgehead>
122 <itemizedlist spacing="compact">
123 <listitem>
124 <para>IcedTea Source Package
125 <simplelist>
126 <member>Download: <ulink url="&icedtea-download;"/></member>
127 <member>Download MD5 sum: &icedtea-md5sum;</member>
128 <member>Download Size: &icedtea-size;</member>
129 </simplelist>
130 </para>
131 </listitem>
132 </itemizedlist>
133
134 <para>The following may be downladed separately or be done as a
135 part of the <userinput>make</userinput> process. For convenience
136 the BLFS editors have made the files available in an LFS website.
137 The files are not distributed with versions, but extracted from
138 the OpenJDK version control system at specified (tagged) points.</para>
139
140 <itemizedlist spacing="compact">
141 <listitem>
142 <para>Corba Source
143 <simplelist>
144 <member>Download: <ulink url="&corba-download;"/></member>
145 <member>Download MD5 sum: &corba-md5sum;</member>
146 <member>Download Size: &corba-size;</member>
147 </simplelist>
148 </para>
149 </listitem>
150 <listitem>
151 <para>Hotspot Source
152 <simplelist>
153 <member>Download: <ulink url="&hotspot-download;"/></member>
154 <member>Download MD5 sum: &hotspot-md5sum;</member>
155 <member>Download Size: &hotspot-size;</member>
156 </simplelist>
157 </para>
158 </listitem>
159 <listitem>
160 <para>IcedTea Build Source
161 <simplelist>
162 <member>Download: <ulink url="&openjdk-download;"/></member>
163 <member>Download MD5 sum: &openjdk-md5sum;</member>
164 <member>Download Size: &openjdk-size;</member>
165 </simplelist>
166 </para>
167 </listitem>
168 <listitem>
169 <para>JAXP Source
170 <simplelist>
171 <member>Download: <ulink url="&jaxp-download;"/></member>
172 <member>Download MD5 sum: &jaxp-md5sum;</member>
173 <member>Download Size: &jaxp-size;</member>
174 </simplelist>
175 </para>
176 </listitem>
177 <listitem>
178 <para>JAXWS Source
179 <simplelist>
180 <member>Download: <ulink url="&jaxws-download;"/></member>
181 <member>Download MD5 sum: &jaxws-md5sum;</member>
182 <member>Download Size: &jaxws-size;</member>
183 </simplelist>
184 </para>
185 </listitem>
186 <listitem>
187 <para>Langtools Source
188 <simplelist>
189 <member>Download: <ulink url="&langtools-download;"/></member>
190 <member>Download MD5 sum: &langtools-md5sum;</member>
191 <member>Download Size: &langtools-size;</member>
192 </simplelist>
193 </para>
194 </listitem>
195 <listitem>
196 <para>OpenJDK Source
197 <simplelist>
198 <member>Download: <ulink url="&jdk-download;"/></member>
199 <member>Download MD5 sum: &jdk-md5sum;</member>
200 <member>Download Size: &jdk-size;</member>
201 </simplelist>
202 </para>
203 </listitem>
204 <listitem>
205 <para>Estimated disk space required: &openjdk-buildsize;</para>
206 </listitem>
207 <listitem>
208 <para>Estimated build time: &openjdk-time;</para>
209 </listitem>
210 </itemizedlist>
211
212 <bridgehead renderas="sect3">Additional Downloads</bridgehead>
213
214 <bridgehead renderas="sect4">Required Patches</bridgehead>
215 <itemizedlist spacing='compact'>
216 <listitem>
217 <para><ulink
218 url="&patch-root;/icedtea-&icedtea-version;-add_cacerts-2.patch"/></para>
219 </listitem>
220 <listitem>
221 <para><ulink
222 url="&patch-root;/icedtea-&icedtea-version;-fixed_paths-1.patch"/></para>
223 </listitem>
224 <listitem>
225 <para><ulink
226 url="&patch-root;/icedtea-&icedtea-version;-fix_tests-1.patch"/></para>
227 </listitem>
228 </itemizedlist>
229
230 <bridgehead renderas="sect4">Required JAR</bridgehead>
231 <itemizedlist spacing='compact'>
232 <listitem>
233 <para>Rhino Java Script
234 <simplelist>
235 <member>Download: <ulink url="&rhino-download;"/></member>
236 <member>Download MD5 sum: &rhino-md5sum;</member>
237 <member>Download Size: &rhino-size;</member>
238 </simplelist>
239 </para>
240 </listitem>
241 </itemizedlist>
242 <bridgehead renderas="sect3">OpenJDK Dependencies</bridgehead>
243
244 <bridgehead renderas="sect4">Required Dependencies</bridgehead>
245 <para role="required">
246 An existing binary ( <xref linkend="java"/> or an earlier built
247 version of this package,
248 <xref linkend="apache-ant"/>,
249 <xref linkend="cacerts"/>,
250 <xref linkend="cpio"/>,
251 <xref linkend="cups"/>,
252 <xref linkend="gtk3"/>,
253 <xref linkend="giflib"/>,
254 <xref linkend="nspr"/>,
255 <xref linkend="pulseaudio"/>,
256 <xref linkend="unzip"/>,
257 <xref linkend="wget"/>,
258 <xref linkend="which"/>,
259 <xref linkend="xorg7-lib"/>, and
260 <xref linkend="zip"/>
261 </para>
262
263 <para condition="html" role="usernotes">User Notes:
264 <ulink url="&blfs-wiki;/openjdk"/></para>
265
266 </sect2>
267
268 <sect2 role="installation">
269 <title>Installation of OpenJDK</title>
270
271 <note><para>The source build of OpenJDK requires <xref
272 linkend="apache-ant"/>. You'll need to build that first to satisfy the
273 circular dependency, and return to this section to continue building
274 OpenJDK.</para></note>
275
276 <para>Unlike other packages in BLFS, the <application>OpenJDK</application>
277 source packages are distributed in multiple downloads. Since the IcedTea
278 build harness will be used to build <application>OpenJDK</application>,
279 begin by extracting the IcedTea package and changing into the
280 extracted directory.</para>
281
282 <para>The IcedTea <application>OpenJDK</application> distribution requires
283 that <filename>js.jar</filename> (from the Rhino package) be in place in
284 order to provide a java-script implementation for the free JDK. If you have
285 not installed the js.jar file in another way, do so with the following
286 commands as the <systemitem class="username">root</systemitem> user:</para>
287
288<screen role="root"><userinput>unzip ../rhino1_7R3.zip &amp;&amp;
289install -v -d -m755 /usr/share/java &amp;&amp;
290install -v -m755 rhino1_7R3/*.jar /usr/share/java</userinput></screen>
291
292 <para>As mentioned previously, <application>OpenJDK</application> is
293 composed of several individual projects of the proprietary
294 <application>JDK</application> that have been relicensed under an open
295 source license. If you have already downoaded all of the individual
296 components, place them into the source tree with the following commands:</para>
297
298<screen><userinput>cp -v ../corba.tar.gz . &amp;&amp;
299cp -v ../hotspot.tar.gz . &amp;&amp;
300cp -v ../jaxp.tar.gz . &amp;&amp;
301cp -v ../jaxws.tar.gz . &amp;&amp;
302cp -v ../jdk.tar.gz . &amp;&amp;
303cp -v ../langtools.tar.gz . &amp;&amp;
304cp -v ../openjdk.tar.gz .</userinput></screen>
305
306 <para>Apply a patch to generate a valid cacerts file using the system CA
307 certificates:</para>
308
309<screen><userinput>patch -Np1 -i ../icedtea-&icedtea-version;-add_cacerts-2.patch</userinput></screen>
310
311 <para>Apply a patch to replace fixed paths with ones appropriate for
312 BLFS:</para>
313
314<screen><userinput>patch -Np1 -i ../icedtea-&icedtea-version;-fixed_paths-1.patch</userinput></screen>
315
316 <para>Apply a patch to exclude known broken tests from the test suite:</para>
317
318<screen><userinput>patch -Np1 -i ../icedtea-&icedtea-version;-fix_tests-1.patch</userinput></screen>
319
320
321 <para>Configure and build the package with the following commands
322 (--with-pkgversion and --with-version-suffix values can be modified to fit
323 user preferences):</para>
324
325<screen><userinput>unset JAVA_HOME &amp;&amp;
326./autogen.sh &amp;&amp;
327./configure --with-jdk-home=/opt/OpenJDK-&openjdk-version;-bin \
328 --enable-nss \
329 --with-version-suffix=blfs \
330 --enable-pulse-java &amp;&amp;
331make</userinput></screen>
332
333 <note><para>If you have not installed the tarballs specified above,
334 they will be automatically downloaded here.</para></note>
335
336 <para>To test the results, issue: <command>make jtregcheck</command>. The
337 included version of <application>jtreg</application> is old, and the test
338 suite is also very dependent on the host system and the environment that it
339 is run in. You should expect to see anywhere between 40 and 100 failures in
340 jdk with up to 10 errors in the tests themselves. The majority of the
341 6000+ tests should pass. The reason for the greatly varying results is due
342 to how stringent the testing environment must be. Varying architectures,
343 different versions of dependent libraries, unexpected X Window environment
344 and window managers, the CA certificates used to generate the
345 <filename>cacerts</filename> file, and even any user input or power
346 management or screen saver interruptions during the testing can lead to
347 various failures. While the known broken tests have been removed, with the
348 fix_tests patch above, the graphics tests failures cannot be pre-determined
349 (short of removing them all). The best bet for the minimal number of
350 failures is to run the test suite in a framebuffer on a different screen
351 (Xvfb). Even still, disk I/O can cause failures.</para>
352
353<screen><userinput>export DISPLAY=:20 &amp;&amp;
354Xvfb :20 -screen 0 1x1x24 -ac&amp;
355echo $!> Xvfb.pid &amp;&amp;
356make -k jtregcheck &amp;&amp;
357kill -9 `cat Xvfb.pid` &amp;&amp;
358unset DISPLAY &amp;&amp;
359rm -f Xvfb.pid</userinput></screen>
360
361 <para>Install the package with the following commands as the
362 <systemitem class="username">root</systemitem> user:</para>
363
364<screen role="root"><userinput>chmod 0644 openjdk.build/j2sdk-image/lib/sa-jdi.jar &amp;&amp;
365cp -R openjdk.build/j2sdk-image /opt/OpenJDK-&openjdk-version; &amp;&amp;
366chown -R root:root /opt/OpenJDK-&openjdk-version;</userinput></screen>
367
368 </sect2>
369
370 <sect2 role="commands">
371 <title>Command Explanations</title>
372
373 <para><command>./autogen.sh</command>: This command forces rebuilding of
374 auto-generated files to account for new options added to
375 <filename>configure</filename>.</para>
376
377 <para><parameter>--with-jdk-home</parameter>: This switch provides the
378 location of the temporary <application>JDK</application>.</para>
379
380 <para><parameter>--with-pkgversion</parameter>: This switch can be used
381 to modify the version string in addition to "IcedTea".</para>
382
383 <para><parameter>--with-version-suffix</parameter>: This switch appends
384 the given text to the JDK version string.</para>
385
386 <para><parameter>--enable-pulse-java</parameter>: This switch enables
387 building of the pulseaudio libraries (needed to provide a complete
388 implementation that is reasonably compatible with the proprietary
389 JDK).</para>
390
391 <para><command>chmod -v 0644 ...sa-jdi.jar</command>: Fix permissions
392 in a generated file so all users can access it.</para>
393
394 </sect2>
395
396 <sect2 role="configuration" id="openjdk-config" xreflabel="Configuring OpenJDK" >
397 <title>Configuring OpenJDK</title>
398
399 <sect3>
400 <title>Configuration Information</title>
401
402 <para>There are now two <application>OpenJDK</application> SDKs
403 installed in <filename>/opt</filename>. You should decide on which one
404 you would like to use as the default. For example if you decide to use
405 the precompiled <application>OpenJDK</application>, do the following as
406 the <systemitem class="username">root</systemitem> user:</para>
407
408<screen role="root"><userinput>ln -v -nsf OpenJDK-&openjdk-version;-bin /opt/jdk</userinput></screen>
409
410 <para>The information below assumes your system is set up using the
411 instructions found in <quote><xref
412 linkend="postlfs-config-profile"/></quote>. You may need to extract the
413 relevant information below and incorporate it into your system's startup
414 files if your system is set up differently.</para>
415
416 <para>Add the following <filename>openjdk.sh</filename> shell startup
417 file to the <filename>/etc/profile.d</filename> directory with the
418 following commands as the <systemitem class="username">root</systemitem>
419 user:</para>
420
421<screen role="root"><userinput>cat &gt; /etc/profile.d/openjdk.sh &lt;&lt; "EOF"
422<literal># Begin /etc/profile.d/openjdk.sh
423
424# Set JAVA_HOME directory
425JAVA_HOME=/opt/jdk
426
427# Adjust PATH
428pathappend $JAVA_HOME/bin PATH
429
430# Auto Java CLASSPATH
431# Copy jar files to, or create symlinks in this directory
432
433AUTO_CLASSPATH_DIR=/usr/share/java
434
435pathprepend . CLASSPATH
436
437for dir in `find ${AUTO_CLASSPATH_DIR} -type d 2>/dev/null`; do
438 pathappend $dir CLASSPATH
439done
440
441for jar in `find ${AUTO_CLASSPATH_DIR} -name "*.jar" 2>/dev/null`; do
442 pathappend $jar CLASSPATH
443done
444
445export JAVA_HOME CLASSPATH
446unset AUTO_CLASSPATH_DIR dir jar
447
448# End /etc/profile.d/openjdk.sh</literal>
449EOF</userinput></screen>
450
451 <para>Finally, add the man pages to <application>man_db</application>'s
452 configuration. As the <systemitem class="username">root</systemitem>
453 user:</para>
454
455<screen><userinput>cat &gt;&gt; /etc/man_db.conf &lt;&lt; "EOF" &amp;&amp;
456<literal>MANDATORY_MANPATH /opt/jdk/man
457MANPATH_MAP /opt/jdk/bin /opt/jdk/man
458MANDB_MAP /opt/jdk/man /var/cache/man/jdk</literal>
459EOF
460
461mandb -c /opt/jdk/man</userinput></screen>
462
463 </sect3>
464
465 <sect3 id='ojdk-certs'>
466 <title>Install or update the JRE Certificate Authority Certificates (cacerts) file</title>
467
468 <para>Use the following procedure to check if the cacerts file was
469 successfully installed during the OpenJDK installation or if the <xref
470 linkend="cacerts"/> have been updated, the following instructions will
471 generate a new JRE <filename>cacerts</filename> file. First, check if the
472 <filename>cacerts</filename> have been successfully installed: </para>
473
474<screen role="root"><userinput>cd /opt/jdk
475bin/keytool -list -keystore jre/lib/security/cacerts</userinput></screen>
476
477 <para>At the prompt "Enter keystore password:", press the "Enter" key if
478 there is no keystore password defined. If the
479 <filename>cacerts</filename> was installed correctly, you will see a
480 list of the certificates with related information for each one. If not,
481 you need to manually install them. First, generate the
482 <command>mkcacerts</command> script as the
483 <systemitem class="username">root</systemitem> user:</para>
484
485<screen role="root"><userinput>cat &gt; /opt/jdk/bin/mkcacerts &lt;&lt; "EOF"
486<literal>#!/bin/sh
487# Simple script to extract x509 certificates and create a JRE cacerts file.
488
489function get_args()
490 {
491 if test -z "${1}" ; then
492 showhelp
493 exit 1
494 fi
495
496 while test -n "${1}" ; do
497 case "${1}" in
498 -f | --cafile)
499 check_arg $1 $2
500 CAFILE="${2}"
501 shift 2
502 ;;
503 -d | --cadir)
504 check_arg $1 $2
505 CADIR="${2}"
506 shift 2
507 ;;
508 -o | --outfile)
509 check_arg $1 $2
510 OUTFILE="${2}"
511 shift 2
512 ;;
513 -k | --keytool)
514 check_arg $1 $2
515 KEYTOOL="${2}"
516 shift 2
517 ;;
518 -s | --openssl)
519 check_arg $1 $2
520 OPENSSL="${2}"
521 shift 2
522 ;;
523 -h | --help)
524 showhelp
525 exit 0
526 ;;
527 *)
528 showhelp
529 exit 1
530 ;;
531 esac
532 done
533 }
534
535function check_arg()
536 {
537 echo "${2}" | grep -v "^-" > /dev/null
538 if [ -z "$?" -o ! -n "$2" ]; then
539 echo "Error: $1 requires a valid argument."
540 exit 1
541 fi
542 }
543
544# The date binary is not reliable on 32bit systems for dates after 2038
545function mydate()
546 {
547 local y=$( echo $1 | cut -d" " -f4 )
548 local M=$( echo $1 | cut -d" " -f1 )
549 local d=$( echo $1 | cut -d" " -f2 )
550 local m
551
552 if [ ${d} -lt 10 ]; then d="0${d}"; fi
553
554 case $M in
555 Jan) m="01";;
556 Feb) m="02";;
557 Mar) m="03";;
558 Apr) m="04";;
559 May) m="05";;
560 Jun) m="06";;
561 Jul) m="07";;
562 Aug) m="08";;
563 Sep) m="09";;
564 Oct) m="10";;
565 Nov) m="11";;
566 Dec) m="12";;
567 esac
568
569 certdate="${y}${m}${d}"
570 }
571
572function showhelp()
573 {
574 echo "`basename ${0}` creates a valid cacerts file for use with IcedTea."
575 echo ""
576 echo " -f --cafile The path to a file containing PEM formated CA"
577 echo " certificates. May not be used with -d/--cadir."
578 echo " -d --cadir The path to a diectory of PEM formatted CA"
579 echo " certificates. May not be used with -f/--cafile."
580 echo " -o --outfile The path to the output file."
581 echo ""
582 echo " -k --keytool The path to the java keytool utility."
583 echo ""
584 echo " -s --openssl The path to the openssl utility."
585 echo ""
586 echo " -h --help Show this help message and exit."
587 echo ""
588 echo ""
589 }
590
591# Initialize empty variables so that the shell does not polute the script
592CAFILE=""
593CADIR=""
594OUTFILE=""
595OPENSSL=""
596KEYTOOL=""
597certdate=""
598date=""
599today=$( date +%Y%m%d )
600
601# Process command line arguments
602get_args ${@}
603
604# Handle common errors
605if test "${CAFILE}x" == "x" -a "${CADIR}x" == "x" ; then
606 echo "ERROR! You must provide an x509 certificate store!"
607 echo "\'$(basename ${0}) --help\' for more info."
608 echo ""
609 exit 1
610fi
611
612if test "${CAFILE}x" != "x" -a "${CADIR}x" != "x" ; then
613 echo "ERROR! You cannot provide two x509 certificate stores!"
614 echo "\'$(basename ${0}) --help\' for more info."
615 echo ""
616 exit 1
617fi
618
619if test "${KEYTOOL}x" == "x" ; then
620 echo "ERROR! You must provide a valid keytool program!"
621 echo "\'$(basename ${0}) --help\' for more info."
622 echo ""
623 exit 1
624fi
625
626if test "${OPENSSL}x" == "x" ; then
627 echo "ERROR! You must provide a valid path to openssl!"
628 echo "\'$(basename ${0}) --help\' for more info."
629 echo ""
630 exit 1
631fi
632
633if test "${OUTFILE}x" == "x" ; then
634 echo "ERROR! You must provide a valid output file!"
635 echo "\'$(basename ${0}) --help\' for more info."
636 echo ""
637 exit 1
638fi
639
640# Get on with the work
641
642# If using a CAFILE, split it into individual files in a temp directory
643if test "${CAFILE}x" != "x" ; then
644 TEMPDIR=`mktemp -d`
645 CADIR="${TEMPDIR}"
646
647 # Get a list of staring lines for each cert
648 CERTLIST=`grep -n "^-----BEGIN" "${CAFILE}" | cut -d ":" -f 1`
649
650 # Get a list of ending lines for each cert
651 ENDCERTLIST=`grep -n "^-----END" "${CAFILE}" | cut -d ":" -f 1`
652
653 # Start a loop
654 for certbegin in `echo "${CERTLIST}"` ; do
655 for certend in `echo "${ENDCERTLIST}"` ; do
656 if test "${certend}" -gt "${certbegin}"; then
657 break
658 fi
659 done
660 sed -n "${certbegin},${certend}p" "${CAFILE}" > "${CADIR}/${certbegin}.pem"
661 keyhash=`${OPENSSL} x509 -noout -in "${CADIR}/${certbegin}.pem" -hash`
662 echo "Generated PEM file with hash: ${keyhash}."
663 done
664fi
665
666# Write the output file
667for cert in `find "${CADIR}" -type f -name "*.pem" -o -name "*.crt"`
668do
669
670 # Make sure the certificate date is valid...
671 date=$( ${OPENSSL} x509 -enddate -in "${cert}" -noout | sed 's/^notAfter=//' )
672 mydate "${date}"
673 if test "${certdate}" -lt "${today}" ; then
674 echo "${cert} expired on ${certdate}! Skipping..."
675 unset date certdate
676 continue
677 fi
678 unset date certdate
679 ls "${cert}"
680 tempfile=`mktemp`
681 certbegin=`grep -n "^-----BEGIN" "${cert}" | cut -d ":" -f 1`
682 certend=`grep -n "^-----END" "${cert}" | cut -d ":" -f 1`
683 sed -n "${certbegin},${certend}p" "${cert}" > "${tempfile}"
684 echo yes | env LC_ALL=C "${KEYTOOL}" -import -alias `basename "${cert}"` -keystore \
685 "${OUTFILE}" -storepass 'changeit' -file "${tempfile}"
686 rm "${tempfile}"
687done
688
689if test "${TEMPDIR}x" != "x" ; then
690 rm -rf "${TEMPDIR}"
691fi
692exit 0</literal>
693EOF
694
695chmod -c 0755 /opt/jdk/bin/mkcacerts</userinput></screen>
696
697 <note>
698 <para>
699 Doing a very large copy/paste directly to a terminal may result in a
700 corrupted file. Copying to an editor may overcome this issue.
701 </para>
702 </note>
703
704 <para>After making a backup of the
705 <filename>/opt/jdk/jre/lib/security/cacerts</filename> file, if there is
706 any. To create a new one, as the
707 <systemitem class="username">root</systemitem> user:</para>
708
709<screen><userinput>/opt/jdk/bin/mkcacerts -d "/etc/ssl/certs/" -k "/opt/jdk/bin/keytool" \
710 -s "/usr/bin/openssl" -o "/opt/jdk/jre/lib/security/cacerts"</userinput></screen>
711
712 </sect3>
713
714 </sect2>
715
716 <sect2 role="content">
717 <title>Contents</title>
718
719 <segmentedlist>
720 <segtitle>Installed Programs</segtitle>
721 <segtitle>Installed Libraries</segtitle>
722 <segtitle>Installed Directory</segtitle>
723
724 <seglistitem>
725 <seg>appletviewer, apt, extcheck, idlj, jar,
726 jarsigner, java, javac, javadoc, javah, javap, java-rmi.cgi,
727 jcmd, jconsole, jdb, jhat, jinfo, jmap, jps,
728 jrunscript, jsadebugd, jstack, jstat, jstatd, keytool,
729 native2ascii, orbd, pack200, policytool, rmic, rmid, rmiregistry,
730 schemagen, serialver, servertool, tnameserv, unpack200,
731 wsgen, wsimport, and xjc</seg>
732 <seg>/opt/OpenJDK-&openjdk-version;/lib/*, and
733 /opt/OpenJDK-&openjdk-version;/jre/lib/*</seg>
734 <seg>/opt/OpenJDK-&openjdk-version;</seg>
735 </seglistitem>
736 </segmentedlist>
737
738 <variablelist>
739 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
740 <?dbfo list-presentation="list"?>
741 <?dbhtml list-presentation="table"?>
742
743 <varlistentry id="appletviewer">
744 <term><command>appletviewer</command></term>
745 <listitem>
746 <para>allows you to run applets outside of a web browser.</para>
747 <indexterm zone="openjdk appletviewer">
748 <primary sortas="b-appletviewer">appletviewer</primary>
749 </indexterm>
750 </listitem>
751 </varlistentry>
752
753 <varlistentry id="apt">
754 <term><command>apt</command></term>
755 <listitem>
756 <para>is an annotation processing tool.</para>
757 <indexterm zone="openjdk apt">
758 <primary sortas="b-apt">apt</primary>
759 </indexterm>
760 </listitem>
761 </varlistentry>
762
763 <varlistentry id="extcheck">
764 <term><command>extcheck</command></term>
765 <listitem>
766 <para>checks a specified jar file for title and version conflicts
767 with any extensions installed in the
768 <application>OpenJDK</application> software.</para>
769 <indexterm zone="openjdk extcheck">
770 <primary sortas="b-extcheck">extcheck</primary>
771 </indexterm>
772 </listitem>
773 </varlistentry>
774
775 <varlistentry id="idlj">
776 <term><command>idlj</command></term>
777 <listitem>
778 <para>generates Java bindings from a given IDL file.</para>
779 <indexterm zone="openjdk idlj">
780 <primary sortas="b-idlj">idlj</primary>
781 </indexterm>
782 </listitem>
783 </varlistentry>
784
785 <varlistentry id="jar">
786 <term><command>jar</command></term>
787 <listitem>
788 <para>combines multiple files into a single jar archive.</para>
789 <indexterm zone="openjdk jar">
790 <primary sortas="b-jar">jar</primary>
791 </indexterm>
792 </listitem>
793 </varlistentry>
794
795 <varlistentry id="jarsigner">
796 <term><command>jarsigner</command></term>
797 <listitem>
798 <para>signs jar files and verifies the signatures and integrity
799 of a signed jar file.</para>
800 <indexterm zone="openjdk jarsigner">
801 <primary sortas="b-jarsigner">jarsigner</primary>
802 </indexterm>
803 </listitem>
804 </varlistentry>
805
806 <varlistentry id="java-prog">
807 <term><command>java</command></term>
808 <listitem>
809 <para>launches a Java application by starting a Java runtime
810 environment, loading a specified class and invoking its main
811 method.</para>
812 <indexterm zone="openjdk java-prog">
813 <primary sortas="b-java-prog">java</primary>
814 </indexterm>
815 </listitem>
816 </varlistentry>
817
818 <varlistentry id="javac">
819 <term><command>javac</command></term>
820 <listitem>
821 <para>reads class and interface definitions, written in the
822 Java programming language, and compiles them into bytecode
823 class files.</para>
824 <indexterm zone="openjdk javac">
825 <primary sortas="b-javac">javac</primary>
826 </indexterm>
827 </listitem>
828 </varlistentry>
829
830 <varlistentry id="javadoc">
831 <term><command>javadoc</command></term>
832 <listitem>
833 <para>parses the declarations and documentation comments in a
834 set of Java source files and produces a corresponding set of
835 HTML pages describing the classes, interfaces,constructors,
836 methods, and fields.</para>
837 <indexterm zone="openjdk javadoc">
838 <primary sortas="b-javadoc">javadoc</primary>
839 </indexterm>
840 </listitem>
841 </varlistentry>
842
843 <varlistentry id="javah">
844 <term><command>javah</command></term>
845 <listitem>
846 <para>generates C header and source files
847 that are needed to implement native methods.</para>
848 <indexterm zone="openjdk javah">
849 <primary sortas="b-javah">javah</primary>
850 </indexterm>
851 </listitem>
852 </varlistentry>
853
854 <varlistentry id="javap">
855 <term><command>javap</command></term>
856 <listitem>
857 <para>disassembles a Java class file.</para>
858 <indexterm zone="openjdk javap">
859 <primary sortas="b-javap">javap</primary>
860 </indexterm>
861 </listitem>
862 </varlistentry>
863
864 <varlistentry id="java-rmi.cgi">
865 <term><command>java-rmi.cgi</command></term>
866 <listitem>
867 <para>is the Java RMI client.</para>
868 <indexterm zone="openjdk java-rmi.cgi">
869 <primary sortas="b-java-rmi.cgi">java-rmi.cgi</primary>
870 </indexterm>
871 </listitem>
872 </varlistentry>
873
874 <varlistentry id="jcmd">
875 <term><command>jcmd</command></term>
876 <listitem>
877 <para>is a utility to send diagnostic command requests to a running
878 Java Virtual Machine.</para>
879 <indexterm zone="openjdk jcmd">
880 <primary sortas="b-jcmd">jcmd</primary>
881 </indexterm>
882 </listitem>
883 </varlistentry>
884
885 <varlistentry id="jconsole">
886 <term><command>jconsole</command></term>
887 <listitem>
888 <para>is a graphical console tool to monitor and manage both
889 local and remote Java applications and virtual machines.</para>
890 <indexterm zone="openjdk jconsole">
891 <primary sortas="b-jconsole">jconsole</primary>
892 </indexterm>
893 </listitem>
894 </varlistentry>
895
896 <varlistentry id="jdb">
897 <term><command>jdb</command></term>
898 <listitem>
899 <para>is a simple command-line debugger for Java classes.</para>
900 <indexterm zone="openjdk jdb">
901 <primary sortas="b-jdb">jdb</primary>
902 </indexterm>
903 </listitem>
904 </varlistentry>
905
906 <varlistentry id="jhat">
907 <term><command>jhat</command></term>
908 <listitem>
909 <para>parses a java heap dump file and allows viewing
910 in a web browser.</para>
911 <indexterm zone="openjdk jhat">
912 <primary sortas="b-jhat">jhat</primary>
913 </indexterm>
914 </listitem>
915 </varlistentry>
916
917 <varlistentry id="jinfo">
918 <term><command>jinfo</command></term>
919 <listitem>
920 <para>prints Java configuration information for a given Java
921 process, core file, or a remote debug server.</para>
922 <indexterm zone="openjdk jinfo">
923 <primary sortas="b-jinfo">jinfo</primary>
924 </indexterm>
925 </listitem>
926 </varlistentry>
927
928 <varlistentry id="jmap">
929 <term><command>jmap</command></term>
930 <listitem>
931 <para>prints shared object memory maps or heap memory details
932 of a given process, core file, or a remote debug server.</para>
933 <indexterm zone="openjdk jmap">
934 <primary sortas="b-jmap">jmap</primary>
935 </indexterm>
936 </listitem>
937 </varlistentry>
938
939 <varlistentry id="jps">
940 <term><command>jps</command></term>
941 <listitem>
942 <para>lists the instrumented JVMs on the target system.</para>
943 <indexterm zone="openjdk jps">
944 <primary sortas="b-jps">jps</primary>
945 </indexterm>
946 </listitem>
947 </varlistentry>
948
949 <varlistentry id="jrunscript">
950 <term><command>jrunscript</command></term>
951 <listitem>
952 <para>is a command line script shell.</para>
953 <indexterm zone="openjdk jrunscript">
954 <primary sortas="b-jrunscript">jrunscript</primary>
955 </indexterm>
956 </listitem>
957 </varlistentry>
958
959 <varlistentry id="jsadebugd">
960 <term><command>jsadebugd</command></term>
961 <listitem>
962 <para>attaches to a Java process or core file and acts as a
963 debug server.</para>
964 <indexterm zone="openjdk jsadebugd">
965 <primary sortas="b-jsadebugd">jsadebugd</primary>
966 </indexterm>
967 </listitem>
968 </varlistentry>
969
970 <varlistentry id="jstack">
971 <term><command>jstack</command></term>
972 <listitem>
973 <para>prints Java stack traces of Java threads for a given
974 Java process, core file, or a remote debug server.</para>
975 <indexterm zone="openjdk jstack">
976 <primary sortas="b-jstack">jstack</primary>
977 </indexterm>
978 </listitem>
979 </varlistentry>
980
981 <varlistentry id="jstat">
982 <term><command>jstat</command></term>
983 <listitem>
984 <para>displays performance statistics for an instrumented JVM.</para>
985 <indexterm zone="openjdk jstat">
986 <primary sortas="b-jstat">jstat</primary>
987 </indexterm>
988 </listitem>
989 </varlistentry>
990
991 <varlistentry id="jstatd">
992 <term><command>jstatd</command></term>
993 <listitem>
994 <para>is an RMI server application that monitors for the creation
995 and termination of instrumented JVMs.</para>
996 <indexterm zone="openjdk jstatd">
997 <primary sortas="b-jstatd">jstatd</primary>
998 </indexterm>
999 </listitem>
1000 </varlistentry>
1001
1002 <varlistentry id="keytool">
1003 <term><command>keytool</command></term>
1004 <listitem>
1005 <para>is a key and certificate management utility.</para>
1006 <indexterm zone="openjdk keytool">
1007 <primary sortas="b-keytool">keytool</primary>
1008 </indexterm>
1009 </listitem>
1010 </varlistentry>
1011
1012 <varlistentry id="native2ascii">
1013 <term><command>native2ascii</command></term>
1014 <listitem>
1015 <para> converts files that contain non-supported character encoding
1016 into files containing Latin-1 or Unicode-encoded characters.</para>
1017 <indexterm zone="openjdk native2ascii">
1018 <primary sortas="b-native2ascii">native2ascii</primary>
1019 </indexterm>
1020 </listitem>
1021 </varlistentry>
1022
1023 <varlistentry id="orbd">
1024 <term><command>orbd</command></term>
1025 <listitem>
1026 <para>is used to enable clients to transparently locate and invoke
1027 persistent objects on servers in the CORBA environment.</para>
1028 <indexterm zone="openjdk orbd">
1029 <primary sortas="b-orbd">orbd</primary>
1030 </indexterm>
1031 </listitem>
1032 </varlistentry>
1033
1034 <varlistentry id="pack200">
1035 <term><command>pack200</command></term>
1036 <listitem>
1037 <para>is a Java application that transforms a jar file into a
1038 compressed pack200 file using the Java gzip compressor.</para>
1039 <indexterm zone="openjdk pack200">
1040 <primary sortas="b-pack200">pack200</primary>
1041 </indexterm>
1042 </listitem>
1043 </varlistentry>
1044
1045 <varlistentry id="policytool">
1046 <term><command>policytool</command></term>
1047 <listitem>
1048 <para>creates and manages a policy file graphically.</para>
1049 <indexterm zone="openjdk policytool">
1050 <primary sortas="b-policytool">policytool</primary>
1051 </indexterm>
1052 </listitem>
1053 </varlistentry>
1054
1055 <varlistentry id="rmic">
1056 <term><command>rmic</command></term>
1057 <listitem>
1058 <para>generates stub and skeleton class files for remote objects
1059 from the names of compiled Java classes that contain remote
1060 object implementations.</para>
1061 <indexterm zone="openjdk rmic">
1062 <primary sortas="b-rmic">rmic</primary>
1063 </indexterm>
1064 </listitem>
1065 </varlistentry>
1066
1067 <varlistentry id="rmid">
1068 <term><command>rmid</command></term>
1069 <listitem>
1070 <para>starts the activation system daemon.</para>
1071 <indexterm zone="openjdk rmid">
1072 <primary sortas="b-rmid">rmid</primary>
1073 </indexterm>
1074 </listitem>
1075 </varlistentry>
1076
1077 <varlistentry id="rmiregistry">
1078 <term><command>rmiregistry</command></term>
1079 <listitem>
1080 <para>creates and starts a remote object registry on the specified
1081 port on the current host.</para>
1082 <indexterm zone="openjdk rmiregistry">
1083 <primary sortas="b-rmiregistry">rmiregistry</primary>
1084 </indexterm>
1085 </listitem>
1086 </varlistentry>
1087
1088 <varlistentry id="schemagen">
1089 <term><command>schemagen</command></term>
1090 <listitem>
1091 <para>is a Java XML binding schema generator.</para>
1092 <indexterm zone="openjdk schemagen">
1093 <primary sortas="b-schemagen">schemagen</primary>
1094 </indexterm>
1095 </listitem>
1096 </varlistentry>
1097
1098 <varlistentry id="serialver">
1099 <term><command>serialver</command></term>
1100 <listitem>
1101 <para>returns the serialVersionUID for one or more classes in a
1102 form suitable for copying into an evolving class.</para>
1103 <indexterm zone="openjdk serialver">
1104 <primary sortas="b-serialver">serialver</primary>
1105 </indexterm>
1106 </listitem>
1107 </varlistentry>
1108
1109 <varlistentry id="servertool">
1110 <term><command>servertool</command></term>
1111 <listitem>
1112 <para>provides an ease-of-use interface for application programmers
1113 to register, unregister, startup and shutdown a server.</para>
1114 <indexterm zone="openjdk servertool">
1115 <primary sortas="b-servertool">servertool</primary>
1116 </indexterm>
1117 </listitem>
1118 </varlistentry>
1119
1120 <varlistentry id="tnameserv">
1121 <term><command>tnameserv</command></term>
1122 <listitem>
1123 <para>starts the Java IDL name server.</para>
1124 <indexterm zone="openjdk tnameserv">
1125 <primary sortas="b-tnameserv">tnameserv</primary>
1126 </indexterm>
1127 </listitem>
1128 </varlistentry>
1129
1130 <varlistentry id="unpack200">
1131 <term><command>unpack200</command></term>
1132 <listitem>
1133 <para>is a native implementation that transforms a packed file
1134 produced by <application>pack200</application> into a jar
1135 file.</para>
1136 <indexterm zone="openjdk unpack200">
1137 <primary sortas="b-unpack200">unpack200</primary>
1138 </indexterm>
1139 </listitem>
1140 </varlistentry>
1141
1142 <varlistentry id="wsgen">
1143 <term><command>wsgen</command></term>
1144 <listitem>
1145 <para>generates JAX-WS portable artifacts used in JAX-WS
1146 web services.</para>
1147 <indexterm zone="openjdk wsgen">
1148 <primary sortas="b-wsgen">wsgen</primary>
1149 </indexterm>
1150 </listitem>
1151 </varlistentry>
1152
1153 <varlistentry id="wsimport">
1154 <term><command>wsimport</command></term>
1155 <listitem>
1156 <para>generates JAX-WS portable artifacts.</para>
1157 <indexterm zone="openjdk wsimport">
1158 <primary sortas="b-wsimport">wsimport</primary>
1159 </indexterm>
1160 </listitem>
1161 </varlistentry>
1162
1163 <varlistentry id="xjc">
1164 <term><command>xjc</command></term>
1165 <listitem>
1166 <para>is a Java XML binding compiler.</para>
1167 <indexterm zone="openjdk xjc">
1168 <primary sortas="b-xjc">xjc</primary>
1169 </indexterm>
1170 </listitem>
1171 </varlistentry>
1172
1173 </variablelist>
1174
1175 </sect2>
1176
1177</sect1>
Note: See TracBrowser for help on using the repository browser.