source: general/prog/openjdk.xml@ adf6dd9a

10.0 10.1 11.0 11.1 11.2 11.3 12.0 12.1 7.10 7.5 7.6 7.6-blfs 7.6-systemd 7.7 7.8 7.9 8.0 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind gnome kde5-13430 kde5-14269 kde5-14686 kea ken/TL2024 ken/inkscape-core-mods ken/tuningfonts krejzi/svn lazarus lxqt nosym perl-modules plabs/newcss plabs/python-mods python3.11 qt5new rahul/power-profiles-daemon renodr/vulkan-addition systemd-11177 systemd-13485 trunk upgradedb xry111/intltool xry111/llvm18 xry111/soup3 xry111/test-20220226 xry111/xf86-video-removal
Last change on this file since adf6dd9a was 7b8992b, checked in by Fernando de Oliveira <fernando@…>, 11 years ago

typo

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@11881 af4574ff-66df-0310-9fd7-8a98e5e911e0
  • Property mode set to 100644
File size: 43.6 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY anduin-download "http://anduin.linuxfromscratch.org/files/BLFS/OpenJDK-&openjdk-version;">
8 <!ENTITY icedtea-download "http://icedtea.classpath.org/download/source/icedtea-&icedtea-version;.tar.gz">
9
10 <!ENTITY icedtea-md5sum "54a739ba98b9acd439d423f2a5713aa6">
11 <!ENTITY icedtea-size "4.5 MB">
12
13 <!ENTITY corba-download "&anduin-download;/corba.tar.gz">
14 <!ENTITY corba-md5sum "ab73495be841cdc3f18f2478a3401500">
15 <!ENTITY corba-size "1.4 MB">
16
17 <!ENTITY hotspot-download "&anduin-download;/hotspot.tar.gz">
18 <!ENTITY hotspot-md5sum "aad98f91c9ad9eb5631b9d4e7aab289f">
19 <!ENTITY hotspot-size "9.2 MB">
20
21 <!ENTITY jaxp-download "&anduin-download;/jaxp.tar.gz">
22 <!ENTITY jaxp-md5sum "287018ab678bdbcb8addd3d6afbdd018">
23 <!ENTITY jaxp-size "3.7 MB">
24
25 <!ENTITY jaxws-download "&anduin-download;/jaxws.tar.gz">
26 <!ENTITY jaxws-md5sum "eca301049557f504e7349878d2faf70a">
27 <!ENTITY jaxws-size "2.7 MB">
28
29 <!ENTITY jdk-download "&anduin-download;/jdk.tar.gz">
30 <!ENTITY jdk-md5sum "5612ce683b250a8f8d35901efa202591">
31 <!ENTITY jdk-size "44 MB">
32
33 <!ENTITY langtools-download "&anduin-download;/langtools.tar.gz">
34 <!ENTITY langtools-md5sum "ef00d60244156f537d3c5fdf2047dfa3">
35 <!ENTITY langtools-size "2.3 MB">
36
37 <!ENTITY openjdk-download "&anduin-download;/openjdk.tar.gz">
38 <!ENTITY openjdk-md5sum "d59e1859070bd15462a41372c71cabd1">
39 <!ENTITY openjdk-size "136 KB">
40
41 <!ENTITY rhino-download "ftp://ftp.mozilla.org/pub/mozilla.org/js/rhino1_7R3.zip">
42 <!ENTITY rhino-md5sum "99d94103662a8d0b571e247a77432ac5">
43 <!ENTITY rhino-size "4.5 MB">
44
45 <!ENTITY openjdk-buildsize "8.1-11 GB">
46 <!ENTITY openjdk-time "33 SBU (an additional 85 SBU for testsuite)">
47]>
48
49<sect1 id="openjdk" xreflabel="OpenJDK-&openjdk-version;/IcedTea-&icedtea-version;">
50 <?dbhtml filename="openjdk.html" ?>
51
52 <sect1info>
53 <othername>$LastChangedBy$</othername>
54 <date>$Date$</date>
55 </sect1info>
56
57 <title>OpenJDK-&openjdk-version;/IcedTea-&icedtea-version;</title>
58
59 <indexterm zone="openjdk">
60 <primary sortas="a-OpenJDK">OpenJDK</primary>
61 </indexterm>
62
63 <sect2 role="package">
64 <title>Introduction to OpenJDK and IcedTea</title>
65
66 <para><application>IcedTea</application> provides a build harness for the
67 <application>OpenJDK</application> package, Oracle's open-sourced
68 <application>Java</application> development environment. In order to
69 provide a completely free runtime environment, similar to Oracle's closed
70 distribution, the <application>IcedTea</application> build harness also
71 provides free, and arguably better versions of parts of the JDK which
72 have not been open-sourced to date. <application>OpenJDK</application> is
73 useful for developing <application>Java</application> programs and provides
74 a complete runtime environment to run <application>Java</application>
75 programs.</para>
76
77 &lfs74_checked;
78
79 <note><para>The browser plugin and webstart implementation have been split
80 off into a separate project. To provide a complete implementation, you will
81 need to later install <xref linkend="icedtea-web"/>.</para></note>
82
83 <para>OpenJDK is GPL'd code, however, it should be explained that there has
84 been a special exception made for non-free projects to use these classes in
85 their proprietary products. In similar fashion to the LGPL, which
86 allows non-free programs to link to libraries provided by free software,
87 the <ulink url="http://openjdk.java.net/legal/gplv2+ce.html">GNU
88 General Public License, version 2, with the Classpath Exception</ulink>
89 allows third party programs to use classes provided by free software
90 without the requirement that the third party software also be free. As with
91 the LGPL, any modifications made to the free software portions of a
92 third party application, must also be made freely available.</para>
93
94 <note>
95 <para>The IcedTea build environment includes a very thorough, open source
96 test suite titled <application>JTreg</application>.
97 <application>JTreg</application> is intended to test the just built JDK
98 for reasonable compatibility with the closed Oracle JDK. However, in
99 order for an independent implementation to claim compatibility, including
100 the Oracle sponsored <application>OpenJDK</application> project, it must
101 pass a closed <application>JCK/TCK</application> test suite. No claims
102 of compatibility, even partial compatibility, may be made without
103 passing an approved test suite.</para>
104
105 <para>Oracle does provide free community access, on a case by case basis,
106 to a closed toolkit to ensure 100% compatibility with its proprietary JDK.
107 The binary version provided here has not been tested against the
108 <ulink url="http://openjdk.java.net/groups/conformance/JckAccess/jck-access.html">
109 TCK</ulink>. Any version that is built using the instructions given,
110 cannot claim to be compatible with the proprietary JDK, without the user
111 applying for, and completing the compatibility tests themselves.</para>
112
113 <para>With that in mind, the binaries produced using this build method are
114 regularly tested against the TCK by the members listed on the site above.
115 In addition to the community license above, an educational, non-commercial
116 license for the TCK can be obtained from
117 <ulink url="http://www.oracle.com/technetwork/java/index-137188.html">
118 here</ulink>.</para>
119 </note>
120
121 <bridgehead renderas="sect3">Source Package Information</bridgehead>
122 <itemizedlist spacing="compact">
123 <listitem>
124 <para>IcedTea Source Package
125 <simplelist>
126 <member>Download: <ulink url="&icedtea-download;"/></member>
127 <member>Download MD5 sum: &icedtea-md5sum;</member>
128 <member>Download Size: &icedtea-size;</member>
129 </simplelist>
130 </para>
131 </listitem>
132 </itemizedlist>
133
134 <para>The following may be downladed separately or be done as a
135 part of the <userinput>make</userinput> process. For convenience
136 the BLFS editors have made the files available in an LFS website.
137 The files are not distributed with versions, but extracted from
138 the OpenJDK version control system at specified (tagged) points.</para>
139
140 <itemizedlist spacing="compact">
141 <listitem>
142 <para>Corba Source
143 <simplelist>
144 <member>Download: <ulink url="&corba-download;"/></member>
145 <member>Download MD5 sum: &corba-md5sum;</member>
146 <member>Download Size: &corba-size;</member>
147 </simplelist>
148 </para>
149 </listitem>
150 <listitem>
151 <para>Hotspot Source
152 <simplelist>
153 <member>Download: <ulink url="&hotspot-download;"/></member>
154 <member>Download MD5 sum: &hotspot-md5sum;</member>
155 <member>Download Size: &hotspot-size;</member>
156 </simplelist>
157 </para>
158 </listitem>
159 <listitem>
160 <para>IcedTea Build Source
161 <simplelist>
162 <member>Download: <ulink url="&openjdk-download;"/></member>
163 <member>Download MD5 sum: &openjdk-md5sum;</member>
164 <member>Download Size: &openjdk-size;</member>
165 </simplelist>
166 </para>
167 </listitem>
168 <listitem>
169 <para>JAXP Source
170 <simplelist>
171 <member>Download: <ulink url="&jaxp-download;"/></member>
172 <member>Download MD5 sum: &jaxp-md5sum;</member>
173 <member>Download Size: &jaxp-size;</member>
174 </simplelist>
175 </para>
176 </listitem>
177 <listitem>
178 <para>JAXWS Source
179 <simplelist>
180 <member>Download: <ulink url="&jaxws-download;"/></member>
181 <member>Download MD5 sum: &jaxws-md5sum;</member>
182 <member>Download Size: &jaxws-size;</member>
183 </simplelist>
184 </para>
185 </listitem>
186 <listitem>
187 <para>Langtools Source
188 <simplelist>
189 <member>Download: <ulink url="&langtools-download;"/></member>
190 <member>Download MD5 sum: &langtools-md5sum;</member>
191 <member>Download Size: &langtools-size;</member>
192 </simplelist>
193 </para>
194 </listitem>
195 <listitem>
196 <para>OpenJDK Source
197 <simplelist>
198 <member>Download: <ulink url="&jdk-download;"/></member>
199 <member>Download MD5 sum: &jdk-md5sum;</member>
200 <member>Download Size: &jdk-size;</member>
201 </simplelist>
202 </para>
203 </listitem>
204 <listitem>
205 <para>Estimated disk space required: &openjdk-buildsize;</para>
206 </listitem>
207 <listitem>
208 <para>Estimated build time: &openjdk-time;</para>
209 </listitem>
210 </itemizedlist>
211
212 <bridgehead renderas="sect3">Additional Downloads</bridgehead>
213
214 <bridgehead renderas="sect4">Required Patches</bridgehead>
215 <itemizedlist spacing='compact'>
216 <listitem>
217 <para><ulink
218 url="&patch-root;/icedtea-&icedtea-version;-add_cacerts-1.patch"/></para>
219 </listitem>
220 <listitem>
221 <para><ulink
222 url="&patch-root;/icedtea-&icedtea-version;-fixed_paths-1.patch"/></para>
223 </listitem>
224 <listitem>
225 <para><ulink
226 url="&patch-root;/icedtea-&icedtea-version;-fix_tests-1.patch"/></para>
227 </listitem>
228 </itemizedlist>
229
230 <bridgehead renderas="sect4">Required JAR</bridgehead>
231 <itemizedlist spacing='compact'>
232 <listitem>
233 <para>Rhino Java Script
234 <simplelist>
235 <member>Download: <ulink url="&rhino-download;"/></member>
236 <member>Download MD5 sum: &rhino-md5sum;</member>
237 <member>Download Size: &rhino-size;</member>
238 </simplelist>
239 </para>
240 </listitem>
241 </itemizedlist>
242 <bridgehead renderas="sect3">OpenJDK Dependencies</bridgehead>
243
244 <bridgehead renderas="sect4">Required Dependencies</bridgehead>
245 <para role="required">
246 An existing binary ( <xref linkend="java"/> or an earlier built
247 version of this package,
248 <xref linkend="apache-ant"/>,
249 <xref linkend="cacerts"/>,
250 <xref linkend="cpio"/>,
251 <xref linkend="cups"/>,
252 <xref linkend="gtk3"/>,
253 <xref linkend="giflib"/>,
254 <xref linkend="nspr"/>,
255 <xref linkend="pulseaudio"/>,
256 <xref linkend="unzip"/>,
257 <xref linkend="wget"/>,
258 <xref linkend="which"/>,
259 <xref linkend="xorg7-lib"/>, and
260 <xref linkend="zip"/>
261 </para>
262
263 <bridgehead renderas="sect4">Optional</bridgehead>
264 <para role="optional">
265 <xref linkend="mitkrb"/>
266 </para>
267
268 <para condition="html" role="usernotes">User Notes:
269 <ulink url="&blfs-wiki;/openjdk"/></para>
270
271 </sect2>
272
273 <sect2 role="installation">
274 <title>Installation of OpenJDK</title>
275
276 <note><para>The source build of OpenJDK requires <xref
277 linkend="apache-ant"/>. You'll need to build that first to satisfy the
278 circular dependency, and return to this section to continue building
279 OpenJDK.</para></note>
280
281 <para>Unlike other packages in BLFS, the <application>OpenJDK</application>
282 source packages are distributed in multiple downloads. Since the IcedTea
283 build harness will be used to build <application>OpenJDK</application>,
284 begin by extracting the IcedTea package and changing into the
285 extracted directory.</para>
286
287 <para>The IcedTea <application>OpenJDK</application> distribution requires
288 that <filename>js.jar</filename> (from the Rhino package) be in place in
289 order to provide a java-script implementation for the free JDK. If you have
290 not installed the js.jar file in another way, do so with the following
291 commands as the <systemitem class="username">root</systemitem> user:</para>
292
293<screen role="root"><userinput>unzip ../rhino1_7R3.zip &amp;&amp;
294install -v -d -m755 /usr/share/java &amp;&amp;
295install -v -m755 rhino1_7R3/*.jar /usr/share/java</userinput></screen>
296
297 <para>As mentioned previously, <application>OpenJDK</application> is
298 composed of several individual projects of the proprietary
299 <application>JDK</application> that have been relicensed under an open
300 source license. If you have already downoaded all of the individual
301 components, place them into the source tree with the following commands:</para>
302
303<screen><userinput>cp -v ../corba.tar.gz . &amp;&amp;
304cp -v ../hotspot.tar.gz . &amp;&amp;
305cp -v ../jaxp.tar.gz . &amp;&amp;
306cp -v ../jaxws.tar.gz . &amp;&amp;
307cp -v ../jdk.tar.gz . &amp;&amp;
308cp -v ../langtools.tar.gz . &amp;&amp;
309cp -v ../openjdk.tar.gz .</userinput></screen>
310
311 <para>Apply a patch to generate a valid cacerts file using the system CA
312 certificates:</para>
313
314<screen><userinput>patch -Np1 -i ../icedtea-&icedtea-version;-add_cacerts-1.patch</userinput></screen>
315
316 <para>Apply a patch to replace fixed paths with ones appropriate for
317 BLFS:</para>
318
319<screen><userinput>patch -Np1 -i ../icedtea-&icedtea-version;-fixed_paths-1.patch</userinput></screen>
320
321 <para>Apply a patch to exclude known broken tests from the test suite:</para>
322
323<screen><userinput>patch -Np1 -i ../icedtea-&icedtea-version;-fix_tests-1.patch</userinput></screen>
324
325
326 <para>Configure and build the package with the following commands
327 (--with-pkgversion and --with-version-suffix values can be modified to fit
328 user preferences):</para>
329
330<screen><userinput>unset JAVA_HOME &amp;&amp;
331./autogen.sh &amp;&amp;
332./configure --with-jdk-home=/opt/OpenJDK-&openjdk-version;-bin \
333 --with-version-suffix=blfs \
334 --enable-nss \
335 --enable-pulse-java \
336 --disable-system-kerberos \
337 --with-parallel-jobs=$(getconf _NPROCESSORS_ONLN) &amp;&amp;
338make</userinput></screen>
339
340 <note><para>If you have not installed the tarballs specified above,
341 they will be automatically downloaded here.</para></note>
342
343 <para>To test the results, issue: <command>make jtregcheck</command>. The
344 included version of <application>jtreg</application> is old, and the test
345 suite is also very dependent on the host system and the environment that it
346 is run in. You should expect to see anywhere between 40 and 100 failures in
347 jdk with up to 10 errors in the tests themselves. The majority of the
348 6000+ tests should pass. The reason for the greatly varying results is due
349 to how stringent the testing environment must be. Varying architectures,
350 different versions of dependent libraries, unexpected X Window environment
351 and window managers, the CA certificates used to generate the
352 <filename>cacerts</filename> file, and even any user input or power
353 management or screen saver interruptions during the testing can lead to
354 various failures. While the known broken tests have been removed, with the
355 fix_tests patch above, the graphics tests failures cannot be pre-determined
356 (short of removing them all). The best bet for the minimal number of
357 failures is to run the test suite in a framebuffer on a different screen
358 (Xvfb). Even still, disk I/O can cause failures.</para>
359
360<screen><userinput>export DISPLAY=:20 &amp;&amp;
361Xvfb :20 -screen 0 1x1x24 -ac&amp;
362echo $!> Xvfb.pid &amp;&amp;
363make -k jtregcheck &amp;&amp;
364kill -9 `cat Xvfb.pid` &amp;&amp;
365unset DISPLAY &amp;&amp;
366rm -f Xvfb.pid</userinput></screen>
367
368 <para>Install the package with the following commands as the
369 <systemitem class="username">root</systemitem> user:</para>
370
371<screen role="root"><userinput>chmod 0644 openjdk.build/j2sdk-image/lib/sa-jdi.jar &amp;&amp;
372cp -R openjdk.build/j2sdk-image /opt/OpenJDK-&openjdk-version; &amp;&amp;
373chown -R root:root /opt/OpenJDK-&openjdk-version;</userinput></screen>
374
375 </sect2>
376
377 <sect2 role="commands">
378 <title>Command Explanations</title>
379
380 <para><command>./autogen.sh</command>: This command forces rebuilding of
381 auto-generated files to account for new options added to
382 <filename>configure</filename>.</para>
383
384 <para><parameter>--with-jdk-home</parameter>: This switch provides the
385 location of the temporary <application>JDK</application>.</para>
386
387 <para><parameter>--with-pkgversion</parameter>: This switch can be used
388 to modify the version string in addition to "IcedTea".</para>
389
390 <para><parameter>--with-version-suffix</parameter>: This switch appends
391 the given text to the JDK version string.</para>
392
393 <para><parameter>--enable-pulse-java</parameter>: This switch enables
394 building of the pulseaudio libraries (needed to provide a complete
395 implementation that is reasonably compatible with the proprietary
396 JDK).</para>
397
398 <para><parameter>--disable-system-kerberos</parameter>: Remove this switch,
399 if <xref linkend="mitkrb"/> is installed.</para>
400
401 <para><parameter>--with-parallel-jobs=$(getconf _NPROCESSORS_ONLN)</parameter>:
402 This switch sets the compiler to use all your CPUs in parallel and speed
403 up the build.</para>
404
405 <para><command>chmod -v 0644 ...sa-jdi.jar</command>: Fix permissions
406 in a generated file so all users can access it.</para>
407
408 </sect2>
409
410 <sect2 role="configuration" id="openjdk-config" xreflabel="Configuring OpenJDK" >
411 <title>Configuring OpenJDK</title>
412
413 <sect3>
414 <title>Configuration Information</title>
415
416 <para>There are now two <application>OpenJDK</application> SDKs
417 installed in <filename>/opt</filename>. You should decide on which one
418 you would like to use as the default. For example if you decide to use
419 the precompiled <application>OpenJDK</application>, do the following as
420 the <systemitem class="username">root</systemitem> user:</para>
421
422<screen role="root"><userinput>ln -v -nsf OpenJDK-&openjdk-version;-bin /opt/jdk</userinput></screen>
423
424 <para>The information below assumes your system is set up using the
425 instructions found in <quote><xref
426 linkend="postlfs-config-profile"/></quote>. You may need to extract the
427 relevant information below and incorporate it into your system's startup
428 files if your system is set up differently.</para>
429
430 <para>Add the following <filename>openjdk.sh</filename> shell startup
431 file to the <filename>/etc/profile.d</filename> directory with the
432 following commands as the <systemitem class="username">root</systemitem>
433 user:</para>
434
435<screen role="root"><userinput>cat &gt; /etc/profile.d/openjdk.sh &lt;&lt; "EOF"
436<literal># Begin /etc/profile.d/openjdk.sh
437
438# Set JAVA_HOME directory
439JAVA_HOME=/opt/jdk
440
441# Adjust PATH
442pathappend $JAVA_HOME/bin PATH
443
444# Auto Java CLASSPATH
445# Copy jar files to, or create symlinks in this directory
446
447AUTO_CLASSPATH_DIR=/usr/share/java
448
449pathprepend . CLASSPATH
450
451for dir in `find ${AUTO_CLASSPATH_DIR} -type d 2>/dev/null`; do
452 pathappend $dir CLASSPATH
453done
454
455for jar in `find ${AUTO_CLASSPATH_DIR} -name "*.jar" 2>/dev/null`; do
456 pathappend $jar CLASSPATH
457done
458
459export JAVA_HOME CLASSPATH
460unset AUTO_CLASSPATH_DIR dir jar
461
462# End /etc/profile.d/openjdk.sh</literal>
463EOF</userinput></screen>
464
465 <para>Finally, add the man pages to <application>man_db</application>'s
466 configuration. As the <systemitem class="username">root</systemitem>
467 user:</para>
468
469<screen><userinput>cat &gt;&gt; /etc/man_db.conf &lt;&lt; "EOF" &amp;&amp;
470<literal>MANDATORY_MANPATH /opt/jdk/man
471MANPATH_MAP /opt/jdk/bin /opt/jdk/man
472MANDB_MAP /opt/jdk/man /var/cache/man/jdk</literal>
473EOF
474
475mandb -c /opt/jdk/man</userinput></screen>
476
477 </sect3>
478
479 <sect3 id='ojdk-certs'>
480 <title>Install or update the JRE Certificate Authority Certificates (cacerts) file</title>
481
482 <para>Use the following procedure to check if the
483 <filename>cacerts</filename> file was successfully installed during the
484 OpenJDK build. Also, if the <xref linkend="cacerts"/> have been updated,
485 the following instructions will generate a new JRE
486 <filename>cacerts</filename> file. First, check if the
487 <filename>cacerts</filename> have been successfully installed: </para>
488
489<screen role="root"><userinput>cd /opt/jdk
490bin/keytool -list -keystore jre/lib/security/cacerts</userinput></screen>
491
492 <para>At the prompt "Enter keystore password:", press the "Enter" key if
493 there is no keystore password defined. If the
494 <filename>cacerts</filename> were installed correctly, you will see a
495 list of the certificates with related information for each one. If not,
496 you need to manually install them. First, generate the
497 <command>mkcacerts</command> script as the
498 <systemitem class="username">root</systemitem> user:</para>
499
500<screen role="root"><userinput>cat &gt; /opt/jdk/bin/mkcacerts &lt;&lt; "EOF"
501<literal>#!/bin/sh
502# Simple script to extract x509 certificates and create a JRE cacerts file.
503
504function get_args()
505 {
506 if test -z "${1}" ; then
507 showhelp
508 exit 1
509 fi
510
511 while test -n "${1}" ; do
512 case "${1}" in
513 -f | --cafile)
514 check_arg $1 $2
515 CAFILE="${2}"
516 shift 2
517 ;;
518 -d | --cadir)
519 check_arg $1 $2
520 CADIR="${2}"
521 shift 2
522 ;;
523 -o | --outfile)
524 check_arg $1 $2
525 OUTFILE="${2}"
526 shift 2
527 ;;
528 -k | --keytool)
529 check_arg $1 $2
530 KEYTOOL="${2}"
531 shift 2
532 ;;
533 -s | --openssl)
534 check_arg $1 $2
535 OPENSSL="${2}"
536 shift 2
537 ;;
538 -h | --help)
539 showhelp
540 exit 0
541 ;;
542 *)
543 showhelp
544 exit 1
545 ;;
546 esac
547 done
548 }
549
550function check_arg()
551 {
552 echo "${2}" | grep -v "^-" > /dev/null
553 if [ -z "$?" -o ! -n "$2" ]; then
554 echo "Error: $1 requires a valid argument."
555 exit 1
556 fi
557 }
558
559# The date binary is not reliable on 32bit systems for dates after 2038
560function mydate()
561 {
562 local y=$( echo $1 | cut -d" " -f4 )
563 local M=$( echo $1 | cut -d" " -f1 )
564 local d=$( echo $1 | cut -d" " -f2 )
565 local m
566
567 if [ ${d} -lt 10 ]; then d="0${d}"; fi
568
569 case $M in
570 Jan) m="01";;
571 Feb) m="02";;
572 Mar) m="03";;
573 Apr) m="04";;
574 May) m="05";;
575 Jun) m="06";;
576 Jul) m="07";;
577 Aug) m="08";;
578 Sep) m="09";;
579 Oct) m="10";;
580 Nov) m="11";;
581 Dec) m="12";;
582 esac
583
584 certdate="${y}${m}${d}"
585 }
586
587function showhelp()
588 {
589 echo "`basename ${0}` creates a valid cacerts file for use with IcedTea."
590 echo ""
591 echo " -f --cafile The path to a file containing PEM formated CA"
592 echo " certificates. May not be used with -d/--cadir."
593 echo " -d --cadir The path to a diectory of PEM formatted CA"
594 echo " certificates. May not be used with -f/--cafile."
595 echo " -o --outfile The path to the output file."
596 echo ""
597 echo " -k --keytool The path to the java keytool utility."
598 echo ""
599 echo " -s --openssl The path to the openssl utility."
600 echo ""
601 echo " -h --help Show this help message and exit."
602 echo ""
603 echo ""
604 }
605
606# Initialize empty variables so that the shell does not polute the script
607CAFILE=""
608CADIR=""
609OUTFILE=""
610OPENSSL=""
611KEYTOOL=""
612certdate=""
613date=""
614today=$( date +%Y%m%d )
615
616# Process command line arguments
617get_args ${@}
618
619# Handle common errors
620if test "${CAFILE}x" == "x" -a "${CADIR}x" == "x" ; then
621 echo "ERROR! You must provide an x509 certificate store!"
622 echo "\'$(basename ${0}) --help\' for more info."
623 echo ""
624 exit 1
625fi
626
627if test "${CAFILE}x" != "x" -a "${CADIR}x" != "x" ; then
628 echo "ERROR! You cannot provide two x509 certificate stores!"
629 echo "\'$(basename ${0}) --help\' for more info."
630 echo ""
631 exit 1
632fi
633
634if test "${KEYTOOL}x" == "x" ; then
635 echo "ERROR! You must provide a valid keytool program!"
636 echo "\'$(basename ${0}) --help\' for more info."
637 echo ""
638 exit 1
639fi
640
641if test "${OPENSSL}x" == "x" ; then
642 echo "ERROR! You must provide a valid path to openssl!"
643 echo "\'$(basename ${0}) --help\' for more info."
644 echo ""
645 exit 1
646fi
647
648if test "${OUTFILE}x" == "x" ; then
649 echo "ERROR! You must provide a valid output file!"
650 echo "\'$(basename ${0}) --help\' for more info."
651 echo ""
652 exit 1
653fi
654
655# Get on with the work
656
657# If using a CAFILE, split it into individual files in a temp directory
658if test "${CAFILE}x" != "x" ; then
659 TEMPDIR=`mktemp -d`
660 CADIR="${TEMPDIR}"
661
662 # Get a list of staring lines for each cert
663 CERTLIST=`grep -n "^-----BEGIN" "${CAFILE}" | cut -d ":" -f 1`
664
665 # Get a list of ending lines for each cert
666 ENDCERTLIST=`grep -n "^-----END" "${CAFILE}" | cut -d ":" -f 1`
667
668 # Start a loop
669 for certbegin in `echo "${CERTLIST}"` ; do
670 for certend in `echo "${ENDCERTLIST}"` ; do
671 if test "${certend}" -gt "${certbegin}"; then
672 break
673 fi
674 done
675 sed -n "${certbegin},${certend}p" "${CAFILE}" > "${CADIR}/${certbegin}.pem"
676 keyhash=`${OPENSSL} x509 -noout -in "${CADIR}/${certbegin}.pem" -hash`
677 echo "Generated PEM file with hash: ${keyhash}."
678 done
679fi
680
681# Write the output file
682for cert in `find "${CADIR}" -type f -name "*.pem" -o -name "*.crt"`
683do
684
685 # Make sure the certificate date is valid...
686 date=$( ${OPENSSL} x509 -enddate -in "${cert}" -noout | sed 's/^notAfter=//' )
687 mydate "${date}"
688 if test "${certdate}" -lt "${today}" ; then
689 echo "${cert} expired on ${certdate}! Skipping..."
690 unset date certdate
691 continue
692 fi
693 unset date certdate
694 ls "${cert}"
695 tempfile=`mktemp`
696 certbegin=`grep -n "^-----BEGIN" "${cert}" | cut -d ":" -f 1`
697 certend=`grep -n "^-----END" "${cert}" | cut -d ":" -f 1`
698 sed -n "${certbegin},${certend}p" "${cert}" > "${tempfile}"
699 echo yes | env LC_ALL=C "${KEYTOOL}" -import -alias `basename "${cert}"` -keystore \
700 "${OUTFILE}" -storepass 'changeit' -file "${tempfile}"
701 rm "${tempfile}"
702done
703
704if test "${TEMPDIR}x" != "x" ; then
705 rm -rf "${TEMPDIR}"
706fi
707exit 0</literal>
708EOF
709
710chmod -c 0755 /opt/jdk/bin/mkcacerts</userinput></screen>
711
712 <note>
713 <para>
714 Doing a very large copy/paste directly to a terminal may result in a
715 corrupted file. Copying to an editor may overcome this issue.
716 </para>
717 </note>
718
719 <para>First, make a backup of the
720 <filename>/opt/jdk/jre/lib/security/cacerts</filename> file, if there is
721 any. To create a new one, as the
722 <systemitem class="username">root</systemitem> user:</para>
723
724<screen><userinput>/opt/jdk/bin/mkcacerts -d "/etc/ssl/certs/" -k "/opt/jdk/bin/keytool" \
725 -s "/usr/bin/openssl" -o "/opt/jdk/jre/lib/security/cacerts"</userinput></screen>
726
727 </sect3>
728
729 </sect2>
730
731 <sect2 role="content">
732 <title>Contents</title>
733
734 <segmentedlist>
735 <segtitle>Installed Programs</segtitle>
736 <segtitle>Installed Libraries</segtitle>
737 <segtitle>Installed Directory</segtitle>
738
739 <seglistitem>
740 <seg>appletviewer, apt, extcheck, idlj, jar,
741 jarsigner, java, javac, javadoc, javah, javap, java-rmi.cgi,
742 jcmd, jconsole, jdb, jhat, jinfo, jmap, jps,
743 jrunscript, jsadebugd, jstack, jstat, jstatd, keytool,
744 native2ascii, orbd, pack200, policytool, rmic, rmid, rmiregistry,
745 schemagen, serialver, servertool, tnameserv, unpack200,
746 wsgen, wsimport, and xjc</seg>
747 <seg>/opt/OpenJDK-&openjdk-version;/lib/*, and
748 /opt/OpenJDK-&openjdk-version;/jre/lib/*</seg>
749 <seg>/opt/OpenJDK-&openjdk-version;</seg>
750 </seglistitem>
751 </segmentedlist>
752
753 <variablelist>
754 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
755 <?dbfo list-presentation="list"?>
756 <?dbhtml list-presentation="table"?>
757
758 <varlistentry id="appletviewer">
759 <term><command>appletviewer</command></term>
760 <listitem>
761 <para>allows you to run applets outside of a web browser.</para>
762 <indexterm zone="openjdk appletviewer">
763 <primary sortas="b-appletviewer">appletviewer</primary>
764 </indexterm>
765 </listitem>
766 </varlistentry>
767
768 <varlistentry id="apt">
769 <term><command>apt</command></term>
770 <listitem>
771 <para>is an annotation processing tool.</para>
772 <indexterm zone="openjdk apt">
773 <primary sortas="b-apt">apt</primary>
774 </indexterm>
775 </listitem>
776 </varlistentry>
777
778 <varlistentry id="extcheck">
779 <term><command>extcheck</command></term>
780 <listitem>
781 <para>checks a specified jar file for title and version conflicts
782 with any extensions installed in the
783 <application>OpenJDK</application> software.</para>
784 <indexterm zone="openjdk extcheck">
785 <primary sortas="b-extcheck">extcheck</primary>
786 </indexterm>
787 </listitem>
788 </varlistentry>
789
790 <varlistentry id="idlj">
791 <term><command>idlj</command></term>
792 <listitem>
793 <para>generates Java bindings from a given IDL file.</para>
794 <indexterm zone="openjdk idlj">
795 <primary sortas="b-idlj">idlj</primary>
796 </indexterm>
797 </listitem>
798 </varlistentry>
799
800 <varlistentry id="jar">
801 <term><command>jar</command></term>
802 <listitem>
803 <para>combines multiple files into a single jar archive.</para>
804 <indexterm zone="openjdk jar">
805 <primary sortas="b-jar">jar</primary>
806 </indexterm>
807 </listitem>
808 </varlistentry>
809
810 <varlistentry id="jarsigner">
811 <term><command>jarsigner</command></term>
812 <listitem>
813 <para>signs jar files and verifies the signatures and integrity
814 of a signed jar file.</para>
815 <indexterm zone="openjdk jarsigner">
816 <primary sortas="b-jarsigner">jarsigner</primary>
817 </indexterm>
818 </listitem>
819 </varlistentry>
820
821 <varlistentry id="java-prog">
822 <term><command>java</command></term>
823 <listitem>
824 <para>launches a Java application by starting a Java runtime
825 environment, loading a specified class and invoking its main
826 method.</para>
827 <indexterm zone="openjdk java-prog">
828 <primary sortas="b-java-prog">java</primary>
829 </indexterm>
830 </listitem>
831 </varlistentry>
832
833 <varlistentry id="javac">
834 <term><command>javac</command></term>
835 <listitem>
836 <para>reads class and interface definitions, written in the
837 Java programming language, and compiles them into bytecode
838 class files.</para>
839 <indexterm zone="openjdk javac">
840 <primary sortas="b-javac">javac</primary>
841 </indexterm>
842 </listitem>
843 </varlistentry>
844
845 <varlistentry id="javadoc">
846 <term><command>javadoc</command></term>
847 <listitem>
848 <para>parses the declarations and documentation comments in a
849 set of Java source files and produces a corresponding set of
850 HTML pages describing the classes, interfaces,constructors,
851 methods, and fields.</para>
852 <indexterm zone="openjdk javadoc">
853 <primary sortas="b-javadoc">javadoc</primary>
854 </indexterm>
855 </listitem>
856 </varlistentry>
857
858 <varlistentry id="javah">
859 <term><command>javah</command></term>
860 <listitem>
861 <para>generates C header and source files
862 that are needed to implement native methods.</para>
863 <indexterm zone="openjdk javah">
864 <primary sortas="b-javah">javah</primary>
865 </indexterm>
866 </listitem>
867 </varlistentry>
868
869 <varlistentry id="javap">
870 <term><command>javap</command></term>
871 <listitem>
872 <para>disassembles a Java class file.</para>
873 <indexterm zone="openjdk javap">
874 <primary sortas="b-javap">javap</primary>
875 </indexterm>
876 </listitem>
877 </varlistentry>
878
879 <varlistentry id="java-rmi.cgi">
880 <term><command>java-rmi.cgi</command></term>
881 <listitem>
882 <para>is the Java RMI client.</para>
883 <indexterm zone="openjdk java-rmi.cgi">
884 <primary sortas="b-java-rmi.cgi">java-rmi.cgi</primary>
885 </indexterm>
886 </listitem>
887 </varlistentry>
888
889 <varlistentry id="jcmd">
890 <term><command>jcmd</command></term>
891 <listitem>
892 <para>is a utility to send diagnostic command requests to a running
893 Java Virtual Machine.</para>
894 <indexterm zone="openjdk jcmd">
895 <primary sortas="b-jcmd">jcmd</primary>
896 </indexterm>
897 </listitem>
898 </varlistentry>
899
900 <varlistentry id="jconsole">
901 <term><command>jconsole</command></term>
902 <listitem>
903 <para>is a graphical console tool to monitor and manage both
904 local and remote Java applications and virtual machines.</para>
905 <indexterm zone="openjdk jconsole">
906 <primary sortas="b-jconsole">jconsole</primary>
907 </indexterm>
908 </listitem>
909 </varlistentry>
910
911 <varlistentry id="jdb">
912 <term><command>jdb</command></term>
913 <listitem>
914 <para>is a simple command-line debugger for Java classes.</para>
915 <indexterm zone="openjdk jdb">
916 <primary sortas="b-jdb">jdb</primary>
917 </indexterm>
918 </listitem>
919 </varlistentry>
920
921 <varlistentry id="jhat">
922 <term><command>jhat</command></term>
923 <listitem>
924 <para>parses a java heap dump file and allows viewing
925 in a web browser.</para>
926 <indexterm zone="openjdk jhat">
927 <primary sortas="b-jhat">jhat</primary>
928 </indexterm>
929 </listitem>
930 </varlistentry>
931
932 <varlistentry id="jinfo">
933 <term><command>jinfo</command></term>
934 <listitem>
935 <para>prints Java configuration information for a given Java
936 process, core file, or a remote debug server.</para>
937 <indexterm zone="openjdk jinfo">
938 <primary sortas="b-jinfo">jinfo</primary>
939 </indexterm>
940 </listitem>
941 </varlistentry>
942
943 <varlistentry id="jmap">
944 <term><command>jmap</command></term>
945 <listitem>
946 <para>prints shared object memory maps or heap memory details
947 of a given process, core file, or a remote debug server.</para>
948 <indexterm zone="openjdk jmap">
949 <primary sortas="b-jmap">jmap</primary>
950 </indexterm>
951 </listitem>
952 </varlistentry>
953
954 <varlistentry id="jps">
955 <term><command>jps</command></term>
956 <listitem>
957 <para>lists the instrumented JVMs on the target system.</para>
958 <indexterm zone="openjdk jps">
959 <primary sortas="b-jps">jps</primary>
960 </indexterm>
961 </listitem>
962 </varlistentry>
963
964 <varlistentry id="jrunscript">
965 <term><command>jrunscript</command></term>
966 <listitem>
967 <para>is a command line script shell.</para>
968 <indexterm zone="openjdk jrunscript">
969 <primary sortas="b-jrunscript">jrunscript</primary>
970 </indexterm>
971 </listitem>
972 </varlistentry>
973
974 <varlistentry id="jsadebugd">
975 <term><command>jsadebugd</command></term>
976 <listitem>
977 <para>attaches to a Java process or core file and acts as a
978 debug server.</para>
979 <indexterm zone="openjdk jsadebugd">
980 <primary sortas="b-jsadebugd">jsadebugd</primary>
981 </indexterm>
982 </listitem>
983 </varlistentry>
984
985 <varlistentry id="jstack">
986 <term><command>jstack</command></term>
987 <listitem>
988 <para>prints Java stack traces of Java threads for a given
989 Java process, core file, or a remote debug server.</para>
990 <indexterm zone="openjdk jstack">
991 <primary sortas="b-jstack">jstack</primary>
992 </indexterm>
993 </listitem>
994 </varlistentry>
995
996 <varlistentry id="jstat">
997 <term><command>jstat</command></term>
998 <listitem>
999 <para>displays performance statistics for an instrumented JVM.</para>
1000 <indexterm zone="openjdk jstat">
1001 <primary sortas="b-jstat">jstat</primary>
1002 </indexterm>
1003 </listitem>
1004 </varlistentry>
1005
1006 <varlistentry id="jstatd">
1007 <term><command>jstatd</command></term>
1008 <listitem>
1009 <para>is an RMI server application that monitors for the creation
1010 and termination of instrumented JVMs.</para>
1011 <indexterm zone="openjdk jstatd">
1012 <primary sortas="b-jstatd">jstatd</primary>
1013 </indexterm>
1014 </listitem>
1015 </varlistentry>
1016
1017 <varlistentry id="keytool">
1018 <term><command>keytool</command></term>
1019 <listitem>
1020 <para>is a key and certificate management utility.</para>
1021 <indexterm zone="openjdk keytool">
1022 <primary sortas="b-keytool">keytool</primary>
1023 </indexterm>
1024 </listitem>
1025 </varlistentry>
1026
1027 <varlistentry id="native2ascii">
1028 <term><command>native2ascii</command></term>
1029 <listitem>
1030 <para> converts files that contain non-supported character encoding
1031 into files containing Latin-1 or Unicode-encoded characters.</para>
1032 <indexterm zone="openjdk native2ascii">
1033 <primary sortas="b-native2ascii">native2ascii</primary>
1034 </indexterm>
1035 </listitem>
1036 </varlistentry>
1037
1038 <varlistentry id="orbd">
1039 <term><command>orbd</command></term>
1040 <listitem>
1041 <para>is used to enable clients to transparently locate and invoke
1042 persistent objects on servers in the CORBA environment.</para>
1043 <indexterm zone="openjdk orbd">
1044 <primary sortas="b-orbd">orbd</primary>
1045 </indexterm>
1046 </listitem>
1047 </varlistentry>
1048
1049 <varlistentry id="pack200">
1050 <term><command>pack200</command></term>
1051 <listitem>
1052 <para>is a Java application that transforms a jar file into a
1053 compressed pack200 file using the Java gzip compressor.</para>
1054 <indexterm zone="openjdk pack200">
1055 <primary sortas="b-pack200">pack200</primary>
1056 </indexterm>
1057 </listitem>
1058 </varlistentry>
1059
1060 <varlistentry id="policytool">
1061 <term><command>policytool</command></term>
1062 <listitem>
1063 <para>creates and manages a policy file graphically.</para>
1064 <indexterm zone="openjdk policytool">
1065 <primary sortas="b-policytool">policytool</primary>
1066 </indexterm>
1067 </listitem>
1068 </varlistentry>
1069
1070 <varlistentry id="rmic">
1071 <term><command>rmic</command></term>
1072 <listitem>
1073 <para>generates stub and skeleton class files for remote objects
1074 from the names of compiled Java classes that contain remote
1075 object implementations.</para>
1076 <indexterm zone="openjdk rmic">
1077 <primary sortas="b-rmic">rmic</primary>
1078 </indexterm>
1079 </listitem>
1080 </varlistentry>
1081
1082 <varlistentry id="rmid">
1083 <term><command>rmid</command></term>
1084 <listitem>
1085 <para>starts the activation system daemon.</para>
1086 <indexterm zone="openjdk rmid">
1087 <primary sortas="b-rmid">rmid</primary>
1088 </indexterm>
1089 </listitem>
1090 </varlistentry>
1091
1092 <varlistentry id="rmiregistry">
1093 <term><command>rmiregistry</command></term>
1094 <listitem>
1095 <para>creates and starts a remote object registry on the specified
1096 port on the current host.</para>
1097 <indexterm zone="openjdk rmiregistry">
1098 <primary sortas="b-rmiregistry">rmiregistry</primary>
1099 </indexterm>
1100 </listitem>
1101 </varlistentry>
1102
1103 <varlistentry id="schemagen">
1104 <term><command>schemagen</command></term>
1105 <listitem>
1106 <para>is a Java XML binding schema generator.</para>
1107 <indexterm zone="openjdk schemagen">
1108 <primary sortas="b-schemagen">schemagen</primary>
1109 </indexterm>
1110 </listitem>
1111 </varlistentry>
1112
1113 <varlistentry id="serialver">
1114 <term><command>serialver</command></term>
1115 <listitem>
1116 <para>returns the serialVersionUID for one or more classes in a
1117 form suitable for copying into an evolving class.</para>
1118 <indexterm zone="openjdk serialver">
1119 <primary sortas="b-serialver">serialver</primary>
1120 </indexterm>
1121 </listitem>
1122 </varlistentry>
1123
1124 <varlistentry id="servertool">
1125 <term><command>servertool</command></term>
1126 <listitem>
1127 <para>provides an ease-of-use interface for application programmers
1128 to register, unregister, startup and shutdown a server.</para>
1129 <indexterm zone="openjdk servertool">
1130 <primary sortas="b-servertool">servertool</primary>
1131 </indexterm>
1132 </listitem>
1133 </varlistentry>
1134
1135 <varlistentry id="tnameserv">
1136 <term><command>tnameserv</command></term>
1137 <listitem>
1138 <para>starts the Java IDL name server.</para>
1139 <indexterm zone="openjdk tnameserv">
1140 <primary sortas="b-tnameserv">tnameserv</primary>
1141 </indexterm>
1142 </listitem>
1143 </varlistentry>
1144
1145 <varlistentry id="unpack200">
1146 <term><command>unpack200</command></term>
1147 <listitem>
1148 <para>is a native implementation that transforms a packed file
1149 produced by <application>pack200</application> into a jar
1150 file.</para>
1151 <indexterm zone="openjdk unpack200">
1152 <primary sortas="b-unpack200">unpack200</primary>
1153 </indexterm>
1154 </listitem>
1155 </varlistentry>
1156
1157 <varlistentry id="wsgen">
1158 <term><command>wsgen</command></term>
1159 <listitem>
1160 <para>generates JAX-WS portable artifacts used in JAX-WS
1161 web services.</para>
1162 <indexterm zone="openjdk wsgen">
1163 <primary sortas="b-wsgen">wsgen</primary>
1164 </indexterm>
1165 </listitem>
1166 </varlistentry>
1167
1168 <varlistentry id="wsimport">
1169 <term><command>wsimport</command></term>
1170 <listitem>
1171 <para>generates JAX-WS portable artifacts.</para>
1172 <indexterm zone="openjdk wsimport">
1173 <primary sortas="b-wsimport">wsimport</primary>
1174 </indexterm>
1175 </listitem>
1176 </varlistentry>
1177
1178 <varlistentry id="xjc">
1179 <term><command>xjc</command></term>
1180 <listitem>
1181 <para>is a Java XML binding compiler.</para>
1182 <indexterm zone="openjdk xjc">
1183 <primary sortas="b-xjc">xjc</primary>
1184 </indexterm>
1185 </listitem>
1186 </varlistentry>
1187
1188 </variablelist>
1189
1190 </sect2>
1191
1192</sect1>
Note: See TracBrowser for help on using the repository browser.