Changeset 30b7db74 for general/prog/openjdk.xml

Timestamp:

10/29/2016 09:56:12 AM (7 years ago)

Author:

DJ Lucas <dj@…>

Branches:

10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, basic, bdubbs/svn, elogind, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, lazarus, lxqt, nosym, perl-modules, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal

Children:

be1bcf9c

Parents:

7b8c7ec

Message:

Use mk-ca-bundle.pl from curl for CA Certificates generation.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@17919 af4574ff-66df-0310-9fd7-8a98e5e911e0

File:

• general/prog/openjdk.xml (modified) (5 diffs)

general/prog/openjdk.xml

@@ -553 +553 @@
         <application>OpenJDK</application> uses its own format for the
         CA certificates. Those certificates are located in a file named
-        <filename>/opt/jdk/jre/lib/security/cacerts</filename>. That file
-        may be generated from the one installed using the instructions on the
-        <xref linkend="cacerts"/> page, with the following procedure.
-        First, generate the <command>mkcacerts</command> script
+        <filename>/etc/ssl/java/cacerts</filename>. That file should be
+        generated using the system PKI trust store. The instructions
+        on the <xref linkend="cacerts"/> page will be used to do the update
+        by calling the following script. Install the
+        <command>mkcacerts</command> script and setup a symlink in the java
         as the <systemitem class="username">root</systemitem> user:
       </para>
 
-<screen role="root"><userinput>cat &gt; /opt/jdk/bin/mkcacerts &lt;&lt; "EOF"
+<screen role="root"><userinput>cat &gt; /opt/jdk/bin/mkcacerts &lt;&lt; "EOF" &amp;&amp;
 <literal>#!/bin/sh
 # Simple script to extract x509 certificates and create a JRE cacerts file.
@@ -777 +778 @@
 EOF
 
-chmod -c 0755 /opt/jdk/bin/mkcacerts</userinput></screen>
+chmod -c 0755 /opt/jdk/bin/mkcacerts &amp;&amp;
+ln -sfv /etc/ssl/java/cacerts /opt/jdk/jre/lib/security/cacerts</userinput></screen>
 
   <note>
@@ -791 +793 @@
     </para>
 
-<screen role="root"><userinput>if [ -f /opt/jdk/jre/lib/security/cacerts ]; then
-  mv /opt/jdk/jre/lib/security/cacerts \
-     /opt/jdk/jre/lib/security/cacerts.bak
+<screen role="root"><userinput>if [ -f /etc/ssl/java/cacerts ]; then
+  mv /etc/ssl/java/cacerts \
+     /etc/ssl/java/cacerts.bak
 fi &amp;&amp;
 /opt/jdk/bin/mkcacerts                 \
@@ -799 +801 @@
         -k "/opt/jdk/bin/keytool"      \
         -s "/usr/bin/openssl"          \
-        -o "/opt/jdk/jre/lib/security/cacerts"</userinput></screen>
+        -o "/etc/ssl/java/cacerts"</userinput></screen>
 
     <para>Use the following commands to check if the
@@ -805 +807 @@
 
 <screen role="root"><userinput>cd /opt/jdk
-bin/keytool -list -keystore jre/lib/security/cacerts</userinput></screen>
+bin/keytool -list -keystore /etc/ssl/java/cacerts</userinput></screen>
 
     <para>At the prompt "Enter keystore password:", press the "Enter" key if