GNU/Andrew's Blog - Latest Comments

Re: OpenJDK, IcedTea & NSS: IcedTea7 Results

Krish Dey — Fri, 07 Jun 2019 09:13:47 -0000

How do u mention the keysize here?

Re: [SECURITY] IcedTea 3.9.0 for OpenJDK 8 Released!

John Pollard — Tue, 27 Nov 2018 05:02:42 -0000

Hi Andrew, we use jaws on Mac and Windows for distributing a swing application. Is IcedTea a viable solution to replace jaws, presumably also requiring our Windows and Mac clients (50+ machines) to switch to OpenJDK? Many thanks, John

Re: [SECURITY] IcedTea 3.8.0 for OpenJDK 8 Released!

Karen L — Mon, 06 Aug 2018 22:30:27 -0000

anyone success to build in window?

Re: [SECURITY] IcedTea 3.8.0 for OpenJDK 8 Released!

#Illuminati — Mon, 11 Jun 2018 12:23:01 -0000

CAN YOU PLEASE HELP ME GET ICEDTEA for windows ten insider preview x64
i need to login to my Server using a Java applet they provided to me. its crashing everytime i use the applet with Java runtime environment 8 Update 171

Re: [SECURITY] IcedTea 3.8.0 for OpenJDK 8 Released!

James Le Cuirot — Sun, 03 Jun 2018 10:07:02 -0000

"A 3.8.0 ebuild for Gentoo is available."

Oh no it isn't! ;-)

Re: [SECURITY] IcedTea 3.7.0 for OpenJDK 8 Released!

@eckes — Fri, 01 Jun 2018 17:04:57 -0000

Andrew, I have heared different oppinions about Oracles plans to contribute security fix
backports after 1/1 to the public repos. Do you expect their non-public fixes beeing
available in the 8u OpenJDK branch?

Re: [SECURITY] IcedTea 3.1.0 for OpenJDK 8 Released!

Andii — Wed, 11 Jan 2017 13:15:35 -0000

You need a Java 7 or 8 implementation installed to build. If you have one and it's not being detected, please file a bug (http://icedtea.classpath.or... and specify the path to the JDK using --with-jdk-home in the meantime.

Re: [SECURITY] IcedTea 2.6.7 for OpenJDK 7 Released!

Andii — Wed, 11 Jan 2017 09:37:02 -0000

What you're looking for is the IcedTea-Web plugin and Web Start support rather than IcedTea. I'm afraid you'd have to ask Ubuntu as to how they've chosen to package it (or not, as the case may be).

Re: [SECURITY] IcedTea 2.6.7 for OpenJDK 7 Released!

Milhouse — Sat, 12 Nov 2016 19:52:51 -0000

Could you please tell me how to get the icedtea-7-plugin for ubuntu 16.04? I can't seem to find it anywhere. email is milhouse.vh@earthlink.net

Re: [SECURITY] IcedTea 3.1.0 for OpenJDK 8 Released!

Néstor Vásquez M. — Sat, 22 Oct 2016 19:28:20 -0000

checking for fastjar... no
checking for jar... no
configure: error: None of the following programs could be found on the PATH: fastjar jar
root@xubuntu:/tmp/mozilla_xubuntu0/icedtea-build# make
make: *** No target and no makefile. Stop.
on my xubuntu 16.04 LTS :(

Re: [SECURITY] IcedTea 2.5.5 for OpenJDK 7 Released!

Andii — Tue, 07 Jul 2015 15:25:43 -0000

Thanks. I've updated the post to mention this change.

Re: [SECURITY] IcedTea 2.5.5 for OpenJDK 7 Released!

Yuhong Bao — Thu, 16 Apr 2015 15:34:05 -0000

The changes to allow JSSE server to use 1024-bit DHE is disabled by default. Set jdk.tls.ephemeralDHKeySize to jdk8 to enable.

Re: [SECURITY] IcedTea 2.5.5 for OpenJDK 7 Released!

Andii — Wed, 15 Apr 2015 21:53:40 -0000

IcedTea 3.0 will build OpenJDK 8. Any further 2.x releases will build OpenJDK 7, just as 1.x releases build OpenJDK 6.

Re: [SECURITY] IcedTea 2.5.5 for OpenJDK 7 Released!

Eric Hameleers — Wed, 15 Apr 2015 17:16:21 -0000

Thanks Andrew. Now that Oracle won't release any more updates for Java7, will the next Icedtea build OpenJDK 8?

Re: IcedTea 2.5.2 Released: Back in the Groovy!

Andii — Mon, 26 Jan 2015 20:46:27 -0000

Most of the IcedTea patches in 2.x need to be ported over to 3.x and the new build system makes this more involved than it was for 1.x to 2.x. Hopefully, we'll have a 8u40-based release before the next security update period in April.

Re: IcedTea 2.5.2 Released: Back in the Groovy!

Navdeep Singh Sidhu — Mon, 06 Oct 2014 13:29:12 -0000

i.m trying to build Openjdk8 with OpenJFX and i require javaws support for my applications. Can you please share the release schedule for ICETEA which which will be compatible with OPENJDK8? :) Thanks for your great work :)

Re: IcedTea 2.5.2 Released: Back in the Groovy!

Christoph Bayer — Sat, 13 Sep 2014 00:42:12 -0000

Thank you very much for all your work! I really prefer IcedTea7 above the plain OpenJDK because of the possibility to activate the font infinality support. I looked quickly in the upcoming 3.0.0 release and found the --enable-infinality switch no longer. Has the patch been removed? I did not found anything on the web regarding this... I think without an improved font rendering, no java gui is usable on Linux. Is there a chance, this patch is going to be included in a 3.0.0 release? Thanks in advance!

Re: [SECURITY] IcedTea 1.13.3 for OpenJDK 6 Released

Andii — Mon, 28 Apr 2014 12:26:23 -0000

The links work; it's Oracle who hides the bugs in their database. The Red Hat errata (http://rhn.redhat.com/errat... has a little more information, but just what can be derived from the patches themselves.

Re: [SECURITY] IcedTea 1.13.3 for OpenJDK 6 Released

karl — Wed, 16 Apr 2014 08:24:56 -0000

How can I find more detail about the security issues called out? The bug tracker links don't work.

Re: PPC Port Available in IcedTea 2.x HEAD

Andii — Thu, 20 Mar 2014 13:10:18 -0000

Many thanks for the feedback. This post is rather old now and the --with-hotspot-build option is no longer required since the code was merged into IcedTea's HotSpot tree; I should put a note on the blog to say this. I'll look into the other issues. The --enable-zero=no (or --disable-zero) shouldn't be needed, as it should be defaulting to the native port now. However, I've only been able to test the OpenJDK build itself and not IcedTea on PPC so far. It sounds like the port needs opting out of class data sharing too. I look into fixing this. Thanks again!

Re: PPC Port Available in IcedTea 2.x HEAD

tdaitx — Thu, 20 Mar 2014 02:26:44 -0000

Alright, '../configure --enable-zero=no && make' did the trick. I had to comment a few of the if/then tests containing '-Xshare:dump' in Makefile since that parameter is not supported as we can see bellow:

$ icedtea7/openjdk.build-boot/j2sdk-image/bin/java -Xshare:dump
Error occurred during initialization of VM
Dumping a shared archive is not supported on the Server JVM.

Re: PPC Port Available in IcedTea 2.x HEAD

tdaitx — Wed, 19 Mar 2014 21:21:44 -0000

I seem to be missing something in order to get the C2 hotspot build in place of Zero. './configure --with-hotspot-build=ppc && make' fails right after "Using HotSpot build: ppc". It seems HS_SHA256SUM is not set properly since there's no entry for ppc in hotspot.map. What exactly do I have to do to get it working?

BTW, the default build (./configure && make) results in a build with the Zero VM on a PPC64 machine.

Thanks!

Re: Packaging OpenJDK

Andii — Fri, 07 Feb 2014 20:31:39 -0000

No; please follow the link if you're unfamiliar with the term used. Sun's JDK was always available as gratis binaries. It wasn't Free (as in Freedom) until 2006/7.

Re: Packaging OpenJDK

Andii — Fri, 07 Feb 2014 20:30:38 -0000

Yes, it is intentional "to reduce external dependencies and also to ensure specific tested versions of libraries are used". But why? Because the end product is a binary. If the project had been developed as a FOSS project from the start, the primary output would be the source code, which results in different choices in designing the code & build system.

Yes, we've seen changes in the dependencies just between 6 & 7. There don't seem to be any new ones with 8. As I say in the article, the whole problem just magically goes away if you're packaging for a distribution where you know exactly what's available (not just software, but the versions too).

I don't think the situation with the binaries will change either, but I used that phrasing to subtly imply that I don't agree with that situation (i.e. room for improvement there...). Oracle are happy to toot OpenJDK when it suits them, but they won't rely on it to provide the end product.

Re: Packaging OpenJDK

Mike Duigou — Fri, 07 Feb 2014 17:58:35 -0000

The approach embed dependencies in OracleJDK and OpenJDK builds builds isn't a consequence of either the pre-GPL history or that OracleJDK builds incorporate proprietary code.

It's instead intentional inclusion to reduce external dependencies and also to ensure specific tested versions of libraries are used.

In some cases the Oracle builds have been relaxing which libs are embedded and which are linked at runtime from the host OS. Some of this is strictly a consequence of specific libraries becoming more commonly installed (and more reliable versions of them being installed). For example, XCB early on was not commonly available and due to local configuration issues the system installed version was not always reliable. The set of embedded libraries in OracleJDK builds will probably continue to change over time but will probably always embedd some libraries and certainly any proprietary libraries.

The IcedTea enhancement to allow for system libs to be used rather than embedded libs is excellent work. It's definitely nice to have the option to use the system lib.

Additionally, other than reference implementations (RI) for JCP review it's unlikely Oracle will *ever* ship OpenJDK builds. Your "still don't" could be simply amended to "doesn't". :-)