PR3681: Use the internal copy of the SunEC library rather than statically linking against NSS 2019-01-08 Andrew John Hughes <gnu_andrew@member.fsf.org> PR3681: Use the internal copy of the SunEC library rather than statically linking against NSS * patches/disable-intree-ec.patch: Removed. * patches/nss-config.patch: Removed. * patches/nss-not-enabled-config.patch: Removed. * patches/nss-not-enabled-config-with-sunec.patch: Renamed to patches/pkcs11-nss-not-enabled-config.patch. * patches/nss-config-with-sunec.patch: Renamed to patches/pkcs11-nss-config.patch. * INSTALL: Remove --enable-sunec option. Update documentation to match current situation with SunEC. * Makefile.am: (ICEDTEA_PATCHES): Remove disable-intree-ec.patch. Remove PKCS11 config patches without the SunEC provider. Rename remaining two to make it clear they are for the PKCS11 provider. (ICEDTEA_CONFIGURE): Remove use of system-nss option which no longer exists, following PR3681. (ICEDTEA_ENV): Remove NSS_LIBS and NSS_CFLAGS. (check-ecc): Argument passed to the test should now be "yes". * NEWS: Updated. * acinclude.m4: (IT_ENABLE_SUNEC): Removed. * configure.ac: Replace IT_ENABLE_SUNEC call with IT_LOCATE_NSS. * fsg.sh.in: Remove unused source code and use new PR3681 patch instead of old PR2126 patch which only alters Java code. * patches/pr3681.patch: Renamed from patches/pr2126.patch, updated to OpenJDK 9 paths and extended to patch native code. * patches/rh1022017.patch: Updated to OpenJDK 9 paths. * remove-intree-libraries.sh.in: Drop conditional removal of SunEC code. 2018-02-15 Andrew John Hughes <gnu_andrew@member.fsf.org> * patches/pr2126.patch, * patches/rh1022017.patch: Fix file paths due to 8156502 dropping 'Supported' from the front of 'SupportedEllipticCurvesExtension.java' 2017-12-11 Andrew John Hughes <gnu_andrew@member.fsf.org> * patches/pr2126.patch: Update to apply against 8u152, following 8157035. 2017-01-23 Andrew John Hughes <gnu_andrew@member.fsf.org> * patches/pr2126.patch: Extend following changes made in 8148516. 2016-11-07 Andrew John Hughes <gnu_andrew@member.fsf.org> * patches/pr2126.patch: Remove Brainpool curves added by 8146490. 2016-04-23 Andrew John Hughes <gnu_andrew@member.fsf.org> PR3681: Use the internal copy of the SunEC library rather than statically linking against NSS * Makefile.am: (ECC_RESULT): Removed.

--- openjdk.orig/jdk/src/share/lib/security/java.security-linux	2009-08-25 11:43:59.000000000 +0100
+++ openjdk/jdk/src/share/lib/security/java.security-linux		2009-08-27 14:23:54.000000000 +0100
@@ -51,6 +51,10 @@
 security.provider.7=com.sun.security.sasl.Provider
 security.provider.8=org.jcp.xml.dsig.internal.dom.XMLDSigRI
 security.provider.9=sun.security.smartcardio.SunPCSC
+# the NSS security provider was not enabled for this build; it can be enabled
+# if NSS (libnss3) is available on the machine. The nss.cfg file may need
+# editing to reflect the location of the NSS installation.
+#security.provider.10=sun.security.pkcs11.SunPKCS11 ${java.home}/lib/security/nss.cfg
 
 #
 # Sun Provider SecureRandom seed source.