diff --git a/resources/jre/ASSEMBLY_EXCEPTION b/resources/jre/ASSEMBLY_EXCEPTION old mode 100644 new mode 100755 diff --git a/resources/jre/LICENSE b/resources/jre/LICENSE old mode 100644 new mode 100755 diff --git a/resources/jre/THIRD_PARTY_README b/resources/jre/THIRD_PARTY_README old mode 100644 new mode 100755 index a41247d3..f8bc26af --- a/resources/jre/THIRD_PARTY_README +++ b/resources/jre/THIRD_PARTY_README @@ -154,12 +154,12 @@ IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. ------------------------------------------------------------------------------- -%% This notice is provided with respect to CUP Parser Generator for -Java 0.10k, which may be included with JRE 8, JDK 8, and OpenJDK 8. +%% This notice is provided with respect to CUP Parser Generator for +Java 0.11b, which may be included with JRE 8, JDK 8, and OpenJDK 8. --- begin of LICENSE --- -Copyright 1996-1999 by Scott Hudson, Frank Flannery, C. Scott Ananian +Copyright 1996-2015 by Scott Hudson, Frank Flannery, C. Scott Ananian, Michael Petter Permission to use, copy, modify, and distribute this software and its documentation for any purpose and without fee is hereby granted, provided @@ -1334,11 +1334,13 @@ SUCH DAMAGE. -------------------------------------------------------------------------------- -%% This notice is provided with respect to Joni v1.1.9, which may be +%% This notice is provided with respect to Joni v2.1.16, which may be included with JRE 8, JDK 8, and OpenJDK 8. --- begin of LICENSE --- +Copyright (c) 2017 JRuby Team + Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights @@ -1641,7 +1643,7 @@ July 15, 2018 ------------------------------------------------------------------------------- -%% This notice is provided with respect to GIFLIB 5.1.8 & libungif 4.1.3, +%% This notice is provided with respect to GIFLIB 5.2.1 & libungif 4.1.3, which may be included with JRE 8, JDK 8, and OpenJDK 8. --- begin of LICENSE --- @@ -1670,13 +1672,13 @@ THE SOFTWARE. ------------------------------------------------------------------------------- -%% This notice is provided with respect to Little CMS 2.9, which may be +%% This notice is provided with respect to Little CMS 2.11, which may be included with JRE 8, JDK 8, and OpenJDK 8. --- begin of LICENSE --- Little CMS -Copyright (c) 1998-2017 Marti Maria Saguer +Copyright (c) 1998-2020 Marti Maria Saguer Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal @@ -1710,10 +1712,60 @@ which may be included with JRE 8, JDK 8, and OpenJDK 8 source distributions. --- begin of LICENSE --- + Mesa 3-D Graphics Library v19.2.1 + + Copyright (C) 1999-2007 Brian Paul All Rights Reserved. + + Permission is hereby granted, free of charge, to any person obtaining a + copy of this software and associated documentation files (the "Software"), + to deal in the Software without restriction, including without limitation + the rights to use, copy, modify, merge, publish, distribute, sublicense, + and/or sell copies of the Software, and to permit persons to whom the + Software is furnished to do so, subject to the following conditions: + + The above copyright notice and this permission notice shall be included + in all copies or substantial portions of the Software. + + THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS + OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, + FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL + THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER + LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, + OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE + SOFTWARE. + +Attention, Contributors + +When contributing to the Mesa project you must agree to the licensing terms +of the component to which you're contributing. +The following section lists the primary components of the Mesa distribution +and their respective licenses. +Mesa Component Licenses + + + +Component Location License +------------------------------------------------------------------ +Main Mesa code src/mesa/ MIT +Device drivers src/mesa/drivers/* MIT, generally + +Gallium code src/gallium/ MIT + +Ext headers GL/glext.h Khronos + GL/glxext.h Khronos + GL/wglext.h Khronos + KHR/khrplatform.h Khronos + +***************************************************************************** + +---- +include/GL/gl.h : + + Mesa 3-D graphics library - Version: 5.0 - Copyright (C) 1999-2002 Brian Paul All Rights Reserved. + Copyright (C) 1999-2006 Brian Paul All Rights Reserved. + Copyright (C) 2009 VMware, Inc. All Rights Reserved. Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), @@ -1728,9 +1780,67 @@ which may be included with JRE 8, JDK 8, and OpenJDK 8 source distributions. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL - BRIAN PAUL BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN - AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN - CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. + THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR + OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, + ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR + OTHER DEALINGS IN THE SOFTWARE. + + ***************************************************************************** + +---- +include/GL/glext.h +include/GL/glxext.h +include/GL/wglxext.h : + + + Copyright (c) 2013 - 2018 The Khronos Group Inc. + + Permission is hereby granted, free of charge, to any person obtaining a + copy of this software and/or associated documentation files (the + "Materials"), to deal in the Materials without restriction, including + without limitation the rights to use, copy, modify, merge, publish, + distribute, sublicense, and/or sell copies of the Materials, and to + permit persons to whom the Materials are furnished to do so, subject to + the following conditions: + + The above copyright notice and this permission notice shall be included + in all copies or substantial portions of the Materials. + + THE MATERIALS ARE PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, + EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF + MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. + IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY + CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, + TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE + MATERIALS OR THE USE OR OTHER DEALINGS IN THE MATERIALS. + + ***************************************************************************** + +---- +include/KHR/khrplatform.h : + + Copyright (c) 2008 - 2018 The Khronos Group Inc. + + Permission is hereby granted, free of charge, to any person obtaining a + copy of this software and/or associated documentation files (the + "Materials"), to deal in the Materials without restriction, including + without limitation the rights to use, copy, modify, merge, publish, + distribute, sublicense, and/or sell copies of the Materials, and to + permit persons to whom the Materials are furnished to do so, subject to + the following conditions: + + The above copyright notice and this permission notice shall be included + in all copies or substantial portions of the Materials. + + THE MATERIALS ARE PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, + EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF + MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. + IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY + CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, + TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE + MATERIALS OR THE USE OR OTHER DEALINGS IN THE MATERIALS. + + ***************************************************************************** --- end of LICENSE --- @@ -2130,7 +2240,7 @@ Exhibit B - "Incompatible With Secondary Licenses" Notice ------------------------------------------------------------------------------- -%% This notice is provided with respect to PC/SC Lite v1.8.24, +%% This notice is provided with respect to PC/SC Lite v1.8.26, which may be included with JRE 8, JDK 8, and OpenJDK 8 on Linux and Solaris. --- begin of LICENSE --- @@ -2788,23 +2898,21 @@ to do so,subject to the following conditions: ------------------------------------------------------------------------------- -%% This notice is provided with respect to X Window System 6.8.2, which may be +%% This notice is provided with respect to xwd v1.0.7, which may be included with JRE 8, JDK 8, and OpenJDK 8 on Linux and Solaris. +xwd utility + --- begin of LICENSE --- -This is the copyright for the files in src/solaris/native/sun/awt: list.h, -multiVis.h, wsutils.h, list.c, multiVis.c -Copyright (c) 1994 Hewlett-Packard Co. -Copyright (c) 1996 X Consortium +Copyright 1994 Hewlett-Packard Co. +Copyright 1996, 1998 The Open Group -Permission is hereby granted, free of charge, to any person obtaining -a copy of this software and associated documentation files (the -"Software"), to deal in the Software without restriction, including -without limitation the rights to use, copy, modify, merge, publish, -distribute, sublicense, and sell copies of the Software, and to -permit persons to whom the Software is furnished to do so, subject to -the following conditions: +Permission to use, copy, modify, distribute, and sell this software and its +documentation for any purpose is hereby granted without fee, provided that +the above copyright notice appear in all copies and that both that +copyright notice and this permission notice appear in supporting +documentation. The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. @@ -2812,15 +2920,15 @@ in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. -IN NO EVENT SHALL THE X CONSORTIUM BE LIABLE FOR ANY CLAIM, DAMAGES OR +IN NO EVENT SHALL THE OPEN GROUP BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. -Except as contained in this notice, the name of the X Consortium shall +Except as contained in this notice, the name of The Open Group shall not be used in advertising or otherwise to promote the sale, use or other dealings in this Software without prior written authorization -from the X Consortium. +from The Open Group. --- end of LICENSE --- _____________________________ @@ -2920,7 +3028,6 @@ included with JRE 8, JDK 8, and OpenJDK 8. Apache Commons Math 3.2 Apache Derby 10.11.1.2 Apache Jakarta BCEL 5.1 - Apache Jakarta Regexp 1.4 Apache Santuario XML Security for Java 2.1.4 Apache Xalan-Java 2.7.2 Apache Xerces Java 2.10.0 @@ -3135,7 +3242,82 @@ included with JRE 8, JDK 8, and OpenJDK 8. ------------------------------------------------------------------------------- -%% This notice is provided with respect to FreeType Distribution 2.10.0. +%% This notice is provided with respect to OASIS PKCS #11 Cryptographic Token +Interface v3.0, which may be included with JRE 8, JDK 8, and OpenJDK 8. + +--- begin of LICENSE --- + +Copyright © OASIS Open 2020. All Rights Reserved. + + All capitalized terms in the following text have the meanings +assigned to them in the OASIS Intellectual Property Rights Policy (the +"OASIS IPR Policy"). The full Policy may be found at the OASIS website: +[http://www.oasis-open.org/policies-guidelines/ipr] + + This document and translations of it may be copied and furnished to +others, and derivative works that comment on or otherwise explain it or +assist in its implementation may be prepared, copied, published, and +distributed, in whole or in part, without restriction of any kind, +provided that the above copyright notice and this section are included +on all such copies and derivative works. However, this document itself +may not be modified in any way, including by removing the copyright +notice or references to OASIS, except as needed for the purpose of +developing any document or deliverable produced by an OASIS Technical +Committee (in which case the rules applicable to copyrights, as set +forth in the OASIS IPR Policy, must be followed) or as required to +translate it into languages other than English. + + The limited permissions granted above are perpetual and will not be +revoked by OASIS or its successors or assigns. + + This document and the information contained herein is provided on an +"AS IS" basis and OASIS DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, +INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE +INFORMATION HEREIN WILL NOT INFRINGE ANY OWNERSHIP RIGHTS OR ANY IMPLIED +WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. OASIS +AND ITS MEMBERS WILL NOT BE LIABLE FOR ANY DIRECT, INDIRECT, SPECIAL OR +CONSEQUENTIAL DAMAGES ARISING OUT OF ANY USE OF THIS DOCUMENT OR ANY +PART THEREOF. + + [OASIS requests that any OASIS Party or any other party that +believes it has patent claims that would necessarily be infringed by +implementations of this OASIS Standards Final Deliverable, to notify +OASIS TC Administrator and provide an indication of its willingness to +grant patent licenses to such patent claims in a manner consistent with +the IPR Mode of the OASIS Technical Committee that produced this +deliverable.] + + [OASIS invites any party to contact the OASIS TC Administrator if it +is aware of a claim of ownership of any patent claims that would +necessarily be infringed by implementations of this OASIS Standards +Final Deliverable by a patent holder that is not willing to provide a +license to such patent claims in a manner consistent with the IPR Mode +of the OASIS Technical Committee that produced this OASIS Standards +Final Deliverable. OASIS may include such claims on its website, but +disclaims any obligation to do so.] + + [OASIS takes no position regarding the validity or scope of any +intellectual property or other rights that might be claimed to pertain +to the implementation or use of the technology described in this OASIS +Standards Final Deliverable or the extent to which any license under +such rights might or might not be available; neither does it represent +that it has made any effort to identify any such rights. Information on +OASIS' procedures with respect to rights in any document or deliverable +produced by an OASIS Technical Committee can be found on the OASIS +website. Copies of claims of rights made available for publication and +any assurances of licenses to be made available, or the result of an +attempt made to obtain a general license or permission for the use of +such proprietary rights by implementers or users of this OASIS Standards +Final Deliverable, can be obtained from the OASIS TC Administrator. +OASIS makes no representation that any information or list of +intellectual property rights will at any time be complete, or that any +claims in such list are, in fact, Essential Claims.] + +--- end of LICENSE --- + +------------------------------------------------------------------------------- + +%% This notice is provided with respect to FreeType Distribution 2.12.1. The FreeType 2 font engine is copyrighted work and cannot be used legally without a software license. We provide the FreeType Engine @@ -3149,7 +3331,7 @@ products. *with* an advertising clause that forces you to explicitly cite the FreeType project in your product's documentation, such as follows: - Portions of this software are copyright (c) 2019 The FreeType + Portions of this software are copyright (c) 2022 The FreeType Project (www.freetype.org). All rights reserved. Full details provided at http://www.freetype.org/license.html @@ -3160,4 +3342,3 @@ products. http://www.gnu.org/licenses/gpl-2.0.txt ------------------------------------------------------------------------------- - diff --git a/resources/jre/bin/JAWTAccessBridge-64.dll b/resources/jre/bin/JAWTAccessBridge-64.dll index 0073fcc0..4b6f2207 100755 Binary files a/resources/jre/bin/JAWTAccessBridge-64.dll and b/resources/jre/bin/JAWTAccessBridge-64.dll differ diff --git a/resources/jre/bin/JavaAccessBridge-64.dll b/resources/jre/bin/JavaAccessBridge-64.dll deleted file mode 100755 index 06cee98e..00000000 Binary files a/resources/jre/bin/JavaAccessBridge-64.dll and /dev/null differ diff --git a/resources/jre/bin/WindowsAccessBridge-64.dll b/resources/jre/bin/WindowsAccessBridge-64.dll deleted file mode 100755 index e5b8f966..00000000 Binary files a/resources/jre/bin/WindowsAccessBridge-64.dll and /dev/null differ diff --git a/resources/jre/bin/awt.dll b/resources/jre/bin/awt.dll index c8898ad5..e6bc0400 100755 Binary files a/resources/jre/bin/awt.dll and b/resources/jre/bin/awt.dll differ diff --git a/resources/jre/bin/dt_shmem.dll b/resources/jre/bin/dt_shmem.dll deleted file mode 100755 index 78959a4a..00000000 Binary files a/resources/jre/bin/dt_shmem.dll and /dev/null differ diff --git a/resources/jre/bin/dt_socket.dll b/resources/jre/bin/dt_socket.dll deleted file mode 100755 index eda439b9..00000000 Binary files a/resources/jre/bin/dt_socket.dll and /dev/null differ diff --git a/resources/jre/bin/fontmanager.dll b/resources/jre/bin/fontmanager.dll index d87f918b..070d37fc 100755 Binary files a/resources/jre/bin/fontmanager.dll and b/resources/jre/bin/fontmanager.dll differ diff --git a/resources/jre/bin/freetype.dll b/resources/jre/bin/freetype.dll index 21662ef6..de3b43b7 100755 Binary files a/resources/jre/bin/freetype.dll and b/resources/jre/bin/freetype.dll differ diff --git a/resources/jre/bin/hprof.dll b/resources/jre/bin/hprof.dll deleted file mode 100755 index 7315184d..00000000 Binary files a/resources/jre/bin/hprof.dll and /dev/null differ diff --git a/resources/jre/bin/instrument.dll b/resources/jre/bin/instrument.dll deleted file mode 100755 index 9a5266a1..00000000 Binary files a/resources/jre/bin/instrument.dll and /dev/null differ diff --git a/resources/jre/bin/j2pcsc.dll b/resources/jre/bin/j2pcsc.dll index 1436467b..5cfe4272 100755 Binary files a/resources/jre/bin/j2pcsc.dll and b/resources/jre/bin/j2pcsc.dll differ diff --git a/resources/jre/bin/j2pkcs11.dll b/resources/jre/bin/j2pkcs11.dll deleted file mode 100755 index 591eddaa..00000000 Binary files a/resources/jre/bin/j2pkcs11.dll and /dev/null differ diff --git a/resources/jre/bin/jaas_nt.dll b/resources/jre/bin/jaas_nt.dll deleted file mode 100755 index cef94241..00000000 Binary files a/resources/jre/bin/jaas_nt.dll and /dev/null differ diff --git a/resources/jre/bin/jabswitch.exe b/resources/jre/bin/jabswitch.exe deleted file mode 100755 index 0caf6c6c..00000000 Binary files a/resources/jre/bin/jabswitch.exe and /dev/null differ diff --git a/resources/jre/bin/java-rmi.exe b/resources/jre/bin/java-rmi.exe deleted file mode 100755 index 8e935965..00000000 Binary files a/resources/jre/bin/java-rmi.exe and /dev/null differ diff --git a/resources/jre/bin/java.dll b/resources/jre/bin/java.dll index 2ce96019..d50d0e09 100755 Binary files a/resources/jre/bin/java.dll and b/resources/jre/bin/java.dll differ diff --git a/resources/jre/bin/java.exe b/resources/jre/bin/java.exe deleted file mode 100755 index 5cab2116..00000000 Binary files a/resources/jre/bin/java.exe and /dev/null differ diff --git a/resources/jre/bin/java_crw_demo.dll b/resources/jre/bin/java_crw_demo.dll deleted file mode 100755 index 72fee43f..00000000 Binary files a/resources/jre/bin/java_crw_demo.dll and /dev/null differ diff --git a/resources/jre/bin/javaw.exe b/resources/jre/bin/javaw.exe index fdda8dac..a8b68147 100755 Binary files a/resources/jre/bin/javaw.exe and b/resources/jre/bin/javaw.exe differ diff --git a/resources/jre/bin/javaw.exe.manifest b/resources/jre/bin/javaw.exe.manifest old mode 100644 new mode 100755 index c667b215..beba636f --- a/resources/jre/bin/javaw.exe.manifest +++ b/resources/jre/bin/javaw.exe.manifest @@ -1,12 +1,13 @@ - + Java(TM) SE javaw process - + + @@ -21,17 +22,18 @@ + - + - + - + - + - + diff --git a/resources/jre/bin/jawt.dll b/resources/jre/bin/jawt.dll index 6ad31321..87cfc6fe 100755 Binary files a/resources/jre/bin/jawt.dll and b/resources/jre/bin/jawt.dll differ diff --git a/resources/jre/bin/jdwp.dll b/resources/jre/bin/jdwp.dll deleted file mode 100755 index e9bcc210..00000000 Binary files a/resources/jre/bin/jdwp.dll and /dev/null differ diff --git a/resources/jre/bin/jfr.exe b/resources/jre/bin/jfr.exe deleted file mode 100755 index 9a8e033a..00000000 Binary files a/resources/jre/bin/jfr.exe and /dev/null differ diff --git a/resources/jre/bin/jjs.exe b/resources/jre/bin/jjs.exe deleted file mode 100755 index 07c48cb3..00000000 Binary files a/resources/jre/bin/jjs.exe and /dev/null differ diff --git a/resources/jre/bin/jli.dll b/resources/jre/bin/jli.dll deleted file mode 100755 index c87c02d4..00000000 Binary files a/resources/jre/bin/jli.dll and /dev/null differ diff --git a/resources/jre/bin/jpeg.dll b/resources/jre/bin/jpeg.dll deleted file mode 100755 index af20c89d..00000000 Binary files a/resources/jre/bin/jpeg.dll and /dev/null differ diff --git a/resources/jre/bin/jsdt.dll b/resources/jre/bin/jsdt.dll index 52400546..6629ba57 100755 Binary files a/resources/jre/bin/jsdt.dll and b/resources/jre/bin/jsdt.dll differ diff --git a/resources/jre/bin/jsound.dll b/resources/jre/bin/jsound.dll index 2fbb49d3..289cceb6 100755 Binary files a/resources/jre/bin/jsound.dll and b/resources/jre/bin/jsound.dll differ diff --git a/resources/jre/bin/jsoundds.dll b/resources/jre/bin/jsoundds.dll index b436a5ed..69484558 100755 Binary files a/resources/jre/bin/jsoundds.dll and b/resources/jre/bin/jsoundds.dll differ diff --git a/resources/jre/bin/keytool.exe b/resources/jre/bin/keytool.exe deleted file mode 100755 index 77a347ae..00000000 Binary files a/resources/jre/bin/keytool.exe and /dev/null differ diff --git a/resources/jre/bin/kinit.exe b/resources/jre/bin/kinit.exe deleted file mode 100755 index 9c87bc66..00000000 Binary files a/resources/jre/bin/kinit.exe and /dev/null differ diff --git a/resources/jre/bin/klist.exe b/resources/jre/bin/klist.exe deleted file mode 100755 index afdce966..00000000 Binary files a/resources/jre/bin/klist.exe and /dev/null differ diff --git a/resources/jre/bin/ktab.exe b/resources/jre/bin/ktab.exe deleted file mode 100755 index b5b2a908..00000000 Binary files a/resources/jre/bin/ktab.exe and /dev/null differ diff --git a/resources/jre/bin/lcms.dll b/resources/jre/bin/lcms.dll deleted file mode 100755 index 3b6cc4a9..00000000 Binary files a/resources/jre/bin/lcms.dll and /dev/null differ diff --git a/resources/jre/bin/management.dll b/resources/jre/bin/management.dll deleted file mode 100755 index 2c2fa061..00000000 Binary files a/resources/jre/bin/management.dll and /dev/null differ diff --git a/resources/jre/bin/mlib_image.dll b/resources/jre/bin/mlib_image.dll deleted file mode 100755 index c066a6df..00000000 Binary files a/resources/jre/bin/mlib_image.dll and /dev/null differ diff --git a/resources/jre/bin/msvcr100.dll b/resources/jre/bin/msvcr100.dll deleted file mode 100755 index 0318fb09..00000000 Binary files a/resources/jre/bin/msvcr100.dll and /dev/null differ diff --git a/resources/jre/bin/net.dll b/resources/jre/bin/net.dll index 728d6c74..3766ac31 100755 Binary files a/resources/jre/bin/net.dll and b/resources/jre/bin/net.dll differ diff --git a/resources/jre/bin/nio.dll b/resources/jre/bin/nio.dll index 43e7c836..a3cfd344 100755 Binary files a/resources/jre/bin/nio.dll and b/resources/jre/bin/nio.dll differ diff --git a/resources/jre/bin/npt.dll b/resources/jre/bin/npt.dll deleted file mode 100755 index 9b9168ce..00000000 Binary files a/resources/jre/bin/npt.dll and /dev/null differ diff --git a/resources/jre/bin/orbd.exe b/resources/jre/bin/orbd.exe deleted file mode 100755 index 77267236..00000000 Binary files a/resources/jre/bin/orbd.exe and /dev/null differ diff --git a/resources/jre/bin/pack200.exe b/resources/jre/bin/pack200.exe deleted file mode 100755 index 519a1ec6..00000000 Binary files a/resources/jre/bin/pack200.exe and /dev/null differ diff --git a/resources/jre/bin/policytool.exe b/resources/jre/bin/policytool.exe deleted file mode 100755 index de2bf64d..00000000 Binary files a/resources/jre/bin/policytool.exe and /dev/null differ diff --git a/resources/jre/bin/rmid.exe b/resources/jre/bin/rmid.exe deleted file mode 100755 index 257152db..00000000 Binary files a/resources/jre/bin/rmid.exe and /dev/null differ diff --git a/resources/jre/bin/rmiregistry.exe b/resources/jre/bin/rmiregistry.exe deleted file mode 100755 index 08871e51..00000000 Binary files a/resources/jre/bin/rmiregistry.exe and /dev/null differ diff --git a/resources/jre/bin/server/Xusage.txt b/resources/jre/bin/server/Xusage.txt old mode 100644 new mode 100755 diff --git a/resources/jre/bin/server/jvm.dll b/resources/jre/bin/server/jvm.dll index edaccc3b..a176a1ee 100755 Binary files a/resources/jre/bin/server/jvm.dll and b/resources/jre/bin/server/jvm.dll differ diff --git a/resources/jre/bin/servertool.exe b/resources/jre/bin/servertool.exe deleted file mode 100755 index 2a61f638..00000000 Binary files a/resources/jre/bin/servertool.exe and /dev/null differ diff --git a/resources/jre/bin/splashscreen.dll b/resources/jre/bin/splashscreen.dll deleted file mode 100755 index 9a22a5f9..00000000 Binary files a/resources/jre/bin/splashscreen.dll and /dev/null differ diff --git a/resources/jre/bin/sunec.dll b/resources/jre/bin/sunec.dll index 2939702f..d714f810 100755 Binary files a/resources/jre/bin/sunec.dll and b/resources/jre/bin/sunec.dll differ diff --git a/resources/jre/bin/sunmscapi.dll b/resources/jre/bin/sunmscapi.dll deleted file mode 100755 index f79b8186..00000000 Binary files a/resources/jre/bin/sunmscapi.dll and /dev/null differ diff --git a/resources/jre/bin/tnameserv.exe b/resources/jre/bin/tnameserv.exe deleted file mode 100755 index f3e8752a..00000000 Binary files a/resources/jre/bin/tnameserv.exe and /dev/null differ diff --git a/resources/jre/bin/unpack.dll b/resources/jre/bin/unpack.dll deleted file mode 100755 index b78fb00f..00000000 Binary files a/resources/jre/bin/unpack.dll and /dev/null differ diff --git a/resources/jre/bin/unpack200.exe b/resources/jre/bin/unpack200.exe deleted file mode 100755 index 933f7d90..00000000 Binary files a/resources/jre/bin/unpack200.exe and /dev/null differ diff --git a/resources/jre/bin/verify.dll b/resources/jre/bin/verify.dll deleted file mode 100755 index 3c29b179..00000000 Binary files a/resources/jre/bin/verify.dll and /dev/null differ diff --git a/resources/jre/bin/w2k_lsa_auth.dll b/resources/jre/bin/w2k_lsa_auth.dll deleted file mode 100755 index 003f706a..00000000 Binary files a/resources/jre/bin/w2k_lsa_auth.dll and /dev/null differ diff --git a/resources/jre/bin/zip.dll b/resources/jre/bin/zip.dll index 514454b2..6a0d54eb 100755 Binary files a/resources/jre/bin/zip.dll and b/resources/jre/bin/zip.dll differ diff --git a/resources/jre/lib/accessibility.properties b/resources/jre/lib/accessibility.properties old mode 100644 new mode 100755 diff --git a/resources/jre/lib/amd64/jvm.cfg b/resources/jre/lib/amd64/jvm.cfg old mode 100644 new mode 100755 diff --git a/resources/jre/lib/calendars.properties b/resources/jre/lib/calendars.properties old mode 100644 new mode 100755 diff --git a/resources/jre/lib/charsets.jar b/resources/jre/lib/charsets.jar index f563df23..e5675b5f 100755 Binary files a/resources/jre/lib/charsets.jar and b/resources/jre/lib/charsets.jar differ diff --git a/resources/jre/lib/cmm/CIEXYZ.pf b/resources/jre/lib/cmm/CIEXYZ.pf deleted file mode 100644 index 48c9dd80..00000000 Binary files a/resources/jre/lib/cmm/CIEXYZ.pf and /dev/null differ diff --git a/resources/jre/lib/cmm/GRAY.pf b/resources/jre/lib/cmm/GRAY.pf deleted file mode 100644 index 8af309cc..00000000 Binary files a/resources/jre/lib/cmm/GRAY.pf and /dev/null differ diff --git a/resources/jre/lib/cmm/LINEAR_RGB.pf b/resources/jre/lib/cmm/LINEAR_RGB.pf deleted file mode 100644 index 3e0b1777..00000000 Binary files a/resources/jre/lib/cmm/LINEAR_RGB.pf and /dev/null differ diff --git a/resources/jre/lib/cmm/PYCC.pf b/resources/jre/lib/cmm/PYCC.pf deleted file mode 100644 index 0cee0158..00000000 Binary files a/resources/jre/lib/cmm/PYCC.pf and /dev/null differ diff --git a/resources/jre/lib/cmm/sRGB.pf b/resources/jre/lib/cmm/sRGB.pf deleted file mode 100644 index 7b552add..00000000 Binary files a/resources/jre/lib/cmm/sRGB.pf and /dev/null differ diff --git a/resources/jre/lib/content-types.properties b/resources/jre/lib/content-types.properties old mode 100644 new mode 100755 diff --git a/resources/jre/lib/crs-agent.jar b/resources/jre/lib/crs-agent.jar deleted file mode 100644 index 59d0258b..00000000 Binary files a/resources/jre/lib/crs-agent.jar and /dev/null differ diff --git a/resources/jre/lib/currency.data b/resources/jre/lib/currency.data old mode 100644 new mode 100755 index 6be2222c..35d7cce3 Binary files a/resources/jre/lib/currency.data and b/resources/jre/lib/currency.data differ diff --git a/resources/jre/lib/ext/access-bridge-64.jar b/resources/jre/lib/ext/access-bridge-64.jar deleted file mode 100755 index 9a096e49..00000000 Binary files a/resources/jre/lib/ext/access-bridge-64.jar and /dev/null differ diff --git a/resources/jre/lib/ext/cldrdata.jar b/resources/jre/lib/ext/cldrdata.jar deleted file mode 100755 index 7704a3fd..00000000 Binary files a/resources/jre/lib/ext/cldrdata.jar and /dev/null differ diff --git a/resources/jre/lib/ext/dnsns.jar b/resources/jre/lib/ext/dnsns.jar index 70e80f1f..30d3fd8e 100755 Binary files a/resources/jre/lib/ext/dnsns.jar and b/resources/jre/lib/ext/dnsns.jar differ diff --git a/resources/jre/lib/ext/jaccess.jar b/resources/jre/lib/ext/jaccess.jar index d26ab3c7..73ff59e2 100755 Binary files a/resources/jre/lib/ext/jaccess.jar and b/resources/jre/lib/ext/jaccess.jar differ diff --git a/resources/jre/lib/ext/legacy8ujsse.jar b/resources/jre/lib/ext/legacy8ujsse.jar deleted file mode 100644 index 13e3190d..00000000 Binary files a/resources/jre/lib/ext/legacy8ujsse.jar and /dev/null differ diff --git a/resources/jre/lib/ext/localedata.jar b/resources/jre/lib/ext/localedata.jar index 8a28a50b..f3e8d6b6 100755 Binary files a/resources/jre/lib/ext/localedata.jar and b/resources/jre/lib/ext/localedata.jar differ diff --git a/resources/jre/lib/ext/meta-index b/resources/jre/lib/ext/meta-index index b121e25c..ca1db6d2 100755 --- a/resources/jre/lib/ext/meta-index +++ b/resources/jre/lib/ext/meta-index @@ -7,6 +7,9 @@ com/sun/java/accessibility/ ! cldrdata.jar sun/text sun/util +# crs-agent.jar +com/azul/ +META-INF/crslog.channels.cfg # dnsns.jar sun/net META-INF/services/sun.net.spi.nameservice.NameServiceDescriptor diff --git a/resources/jre/lib/ext/nashorn.jar b/resources/jre/lib/ext/nashorn.jar deleted file mode 100755 index 315aef26..00000000 Binary files a/resources/jre/lib/ext/nashorn.jar and /dev/null differ diff --git a/resources/jre/lib/ext/openjsse.jar b/resources/jre/lib/ext/openjsse.jar deleted file mode 100644 index 162344d7..00000000 Binary files a/resources/jre/lib/ext/openjsse.jar and /dev/null differ diff --git a/resources/jre/lib/ext/sunec.jar b/resources/jre/lib/ext/sunec.jar index bcc64367..0d787e75 100755 Binary files a/resources/jre/lib/ext/sunec.jar and b/resources/jre/lib/ext/sunec.jar differ diff --git a/resources/jre/lib/ext/sunjce_provider.jar b/resources/jre/lib/ext/sunjce_provider.jar index 20d2a0cd..88a1386f 100755 Binary files a/resources/jre/lib/ext/sunjce_provider.jar and b/resources/jre/lib/ext/sunjce_provider.jar differ diff --git a/resources/jre/lib/ext/sunmscapi.jar b/resources/jre/lib/ext/sunmscapi.jar deleted file mode 100755 index 972f1f00..00000000 Binary files a/resources/jre/lib/ext/sunmscapi.jar and /dev/null differ diff --git a/resources/jre/lib/ext/sunpkcs11.jar b/resources/jre/lib/ext/sunpkcs11.jar index c245406e..d7263c1f 100755 Binary files a/resources/jre/lib/ext/sunpkcs11.jar and b/resources/jre/lib/ext/sunpkcs11.jar differ diff --git a/resources/jre/lib/ext/zipfs.jar b/resources/jre/lib/ext/zipfs.jar index 91f6c303..3615b30c 100755 Binary files a/resources/jre/lib/ext/zipfs.jar and b/resources/jre/lib/ext/zipfs.jar differ diff --git a/resources/jre/lib/flavormap.properties b/resources/jre/lib/flavormap.properties old mode 100644 new mode 100755 diff --git a/resources/jre/lib/fontconfig.bfc b/resources/jre/lib/fontconfig.bfc old mode 100644 new mode 100755 diff --git a/resources/jre/lib/fontconfig.properties.src b/resources/jre/lib/fontconfig.properties.src old mode 100644 new mode 100755 diff --git a/resources/jre/lib/hijrah-config-umalqura.properties b/resources/jre/lib/hijrah-config-umalqura.properties old mode 100644 new mode 100755 diff --git a/resources/jre/lib/images/cursors/cursors.properties b/resources/jre/lib/images/cursors/cursors.properties old mode 100644 new mode 100755 diff --git a/resources/jre/lib/images/cursors/invalid32x32.gif b/resources/jre/lib/images/cursors/invalid32x32.gif old mode 100644 new mode 100755 diff --git a/resources/jre/lib/images/cursors/win32_CopyDrop32x32.gif b/resources/jre/lib/images/cursors/win32_CopyDrop32x32.gif old mode 100644 new mode 100755 diff --git a/resources/jre/lib/images/cursors/win32_CopyNoDrop32x32.gif b/resources/jre/lib/images/cursors/win32_CopyNoDrop32x32.gif old mode 100644 new mode 100755 diff --git a/resources/jre/lib/images/cursors/win32_LinkDrop32x32.gif b/resources/jre/lib/images/cursors/win32_LinkDrop32x32.gif old mode 100644 new mode 100755 diff --git a/resources/jre/lib/images/cursors/win32_LinkNoDrop32x32.gif b/resources/jre/lib/images/cursors/win32_LinkNoDrop32x32.gif old mode 100644 new mode 100755 diff --git a/resources/jre/lib/images/cursors/win32_MoveDrop32x32.gif b/resources/jre/lib/images/cursors/win32_MoveDrop32x32.gif old mode 100644 new mode 100755 diff --git a/resources/jre/lib/images/cursors/win32_MoveNoDrop32x32.gif b/resources/jre/lib/images/cursors/win32_MoveNoDrop32x32.gif old mode 100644 new mode 100755 diff --git a/resources/jre/lib/jce.jar b/resources/jre/lib/jce.jar index c0d1730c..af133a5f 100755 Binary files a/resources/jre/lib/jce.jar and b/resources/jre/lib/jce.jar differ diff --git a/resources/jre/lib/jfr.jar b/resources/jre/lib/jfr.jar index 0337c456..41c94903 100755 Binary files a/resources/jre/lib/jfr.jar and b/resources/jre/lib/jfr.jar differ diff --git a/resources/jre/lib/jfr/default.jfc b/resources/jre/lib/jfr/default.jfc deleted file mode 100644 index 4bf05cf9..00000000 --- a/resources/jre/lib/jfr/default.jfc +++ /dev/null @@ -1,895 +0,0 @@ - - - - - - - - true - everyChunk - - - - true - 1000 ms - - - - true - everyChunk - - - - true - 1000 ms - - - - true - 10 s - - - - true - 10 s - - - - true - 10 s - - - - true - 10 s - - - - true - 10 s - - - - true - - - - true - - - - true - true - 20 ms - - - - true - true - 20 ms - - - - true - true - 20 ms - - - - true - true - 20 ms - - - - false - true - 20 ms - - - - true - true - 0 ms - - - - true - true - 0 ms - - - - true - true - 0 ms - - - - true - true - - - - false - true - 0 ms - - - - false - true - - - - false - - - - true - beginChunk - - - - true - beginChunk - - - - true - 20 ms - - - - true - 20 ms - - - - true - 10 ms - - - - false - 10 ms - - - - false - 10 ms - - - - false - 10 ms - - - - false - 10 ms - - - - false - 10 ms - - - - true - 10 ms - - - - true - true - - - - true - everyChunk - - - - true - beginChunk - - - - true - beginChunk - - - - true - beginChunk - - - - true - beginChunk - - - - true - beginChunk - - - - true - beginChunk - - - - true - beginChunk - - - - true - - - - true - - - - true - - - - true - - - - true - - - - true - - - - true - - - - false - everyChunk - - - - true - everyChunk - - - - true - beginChunk - - - - true - beginChunk - - - - true - beginChunk - - - - true - beginChunk - - - - false - - - - true - - - - true - - - - true - - - - true - - - - true - - - - true - true - - - - true - true - - - - true - - - - true - 0 ms - - - - true - 0 ms - - - - true - 0 ms - - - - true - 0 ms - - - - true - 0 ms - - - - true - 0 ms - - - - true - 0 ms - - - - true - 0 ms - - - - false - 0 ms - - - - false - 0 ms - - - - true - 0 ms - - - - true - - - - true - - - - true - - - - true - - - - true - - - - true - - - - true - - - - true - - - - true - - - - false - - - - false - - - - true - - - - false - true - - - - true - - - - false - everyChunk - - - - false - - - - true - false - 0 ns - - - - true - beginChunk - - - - true - 1000 ms - - - - true - 1000 ms - - - - true - 60 s - - - - false - - - - false - - - - true - beginChunk - - - - true - everyChunk - - - - true - 100 ms - - - - true - beginChunk - - - - true - everyChunk - - - - true - - - - true - beginChunk - - - - true - beginChunk - - - - true - beginChunk - - - - true - 10 s - - - - true - 1000 ms - - - - true - 10 s - - - - true - beginChunk - - - - true - endChunk - - - - true - 5 s - - - - true - beginChunk - - - - true - everyChunk - - - - false - true - - - - false - true - - - - true - everyChunk - - - - true - true - 20 ms - - - - true - true - 20 ms - - - - true - true - 20 ms - - - - true - true - 20 ms - - - - true - true - 20 ms - - - - false - true - - - - false - true - - - - false - true - - - - false - true - - - - false - true - - - - true - true - - - - true - 1000 ms - - - - true - - - - true - - - - true - - - - true - - - - true - 10 ms - - - - true - 0 ms - - - - true - 10 ms - - - - true - 10 ms - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 20 ms - - 20 ms - - 20 ms - - false - - - - diff --git a/resources/jre/lib/jfr/profile.jfc b/resources/jre/lib/jfr/profile.jfc deleted file mode 100644 index 7a3623a1..00000000 --- a/resources/jre/lib/jfr/profile.jfc +++ /dev/null @@ -1,896 +0,0 @@ - - - - - - - - true - everyChunk - - - - true - 1000 ms - - - - true - everyChunk - - - - true - 1000 ms - - - - true - 10 s - - - - true - 10 s - - - - true - 10 s - - - - true - 10 s - - - - true - 10 s - - - - true - - - - true - - - - true - true - 10 ms - - - - true - true - 10 ms - - - - true - true - 10 ms - - - - true - true - 10 ms - - - - true - true - 10 ms - - - - true - true - 0 ms - - - - true - true - 0 ms - - - - true - true - 0 ms - - - - true - true - - - - false - true - 0 ms - - - - false - true - - - - false - - - - true - beginChunk - - - - true - beginChunk - - - - true - 10 ms - - - - true - 20 ms - - - - true - 0 ms - - - - false - 0 ms - - - - false - 0 ms - - - - false - 0 ms - - - - false - 0 ms - - - - false - 0 ms - - - - true - 0 ms - - - - true - true - - - - true - 60 s - - - - true - beginChunk - - - - true - beginChunk - - - - true - beginChunk - - - - true - beginChunk - - - - true - beginChunk - - - - true - beginChunk - - - - true - beginChunk - - - - true - - - - true - - - - true - - - - true - - - - true - - - - true - - - - true - - - - false - everyChunk - - - - true - everyChunk - - - - true - beginChunk - - - - true - beginChunk - - - - true - beginChunk - - - - true - beginChunk - - - - false - - - - true - - - - true - - - - true - - - - true - - - - true - - - - true - true - - - - true - true - - - - true - - - - true - 0 ms - - - - true - 0 ms - - - - true - 0 ms - - - - true - 0 ms - - - - true - 0 ms - - - - true - 0 ms - - - - true - 0 ms - - - - true - 0 ms - - - - false - 0 ms - - - - false - 0 ms - - - - true - 0 ms - - - - true - - - - true - - - - true - - - - true - - - - true - - - - true - - - - true - - - - true - - - - true - - - - true - - - - true - - - - true - - - - false - true - - - - true - - - - false - everyChunk - - - - false - - - - true - true - 0 ns - - - - true - beginChunk - - - - true - 1000 ms - - - - true - 100 ms - - - - true - 10 s - - - - true - - - - false - - - - true - beginChunk - - - - true - everyChunk - - - - true - 100 ms - - - - true - beginChunk - - - - true - everyChunk - - - - true - - - - true - beginChunk - - - - true - beginChunk - - - - true - beginChunk - - - - true - 10 s - - - - true - 1000 ms - - - - true - 10 s - - - - true - beginChunk - - - - true - endChunk - - - - true - 5 s - - - - true - beginChunk - - - - true - everyChunk - - - - true - true - - - - true - true - - - - true - everyChunk - - - - true - true - 10 ms - - - - true - true - 10 ms - - - - true - true - 10 ms - - - - true - true - 10 ms - - - - true - true - 10 ms - - - - false - true - - - - false - true - - - - false - true - - - - false - true - - - - false - true - - - - true - true - - - - true - 1000 ms - - - - true - - - - true - - - - true - - - - true - - - - true - 10 ms - - - - true - 0 ms - - - - 10 ms - true - - - - true - 10 ms - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 10 ms - - 10 ms - - 10 ms - - false - - - - diff --git a/resources/jre/lib/jsse.jar b/resources/jre/lib/jsse.jar index 4e58b25b..f97d531d 100755 Binary files a/resources/jre/lib/jsse.jar and b/resources/jre/lib/jsse.jar differ diff --git a/resources/jre/lib/jvm.hprof.txt b/resources/jre/lib/jvm.hprof.txt old mode 100644 new mode 100755 diff --git a/resources/jre/lib/logging.properties b/resources/jre/lib/logging.properties old mode 100644 new mode 100755 diff --git a/resources/jre/lib/management-agent.jar b/resources/jre/lib/management-agent.jar index 16b22c6c..ba62fc12 100755 Binary files a/resources/jre/lib/management-agent.jar and b/resources/jre/lib/management-agent.jar differ diff --git a/resources/jre/lib/management/jmxremote.access b/resources/jre/lib/management/jmxremote.access deleted file mode 100644 index ce80b47a..00000000 --- a/resources/jre/lib/management/jmxremote.access +++ /dev/null @@ -1,79 +0,0 @@ -###################################################################### -# Default Access Control File for Remote JMX(TM) Monitoring -###################################################################### -# -# Access control file for Remote JMX API access to monitoring. -# This file defines the allowed access for different roles. The -# password file (jmxremote.password by default) defines the roles and their -# passwords. To be functional, a role must have an entry in -# both the password and the access files. -# -# The default location of this file is $JRE/lib/management/jmxremote.access -# You can specify an alternate location by specifying a property in -# the management config file $JRE/lib/management/management.properties -# (See that file for details) -# -# The file format for password and access files is syntactically the same -# as the Properties file format. The syntax is described in the Javadoc -# for java.util.Properties.load. -# A typical access file has multiple lines, where each line is blank, -# a comment (like this one), or an access control entry. -# -# An access control entry consists of a role name, and an -# associated access level. The role name is any string that does not -# itself contain spaces or tabs. It corresponds to an entry in the -# password file (jmxremote.password). The access level is one of the -# following: -# "readonly" grants access to read attributes of MBeans. -# For monitoring, this means that a remote client in this -# role can read measurements but cannot perform any action -# that changes the environment of the running program. -# "readwrite" grants access to read and write attributes of MBeans, -# to invoke operations on them, and optionally -# to create or remove them. This access should be granted -# only to trusted clients, since they can potentially -# interfere with the smooth operation of a running program. -# -# The "readwrite" access level can optionally be followed by the "create" and/or -# "unregister" keywords. The "unregister" keyword grants access to unregister -# (delete) MBeans. The "create" keyword grants access to create MBeans of a -# particular class or of any class matching a particular pattern. Access -# should only be granted to create MBeans of known and trusted classes. -# -# For example, the following entry would grant readwrite access -# to "controlRole", as well as access to create MBeans of the class -# javax.management.monitor.CounterMonitor and to unregister any MBean: -# controlRole readwrite \ -# create javax.management.monitor.CounterMonitorMBean \ -# unregister -# or equivalently: -# controlRole readwrite unregister create javax.management.monitor.CounterMBean -# -# The following entry would grant readwrite access as well as access to create -# MBeans of any class in the packages javax.management.monitor and -# javax.management.timer: -# controlRole readwrite \ -# create javax.management.monitor.*,javax.management.timer.* \ -# unregister -# -# The \ character is defined in the Properties file syntax to allow continuation -# lines as shown here. A * in a class pattern matches a sequence of characters -# other than dot (.), so javax.management.monitor.* matches -# javax.management.monitor.CounterMonitor but not -# javax.management.monitor.foo.Bar. -# -# A given role should have at most one entry in this file. If a role -# has no entry, it has no access. -# If multiple entries are found for the same role name, then the last -# access entry is used. -# -# -# Default access control entries: -# o The "monitorRole" role has readonly access. -# o The "controlRole" role has readwrite access and can create the standard -# Timer and Monitor MBeans defined by the JMX API. - -monitorRole readonly -controlRole readwrite \ - create javax.management.monitor.*,javax.management.timer.* \ - unregister diff --git a/resources/jre/lib/management/jmxremote.password.template b/resources/jre/lib/management/jmxremote.password.template deleted file mode 100644 index a7e7daac..00000000 --- a/resources/jre/lib/management/jmxremote.password.template +++ /dev/null @@ -1,64 +0,0 @@ -# ---------------------------------------------------------------------- -# Template for jmxremote.password -# -# o Copy this template to jmxremote.password -# o Set the user/password entries in jmxremote.password -# o Change the permission of jmxremote.password to read-only -# by the owner. -# -# See below for the location of jmxremote.password file. -# ---------------------------------------------------------------------- - -############################################################## -# Password File for Remote JMX Monitoring -############################################################## -# -# Password file for Remote JMX API access to monitoring. This -# file defines the different roles and their passwords. The access -# control file (jmxremote.access by default) defines the allowed -# access for each role. To be functional, a role must have an entry -# in both the password and the access files. -# -# Default location of this file is $JRE/lib/management/jmxremote.password -# You can specify an alternate location by specifying a property in -# the management config file $JRE/lib/management/management.properties -# or by specifying a system property (See that file for details). - - -############################################################## -# File permissions of the jmxremote.password file -############################################################## -# Since there are cleartext passwords stored in this file, -# this file must be readable by ONLY the owner, -# otherwise the program will exit with an error. -# -# The file format for password and access files is syntactically the same -# as the Properties file format. The syntax is described in the Javadoc -# for java.util.Properties.load. -# Typical password file has multiple lines, where each line is blank, -# a comment (like this one), or a password entry. -# -# -# A password entry consists of a role name and an associated -# password. The role name is any string that does not itself contain -# spaces or tabs. The password is again any string that does not -# contain spaces or tabs. Note that passwords appear in the clear in -# this file, so it is a good idea not to use valuable passwords. -# -# A given role should have at most one entry in this file. If a role -# has no entry, it has no access. -# If multiple entries are found for the same role name, then the last one -# is used. -# -# In a typical installation, this file can be read by anybody on the -# local machine, and possibly by people on other machines. -# For # security, you should either restrict the access to this file, -# or specify another, less accessible file in the management config file -# as described above. -# -# Following are two commented-out entries. The "measureRole" role has -# password "QED". The "controlRole" role has password "R&D". -# -# monitorRole QED -# controlRole R&D - diff --git a/resources/jre/lib/management/management.properties b/resources/jre/lib/management/management.properties deleted file mode 100644 index 70efa2ee..00000000 --- a/resources/jre/lib/management/management.properties +++ /dev/null @@ -1,331 +0,0 @@ -##################################################################### -# Default Configuration File for Java Platform Management -##################################################################### -# -# The Management Configuration file (in java.util.Properties format) -# will be read if one of the following system properties is set: -# -Dcom.sun.management.jmxremote.port= -# or -Dcom.sun.management.snmp.port= -# or -Dcom.sun.management.config.file= -# -# The default Management Configuration file is: -# -# $JRE/lib/management/management.properties -# -# Another location for the Management Configuration File can be specified -# by the following property on the Java command line: -# -# -Dcom.sun.management.config.file= -# -# If -Dcom.sun.management.config.file= is set, the port -# number for the management agent can be specified in the config file -# using the following lines: -# -# ################ Management Agent Port ######################### -# -# For setting the JMX RMI agent port use the following line -# com.sun.management.jmxremote.port= -# -# For setting the SNMP agent port use the following line -# com.sun.management.snmp.port= - -##################################################################### -# Optional Instrumentation -##################################################################### -# -# By default only the basic instrumentation with low overhead is on. -# The following properties allow to selectively turn on optional -# instrumentation which are off by default and may have some -# additional overhead. -# -# com.sun.management.enableThreadContentionMonitoring -# -# This option enables thread contention monitoring if the -# Java virtual machine supports such instrumentation. -# Refer to the specification for the java.lang.management.ThreadMBean -# interface - see isThreadContentionMonitoringSupported() method. -# - -# To enable thread contention monitoring, uncomment the following line -# com.sun.management.enableThreadContentionMonitoring - -##################################################################### -# SNMP Management Properties -##################################################################### -# -# If the system property -Dcom.sun.management.snmp.port= -# is set then -# - The SNMP agent (with the Java virtual machine MIB) is started -# that listens on the specified port for incoming SNMP requests. -# - the following properties for read for SNMP management. -# -# The configuration can be specified only at startup time. -# Later changes to the above system property (e.g. via setProperty method), this -# config file, or the ACL file has no effect to the running SNMP agent. -# - -# -# ##################### SNMP Trap Port ######################### -# -# com.sun.management.snmp.trap= -# Specifies the remote port number at which managers are expected -# to listen for trap. For each host defined in the ACL file, -# the SNMP agent will send traps at : -# Default for this property is 162. -# - -# To set port for sending traps to a different port use the following line -# com.sun.management.snmp.trap= - -# -# ################ SNMP listen interface ######################### -# -# com.sun.management.snmp.interface= -# Specifies the local interface on which the SNMP agent will bind. -# This is useful when running on machines which have several -# interfaces defined. It makes it possible to listen to a specific -# subnet accessible through that interface. -# Default for this property is "localhost". -# -# The format of the value for that property is any string accepted -# by java.net.InetAddress.getByName(String). -# - -# For restricting the port on which SNMP agent listens use the following line -# com.sun.management.snmp.interface= - -# -# #################### SNMP ACL file ######################### -# -# com.sun.management.snmp.acl=true|false -# Default for this property is true. (Case for true/false ignored) -# If this property is specified as false then the ACL file -# is not checked: all manager hosts are allowed all access. -# - -# For SNMP without checking ACL file uncomment the following line -# com.sun.management.snmp.acl=false - -# -# com.sun.management.snmp.acl.file=filepath -# Specifies location for ACL file -# This is optional - default location is -# $JRE/lib/management/snmp.acl -# -# If the property "com.sun.management.snmp.acl" is set to false, -# then this property and the ACL file are ignored. -# Otherwise the ACL file must exist and be in the valid format. -# If the ACL file is empty or non existent then no access is allowed. -# -# The SNMP agent will read the ACL file at startup time. -# Modification to the ACL file has no effect to any running SNMP -# agents which read that ACL file at startup. -# - -# For a non-default acl file location use the following line -# com.sun.management.snmp.acl.file=filepath - -##################################################################### -# RMI Management Properties -##################################################################### -# -# If system property -Dcom.sun.management.jmxremote.port= -# is set then -# - A MBean server is started -# - JRE Platform MBeans are registered in the MBean server -# - RMI connector is published in a private readonly registry at -# specified port using a well known name, "jmxrmi" -# - the following properties are read for JMX remote management. -# -# The configuration can be specified only at startup time. -# Later changes to above system property (e.g. via setProperty method), -# this config file, the password file, or the access file have no effect to the -# running MBean server, the connector, or the registry. -# - -# -# ########## RMI connector settings for local management ########## -# -# com.sun.management.jmxremote.local.only=true|false -# Default for this property is true. (Case for true/false ignored) -# If this property is specified as true then the local JMX RMI connector -# server will only accept connection requests from clients running on -# the host where the out-of-the-box JMX management agent is running. -# In order to ensure backwards compatibility this property could be -# set to false. However, deploying the local management agent in this -# way is discouraged because the local JMX RMI connector server will -# accept connection requests from any client either local or remote. -# For remote management the remote JMX RMI connector server should -# be used instead with authentication and SSL/TLS encryption enabled. -# - -# For allowing the local management agent accept local -# and remote connection requests use the following line -# com.sun.management.jmxremote.local.only=false - -# -# ###################### RMI SSL ############################# -# -# com.sun.management.jmxremote.ssl=true|false -# Default for this property is true. (Case for true/false ignored) -# If this property is specified as false then SSL is not used. -# - -# For RMI monitoring without SSL use the following line -# com.sun.management.jmxremote.ssl=false - -# com.sun.management.jmxremote.ssl.config.file=filepath -# Specifies the location of the SSL configuration file. A properties -# file can be used to supply the keystore and truststore location and -# password settings thus avoiding to pass them as cleartext in the -# command-line. -# -# The current implementation of the out-of-the-box management agent will -# look up and use the properties specified below to configure the SSL -# keystore and truststore, if present: -# javax.net.ssl.keyStore= -# javax.net.ssl.keyStorePassword= -# javax.net.ssl.trustStore= -# javax.net.ssl.trustStorePassword= -# Any other properties in the file will be ignored. This will allow us -# to extend the property set in the future if required by the default -# SSL implementation. -# -# If the property "com.sun.management.jmxremote.ssl" is set to false, -# then this property is ignored. -# - -# For supplying the keystore settings in a file use the following line -# com.sun.management.jmxremote.ssl.config.file=filepath - -# com.sun.management.jmxremote.ssl.enabled.cipher.suites= -# The value of this property is a string that is a comma-separated list -# of SSL/TLS cipher suites to enable. This property can be specified in -# conjunction with the previous property "com.sun.management.jmxremote.ssl" -# in order to control which particular SSL/TLS cipher suites are enabled -# for use by accepted connections. If this property is not specified then -# the SSL/TLS RMI Server Socket Factory uses the SSL/TLS cipher suites that -# are enabled by default. -# - -# com.sun.management.jmxremote.ssl.enabled.protocols= -# The value of this property is a string that is a comma-separated list -# of SSL/TLS protocol versions to enable. This property can be specified in -# conjunction with the previous property "com.sun.management.jmxremote.ssl" -# in order to control which particular SSL/TLS protocol versions are -# enabled for use by accepted connections. If this property is not -# specified then the SSL/TLS RMI Server Socket Factory uses the SSL/TLS -# protocol versions that are enabled by default. -# - -# com.sun.management.jmxremote.ssl.need.client.auth=true|false -# Default for this property is false. (Case for true/false ignored) -# If this property is specified as true in conjunction with the previous -# property "com.sun.management.jmxremote.ssl" then the SSL/TLS RMI Server -# Socket Factory will require client authentication. -# - -# For RMI monitoring with SSL client authentication use the following line -# com.sun.management.jmxremote.ssl.need.client.auth=true - -# com.sun.management.jmxremote.registry.ssl=true|false -# Default for this property is false. (Case for true/false ignored) -# If this property is specified as true then the RMI registry used -# to bind the RMIServer remote object is protected with SSL/TLS -# RMI Socket Factories that can be configured with the properties: -# com.sun.management.jmxremote.ssl.config.file -# com.sun.management.jmxremote.ssl.enabled.cipher.suites -# com.sun.management.jmxremote.ssl.enabled.protocols -# com.sun.management.jmxremote.ssl.need.client.auth -# If the two properties below are true at the same time, i.e. -# com.sun.management.jmxremote.ssl=true -# com.sun.management.jmxremote.registry.ssl=true -# then the RMIServer remote object and the RMI registry are -# both exported with the same SSL/TLS RMI Socket Factories. -# - -# For using an SSL/TLS protected RMI registry use the following line -# com.sun.management.jmxremote.registry.ssl=true - -# -# ################ RMI User authentication ################ -# -# com.sun.management.jmxremote.authenticate=true|false -# Default for this property is true. (Case for true/false ignored) -# If this property is specified as false then no authentication is -# performed and all users are allowed all access. -# - -# For RMI monitoring without any checking use the following line -# com.sun.management.jmxremote.authenticate=false - -# -# ################ RMI Login configuration ################### -# -# com.sun.management.jmxremote.login.config= -# Specifies the name of a JAAS login configuration entry to use when -# authenticating users of RMI monitoring. -# -# Setting this property is optional - the default login configuration -# specifies a file-based authentication that uses the password file. -# -# When using this property to override the default login configuration -# then the named configuration entry must be in a file that gets loaded -# by JAAS. In addition, the login module(s) specified in the configuration -# should use the name and/or password callbacks to acquire the user's -# credentials. See the NameCallback and PasswordCallback classes in the -# javax.security.auth.callback package for more details. -# -# If the property "com.sun.management.jmxremote.authenticate" is set to -# false, then this property and the password & access files are ignored. -# - -# For a non-default login configuration use the following line -# com.sun.management.jmxremote.login.config= - -# -# ################ RMI Password file location ################## -# -# com.sun.management.jmxremote.password.file=filepath -# Specifies location for password file -# This is optional - default location is -# $JRE/lib/management/jmxremote.password -# -# If the property "com.sun.management.jmxremote.authenticate" is set to -# false, then this property and the password & access files are ignored. -# Otherwise the password file must exist and be in the valid format. -# If the password file is empty or non-existent then no access is allowed. -# - -# For a non-default password file location use the following line -# com.sun.management.jmxremote.password.file=filepath - -# -# ################ RMI Access file location ##################### -# -# com.sun.management.jmxremote.access.file=filepath -# Specifies location for access file -# This is optional - default location is -# $JRE/lib/management/jmxremote.access -# -# If the property "com.sun.management.jmxremote.authenticate" is set to -# false, then this property and the password & access files are ignored. -# Otherwise, the access file must exist and be in the valid format. -# If the access file is empty or non-existent then no access is allowed. -# - -# For a non-default password file location use the following line -# com.sun.management.jmxremote.access.file=filepath -# - -# ################ Management agent listen interface ######################### -# -# com.sun.management.jmxremote.host= -# Specifies the local interface on which the JMX RMI agent will bind. -# This is useful when running on machines which have several -# interfaces defined. It makes it possible to listen to a specific -# subnet accessible through that interface. -# -# The format of the value for that property is any string accepted -# by java.net.InetAddress.getByName(String). -# diff --git a/resources/jre/lib/management/snmp.acl.template b/resources/jre/lib/management/snmp.acl.template deleted file mode 100644 index 0e766764..00000000 --- a/resources/jre/lib/management/snmp.acl.template +++ /dev/null @@ -1,110 +0,0 @@ -# ---------------------------------------------------------------------- -# Template for SNMP Access Control List File -# -# o Copy this template to snmp.acl -# o Set access control for SNMP support -# o Change the permission of snmp.acl to be read-only -# by the owner. -# -# See below for the location of snmp.acl file. -# ---------------------------------------------------------------------- - -############################################################ -# SNMP Access Control List File -############################################################ -# -# Default location of this file is $JRE/lib/management/snmp.acl. -# You can specify an alternate location by specifying a property in -# the management config file $JRE/lib/management/management.properties -# or by specifying a system property (See that file for details). -# - - -############################################################## -# File permissions of the snmp.acl file -############################################################## -# -# Since there are cleartext community strings stored in this file, -# this ACL file must be readable by ONLY the owner, -# otherwise the program will exit with an error. -# -############################################################## -# Format of the acl group -############################################################## -# -# communities: a list of SNMP community strings to which the -# access control applies separated by commas. -# -# access: either "read-only" or "read-write". -# -# managers: a list of hosts to be granted the access rights. -# Each can be expressed as any one of the following: -# - hostname: hubble -# - ip v4 and v6 addresses: 123.456.789.12 , fe80::a00:20ff:fe9b:ea82 -# - ip v4 and v6 netmask prefix notation: 123.456.789.0/24, -# fe80::a00:20ff:fe9b:ea82/64 -# see RFC 2373 (http://www.ietf.org/rfc/rfc2373.txt) -# -# An example of two community groups for multiple hosts: -# acl = { -# { -# communities = public, private -# access = read-only -# managers = hubble, snowbell, nanak -# } -# { -# communities = jerry -# access = read-write -# managers = hubble, telescope -# } -# } -# -############################################################## -# Format of the trap group -############################################################## -# -# trap-community: a single SNMP community string that will be included -# in the traps sent to the hosts. -# -# hosts: a list of hosts to which the SNMP agent will send traps. -# -# An example of two trap community definitions for multiple hosts: -# trap = { -# { -# trap-community = public -# hosts = hubble, snowbell -# } -# { -# trap-community = private -# hosts = telescope -# } -# } -# -############################################################ -# -# Update the community strings (public and private) below -# before copying this template file -# -# Common SNMP ACL Example -# ------------------------ -# -# o Only localhost can connect, and access rights -# are limited to read-only -# o Traps are sent to localhost only -# -# -# acl = { -# { -# communities = public, private -# access = read-only -# managers = localhost -# } -# } -# -# -# trap = { -# { -# trap-community = public -# hosts = localhost -# } -# } diff --git a/resources/jre/lib/meta-index b/resources/jre/lib/meta-index index 013540e5..75b9eced 100755 --- a/resources/jre/lib/meta-index +++ b/resources/jre/lib/meta-index @@ -2,30 +2,11 @@ % WARNING: this file is auto-generated; do not edit % UNSUPPORTED: this file and its format may change and/or % may be removed in a future release +! cat.jar +com/azul/ # charsets.jar sun/awt sun/nio -# crs-agent.jar -META-INF/NOTICE -META-INF/LICENSE -META-INF/maven/com.fasterxml.jackson.core/jackson-databind/pom.xml -META-INF/maven/com.azul.crs/crs-log/pom.properties -META-INF/maven/com.fasterxml.jackson.core/jackson-core/pom.properties -META-INF/maven/com.azul.crs/crs-client/pom.properties -META-INF/maven/com.fasterxml.jackson.core/jackson-annotations/pom.properties -META-INF/services/com.fasterxml.jackson.core.ObjectCodec -META-INF/maven/com.fasterxml.jackson.core/jackson-databind/pom.properties -com/azul/ -META-INF/maven/com.azul.crs/crs-shared/pom.xml -META-INF/maven/com.azul.crs/crs-z-agent/pom.xml -META-INF/maven/com.azul.crs/crs-client/pom.xml -META-INF/maven/com.fasterxml.jackson.core/jackson-annotations/pom.xml -META-INF/maven/com.azul.crs/crs-shared/pom.properties -META-INF/services/com.fasterxml.jackson.core.JsonFactory -META-INF/maven/com.fasterxml.jackson.core/jackson-core/pom.xml -META-INF/maven/com.azul.crs/crs-z-agent/pom.properties -META-INF/crslog.channels.cfg -META-INF/maven/com.azul.crs/crs-log/pom.xml ! jce.jar javax/crypto sun/security diff --git a/resources/jre/lib/net.properties b/resources/jre/lib/net.properties old mode 100644 new mode 100755 diff --git a/resources/jre/lib/psfont.properties.ja b/resources/jre/lib/psfont.properties.ja old mode 100644 new mode 100755 diff --git a/resources/jre/lib/psfontj2d.properties b/resources/jre/lib/psfontj2d.properties old mode 100644 new mode 100755 diff --git a/resources/jre/lib/resources.jar b/resources/jre/lib/resources.jar index 05180a0a..a8667e3c 100755 Binary files a/resources/jre/lib/resources.jar and b/resources/jre/lib/resources.jar differ diff --git a/resources/jre/lib/rt.jar b/resources/jre/lib/rt.jar index 81377aa7..fce78b01 100755 Binary files a/resources/jre/lib/rt.jar and b/resources/jre/lib/rt.jar differ diff --git a/resources/jre/lib/security/blacklisted.certs b/resources/jre/lib/security/blacklisted.certs old mode 100644 new mode 100755 diff --git a/resources/jre/lib/security/cacerts b/resources/jre/lib/security/cacerts old mode 100644 new mode 100755 index 4bee5ce5..ddfd5f5f Binary files a/resources/jre/lib/security/cacerts and b/resources/jre/lib/security/cacerts differ diff --git a/resources/jre/lib/security/java.policy b/resources/jre/lib/security/java.policy old mode 100644 new mode 100755 index 59d99a96..8b628972 --- a/resources/jre/lib/security/java.policy +++ b/resources/jre/lib/security/java.policy @@ -36,6 +36,7 @@ grant { permission java.util.PropertyPermission "line.separator", "read"; permission java.util.PropertyPermission "java.specification.version", "read"; + permission java.util.PropertyPermission "java.specification.maintenance.version", "read"; permission java.util.PropertyPermission "java.specification.vendor", "read"; permission java.util.PropertyPermission "java.specification.name", "read"; diff --git a/resources/jre/lib/security/java.security b/resources/jre/lib/security/java.security old mode 100644 new mode 100755 index 62f4aed9..b433064a --- a/resources/jre/lib/security/java.security +++ b/resources/jre/lib/security/java.security @@ -609,6 +609,26 @@ jdk.certpath.disabledAlgorithms=MD2, MD5, SHA1 jdkCA & usage TLSServer, \ RSA keySize < 1024, DSA keySize < 1024, EC keySize < 224, \ include jdk.disabled.namedCurves +# +# Legacy algorithms for certification path (CertPath) processing and +# signed JAR files. +# +# In some environments, a certain algorithm or key length may be undesirable +# but is not yet disabled. +# +# Tools such as keytool and jarsigner may emit warnings when these legacy +# algorithms are used. See the man pages for those tools for more information. +# +# The syntax is the same as the "jdk.certpath.disabledAlgorithms" and +# "jdk.jar.disabledAlgorithms" security properties. +# +# Note: This property is currently used by the JDK Reference +# implementation. It is not guaranteed to be examined and used by other +# implementations. + +jdk.security.legacyAlgorithms=SHA1, \ + RSA keySize < 2048, DSA keySize < 2048 + # # Algorithm restrictions for signed JAR files # @@ -650,8 +670,8 @@ jdk.certpath.disabledAlgorithms=MD2, MD5, SHA1 jdkCA & usage TLSServer, \ # # See "jdk.certpath.disabledAlgorithms" for syntax descriptions. # -jdk.jar.disabledAlgorithms=MD2, MD5, RSA keySize < 1024, - DSA keySize < 1024, include jdk.disabled.namedCurves +jdk.jar.disabledAlgorithms=MD2, MD5, RSA keySize < 1024, \ + DSA keySize < 1024, include jdk.disabled.namedCurves # # Algorithm restrictions for Secure Socket Layer/Transport Layer Security @@ -683,8 +703,8 @@ jdk.jar.disabledAlgorithms=MD2, MD5, RSA keySize < 1024, # # Example: # jdk.tls.disabledAlgorithms=MD5, SSLv3, DSA, RSA keySize < 2048 -jdk.tls.disabledAlgorithms=SSLv3, RC4, DES, MD5withRSA, DH keySize < 1024, \ - EC keySize < 224, 3DES_EDE_CBC, anon, NULL, \ +jdk.tls.disabledAlgorithms=SSLv3, TLSv1, TLSv1.1, RC4, DES, MD5withRSA, \ + DH keySize < 1024, EC keySize < 224, 3DES_EDE_CBC, anon, NULL, \ include jdk.disabled.namedCurves # Legacy algorithms for Secure Socket Layer/Transport Layer Security (SSL/TLS) @@ -1076,6 +1096,77 @@ jdk.xml.dsig.secureValidationPolicy=\ jceks.key.serialFilter = java.lang.Enum;java.security.KeyRep;\ java.security.KeyRep$Type;javax.crypto.spec.SecretKeySpec;!* +# +# PKCS12 KeyStore properties +# +# The following properties, if configured, are used by the PKCS12 KeyStore +# implementation during the creation of a new keystore. Several of the +# properties may also be used when modifying an existing keystore. The +# properties can be overridden by a KeyStore API that specifies its own +# algorithms and parameters. +# +# If an existing PKCS12 keystore is loaded and then stored, the algorithm and +# parameter used to generate the existing Mac will be reused. If the existing +# keystore does not have a Mac, no Mac will be created while storing. If there +# is at least one certificate in the existing keystore, the algorithm and +# parameters used to encrypt the last certificate in the existing keystore will +# be reused to encrypt all certificates while storing. If the last certificate +# in the existing keystore is not encrypted, all certificates will be stored +# unencrypted. If there is no certificate in the existing keystore, any newly +# added certificate will be encrypted (or stored unencrypted if algorithm +# value is "NONE") using the "keystore.pkcs12.certProtectionAlgorithm" and +# "keystore.pkcs12.certPbeIterationCount" values defined here. Existing private +# and secret key(s) are not changed. Newly set private and secret key(s) will +# be encrypted using the "keystore.pkcs12.keyProtectionAlgorithm" and +# "keystore.pkcs12.keyPbeIterationCount" values defined here. +# +# In order to apply new algorithms and parameters to all entries in an +# existing keystore, one can create a new keystore and add entries in the +# existing keystore into the new keystore. This can be achieved by calling the +# "keytool -importkeystore" command. +# +# If a system property of the same name is also specified, it supersedes the +# security property value defined here. +# +# If the property is set to an illegal value, +# an iteration count that is not a positive integer, or an unknown algorithm +# name, an exception will be thrown when the property is used. +# If the property is not set or empty, a default value will be used. +# +# Note: These properties are currently used by the JDK Reference implementation. +# They are not guaranteed to be examined and used by other implementations. + +# The algorithm used to encrypt a certificate. This can be any non-Hmac PBE +# algorithm defined in the Cipher section of the Java Security Standard +# Algorithm Names Specification. When set to "NONE", the certificate +# is not encrypted. The default value is "PBEWithSHA1AndRC2_40". +#keystore.pkcs12.certProtectionAlgorithm = PBEWithSHA1AndRC2_40 + +# The iteration count used by the PBE algorithm when encrypting a certificate. +# This value must be a positive integer. The default value is 50000. +#keystore.pkcs12.certPbeIterationCount = 50000 + +# The algorithm used to encrypt a private key or secret key. This can be +# any non-Hmac PBE algorithm defined in the Cipher section of the Java +# Security Standard Algorithm Names Specification. The value must not be "NONE". +# The default value is "PBEWithSHA1AndDESede". +#keystore.pkcs12.keyProtectionAlgorithm = PBEWithSHA1AndDESede + +# The iteration count used by the PBE algorithm when encrypting a private key +# or a secret key. This value must be a positive integer. The default value +# is 50000. +#keystore.pkcs12.keyPbeIterationCount = 50000 + +# The algorithm used to calculate the optional MacData at the end of a PKCS12 +# file. This can be any HmacPBE algorithm defined in the Mac section of the +# Java Security Standard Algorithm Names Specification. When set to "NONE", +# no Mac is generated. The default value is "HmacPBESHA1". +#keystore.pkcs12.macAlgorithm = HmacPBESHA1 + +# The iteration count used by the MacData algorithm. This value must be a +# positive integer. The default value is 100000. +#keystore.pkcs12.macIterationCount = 100000 + # The iteration count used for password-based encryption (PBE) in JCEKS # keystores. Values in the range 10000 to 5000000 are considered valid. # If the value is out of this range, or is not a number, or is unspecified; @@ -1175,3 +1266,62 @@ jdk.security.caDistrustPolicies=SYMANTEC_TLS # System value prevails. The default value of the property is "false". # #jdk.security.allowNonCaAnchor=true + +# +# The default Character set name (java.nio.charset.Charset.forName()) +# for converting TLS ALPN values between byte arrays and Strings. +# Prior versions of the JDK may use UTF-8 as the default charset. If +# you experience interoperability issues, setting this property to UTF-8 +# may help. +# +# jdk.tls.alpnCharset=UTF-8 +jdk.tls.alpnCharset=ISO_8859_1 + +# +# JNDI Object Factories Filter +# +# This filter is used by the JNDI runtime to control the set of object factory classes +# which will be allowed to instantiate objects from object references returned by +# naming/directory systems. The factory class named by the reference instance will be +# matched against this filter. The filter property supports pattern-based filter syntax +# with the same format as jdk.serialFilter. +# +# Each pattern is matched against the factory class name to allow or disallow it's +# instantiation. The access to a factory class is allowed unless the filter returns +# REJECTED. +# +# Note: This property is currently used by the JDK Reference implementation. +# It is not guaranteed to be examined and used by other implementations. +# +# If the system property jdk.jndi.object.factoriesFilter is also specified, it supersedes +# the security property value defined here. The default value of the property is "*". +# +# The default pattern value allows any object factory class specified by the reference +# instance to recreate the referenced object. +#jdk.jndi.object.factoriesFilter=* + +# +# Policy for non-forwardable service ticket in a S4U2proxy request +# +# The Service for User to Proxy (S4U2proxy) Kerberos extension enables a middle service +# to obtain a service ticket to another service on behalf of a user. It requires that +# the user's service ticket to the first service has the forwardable flag set [1]. +# However, some KDC implementations ignore this requirement and accept service tickets +# with the flag unset. +# +# If this security property is set to "true", then +# +# 1) The user service ticket, when obtained by the middle service after a S4U2self +# impersonation, is not required to have the forwardable flag set; and, +# +# 2) If a S4U2proxy request receives a KRB_ERROR of the KDC_ERR_BADOPTION error code +# and the ticket to the middle service is not forwardable, OpenJDK will try the same +# request with another KDC instead of treating it as a fatal failure. +# +# The default value is "false". +# +# If a system property of the same name is also specified, it supersedes the +# security property value defined here. +# +# [1] https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-sfu/bde93b0e-f3c9-4ddf-9f44-e1453be7af5a +#jdk.security.krb5.s4u2proxy.acceptNonForwardableServiceTicket=false diff --git a/resources/jre/lib/security/legacy8ujsse.security b/resources/jre/lib/security/legacy8ujsse.security old mode 100644 new mode 100755 diff --git a/resources/jre/lib/security/openjsse.security b/resources/jre/lib/security/openjsse.security old mode 100644 new mode 100755 index a7936623..0fefd276 --- a/resources/jre/lib/security/openjsse.security +++ b/resources/jre/lib/security/openjsse.security @@ -25,37 +25,3 @@ # OpenJSSE security provider in place of SunJSSE provider: # security.provider.4=org.openjsse.net.ssl.OpenJSSE - -# -# TLS key limits on symmetric cryptographic algorithms -# -# This security property sets limits on algorithms key usage in TLS 1.3. -# When the amount of data encrypted exceeds the algorithm value listed below, -# a KeyUpdate message will trigger a key change. This is for symmetric ciphers -# with TLS 1.3 only. -# -# The syntax for the property is described below: -# KeyLimits: -# " KeyLimit { , KeyLimit } " -# -# WeakKeyLimit: -# AlgorithmName Action Length -# -# AlgorithmName: -# A full algorithm transformation. -# -# Action: -# KeyUpdate -# -# Length: -# The amount of encrypted data in a session before the Action occurs -# This value may be an integer value in bytes, or as a power of two, 2^29. -# -# KeyUpdate: -# The TLS 1.3 KeyUpdate handshake process begins when the Length amount -# is fulfilled. -# -# Note: This property is currently used by OpenJDK's JSSE implementation. It -# is not guaranteed to be examined and used by other implementations. -# -jdk.tls.keyLimits=AES/GCM/NoPadding KeyUpdate 2^37 diff --git a/resources/jre/lib/security/policy/limited/US_export_policy.jar b/resources/jre/lib/security/policy/limited/US_export_policy.jar index c94f2d0c..7f4a156a 100755 Binary files a/resources/jre/lib/security/policy/limited/US_export_policy.jar and b/resources/jre/lib/security/policy/limited/US_export_policy.jar differ diff --git a/resources/jre/lib/security/policy/limited/local_policy.jar b/resources/jre/lib/security/policy/limited/local_policy.jar index a7ef25f4..809e5a7f 100755 Binary files a/resources/jre/lib/security/policy/limited/local_policy.jar and b/resources/jre/lib/security/policy/limited/local_policy.jar differ diff --git a/resources/jre/lib/security/policy/unlimited/US_export_policy.jar b/resources/jre/lib/security/policy/unlimited/US_export_policy.jar index c94f2d0c..7f4a156a 100755 Binary files a/resources/jre/lib/security/policy/unlimited/US_export_policy.jar and b/resources/jre/lib/security/policy/unlimited/US_export_policy.jar differ diff --git a/resources/jre/lib/security/policy/unlimited/local_policy.jar b/resources/jre/lib/security/policy/unlimited/local_policy.jar index 4eb9ff75..a79f6e2e 100755 Binary files a/resources/jre/lib/security/policy/unlimited/local_policy.jar and b/resources/jre/lib/security/policy/unlimited/local_policy.jar differ diff --git a/resources/jre/lib/sound.properties b/resources/jre/lib/sound.properties old mode 100644 new mode 100755 diff --git a/resources/jre/lib/tzdb.dat b/resources/jre/lib/tzdb.dat index c6ffd7f5..6cfad2e5 100755 Binary files a/resources/jre/lib/tzdb.dat and b/resources/jre/lib/tzdb.dat differ diff --git a/resources/jre/lib/tzmappings b/resources/jre/lib/tzmappings old mode 100644 new mode 100755