Extend the default security policy to accomodate PKCS11 accessing jdk.internal.misc.
Resolves: rhbz#1997360

Add patch to login to the NSS software token when in FIPS mode.
Resolves: rhbz#1997360

Rebuilt for IMA sigs, glibc 2.34, aarch64 flags

Update to jdk-11.0.12.0+7
Update release notes to 11.0.12.0+7
Switch to GA mode for final release.
Remove non-Free test from source tarball.
Resolves: rhbz#1967815

Add patch in order to fix java.library.path issue on aarch64 (JDK-8269668)
Resolves: rhbz#1967815

Update to jdk-11.0.12.0+6
Update release notes to 11.0.12.0+6
Correct bug ID JDK-8264846 to intended ID of JDK-8264848
Switch to EA mode for 11.0.12 pre-release builds.
Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
Use the "reverse" build loop (debug first) as the main and only build loop to get more diagnostics.
Remove restriction on disabling product build, as debug packages no longer have javadoc packages.
Resolves: rhbz#1967815

Minor code cleanups on FIPS detection patch and check for SECMOD_GetSystemFIPSEnabled in configure.
Remove unneeded Requires on NSS as it will now be dynamically linked and detected by RPM.
Resolves: rhbz#1971689

Detect FIPS using SECMOD_GetSystemFIPSEnabled in the new libsystemconf JDK library.
Resolves: rhbz#1971689

Update RH1655466 FIPS patch with changes in OpenJDK 8 version.
SunPKCS11 runtime provider name is a concatenation of "SunPKCS11-" and the name in the config file.
Change nss.fips.cfg config name to "NSS-FIPS" to avoid confusion with nss.cfg.
No need to substitute path to nss.fips.cfg as java.security file supports a java.home variable.
Disable FIPS mode support unless com.redhat.fips is set to "true".
Enable alignment with FIPS crypto policy by default (-Dcom.redhat.fips=false to disable).
Add explicit runtime dependency on NSS for the PKCS11 provider in FIPS mode
Move setup of JavaSecuritySystemConfiguratorAccess to Security class so it always occurs (RH1915071)
Resolves: rhbz#1971689

Support the FIPS mode crypto policy (RH1655466)
Use appropriate keystore types when in FIPS mode (RH1818909)
Disable TLSv1.3 when the FIPS crypto policy and the NSS-FIPS provider are in use (RH1860986)
Resolves: rhbz#1971689

Update to jdk-11.0.11.0+9
Update release notes to 11.0.11.0+9
Remove upstreamed patch JDK-8259949
Require tzdata 2020f to match upstream change JDK-8259048
Require tzdata 2021a to match upstream change JDK-8260356
Update tapsets from IcedTea 6.x repository with fix for JDK-8015774 changes (_heap->_heaps)
Update icedtea_sync.sh with a VCS mode that retrieves sources from a Mercurial repository
Perform static library build on a separate source tree with bundled image libraries
Make static library build optional
Resolves: rhbz#1967815

Remove -fcommon work-around as the OpenJDK 11 code has been fixed.
Resolves: rhbz#1967815

Hardcode /usr/sbin/alternatives for Flatpak builds
Disable copy-jdk-configs for Flatpak builds
Resolves: rhbz#1967815

Fix issue where CheckVendor.java test erroneously passes when it should fail.
Add proper quoting so '&' is not treated as a special character by the shell.
Resolves: rhbz#1967815

Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937

Update to jdk-11.0.10.0+9
Update release notes to 11.0.10.0+9
Switch to GA mode for final release.