Fix FIPS issues in native code and with initialisation of java.security.Security
Resolves: rhbz#2023530

Refactor build functions so we can build just HotSpot without any attempt at installation.
Sync gdb test with java-1.8.0-openjdk.
Improve architecture restrictions for the gdb test.
Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
Explicitly list JIT architectures rather than relying on those with slowdebug builds
Disable the serviceability agent on Zero architectures even when the architecture itself is supported
Add backport of JDK-8257794 to fix bogus assert on slowdebug x86-32 Zero builds
Related: rhbz#2052834

Give javadoc-zip its own Provides, next to the plain javadoc ones
Related: rhbz#2052834

Update to jdk-11.0.14.0+8
Update release notes to 11.0.14.0+8
Switch to EA mode for 11.0.14 pre-release builds.
Rename blacklisted.certs to blocked.certs following JDK-8253866
Rebase RH1996182 login patch and drop redundant security policy extension after JDK-8269034
Resolves: rhbz#2022825

Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
Related: rhbz#2022825

Use 'sql:' prefix in nss.fips.cfg as F35+ no longer ship the legacy
Resolves: rhbz#2023535

Replaced hardcoded 11 by featurever where appropriate
Fixed comment of `for slowdebug` to correct `any debug`
Related: rhbz#2022825

alternatives creation moved to posttrans
Thus fixing the old reisntall issue:
https://bugzilla.redhat.com/show_bug.cgi?id=1200302
https://bugzilla.redhat.com/show_bug.cgi?id=1976053
Resolves: rhbz#2008205

Update to jdk-11.0.13.0+8
Update release notes to 11.0.13.0+8
Update tarball generation script to use git following OpenJDK 11u's move to github
Remove "-clean" suffix as no 11.0.13 builds are unclean.
Drop JDK-8269668 patch which is now applied upstream.
Resolves: rhbz#2013845

Reduce disk footprint by removing build artifacts by default.
Related: rhbz#1999940

Restructure the build so a minimal initial build is then used for the final build (with docs)
This reduces pressure on the system JDK and ensures the JDK being built can do a full build
Related: rhbz#1999940

Allow plain key import to be disabled with -Dcom.redhat.fips.plainKeySupport=false
Resolves: rhbz#1994681

Add patch to allow plain key import.
Resolves: rhbz#1994681

Minor cosmetic improvements to make spec more comparable between variants
Related: rhbz#1999940

Extend the default security policy to accomodate PKCS11 accessing jdk.internal.misc.
Resolves: rhbz#1997360

Add patch to login to the NSS software token when in FIPS mode.
Resolves: rhbz#1997360