Update to jdk-17.0.3.0+8
Update release notes to 17.0.3.0+8
Switch to GA mode for release
Resolves: rhbz#2106524

Revert the following changes until copy-java-configs has adapted to relative symlinks:
The move of turning on system security properties is retained so we don't ship with them off
Related: rhbz#2084218

Update to jdk-17.0.3.0+7
Update release notes to 17.0.3.0+7
Need to include the '.S' suffix in debuginfo checks after JDK-8284661
Explicitly require crypto-policies during build and runtime for system security properties
Make use of the vendor version string to store our version & release rather than an upstream release date
Include a test in the RPM to check the build has the correct vendor information.
Resolves: rhbz#2084218

Fix issue where CheckVendor.java test erroneously passes when it should fail.
Add proper quoting so '&' is not treated as a special character by the shell.
Related: rhbz#2084218

Update to jdk-17.0.4.0+1
Update release notes to 17.0.4.0+1
Switch to EA mode for 17.0.4 pre-release builds.
Print release file during build, which should now include a correct SOURCE value from .src-rev
Update tarball script with IcedTea GitHub URL and .src-rev generation
Include script to generate bug list for release notes
Update tzdata requirement to 2022a to match JDK-8283350
Move EA designator check to prep so failures can be caught earlier
Make EA designator check non-fatal while upstream is not maintaining it
Related: rhbz#2084218

Fix whitespace in spec file
Related: rhbz#2100677

Sequence spec file sections as they are run by rpmbuild (build, install then test)
Related: rhbz#2100677

Turn on system security properties as part of the build's install section
Move cacerts replacement to install section and retain original of this and tzdb.dat
Run tests on the installed image, rather than the build image
Introduce variables to refer to the static library installation directories
Use relative symlinks so they work within the image
Run debug symbols check during build stage, before the install strips them
Related: rhbz#2100677

RH2007331: SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode
Resolves: rhbz#2102433

Update FIPS support to bring in latest changes
Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
Enable system security properties in the RPM (now disabled by default in the FIPS repo)
Improve security properties test to check both enabled and disabled behaviour
Run security properties test with property debugging on
Resolves: rhbz#2099844
Resolves: rhbz#2100677

Rebase FIPS patches from fips-17u branch and simplify by using a single patch from that repository
Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
RH2023467: Enable FIPS keys export
RH2094027: SunEC runtime permission for FIPS
Resolves: rhbz#2029657
Resolves: rhbz#2096117

April 2022 security update to jdk 17.0.3+6
Update to jdk-17.0.3.0+6 pre-release tarball (17usec.17.0.3+5-220408)
Add JDK-8284548 regression fix missing from pre-release tarball but in jdk-17.0.3+6/jdk-17.0.3-ga
Update release notes to 17.0.3.0+6
Add missing README.md and generate_source_tarball.sh
Switch to GA mode for release
JDK-8283911 patch no longer needed now we're GA...
Resolves: rhbz#2073579

Update to jdk-17.0.3.0+5
Update release notes to 17.0.3.0+5
Resolves: rhbz#2050460

Update to jdk-17.0.3.0+1
Update release notes to 17.0.3.0+1
Switch to EA mode for 17.0.3 pre-release builds.
Add JDK-8283911 to fix bad DEFAULT_PROMOTED_VERSION_PRE value
Related: rhbz#2050460

Enable AlgorithmParameters and AlgorithmParameterGenerator services in FIPS mode
Resolves: rhbz#2055383

Add rpminspect.yaml to turn off Java bytecode inspections
java-17-openjdk deliberately produces Java 17 bytecode, not the default Java 11 bytecode
Resolves: rhbz#2023540