From owner-freebsd-java@freebsd.org Sat Aug 10 19:35:30 2019 Return-Path: Delivered-To: freebsd-java@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id DA444C3D71 for ; Sat, 10 Aug 2019 19:35:30 +0000 (UTC) (envelope-from 1983-01-06@gmx.net) Received: from mailman.nyi.freebsd.org (unknown [127.0.1.3]) by mx1.freebsd.org (Postfix) with ESMTP id 465XQB2WMWz44K6 for ; Sat, 10 Aug 2019 19:35:30 +0000 (UTC) (envelope-from 1983-01-06@gmx.net) Received: by mailman.nyi.freebsd.org (Postfix) id 564EFC3D70; Sat, 10 Aug 2019 19:35:30 +0000 (UTC) Delivered-To: java@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 56114C3D6F for ; Sat, 10 Aug 2019 19:35:30 +0000 (UTC) (envelope-from 1983-01-06@gmx.net) Received: from mout.gmx.net (mout.gmx.net [212.227.17.21]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "mout.gmx.net", Issuer "TeleSec ServerPass Class 2 CA" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 465XQ91sB2z44K5 for ; Sat, 10 Aug 2019 19:35:28 +0000 (UTC) (envelope-from 1983-01-06@gmx.net) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=gmx.net; s=badeba3b8450; t=1565465717; bh=dsWgfRzuhIG8nSBpwPd3+8VwtuLI42p9JX2ThRqb/jk=; h=X-UI-Sender-Class:Subject:To:Cc:References:From:Date:In-Reply-To; b=VseYcg8so7x9nxcewgw5AvVyQ5uU/IS9V0/JXK25Wt5zyctlsE1reF3+1pWlUqmB6 YO9lG/cBezZAWoJqQUM63zndwxa4JHY1uUZvk5t5l7O9alOO8ZgzO5/iidl0Xq/4/y jfBNyzboRw76uoSzcOCuFLRJrGMSGv5ft4cE09WM= X-UI-Sender-Class: 01bb95c1-4bf8-414a-932a-4f6e2808ef9c Received: from [192.168.1.13] ([84.143.158.162]) by mail.gmx.com (mrgmx104 [212.227.17.168]) with ESMTPSA (Nemesis) id 1M2O2Q-1hsgSH1URK-003usM; Sat, 10 Aug 2019 20:52:31 +0200 Subject: Re: RFC: Future of java/openjdk6 and java/openjdk7 To: Greg Lewis Cc: java@freebsd.org References: <20190802014149.GA59118@misty.eyesbeyond.com> <935ee70b-0f6e-1813-25c3-ced836143e32@gmx.net> <20190810183901.GA76800@misty.eyesbeyond.com> From: Michael Osipov <1983-01-06@gmx.net> Message-ID: <22887160-4c94-9907-84f3-23fff562c239@gmx.net> Date: Sat, 10 Aug 2019 20:52:26 +0200 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.8.0 MIME-Version: 1.0 In-Reply-To: <20190810183901.GA76800@misty.eyesbeyond.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: quoted-printable X-Provags-ID: V03:K1:81QCn5k+biJIqGxPal4PyQ9JsiCXcS97mrUTe6h/5DwP09MuF68 68BbSaoUZVfl+QPGfPWF3lv8z3qMCBLl2fh/PRq3k73w7HVVAiwvycdmTwuPrrTrDeBMzEV 0/D1C5kYpILa11S0iIbYnNtJUwY5qkmWZec76Qo05YEVugGpgOneADF/ZmNqbkvtxuhg83r tW5SF+j8XWF9E9mTzoksg== X-Spam-Flag: NO X-UI-Out-Filterresults: notjunk:1;V03:K0:2trZ7yhnohg=:o5uICk6YAmPdf9vFZhMo93 yGhwwxohlad+pWG+CGea3ODuoTWHjqXrs0gy6HsKjNvQpCFkDzI1t9fTVZ9fwjke5QliE/fZw aUHPA9wfZEY02VzXRc+0xUnfbMubl0ZraEg6ogPp6zP6gtZi0HYAO3mPlS+xo0EY5boLajMDM slk7bOCrkYCkMe+HeOfPysnj55EloQ3CON0r3/WKvopss0jHc/u6bNda56ujVxOafsw7JyDx+ SDM2IL0jk2ystazyUbhxyWLVjTvp9drChkzv8lYc86qLyGCbSQWML/eW4H8jgXpdkG0DBDc89 Y7ESJcCWOXcmKQQCWX0NcX1iYSjlpSYSsXdxO4izgknzYhaZ8HCxKXT73cijz/tTmnRmpqv16 8PpyPQSAWddrfjDIi7uWs8glDIGURoPDdH4tjB0bpVV+Vq8Zk+EVyCliurm5hgpJknK/WuSjS sKyuKui7avSPGTcf5443IO9NsHEXbs1BS7gEVbH6nheNs0Pz4Ans3ojz2t/IaoTerskHq5pQS SgrAfdE9WrkxBymjMrCT/hzAfNl5Wa1xPUAPXgfH2W4Yc8aS4p+KadH8hZuIot5El9OVMY0/z LXhGEQsVTm7ohLQBZiRv0/snCKAciOiQNsBwE+XBNHXSgWCFT5NBV0nwcTKV5HH/J+hzr3A+h UQjEAH9h4Lt4SponyRKphYXliBa6N+Wm7Dy57cIQJZpUC23tqHN5mcO8UzXWLojFTgLDAD+DI 6evOlG6rGfncNZ8/gJj88O+scXi1q44V7Ke+0h+Be275eQRjNodMIg1svfzJDSurJiBIWRzwr hhR2dvKcP5rK6DIoQ+I1704kaY+AvyYBkyqHO3bvUxcoXklCMab4JO6s9FjRQXlAaNe5W2BZ8 h74IXGxjVm1BnD88dz14xVPA9JQVgjhabAQS08jovj3VE2M9gGwuawiO3LVd3zNs8/m+BGDIn CV8vlRLcdezDLZSEHfQ6k9GHKmcJzbFScN+avEA1AVwWLhFDtRcGyzs3BccnTVJJYx3s2Eoyj XFftIn5BJggXssakaCV1rvKDy+3yqu0ma15rFIlTT7fvQflmejE4ReSvmNeztwFweuAuAQIsw DDJ2Nntd+bue0otAzBjm5H4AnsgD7JiYrPlGMB+IxhVP3HUDLHFv3yqAQEQgjr4HhY9rnQV1F Rvwok= X-Rspamd-Queue-Id: 465XQ91sB2z44K5 X-Spamd-Bar: --- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmx.net header.s=badeba3b8450 header.b=VseYcg8s; dmarc=none; spf=pass (mx1.freebsd.org: domain of 1983-01-06@gmx.net designates 212.227.17.21 as permitted sender) smtp.mailfrom=1983-01-06@gmx.net X-Spamd-Result: default: False [-3.60 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; TO_DN_SOME(0.00)[]; R_SPF_ALLOW(-0.20)[+ip4:212.227.17.0/27]; FREEMAIL_FROM(0.00)[gmx.net]; DKIM_TRACE(0.00)[gmx.net:+]; RCPT_COUNT_TWO(0.00)[2]; NEURAL_HAM_SHORT(-1.00)[-0.995,0]; RECEIVED_SPAMHAUS_PBL(0.00)[162.158.143.84.khpj7ygk5idzvmvt5x4ziurxhy.zen.dq.spamhaus.net : 127.0.0.10]; RCVD_IN_DNSWL_LOW(-0.10)[21.17.227.212.list.dnswl.org : 127.0.3.1]; MIME_TRACE(0.00)[0:+]; FROM_EQ_ENVFROM(0.00)[]; ASN(0.00)[asn:8560, ipnet:212.227.0.0/16, country:DE]; MID_RHS_MATCH_FROM(0.00)[]; DWL_DNSWL_NONE(0.00)[gmx.net.dwl.dnswl.org : 127.0.3.0]; ARC_NA(0.00)[]; FREEMAIL_ENVFROM(0.00)[gmx.net]; R_DKIM_ALLOW(-0.20)[gmx.net:s=badeba3b8450]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; FROM_HAS_DN(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; MIME_GOOD(-0.10)[text/plain]; DMARC_NA(0.00)[gmx.net]; IP_SCORE_FREEMAIL(0.00)[]; TO_MATCH_ENVRCPT_SOME(0.00)[]; IP_SCORE(0.00)[ip: (-7.17), ipnet: 212.227.0.0/16(-1.38), asn: 8560(2.26), country: DE(-0.01)]; RCVD_COUNT_TWO(0.00)[2]; RCVD_TLS_ALL(0.00)[] X-BeenThere: freebsd-java@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Porting Java to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 10 Aug 2019 19:35:30 -0000 Am 2019-08-10 um 20:39 schrieb Greg Lewis: > On Fri, Aug 02, 2019 at 08:07:39AM +0200, Michael Osipov wrote: >> Am 2019-08-02 um 03:41 schrieb Greg Lewis: >>> Oracle ended official releases of JDK 7 in April of 2015, and JDK 6 ev= en >>> earlier. In the FreeBSD ports collection both java/openjdk6 and >>> java/openjdk7 have fallen out of maintenance and are considerably behi= nd >>> in terms of updates (which likely include fixes for security >>> vulnerabilities). In addition, openjdk6 will soon become unbuildable = in >>> FreeBSD 12-STABLE based on >>> >>> https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D234792 >>> >>> With OpenJDK 8 having been the default JDK for a number of years now, >>> OpenJDK 11 and 12 both being available (and soon 13) I would suggest >>> that both openjdk6 and openjdk7 be removed, along with any ports >>> depending explicitly on them(*) which are unable to be updated to use = a >>> newer version. >> >> Being an Apache Maven PMC member and a happy FreeBSD user, we guarantee >> that the entire Maven stack runs on top of Java 7+, so I run all >> integration tests for all components I change on a regular basis on >> several BSD boxes (home, work) to test compat outside of the monotonic >> Windows/Linux world. >> >> Just because Oracle does not provide any binary packages for Java 7 it >> does not meean that it is not supported. There are a lot of vendors >> still providing Java 7 packages, e.g, Azul Systems, RHEL, HPE for HP-UX >> (Java SE 7 is supported till July 2022 and Java SE 8 is supported till >> March 2025) and likely others. > > Given this is the only response so far, I assume all are comfortable wit= h > removing openjdk6 and I'm going to go ahead with that once the ports tha= t > need upgrading have done so. > > With openjdk7, removing the port will not force you to remove the packag= e > from your system. I still have some older JDK ports on my desktop even > though they've been removed from the ports tree. The problem with leavi= ng > it in the tree is that it has security vulnerabilities with the current > version and no one has volunteered to update it to the latest version. > > My question then is whether that would work. You leave the port on your > machine and/or build a local package of it prior to removal. That shoul= d > be sufficient to use it for the lifecycle of the current FreeBSD release > and further without leaving a vulnerable port in the ports tree. Well, I am not a huge fan of this because I cannot reproduce the build at any time -- making an OSS component virtually useless. I don't want to be dependent on others to produce it. I have gone through this with the "HP-UX Porting and Archive Centre" and abandoned all packages from them because they never brought there changes upstream and I was not really able to reproduce their builds. To make a long story short, if you want to cut OpenJDK 7, perform a final update, announce the port as deprecated and remove it at some point. That would be fair deal. OpenJDK 6 is obsolete. Regards, Michael