From owner-freebsd-java@freebsd.org Sat Aug 10 19:48:18 2019 Return-Path: Delivered-To: freebsd-java@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id E1E1FC4087 for ; Sat, 10 Aug 2019 19:48:18 +0000 (UTC) (envelope-from 1983-01-06@gmx.net) Received: from mailman.nyi.freebsd.org (unknown [127.0.1.3]) by mx1.freebsd.org (Postfix) with ESMTP id 465Xhy0Wl8z44kq for ; Sat, 10 Aug 2019 19:48:18 +0000 (UTC) (envelope-from 1983-01-06@gmx.net) Received: by mailman.nyi.freebsd.org (Postfix) id 100F6C4083; Sat, 10 Aug 2019 19:48:18 +0000 (UTC) Delivered-To: java@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 0FD20C4082 for ; Sat, 10 Aug 2019 19:48:18 +0000 (UTC) (envelope-from 1983-01-06@gmx.net) Received: from mout.gmx.net (mout.gmx.net [212.227.15.19]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "mout.gmx.net", Issuer "TeleSec ServerPass Class 2 CA" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 465Xhw2TmDz44kn for ; Sat, 10 Aug 2019 19:48:15 +0000 (UTC) (envelope-from 1983-01-06@gmx.net) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=gmx.net; s=badeba3b8450; t=1565466482; bh=2FqR/rzcLBFhTxJCZ/BSYR52Oe4M8CYQrxBKlbMJzIM=; h=X-UI-Sender-Class:Subject:To:Cc:References:From:Date:In-Reply-To; b=Vg0a+Uge4DBgUvtg+5Xy5yoGZGATdVwZ0a5ziT9hvzWbO039WEopwzdIa0Cp95LZT NswiSrLm/yp6Z6yYNV4IFG6jX99elirD73qoHqwNQPFqdFymmADMZRgEffOCB11fKw VXOU3fIThO5WkatxD7d7wP1eKRFtHZAQjDuDutRA= X-UI-Sender-Class: 01bb95c1-4bf8-414a-932a-4f6e2808ef9c Received: from [192.168.1.13] ([84.143.158.162]) by mail.gmx.com (mrgmx005 [212.227.17.190]) with ESMTPSA (Nemesis) id 1MXp9i-1houQX0Q8a-00YByw; Sat, 10 Aug 2019 21:42:41 +0200 Subject: Re: RFC: Future of java/openjdk6 and java/openjdk7 To: Greg Lewis Cc: java@freebsd.org References: <20190802014149.GA59118@misty.eyesbeyond.com> <935ee70b-0f6e-1813-25c3-ced836143e32@gmx.net> <20190810183901.GA76800@misty.eyesbeyond.com> <22887160-4c94-9907-84f3-23fff562c239@gmx.net> <20190810193529.GA38493@misty.eyesbeyond.com> From: Michael Osipov <1983-01-06@gmx.net> Message-ID: Date: Sat, 10 Aug 2019 21:42:35 +0200 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.8.0 MIME-Version: 1.0 In-Reply-To: <20190810193529.GA38493@misty.eyesbeyond.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: quoted-printable X-Provags-ID: V03:K1:ViUukQ0Teu5F846Tn5XhmqgISy4zTtb1y7z4JrMB5QSHvZL0oIZ jFE91FPq0yseCtAz3fj5K6IO3GvNX6pjq0x4kcvCX8rqArXr9ctO8LudhroSPFd6a5hOVC7 H1H2nWiH829axBjF3ZcLQrmA7A68oLO9VZDPY2MbjKRFmidjjlXVJjgM8OOo2ujFK4ttNUG W0TMiAHkt3MUPvGD8yhGw== X-Spam-Flag: NO X-UI-Out-Filterresults: notjunk:1;V03:K0:rZ4iht32WSY=:N/SLgzgVydg5tnw6BjzXLf WDIWKnKsRwh3ukHsL1BFuX0qb+wjOfDpK8WV/ll29800SGbwUxuWTP8tVpWzlfMuPTo0F1CpW YzTyRqIQ8mVNcs75ZHfyGEi9vc7oOArKd02o0vkx/05j6oPY9bwRJYK4XPvCKCRo3o8LJzei6 61kGiwHLR5GvooD1OKhKyrqtr0w6ohvXgQJ8yxnV4X/dMFl/W43XjIDKlR4CbpFBaKsQ3RaDp Gcq4jYj0YiYUFpzlqz0KWj/HT1ViXnGOw2aMGZlegKWpH0gu15aPRKeKM0pv3avUZkQW6x+JA JFDnmkqJlpzzSb2dvEjt0AyW8G1JRPDz/fU+C40dEy7svc+BI8bJX5RZtSrfzTwhfTlFl7BH9 x+VfbckzCo97kcVZfI05AMJg5RwYcv+qeTQpVhnOTkqYsN3pUqLf0TK39g4Kc0F6apmj4T34v rCziHaEbhZzvduim3KfTCEhtiOxqn3+qIjTJd8dTQ2P+NpABP8oLA4nPXGyhmkgBoWv/5h232 3TtZN+2/LVRe/oLiPYKYAy6hHsuHUZGCZFKF0AaVCMeXpXfbwLP3QZozJWsPXdT5WcfRGu7o+ 8elGyW/h0RTT+ZlZGPmDmZDJqOyB1jeHtb8fgvaMarvmgnP6V0Xg0MYrkCBX3weojhZ7N0mLn nmhWQmTygyVizqhb0/u5kAIx7urp7mICyBeCdehUOf1vzi1juoXFEHGq9cc2cveKfowJIZ/g3 KZikw6WsfED2y89bdoG27qUvpsxTtLgWhcdn60mtFrt0+izF6RSNe9DbOqQ823HVIDR+Rtzgd 40hIUlXpw5n9exL0ElS+TFXV9pFWfelXkrCl/wIRlTeXwCZJxSpeebq/KwgIbFI/Jkdvlp3fs sHSnmADAmwXmhhr+BmbrfK0aZdqfpLT4JOM+m8GJrJ7JP1QpZbwVmezxCjHB3dv5kh/h/yHTw dH7VTsCTVAIGBRZNG3ZMeyVeIFvDx1Dc6GaUaKy0dy9OIDjdXnTRQSEkmmsqxLH3yxn6/1A27 7oj59zoDoMB/1tsln8Algj4rkDy36ZB57KKcWFasP4hYcZk7uWZP0uT/jRNHmxF3hK4qtDz9Z eNS7BcGJ10lyz+gKhqqY5o5VfsAXD6x6oYHSAb0u+rvKA+1UdcY0N0ace55G+Mf2hmYEjdWw0 faiYg= X-Rspamd-Queue-Id: 465Xhw2TmDz44kn X-Spamd-Bar: --- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmx.net header.s=badeba3b8450 header.b=Vg0a+Uge; dmarc=none; spf=pass (mx1.freebsd.org: domain of 1983-01-06@gmx.net designates 212.227.15.19 as permitted sender) smtp.mailfrom=1983-01-06@gmx.net X-Spamd-Result: default: False [-3.49 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; TO_DN_SOME(0.00)[]; R_SPF_ALLOW(-0.20)[+ip4:212.227.15.0/25]; FREEMAIL_FROM(0.00)[gmx.net]; DKIM_TRACE(0.00)[gmx.net:+]; RCPT_COUNT_TWO(0.00)[2]; NEURAL_HAM_SHORT(-0.99)[-0.987,0]; RECEIVED_SPAMHAUS_PBL(0.00)[162.158.143.84.khpj7ygk5idzvmvt5x4ziurxhy.zen.dq.spamhaus.net : 127.0.0.10]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; FREEMAIL_ENVFROM(0.00)[gmx.net]; ASN(0.00)[asn:8560, ipnet:212.227.0.0/16, country:DE]; MID_RHS_MATCH_FROM(0.00)[]; DWL_DNSWL_NONE(0.00)[gmx.net.dwl.dnswl.org : 127.0.3.0]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; R_DKIM_ALLOW(-0.20)[gmx.net:s=badeba3b8450]; FROM_HAS_DN(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; MIME_GOOD(-0.10)[text/plain]; DMARC_NA(0.00)[gmx.net]; IP_SCORE_FREEMAIL(0.00)[]; TO_MATCH_ENVRCPT_SOME(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[19.15.227.212.list.dnswl.org : 127.0.3.0]; IP_SCORE(0.00)[ip: (-6.15), ipnet: 212.227.0.0/16(-1.38), asn: 8560(2.26), country: DE(-0.01)]; RCVD_COUNT_TWO(0.00)[2]; RCVD_TLS_ALL(0.00)[] X-BeenThere: freebsd-java@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Porting Java to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 10 Aug 2019 19:48:18 -0000 Am 2019-08-10 um 21:35 schrieb Greg Lewis: > On Sat, Aug 10, 2019 at 08:52:26PM +0200, Michael Osipov wrote: >> Am 2019-08-10 um 20:39 schrieb Greg Lewis: >>> On Fri, Aug 02, 2019 at 08:07:39AM +0200, Michael Osipov wrote: >>>> Am 2019-08-02 um 03:41 schrieb Greg Lewis: >>>>> Oracle ended official releases of JDK 7 in April of 2015, and JDK 6 = even >>>>> earlier. In the FreeBSD ports collection both java/openjdk6 and >>>>> java/openjdk7 have fallen out of maintenance and are considerably be= hind >>>>> in terms of updates (which likely include fixes for security >>>>> vulnerabilities). In addition, openjdk6 will soon become unbuildabl= e in >>>>> FreeBSD 12-STABLE based on >>>>> >>>>> https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D234792 >>>>> >>>>> With OpenJDK 8 having been the default JDK for a number of years now= , >>>>> OpenJDK 11 and 12 both being available (and soon 13) I would suggest >>>>> that both openjdk6 and openjdk7 be removed, along with any ports >>>>> depending explicitly on them(*) which are unable to be updated to us= e a >>>>> newer version. >>>> >>>> Being an Apache Maven PMC member and a happy FreeBSD user, we guarant= ee >>>> that the entire Maven stack runs on top of Java 7+, so I run all >>>> integration tests for all components I change on a regular basis on >>>> several BSD boxes (home, work) to test compat outside of the monotoni= c >>>> Windows/Linux world. >>>> >>>> Just because Oracle does not provide any binary packages for Java 7 i= t >>>> does not meean that it is not supported. There are a lot of vendors >>>> still providing Java 7 packages, e.g, Azul Systems, RHEL, HPE for HP-= UX >>>> (Java SE 7 is supported till July 2022 and Java SE 8 is supported til= l >>>> March 2025) and likely others. >>> >>> Given this is the only response so far, I assume all are comfortable w= ith >>> removing openjdk6 and I'm going to go ahead with that once the ports t= hat >>> need upgrading have done so. >>> >>> With openjdk7, removing the port will not force you to remove the pack= age >>> from your system. I still have some older JDK ports on my desktop eve= n >>> though they've been removed from the ports tree. The problem with lea= ving >>> it in the tree is that it has security vulnerabilities with the curren= t >>> version and no one has volunteered to update it to the latest version. >>> >>> My question then is whether that would work. You leave the port on yo= ur >>> machine and/or build a local package of it prior to removal. That sho= uld >>> be sufficient to use it for the lifecycle of the current FreeBSD relea= se >>> and further without leaving a vulnerable port in the ports tree. >> >> Well, I am not a huge fan of this because I cannot reproduce the build >> at any time -- making an OSS component virtually useless. I don't want >> to be dependent on others to produce it. I have gone through this with >> the "HP-UX Porting and Archive Centre" and abandoned all packages from >> them because they never brought there changes upstream and I was not >> really able to reproduce their builds. >> >> To make a long story short, if you want to cut OpenJDK 7, perform a >> final update, announce the port as deprecated and remove it at some >> point. That would be fair deal. OpenJDK 6 is obsolete. > > To reiterate, I am not planning on spending any time on openjdk7 since i= t > has been EoL for so long. Where is this EOL? I see regular changes here: http://hg.openjdk.java.net/jdk7u/jdk7u/