#985765 openjdk-17: non-free PKCS#11 headers

Package:
src:openjdk-17
Source:
openjdk-17
Submitter:
Bastian Germann
Date:
2021-04-28 08:21:03 UTC
Severity:
important
#985765#5
Date:
2021-03-23 02:16:04 UTC
From:
To:
OpenJDK includes the OASIS PKCS#11 headers in
src/jdk.crypto.cryptoki/share/native/libj2pkcs11/pkcs11*.h. It is
unclear whether OASIS IPR is DFSG-free (see #952951). Most probably it
is not:
https://enterprise.dejacode.com/licenses/public/oasis-ipr-policy-2014/

libnss3-dev contains MPL-2.0 licensed drop-in replacements for the
headers, which is already a build dependency and might be used instead.
#985765#14
Date:
2021-04-27 06:11:24 UTC
From:
To:
setting the priority back, as the bug submitter has chosen.  Note this also
applies to openjdk-11.
#985765#21
Date:
2021-04-27 08:26:03 UTC
From:
To:
This is incomplete, just a mechanical patch.

Replace header files in src/jdk.crypto.cryptoki/share/native/libj2pkcs11.

Import from NSPR 4.29:
 - prcpucfg.h
 - prtypes.h

Import from NSS 2.63:
 - pkcs11.h
 - pkcs11f.h
 - pkcs11n.h
 - pkcs11p.h
 - pkcs11t.h
 - pkcs11u.h

src/jdk.crypto.cryptoki/unix/native/libj2pkcs11/p11_md.h:
 - Remove macro CK_PTR
 - Remove macro CK_DEFINE_FUNCTION
 - Remove macro CK_DECLARE_FUNCTION
 - Remove macro CK_DECLARE_FUNCTION_POINTER
 - Remove macro CK_CALLBACK_FUNCTION

src/jdk.crypto.cryptoki/share/native/libj2pkcs11/pkcs11wrapper.h:
 - use CK_TRUE/CK_FALSE instead of TRUE/FALSE

src/jdk.crypto.cryptoki/share/native/libj2pkcs11/p11_convert.c:
 - FIXME: CKM_KEA_DERIVE is undefined

src/jdk.crypto.cryptoki/share/native/libj2pkcs11/p11_util.c:
 - FIXME: CKM_CAMELLIA_CTR is undefined