Arch Linux User Repository

Direct downloads are no longer available. Create your Oracle account, download, and put in with the PKGBUILD.

New and improved. Now you can just download to ~/Downloads then run the update.

Hello, 8u333 has been released

Hi

8u321

_minor='321'; _build='b07'; _hash='df5ad55fdd604472a86a45a217032c7d'

md5sum ded2d074da6862ce923f3f2c67570e11

sha256sum 7262e6c7cf8cc8f2a9a5982edc26fa3025aa60101902424619c3bb0cff9bd89f

for JDK 8u311

_minor='311'; _build='b11'; _hash='4d5417147a92418ea8b615e228bb6935'

md5sum = ea3c7df0c654d7326c5901efefbc8098

sha256sum = 759823389014292e84742a226b0e8fbaa08efa32adc6e6435a690c5576df3bb4

Hello, 8u311 has been released

@xuelingkang yes, see the pinned comment.

Is this package still being maintained?

Hello, Oracle JDK 8u291 has been released.

@bartus The URL is valid. Look down the page and jdk8 is there. Oracle is constantly reworking the site and deep links often go bad. I try to use links that don't go bad very often. I keep the Upstream URL maintained. That's what I use to look for updates.

Would be nice to gave more specific url in readme.sh current one points to jdk:15 redme.sh.diff

 echo 'Please visit'
-echo '  https://www.oracle.com/technetwork/java/javase/downloads/'
+echo '  https://www.oracle.com/java/technologies/javase/javase-jdk8-downloads.html'
 echo '  Java SE ... JDK, Download v'

It's a struggle to find a time when Oracle SSO is working. To get the file I logged in to the error then used a deep link. Unbound variable RED is due to set -u and calling msg when makepkg --nocolor is active. I tried makepkg -m and it worked fine.

@letorbi Notice that modifying the if : already does what the patch does. I get reports that the original links work, but if I switch back to them I get a report within a few days that the links don't work.

syntax error at (eval 1) line 1, near "."
/usr/share/makepkg/util/message.sh: line 84: RED: unbound variable
:: failed to build jdk8 package(s)

What is this?

The package can be installed without login or manual download, if you just remove a few lines from the PKBUILD. See the following patch for details:

--- PKGBUILD    2020-11-11 06:17:01.000000000 +0100
+++ PKGBUILD    2020-11-13 10:40:25.463899185 +0100
@@ -72,28 +72,6 @@
   "policytool-${_jname}.desktop"
   'readme.sh'
 )
-# from oracle-sqldeveloper
-if :; then
-DLAGENTS+=("manual::${startdir:-}/readme.sh %o %u")
-source[0]="manual://${_srcfil}"
-if [ ! -z "${HOME:-}" ]; then # block mksrcinfo
-  XDG_DOWNLOAD_DIR="$(xdg-user-dir DOWNLOAD 2>/dev/null)" || :
-  if [ -z "${XDG_DOWNLOAD_DIR}" ]; then
-    XDG_DOWNLOAD_DIR=~/'Downloads'
-  fi
-  if [ -s "${XDG_DOWNLOAD_DIR}/${_srcfil}" ] && [ ! -e "${_srcfil}" ]; then
-    if type msg > /dev/null 2>&1; then
-      set +u
-      msg "Scooping files from ${XDG_DOWNLOAD_DIR}" 1>&2
-      msg2 "${_srcfil}" 1>&2
-      set -u
-      ln -sr "${XDG_DOWNLOAD_DIR}/${_srcfil}"
-    fi
-  fi
-fi
-unset _srcfil
-unset XDG_DOWNLOAD_DIR
-fi

 md5sums=('bd8dc95a810b095996acf5f5b0dd2a69'
          '8a66f50efdc867ffd6a27168bc93b210'

8u271 patch:

--- PKGBUILD    2020-10-24 22:54:54.786889790 -0500
+++ PKGBUILD    2020-10-24 22:45:35.689640435 -0500
@@ -10,7 +10,8 @@
 #_minor='231'; _build='b11'; _hash='5b13a193868b4bf28bcb45c792fce896'
 #_minor='241'; _build='b07'; _hash='1f5b5a70bf22433b84d0e960903adac8'
 #_minor='251'; _build='b08'; _hash='3d5a2bb8f8d4428bbe94aed7ec7ae784'
-_minor='261'; _build='b12'; _hash='a4634525489241b9a9e1aa73d9e118e6'
+#_minor='261'; _build='b12'; _hash='a4634525489241b9a9e1aa73d9e118e6'
+_minor='271'; _build='b09'; _hash='bd8dc95a810b095996acf5f5b0dd2a69'
 pkgver="${_major}u${_minor}"
 pkgrel='1'
 pkgdesc="Oracle Java ${_major} Development Kit"
@@ -94,13 +95,13 @@
 unset XDG_DOWNLOAD_DIR
 fi

-md5sums=('1522f0c6380fa4993e932eb0c6006ef1'
+md5sums=('bd8dc95a810b095996acf5f5b0dd2a69'
          '8a66f50efdc867ffd6a27168bc93b210'
          '1cbde70639abd98db4bace284dbf2bc4'
          'f0b39865361437f3778ecbe6ffbc0a06'
          '89704501aff8efe859c31968d8d168e6'
          '51c8839211cc53f09c9b11a8e28ed1ef')
-sha256sums=('5a04e01a091f6b1ed9c0b801be4fd10689af07eeb9e27f012c9aa3af9948ea34'
+sha256sums=('eba7926a683bb65c6f4e1c502ce624346c42b00fb5531deba296f2560b452c78'
             '65282603bd0804d162f3f7da47bc7f3c91373e87504297d6a6fd6f2f8a1ec4ee'
             '8f865b52946a9ab98556c56306c7e70ae7aa432b4d005c70df0bba9d2c3111b1'
             '144e6651fcea08d95f3148d3a8ad17deb93fec4dd9236d37d27d7c648230b870'
@@ -250,3 +251,4 @@
   set +u
 }
 set +u
+ 

Flagged as Out-Of-Date (JDK 8u271 is out now)

Please, everyone, do not flag this package out-of-date when you are not even able to read. The instructions are are VERY clear. The "error" message tells you EXACTLY what to do. If you don't like it, use the openjdk or got scream at oracle. Just don't flag the package please, use your brain and eyes. Thanks.

It is possible to download the jdk tarball after logging in. It seems oracle messed up their link redirection. You can use this link to download jdk 8 :[https://edelivery.oracle.com/akam/otn/java/jdk/8u261-b12/a4634525489241b9a9e1aa73d9e118e6/jdk-8u261-linux-x64.tar.gz]

You can download other jdk the same way I believe. After sign in goto download page and click download on the preferred jdk. The link will fail as of now, blame oracle. But you can check the address bar. The link will have a redirect parameter with the actual working download link. Simply remove everything from beginning upto the 'redirect=' parameter or copy and paste the redirect link and you will be able to download the jdk tar ball.

Theres an error when installing this.

==> Making package: jdk8 8u261-1 (Fri 14 Aug 2020 02:53:41 PM)
==> Retrieving sources...
-> Downloading jdk-8u261-linux-x64.tar.gz...
The source file for this package needs to be downloaded manually
since it requires a login and is not redistributable.
Please visit
https://www.oracle.com/technetwork/java/javase/downloads/
Java SE ... JDK, Download v
and download
jdk-8u261-linux-x64.tar.gz
to your Downloads folder (XDG_DOWNLOAD_DIR) or in with the PKGBUILD.

Please do not post alternate sources. They are not legal. Advertising
will get them taken down by Oracle or too much traffic. Keep it a
secret.
==> ERROR: Failure while downloading manual://jdk-8u261-linux-x64.tar.gz
Aborting...
error downloading sources: jdk8

Is there any fix?

For those running tiling window managers like dwm and don't have a XDG_DOWNLOAD_DIR or don't know how to set it, just put the tar.gz file in the same build directory. If anyone is having trouble downloading the new JDK8 261 update just follow the Pinned comment instruction about creating an oracle account, then download the x64 .tar.gz (or your architecture's) then from your browser Copy Download Link which will look something like this: https://download.oracle.com/otn/java/jdk/8u261-b12/a4634525489241b9a9e1aa73d9e118e6/jdk-8u261-linux-x64.tar.gz?AuthParam=1595086755_e25e5744730391bb437a6b58a2460f0c

In the direct download link you will get the version-buildID-hash right after "jdk/" in this case my direct download link looks like: -8u261- (minor) -b12- (build) -a4634525489241b9a9e1aa73d9e118e6 (hash)

Modify the PKGBUILD and add those.

PKGEXT can now be '.pkg.tar.zst' ?

curl: (22) The requested URL returned error: 404 Not Found
==> ERROR: Failure while downloading https://download.oracle.com/otn-pub/java/jdk/8u251-b08/3d5a2bb8f8d4428bbe94aed7ec7ae784/jdk-8u251-linux-x64.tar.gz
    Aborting...
error downloading sources: jdk8

I am having an issue relating to the jce_policy-8.zip file. This does not appear to be available from oracle anymore, I am unable to download it manually. ERROR: Failure while downloading https://download.oracle.com/otn-pub/java/jce/8/jce_policy-8.zip

From Oracle's information provided here https://www.oracle.com/java/technologies/javase-jce-all-downloads.html: The unlimited policy files for earlier releases available here are required only for JDK 8, 7, and 6 updates earlier than 8u161, 7u171, and 6u16. On those versions and later the policy files are included, but not enabled by default.

With the latest being 8u251, can we exclude these from attempting to download, or is this still required?

I am unable to install JDK8 without the JCE policy. Any assistance is appreciated.

@severach

Direct downloads are no longer available.

Yes they are
https://download.oracle.com/otn-pub/java/jdk/8u251-b08/3d5a2bb8f8d4428bbe94aed7ec7ae784/jdk-8u251-linux-x64.tar.gz

8u251 patch

diff --git a/PKGBUILD b/PKGBUILD
index 9ab109f..a5260a9 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -7,8 +7,9 @@ _major='8'
 pkgname="${_pkgname}${_major}"
 #_minor='212'; _build='b10'; _hash='59066701cf1a433da9770636fbc4c9aa'
 #_minor='221'; _build='b11'; _hash='230deb18db3e4014bb8e3e8324f81b43'
-_minor='231'; _build='b11'; _hash='5b13a193868b4bf28bcb45c792fce896'
-_minor='241'; _build='b07'; _hash='1f5b5a70bf22433b84d0e960903adac8'
+#_minor='231'; _build='b11'; _hash='5b13a193868b4bf28bcb45c792fce896'
+#_minor='241'; _build='b07'; _hash='1f5b5a70bf22433b84d0e960903adac8'
+_minor='251'; _build='b07'; _hash='becc86d9870fe5f48ca30c520c4b7ab8'
 pkgver="${_major}u${_minor}"
 pkgrel='1'
 pkgdesc="Oracle Java ${_major} Development Kit"
@@ -92,14 +93,14 @@ unset _srcfil
 unset XDG_DOWNLOAD_DIR

 md5sums=('b3c7031bc65c28c2340302065e7d00d3'
-         '6b600690cb2ae69fc06578bc79e9e1c5'
+         'becc86d9870fe5f48ca30c520c4b7ab8'
          '8a66f50efdc867ffd6a27168bc93b210'
          '1cbde70639abd98db4bace284dbf2bc4'
          'f0b39865361437f3778ecbe6ffbc0a06'
          '89704501aff8efe859c31968d8d168e6'
          '51c8839211cc53f09c9b11a8e28ed1ef')
 sha256sums=('f3020a3922efd6626c2fff45695d527f34a8020e938a49292561f18ad1320b59'
-            '419d32677855f676076a25aed58e79432969142bbd778ff8eb57cb618c69e8cb'
+            '777a8d689e863275a647ae52cb30fd90022a3af268f34fc5b9867ce32f1b374e'
             '65282603bd0804d162f3f7da47bc7f3c91373e87504297d6a6fd6f2f8a1ec4ee'
             '8f865b52946a9ab98556c56306c7e70ae7aa432b4d005c70df0bba9d2c3111b1'
             '144e6651fcea08d95f3148d3a8ad17deb93fec4dd9236d37d27d7c648230b870'

does not work at all..filename is jdk-13.0.2 it's looking for 8u241...??? trying to give it the files it wants..fixing sums, and it still crash burns..changing sources[1] to tarball didn't work either

==> Validating source files with sha256sums...

jce_policy-8.zip ... Passed

jdk-8u241-linux-x64.tar.gz ... Passed

jconsole-jdk8.desktop ... Passed

jmc-jdk8.desktop ... Passed

jvisualvm-jdk8.desktop ... Passed

policytool-jdk8.desktop ... Passed

readme.sh ... Passed

==> Extracting sources...

-> Extracting jce_policy-8.zip with bsdtar

-> Extracting jdk-8u241-linux-x64.tar.gz with bsdtar

==> Removing existing $pkgdir/ directory...

==> Entering fakeroot environment...

==> Starting package()...

-> Creating directory structure...

-> Moving contents...

-> Fixing directory structure...

find: ‘jre/lib/desktop/’: No such file or directory

sed: can't read jre/lib/desktop/applications/*: No such file or directory

==> ERROR: A failure occurred in package().

/usr/share/makepkg/util/message.sh: line 47: QUIET: unbound variable

Sooo its not "the arch way", i extracted the tarball to /usr/lib/jvm/jdk-13.0.2-oracle and used "archlinux-java set jdk-13.0.2-oracle". I see the PKGBUILD has some provides i'm missing this way (ex. "java-environment-jdk=${_major}", "java-environment=${_major}"), not sure how relevant this will be, but as far as everything is concerned.."java works"

[hoecake@archbook ~]$ java --version

java 13.0.2 2020-01-14

Java(TM) SE Runtime Environment (build 13.0.2+8)

Java HotSpot(TM) 64-Bit Server VM (build 13.0.2+8, mixed mode, sharing)

[hoecake@archbook ~]$ javac --version

javac 13.0.2

Presento este problema

Please do not post alternate sources. They are not legal. Advertising will get them taken down by Oracle or too much traffic. Keep it a secret. ==> ERROR: Hubo fallos durante la descarga de manual://jdk-8u241-linux-x64.tar.gz Cancelando...

Note the correct way to use XDG_DOWNLOAD_DIR is to simply use the output of this command xdg-user-dir DOWNLOAD

For those who don't use ~/Downloads as their default download folder, could the PKGBUILD be made to respect $XDG_DOWNLOAD_DIR if present?

8u221 available. Patch:

diff --git a/PKGBUILD b/PKGBUILD
index 3114dda..9e22226 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -5,7 +5,7 @@ set -u
 _pkgname='jdk'
 _major='8'
 pkgname="${_pkgname}${_major}"
-_minor='212'; _build='b10'; _hash='59066701cf1a433da9770636fbc4c9aa'
+_minor='221'; _build='b11'; _hash='59066701cf1a433da9770636fbc4c9aa'
 pkgver="${_major}u${_minor}"
 pkgrel='1'
 pkgdesc="Oracle Java ${_major} Development Kit"
@@ -68,14 +68,14 @@ if [ -s ~/"Downloads/${_srcfil}" ] && [ ! -e "${_srcfil}" ]; then
 fi
 unset _srcfil
 md5sums=('b3c7031bc65c28c2340302065e7d00d3'
-         '62d57a7550c97b534343443475d9afd9'
+         '9e1ecd461c3b848af45ab41c528d9a95'
          '8a66f50efdc867ffd6a27168bc93b210'
          '1cbde70639abd98db4bace284dbf2bc4'
          'f0b39865361437f3778ecbe6ffbc0a06'
          '89704501aff8efe859c31968d8d168e6'
          '4dda444d58a4d78ca6357228adbde8a2')
 sha256sums=('f3020a3922efd6626c2fff45695d527f34a8020e938a49292561f18ad1320b59'
-            '3160c50aa8d8e081c8c7fe0f859ea452922eca5d2ae8f8ef22011ae87e6fedfb'
+            'bac52b7f120a03c4c0815ca8fc77c02a8f3db2ded121ffad7449525f377e2479'
             '65282603bd0804d162f3f7da47bc7f3c91373e87504297d6a6fd6f2f8a1ec4ee'
             '8f865b52946a9ab98556c56306c7e70ae7aa432b4d005c70df0bba9d2c3111b1'
             '144e6651fcea08d95f3148d3a8ad17deb93fec4dd9236d37d27d7c648230b870'

The jce_policy-8.zip link kept returning HTML for me so I had to download it manually (needed to accept an agreement).

You can get a mail/password for download from http://bugmenot.com/view/oracle.com

Downloads without Oracle Account are currently available from Adobe/Macromedia at: https://www.adobe.com/support/coldfusion/downloads.html

The checksum matches the one on the PKGBUILD file. I didn't check the terms of the download so make sure that you're allowed to download/run that software from Adobe before using it.

Download latest file on Oracle and put file.tar.gz to ~/Download to fix this problem.

As far as the checksums in this PKGBUILD are kept correct, I see no reason for not using https://github.com/frekele/oracle-java/releases as source, when its (for now) available, and the jdk-8uxxx*.tar.gz is not found in ~/Downloads.

So:

1] check ~/Downloads

2] if not found, pull from github

What do you think?

This build is for the official Oracle build of Java, so any other sources should not be taken as reliable/safe/legal, etc., but it seems that Oracle's way of doing things finally caught up with AUR as well. In other distros (Gentoo for instance) you had to manually download the archive and place it in the distfiles folder before running emerge.

With the way Oracle licenses their things I don't think that providing the archives from an alternative source is 100% legal, so don't flag the package "out of date" (it's not).

After Oracle's move to not supply direct download links, it seems that it will be the same case for AUR. @severach: you'll probably need to pin instructions how to obtain and where to place the archive.

For Yaourt users:

1. Try building and fail, but wait at the restart prompt.
2. Download the archive from here: https://www.oracle.com/technetwork/java/javase/downloads/jdk8-downloads-2133151.html (requires an account).
3. Place the downloaded file in /tmp/yaourt-tmp-[your-user-name]/aur-jdk8.
4. Restart the build in Yaourt.

Please Update Package to a reliable source, Thank you.

You could use the files provided by this guy: https://github.com/frekele/oracle-java/releases

@thunder72: Your browser authentication won't carry over to the PKGBUILD. The only way that might work is if you copy the entire link, and my link becomes irrelevant. The hash is the same for everyone. All that changes is the AuthParam.

@muhviehstarr: That link is no good. The AuthParam is only good for a half an hour.

I've considered checking ~/Downloads and changing the source if I find the file there. That would let you download in the browser then build the package without moving the file by hand. No good for non GUI installs. How many Arch gods would smite me for this?

direct download link for manual usage:

https://download.oracle.com/otn/java/jdk/8u212-b10/59066701cf1a433da9770636fbc4c9aa/jdk-8u212-linux-x64.tar.gz?AuthParam=1555788516_534602a168e2e0feec91287f1e1a28ff

@severach I know that I had to login on the browser and accept the license then update the package but the issue is with the link in the PKGBUILD file not related to authentication, I had edited the PKGBUILD in the process of the update but still the hash and other requirement that I couldn't fulfill

Error downloading https://download.oracle.com/otn-pub/java/jdk/8u212-b10/59066701cf1a433da9770636fbc4c9aa/jdk-8u212-linux-x64.tar.gz (unauthorized access).

Click your link from a New Private Window. /otn requires a login so won't work for the PKGBUILD.

in your PKGBUILD. file the link was https://download.oracle.com/otn-pub/java/jdk/8u212-b10/59066701cf1a433da9770636fbc4c9aa/jdk-8u212-linux-x64.tar.gz but the right link after accepting the license is https://download.oracle.com/otn/java/jdk/8u212-b10/59066701cf1a433da9770636fbc4c9aa/jdk-8u212-linux-x64.tar.gz

it should be /otn instead of /otn-pub

http://www.oracle.com/technetwork/java/javase/cpu-psu-explained-2331472.html

According to Oracle, the recommendation is precisely to download the odd packages, the even packages are not stable as the odds, they contain some non critical fixes which appears in the next odd version and should be download only if some of the fixes is absolutely necessary. Take a look to the URL.

Other thing to take into account is that from version 211/212 the oracle license has changed and is not free as the previous one. Commercial license is now put in the builds and you need to pay to use it, that's the reason why now you need to download using credentials. 201/202 were the last packages with the Binary Code License, so pay attention to it at the moment of distribute your apps built with the new licensed java.

@frealgagu:

1. I changed the jre8 url to java.com to show where I got the file. This only works for jre8. No other jre is available there. New Private Window and click through jre8 url and you will see that the download is available without a login using BundleID.

2. Good to see that someone has found a tolerable solution to this problem. I have other packages that need this. The implementation seems a little buggy.

3. The only way I can find to download Java files without a login is with a BundleID. Hashes are easy to find but I couldn't find the BundleID for 8u212 so I used the BundleID for 8u211 so at least one of all the Javas would download automatically. This should make jre8 very popular.

@severach

1. How did you do with jre8 to download automatically?

2. Could you add a DLAgent like oracle-sqldeveloper to print a note to user for dowload the archive indicating the URL.

3. Why are you using the even downloads in jdk and odd downloads for jre?

http://www.oracle.com/technetwork/java/javase/cpu-psu-explained-2331472.html

Thanks in advance.

There's no way that change from Oracle is not against some rules of the GDPR!

let's hope a God mode programmer, link with the browser and request the login, so one does not have to be using the manual form to download the installer. ;)

Steps to install jdk

• place in console> git clone https://aur.archlinux.org/jdk8.git

• enter the folder> cd jdk8

• then

• enter the oracle website

• create or login with your user

• Download the version indicated by pkgbuild

- choose the type of architecture x86, x64, etc

- important to download with the extension .tar.gz

• Save to the jdk8 folder that you created with git clone

• in console inside the folder jdk8> makepkg -cCifs

• the installation will begin

• be aware that at the end you ask for a password,

depending on how you configured your system.

It is possible to try this https://stackoverflow.com/a/10959815 ? Or break some rule of aur ?

Direct downloads are no longer available. Create your Oracle account, download, and put in with the PKGBUILD.

New and improved. Now you can just download to ~/Downloads then run the update.

I updated the links & hashes didnt need changed, just installed it 5 min ago. https://pastebin.com/eTv5ggm2

@severach In the sun-java-jdk8.desktop file please remove NoDisplay=true, and add Exec=/usr/lib/jvm/java-8-jdk/jre/bin/java -jar %F so the desktop file can be used to set to open jar files from the context menu.

I didn't notice there were two versions on the same page.

@severach, out of curiosity, why are you using build u201 instead of u202? Shouldn't build u202 be newer and come with additional bug fixes?

• https://www.oracle.com/technetwork/java/javase/downloads/jdk8-downloads-2133151.html
• https://www.oracle.com/technetwork/java/javase/8u201-relnotes-5209271.html
• https://www.oracle.com/technetwork/java/javase/8u202-relnotes-5209339.html

@x4fyr: Validation for jce_policy-8.zip and jdk-8u201-linux-x64.tar.gz fails

I pulled a new copy. All checksums good and it builds. My java app runs in jdk8. Can you give me an example of what worked in 192 and doesn't work in 201?

@wulftone, yes, I was also having the same issue. The problem is that the package isn't up-to-date, and old version is no longer available. However, if you want to solve it, just follow the next few steps:

1.- Download and extract https://aur.archlinux.org/cgit/aur.git/snapshot/jdk8.tar.gz

2.- Download this patch (https://pastebin.com/ibkbvRfV) and save it as jdk8-update.patch

3.- Apply the patch: patch PKGBUILD < jdk8-update.patch

4.- Build and install: makepkg -crsi

I hope it works!

Anyone else having issues downloading this package? It's 404ing due to a license agreement check that oracle is doing on that file now. Looking at the URL you get from the browser, there's an additional AuthParam query param on the url, e.g. https://download.oracle.com/otn-pub/java/jdk/8u201-b09/42970487e3af4f5aa5bca3f542482c60/jdk-8u201-linux-x64.tar.gz?AuthParam=1547682810_edf64a570bffeb36da56c21e3eb8f9fb (I changed the param, FYI, so this link doesn't work as is).

EDIT: I think it just needs updated to the latest version/build/hash/md5sum and it will work fine.

AFAIK the best public MD5 preimage attack is at 2^123.4. Dividing it in half (50% chance of finding collision) gives 7.0×10^36. If you generated distinct hashes with multiple GPUs at speeds of 200 billion/sec, you would find a match with those odds in 1.1 billion billion years (7.0×10^36/(200×10^9×60×60×24×365.2524) ≈ 1.1*10^18) (the universe is 14 billion years old).

I don't get the last part?

I agree it's probably very hard to achieve, but it's still possible.

Is this a reason to keeping using a very-hard-to-break but still vulnerable hashing algorithm?

If the discussion is about what color is best, you win...

How hard can it be :(: https://www.google.com/search?q=preimage+vs+collision

@Det: Some more detailed articles:

• http://bvernoux.free.fr/md5/index.php
• http://www.win.tue.nl/hashclash/rogue-ca/
• http://www.win.tue.nl/hashclash/On%20Collisions%20for%20MD5%20-%20M.M.J.%20Stevens.pdf
• https://web.archive.org/web/20100327141611/http://th.informatik.uni-mannheim.de/people/lucks/HashCollisions/
• https://documents.epfl.ch/users/l/le/lenstra/public/papers/lat.pdf

As a cryptography ignorant, I'm not gonna tell anybody what algorithms they should use. However, cryptography experts deprecated md5sum algorithm long time ago, and recommended using stronger ones such as sha256sum & sha512sum since. Beside this, even if md5sum was super-safe today, I think nobody can argue that sha256sum & sha512sum are safer. So, why using a weaker hashing algorithm?

Thank you!

That's a really poor article. Have a look at the actual MD5 one, along with collision vs. preimage resistance.

"MD5 algorithm is no longer deemed secure. [...] the use of a newer hashing tool such as sha256sum is recommended."

Source: https://en.wikipedia.org/wiki/Md5sum

Recommended algorithms (sha512sum is the strongest, and the preferred option for many people):

• https://wiki.archlinux.org/index.php/PKGBUILD#sha224sums.2C_sha384sums.2C_sha512sums

I hope it helps!

Becaaaause?

Please stop using md5 for checksums. Thanks!

Fixed again.

mv: cannot stat 'db/NOTICE': No such file or directory ==> ERROR: A failure occurred in package(). Aborting... ==> ERROR: Makepkg was unable to build jdk8.

Fixed.

getting rm: cannot remove 'db/3RDPARTY': No such file or directory ==> ERROR: A failure occurred in package(). Aborting...

https://bugs.archlinux.org/task/58057

Downloads are down: http://www.oracle.com/technetwork/java/javase/downloads/jdk8-downloads-2133151.html

Don't flag.

curl: (22) The requested URL returned error: 404 Not Found ==> ERROR: Failure while downloading http://download.oracle.com/otn-pub/java/jdk/8u162-b12/0da788060d494f5095bf8624735fa2f1/jdk-8u162-linux-x64.tar.gz Aborting...

Fixed.

==> Making package: jdk8 8u162-1 (Wed Jan 17 14:00:01 CET 2018) ==> Checking runtime dependencies... ==> Checking buildtime dependencies... ==> WARNING: Using existing $srcdir/ tree ==> Removing existing $pkgdir/ directory... ==> Entering fakeroot environment... ==> Starting package()... -> Creating directory structure... -> Removing redundancies... rm: cannot remove 'db/bin/*.bat': No such file or directory ==> ERROR: A failure occurred in package(). Aborting... :: failed to build jdk8 package(s)

?

I mean http://www.oracle.com/technetwork/java/javase/downloads/jdk8-downloads-2133151.html -> Accept license -> Full URL (or just Ctrl+U).

Same with http://www.oracle.com/technetwork/java/javase/downloads/java-archive-javase8-2177648.html

How did you find the _hash part? I can't figure it out. I need to get an older minor version of java.