licensing | Discover the license footprint of your application | Development Tools library

The compile configuration has been deprecated for a while and was removed in Gradle 7. You should use implementation instead.

Consider populating arrays first, then iterating through it later. Like:

Apparently I was installing the wrong version (for Centos 8 instead of 7)...

It should have been

Oracle OpenJDK, not to be confused with Oracle JDK. For Java 11 specifically.

But just as good are implementations of Java provided by:

• Azul Platform Core & Azul Platform Prime by Azul Systems (formerly Zulu and Zing)
• Red Hat build of OpenJDK by Red Hat (IBM)
• Coretto by Amazon
• Microsoft Build of OpenJDK by Microsoft
• Adoptium by the Eclipse Foundation (formerly AdoptOpenJDK)
• Pivotal Distribution of OpenJDK by Pivotal Software, Inc.
• SapMachine by SAP
• Liberica by BellSoft
• Source and builds via Ports & Packages on FreeBSD
• Source and builds via aptget and such on Linux

If this is a stupid/repeated question, I sincerely apologize. I hate being a pest, but I can't figure this out.

While not stupid, yes, this is a repeated question. You made some specific points, so I will respond specifically. But I will try to be brief. For more detail, search Stack Overflow for many existing such questions.

the GPL2-CPE licensed version of the JavaJDK, which I will call "OpenJDK"

You misunderstand the nature of how the Java ecosystem works.

OpenJDK is not a product. OpenJDK is an open-source project based on an industry-wide collaboration. The principal goal of the project is producing a codebase implementing the Java specifications, along with JDK Enhancement Proposals (JEPs) and Java Specification Requests (JSRs). You can view and obtain the source code via Mercurial or via GitHub.com.

OpenJDK is owned by Oracle Corporation but operated in tandem with several collaborating companies including IBM/Red Hat, Apple, SAP, and others who contribute talent and code.

The OpenJDK project does not produce binaries of the final released versions. Instead, several vendors release binaries and/or installers for the official releases. Most of these vendors’ products are based largely or entirely on the OpenJDK source code. Oracle and other organizations provide suites of tests to verify that such products comply with the Java specs. Note that to use the Java™ legally-protected trademark, a company must come to term with Oracle. In contrast, the OpenJDK term can be used freely by any vendor, so you will see that term in many of the products.

I want the Oracle version "straight from the horse's mouth,"

There is nothing special about getting a Java implementation from Oracle in particular.

Oracle has repeatedly publicly officially, in writing and verbally, stated that their own Oracle-branded Oracle JDK/Oracle Java SE product (requiring a fee for use in production) will be maintained at feature-parity with the OpenJDK project. Oracle even went so far as to donate some related formerly-commercial products such as Flight Recorder and Mission Control to the OpenJDK project.

Oracle retains the right to distribute fixes to their paying customers on an urgent basis. But otherwise Oracle contributes to, and depends on, the OpenJDK code base.

… to avoid any discrepancies between the documentation I was quickly able to download from Oracle

All vendors producing products implementing the Java specs depend on that very same documentation.

An answer on that page had several diagrams that were helpful in explaining a lot of things

Thanks, those are my handiwork.

but the diagrams again redirects me to either jdk.java.net or third-party vendors

➥ Oracle produces three products implementing the Java specs:

• Oracle JDK — Their commercially-supported binaries. Fee required for use in production (see Oracle’s license terms).
• Oracle OpenJDK — Oracle's build of the OpenJDK codebase, GPL2-CPE licensed, free-of-cost. To quote Oracle: “offers the same features and performance as Oracle JDK under the GPL license”.
• GraalVM — A special product offering features like ahead-of-time native compilation.

These three Oracle products are shown in my flowchart diagram as the first three green bubbles. One green bubble is the first in the higher group of "special needs" products, for GraalVM. The other two green bubbles are shown at the top of the blue barrel.

You asked:

1. How can I get Oracle OpenJDK 11.0.11+9 directly from Oracle?

Apparently you want Oracle's non-commercial unsupported distribution built from the OpenJDK source code, and published under the GNU General Public License, version 2, with the Classpath Exception. If so, see the product page for Oracle OpenJDK (not to be confused with Oracle JDK/Oracle Java SE.)

This page, Java Platform, Standard Edition 11 Reference Implementations, provides links for current releases of such Java 11 implementations for Linux and for Windows. The current release is for build 11+28. If you really want the older outdate 11.0.11+9 release, you will need to go spelunking through their archives. I recommend sticking with the latest build instead.

1. Does the version available at Adoptium have any differences to Oracle OpenJDK 11.0.11+9 from Oracle?

No. I quoted above Oracle saying explicitly, no differences. Oracle OpenJDK is built directly from the OpenJDK source code. As are the releases from Adoptium at the Eclipse Foundation, formerly known as AdoptOpenJDK. And, as are releases from some other vendors.

Oracle has been working to disabuse you and others of the incorrect notion that somehow there is "real" Java from Oracle and "fake" Java from others. Nearly all the implementations you can get from any of several vendors are all built largely or entirely from the OpenJDK codebase. There are two exceptions:

• Like Oracle, some vendors such as Azul Systems, Red Hat, and others reserve the right to distribute urgent fixes to their paying customers faster than would happen going through the OpenJDK process.
• A few products are specialized, to meet niche needs not addressed by the OpenJDK design goals. For example, AOT-compilation in GraalVM, and addressing very large amounts of memory with exceptional garbage-collection in Azul Platform Prime (formerly Zing) by Azul Systems.

1. If getting what I'm looking for is not possible, then where does Adoptium get what they provide? Do they just build their builds from source?

Adoptium provides binaries & installers built from the source code of OpenJDK.

Adoptium also builds a suite of tests to verify their builds’ compliance with the Java specs. And Adoptium has made open-source projects of their tests and tooling.

Some vendors adapt their own distributions from the work of Adoptium. Indeed, the Adoptium project itself is a collaborative effort by several of the seemingly-competing vendors (along with other folks).

1. If what I'm looking for is not possible, why is it not possible? Is it due to Oracle's licensing decisions? Does the update I'm looking for count as a paid support patch? If so, I thought Oracle didn't release those updates to OpenJDK?

If I understand you correctly, what you want is possible, in the Oracle OpenJDK open-source GPL2-CPE product, not to be confused for the Oracle JDK commercial product. See your “1.” item a few paragraphs higher in this Answer.

I strongly suggest your read Java Is Still Free, a white paper written by pillars of the Java community.

The fact it obfuscates itself is a good indicator it maybe malicious, if you want to see what it's attempting to run you can;

Comment out this line (like below);

Issue

The problem is that plugin (hierynomus/license-gradle-plugin) by default takes dependency configuration that is not resolvable. There are some issues opened in the github repository.

• https://github.com/hierynomus/license-gradle-plugin/issues/182
• https://github.com/hierynomus/license-gradle-plugin/issues/181
• https://github.com/hierynomus/license-gradle-plugin/issues/174

It seems latest Gradle version or this plugin version broke something. I expect a solution soon..

Here is the topic about resolvable dependencies in Gradle documentation

Solution

A workaround to get your report is following.

1. Apply the plugin
2. Configure for which type of dependencies you want to have generated report. For example for Java project those configurations can be compileClasspath or runtimeClasspath.

Exmaple of the build script below (in Groovy)

To solve the problem, you need SQL Server installed in your machine.

If you have windows 10 in your system, check if you have SQL Server installed in Apps and features.

You can also check if you have any version of Microsoft.SqlServer.Types in your GAC_MSIL (Global Assembly Cache) directory on C:\Windows\assembly\GAC_MSIL\Microsoft.SqlServer.Types, if this folder is empty or does not exist, you will need to install Microsoft.SqlServer.Types in your machine.

You did indentation mistake. Your print statement outside of for loop.

Its worth mentioning that ClearKey is not really seen as a DRM - it lacks the secure key exchange mechanisms that most DRM's include. In DASH forum's own words ClearKey is 'to provide a level of content protection between HTTPS-delivered token auth and DRM'.

If this is good for you then, it may well be an appropriate choice for your use case and it does provide a hurdle against piracy.

The keys themselves are regular 16 byte AES encryption keys.

You can just create your own key generator but there are some best practices you should be aware of - see for example: https://stackoverflow.com/a/3452620/334402 (Java) and https://stackoverflow.com/a/42573924/334402 (.NET - note the discussion in comments re strings also).

There are also sites and services that can generate keys (see example below), but I think from your question you are more likely to want to build this into your own solution as above.

• https://www.allkeysgenerator.com/Random/Security-Encryption-Key-Generator.aspx

(Update - see discussion in comments) - the EME specification, which defines how browsers process encrypted content including how they request license keys, contains the following on the encoding of the keys that are returned:

"kty" (key type) "oct" (octet sequence)

"k" (key value) The base64url encoding of the octet sequence containing the symmetric key

value "kid" (key ID) The base64url encoding of the octet sequence containing the key ID value

This is specifically for ClearKey - keys for DRM systems are communicated securely in the encrypted DRM system license request and response messaging.

The important thing to note here is the 'base64url' encoding - this is a variant of base64 encoding which is 'url friendly' and does not include the characters + and /. More info on base64 variants is available here:

• http://en.wikipedia.org/wiki/Base64#Variants_summary_table

The impact of this is that you have to use base63url encoding for the ClearKey license response for EME compliant solutions - i.e. most (or all...) browser players.

One other note - once you have the keys they they can be requested via a licenser server URL which is included in the manifest, as for some DRM's, or the key itself can be embedded in the manifest directly.