openjdk-8: build with SunPKCS11 provider enabled

[xnox]

Currently SunPKCS11 provider is enabled in jdk 11..22, but not 8.

Pass configure option to include SunPKCS11 on jdk 8 as well.

2024/07/17 00:58:15 INFO checking whether to enable the PKCS11 crypto provider using NSS... enabled by default (edit java.security to disable)
2024/07/17 00:58:15 INFO checking for nss... yes

# diff -u /usr/lib/jvm/java-1.8-openjdk/jre/lib/security/java.security /work/packages/x86_64/java.security 
--- /usr/lib/jvm/java-1.8-openjdk/jre/lib/security/java.security
+++ /work/packages/x86_64/java.security
@@ -74,10 +74,7 @@
 security.provider.7=com.sun.security.sasl.Provider
 security.provider.8=org.jcp.xml.dsig.internal.dom.XMLDSigRI
 security.provider.9=sun.security.smartcardio.SunPCSC
-# the NSS security provider was not enabled for this build; it can be enabled
-# if NSS (libnss3) is available on the machine. The nss.cfg file may need
-# editing to reflect the location of the NSS installation.
-#security.provider.10=sun.security.pkcs11.SunPKCS11 ${java.home}/lib/security/nss.cfg
+security.provider.10=sun.security.pkcs11.SunPKCS11 ${java.home}/lib/security/nss.cfg
 
 #
 # Sun Provider SecureRandom seed source.

# diff /usr/lib/jvm/java-1.8-openjdk/jre/lib/security/nss.cfg /work/packages/x86_64/nss.cfg 
--- /usr/lib/jvm/java-1.8-openjdk/jre/lib/security/nss.cfg
+++ /work/packages/x86_64/nss.cfg
@@ -1,5 +1,5 @@
 name = NSS
-nssLibraryDirectory = 
+nssLibraryDirectory = /usr/lib
 nssDbMode = noDb
 attributes = compatibility
 handleStartupErrors = ignoreMultipleInitialisation

This corrects java.security & nss.cfg files.

[xnox]

$ for i in 8 11 17 21 22; do docker run -ti --entrypoint sh cgr.dev/chainguard-private/jdk:openjdk-$i-dev -c "echo jdk-$i; find /usr/lib -name java.security 2>/dev/null| xargs grep SunPKCS11"; done
jdk-8
#security.provider.10=sun.security.pkcs11.SunPKCS11 ${java.home}/lib/security/nss.cfg
jdk-11
security.provider.12=SunPKCS11
jdk-17
security.provider.12=SunPKCS11
jdk-21
security.provider.12=SunPKCS11
jdk-22
security.provider.12=SunPKCS11

Actually only jdk-8 is out of line.