Skip to content

Conversation

@visakh005hyu
Copy link
Member

@visakh005hyu visakh005hyu commented Dec 11, 2025

Fixes ##32996

We include the --add-exports java.base/sun.security.action=ALL-UNNAMED JVM parameter in the java9.options file that is needed for the com.ibm.crypto.ibmkeycert.jar file.

Starting in Java 24, the sun.security.action.* classes were removed, so if the JVM parameter --add-exports java.base/sun.security.action=ALL-UNNAMED is passed in, the JVM gives an informational warning:

WARNING: package sun.security.action not in java.base

in the console.log file.

To fix this problem, the --add-exports java.base/sun.security.action=ALL-UNNAMED parameter should be excluded whenever running on Java 24+.

This update checks for the Java level in the release file (if it exists) in the JAVA_HOME directory. From this, if we are able to determine the Java level being used is Java 24+, then we exclude the JVM parameter --add-exports java.base/sun.security.action=ALL-UNNAMED. This update will also allow future JVM parameters from the java9.options file to be excluded if necessary.

This PR also grants explicit JNI permission when starting the JVM on z/OS when running on Java 24+. JNI is required on the z/OS platform and in Java 24+, explicit permission when starting the JVM is required to use JNI.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants