Skip to content

Conversation

@Arunkumar-Kallyodan
Copy link
Contributor

Fixes ##32996

We include the --add-exports java.base/sun.security.action=ALL-UNNAMED JVM parameter in the java9.options file that is needed for the com.ibm.crypto.ibmkeycert.jar file.

Starting in Java 24, the sun.security.action.* classes were removed, so if the JVM parameter --add-exports java.base/sun.security.action=ALL-UNNAMED is passed in, the JVM gives an informational warning:

WARNING: package sun.security.action not in java.base

in the console.log file.

To fix this problem, the --add-exports java.base/sun.security.action=ALL-UNNAMED parameter should be excluded whenever running on Java 24+.

This update checks for the Java level in the release file (if it exists) in the JAVA_HOME directory. From this, if we are able to determine the Java level being used is Java 24+, then we exclude the JVM parameter --add-exports java.base/sun.security.action=ALL-UNNAMED. This update will also allow future JVM parameters from the java9.options file to be excluded if necessary.

This PR also grants explicit JNI permission when starting the JVM on z/OS when running on Java 24+. JNI is required on the z/OS platform and in Java 24+, explicit permission when starting the JVM is required to use JNI.

@Arunkumar-Kallyodan Arunkumar-Kallyodan marked this pull request as ready for review December 12, 2025 17:23
@Arunkumar-Kallyodan
Copy link
Contributor Author

Created this new PR with verified commits

Hello @jhanders34 ,
I’ve cherry-picked the commits from @gjwatts #33028 and added the additional fix for the server-status issue during server startup, where the new Java option for native access wasn’t being set. Could you please review the PR?
@tspewak has already tested the changes on z/OS and confirmed they look good.

@Arunkumar-Kallyodan
Copy link
Contributor Author

Arunkumar-Kallyodan commented Dec 15, 2025

!build (view Open Liberty Personal Build - ❌ completed with errors/failures.)

Note: Target locations of links might be accessible only to IBM employees.

@LibbyBot
Copy link
Member

Code analysis and actions

DO NOT DELETE THIS COMMENT.
  • 4 FAT files were changed, added, or removed.

  • Check that the build did not break the affected FAT suite(s).

  • 9 product code files were changed.

  • Please describe in a separate comment how you tested your changes.

  • 1 messages files were changed and need an L2 review.

  • @OpenLiberty/message-reviewer Please review.

    • dev/com.ibm.ws.kernel.boot/resources/com/ibm/ws/kernel/boot/resources/LauncherMessages.nlsprops
  • 1 NLS files were changed and need an ID review.

  • @OpenLiberty/message-reviewer Please review.

    • dev/com.ibm.ws.kernel.boot/resources/com/ibm/ws/kernel/boot/resources/LauncherMessages.nlsprops

@Arunkumar-Kallyodan Arunkumar-Kallyodan self-assigned this Dec 19, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants