Discussed in #835
Originally posted by joelcharlebois February 5, 2025
I noticed that the OpenAM Docker image's environment variables includes JAVA options (JAVA_OPTS) with several "--add-exports" options. The OpenAM Docker image runs Tomcat 9 on JDK 21 and includes several "--add-exports" JVM options, as below:
--add-exports java.base/sun.security.util=ALL-UNNAMED
--add-exports java.security.jgss/sun.security.krb5=ALL-UNNAMED
--add-exports java.base/sun.security.x509=ALL-UNNAMED
--add-exports java.base/sun.security.tools.keytool=ALL-UNNAMED
--add-exports java.xml/com.sun.org.apache.xerces.internal.dom=ALL-UNNAMED
The OpenAM Installation Guide documentation, "Preparing for Installation" section, here: https://doc.openidentityplatform.org/openam/install-guide/chap-prepare-install, makes no mention of the "--add-exports" JVM options in the "Preparing a Java Environment" section, nor in the "Preparing Apache Tomcat" section.
When preparing the Java Environment, for deployment on various containers (e.g. Tomcat 9), using recent JDKs (e.g. 21), do we need to configure the JVM options for the container startup to include the various "--add-exports" options?
Thanks.