Does java provider/vendor matter when deploying jostle?

[chmodshubham]

Hi team,

I have this question regarding java vendor importance in the jostle deployment. In the readme, it is recommended to install java 25 from openjdk; however, while further moving in the guide, the Amazon Corretto distribution is being used, and similarly, I found in one of the issues that someone is using Eclipse Adoptium distribution, so I believe the distribution doesnt matter much, the only requirement is java 25.

But when used oracle java 25, it failed at some of the tests(18) while building the jar file(attached terminal logs), so I switched to openjdk java25 and it works fine. And one more thing, before building the jar file with test cases enabled, I skipped the test cases and tried it, and it worked fine, and here are some of those screenshots.

gradlew-build.log

./gradlew clean build -x test

java --module-path jostle/build/libs/openssl-jostle-1.0-SNAPSHOT.jar \ --enable-native-access=org.openssl.jostle.prov \ --module org.openssl.jostle.prov/org.openssl.jostle.util.DumpInfo

So, can anyone confirm this behavior, whether it's a mistake on my end during deployment or an issue with the code?

I have now shifted to openjdk for testing, so these are the old logs, and I forgot to store the error reports(apologies), but I can redeploy again and share it if needed.

[t-j-h]

To save folks time looking through the test log for failures, they are all of this form:

AESAgreementTest > aesGCMSpreadSplitUpdateDoFinal() FAILED
    java.lang.SecurityException at AESAgreementTest.java:866
        Caused by: java.lang.SecurityException at AESAgreementTest.java:866
            Caused by: java.io.FileNotFoundException at AESAgreementTest.java:866

[mwcw]

I think I know what the issue is.

If you are using Oracle's JVM or an IBM JVM it will require the jar to be signed, there may also be other JVMs with this requirement. As the tests load the provider those JVMs will reject the provider for being unsigned.

The easiest thing to do is to use an OpenJDK provider as it does not require the provider jar to be signed.

I use OpenJDK provided by Azul, and I think the Github actions are using Adoptium/Temurin.

Azul, zulu:
https://www.azul.com/downloads/?package=jdk#zulu

Temurin:
https://adoptium.net/temurin/releases

[chmodshubham]

Got it. Thanks for your response.