Minor OpenJDK 11 update changed ObjectIdentifer constructor to private

[Alan Bateman]

On 03/10/2024 10:17, Denis Bredelet wrote:
> Hello,
>
> With the OpenJDK 11.0.21 release the constructor visibility changed.
> That breaks code that relied on
> "sun.security.util.ObjectIdentifier(String oid)" such as Apache Kerby
> directory's GssTokenV1 class.
>
> The error I receive is:
>
> class org.apache.kerby.kerberos.kerb.gss.impl.GssTokenV1 tried to
> access private method 'void
> sun.security.util.ObjectIdentifier.<init>(java.lang.String)'
>
> The change that affected the visibility of the constructor is:
>
> https://bugs.openjdk.org/browse/JDK-8310005
>
> Shouldn't the signature of the class remain stable between minor
> versions? 11.0.20 -> 11.0.21
>
This is a JDK internal class that can change at any release or build. I 
don't know anything about Apache Kerby, is it actively maintained? Is 
there is an issue in its issue tracker to remove the dependency on this 
JDK internal class?

-Alan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mail.openjdk.org/pipermail/security-dev/attachments/20241003/d392c847/attachment-0001.htm>