RFR: 8357691: File blocked.certs contains bad content when boot jdk 25 is used, sun/security/lib/CheckBlockedCerts.java failing

[Matthias Baesken]

On Thu, 25 Sep 2025 09:10:40 GMT, Matthias Baesken <mbaesken at openjdk.org> wrote:

> When using boot JDK 25 we end up with bad content in  lib/security/blocked.certs  because  cds related warning output shows up there.
> 
> The problem is with extra lines in the generated `blocked.certs` file, at the start of the file there is something like this
> 
> 
>> [0.010s][error][cds] An error has occurred while processing the shared archive file. Run with -Xlog:aot,cds for details.
>> [0.010s][error][cds] Mismatched values for property jdk.module.addexports: java.base/sun.security.util=ALL-UNNAMED specified during runtime but not during dump time
>> [0.010s][error][cds] Disabling optimized module handling

Hi Ioi , thanks for the detailed explanation, why this happens.

And thanks for the reviews !

-------------

PR Comment: https://git.openjdk.org/jdk/pull/27485#issuecomment-3337221857