[IdPv3] Targeting Java 7

Chad La Joie lajoie at shibboleth.net
Thu Oct 27 13:53:01 BST 2011


With Java 6, OpenJDK and Sun's JDK are slightly different.  There was
some licensed material that they had not yet finished re-implementing
in OpenJDK when Java 6 was released.

Oracle's Java 7 JDK is exactly what you find in OpenJDK and that's
apparently how it's going to be going forward.  So, I would imagine
that for Java 7 you'll only see openjdk packages.  Or not.  Some of
the ways these packages are done seems very odd to me.

On 10/27/11 8:36 AM, Etienne Dysli wrote:
> I've only used Sun's JVM for running the IdP and never tried
> OpenJDK (despite it being the default on my workstation). From my
> point of view (Ubuntu 10.04), I get security updates for Oracle JDK
> 6 from Canonical but not so much for OpenJDK. Since these two are
> essentially the same code base, I'd guess they have the same
> vulnerabilities... but it looks like either OpenJDK is not patched
> or Canonical's support is lacking.


More information about the dev mailing list