s.s.s.ServerHandshaker uses Ctor not existing in current JDK

[pzygielo]

grizzly-npn/bootstrap/src/main/java/sun/security/ssl/ServerHandshaker.java

Lines 835 to 840 in 8947687

	session = new SSLSessionImpl(protocolVersion, CipherSuite.C_NULL,
	getLocalSupportedSignAlgs(),
	sslContext.getSecureRandom(),
	getHostAddressSE(), getPortSE(),
	(requestedToUseEMS &&
	(protocolVersion.v >= ProtocolVersion.TLS10.v)));

Please see payara/Payara#3284 for original report on this.

[smillidge]

@anajosep can you port over the change you put on the JavaEE repo javaee/grizzly-npn@4082270. This will be needed for the December Eclipse GlassFish release.

[anajosep]

@smillidge Yes I will be porting this change to the Eclipse Grizzly NPN as well.

[rlfnb]

Just out for curiosity: https://www.oracle.com/technetwork/java/faq-sun-packages-142232.html

I'm facing the problem (depending on unstable APIs) more and more often in multiple JavaEE libraries (Jersey, Grizzly...). (com)?.sun.* packages were never part of the public API. Maybe, it makes sense for future stability to get rid of all (com)?.sun.* (and other non public APIs in the JDK as well) packages?

[smillidge]

these changes are required because fundamentally the JDK 8 SSL packages do not support ALPN negotiation. ALPN support didn't come in until JDK9+. That is why this jar is required, it replaces the JDK 8 SSL classes with versions that support ALPN negotiation.

[smillidge]

@anajosep any idea when you will port as otherwise Eclipse GF will go out not working on the latest JDK 8

[anajosep]

This issue is addressed by Grizzly NPN 1.9 uploaded to OSSRH staging repository.
The PR eclipse-ee4j/glassfish#22650 is merged to include it to the GlassFish bundle.
Closing this issue.