I believe using the commercial Hotspot JVM provided by Oracle will not be
an option. We will probably stick with OpenJDK.
BTW, all JDK LTS releases will receive much longer updates. Please see this
blog post for the reference:
On Thu, Oct 25, 2018 at 4:37 PM Pavel Micka <Pavel.Micka(a)zoomint.com> wrote:
It was mainly a question about how the support/updates will be
handled -
if Keycloak will rely on „community only“ updates for Java 8 or if there
will be switch to new Java (updated by Oracle in the half-year window).
I am sure that our customers will ask in reviews, how we have the security
updates are handled throughout our solution. And if all parts of our
solution rely only on secure resources.
So the question should more be: Will Java under Keycloak be periodically
updated (without commercial support) after January 2019?
Regards,
Pavel
*From:* Sebastian Laskawiec <slaskawi(a)redhat.com>
*Sent:* Thursday, October 25, 2018 4:00 PM
*To:* Pavel Micka <Pavel.Micka(a)zoomint.com>
*Cc:* Meissa M'baye Sakho <msakho(a)redhat.com>; keycloak-user <
keycloak-user(a)lists.jboss.org>
*Subject:* Re: [keycloak-user] Java 11 (Docker container base)
From the support perspective, Red Hat offers extended support till June
2023 [1].
Our move towards JDK11 (LTS) relies heavily on Wildfly/EAP Team. I guess
we still have plenty of time to do the switch, so I wouldn't rush things
too much.
BTW, why do you need JDK11, especially in the container?
[1]
https://access.redhat.com/articles/1299013
On Tue, Oct 23, 2018 at 1:13 PM Pavel Micka <Pavel.Micka(a)zoomint.com>
wrote:
Sorry, end of january (my fault):
https://www.oracle.com/technetwork/java/eol-135779.html. Then Oracle Java
and OpenJDK will most probably start to diverge, as OpenJDK will not have
access to Oracle repos (afaik). So the speed of security fixes will depend
on willigness of community to fix the upcomming issues.
Pavel
From: Meissa M'baye Sakho <msakho(a)redhat.com>
Sent: Tuesday, October 23, 2018 11:04 AM
To: Pavel Micka <Pavel.Micka(a)zoomint.com>
Cc: keycloak-user <keycloak-user(a)lists.jboss.org>
Subject: Re: [keycloak-user] Java 11 (Docker container base)
Hello,
Pavel, where did you get the information that the official Java 8 support
will cease at the end of december?
https://access.redhat.com/articles/1299013
https://www.oracle.com/technetwork/java/javase/eol-135779.html
Meissa
Le lun. 22 oct. 2018 à 16:33, Pavel Micka <Pavel.Micka(a)zoomint.com<mailto:
Pavel.Micka(a)zoomint.com>> a écrit :
Hello everyone,
What is the plan for Java 11 support? The point is that current versions
of Docker containers are based on OpenJDK 8, but the official Java 8
support will cease at the end of December. Will Keycloak use Java 11 by
that time or will it rely on updates provided by the community.
This is important to us, as Keycloak is important part of our app security.
Thanks,
Pavel
// I have found this ticket in Jira, but it does not provide too many
details:
https://issues.jboss.org/browse/KEYCLOAK-7811
_______________________________________________
keycloak-user mailing list
keycloak-user@lists.jboss.org<mailto:keycloak-user@lists.jboss.org>
https://lists.jboss.org/mailman/listinfo/keycloak-user
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user