apache / apache/karaf

Rework JavaSecurityTest

Open
#2,082 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
712
Forks
664
Avg merge
2d 20m
Merged PRs (30d)
84

Description

`itests/test/src/test/java/org/apache/karaf/itests/JavaSecurityTest.java` has been disabled during the upgrade to JDK21.
See discussion https://github.com/apache/karaf/pull/1992#issuecomment-3353962567.

We have some issues with the `SecurityManager`, which has been deprecated for removal in JDK 17, disabled by default in JDK 21, and permanently disabled in JDK 25 (I refer to the LTS versions only).

This ticket about investigating how Apache Felix handles the removal of SecurityManager in recent JDKs and to derive what is needed on Karaf side.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start with itests/test/src/test/java/org/apache/karaf/itests/JavaSecurityTest.java and read the linked discussion in pull request 1992. Investigate how Apache Felix handles SecurityManager removal on JDK 17, 21, and 25. Done means the required Karaf changes are identified and JavaSecurityTest is no longer disabled with coverage appropriate for supported JDKs.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
backend, security
Issue type
Refactor
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.