[QPID-8624] [Broker-J] Unable to auto generate self signed certificate on Java17

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: qpid-java-broker-9.0.0
• Fix Version/s: qpid-java-broker-9.1.0
• Component/s: Broker-J
• Assignee: Unassigned
• Reporter: Daniil Kirilyuk
• Created: 21/Feb/23 14:02
• Updated: 08/Sep/23 08:11
• Resolved: 24/May/23 06:33

Description

When trying to autogenerate a keystore with self signed certificate on java 17 environment following error is thrown: 

org.apache.qpid.server.configuration.IllegalConfigurationException: Unable to construct keystore 
at org.apache.qpid.server.security.AutoGeneratedSelfSignedKeyStoreImpl.generatePrivateKeyAndCertificate(AutoGeneratedSelfSignedKeyStoreImpl.java:296) 
at org.apache.qpid.server.security.AutoGeneratedSelfSignedKeyStoreImpl.postResolve(AutoGeneratedSelfSignedKeyStoreImpl.java:169) 

Caused by: java.lang.IllegalAccessException: class org.apache.qpid.server.transport.network.security.ssl.SSLUtil cannot access class sun.security.tools.keytool.CertAndKeyGen (in module java.base) because module java.base does not export sun.security.tools.keytool to unnamed module @6b37576e at java.base/jdk.internal.reflect.Reflection.newIllegalAccessException(Unknown Source) at java.base/java.lang.reflect.AccessibleObject.checkAccess(Unknown Source)