Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • The community may file bugs but may commonly be expected to reproduce unusual or esoteric problems on a fully supported distribution before further investigation takes place.

  • Members of the Shibboleth Consortium may request technical support related to this distribution.

  • Such distributions may be tested as above but possibly typically with reduced regularity or completeness.

  • The project may have lesser ongoing ability to replicate the complete environment but will do so when necessary to support Consortium members reporting issues.

...

The following specific distributions, and any others not covered above, are neither tested nor supported:

  • Any distribution non-LTS “feature” release of Java (Java 9, Java 10, Java 12 through Java 1516, Java 18 through 20, etc.)

  • Any distribution of the Java JRE (as opposed to the JDK)

...

  • Reference to a specific version of a Java distribution should be taken to refer to the most recent generally available release. For example, a reference to Java 11 at the time of writing refers to 11.0.316; previous versions (11, 11.0.1, …, 11.0.215) are not tested and not supported.

  • Reference to a specific version of an operating system should be taken to refer to the most recent generally available release.

  • Reference to a generic operating system ("Linux", "Windows") should be taken to mean that we will test under a specific version of the operating system (currently CentOS 7 or Rocky 9 for Linux, Windows Server 2016 or 2022 for Windows) but believe that such testing will be representative of similar systems as long as they are reasonably recent. "Linux", for example, would cover any reasonably recent operating system distribution incorporating a Linux kernel, but not FreeBSD.

  • Only 64-bit variants of the JDK are covered.

  • Only 64-bit Intel architecture variants (amd64, also known as x86_64) of operating systems are covered.

Note: information about Java distributions supported by Historic Product Platforms can be found in Java Distributions for Historic Product Platforms.

Java Distributions for the Java

...

17 Platform

The Java 11 17 Platform is used by:

  • Identity Provider v4v5.x

  • OpenSAML v4v5.x.

  • Metadata Aggregator v0.10 and v1.0.

The primary distribution for this platform is Amazon Corretto 11 17 for Linux.

The following distributions are fully supported:

  • Amazon Corretto 11 17 for Linux

  • Amazon Corretto 11 17 for Windows

  • Amazon Corretto 17 21 for Linux

  • Amazon Corretto 17 for WindowsRed Hat's OpenJDK 11 21 for Windows

  • Red Hat’s OpenJDK 17 for Linux as supplied under Red Hat Enterprise Linux 8 or Rocky Linux 8

  • Red Hat’s OpenJDK 17 for Linux as supplied under Red Hat Enterprise Linux 9 or Rocky Linux 9

  • Red Hat’s OpenJDK 21 for Linux as supplied under Red Hat Enterprise Linux 7 9 or equivalentRocky Linux 9

The following distributions are partially supported:

  • Debian's Debian’s OpenJDK 11 17 as supplied under Debian 10 "buster"11 “bullseye”

  • Debian’s OpenJDK 11 17 as supplied under Debian 11 “bullseye”12 “bookworm”

We will also test the following, although  although they are not supported:

Java Distributions for the Java

...

11 Platform

The Java 7 11 Platform is used by:

  • Identity Provider v3v4.x (end of life)

  • OpenSAML v3v4.x (end of life)Metadata Aggregator v0.9.x (developer preview)

  • Java XML Security Tool v2v3.x  (end of life)

The primary distribution for this platform is Oracle Java 7 is Amazon Corretto 11 for Linux (from Java SE 7 Archive Downloads).

The following distributions are are fully supported:

  • Amazon Corretto 8 11 for Linux

  • Amazon Corretto 8 11 for Windows

  • Amazon Corretto 11 17 for Linux

  • Amazon Corretto 11 for Windows

  • Oracle Java 8 for Linux (from Oracle's "Java Downloads" page)

  • Oracle Java 8 for Windows (from Oracle's "Java Downloads" page)17 for Windows

  • Red Hat's OpenJDK 8 11 for Linux as supplied under Red Hat Enterprise Linux 7 or equivalentCentOS 7

  • Red Hat's OpenJDK 11 for Linux as supplied under Red Hat Enterprise Linux 8 or Rocky Linux 8

  • Red Hat’s OpenJDK 17 for Linux as supplied under Red Hat Enterprise Linux 7 8 or equivalentRocky Linux 8

The following distributions are partially supported:

  • Debian's OpenJDK 8 11 as supplied under Debian 9 10 "stretchbuster"Debian's OpenJDK 11

  • Debian’s OpenJDK 11 as supplied under Debian 11 “bullseye”

  • Debian’s OpenJDK 17 as supplied under Debian 11 “bullseye”

  • Debian’s OpenJDK 17 as supplied under Debian 10 "buster"12 “bookworm”

We will also test the following, although they are not supported:

...

  • All other versions of Oracle Java for Linux with versions > 11 currently available from Oracle's "Java Downloads" page (currently: Java 21)

  • All other versions of Oracle Java for Windows with versions > 11 currently available from Oracle's "Java Downloads" page (currently: Java 21)

  • Any Oracle OpenJDK builds currently available from jdk.java.net which are in the early access "Rampdown Phase One" phase or later. Note that we will not necessarily always test the most recent build of these versions, given the high frequency of release. (currently: Java 22)

Rationale by Distribution

...

Since that time, however, two important changes mean that we no longer take this position:

  • A licensing change means Licensing changes mean that although Oracle's JDK releases are still available for free use by developers, they are no longer in general free for production use.

    Note that this situation has changed as of Java 17, for which Oracle have introduced a new free Java license

    The exact situation varies depending on Java version, and on the length of time since each version was released. Consult Oracle’s documentation for details about the free Java license and other related matters.

  • The Oracle JDK and OpenJDK code bases have come much closer together, such that we no longer anticipate large functional differences between the two.

...

Oracle’s support roadmap can be found at https://www.oracle.com/java/technologies/java-se-support-roadmap.html. A matrix documenting past and intended future releases of Oracle’s JDK is also available at https://www.java.com/releases/matrix/.

Oracle OpenJDK

Oracle produces OpenJDK builds through the early development phases of each new version of Java. As these provide the best available advance indication of the contents of the new version, we test these builds as part of our long term support of the evolution of Java, but we do not support these builds for production use.

...

Amazon Corretto provides builds of both OpenJDK 8 and OpenJDK 11 11, 17 and 21 for our two most important deployment platforms (Linux and Windows) in both "real installer" and "tarball" packages. This makes it a good distribution for us to recommend to our deployers. In addition, they provide similar builds for macOS, which is important to several of us as developers.

...

Amazon’s support lifecycle for Corretto can be found at Amazon Corretto FAQs:

  • Corretto 8 11 end of life is October 2027.

  • Corretto 17 end of life is June 2026October 2028.

  • Corretto 11 21 end of life is September 2027October 2030.

Red Hat OpenJDK

Red Hat have a critical role in the JDK updates projects for both Java 8 and Java 1111, 17 and 21. They provide only two OpenJDK builds themselves, however: for Red Hat Enterprise Linux, and for Windows.

We anticipate that Red Hat's "vendor" OpenJDK (both OpenJDK 8 and OpenJDK 11) distribution for their own Red Hat Enterprise Linux will be used by many of our deployers simply because of the convenience factor. We therefore support the use of Red Hat's OpenJDK release distributions in this context.

We do not support Red Hat's OpenJDK releases for Windows at this time, and we do not test against them.

Red Hat’s policies around OpenJDK support are described at https://access.redhat.com/articles/1299013:

  • OpenJDK 8 11 is supported by Red Hat on supported underlying RHEL distributions until May 2026(currently, RHEL 7+) until October 2024.

  • OpenJDK 11 17 is supported by Red Hat on supported underlying RHEL distributions until October 2024(currently, RHEL 8.5+ and RHEL 9.0+) until October 2027.

  • OpenJDK 21 is supported by Red Hat on supported underlying RHEL distributions (currently, RHEL 8.9+ and RHEL 9.3+) until December 2029.

Red Hat Enterprise Linux “Rebuilds”

There are several Linux distributions available which purport to be direct “bug for bug” rebuilds of versions of Red Hat Enterprise Linux. In general, these behave identically to the upstream RHEL release but we have on occasion noted differences between them, in particular in the timing of availability of a particular OpenJDK release to each distribution. This means that, given the variety available, we are unable to fully support all RHEL rebuild distributions. We do fully support one specific rebuild distribution counterpart for each supported RHEL release:

  • As a counterpart to RHEL 7, we fully support CentOS 7.

  • As a counterpart to RHEL 8, we fully support Rocky Linux 8.

  • As a counterpart to RHEL 9, we fully support Rocky Linux 9.

Debian OpenJDK

See https://wiki.debian.org/DebianReleases

Debian 9 “stretch” and earlier are not supported.

Debian 10 (Buster)

Debian 10, also known as "stretch", the “oldoldstable” release at 2021-08-23Buster, ships a vendor-supplied OpenJDK 8 11 only. This is partially supported for the Java 7 platform and IdP v3, but is obviously ineligible for any support for the Java 11 platform and IdP v4.

Note, however, that Amazon Corretto 11 is fully supported under Linux generically and is available in .deb  packaging. It may therefore be suitable for deployers using Debian 9 but we do not test this specific combination.

Debian 9’s Debian 10’s long-term support ends on 20222024-06-30, see https://wiki.debian.org/LTS.

Debian

...

11 (Bullseye)

Debian 11, also known as "buster"Bullseye, the “oldstable” release at 20212023-0806-2316, ships a vendor-supplied OpenJDK 11 only. This as its primary Java distribution and OpenJDK 17 as a secondary, additional feature.

  • The OpenJDK 11 distribution is partially supported for the Java 11 platform and IdP v4.

  • The OpenJDK 17 distribution is partially supported for

...

  • the Java 11 platform and IdP v4, and for the Java

...

  • 17 platform and IdP

...

  • v5.

Debian 10’s 11’s long-term support ends on 20242026-06-30, see https://wiki.debian.org/LTS.

Debian

...

12 (Bookworm)

Debian 12, also known as “bullseye”Bookworm, is the “stable” release at 20212023-08-23, 06-16. It ships a vendor-supplied OpenJDK 11 and a pre-release OpenJDK 17.

  • The OpenJDK 11 release 17 distribution is partially supported for the Java 11 platform and IdP v4. It is not supported , and for the Java 7 17 platform and IdP v3.

  • The OpenJDK 17 release is not supported at present. This decision will be reviewed if and when it becomes supported by Debian.

  • v5.

Debian 12’s long-term support ends on 2028-06-30, see https://wiki.debian.org/LTS.

Ubuntu OpenJDK

Although the vendor-supplied version of OpenJDK shipped by Ubuntu Linux is closely related to that supplied by Debian, we do not support any version of it. If your deployment platform is Ubuntu, we support but do not test Amazon Corretto on this platform.

If your deployment requires using the vendor-supplied OpenJDK on Ubuntu Linux, note that only certain versions garner full security support from Ubuntu by virtue of being part of the “main” repository. The same level of support of alternative versions installed from the “universe” repository may require a Ubuntu Pro subscription. The following table may be helpful in understanding the level of support provided for different versions of Java across current Ubuntu versions:

Release

Codename

OpenJDK 8

OpenJDK 11

OpenJDK 17

OpenJDK 21

18.04 LTS

Bionic Beaver

universe

main

universe

n/a

20.04 LTS

Focal Fossa

universe

main

universe

universe

22.04 LTS

Jammy Jellyfish

universe

main

universe

universe

24.04 LTS

Noble Numbat

universe

universe

main

main

Adoptium (formerly AdoptOpenJDK)

...

GraalVM is an emerging alternative Java VM which shows promise particularly for mixed-language environments. It is available in editions based either on Java 8 11 or on Java 17 (or on Java 118, for commercial “Enterprise” licensees).

Note that GraalVM includes a different JavaScript engine than was shipped with Java 8 or Java 11.

...