Policy Server installer does not recognize AdoptOpenJDK 11.0.20 - Invalid JRE Path

Products

• SITEMINDER
• CA Single Sign-On

Issue/Introduction

Policy Server R12.8.7 installer is not recognizing the AdoptOpenJDK 11.0.20 and higher and reports "Invalid JRE Path".

OS: RHEL 8.7
Java: AdoptOpenJDK 11.0.19 (working)
Java: AdoptOpenJDK 11.0.20 (not working)

Environment

Release : 12.8.06 ~ 12.8.07

OS: RHEL 8.7

Cause

 

11.0.19 (working)

11.0.20(not working)

JAVACHECK_EXECUTE_STDOUT     -   Selected Java architecture  : 64 Selected Java Vendor  : Eclipse Adoptium Selected Java version  : 11.0.19 JAVACHECK_EXECUTE_STDERR      -  ADOPT_OPEN_JDK|SM|64|SM|11.0.19|SM| JAVACHECK_EXECUTE_EXITCODE   -  0 prop.java.class.path          -          /tmp/install.dir.12059/InstallerData:/tmp/install.dir.12059/InstallerData/installer.zip: IA_USER_DIR                        -         /tmp/install.dir.12059 ---------------------------- ADOPT_OPEN_JDK|SM|64|SM|11.0.19|SM| ---------------------------- ---------------------------- 3 [ADOPT_OPEN_JDK, 64, 11.0.19] ---------------------------- Selected JDK details CHOSEN_JDK_ROOT                -   /opt/jdk-11.0.19+7-jre IS_SELECTED_64_BIT              -     true IS_SELECTED_JAVA_11           -     true IS_SELECTED_JAVA_1DOT8    -     false IS_ADOPT_OPEN_JDK             -     true IS_ORACLE_JDK                       -      false SELECTED_JAVA_VERSION     -     11.0.19 USER_MAGIC_FOLDER_1= CC_DIR= SSO_INSTALL_EXIST =  EXISTING_VERSION =  EXISTING_LOCATION =  --------------------------------------------------------------

JAVACHECK_EXECUTE_STDOUT     -   JAVACHECK_EXECUTE_STDERR      -  Error: Could not find or load main class com.netegrity.brlib.customcode.GetJavaDetails Caused by: java.lang.ClassNotFoundException: com.netegrity.brlib.customcode.GetJavaDetails JAVACHECK_EXECUTE_EXITCODE   -  1 prop.java.class.path          -          /tmp/install.dir.12059/InstallerData:/tmp/install.dir.12059/InstallerData/installer.zip: IA_USER_DIR                        -         /tmp/install.dir.12059 ---------------------------- Error: Could not find or load main class com.netegrity.brlib.customcode.GetJavaDetails Caused by: java.lang.ClassNotFoundException: com.netegrity.brlib.customcode.GetJavaDetails ---------------------------- ---------------------------- 1 [Error: Could not find or load main class com.netegrity.brlib.customcode.GetJavaDetails Caused by: java.lang.ClassNotFoundException: com.netegrity.brlib.customcode.GetJavaDetails ] ---------------------------- Selected JDK details CHOSEN_JDK_ROOT                -   /opt/jdk-11.0.20+8-jre IS_SELECTED_64_BIT              -     false IS_SELECTED_JAVA_11           -     false IS_SELECTED_JAVA_1DOT8    -     false IS_ADOPT_OPEN_JDK             -     false IS_ORACLE_JDK                       -      false SELECTED_JAVA_VERSION     -      *** LogExceptionIAWrapper ***     CC_KEY:     1006     CC_DEFAULT: Command failed: {0}\nReturn Value: {1}\nStdout: {2}\nStderr: {3}     CC_PARAM:   "/opt/jdk-11.0.20+8-jre/bin/java" -classpath "/tmp/install.dir.12059/InstallerData:/tmp/install.dir.12059/InstallerData/installer.zip:" com.netegrity.brlib.customcode.GetJavaDetails,,Error: Could not find or load main class com.netegrity.brlib.customcode.GetJavaDetails Caused by: java.lang.ClassNotFoundException: com.netegrity.brlib.customcode.GetJavaDetails ***************************** InstallExceptionHandler: formatted message=Command failed: "/opt/jdk-11.0.20+8-jre/bin/java" -classpath "/tmp/install.dir.12059/InstallerData:/tmp/install.dir.12059/InstallerData/installer.zip:" com.netegrity.brlib.customcode.GetJavaDetails\nReturn Value: Error: Could not find or load main class com.netegrity.brlib.customcode.GetJavaDetails Caused by: java.lang.ClassNotFoundException: com.netegrity.brlib.customcode.GetJavaDetails \nStdout: {2}\nStderr: {3} Writing to log file:  *****The architecture of the Enhanced Session Assurance with DeviceDNA feature is updated in Policy Server 12.6. This feature requires CA Access Gateway 12.6 or later. For information about using the feature, see the Configure Enhanced Session Assurance with DeviceDNA section in the documentation. Command failed: "/opt/jdk-11.0.20+8-jre/bin/java" -classpath "/tmp/install.dir.12059/InstallerData:/tmp/install.dir.12059/InstallerData/installer.zip:" com.netegrity.brlib.customcode.GetJavaDetails\nReturn Value: Error: Could not find or load main class com.netegrity.brlib.customcode.GetJavaDetails Caused by: java.lang.ClassNotFoundException: com.netegrity.brlib.customcode.GetJavaDetails \nStdout: {2}\nStderr: {3} *****Custom Action:

 

This is due to changes in the Java side.

https://www.oracle.com/java/technologies/javase/11-0-20-relnotes.html

core-libs/java.util.jar ➜ Improved ZIP64 Extra Field Validation (JDK-8302483 (not public)) java.util.zip.ZipFile has been updated to provide additional validation of ZIP64 extra fields when opening a ZIP file. This validation may be disabled by setting the system property jdk.util.zip.disableZip64ExtraFieldValidation to true.

Resolution

This is addressed in R12.8.8 release.

 

Please follow the steps below to allow the installer to continue.

set JAVA_TOOL_OPTIONS='-Djdk.util.zip.disableZip64ExtraFieldValidation=true'
echo $JAVA_TOOL_OPTIONS

 

Confirm the environment variable is set then run the installer

./ca-ps-12.8-sp08-linux-x86-64.bin -i console