<div dir="ltr"><div>As noted on IRC, there might be issues with JDK and crypto on OpenIndiana.<br><br>The issue is that on Solaris/illumos (and only there) the jdk can offload crypto to<br>the OS using the SunPKCS11 provider. That doesn't always work correctly, there's<br>a flag:<br><br>-Dsun.security.pkcs11.enable-solaris=false<br><br>that just disables it so you should get the same behaviour as other platforms.<br><br>In Tribblix I disable (in .../conf/security/sunpkcs11-solaris.cfg) the bits that I know<br>don't work:<br><br><a href="https://github.com/tribblix/build/blob/master/patches/sunpkcs11-solaris.cfg.patch">https://github.com/tribblix/build/blob/master/patches/sunpkcs11-solaris.cfg.patch</a><br><br>In OmniOS I think they change the preference order:<br><br><a href="https://github.com/omniosorg/omnios-build/blob/master/build/openjdk17/patches/security-pkcs11.patch">https://github.com/omniosorg/omnios-build/blob/master/build/openjdk17/patches/security-pkcs11.patch</a><br><br></div>I suggest you'll need to do one of those for the OI jdk builds too.<br><div> <div><br><span class="gmail_signature_prefix">-- </span><br><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature">-Peter Tribble<br><a href="http://www.petertribble.co.uk/" target="_blank">http://www.petertribble.co.uk/</a> - <a href="http://ptribble.blogspot.com/" target="_blank">http://ptribble.blogspot.com/</a></div></div></div></div>