[lyo-dev] JDK 11+ support?

[lyo-dev] JDK 11+ support?

Hello,

During the Lyo 4.0+ roadmap call, there was little interest in moving away from JDK 8. However, not many of you might know that JDK 8 is not supported any more since Jan 2019 and it might be legally questionable to download JDK 8 updates after that from Oracle if you use it commercially. Read more on this in https://blogs.oracle.com/java-platform-group/end-of-public-updates-is-a-process%2c-not-an-event and https://medium.com/@javachampions/java-is-still-free-c02aef8c9e04 and https://www.forbes.com/sites/danwoods/2019/01/31/oracles-newest-audit-tactic-focusing-on-java/#fc0556854960

So, I am thinking if we shall either start testing Lyo against non-Oracle JDK 8 and/or start supporting JDK 11+? At KTH, we are not using JDK-based apps commercially. The question is: is anyone concerned enough about this to help us with JDK 11+ support? E.g. by fixing https://github.com/eclipse/lyo.server/issues/26 and similar things?

Also, from the technical perspective, we need JDK 9+ to effectively support TLS/SSL because JDK 8 and before do not trust https://letsencrypt.org/stats/, the most popular issuer of the certs in the world. Then, PCI requires TLS1.1+ for compliance (https://blog.pcisecuritystandards.org/are-you-ready-for-30-june-2018-sayin-goodbye-to-ssl-early-tls) but I think it's only a matter of time till we need support for TLS 1.3 and HTTP2: https://thejournal.com/articles/2018/09/27/jdk-11-adds-support-for-tls-1.3-and-http2.aspx

I think two main environments for Lyo-based apps are Eclipse & Jetty and they both got JDK 11 covered: https://www.eclipse.org/eclipseide/ and https://www.eclipse.org/lists/jetty-announce/msg00124.html

Looking forward to your replies. If everyone is happy with JDK 8, let's stay on it.

/Andrew