When using OpenJDK 17 and enabling the RADIUS server (Settings > Server Settings > Enable "Built-in RADIUS"), it fails to generate the certificates.  Here's the main error:

Caused by: java.lang.IllegalAccessError: class com.tplink.smb.omada.system.api.util.X509CertificateUtils (in unnamed module @0x313ac989) cannot access class sun.security.x509.X500Name (in module java.base) because module java.base does not export sun.security.x509 to unnamed module @0x313ac989

Here is the full text of the error in a gist: https://gist.github.com/mbentley/7542c16bb8cb8c359c1a1bd4de844790#file-error1-txt

This can be worked around by adding: --add-opens=java.base/sun.security.x509=ALL-UNNAMED

But then there is another error:

Caused by: java.lang.IllegalAccessError: class com.tplink.smb.omada.system.api.util.X509CertificateUtils (in unnamed module @0x313ac989) cannot access class sun.security.util.ObjectIdentifier (in module java.base) because module java.base does not export sun.security.util to unnamed module @0x313ac989

And the full text for this one: https://gist.github.com/mbentley/7542c16bb8cb8c359c1a1bd4de844790#file-error2-txt

This can be worked around by adding: --add-opens java.base/sun.security.util=ALL-UNNAMED

It would be great if these could be properly updated to not need these additional parameters.