issue upgrading Java, for enhanced SSL Security JCE. How to?

If you have questions or if you want to share your opinion about Aware IM post your message on this forum
Post Reply
Jaymer
Posts: 2430
Joined: Tue Jan 13, 2015 10:58 am
Location: Tampa, FL
Contact:

issue upgrading Java, for enhanced SSL Security JCE. How to?

Post by Jaymer »

Aware currently seems to use Java 8 (or 1.8) release 91_b15

To get better Ciphers for SSL, I'm under the impression that JCE is needed (Java Cryptography Extension).
Its included in 9.

Can Aware be upgraded to 9?
What are the issues?

Whats involved in upgrading 8?
Whats gonna break?

Do I really even need to change java?
Using https://www.ssllabs.com/ssltest , I've got a A rating after a test. So whats to gain?

thx
Click Here to see a collection of my tips & hacks on this forum. Or search for "JaymerTip" in the search bar at the top.

Jaymer
Aware Programming & Consulting - Tampa FL
aware_support
Posts: 7523
Joined: Sun Apr 24, 2005 12:36 am
Contact:

Re: issue upgrading Java, for enhanced SSL Security JCE. How

Post by aware_support »

You can upgrade to the latest Java yourself - Aware IM should support it. All you need to do is rename the current JDK folder and replace it with the JDK folder of the latest Java. The only other thing you need to do is find all occurrences of the file tools.jar and delete them or rename then to tools.jar.old or something like that. Otherwise, reports won't work.
Aware IM Support Team
customaware
Posts: 2392
Joined: Mon Jul 02, 2012 12:24 am
Location: Ulaanbaatar, Mongolia

Re: issue upgrading Java, for enhanced SSL Security JCE. How

Post by customaware »

I think anything after the latest version of 8... Like 9 onwards, you are supposed to get a license.
Cheers,
Mark
_________________
AwareIM 6.0, 8.7, 8.8, 9.0 , MariaDB, Windows 10, Ubuntu Linux. Theme: Default, Browser: Arc
Upcloud, Obsidian....
Image
Jaymer
Posts: 2430
Joined: Tue Jan 13, 2015 10:58 am
Location: Tampa, FL
Contact:

Re: issue upgrading Java, for enhanced SSL Security JCE. How

Post by Jaymer »

https://shop.oracle.com/apex/f?p=DSTORE ... 1532594385

wow, you're right.
thats $300/year your SUPPOSED to pay for Java on your Server.
(for Java 9+)
Click Here to see a collection of my tips & hacks on this forum. Or search for "JaymerTip" in the search bar at the top.

Jaymer
Aware Programming & Consulting - Tampa FL
Rennur
Posts: 1191
Joined: Thu Mar 01, 2012 5:13 am
Location: Sydney, Australia

Re: issue upgrading Java, for enhanced SSL Security JCE. How

Post by Rennur »

There are open source jdk releases https://jdk.java.net/
Jaymer
Posts: 2430
Joined: Tue Jan 13, 2015 10:58 am
Location: Tampa, FL
Contact:

Re: issue upgrading Java, for enhanced SSL Security JCE. How

Post by Jaymer »

aware_support wrote:You can upgrade to the latest Java yourself - Aware IM should support it. All you need to do is rename the current JDK folder and replace it with the JDK folder of the latest Java. The only other thing you need to do is find all occurrences of the file tools.jar and delete them or rename then to tools.jar.old or something like that. Otherwise, reports won't work.
Ok, I can.
But I also asked if there was anything to gain?
Why upgrade Java?
Click Here to see a collection of my tips & hacks on this forum. Or search for "JaymerTip" in the search bar at the top.

Jaymer
Aware Programming & Consulting - Tampa FL
customaware
Posts: 2392
Joined: Mon Jul 02, 2012 12:24 am
Location: Ulaanbaatar, Mongolia

Re: issue upgrading Java, for enhanced SSL Security JCE. How

Post by customaware »

Well, my understanding is that the current Aware IM version does not support using auto deployment of Lets Encrypt SSL Certs by an nginx server. I am no expert by any stretch of the imagination.
But when we upgraded to the latest V8 build of java then it works fine.
Cheers,
Mark
_________________
AwareIM 6.0, 8.7, 8.8, 9.0 , MariaDB, Windows 10, Ubuntu Linux. Theme: Default, Browser: Arc
Upcloud, Obsidian....
Image
intra
Posts: 279
Joined: Thu Oct 11, 2012 1:30 pm
Location: Australia

Re: issue upgrading Java, for enhanced SSL Security JCE. How

Post by intra »

Jaymer wrote: Why upgrade Java?
That like asking , why apply Windows security patches?

There's an element of 'breakage' when moving away from the default JDK that is supplied with AwareIM. To be completely honest most of the time its just fine, however i've had an issue or two here and there around libraries and other silly things that were easily fixed.

Just keep backups of things and prepare a rollback plan before upgrading. Saves a few tears!

Newer versions of Java include and are not limited to

1. Exploit fixes
2. Latest CA root certs
3. Some performance gains (at times).

Best check out the release notes from the Java build.
Avid Linux user....
Jaymer
Posts: 2430
Joined: Tue Jan 13, 2015 10:58 am
Location: Tampa, FL
Contact:

Re: issue upgrading Java, for enhanced SSL Security JCE. How

Post by Jaymer »

Will Java upgrade stop the endless
SuspendProcessException &
Incorrect Header Check errors in Server output?
Click Here to see a collection of my tips & hacks on this forum. Or search for "JaymerTip" in the search bar at the top.

Jaymer
Aware Programming & Consulting - Tampa FL
Post Reply