issue upgrading Java, for enhanced SSL Security JCE. How to?

Jaymer

Aware currently seems to use Java 8 (or 1.8-) release 91_b15

To get better Ciphers for SSL, I'm under the impression that JCE is needed (Java Cryptography Extension).
Its included in 9.

Can Aware be upgraded to 9?
What are the issues?

Whats involved in upgrading 8?
Whats gonna break?

Do I really even need to change java?
Using https://www.ssllabs.com/ssltest , I've got a A rating after a test. So whats to gain?

thx

aware_support

You can upgrade to the latest Java yourself - Aware IM should support it. All you need to do is rename the current JDK folder and replace it with the JDK folder of the latest Java. The only other thing you need to do is find all occurrences of the file tools.jar and delete them or rename then to tools.jar.old or something like that. Otherwise, reports won't work.

customaware

I think anything after the latest version of 8... Like 9 onwards, you are supposed to get a license.

Jaymer

https://shop.oracle.com/apex/f?p=DSTORE:PRODUCT:::NO:RP,6:P6_LPI,P6_PROD_HIER_ID:132208700202541131633052,123775488249871532594385

wow, you're right.
thats $300/year your SUPPOSED to pay for Java on your Server.
(for Java 9+)

Rennur

There are open source jdk releases https://jdk.java.net/

Jaymer

aware_support wrote
You can upgrade to the latest Java yourself - Aware IM should support it. All you need to do is rename the current JDK folder and replace it with the JDK folder of the latest Java. The only other thing you need to do is find all occurrences of the file tools.jar and delete them or rename then to tools.jar.old or something like that. Otherwise, reports won't work.

Ok, I can.
But I also asked if there was anything to gain?
Why upgrade Java?

customaware

Well, my understanding is that the current Aware IM version does not support using auto deployment of Lets Encrypt SSL Certs by an nginx server. I am no expert by any stretch of the imagination.
But when we upgraded to the latest V8 build of java then it works fine.

intra

Jaymer wrote
Why upgrade Java?

That like asking , why apply Windows security patches?

There's an element of 'breakage' when moving away from the default JDK that is supplied with AwareIM. To be completely honest most of the time its just fine, however i've had an issue or two here and there around libraries and other silly things that were easily fixed.

Just keep backups of things and prepare a rollback plan before upgrading. Saves a few tears!

Newer versions of Java include and are not limited to

Exploit fixes
Latest CA root certs
Some performance gains (at times).

Best check out the release notes from the Java build.

Jaymer

Will Java upgrade stop the endless
SuspendProcessException &
Incorrect Header Check errors in Server output?