<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from text --><style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<meta content="text/html; charset=UTF-8">
<style type="text/css" style="">
<!--
p
{margin-top:0;
margin-bottom:0}
-->
</style>
<div dir="ltr">
<div id="x_divtagdefaultwrapper" style="font-size:12pt; color:#000000; background-color:#FFFFFF; font-family:Calibri,Arial,Helvetica,sans-serif">
<p>+1 on using the Oracle Java Sever JRE. We've got an automated deployment system (which I've described previously on this list) that handles downloading the latest version of Java as specified by a deployment configuration file and copying over the unlimited
strength cryptography files, on any given release as needed.</p>
<p><br>
</p>
<p>As to updating the path to the JRE (for JAVA_HOME or the Tomcat service description, depending upon your setup) I make use of symlinks. Tomcat only has to know about [PathToJre]\jre (a symlink) and the deployment system handles updating the link to point
at the new version once the installation has been verified.</p>
<p><br>
</p>
<p>Michael<br>
</p>
</div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="x_divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> users <users-bounces@shibboleth.net> on behalf of Ortner Nikolaus <N.Ortner@fh-kaernten.at><br>
<b>Sent:</b> Thursday, July 21, 2016 7:12:53 AM<br>
<b>To:</b> 'Shib Users'<br>
<b>Subject:</b> AW: Windows server and Oracle Java updates</font>
<div> </div>
</div>
</div>
<font size="2"><span style="font-size:10pt;">
<div class="PlainText">> What are folks running IdP v3 on Windows doing vis-a-vis Oracle Java<br>
> updates? <br>
<br>
I'm very happy with the server-jre on Windows - no install needed, just unzip it and copy the unlimited strength files into it, later import some internal certificates to the jre/lib/security/cacerts (that's the same 3 steps every time).<br>
As we're running a tomcat8, there is no need for a system-wide JAVA_HOME, the new jre is simply switched by a reinstall of the service with bin/service.bat (or alternatively the jre can be configured using that config-program bin/tomcat8w.exe).<br>
<br>
Kind regards.<br>
<br>
-- <br>
To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net<br>
</div>
</span></font>
</body>
</html>