Issue
Now that Oracle is updating Java on an accelerated basis, they are also forcing users to update by setting a minimum Java version.
When your client launches a Java Applet, it is directed to contact the following URL and compare the Java version installed with those in the list.
The list specifies the minimum version of Java that must be installed on the client. If the installed version of Java does not meet the minimum version requirement, the applet will not run.
This has become an issue with webNetwork, as we still utilize Java applets for the System Check, SSLVPN, webRDP Java Client, My Files Uploader, and a few other areas.
The ultimate resolution preferred by Oracle, is to update Java on all clients to the latest version. But this is not always the fastest resolution due to the number of clients and possible Java version dependencies of other applications.
Workaround
We have introduced a workaround as of webNetwork 6.2.1.155.
We now can hold a local copy of the baseline file, allowing the administrator to specify the minimum version of Java needed for webNetwork functionality.
- Create the following file /stoneware/config/baseline.versions.
- Add the following block of text (current baseline from Oracle as of 07/19/2016):
1.8.0_101
1.7.0_111
1.6.0_121
1.5.0_99
1.4.2_43
- Change the minimum version of each Java version as necessary.
For example: change 1.7.0_71 to 1.7.0_55 if you would like Java 7u55 to be the lowest version of Java 7 allowed. - Save the file.
- Restart the webNetwork service on the server.
Note: Circumventing the suggested version of Java is done at your own risk, and may open you to security vulnerabilities in those older versions of Java.
As of 07/14/2015, with the release of Java 8u51, all customers MUST be on 6.2.1.155 or higher with the above configuration in place for proper webNetwork Java applet functionality. As of 8u51, Java is now prohibiting the RC4 cipher suite. If your webNetwork server is still allowing the RC4 cipher suite Java 8u51, and up, will refuse to download and run any webNetwork applets. More information can be found
here.
**Update**
As of Java release 8u101, customers that have the baseline.versions file on their server will cause the System Check to fail the Java tests. webApps, such as the SSL VPN that check for Java will redirect to the System Check, then fail to launch. This has been resolved with webNetwork release 6.4.0.26.
There are two options available.
- Update the to the most current release of webNetwork.
- Remove the baseline.versions file from your relays. This will allow the relays to query Oracle's server the minimum version of Java workstations can have. This means that all workstations will need to be on Java 8u101, as that is the minimum version of Java Oracle now requires.
Keywords: System Check, Uploader, SSLVPN, Launch Local App, Personal VNC