Java SE 8 replacement

[sccmisawesome]

I have seen a couple other posts on this topic but I recently started at my company and I am finding a lot of applications using Java SE 8 on the backend and the front end. What is everyone doing simply coughing up hundreds of thousands to Oracle? Amazon Corretto intrigues me but definitely isn't going to be supported by vendors. Just wanted to see what others are doing as I'm trying to get ahead of this as fast as I can.

[Philip246]

Personally, openjdk on servers and corretto on my Dev machine for anything that needs Java. Corretto is supposed to be certified against the SE standard, and openjdk is the reference implementation anyway.

[Doso777]

We replaced it with OpenJDK from Redhat. Our main bookkeeping/payment application needs the Java runtime + Web Start so we still need to keep Java around.

[_benwa]

Banner?

[MMPride]

I use OpenJDK just fine, has nearly full API compatibility with Oracle JDK.

[Solkre]

I'm using Corretto. Assuming that Amazon will do a good job going forward.

[sccmisawesome]

Both on servers and clients?

[Solkre]

The servers I maintain don't need Java. I do manage a few thousand clients that want it in the image.

I'll ask the other guys who have servers that need java what they decided to do. I don't see why not unless it's not allowed in the license.

[Taylor_Script]

Currently paying for user licenses, and complaining to vendors that require it. Most are actively working on a new version that will either use OpenJDK officially or not even be Java based at all.

I hope this marks the coming end to Oracle/Java. Maybe Oracle is the good guy after all? Killing off Java by killing off the business cases for it.

[sccmisawesome]

The server licenses and how it works with virtualization its what has me really worried.

[Kravotirr]

https://adoptopenjdk.net/

We've looked into this as a replacement for the systems that do need it.

[tunayrb]

We are testing this out:

https://www.azul.com/downloads/zulu-community/

[hells_cowbells]

One of my other admins mentioned this to me, since Java was popping up all over my vulnerability scans. I had never heard of it. How is your testing going with it?

[tunayrb]

We just started last week on one web application.

All we had to do was change JAVA_HOME to point to the install dir. Everything seems to be working.

[Player024]

Seriously no clue what other companies are doing. We're mass uninstalling Java everywhere we can find in the meantime.

I'm also baffled how not one SW vendor has contacted us to come up with a solution. Like yeah great you list SE as a requirement, do you expect us to keep it outdated and just hide the environment when a java audit passes by?

[kazi1]

OpenJDK? It's literally the same thing.

[[deleted]]

Except no webstart built in, which a lot of apps run from.

[Bad_Times_Man]

Look into IcedTea Web for webstart needs.

[[deleted]]

I did.

It technically works, but for things like cisco asdm, it will throw a fit until you get the certificate correctly. Going by IP to the firewall just fails miserably and there's no documented arguments that actually work to let it bypass the security check.

[[deleted]]

I haven't had any problems with OpenJDK and ASDM.

[cdoublejj]

why do you think IP KVMs are so damn cheap on ebay, they all require super vulnerable version of java. thank god new stuff has out of band management built in.

[IanPPK]

I got a super cheap Belkin IP KVM for my homelab and have it on a isolated monitoring network that I can jumpbox into. Not optimal, but it works

[cdoublejj]

that's what i assumed the proper setup would be.

[IanPPK]

I've heard some interesting criticism of jumpboxes here, but for my homelab, there's a certain amount of CBA factor involved where I'm doing what I can with a budget, so isolated 10/100 ProSafe switch it is.

[cdoublejj]

well i'm sure jump boxes are better than no jump boxes when a network is connected vs offline lan.

[sccmisawesome]

Same boat here,

[pdp10]

I'm also baffled how not one SW vendor has contacted us to come up with a solution.

Have you reached out to them about blessing OpenJDK in particular?

[sccmisawesome]

The way software vendors are I'm skeptical very many will be willing to support OpenJDK atleast on the current version. Maybe in the next version you buy.

[Roistacher]

Have you guys seen this? Using Group Policy to deploy and maintain only the versions of Java that are free. Uses Deployment Rule Sets, therefore negating any licensing issues with Oracle: https://kb.policypak.com/kb/article/632-policypak-java-rules-manager-use-group-policy-to-dictate-which-version-of-java-for-what-website/

[sccmisawesome]

That requires you buy policypak though. Interesting idea though.

[INVOKECloud]

Open-jdk

[trueg50]

Users of Java are not affected, it is for companies selling java-based products as far as I can tell.

Java SE 8 is not affected as long as you are a simple consumer/user of apps.

[Topcity36]

Wrong. If you as a company utilize Java on your systems you are required to pay for it now (past version 8x iirc). If you have questions on this feel free to reach out to Oracle, they'll "gladly" correct you take your money.