Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 25 Next »

Install Java. We recommend the OpenJDK Adoptium Temurin 8 or 11. This is the build of Open JDK that we test with across linux and windows.

Install the latest version and patch of Java

We strongly recommend that you use the latest version of Java. These instructions will give you the latest patch. You can choose to install Java 8 or Java 11. Unless you are updating an existing installation of Java 8 to the latest patch, please install Java 11.

If you are still on Java 8, you should consider updating to Java 11. Check on the controls in place in your organisation for moving to a different major version of a software package. However, in practice, moving from Java 8 to Java 11 is very unlikely to have an impact, and can be treated much as patching an existing version.

Windows

Download and install Java

  1. From the Adoptium home page https://adoptium.net, select Termurin 8 or 11.
    This download is equivalent to the Adopt Open JDK HotSpot build of Java for 64 bit architectures.
  2. Click the Latest release button to download an installation package.
  3. Complete the installation process as directed by the package, accepting all defaults.

Optionally Set the Environment Variable

You can set a system envrionment variable JAVA_HOME if you wish. This can be useful if you have other applications that use Java. However, for the operation of PhixFlow itself, this is not needed, and most operators choose not to add this. Even if you do not set JAVA_HOME, Java programs that need to operate PhixFlow will be added to your path. I.e. you can call them from the command line by using the program name alone.

If you decide to set JAVA_HOME as a system envrionment variable, specify the base installation directory of Java, for example:

  • C:\Program Files\Eclipse Adoptium\jdk-8.0.312.7-hotspot

Configure Security

Update the security settings to allow strong encryption and decryption of files.

1. Open the java.security file.

For Java 8, this will be at JAVA_HOME\jre\lib\security\java.security

For Java 11, this will be at JAVA_HOME\conf\security\java.security

2. Set the crypto.policy to unlimited for the JRE used by PhixFlow, by deleting the # to uncomment the line:
    - from: #crypto.policy=unlimited
    - to:   crypto.policy=unlimited

Linux

Download and install Java

Setting JAVA_HOME

These instructions assume you do not have a version of Java already installed on your server. The steps below will set JAVA_HOME as an environment variable for each user on the server.

If you have other programs running on your server, and you need to have two different versions of Java installed, you can take a different approach to setting JAVA_HOME for each user. Strictly, PhixFlow does not need JAVA_HOME to be set up as an environment variable to operate. The only places where PhixFlow needs to reference JAVA_HOME are:

  • In the invocation process for Tomcat (in the recommended installation below, this is in a SystemD service script).
  • Where Java programs are used in administrative steps for installing or upgrading PhixFlow. In PhixFlow's documentation, where we refer to JAVA_HOME, simply supply the home path of the installed Java that PhixFlow is using, whether through an environment variable, or by putting it in full on the command line.
  • Prepare the installation directory:
    • If the directory /opt/jdk does not exist, create it:
sudo mkdir /opt/jdk
sudo chmod 755 /opt/jdk

The download link is included in the text of the installation steps:

You can either:

  • Download the installation package by clicking on the download link in a web browser, and transfer the downloaded installation package to the directory /tmp on the server
  • Download the installation package directly to the server. To do this, copy the address of the download link (e.g. using Right-click → Copy Link in a browser), and use this in a wget command as below:
cd /tmp
wget https://github.com/adoptium/temurin8-binaries/releases/download/jdk8u312-b07/OpenJDK8U-jdk_x64_linux_hotspot_8u312b07.tar.gz
  • Validate the package download. The commands below are towards the bottom of the installation page.

If you have access to the web from your server, copy the command similar to the below from the installation page and run it on your server:

If you do not have web access from your server, copy the command similar to the below from the installation page and run it on your server.

Then compare the results against the value provided at the checksum link on the installation page.

  • Extract the installation package
sudo tar xfvz /tmp/[DOWNLOADED PACKAGE] --directory /opt/jdk
rm /tmp/[DOWNLOADED PACKAGE]

For example:

sudo tar xfvz /tmp/OpenJDK8U-jdk_x64_linux_hotspot_8u312b07.tar.gz --directory /opt/jdk
rm /tmp/OpenJDK8U-jdk_x64_linux_hotspot_8u312b07.tar.gz

Set JAVA_HOME

  • Set JAVA_HOME for all users
echo "export JAVA_HOME=[Java home installation directory]" | sudo tee /etc/profile.d/jdk.sh

For example

echo "export JAVA_HOME=/opt/jdk/jdk-11.0.13+8" | sudo tee /etc/profile.d/jdk.sh
  • To test that you have correctly set the value, start a new session and run, as any user
echo $JAVA_HOME

Configure Security

Update the security settings to allow strong encryption and decryption of files.

1. Open the java.security file.

For Java 8, this will be at JAVA_HOME/jre/lib/security/java.security

For Java 11, this will be at JAVA_HOME/conf/security/java.security

2. Set the crypto.policy to unlimited for the JRE used by PhixFlow, by deleting the #" to uncomment the line:
    - from: #crypto.policy=unlimited
    - to:   crypto.policy=unlimited



  • No labels