You'll have more flexibility with CF8 to upgrade the JVM. It officially supports 1.4.2_14 to 1.6_04. There's also added encryption support. There is some lost functionality with 1.5 on CF7. I forgot exactly which tags broke down. It was things like ldap, etc. I never tried 1.6 on CF7. OpenSAML from what I'm reading needs a better JAXP engine than what comes default with Sun. Other than that, you may be fine running it over an older jvm. I would test that first before possibly breaking CF.
John Mason [EMAIL PROTECTED] _____ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ajas Mohammed Sent: Saturday, August 23, 2008 2:39 PM To: [email protected] Subject: Re: [ACFUG Discuss] CF 7 with java 1.4.2_09....is anyone using latest jre??? Hi John, I believe we did DST update, so i guess our jvm would be 1.4.2_11 as you mentioned. What I am trying to do is I am working on Single Sign On project using SAML 2.0 using Apache XML Security Library 1.2.0. Someone suggested that we should use OPenSAML library and also the latest jvm i.e. atleast jvm 1.5 or 1.6 and I wanted to make sure if its doable with CF 7. here are the steps for encrypting part of xml file which is done by client before its sent over to me as a SAML Assertion. They are also using Apache XML Security Lib and OpenSAML. I dont know what version they are using. 1. employee data is encrypted using a encrypted symmetric key i.e. cipher algorithm is AES/CBC/ISO10126Padding opmode = ENCRYPT_MODE 2. then encrypts the symmetric key using my RSA public key, cihper.algoritm = RSA/ECB/PKCS1Padding in opmode = WRAP_MODE So i was trying to 1. decrypt symmetric key using my RSA private key with opmode = UNWRAP_MODE 2. then use this symmetric key to decrypt using opmode = DECRYPT_MODE and get employee data. If you know anyone who has experience in java xml enc/decryption, please have him email me. This is top priority for us now and we are not able to decrypt and get employee data. Thanks, Ajas. On Sat, Aug 23, 2008 at 1:51 PM, John Mason <[EMAIL PROTECTED]> wrote: Actually if you are on CF7 and using the default jvm. You should have upgraded over a year ago. There were daylight savings time changes that required a manual jvm update to at least 1.4.2_11 http://labs.fusionlink.com/katapult/index.cfm?page=articles/daylightsavings It's easy to upgrade the jvm and test things out. What are you trying to do? John Mason [EMAIL PROTECTED] _____ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ajas Mohammed Sent: Saturday, August 23, 2008 10:29 AM To: [email protected] Subject: [ACFUG Discuss] CF 7 with java 1.4.2_09....is anyone using latest jre??? Hi, For a project, we might have to look at latest java 1.5 or 1.6 and I was wondering if anyone has updated there default java version 1.4.2_09 that comes with CF 7, with the latest java/jre. What could be some issues we would face if we update java. If this is not doable then probably, we could have a java webservice running on latest jdk and call it from CF 7 which uses 1.4.2_09 Thanks, -- <Ajas Mohammed /> http://ajashadi.blogspot.com <http://ajashadi.blogspot.com/> We cannot become what we need to be, remaining what we are. No matter what, find a way. Because thats what winners do. You can't improve what you don't measure. Quality is never an accident; it is always the result of high intention, sincere effort, intelligent direction and skillful execution; it represents the wise choice of many alternatives. ------------------------------------------------------------- To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform <http://www.acfug.org/?fa=login.edituserform> For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by FusionLink <http://www.fusionlink.com/> ------------------------------------------------------------- ------------------------------------------------------------- To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform <http://www.acfug.org/?fa=login.edituserform> For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by FusionLink <http://www.fusionlink.com/> ------------------------------------------------------------- -- <Ajas Mohammed /> http://ajashadi.blogspot.com We cannot become what we need to be, remaining what we are. No matter what, find a way. Because thats what winners do. You can't improve what you don't measure. Quality is never an accident; it is always the result of high intention, sincere effort, intelligent direction and skillful execution; it represents the wise choice of many alternatives. ------------------------------------------------------------- To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by FusionLink <http://www.fusionlink.com> ------------------------------------------------------------- ------------------------------------------------------------- To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com -------------------------------------------------------------
