Hi Jody, We are definitely running a Windows based setup at the moment and the AdoptOpenJDK version 8 installed fine. I think the rumours of issues related to an application which also needed Iced Tea which I assume we don’t need. I will get my live cluster updated in due course.
Thank you for the detail on the Java 11 status and Java 8 security patching situation I think that is really useful and I suspect others will as well. I’m not 100% sure how we do our compliance testing to be honest; all I know is I was asked to update my version of Java because it wasn’t good enough but I believe AdoptOpenJDK is fine so it was more just to build my own confidence in how the security patching is being done really. It is also useful to know by whom because of course the Vendor disappears from the Tomcat manager page on the later versions of OpenJDK as it is no longer Oracle. Thanks again to everyone that has helped me find the right pages etc; I feel I’m now much better placed to defend my use of version 8 if asked by ICT colleagues. Paul From: Jody Garnett <[email protected]> Sent: 02 January 2020 19:53 To: Paul Wittle <[email protected]> Cc: [email protected] Subject: Re: [Geoserver-users] Java version For Java 11, "all that work" was really just to keep the options for the project open. Some components (like JAI library) throw lots of warnings into the logs that tend to concern users in a production environment. We really pushed hard to be able to run in Java 11 at all, and the sprint participants are to be thanked. We really felt the pressure because at the time the continued support for Java 8 was very much in doubt at the time. I am not sure what it would take to make Java 11 the recommended one, it is not something my customers have requested. As a volunteer I have been working on replacing the JAI component in my own time, which for me is the largest technical risk. AdoptOpenJDK / Redhat / Ubuntu are all different distributions of the same OpenJDK project. The different distributions all have different polices around how long they support each release for. Oracle actually has two distributions going, commercial for long term support, and free for 4 month support. The key player here though is not Oracle, but RedHat. RedHat has committed to backporting security fixes for their customers. They have a "upstream first" policy so those fixes make it into OpenJDK. Once in OpenJDK it shows up in distributions like Ubuntu, AdoptOpenJDK and others ... so you should be able to figure out which version of OpenJDK you installed and check its release notes for security fixes. While I like to recommend AdoptOpenJDK (in part due to its installers for MacOS and Windows), many folks are running a linux distribution and thus have a supported distribution that way. Can I ask what platform you are running your compliance testing on? -- Jody Garnett On Thu, 2 Jan 2020 at 00:54, Paul Wittle <[email protected]<mailto:[email protected]>> wrote: Hi Jody, Thanks for getting back to me. I’ll give that a go although my colleagues had already tried that one for a different application and had issues. However my question still stands in a generic sense because I think there needs to be clarity on what is now recommended. After all the work to support Java 11 are we still saying that Java 8 is better and is that likely to change soon? I’m sure the Adopt one is fine and will pass our compliance testing this month but I just felt it is still felt it is relevant to ask for some clarity on whether Java 11 will become the recommended version shortly. The GeoServer releases come with a clear change log detailing what patches are included but I can’t see that on the AdoptOpenJDK site; are the two OpenJDK sites actually separate products or is it just a distribution of the same project? I mostly ask because their support page gives plenty of information about the quality of the builds, which I accept; but how do you know what security patches are being applied if the Oracle version is now commercial, OpenJDK appears to not be updating and AdoptOpenJDK seem to be giving limited information. Anyway; I’ll have a go at installing that one on my DEV server for now. Cheers, Paul From: Jody Garnett <[email protected]<mailto:[email protected]>> Sent: 31 December 2019 21:11 To: Paul Wittle <[email protected]<mailto:[email protected]>> Cc: [email protected]<mailto:[email protected]> Subject: Re: [Geoserver-users] Java version Paul there are many distributions of openjdk: Mac and Windows please try https://adoptopenjdk.net/ Or use the one that comes with your Linux distribution. On Tue, Dec 31, 2019 at 9:45 PM Paul Wittle <[email protected]<mailto:[email protected]>> wrote: Hi everyone, Just a quick question for you. On the documentation it states that the latest versions of GeoServer have been tested with OpenJDK 11 (on Tomcat 9) but then goes on to say that the best performance is on Java 8. To keep up with security our authority wants me to update my version of Java 8 but that now falls under the pay for a licence category and I can’t see OpenJDK 8 (it seems to start from 9 and says the early adoption program has ended). What is currently the recommended version of Java because we are using Tomcat 8.5 so I can install OpenJDK 11 but wondered if someone could clarify the performance sentence for me? Should I move to Tomcat 9 / OpenJDK 11? Thanks in advance and I hope everyone had a great Christmas. Paul This e-mail and any files transmitted with it are intended solely for the use of the individual or entity to whom they are addressed. It may contain unclassified but sensitive or protectively marked material and should be handled accordingly. Unless you are the named addressee (or authorised to receive it for the addressee) you may not copy or use it, or disclose it to anyone else. If you have received this transmission in error please notify the sender immediately. All traffic may be subject to recording and/or monitoring in accordance with relevant legislation. Any views expressed in this message are those of the individual sender, except where the sender specifies and with authority, states them to be the views of Dorset Council. Dorset Council does not accept service of documents by fax or other electronic means. Virus checking: Whilst all reasonable steps have been taken to ensure that this electronic communication and its attachments whether encoded, encrypted or otherwise supplied are free from computer viruses, Dorset Council accepts no liability in respect of any loss, cost, damage or expense suffered as a result of accessing this message or any of its attachments. For information on how Dorset Council processes your information, please see www.dorsetcouncil.gov.uk/416433<http://www.dorsetcouncil.gov.uk/416433> _______________________________________________ Geoserver-users mailing list Please make sure you read the following two resources before posting to this list: - Earning your support instead of buying it, but Ian Turton: http://www.ianturton.com/talks/foss4g.html#/ - The GeoServer user list posting guidelines: http://geoserver.org/comm/userlist-guidelines.html If you want to request a feature or an improvement, also see this: https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer [email protected]<mailto:[email protected]> https://lists.sourceforge.net/lists/listinfo/geoserver-users -- -- Jody Garnett This e-mail and any files transmitted with it are intended solely for the use of the individual or entity to whom they are addressed. It may contain unclassified but sensitive or protectively marked material and should be handled accordingly. Unless you are the named addressee (or authorised to receive it for the addressee) you may not copy or use it, or disclose it to anyone else. If you have received this transmission in error please notify the sender immediately. All traffic may be subject to recording and/or monitoring in accordance with relevant legislation. Any views expressed in this message are those of the individual sender, except where the sender specifies and with authority, states them to be the views of Dorset Council. Dorset Council does not accept service of documents by fax or other electronic means. Virus checking: Whilst all reasonable steps have been taken to ensure that this electronic communication and its attachments whether encoded, encrypted or otherwise supplied are free from computer viruses, Dorset Council accepts no liability in respect of any loss, cost, damage or expense suffered as a result of accessing this message or any of its attachments. For information on how Dorset Council processes your information, please see www.dorsetcouncil.gov.uk/416433<http://www.dorsetcouncil.gov.uk/416433> This e-mail and any files transmitted with it are intended solely for the use of the individual or entity to whom they are addressed. It may contain unclassified but sensitive or protectively marked material and should be handled accordingly. Unless you are the named addressee (or authorised to receive it for the addressee) you may not copy or use it, or disclose it to anyone else. If you have received this transmission in error please notify the sender immediately. All traffic may be subject to recording and/or monitoring in accordance with relevant legislation. Any views expressed in this message are those of the individual sender, except where the sender specifies and with authority, states them to be the views of Dorset Council. Dorset Council does not accept service of documents by fax or other electronic means. Virus checking: Whilst all reasonable steps have been taken to ensure that this electronic communication and its attachments whether encoded, encrypted or otherwise supplied are free from computer viruses, Dorset Council accepts no liability in respect of any loss, cost, damage or expense suffered as a result of accessing this message or any of its attachments. For information on how Dorset Council processes your information, please see www.dorsetcouncil.gov.uk/416433
_______________________________________________ Geoserver-users mailing list Please make sure you read the following two resources before posting to this list: - Earning your support instead of buying it, but Ian Turton: http://www.ianturton.com/talks/foss4g.html#/ - The GeoServer user list posting guidelines: http://geoserver.org/comm/userlist-guidelines.html If you want to request a feature or an improvement, also see this: https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer [email protected] https://lists.sourceforge.net/lists/listinfo/geoserver-users
