Category: Agent K on Java

58 posts

Aaaand... another JVM update...

by kai on 10/03/2013

I thought it'd be over, but it turns out that I was wrong. Oracle has pushed out JDK/JRE 1.6.0_43 - their first (of maybe many) security bugfixes of Java 6 post-end-of-support. The new security baseline is now 1.6.0_43, check out the release notes and the relevant Security Alert document. From what I can see the patched issues seem to mostly be relevant to running Java client/applet or web start…

Read the full article →

Another Java security baseline update (ColdFusion, Railo and others)

by kai on 22/02/2013

There's just been another release of Java 6 that is relevant for the security of your ColdFusion or Railo servers (but also for anything and anyone else running a Java-based server or client product). After having pushed out Update 39 just recently, Oracle has released Java 6 Update 41 (also known as JDK 1.6.0_41) and it has become the new security baseline version for Java 6. You will find a…

Read the full article →

Java | ColdFusion | Railo security update

by kai on 05/02/2013

This is just a quick free-of-charge public service announcement that Oracle has released Java 6 Update 39. Why is this important for users of ColdFusion or Railo? A lot of people are running their Railo and ColdFusion servers on Java 6. Update 39 is a so called "update to the JRE Security Baseline of Java 6" and you want to be on Update 39 to make sure you are protected by the latest security…

Read the full article →

Adobe Connect (hosted): make sure your user profile timezone is correct

by kai on 18/01/2013

The other day I was helping a client who are using Adobe Connect (hosted on the Adobe servers) and experienced an issue with scheduling meetings. What was basically happening was that when they scheduled a meeting it would always be created in US Pacific time. I do have admin access to their hosted Connect account, so I quickly tried it and (obviously :-) it worked fine for me. The timezone…

Read the full article →

Two tips to make Railo 4's default installation more secure

by kai on 16/01/2013

You might have read my recent post about installing Railo 4 on a Debian server. Post-install I did a bit of clean up and also used Pete Freitag's excellent hackmycf.com against that server. Many people might not know that it does support checking Railo servers as well as Adobe ColdFusion servers. Two interesting things popped up: 1. Server Header Version Disclosure - what that essentially means…

Read the full article →

Installing Railo 4.0.2 on Debian

by kai on 13/01/2013

I recently installed Railo 4.0.2 on a Debian server and it was an absolutely smooth ride. I essentially followed the installation guide provided in the Railo wiki. It's really straight forward, but let's go through the steps. Start here: Installation:InstallerDocumentation:LinLaunching Most likely (on a web server environment) you won't have a UI available to you. You can grab the installer with…

Read the full article →

Tmux plugin for IntelliJ

by kai on 13/10/2012

This is really cool. Mark Mandel has recently started hacking on a very basic Tmux plugin for IntelliJ and it's since then become a bit of our pet project for dabbling with IntellJ plugin development. No idea what Tmux is? It's essentially a Terminal multiplexer. Extremely useful if you like working in a shell/terminal window - particularly on Mac or Linux/Unix. If you're dabbling with REPL-based…

Read the full article →

Adobe Connect 8 SSL - Certificate Signing Request for multiple domains

by kai on 10/09/2012

This is part 3 of a mini-series of posts about Adobe Connect 8 and SSL. It actually was never intended to be a series of posts, it just grew into one - kind of organically. In the last post I explained how one can create a Certificate Signing Request (CSR) for Adobe Connect 8 SSL if one deals with an internal Certificate Authority. The process as outlined included a basic installation of OpenSSL…

Read the full article →

Creating a Certificate Signing Request (CSR) for Adobe Connect

by kai on 26/08/2012

The other day, I wrote about setting up stunnel for Adobe Connect. When I did the SSL setup for the client I was working with on that occasion, we also had to get the SSL certificate created. The Adobe Connect installation of the client is entirely internal and not used outside their organisation. The way they deal with SSL certificates in similar scenarios is not to buy certificates from an…

Read the full article →

Accessing .properties files within a Livecycle ES/ADEP DSC

by kai on 12/08/2012

The other day Darren asked about how to access a properties file with some settings from within a Livecycle ES resp. ADEP DSC on the livecycle developers mailing list. I responded there, but I thought it'd be useful to post the solution here as well. Essentially a Livecycle/ADEP DSC is nothing else but a .jar file that's been crafted in a certain way. Darren wanted to have the .properties file…

Read the full article →