This page contains a guide how to install Java (Oracle JDK) with Java Cryptography Extension (Unlimited Strength Jurisdiction Policy Files) in a linux distribution Debian 8 (Jessie) for Shibboleth IdP 3. After successfull installation, the next step is to install Jetty.
Although there is a possibility to install Java using distribution's package management system, for example OpenJDK, we recommend what Shibboleth consortium does – using Java developed by Oracle. From time to time, there is a bug caused by OpenJDK and if we get in troubles, we might be asked to reproduce our problem using Oracle JDK when asking help.
After downloading Oracle JDK source codes, the archive has to be put into /usr/src directory and installed using the following commands:
# Creating a directory for source codes mkdir -p /opt/src # # Download source codes manually -- you need to accept the Oracle's license agreement # # Verifying SHA256 checksums cd /opt/src shasum -a256 jdk-8u111-linux-x64.tar.gz && echo 187eda2235f812ddb35c352b5f9aa6c5b184d611c2c9d0393afb8031d8198974 # Extracting and installation cd /opt tar --no-same-owner -xzf src/jdk-8u111-linux-x64.tar.gz update-alternatives --install /usr/bin/java java /opt/jdk1.8.0_111/bin/java 150 update-alternatives --install /usr/bin/javac javac /opt/jdk1.8.0_111/bin/javac 150 echo export JAVA_HOME=/opt/jdk1.8.0_111 >> ~/.bashrc
Verifying that Oracle JDK has been installed correctly.
# Displaying the current Java version update-alternatives --display java
The following output should be shown.
# Expected terminal output java - auto mode link currently points to /opt/jdk1.8.0_111/bin/java /opt/jdk1.8.0_111/bin/java - priority 150 Current 'best' version is '/opt/jdk1.8.0_111/bin/java'.
Checking the Java version using java command is also possible.
# The command to display Java version java -version
The output should look like this.
# Displaying the current Java version java version "1.8.0_111" Java(TM) SE Runtime Environment (build 1.8.0_111-b14) Java HotSpot(TM) 64-Bit Server VM (build 25.111-b14, mixed mode)
In the end, $JAVA_HOME environment variable should be verified if set correctly by reloading BASH configuration file and echoing $JAVA_HOME variable.
# Displaying the value of $JAVA_HOME variable source ~/.bashrc && echo $JAVA_HOME
# The value of $JAVA_HOME variable /opt/jdk1.8.0_111
As soon as Oracle JDK is installed, it is necessary to install JCE US (Java Cryptography Extension Unlimited Strength) required for stronger encryption.
After downloading JCE source code and putting it into /opt/src directory, the installation process is completed using the following commands.
# Extracting JCE US archive cd /opt unzip -x src/jce_policy-8.zip
JCE US installation comprises of copying two JAR (Java ARchive) files into Oracle JDK.
# JCE US installation cp UnlimitedJCEPolicyJDK8/US_export_policy.jar jdk1.8.0_111/jre/lib/security/ cp UnlimitedJCEPolicyJDK8/local_policy.jar jdk1.8.0_111/jre/lib/security/
The directory containing extracted JCE US can be deleted safely now.
# Deleting JCE US extracted archive rm -rf UnlimitedJCEPolicyJDK8/
Now, after successfull Java and Java Cryptography Extension installation, the next step is installing Jetty.