Java versions client vs server

44 views
Skip to first unread message

Petr Gašparík - AMI Praha a.s.

unread,
Dec 6, 2016, 7:59:04 AM12/6/16
to CAS Community
Hi all,
what is the dependence between Java version on CAS server and CAS client?

For example, if I have installed CAS server 5.0 in Java EE 8 enviroment, and I want to connect Java client running in Java EE 6 enviroment, will it work?
Or do I have to upgrade client env to Java 8 in first place?

thank you in advance
Petr G.

Philippe MARASSE

unread,
Dec 6, 2016, 10:43:45 AM12/6/16
to cas-...@apereo.org
Hello,

TLS can cause troubles between Java 6 & Java 8 :
  - DH parameters can not exceed 1024 bits,
  - SNI is unavailable before Java 7
  - Java 6 does not support TLS 1.1&1.2 but only SSLv3 and TLS 1.0

Some of these issues can be worked around with bouncy castle security provider.

Regards.
--
- CAS gitter chatroom: https://gitter.im/apereo/cas
- CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html
- CAS documentation website: https://apereo.github.io/cas
- CAS project website: https://github.com/apereo/cas
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/48d93549-6527-4c07-8795-8c9983cd7843%40apereo.org.

-- 
Philippe MARASSE

Responsable pôle Infrastructures - DSIO
Centre Hospitalier Henri Laborit
CS 10587 - 370 avenue Jacques Cœur 
86021 Poitiers Cedex
Tel : 05.49.44.57.19

Christopher Myers

unread,
Dec 7, 2016, 10:38:33 AM12/7/16
to cas-...@apereo.org
It shouldn't really matter, as long as:

 - the version of Java you're running on the CAS server is sufficient for Tomcat and the CAS server software that's installed on it
 - the version of Java you're running on the client is sufficient for whatever the client application requires -- IF ANY.

In reality, if your client software doesn't require Java, you don't even need Java on that machine. CAS is a protocol that can be spoken by many different applications, and doesn't require Java to exist. It's required by Tomcat and the CAS server application, but not necessarily the client. For example, we've got a PHP application (Moodle) that speaks to the CAS server, and we don't even have to have Java installed on that server.

Chris



>>> Petr Gašparík - AMI Praha a.s.<petr.g...@ami.cz> 12/06/16 6:59 AM >>>
--

Petr Gašparík - AMI Praha a.s.

unread,
Dec 7, 2016, 10:38:33 AM12/7/16
to CAS Community
Thank you for your answer.

To rephrase my question, can I use latest CAS 5.0 client on Java 6 machines? 

--

s pozdravem

Petr Gašparík
solution architect

gsm: [+420] 603 523 860
e-mail: petr.g...@ami.cz

      

AMI Praha a.s.
Pláničkova 11
162 00 Praha 6
tel.: [+420] 274 783 239
web: www.ami.cz

      

AMI Praha a.s.


AMI Praha a.s.

Textem tohoto e-mailu podepisující neslibuje uzavřít ani neuzavírá za společnost AMI Praha a.s.
jakoukoliv smlouvu. Každá smlouva, pokud bude uzavřena, musí mít výhradně písemnou formu.


2016-12-06 16:43 GMT+01:00 'Philippe MARASSE' via CAS Community <cas-...@apereo.org>:
Hello,

TLS can cause troubles between Java 6 & Java 8 :
  - DH parameters can not exceed 1024 bits,
  - SNI is unavailable before Java 7
  - Java 6 does not support TLS 1.1&1.2 but only SSLv3 and TLS 1.0

Some of these issues can be worked around with bouncy castle security provider.

Regards.


Le 06/12/2016 à 13:59, Petr Gašparík - AMI Praha a.s. a écrit :
Hi all,
what is the dependence between Java version on CAS server and CAS client?

For example, if I have installed CAS server 5.0 in Java EE 8 enviroment, and I want to connect Java client running in Java EE 6 enviroment, will it work?
Or do I have to upgrade client env to Java 8 in first place?

thank you in advance
Petr G.
--
- CAS gitter chatroom: https://gitter.im/apereo/cas
- CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html
- CAS documentation website: https://apereo.github.io/cas
- CAS project website: https://github.com/apereo/cas
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscribe@apereo.org.
-- 
Philippe MARASSE

Responsable pôle Infrastructures - DSIO
Centre Hospitalier Henri Laborit
CS 10587 - 370 avenue Jacques Cœur 
86021 Poitiers Cedex
Tel : 05.49.44.57.19

--
- CAS gitter chatroom: https://gitter.im/apereo/cas
- CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html
- CAS documentation website: https://apereo.github.io/cas
- CAS project website: https://github.com/apereo/cas
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscribe@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/43d8d2a6-cd9b-435d-14c4-9b2a57e4a01e%40ch-poitiers.fr.

Misagh Moayyed

unread,
Dec 7, 2016, 10:39:56 AM12/7/16
to cas-...@apereo.org

There is no CAS 5 client. If you mean the CAS client in general, then yes. If you mean CAS 5 server, then no.

 

--Misagh

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.

-- 
Philippe MARASSE
 
Responsable pôle Infrastructures - DSIO
Centre Hospitalier Henri Laborit
CS 10587 - 370 avenue Jacques Cœur 
86021 Poitiers Cedex
Tel : 05.49.44.57.19

--
- CAS gitter chatroom: https://gitter.im/apereo/cas
- CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html
- CAS documentation website: https://apereo.github.io/cas
- CAS project website: https://github.com/apereo/cas
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.

 

--

- CAS gitter chatroom: https://gitter.im/apereo/cas
- CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html
- CAS documentation website: https://apereo.github.io/cas
- CAS project website: https://github.com/apereo/cas
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CABAspd29PGoJa%3DRf5jTiHRxcWN0CBgjAe_G%2BRrWjf9RJ34xB0g%40mail.gmail.com.

Reply all
Reply to author
Forward
0 new messages