Java Upgrade Procedure for Kewill Customs on Linux
Kewill Copyright Notice Copyright 2016 by Kewill Inc. All rights reserved. This document is the property of Kewill and the information contained herein is confidential. This document, either in whole or in part, must not be reproduced or disclosed to others or used for purposes other than that for which it has been supplied without Kewill s prior written permission, or, if any part hereof is furnished by virtue of a contract with a third party, as expressly authorized under that contract. This edition applies to the current version of the Kewill product and to all subsequent releases and modifications until otherwise indicated. Kewill reserves the right to make improvements and/or changes in the product(s) and/or programs(s) described in these publications at any time. No part of this document may be reproduced or transmitted in any form or by means without the prior written permission of Kewill Limited or one its subsidiaries. If there are any problems encountered in the documentation, please report them to Kewill in writing. Kewill does not warrant that this document is error-free. Third-party Copyright and Trademark Notice Kewill Customs U.S. is legally licensed to operate in conjunction with the following third-party hardware and software: Adobe Acrobat Copyright 2016 Adobe Systems Incorporated. All rights reserved. Apache Tomcat Copyright 1999-2016, The Apache Software Foundation, Licensed under the Apache License, Version 2.0. Citrix Citrix product names referenced herein are trademarks of Citrix Systems, Inc., and/or one of its subsidiaries, and may be registered in the United States Patent and Trademark Office and in other countries. Hewlett Packard (HP) -- Copyright 2010 Hewlett-Packard Development Company, L.P. IBM MQ Server Copyright International Business Machines Corporation 2012. All rights reserved. IBM Tivoli Workload Scheduler (Load Leveler) Copyright International Business Machines Corporation 2005. All rights reserved. Intel Copyright Intel Corporation. All rights reserved. Intel Corporation, 2200 Mission College Blvd., Santa Clara, CA 95052-8119, USA. Java Software Development Kit (JDK)/Java Runtime Environment (JRE) Copyright 1994-1999 Sun Microsystems, Inc., 901 San Antonio Road, Palo Alto, California, 94303, U.S.A. All Rights Reserved. Linux Linux Foundation in accordance with Linux Foundation trademark policy. Mozilla Firefox Mozilla Firefox is a registered trademark of the Mozilla Foundation. Oracle Trademark and Copyright 2004, 2016, Oracle and/or its affiliates. All rights reserved. PuTTY (SSH/TelnEt Client) PuTTY is copyright 1997-2007, Simon Tatham et al. TSS Server Copyright 2011 Trusted Security Solutions, Inc. 1500 Orchard Lake Dr., Charlotte, NC 28270. All rights reserved.
Java 1.7_80 64-bit upgrade for Kewill Customs on Linux This document outlines the procedure to upgrade Java on Linux for Kewill Customs (KC). Note: Use the username assigned to run KC e.g. alliance and assuming the root directory for KC is /kcustoms 1. Download jdk-7u80-linux-x64.tar.gz from http://www.oracle.com/technetwork/java/javase/downloads/java-archive-downloads-javase7-521261.html#jdk-7u80-oth-jpr 2. FTP or SFTP the file to target Linux application server for KC and place it to the directory e.g. /kcustoms 3. Untar jdk-7u80-linux-x64.tar.gz: tar xvfz jdk-7u80-linux-x64.tar.gz 4. Run chown to make sure that the ownership of entire JDK directory is correct: chown R alliance:alliance jdk1.7.0_80 5. Edit /kcustoms/tomcatbg/bin/catalina.sh and /kcustoms/tomcatfg/bin/catalina.sh, and change the following line from: JAVA_HOME=/kcustoms/jdk1.6.0_45; export JAVA_HOME To: JAVA_HOME=/kcustoms/jdk1.7.0_80; export JAVA_HOME 6. Restart tomcatfg and tomcatbg 7. Check if tomcatfg and tomcatbg is now pointing to Java 1.7_80, by running: ps eaf grep tomcat Result of the command: alliance 31530 1 2 15:28 pts/2 00:01:42 /kcustoms/jdk1.7.0_80/bin/java - Djava.util.logging.config.file=/kcustoms/tomcatbg/conf/logging.properties - Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -server -Xmx2048m -
XX:MaxPermSize=256m -XX:+DisableExplicitGC -Djava.awt.headless=true - Dicustoms.primary.url=http://10.10.108.229:8090/kcustoms/MainController - Djava.endorsed.dirs=/kcustoms/tomcatbg/endorsed -classpath /kcustoms/tomcatbg/bin/bootstrap.jar -Dcatalina.base=/kcustoms/tomcatbg - Dcatalina.home=/kcustoms/tomcatbg -Djava.io.tmpdir=/kcustoms/tomcatbg/temp org.apache.catalina.startup.bootstrap start alliance 31552 1 2 15:28 pts/2 00:01:55 /kcustoms/jdk1.7.0_80/bin/java - Djava.util.logging.config.file=/kcustoms/tomcatfg/conf/logging.properties - Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -server -Xmx4096m - XX:MaxPermSize=512m -XX:+DisableExplicitGC -Djava.awt.headless=true - Dicustoms.primary.url=http://10.10.108.229:8080/kcustoms/MainController - Djava.endorsed.dirs=/kcustoms/tomcatfg/endorsed -classpath /kcustoms/tomcatfg/bin/bootstrap.jar -Dcatalina.base=/kcustoms/tomcatfg - Dcatalina.home=/kcustoms/tomcatfg -Djava.io.tmpdir=/kcustoms/tomcatfg/temp org.apache.catalina.startup.bootstrap start 8. At this point, KC is up and running on Java 1.7_80. The UI should be accessible. Below are optional steps if Kewill ISF integration with Kewill Customs is not working due to the following error: javax.xml.ws.webserviceexception: Failed to access the WSDL at: https://isf.stage.kewill.net/kc/upload?wsdl. It failed with: sun.security.validator.validatorexception: PKIX path building failed: sun.security.provider.certpath.suncertpathbuilderexception: unable to find valid certification path to requested target. 1. Upload isf.stage.cer (ISF Stage) or isf.prod.cer (ISF Production) to the Linux Application server to /kcustoms or to Alliance home folder. isf.stage.cer isf.prod.cer 2. Assuming this is for KC Cert or Test environment pointing to ISF Stage, run:
/kcustoms/jdk1.7.0_80/bin/keytool -import -alias isf.stage.kewill.net - keystore /kcustoms/jdk1.7.0_80/jre/lib/security/cacerts -file /kcustoms/isf.stage.cer 3. When prompted by Enter keystore password:, type-in: changeit 4. When prompted by Trust this certificate? [no]:, type-in yes 5. The result: Certificate was added to keystore 6. Restart tomcatbg.