Java Corretto on workstations - Enterprise configuration

[nmachtel]

Dear all

By lack of a better place (feel free to redirect me to one if I missed it), I reach out through this feature request.

In our company, we have Oracle Java 8 and 11 configured with a certain security and convenience level towards our end-users and the environment. We are not managing to do this in the same manner for Java Corretto and cannot find suitable documentation to do so.

What we would like to configure:

• A whitelist of Java applications which can be executed from the workstation (through the certificates of the jar-files, a whitelist of locations or URLs, ..)
• A mapping of which Java files and the desired Java version to run. For legacy reasons, we will need multiple version of Java (including Oracle Java) on the machine - can we indicate what to run with which version ?
• Other security mechanisms which disable the end-user to make modifications to certain settings, ...

Ideally, we would also have a possibility to better integrate the launch of JNLP files. Ideally, this is automatically started when clicking on links in Edge Chromium but a convenient way to start them after download (again, with a convenient way to select the correct Java version) would be great. We are aware that icedtea-web can play a role here, but we are facing the same issues with our enterprise configuration.

A clear deployment guideline (including best practices for maintenance) would be great. Again, if another place is better suited for this type of question, I am happy to be redirected.

Kind regards
Niels

[davecurrie]

Hi. The functionality you mention is proprietary and not part of OpenJDK 8, so it is also not part of Corretto 8. Other Corretto customers have had success using icedtea-web for launching JNLP files but since systems and configurations vary a lot, we don't maintain any specific best-practice doc on integrating with Corretto.