07-08-2021 12:38 PM
I have been asked to develop a solution within our company to stop the downloading of all versions of Java (jre-8u291-macosx-x64) from anywhere on the internet as well as from internal file shares.
Because of the change in licensing, my company is subject to Oracle’s EULA as stated below:
“The Oracle Java License has changed for releases starting April 16, 2019.
The new Oracle Technology Network License Agreement for Oracle Java SE is substantially different from prior Oracle Java licenses. The new license permits certain uses, such as personal use and development use, at no cost -- but other uses authorized under prior Oracle Java licenses may no longer be available. Please review the terms carefully before downloading and using this product. An FAQ is available here. Commercial license and support is available with a low cost Java SE Subscription.”
We do not want to block the official Oracle or Java download URLs, as we are unsure if business critical applications are configured to automatically pull updates. I investigated the blocking of the actual .exe, but with the name and signature of the .exe changing each time the version changes, that seems like too much administrative overhead.
Has anyone else come across this challenge? If so, what is your approach?
