Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

java upgrade #940

Closed
wants to merge 59 commits into from
Closed

java upgrade #940

wants to merge 59 commits into from

Conversation

jcschaff
Copy link
Member

@jcschaff jcschaff commented Jul 14, 2023

see #848

  • separation from SciJava parent POM
  • migrate from SciJava services to Guice dependency injection
  • upgrade to latest Oracle drivers from maven central, remove vcell-oracle module
  • upgrade from Java 8 to Java 17
    • modular JVMs with better container support (uses ALL-MODULE-PATH for now in jlink)
    • new language features
    • support for modern java frameworks,
    • eventual support for GraalVM native deployments (beyond scope of this PR).
  • upgrade Install4J and new client-side JVMs.
  • split VCellClientTest into VCellClientMain (for client-server) and VCellClientDevMain (for local dev)

additional refactoring/clean-up

  • removed vcell-imagej and vcell-imagej-helper modules
  • removed unused /PythonScripts/ python projects (VCell_API, VCell_ImageJ and VCell_Opt)
  • removed unused Thrift specs: ImageDataset.thrift, VCellImage.thrift, pyVCell.thrift
  • moved /PythonScripts/VCell_VTK to its own Poetry project /pythonVtk.
  • remove dependencies from vcell-cli on vcell-server, vcell-admin and vcell-client.

@jcschaff jcschaff self-assigned this Jul 14, 2023
@jcschaff jcschaff linked an issue Jul 14, 2023 that may be closed by this pull request
// keystorePassword may be encrypted with dbPassword, if it is decypt it.
//
String dbPassword = PropertyLoader.getSecretValue(PropertyLoader.dbPasswordValue, PropertyLoader.dbPasswordFile);
SecretKeyFactory kf = SecretKeyFactory.getInstance("PBEWithMD5AndDES");

Check failure

Code scanning / CodeQL

Use of a broken or risky cryptographic algorithm

Cryptographic algorithm [PBEWithMD5AndDES](1) is weak and should not be used.
String dbPassword = PropertyLoader.getSecretValue(PropertyLoader.dbPasswordValue, PropertyLoader.dbPasswordFile);
SecretKeyFactory kf = SecretKeyFactory.getInstance("PBEWithMD5AndDES");
SecretKey key = kf.generateSecret(new PBEKeySpec(dbPassword.toCharArray()));
Cipher pbeCipher = Cipher.getInstance("PBEWithMD5AndDES");

Check failure

Code scanning / CodeQL

Use of a broken or risky cryptographic algorithm

Cryptographic algorithm [PBEWithMD5AndDES](1) is weak and should not be used.
@jcschaff
Copy link
Member Author

replaced by #994 (fresh branch for merging with master).

@jcschaff jcschaff closed this Oct 20, 2023
@jcschaff jcschaff deleted the 848-java-upgrade branch October 20, 2023 03:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
Status: Done
Development

Successfully merging this pull request may close these issues.

Need to Upgrade VCell to later versions of Java
1 participant