On June 30th 2021 another upgrade was made to cleo.plan.io.

Note: A similar upgrade was made on October 6th 2020 and we documented with Update Cleo Clarify Studio for SVN Security Upgrades

Below are the instructions on how to upgrade the Cleo Clarify workspace for June 2021.

Before Starting - Download the Following

Cleo Support provided the following jar/zip files the steps below

bcutil-jdk15on-169.jar
bcprov-ext-jdk15to18-169.jar
UnlimitedJCEPolicyJDK7.zip
bctls-jdk15to18-169.jar

STEP 1: Remove BouncyCastle jars

Navigate to the C:\Cleo\Clarify_4_Studio\jre\lib\ext directory.  Ensure there are no existing BouncyCastle jars in this directory.  If there are, remove any existing BouncyCastle jars from the ext directory before continuing.

In the case below, we will delete: bcprov-jdk16-144.jar

NOTE: Do RENAME file. I renamed the file to bcprov-jdk16-144.OLD and it caused errors. If users want to keep the file, move file to another directory

STEP 2: Apply BouncyCastle Jars

Place the 3 bc* (BouncyCastle) jars attached to this post in the Studio’s C:\Cleo\Clarify_4_Studio\jre\lib\ext directory.

STEP 3: Apply Security jars

Place the unlimited strength local_policy.jar and US_export_policy.jar files from the UnlimitedJCEPolicyJDK7.zip in the Studio’s C:\Cleo\Clarify_4_Studio\jre\lib\security directory (they will overwrite the existing files there)

STEP 4: Update java.security

Edit the C:\Cleo\Clarify_4_Studio\jre\lib\security\java.security  file.  Add these two entries to the top of the list of Security providers:

security.provider.1=org.bouncycastle.jce.provider.BouncyCastleProvider
security.provider.2=org.bouncycastle.jsse.provider.BouncyCastleJsseProvider

BEFORE:

AFTER:

Text:

security.provider.1=org.bouncycastle.jce.provider.BouncyCastleProvider
security.provider.2=org.bouncycastle.jsse.provider.BouncyCastleJsseProvider
security.provider.3=sun.security.provider.Sun
security.provider.4=sun.security.rsa.SunRsaSign
security.provider.5=sun.security.ec.SunEC
security.provider.6=com.sun.net.ssl.internal.ssl.Provider
security.provider.7=com.sun.crypto.provider.SunJCE
security.provider.8=sun.security.jgss.SunProvider
security.provider.9=com.sun.security.sasl.Provider
security.provider.10=org.jcp.xml.dsig.internal.dom.XMLDSigRI
security.provider.11=sun.security.smartcardio.SunPCSC
security.provider.12=sun.security.mscapi.SunMSCAPI