Skip to main content

Legacy Java agent

Since the release of Java agent 4.x and EOP version 3.9.5, the legacy Contrast Java agent (3.x and earlier) can be used to analyze Java 6 and 7 web applications running on legacy technologies including:

  • Jboss 4.2, 6.1, 7.1

  • Weblogic 9, 10, 11

The legacy agent includes a JNDI rule in Protect which provides protection against CVE-45046.

Steps

In agent versions 3.15 and below, for certain features like Route Coverage to function you will need to set additional properties.

  1. Open the YAML configuration file in an editor.

  2. In addition to the pre-populated authentication keys, add the agent.java.standalone_app_name property.

    This property assigns the name of your application as you'd like to see it in Contrast. In this example, replace <MyAppName> with the name you'd like to use:

    api:
  url: https://xxx.contrastsecurity.com/Contrast
  api_key: A2xxxxxxxxxxxxxxxxxxxxxxxxxxxG9N
  service_key: 88xxxxxxxxxxxx5Z
  user_name: agent_xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx@OrgName
agent:
  java:
    standalone_app_name: <MyAppName>

    The legacy agent can be downloaded from Maven Central Repository Search.

In this section: