diff --git a/build/check_entity.pl b/build/check_entity.pl
index 824a4773..46456029 100755
--- a/build/check_entity.pl
+++ b/build/check_entity.pl
@@ -29,7 +29,7 @@
 		unlink($temp) if -e $temp;
 		
 		# extract embedded certificates
-		open(EXTRACT, "java -cp ../xalan-j_2_6_0/bin/xalan.jar org.apache.xalan.xslt.Process -IN $fn -OUT $temp -XSL extract_embedded.xsl|")
+		open(EXTRACT, "java -Djava.endorsed.dirs=../tools/xalan/endorsed org.apache.xalan.xslt.Process -IN $fn -OUT $temp -XSL extract_embedded.xsl|")
 		 	|| die "could not open certificate extract process";
 		while (<EXTRACT>) {
 			print $_;
diff --git a/build/extract_locs.pl b/build/extract_locs.pl
index bd2a12f2..ca183303 100755
--- a/build/extract_locs.pl
+++ b/build/extract_locs.pl
@@ -1,6 +1,6 @@
 #!/usr/bin/perl -w
 
-open(XML,"java -cp ../xalan-j_2_6_0/bin/xalan.jar org.apache.xalan.xslt.Process -IN ../xml/ukfederation-metadata-unsigned.xml -XSL extract_locs.xsl|") || die "could not open input file";
+open(XML,"java -Djava.endorsed.dirs=../tools/xalan/endorsed org.apache.xalan.xslt.Process -IN ../xml/ukfederation-metadata-unsigned.xml -XSL extract_locs.xsl|") || die "could not open input file";
 while (<XML>) {
 	chop;
 	if (/^https:\/\/([^\/:]+(:\d+)?)(\/|$)/) {
diff --git a/build/probe_certs.pl b/build/probe_certs.pl
index 68efd739..877a5988 100755
--- a/build/probe_certs.pl
+++ b/build/probe_certs.pl
@@ -1,6 +1,6 @@
 #!/usr/bin/perl -w
 
-open(XML,"java -cp ../xalan-j_2_6_0/bin/xalan.jar org.apache.xalan.xslt.Process -IN ../xml/ukfederation-metadata.xml -XSL extract_cert_locs.xsl|") || die "could not open input file";
+open(XML,"java -Djava.endorsed.dirs=../tools/xalan/endorsed org.apache.xalan.xslt.Process -IN ../xml/ukfederation-metadata.xml -XSL extract_cert_locs.xsl|") || die "could not open input file";
 while (<XML>) {
 	if (/^http:/) {
 		print "skipping http location: $_";
diff --git a/build/probe_nocerts.pl b/build/probe_nocerts.pl
index 63d60a9a..b7c783c2 100755
--- a/build/probe_nocerts.pl
+++ b/build/probe_nocerts.pl
@@ -2,7 +2,7 @@
 
 $known_bad{'census.data-archive.ac.uk:8080'} = 1; # it is really http, not https
 
-open(XML,"java -cp ../xalan-j_2_6_0/bin/xalan.jar org.apache.xalan.xslt.Process -IN ../xml/ukfederation-metadata.xml -XSL extract_nocert_locs.xsl|") || die "could not open input file";
+open(XML,"java -Djava.endorsed.dirs=../tools/xalan/endorsed org.apache.xalan.xslt.Process -IN ../xml/ukfederation-metadata.xml -XSL extract_nocert_locs.xsl|") || die "could not open input file";
 while (<XML>) {
 	chop;
 	if (/^http:/) {