Re: [OT] Tomcat Apache 7.0.79 upgrade to Latest version

2019-02-20 Thread John Dale
Without all of those early adopters to take the flack, we'd never know
where the enemy bases are .. or something like that. ;)

I'm just very glad we have OpenJDK and that my code is very simple.

Java 12 .. Uff da!



On 2/20/19, Christopher Schultz  wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
>
> John,
>
> On 2/20/19 10:58, John Dale wrote:
>> Points taken .. I have a great deal from my cloud provider on a
>> wheezy instance, so I have to see if I can negotiate to keep my
>> rate. I do a lot of custom MVC and security checks so things are
>> nice and tight and I haven't been hacked even though I get several
>> thousand attempts a day mostly from China and Iran.  I'm also
>> kicking around whether to use James or keep using postfix for
>> email.  With an upgrade to Java 8 I can use the latest james
>> release so I'll look into that.
>>
>> I've been struggling to find a nice block of time for a full
>> regression test.  It's funny .. I was working for a bank a couple
>> of years back that was still on Java 1.6 and that's the way they
>> liked it. :)
>>
>> Did you see the road map for Java 10?  Seems like we're moving a
>> little too fast sometimes ..
>
> Java 10's dead, baby.
>
> Java 11 will be a long-term-service release. Java 12 is already
> available for pre-release.
>
> The biggest step is from 8 -> 9/10/11. Once you are over that, it will
> be much better for everyone.
>
> I don't want to have to wait 10 years to get new stuff like TLS 1.3
> support or the forthcoming HTTP/3, so I'm happy with the shorter
> development cycles Oracle has switched-over to.
>
> - -chris
>
>> On 2/20/19, Christopher Schultz 
>> wrote: John,
>>
>> On 2/20/19 09:11, John Dale wrote:
> I'm thinking about migrating to 8 soon myself.  Maybe I'll
> use this as an opportunity to get started on that .. but I
> think the last time I checked, OpenJDK 7 was supported on
> Wheezy, so I'm thinking I have more to do than just upgrade
> tomcat in my scenario.
>>
>> Yes. Wheezy is essentially unsupported and I would drop everything
>> and upgrade to at least Jessie like right now if I were you.
>> Stretch isn't much more work and you'll be good for a few years on
>> that.
>>
>> Stretch has OpenJDK 8 packages. Current version is 1.8.0_181.
>>
>> Jessie looks like it only has OpenJDK 7 packages. I didn't check
>> the backports.
>>
> I'll need to update linux, Java, tomcat, then finally my
> apps. But I'm pretty CDO (that's like OCD, but alphabetical)
> about the platform independence of my apps, so that's going
> to be straightforward.
>> Make sure you don't waste time upgrading from Tomcat 7 to Tomcat 8.
>> Go directly to Tomcat 8.5, since 8.0 is no longer supported.
>>
>> -chris
>>
> On 2/20/19, Nitin Kadam  wrote:
>> Thanks John  for reply..
>>
>> is there any documentation walkthrough for this upgrade
>> available? i am new to Tomcat and doing this 1st time, It
>> will be great help if anyone provide same.
>>
>> On Wed, Feb 20, 2019 at 6:49 PM Olaf Kock
>>  wrote:
>>
>>>
>>> On 20.02.19 13:57, Nitin Kadam wrote:
 Hello Team,

 Can you please guide how we can migrate seamlessly
 from Tomcat apache 7.0.79 to 7.0.92 or any latest
 version that 8.x or 9.x ( Windows 2012 R2 server)escr
>>>
>>> 7.0 to 8.0: https://tomcat.apache.org/migration-8.html
>>>
>>> 8.0 to 8.5: https://tomcat.apache.org/migration-85.html
>>>
>>> 8.x to 9.0: https://tomcat.apache.org/migration-9.html
>>>
 the current environment is configured with SSL
 certificate ( SSL 443)
>>> .jks
 store and needs to upgrade same due to security
 vulnerability detected by Qualys scanner.
>>>
>>> The documents have TLS documentation chapters. If you run
>>> into specific problems, describe them here.
>>>
>>> Olaf
>>>
>>>
>>> -
> - ---
>>
>>>
> - -
>>>
>>>
>> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>>> For additional commands, e-mail:
>>> users-h...@tomcat.apache.org
>>>
>>>
>>
>> -- Regards Nitin Kadam (9967688959)
>>
>
> ---
> - --
>
>
>>
>
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail:
> users-h...@tomcat.apache.org
>
>>>
>>> -
>>>
>>>
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>>> For additional commands, e-mail: users-h...@tomcat.apache.org
>>>
>>>
>>
>> -
>>
>>
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>> For additional commands, e-mail: users-h...@tomcat.apache.org
>>
> -BEGIN PGP SIGNATURE-
> 

Re: [OT] Tomcat Apache 7.0.79 upgrade to Latest version

2019-02-20 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

John,

On 2/20/19 10:58, John Dale wrote:
> Points taken .. I have a great deal from my cloud provider on a
> wheezy instance, so I have to see if I can negotiate to keep my
> rate. I do a lot of custom MVC and security checks so things are
> nice and tight and I haven't been hacked even though I get several
> thousand attempts a day mostly from China and Iran.  I'm also
> kicking around whether to use James or keep using postfix for
> email.  With an upgrade to Java 8 I can use the latest james
> release so I'll look into that.
> 
> I've been struggling to find a nice block of time for a full 
> regression test.  It's funny .. I was working for a bank a couple
> of years back that was still on Java 1.6 and that's the way they
> liked it. :)
> 
> Did you see the road map for Java 10?  Seems like we're moving a 
> little too fast sometimes ..

Java 10's dead, baby.

Java 11 will be a long-term-service release. Java 12 is already
available for pre-release.

The biggest step is from 8 -> 9/10/11. Once you are over that, it will
be much better for everyone.

I don't want to have to wait 10 years to get new stuff like TLS 1.3
support or the forthcoming HTTP/3, so I'm happy with the shorter
development cycles Oracle has switched-over to.

- -chris

> On 2/20/19, Christopher Schultz 
> wrote: John,
> 
> On 2/20/19 09:11, John Dale wrote:
 I'm thinking about migrating to 8 soon myself.  Maybe I'll
 use this as an opportunity to get started on that .. but I
 think the last time I checked, OpenJDK 7 was supported on
 Wheezy, so I'm thinking I have more to do than just upgrade
 tomcat in my scenario.
> 
> Yes. Wheezy is essentially unsupported and I would drop everything
> and upgrade to at least Jessie like right now if I were you.
> Stretch isn't much more work and you'll be good for a few years on
> that.
> 
> Stretch has OpenJDK 8 packages. Current version is 1.8.0_181.
> 
> Jessie looks like it only has OpenJDK 7 packages. I didn't check
> the backports.
> 
 I'll need to update linux, Java, tomcat, then finally my
 apps. But I'm pretty CDO (that's like OCD, but alphabetical)
 about the platform independence of my apps, so that's going
 to be straightforward.
> Make sure you don't waste time upgrading from Tomcat 7 to Tomcat 8.
> Go directly to Tomcat 8.5, since 8.0 is no longer supported.
> 
> -chris
> 
 On 2/20/19, Nitin Kadam  wrote:
> Thanks John  for reply..
> 
> is there any documentation walkthrough for this upgrade 
> available? i am new to Tomcat and doing this 1st time, It
> will be great help if anyone provide same.
> 
> On Wed, Feb 20, 2019 at 6:49 PM Olaf Kock
>  wrote:
> 
>> 
>> On 20.02.19 13:57, Nitin Kadam wrote:
>>> Hello Team,
>>> 
>>> Can you please guide how we can migrate seamlessly
>>> from Tomcat apache 7.0.79 to 7.0.92 or any latest
>>> version that 8.x or 9.x ( Windows 2012 R2 server)escr
>> 
>> 7.0 to 8.0: https://tomcat.apache.org/migration-8.html
>> 
>> 8.0 to 8.5: https://tomcat.apache.org/migration-85.html
>> 
>> 8.x to 9.0: https://tomcat.apache.org/migration-9.html
>> 
>>> the current environment is configured with SSL
>>> certificate ( SSL 443)
>> .jks
>>> store and needs to upgrade same due to security
>>> vulnerability detected by Qualys scanner.
>> 
>> The documents have TLS documentation chapters. If you run
>> into specific problems, describe them here.
>> 
>> Olaf
>> 
>> 
>> -
- ---
>
>> 
- -
>> 
>> 
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>> For additional commands, e-mail:
>> users-h...@tomcat.apache.org
>> 
>> 
> 
> -- Regards Nitin Kadam (9967688959)
> 
 
 ---
- --


>
 
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail:
 users-h...@tomcat.apache.org
 
>> 
>> -
>>
>> 
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>> For additional commands, e-mail: users-h...@tomcat.apache.org
>> 
>> 
> 
> -
>
> 
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
> 
-BEGIN PGP SIGNATURE-
Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/

iQIzBAEBCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAlxtfBwACgkQHPApP6U8
pFj9NQ//R4TxxfPFCtzZzPhRJqtka6A9MSQ7wfoqvZcVD+Wde/WquelT47lZySam
LqyMwKo3/IN7HUCwYBI6zm7JHPJYHrYv7FU+xH8TgpeSNCmxqKY0CPRQbKEPxY+T
CYiikk/9YFIpKA7QWBMpGO0Fs3/dKX2dwlrC9Bx7gllz5nzG6Vq0SWILOPt7FsEt

Re: Tomcat Apache 7.0.79 upgrade to Latest version

2019-02-20 Thread John Dale
Points taken .. I have a great deal from my cloud provider on a wheezy
instance, so I have to see if I can negotiate to keep my rate. I do a
lot of custom MVC and security checks so things are nice and tight and
I haven't been hacked even though I get several thousand attempts a
day mostly from China and Iran.  I'm also kicking around whether to
use James or keep using postfix for email.  With an upgrade to Java 8
I can use the latest james release so I'll look into that.

I've been struggling to find a nice block of time for a full
regression test.  It's funny .. I was working for a bank a couple of
years back that was still on Java 1.6 and that's the way they liked
it. :)

Did you see the road map for Java 10?  Seems like we're moving a
little too fast sometimes ..

On 2/20/19, Christopher Schultz  wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
>
> John,
>
> On 2/20/19 09:11, John Dale wrote:
>> I'm thinking about migrating to 8 soon myself.  Maybe I'll use this
>> as an opportunity to get started on that .. but I think the last
>> time I checked, OpenJDK 7 was supported on Wheezy, so I'm thinking
>> I have more to do than just upgrade tomcat in my scenario.
>
> Yes. Wheezy is essentially unsupported and I would drop everything and
> upgrade to at least Jessie like right now if I were you. Stretch isn't
> much more work and you'll be good for a few years on that.
>
> Stretch has OpenJDK 8 packages. Current version is 1.8.0_181.
>
> Jessie looks like it only has OpenJDK 7 packages. I didn't check the
> backports.
>
>> I'll need to update linux, Java, tomcat, then finally my apps.
>> But I'm pretty CDO (that's like OCD, but alphabetical) about the
>> platform independence of my apps, so that's going to be
>> straightforward.
> Make sure you don't waste time upgrading from Tomcat 7 to Tomcat 8. Go
> directly to Tomcat 8.5, since 8.0 is no longer supported.
>
> - -chris
>
>> On 2/20/19, Nitin Kadam  wrote:
>>> Thanks John  for reply..
>>>
>>> is there any documentation walkthrough for this upgrade
>>> available? i am new to Tomcat and doing this 1st time, It will be
>>> great help if anyone provide same.
>>>
>>> On Wed, Feb 20, 2019 at 6:49 PM Olaf Kock 
>>> wrote:
>>>

 On 20.02.19 13:57, Nitin Kadam wrote:
> Hello Team,
>
> Can you please guide how we can migrate seamlessly from
> Tomcat apache 7.0.79 to 7.0.92 or any latest version that 8.x
> or 9.x ( Windows 2012 R2 server)escr

 7.0 to 8.0: https://tomcat.apache.org/migration-8.html

 8.0 to 8.5: https://tomcat.apache.org/migration-85.html

 8.x to 9.0: https://tomcat.apache.org/migration-9.html

> the current environment is configured with SSL certificate (
> SSL 443)
 .jks
> store and needs to upgrade same due to security vulnerability
> detected by Qualys scanner.

 The documents have TLS documentation chapters. If you run into
 specific problems, describe them here.

 Olaf


 
> - -


> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org


>>>
>>> -- Regards Nitin Kadam (9967688959)
>>>
>>
>> -
>>
>>
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>> For additional commands, e-mail: users-h...@tomcat.apache.org
>>
> -BEGIN PGP SIGNATURE-
> Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/
>
> iQIzBAEBCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAlxtd5oACgkQHPApP6U8
> pFjMshAAi+r0Y8rJa80b0nnv0Wh95qa2rMOzWvqx/Yl5At8D1NuaABnQhuk/8gOJ
> G8A+lY+5DFYI3n5NebO8Cp5GVHQD2ZK5N3A8CyZaQnfVeA4dA/O7baU3tNUINqep
> d680v3rtlVkXnY230H0sWujDFbBBM1SPzuqQyUas7FTQyJ52ehCwxX2aneYj4pF1
> hNsmMbUkF0xkxBEqnr/xqgneuAyVw+eGACA9rjQxTRLWlJSR/Pih3mA+dVlPTQzO
> M+8PhtX/M2mV4RuHaQXTVRwbOfqvHS8QBF2oUBJlO8uiNoy18IcHmbiCNP8S44Tf
> 1ESjQM5k5M/9tW1mv0xFKm22Y32LKLb1PsAtlEM1eWgCJnXPJT1tT0Iuwq8VwJWl
> lxWXg879V/CFr7Xrl0xs/sBLEqn7Sqd8XBy9mBBMKT+YcS0rZDO1mG/a5aVKeni8
> E09Ab2R5d+oKzeEVR/9OwvKb7ZALTwSuPPsR+DyJRRQQuVvrb6u+r6EoqZBtRxGK
> P/T8iRJ2jai5b3PgTwg0hL2mLLE/Ag7VAmNSdmXSvtyXN8xlTDf2y9zZp9Ke4la/
> 6lI7Rt+8+zv1ud/QpwhozyubeOoc+O9NY4Pon2xRjBoFEXoFrNJC1HYpWm+oCKTG
> K7tKEpzdFuKQopdpK97bs0arPiVgz5qUhVPPQSSmV3h+4DyRNRA=
> =7n44
> -END PGP SIGNATURE-
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
>

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Tomcat Apache 7.0.79 upgrade to Latest version

2019-02-20 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

John,

On 2/20/19 09:11, John Dale wrote:
> I'm thinking about migrating to 8 soon myself.  Maybe I'll use this
> as an opportunity to get started on that .. but I think the last
> time I checked, OpenJDK 7 was supported on Wheezy, so I'm thinking
> I have more to do than just upgrade tomcat in my scenario.

Yes. Wheezy is essentially unsupported and I would drop everything and
upgrade to at least Jessie like right now if I were you. Stretch isn't
much more work and you'll be good for a few years on that.

Stretch has OpenJDK 8 packages. Current version is 1.8.0_181.

Jessie looks like it only has OpenJDK 7 packages. I didn't check the
backports.

> I'll need to update linux, Java, tomcat, then finally my apps.
> But I'm pretty CDO (that's like OCD, but alphabetical) about the
> platform independence of my apps, so that's going to be
> straightforward.
Make sure you don't waste time upgrading from Tomcat 7 to Tomcat 8. Go
directly to Tomcat 8.5, since 8.0 is no longer supported.

- -chris

> On 2/20/19, Nitin Kadam  wrote:
>> Thanks John  for reply..
>> 
>> is there any documentation walkthrough for this upgrade
>> available? i am new to Tomcat and doing this 1st time, It will be
>> great help if anyone provide same.
>> 
>> On Wed, Feb 20, 2019 at 6:49 PM Olaf Kock 
>> wrote:
>> 
>>> 
>>> On 20.02.19 13:57, Nitin Kadam wrote:
 Hello Team,
 
 Can you please guide how we can migrate seamlessly from
 Tomcat apache 7.0.79 to 7.0.92 or any latest version that 8.x
 or 9.x ( Windows 2012 R2 server)escr
>>> 
>>> 7.0 to 8.0: https://tomcat.apache.org/migration-8.html
>>> 
>>> 8.0 to 8.5: https://tomcat.apache.org/migration-85.html
>>> 
>>> 8.x to 9.0: https://tomcat.apache.org/migration-9.html
>>> 
 the current environment is configured with SSL certificate (
 SSL 443)
>>> .jks
 store and needs to upgrade same due to security vulnerability
 detected by Qualys scanner.
>>> 
>>> The documents have TLS documentation chapters. If you run into
>>> specific problems, describe them here.
>>> 
>>> Olaf
>>> 
>>> 
>>> 
- -
>>>
>>> 
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>>> For additional commands, e-mail: users-h...@tomcat.apache.org
>>> 
>>> 
>> 
>> -- Regards Nitin Kadam (9967688959)
>> 
> 
> -
>
> 
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
> 
-BEGIN PGP SIGNATURE-
Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/
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=7n44
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Tomcat Apache 7.0.79 upgrade to Latest version

2019-02-20 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

John, Nitin,

On 2/20/19 09:47, John Dale wrote:
> I would recommend verifying your upgrade process on a
> non-production machine first in a way that you can restore if you
> need to start over (sometimes in the heat of battle we can lose
> context and it's good to start fresh).  What version(s) of Java are
> installed?
> 
> The differences in SSL configuration can be found in the
> documentation for the respective version(s) of Tomcat you choose.
> 
> Are you doing DB connection pooling?  Is that configuration in a 
> context file, or are you doing that in the server.xml?
> 
> Correct me if I'm wrong here, but I think it would be safer to
> have two tomcat folders, one for 7 and one for 8/9.

Even better, use a split-configuration where CATALINA_HOME contains
your Tomcat installation and CATALINA_BASE contains your configuration
and web applications. It makes upgrading between point-releases *trivial
*.

Moving between major releases will absolutely require that you
re-write your conf/server.xml, but mostly everything else can stay the
same.

Hope that helps,
- -chris
-BEGIN PGP SIGNATURE-
Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/
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=PMpf
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Logging web applications with log4j 1.2

2019-02-20 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Thomas,

On 2/20/19 08:00, Thomas Rohde wrote:
> I've some basic questions regarding the usage of log4j 1.2 in
> Tomcat 8.5.
> 
> We are running more than one web application in Tomcat. Each
> application uses log4j via slf4j and ships the log4j.jar in
> WEB-INF/lib. The Tomcat itself uses JULI.
> 
> We are using a common log4j.xml file for configuration.
> 
> The file path is set as system property in CATALINA_OPTS as
> follows: -Dlog4j.configuration=/path/to/file/log4j.xml
> 
> 1. Is this a valid setup or are there any side effects in
> initialization log4j by the different WebAppClassLoaders?

You are not using classpath-based config-file-loading, so it should
not be a problem[*].

> 2. We are observing weird things in rolling the files hourly. The
> timestamp of the log messages doesn't fit to the timestamp suffix
> of the file. Why does this happen?

Possibly conflicting time zones, somewhere? Because log4j.jar is in
each application's class loader, they CAN have different in-memory
configurations.

[*] While this will work, why would you ever want multiple
applications to have their logging configuration all tied together?
Why not separate the logging configuration into one config-per web
application? OR are you trying to unify all logging into the same file(s
)?

- -chris
-BEGIN PGP SIGNATURE-
Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/

iQIzBAEBCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAlxtdSUACgkQHPApP6U8
pFhxow//T+5ALVYJcljqLxykHND7ZSy9NHf0+a+jnWzlDO5S6oO+bxjso9raJZYC
jUG4nhBwuAtD5MWyS04t0UedYUBP+n1iw4aAGs7PrhFgPxLiHZpMOTBBaeDSYgny
bI+7GuqOhkiauPA8Jb6guE8SkrT18d9X+k7xzy6puYgqbTws0iwk2yEmSV+KNtXy
0EsVC20KGhU9pCdD7MLSpYX8PaM8sctazxSSVMygL9Ed03WKkJ6BRPavq4ao1uGg
V0ZlTQb7f9PRPOXOQzoAlsaWNTCVRKQES82/HHJE/uJG5tg7jnQ5Syjs53FyfVwH
0AtfNpJiOI4LES5ejR7E5JZ8Lx0/J41XwsPO5hOmYaiHHs35EFtozCETNNwjYxcb
245z++YsBw0bnBDRpAFi5Kq5UL8ludo0CqDTfKQSIqrMoNHoiULm4U3niGl2P01w
O8k2KrwqtYWu77esh+TpJpXTTaLnEhCc+YWFGWnER3w8WAOHitvjbmAi21gL3NIG
3PJEFEdrNMaoI2h3SkK+DJzuVVJRmXRMV2wduX4+3qGW6l31Jo3ihFiDDdXyGB+b
jtpU1JHYfYP+ck8mEXgOvI6RXZEG7R8Ef7ectYuKdhRRpE+S9wx1llZminsxY/fr
0apA+L6paBo9R7EGxJVt237wx/L+tRnfF5raLZoAJrkks7SkWgE=
=sjai
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Tomcat Apache 7.0.79 upgrade to Latest version

2019-02-20 Thread Olaf Kock
Hi Nitin,

John gave you a good primer, for almost all of the rest I'll point to
the fine documentation again. Look at a diff between your current
installation and the plain vanilla download of the tomcat version that
you're running.

What I want to comment on is this:

On 20.02.19 15:33, Nitin Kadam wrote:
> I need to know below details.
> 1 How to take a backup before the upgrade (Main files).

My standard recommendation to this is: Do not specifically back up your
production system, do not plan to "maybe" go back. Rather *take your
existing backup* and *restore* it to a new system. Perform a disaster
recovery, as if your production server failed hard and you can't recover
the data. This will make sure that you have a proper system running
until you switch over to the new system.

This way of working has the nice benefit that you'll prove that your
backup is worth its name. If you don't have a backup: You know what to do.

If you follow this advice, you don't need a specific backup before the
migration.

Of course, you'll need to make sure that the applications that you're
running on the new and restored server use their backend storage
properly - but as we don't have a clue what applications you're running
(and the tomcat list is a bad place to get support for random
applications anyway), this exercise is left for you.


In conclusion: Make sure that your existing backup is worth its name.
Then think further. Operate on a restored server, 100% separate of the
production server that continues to run.

And inspect your installation's diff, read the fine documentation

Olaf



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Tomcat Apache 7.0.79 upgrade to Latest version

2019-02-20 Thread John Dale
I would recommend verifying your upgrade process on a non-production
machine first in a way that you can restore if you need to start over
(sometimes in the heat of battle we can lose context and it's good to
start fresh).  What version(s) of Java are installed?

The differences in SSL configuration can be found in the documentation
for the respective version(s) of Tomcat you choose.

Are you doing DB connection pooling?  Is that configuration in a
context file, or are you doing that in the server.xml?

Correct me if I'm wrong here, but I think it would be safer to have
two tomcat folders, one for 7 and one for 8/9.

You are doing this on a dev/qa machine, right?

On 2/20/19, Nitin Kadam  wrote:
> Hello Olaf,
>
> There are no such changes in original configuration except server.xml for
> SSL and web config for Http header filter,
> and yes application team deploying WAR to we app folders.
>
> I need to know below details.
> 1 How to take a backup before the upgrade (Main files).
> 2. How to migrate from one version to another version without
> losing applications configuration and data.
> 3. SSL configuration.
> 4. Do I need to uninstall the current version and then upgrade directly
> with the latest version?
>
>
>
> Regards
> Nitin
>
>
> On Wed, Feb 20, 2019 at 7:28 PM Olaf Kock  wrote:
>
>>
>> On 20.02.19 14:47, Nitin Kadam wrote:
>> > Thanks John  for reply..
>> >
>> > is there any documentation walkthrough for this upgrade available?
>> > i am new to Tomcat and e to doing this 1st time, It will be great help
>> if anyone
>> > provide same.
>>
>> There's plenty of documentation on https://tomcat.apache.com - start
>> there and come back here if you don't understand the documentation with
>> specific questions. We don't know what's configured in your system, thus
>> can't provide a solution tailored for you.
>>
>> As John said in a different branch of this thread, upgrading is
>> typically easy. The less changes you've made to the default
>> configuration, the easier the migration will be.
>>
>> Start with the documents I've linked earlier, If you don't understand
>> parts of it, try to find that section in the regular documentation. If
>> you still have problems understanding, ask the questions here.
>>
>> For a "walkthrough" guide for your system, there are plenty of companies
>> available that provide consulting, as well as training to get you
>> started. But the documentation is actually quite good.
>>
>> Olaf
>>
>>
>>
>> -
>> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>> For additional commands, e-mail: users-h...@tomcat.apache.org
>>
>>
>
> --
> Regards
> Nitin Kadam
> (9967688959)
>

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Tomcat Apache 7.0.79 upgrade to Latest version

2019-02-20 Thread Nitin Kadam
Hello Olaf,

There are no such changes in original configuration except server.xml for
SSL and web config for Http header filter,
and yes application team deploying WAR to we app folders.

I need to know below details.
1 How to take a backup before the upgrade (Main files).
2. How to migrate from one version to another version without
losing applications configuration and data.
3. SSL configuration.
4. Do I need to uninstall the current version and then upgrade directly
with the latest version?



Regards
Nitin


On Wed, Feb 20, 2019 at 7:28 PM Olaf Kock  wrote:

>
> On 20.02.19 14:47, Nitin Kadam wrote:
> > Thanks John  for reply..
> >
> > is there any documentation walkthrough for this upgrade available?
> > i am new to Tomcat and e to doing this 1st time, It will be great help
> if anyone
> > provide same.
>
> There's plenty of documentation on https://tomcat.apache.com - start
> there and come back here if you don't understand the documentation with
> specific questions. We don't know what's configured in your system, thus
> can't provide a solution tailored for you.
>
> As John said in a different branch of this thread, upgrading is
> typically easy. The less changes you've made to the default
> configuration, the easier the migration will be.
>
> Start with the documents I've linked earlier, If you don't understand
> parts of it, try to find that section in the regular documentation. If
> you still have problems understanding, ask the questions here.
>
> For a "walkthrough" guide for your system, there are plenty of companies
> available that provide consulting, as well as training to get you
> started. But the documentation is actually quite good.
>
> Olaf
>
>
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
>

-- 
Regards
Nitin Kadam
(9967688959)


Re: Tomcat Apache 7.0.79 upgrade to Latest version

2019-02-20 Thread John Dale
Welcome to the Tomcat community!  :D

I've been using Tomcat since .. I think .. around 2000-ish.  I've
always thought that I could solve any problem in IS using Tomcat, and
through the years I've found that to be true.  It's an amazing and
simple tool that many have tried to improve upon.  It's tough. :)

So, for a migration .. maybe some general rules of thumb to get you started.

Are you deploying a war file?  Is the war file assembled using ant or
some other tool?  Are you using a database connection pool?  As Olaf
indicated, it would be interesting to know how much the default
configuration has changed.  Tell us as much as you can about your
application and we'll be glad to help.

Are you deploying your application into the webapps folder, or are you
pointing Tomcat to another location with an expanded directory (tomcat
can deploy from a war file, which is basically a zipped archive of
your application, or you can just point it to a folder on your file
system and it'll deploy that .. pretty slick).

server.xml is the key, I think, to the migration.  Take a peek at the
documentation (connection pooling, connectors, and other syntax may
have changed).

I'm thinking about migrating to 8 soon myself.  Maybe I'll use this as
an opportunity to get started on that .. but I think the last time I
checked, OpenJDK 7 was supported on Wheezy, so I'm thinking I have
more to do than just upgrade tomcat in my scenario.  I'll need to
update linux, Java, tomcat, then finally my apps.  But I'm pretty CDO
(that's like OCD, but alphabetical) about the platform independence of
my apps, so that's going to be straightforward.

So, take a peek at the docs and start asking questions and tell us the
story of your application as much as you feel comfortable.

Good luck and again .. welcome!

John


On 2/20/19, Nitin Kadam  wrote:
> Thanks John  for reply..
>
> is there any documentation walkthrough for this upgrade available?
> i am new to Tomcat and doing this 1st time, It will be great help if anyone
> provide same.
>
> On Wed, Feb 20, 2019 at 6:49 PM Olaf Kock  wrote:
>
>>
>> On 20.02.19 13:57, Nitin Kadam wrote:
>> > Hello Team,
>> >
>> > Can you please guide how we can migrate seamlessly from Tomcat
>> > apache 7.0.79 to 7.0.92 or any latest version that 8.x or 9.x ( Windows
>> > 2012 R2 server)escr
>>
>> 7.0 to 8.0: https://tomcat.apache.org/migration-8.html
>>
>> 8.0 to 8.5: https://tomcat.apache.org/migration-85.html
>>
>> 8.x to 9.0: https://tomcat.apache.org/migration-9.html
>>
>> > the current environment is configured with SSL certificate ( SSL 443)
>> .jks
>> > store and needs to upgrade same due to security vulnerability detected
>> > by
>> > Qualys scanner.
>>
>> The documents have TLS documentation chapters. If you run into specific
>> problems, describe them here.
>>
>> Olaf
>>
>>
>> -
>> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>> For additional commands, e-mail: users-h...@tomcat.apache.org
>>
>>
>
> --
> Regards
> Nitin Kadam
> (9967688959)
>

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Tomcat Apache 7.0.79 upgrade to Latest version

2019-02-20 Thread Olaf Kock


On 20.02.19 14:47, Nitin Kadam wrote:
> Thanks John  for reply..
>
> is there any documentation walkthrough for this upgrade available?
> i am new to Tomcat and e to doing this 1st time, It will be great help if 
> anyone
> provide same.

There's plenty of documentation on https://tomcat.apache.com - start
there and come back here if you don't understand the documentation with
specific questions. We don't know what's configured in your system, thus
can't provide a solution tailored for you.

As John said in a different branch of this thread, upgrading is
typically easy. The less changes you've made to the default
configuration, the easier the migration will be.

Start with the documents I've linked earlier, If you don't understand
parts of it, try to find that section in the regular documentation. If
you still have problems understanding, ask the questions here.

For a "walkthrough" guide for your system, there are plenty of companies
available that provide consulting, as well as training to get you
started. But the documentation is actually quite good.

Olaf



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Tomcat-8.5.37 doesn't respect mime-mapping for css files

2019-02-20 Thread Jean-Pierre Urkens
I upgraded my Tomcat-8.5.30 deployment to 8.5.37 and I am noticing problems
with the way css-files are served by Tomcat.
HTML pages look like:






https://hostname/context/myCSS.css;>

unimportant



When I check the network trace of the browser while downloading this page
it shows 'Content-Type:text/html;charset=UTF-8;' in the response header
both for the page itself but also for the resource "
https://hostname/context/myCSS.css;
although the mime-mapping for css-files is set to 'text/css' in the default
web.xml. This causes the page to be rendered incorrectly by the browser.

Is this a BUG in Tomcat-8.5.37? If so it doesn't yet seem to be listed on
the buglist of Tomcat8. If not how do I force the mime-type 'text/css' for
css files?


Re: Tomcat Apache 7.0.79 upgrade to Latest version

2019-02-20 Thread Nitin Kadam
Thanks John  for reply..

is there any documentation walkthrough for this upgrade available?
i am new to Tomcat and doing this 1st time, It will be great help if anyone
provide same.

On Wed, Feb 20, 2019 at 6:49 PM Olaf Kock  wrote:

>
> On 20.02.19 13:57, Nitin Kadam wrote:
> > Hello Team,
> >
> > Can you please guide how we can migrate seamlessly from Tomcat
> > apache 7.0.79 to 7.0.92 or any latest version that 8.x or 9.x ( Windows
> > 2012 R2 server)escr
>
> 7.0 to 8.0: https://tomcat.apache.org/migration-8.html
>
> 8.0 to 8.5: https://tomcat.apache.org/migration-85.html
>
> 8.x to 9.0: https://tomcat.apache.org/migration-9.html
>
> > the current environment is configured with SSL certificate ( SSL 443)
> .jks
> > store and needs to upgrade same due to security vulnerability detected by
> > Qualys scanner.
>
> The documents have TLS documentation chapters. If you run into specific
> problems, describe them here.
>
> Olaf
>
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
>

-- 
Regards
Nitin Kadam
(9967688959)


Re: Logging web applications with log4j 1.2

2019-02-20 Thread John Dale
I'm using 7.x still .. I put my log4j file in the classes folder of my web app.

On 2/20/19, Thomas Rohde  wrote:
> Hi!
>
> I've some basic questions regarding the usage of log4j 1.2 in Tomcat 8.5.
>
> We are running more than one web application in Tomcat. Each application
> uses log4j via slf4j and ships the log4j.jar in WEB-INF/lib. The Tomcat
> itself uses JULI.
>
> We are using a common log4j.xml file for configuration.
>
> The file path is set as system property in CATALINA_OPTS as follows:
> -Dlog4j.configuration=/path/to/file/log4j.xml
>
> 1. Is this a valid setup or are there any side effects in initialization
> log4j by the different WebAppClassLoaders?
>
> 2. We are observing weird things in rolling the files hourly. The timestamp
> of the log messages doesn't fit to the timestamp suffix of the file. Why
> does this happen?
>
> Regards,
> Thomas
>
>
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
>

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Tomcat Apache 7.0.79 upgrade to Latest version

2019-02-20 Thread John Dale
I have always found migrating forward is fairly simple.  That said, it
depends  lot no what you're doing in your code.  I have not yet
migrated to 8, but if I had to venture a guess, deployment metadata
syntax of the server.xml may have changed.  Check out this guide and
let us know what we can do to help through some of the details.

https://tomcat.apache.org/migration-8.html

On 2/20/19, Nitin Kadam  wrote:
> Hello Team,
>
> Can you please guide how we can migrate seamlessly from Tomcat
> apache 7.0.79 to 7.0.92 or any latest version that 8.x or 9.x ( Windows
> 2012 R2 server)
>
> the current environment is configured with SSL certificate ( SSL 443) .jks
> store and needs to upgrade same due to security vulnerability detected by
> Qualys scanner.
>
> --
> Regards
> Nitin Kadam
>

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Tomcat Apache 7.0.79 upgrade to Latest version

2019-02-20 Thread Olaf Kock


On 20.02.19 13:57, Nitin Kadam wrote:
> Hello Team,
>
> Can you please guide how we can migrate seamlessly from Tomcat
> apache 7.0.79 to 7.0.92 or any latest version that 8.x or 9.x ( Windows
> 2012 R2 server)escr

7.0 to 8.0: https://tomcat.apache.org/migration-8.html

8.0 to 8.5: https://tomcat.apache.org/migration-85.html

8.x to 9.0: https://tomcat.apache.org/migration-9.html

> the current environment is configured with SSL certificate ( SSL 443) .jks
> store and needs to upgrade same due to security vulnerability detected by
> Qualys scanner.

The documents have TLS documentation chapters. If you run into specific
problems, describe them here.

Olaf


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Logging web applications with log4j 1.2

2019-02-20 Thread Thomas Rohde
Hi!

I've some basic questions regarding the usage of log4j 1.2 in Tomcat 8.5.

We are running more than one web application in Tomcat. Each application uses 
log4j via slf4j and ships the log4j.jar in WEB-INF/lib. The Tomcat itself uses 
JULI.

We are using a common log4j.xml file for configuration.

The file path is set as system property in CATALINA_OPTS as follows:
-Dlog4j.configuration=/path/to/file/log4j.xml

1. Is this a valid setup or are there any side effects in initialization log4j 
by the different WebAppClassLoaders?

2. We are observing weird things in rolling the files hourly. The timestamp of 
the log messages doesn't fit to the timestamp suffix of the file. Why does this 
happen?

Regards,
Thomas



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Tomcat Apache 7.0.79 upgrade to Latest version

2019-02-20 Thread Nitin Kadam
Hello Team,

Can you please guide how we can migrate seamlessly from Tomcat
apache 7.0.79 to 7.0.92 or any latest version that 8.x or 9.x ( Windows
2012 R2 server)

the current environment is configured with SSL certificate ( SSL 443) .jks
store and needs to upgrade same due to security vulnerability detected by
Qualys scanner.

-- 
Regards
Nitin Kadam