Re: [OT] Tomcat Apache 7.0.79 upgrade to Latest version

2019-03-07 Thread Nitin Kadam
Hello Mark,

Thanks for your suggestion  it's work like charm.


On Thu, Mar 7, 2019, 6:13 PM Mark Thomas  wrote:

> On 07/03/2019 11:24, Nitin Kadam wrote:
>
> 
>
> > Root Causejava.lang.TypeNotPresentException:
> > Type javax.persistence.PersistenceUnit not present
>
> 
>
> It looks like you are missing the JPA implementation. Check for
> additional JARs that were added to your Tomcat 7 lib directory that you
> didn't add in Tomcat 8.
>
> A better solution would be to package all the JARs the app depends on in
> the WAR file.
>
> Mark
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
>


Re: [OT] Tomcat Apache 7.0.79 upgrade to Latest version

2019-03-07 Thread Mark Thomas
On 07/03/2019 11:24, Nitin Kadam wrote:



> Root Causejava.lang.TypeNotPresentException:
> Type javax.persistence.PersistenceUnit not present



It looks like you are missing the JPA implementation. Check for
additional JARs that were added to your Tomcat 7 lib directory that you
didn't add in Tomcat 8.

A better solution would be to package all the JARs the app depends on in
the WAR file.

Mark

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: [OT] Tomcat Apache 7.0.79 upgrade to Latest version

2019-03-07 Thread Nitin Kadam
We upgraded to tomcat 8.5.38 but facing below issue for couple of apps

We developed REST API using Jersey and deployed a WAR file of the same on
Tomcat7 (Exact Version)

It works fine.



We upgraded the Tomcat to the version 8.5.38 and redeployed the WAR file to
this version. We are getting errors while making the REST Calls to the API


In Developer Console we are getting attached error when the API is getting
hit from the Web application.



Below are the logs we get when hitting the API using postman



HTTP Status 500 – Internal
Server Errorh1
{font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;font-size:22px;}
h2
{font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;font-size:16px;}
h3
{font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;font-size:14px;}
body
{font-family:Tahoma,Arial,sans-serif;color:black;background-color:white;} b
{font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;}
p
{font-family:Tahoma,Arial,sans-serif;background:white;color:black;font-size:12px;}
a {color:black;} a.name {color:black;} .line
{height:1px;background-color:#525D76;border:none;}HTTP
Status 500 – Internal Server ErrorType
Exception ReportMessage Servlet.init() for servlet
[GMService] threw exceptionDescription The server encountered
an unexpected condition that prevented it from fulfilling the
request.Exceptionjavax.servlet.ServletException:
Servlet.init() for servlet [GMService] threw exception


org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:493)


org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:81)


org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:650)


org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:342)


org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:800)


org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:66)


org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:806)


org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1498)


org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)

java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown
Source)

java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown
Source)


org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)

java.lang.Thread.run(Unknown Source)

Root Causejava.lang.TypeNotPresentException: Type
javax.persistence.PersistenceUnit not present


sun.reflect.generics.factory.CoreReflectionFactory.makeNamedType(Unknown
Source)


sun.reflect.generics.visitor.Reifier.visitClassTypeSignature(Unknown Source)

sun.reflect.generics.tree.ClassTypeSignature.accept(Unknown
Source)


sun.reflect.generics.visitor.Reifier.reifyTypeArguments(Unknown Source)


sun.reflect.generics.visitor.Reifier.visitClassTypeSignature(Unknown Source)

sun.reflect.generics.tree.ClassTypeSignature.accept(Unknown
Source)


sun.reflect.generics.repository.ClassRepository.getSuperInterfaces(Unknown
Source)

java.lang.Class.getGenericInterfaces(Unknown Source)


com.sun.jersey.core.spi.factory.InjectableProviderFactory.getMetaArguments(InjectableProviderFactory.java:122)


com.sun.jersey.core.spi.factory.InjectableProviderFactory.add(InjectableProviderFactory.java:85)


com.sun.jersey.core.spi.factory.InjectableProviderFactory$1.onAdd(InjectableProviderFactory.java:101)


com.sun.jersey.core.spi.factory.InjectableProviderFactory$1.onAdd(InjectableProviderFactory.java:100)


com.sun.jersey.core.spi.component.ProviderServices.getProvidersAndServices(ProviderServices.java:135)


com.sun.jersey.core.spi.factory.InjectableProviderFactory.configure(InjectableProviderFactory.java:98)


com.sun.jersey.server.impl.application.WebApplicationImpl.initiate(WebApplicationImpl.java:501)


com.sun.jersey.server.impl.application.WebApplicationImpl.initiate(WebApplicationImpl.java:383)


com.sun.jersey.spi.container.servlet.ServletContainer.initiate(ServletContainer.java:377)


com.sun.jersey.spi.container.servlet.ServletContainer$InternalWebComponent.initiate(ServletContainer.java:242)


com.sun.jersey.spi.container.servlet.WebComponent.load(WebComponent.java:449)


com.sun.jersey.spi.container.servlet.WebComponent.init(WebComponent.java:169)


com.sun.jersey.spi.container.servlet.ServletContainer.init(ServletContainer.java:281)


com.sun.jersey.spi.container.servlet.ServletContainer.init(ServletContainer.java:442)

javax.servlet.GenericServlet.init(GenericServlet.java:158)


org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:493)


org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:81)


org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:650)



Re: [OT] Tomcat Apache 7.0.79 upgrade to Latest version

2019-02-22 Thread John Dale
Your call.  Not sure on the video .. your applications and particular
configuration will have bearing on the accuracy of the video.  The
ability to revert if it doesn't work will be key.  Don't be afraid to
take a deep breath and review the migration guides carefully.

I'll try to check some email Saturday morning in case there is
something specific I can help out with.

Good luck and again .. welcome to Tomcat,

John


On 2/21/19, Nitin Kadam  wrote:
> Hello ,
>
> Thanks for the reply.
> Yes having the plan to remediate same on weekend, ALready informed them
> about Challenges of upgrading and impact of any failure.
>
> Current vulnerability CVE detected in 7.0.79 is showing is taken care in
> 7.0.91 tomcat version  So thinking of upgrading to the same family
> version, Which I am thinking will be easier than upgrading to the latest
> version.
>
> Found below Link from Youtube and will be performing same, Please let know
> your thoughts on same.
>
> https://www.youtube.com/watch?v=Jvum4TsTnAQ
>
>
>
>
>
> On Thu, Feb 21, 2019 at 6:30 PM John Dale  wrote:
>
>> Are you going to try to do this on Friday night?  You might forward
>> some of our comments to your security team if they want you to change
>> a tire on a moving vehicle .. it's possible, but not the best
>> practice.
>>
>> Does your security team have the ability to allocate some more
>> computing resources to your project?
>>
>> On 2/21/19, Nitin Kadam  wrote:
>> > FOr backup - I will be taking Snapshot backup before doing the upgrade
>> but
>> > also going to take folder backup from C: programme Files /Apache Tomcat
>> > folder.
>> >
>> > I am continuously  getting emails from the internal security team for
>> > upgrading the version 7.0.79 to the latest version
>> > need to figure out this ASAP
>> >
>> > Apps are hosted in Web apps folders and there are few D3 apps
>> > which connected with SQL for database
>> >
>> >
>> >
>> >
>> > On Wed, Feb 20, 2019 at 9:45 PM John Dale  wrote:
>> >
>> >> Without all of those early adopters to take the flack, we'd never know
>> >> where the enemy bases are .. or something like that. ;)
>> >>
>> >> I'm just very glad we have OpenJDK and that my code is very simple.
>> >>
>> >> Java 12 .. Uff da!
>> >>
>> >>
>> >>
>> >> On 2/20/19, Christopher Schultz  wrote:
>> >> > -BEGIN PGP SIGNED MESSAGE-
>> >> > Hash: SHA256
>> >> >
>> >> > John,
>> >> >
>> >> > On 2/20/19 10:58, John Dale wrote:
>> >> >> Points taken .. I have a great deal from my cloud provider on a
>> >> >> wheezy instance, so I have to see if I can negotiate to keep my
>> >> >> rate. I do a lot of custom MVC and security checks so things are
>> >> >> nice and tight and I haven't been hacked even though I get several
>> >> >> thousand attempts a day mostly from China and Iran.  I'm also
>> >> >> kicking around whether to use James or keep using postfix for
>> >> >> email.  With an upgrade to Java 8 I can use the latest james
>> >> >> release so I'll look into that.
>> >> >>
>> >> >> I've been struggling to find a nice block of time for a full
>> >> >> regression test.  It's funny .. I was working for a bank a couple
>> >> >> of years back that was still on Java 1.6 and that's the way they
>> >> >> liked it. :)
>> >> >>
>> >> >> Did you see the road map for Java 10?  Seems like we're moving a
>> >> >> little too fast sometimes ..
>> >> >
>> >> > Java 10's dead, baby.
>> >> >
>> >> > Java 11 will be a long-term-service release. Java 12 is already
>> >> > available for pre-release.
>> >> >
>> >> > The biggest step is from 8 -> 9/10/11. Once you are over that, it
>> >> > will
>> >> > be much better for everyone.
>> >> >
>> >> > I don't want to have to wait 10 years to get new stuff like TLS 1.3
>> >> > support or the forthcoming HTTP/3, so I'm happy with the shorter
>> >> > development cycles Oracle has switched-over to.
>> >> >
>> >> > - -chris
>> >> >
>> >> >> On 2/20/19, Christopher Schultz 
>> >> >> wrote: John,
>> >> >>
>> >> >> On 2/20/19 09:11, John Dale wrote:
>> >> > I'm thinking about migrating to 8 soon myself.  Maybe I'll
>> >> > use this as an opportunity to get started on that .. but I
>> >> > think the last time I checked, OpenJDK 7 was supported on
>> >> > Wheezy, so I'm thinking I have more to do than just upgrade
>> >> > tomcat in my scenario.
>> >> >>
>> >> >> Yes. Wheezy is essentially unsupported and I would drop everything
>> >> >> and upgrade to at least Jessie like right now if I were you.
>> >> >> Stretch isn't much more work and you'll be good for a few years on
>> >> >> that.
>> >> >>
>> >> >> Stretch has OpenJDK 8 packages. Current version is 1.8.0_181.
>> >> >>
>> >> >> Jessie looks like it only has OpenJDK 7 packages. I didn't check
>> >> >> the backports.
>> >> >>
>> >> > I'll need to update linux, Java, tomcat, then finally my
>> >> > apps. But I'm pretty CDO (that's like OCD, but alphabetical)
>> >> > about the platform independence of my apps, so that's going
>> >> > to be 

Re: [OT] Tomcat Apache 7.0.79 upgrade to Latest version

2019-02-21 Thread Nitin Kadam
Hello ,

Thanks for the reply.
Yes having the plan to remediate same on weekend, ALready informed them
about Challenges of upgrading and impact of any failure.

Current vulnerability CVE detected in 7.0.79 is showing is taken care in
7.0.91 tomcat version  So thinking of upgrading to the same family
version, Which I am thinking will be easier than upgrading to the latest
version.

Found below Link from Youtube and will be performing same, Please let know
your thoughts on same.

https://www.youtube.com/watch?v=Jvum4TsTnAQ





On Thu, Feb 21, 2019 at 6:30 PM John Dale  wrote:

> Are you going to try to do this on Friday night?  You might forward
> some of our comments to your security team if they want you to change
> a tire on a moving vehicle .. it's possible, but not the best
> practice.
>
> Does your security team have the ability to allocate some more
> computing resources to your project?
>
> On 2/21/19, Nitin Kadam  wrote:
> > FOr backup - I will be taking Snapshot backup before doing the upgrade
> but
> > also going to take folder backup from C: programme Files /Apache Tomcat
> > folder.
> >
> > I am continuously  getting emails from the internal security team for
> > upgrading the version 7.0.79 to the latest version
> > need to figure out this ASAP
> >
> > Apps are hosted in Web apps folders and there are few D3 apps
> > which connected with SQL for database
> >
> >
> >
> >
> > On Wed, Feb 20, 2019 at 9:45 PM John Dale  wrote:
> >
> >> Without all of those early adopters to take the flack, we'd never know
> >> where the enemy bases are .. or something like that. ;)
> >>
> >> I'm just very glad we have OpenJDK and that my code is very simple.
> >>
> >> Java 12 .. Uff da!
> >>
> >>
> >>
> >> On 2/20/19, Christopher Schultz  wrote:
> >> > -BEGIN PGP SIGNED MESSAGE-
> >> > Hash: SHA256
> >> >
> >> > John,
> >> >
> >> > On 2/20/19 10:58, John Dale wrote:
> >> >> Points taken .. I have a great deal from my cloud provider on a
> >> >> wheezy instance, so I have to see if I can negotiate to keep my
> >> >> rate. I do a lot of custom MVC and security checks so things are
> >> >> nice and tight and I haven't been hacked even though I get several
> >> >> thousand attempts a day mostly from China and Iran.  I'm also
> >> >> kicking around whether to use James or keep using postfix for
> >> >> email.  With an upgrade to Java 8 I can use the latest james
> >> >> release so I'll look into that.
> >> >>
> >> >> I've been struggling to find a nice block of time for a full
> >> >> regression test.  It's funny .. I was working for a bank a couple
> >> >> of years back that was still on Java 1.6 and that's the way they
> >> >> liked it. :)
> >> >>
> >> >> Did you see the road map for Java 10?  Seems like we're moving a
> >> >> little too fast sometimes ..
> >> >
> >> > Java 10's dead, baby.
> >> >
> >> > Java 11 will be a long-term-service release. Java 12 is already
> >> > available for pre-release.
> >> >
> >> > The biggest step is from 8 -> 9/10/11. Once you are over that, it will
> >> > be much better for everyone.
> >> >
> >> > I don't want to have to wait 10 years to get new stuff like TLS 1.3
> >> > support or the forthcoming HTTP/3, so I'm happy with the shorter
> >> > development cycles Oracle has switched-over to.
> >> >
> >> > - -chris
> >> >
> >> >> On 2/20/19, Christopher Schultz 
> >> >> wrote: John,
> >> >>
> >> >> On 2/20/19 09:11, John Dale wrote:
> >> > I'm thinking about migrating to 8 soon myself.  Maybe I'll
> >> > use this as an opportunity to get started on that .. but I
> >> > think the last time I checked, OpenJDK 7 was supported on
> >> > Wheezy, so I'm thinking I have more to do than just upgrade
> >> > tomcat in my scenario.
> >> >>
> >> >> Yes. Wheezy is essentially unsupported and I would drop everything
> >> >> and upgrade to at least Jessie like right now if I were you.
> >> >> Stretch isn't much more work and you'll be good for a few years on
> >> >> that.
> >> >>
> >> >> Stretch has OpenJDK 8 packages. Current version is 1.8.0_181.
> >> >>
> >> >> Jessie looks like it only has OpenJDK 7 packages. I didn't check
> >> >> the backports.
> >> >>
> >> > I'll need to update linux, Java, tomcat, then finally my
> >> > apps. But I'm pretty CDO (that's like OCD, but alphabetical)
> >> > about the platform independence of my apps, so that's going
> >> > to be straightforward.
> >> >> Make sure you don't waste time upgrading from Tomcat 7 to Tomcat 8.
> >> >> Go directly to Tomcat 8.5, since 8.0 is no longer supported.
> >> >>
> >> >> -chris
> >> >>
> >> > On 2/20/19, Nitin Kadam  wrote:
> >> >> Thanks John  for reply..
> >> >>
> >> >> is there any documentation walkthrough for this upgrade
> >> >> available? i am new to Tomcat and doing this 1st time, It
> >> >> will be great help if anyone provide same.
> >> >>
> >> >> On Wed, Feb 20, 2019 at 6:49 PM Olaf Kock
> >> >>  wrote:
> >> >>
> >> >>>
> >> >>> 

Re: [OT] Tomcat Apache 7.0.79 upgrade to Latest version

2019-02-21 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Nitin,

On 2/21/19 07:47, Nitin Kadam wrote:
> FOr backup - I will be taking Snapshot backup before doing the
> upgrade but also going to take folder backup from C: programme
> Files /Apache Tomcat folder.
> 
> I am continuously  getting emails from the internal security team
> for upgrading the version 7.0.79 to the latest version need to
> figure out this ASAP

Upgrading from 7.0.79 to 7.0.92 should not be too risky.

Upgrading from 7.0.79 (or 7.0.92) up to 8.5.x will absolutely require
you to test it in another environment before upgrading. There are a
few small things that changed which may significantly affect you. I'm
specifically thinking about the stricter Cookie-parsing that was
introduced in Tomcat 8.5 which may break some of your application's
cookies. (Specifically, ones that are not properly-quoted and/or use
non-ASCII names and values).

If you have Cookie-related problems, my recommendation is that you
modify your application to encode cookie values in a way that
guarantees ASCII-only values. Options include base32/64 encoding, etc.

> Apps are hosted in Web apps folders and there are few D3 apps which
> connected with SQL for database

This should be no problem.

For your 7.0.x -> 8.5.x upgrade, I highly recommend that you start
using split CATALINA_HOME and CATALINA_BASE directories. It makes
"trying" a new version of Tomcat much less painful.

Hope that helps,
- -chris

> On Wed, Feb 20, 2019 at 9:45 PM John Dale 
> wrote:
> 
>> Without all of those early adopters to take the flack, we'd never
>> know where the enemy bases are .. or something like that. ;)
>> 
>> I'm just very glad we have OpenJDK and that my code is very
>> simple.
>> 
>> Java 12 .. Uff da!
>> 
>> 
>> 
>> On 2/20/19, Christopher Schultz 
>> wrote:
> John,
> 
> On 2/20/19 10:58, John Dale wrote:
> Points taken .. I have a great deal from my cloud provider
> on a wheezy instance, so I have to see if I can negotiate
> to keep my rate. I do a lot of custom MVC and security
> checks so things are nice and tight and I haven't been
> hacked even though I get several thousand attempts a day
> mostly from China and Iran.  I'm also kicking around
> whether to use James or keep using postfix for email.  With
> an upgrade to Java 8 I can use the latest james release so
> I'll look into that.
> 
> I've been struggling to find a nice block of time for a
> full regression test.  It's funny .. I was working for a
> bank a couple of years back that was still on Java 1.6 and
> that's the way they liked it. :)
> 
> Did you see the road map for Java 10?  Seems like we're
> moving a little too fast sometimes ..
> 
> Java 10's dead, baby.
> 
> Java 11 will be a long-term-service release. Java 12 is already 
> available for pre-release.
> 
> The biggest step is from 8 -> 9/10/11. Once you are over that, it
> will be much better for everyone.
> 
> I don't want to have to wait 10 years to get new stuff like TLS
> 1.3 support or the forthcoming HTTP/3, so I'm happy with the
> shorter development cycles Oracle has switched-over to.
> 
> -chris
> 
> On 2/20/19, Christopher Schultz
>  wrote: John,
> 
> On 2/20/19 09:11, John Dale wrote:
 I'm thinking about migrating to 8 soon myself.  Maybe
 I'll use this as an opportunity to get started on
 that .. but I think the last time I checked, OpenJDK
 7 was supported on Wheezy, so I'm thinking I have
 more to do than just upgrade tomcat in my scenario.
> 
> Yes. Wheezy is essentially unsupported and I would drop
> everything and upgrade to at least Jessie like right now if
> I were you. Stretch isn't much more work and you'll be good
> for a few years on that.
> 
> Stretch has OpenJDK 8 packages. Current version is
> 1.8.0_181.
> 
> Jessie looks like it only has OpenJDK 7 packages. I didn't
> check the backports.
> 
 I'll need to update linux, Java, tomcat, then finally
 my apps. But I'm pretty CDO (that's like OCD, but
 alphabetical) about the platform independence of my
 apps, so that's going to be straightforward.
> Make sure you don't waste time upgrading from Tomcat 7 to
> Tomcat 8. Go directly to Tomcat 8.5, since 8.0 is no longer
> supported.
> 
> -chris
> 
 On 2/20/19, Nitin Kadam 
 wrote:
> Thanks John  for reply..
> 
> is there any documentation walkthrough for this
> upgrade available? i am new to Tomcat and doing
> this 1st time, It will be great help if anyone
> provide same.
> 
> On Wed, Feb 20, 2019 at 6:49 PM Olaf Kock 
>  wrote:
> 
>> 
>> On 20.02.19 13:57, Nitin Kadam wrote:
>>> Hello Team,
>>> 
>>> Can you please guide how we can migrate
>>> seamlessly from Tomcat apache 

Re: [OT] Tomcat Apache 7.0.79 upgrade to Latest version

2019-02-21 Thread John Dale
Are you going to try to do this on Friday night?  You might forward
some of our comments to your security team if they want you to change
a tire on a moving vehicle .. it's possible, but not the best
practice.

Does your security team have the ability to allocate some more
computing resources to your project?

On 2/21/19, Nitin Kadam  wrote:
> FOr backup - I will be taking Snapshot backup before doing the upgrade but
> also going to take folder backup from C: programme Files /Apache Tomcat
> folder.
>
> I am continuously  getting emails from the internal security team for
> upgrading the version 7.0.79 to the latest version
> need to figure out this ASAP
>
> Apps are hosted in Web apps folders and there are few D3 apps
> which connected with SQL for database
>
>
>
>
> On Wed, Feb 20, 2019 at 9:45 PM John Dale  wrote:
>
>> Without all of those early adopters to take the flack, we'd never know
>> where the enemy bases are .. or something like that. ;)
>>
>> I'm just very glad we have OpenJDK and that my code is very simple.
>>
>> Java 12 .. Uff da!
>>
>>
>>
>> On 2/20/19, Christopher Schultz  wrote:
>> > -BEGIN PGP SIGNED MESSAGE-
>> > Hash: SHA256
>> >
>> > John,
>> >
>> > On 2/20/19 10:58, John Dale wrote:
>> >> Points taken .. I have a great deal from my cloud provider on a
>> >> wheezy instance, so I have to see if I can negotiate to keep my
>> >> rate. I do a lot of custom MVC and security checks so things are
>> >> nice and tight and I haven't been hacked even though I get several
>> >> thousand attempts a day mostly from China and Iran.  I'm also
>> >> kicking around whether to use James or keep using postfix for
>> >> email.  With an upgrade to Java 8 I can use the latest james
>> >> release so I'll look into that.
>> >>
>> >> I've been struggling to find a nice block of time for a full
>> >> regression test.  It's funny .. I was working for a bank a couple
>> >> of years back that was still on Java 1.6 and that's the way they
>> >> liked it. :)
>> >>
>> >> Did you see the road map for Java 10?  Seems like we're moving a
>> >> little too fast sometimes ..
>> >
>> > Java 10's dead, baby.
>> >
>> > Java 11 will be a long-term-service release. Java 12 is already
>> > available for pre-release.
>> >
>> > The biggest step is from 8 -> 9/10/11. Once you are over that, it will
>> > be much better for everyone.
>> >
>> > I don't want to have to wait 10 years to get new stuff like TLS 1.3
>> > support or the forthcoming HTTP/3, so I'm happy with the shorter
>> > development cycles Oracle has switched-over to.
>> >
>> > - -chris
>> >
>> >> On 2/20/19, Christopher Schultz 
>> >> wrote: John,
>> >>
>> >> On 2/20/19 09:11, John Dale wrote:
>> > I'm thinking about migrating to 8 soon myself.  Maybe I'll
>> > use this as an opportunity to get started on that .. but I
>> > think the last time I checked, OpenJDK 7 was supported on
>> > Wheezy, so I'm thinking I have more to do than just upgrade
>> > tomcat in my scenario.
>> >>
>> >> Yes. Wheezy is essentially unsupported and I would drop everything
>> >> and upgrade to at least Jessie like right now if I were you.
>> >> Stretch isn't much more work and you'll be good for a few years on
>> >> that.
>> >>
>> >> Stretch has OpenJDK 8 packages. Current version is 1.8.0_181.
>> >>
>> >> Jessie looks like it only has OpenJDK 7 packages. I didn't check
>> >> the backports.
>> >>
>> > I'll need to update linux, Java, tomcat, then finally my
>> > apps. But I'm pretty CDO (that's like OCD, but alphabetical)
>> > about the platform independence of my apps, so that's going
>> > to be straightforward.
>> >> Make sure you don't waste time upgrading from Tomcat 7 to Tomcat 8.
>> >> Go directly to Tomcat 8.5, since 8.0 is no longer supported.
>> >>
>> >> -chris
>> >>
>> > On 2/20/19, Nitin Kadam  wrote:
>> >> Thanks John  for reply..
>> >>
>> >> is there any documentation walkthrough for this upgrade
>> >> available? i am new to Tomcat and doing this 1st time, It
>> >> will be great help if anyone provide same.
>> >>
>> >> On Wed, Feb 20, 2019 at 6:49 PM Olaf Kock
>> >>  wrote:
>> >>
>> >>>
>> >>> On 20.02.19 13:57, Nitin Kadam wrote:
>>  Hello Team,
>> 
>>  Can you please guide how we can migrate seamlessly
>>  from Tomcat apache 7.0.79 to 7.0.92 or any latest
>>  version that 8.x or 9.x ( Windows 2012 R2 server)escr
>> >>>
>> >>> 7.0 to 8.0: https://tomcat.apache.org/migration-8.html
>> >>>
>> >>> 8.0 to 8.5: https://tomcat.apache.org/migration-85.html
>> >>>
>> >>> 8.x to 9.0: https://tomcat.apache.org/migration-9.html
>> >>>
>>  the current environment is configured with SSL
>>  certificate ( SSL 443)
>> >>> .jks
>>  store and needs to upgrade same due to security
>>  vulnerability detected by Qualys scanner.
>> >>>
>> >>> The documents have TLS documentation chapters. If you 

Re: [OT] Tomcat Apache 7.0.79 upgrade to Latest version

2019-02-21 Thread Nitin Kadam
FOr backup - I will be taking Snapshot backup before doing the upgrade but
also going to take folder backup from C: programme Files /Apache Tomcat
folder.

I am continuously  getting emails from the internal security team for
upgrading the version 7.0.79 to the latest version
need to figure out this ASAP

Apps are hosted in Web apps folders and there are few D3 apps
which connected with SQL for database




On Wed, Feb 20, 2019 at 9:45 PM John Dale  wrote:

> Without all of those early adopters to take the flack, we'd never know
> where the enemy bases are .. or something like that. ;)
>
> I'm just very glad we have OpenJDK and that my code is very simple.
>
> Java 12 .. Uff da!
>
>
>
> On 2/20/19, Christopher Schultz  wrote:
> > -BEGIN PGP SIGNED MESSAGE-
> > Hash: SHA256
> >
> > John,
> >
> > On 2/20/19 10:58, John Dale wrote:
> >> Points taken .. I have a great deal from my cloud provider on a
> >> wheezy instance, so I have to see if I can negotiate to keep my
> >> rate. I do a lot of custom MVC and security checks so things are
> >> nice and tight and I haven't been hacked even though I get several
> >> thousand attempts a day mostly from China and Iran.  I'm also
> >> kicking around whether to use James or keep using postfix for
> >> email.  With an upgrade to Java 8 I can use the latest james
> >> release so I'll look into that.
> >>
> >> I've been struggling to find a nice block of time for a full
> >> regression test.  It's funny .. I was working for a bank a couple
> >> of years back that was still on Java 1.6 and that's the way they
> >> liked it. :)
> >>
> >> Did you see the road map for Java 10?  Seems like we're moving a
> >> little too fast sometimes ..
> >
> > Java 10's dead, baby.
> >
> > Java 11 will be a long-term-service release. Java 12 is already
> > available for pre-release.
> >
> > The biggest step is from 8 -> 9/10/11. Once you are over that, it will
> > be much better for everyone.
> >
> > I don't want to have to wait 10 years to get new stuff like TLS 1.3
> > support or the forthcoming HTTP/3, so I'm happy with the shorter
> > development cycles Oracle has switched-over to.
> >
> > - -chris
> >
> >> On 2/20/19, Christopher Schultz 
> >> wrote: John,
> >>
> >> On 2/20/19 09:11, John Dale wrote:
> > I'm thinking about migrating to 8 soon myself.  Maybe I'll
> > use this as an opportunity to get started on that .. but I
> > think the last time I checked, OpenJDK 7 was supported on
> > Wheezy, so I'm thinking I have more to do than just upgrade
> > tomcat in my scenario.
> >>
> >> Yes. Wheezy is essentially unsupported and I would drop everything
> >> and upgrade to at least Jessie like right now if I were you.
> >> Stretch isn't much more work and you'll be good for a few years on
> >> that.
> >>
> >> Stretch has OpenJDK 8 packages. Current version is 1.8.0_181.
> >>
> >> Jessie looks like it only has OpenJDK 7 packages. I didn't check
> >> the backports.
> >>
> > I'll need to update linux, Java, tomcat, then finally my
> > apps. But I'm pretty CDO (that's like OCD, but alphabetical)
> > about the platform independence of my apps, so that's going
> > to be straightforward.
> >> Make sure you don't waste time upgrading from Tomcat 7 to Tomcat 8.
> >> Go directly to Tomcat 8.5, since 8.0 is no longer supported.
> >>
> >> -chris
> >>
> > On 2/20/19, Nitin Kadam  wrote:
> >> Thanks John  for reply..
> >>
> >> is there any documentation walkthrough for this upgrade
> >> available? i am new to Tomcat and doing this 1st time, It
> >> will be great help if anyone provide same.
> >>
> >> On Wed, Feb 20, 2019 at 6:49 PM Olaf Kock
> >>  wrote:
> >>
> >>>
> >>> On 20.02.19 13:57, Nitin Kadam wrote:
>  Hello Team,
> 
>  Can you please guide how we can migrate seamlessly
>  from Tomcat apache 7.0.79 to 7.0.92 or any latest
>  version that 8.x or 9.x ( Windows 2012 R2 server)escr
> >>>
> >>> 7.0 to 8.0: https://tomcat.apache.org/migration-8.html
> >>>
> >>> 8.0 to 8.5: https://tomcat.apache.org/migration-85.html
> >>>
> >>> 8.x to 9.0: https://tomcat.apache.org/migration-9.html
> >>>
>  the current environment is configured with SSL
>  certificate ( SSL 443)
> >>> .jks
>  store and needs to upgrade same due to security
>  vulnerability detected by Qualys scanner.
> >>>
> >>> The documents have TLS documentation chapters. If you run
> >>> into specific problems, describe them here.
> >>>
> >>> Olaf
> >>>
> >>>
> >>> -
> > - ---
> >>
> >>>
> > - -
> >>>
> >>>
> >> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> >>> For additional commands, e-mail:
> >>> users-h...@tomcat.apache.org
> >>>
> >>>
> >>
> >> -- Regards Nitin Kadam (9967688959)
> >>
> >
> 

Re: [OT] Tomcat Apache 7.0.79 upgrade to Latest version

2019-02-20 Thread John Dale
Without all of those early adopters to take the flack, we'd never know
where the enemy bases are .. or something like that. ;)

I'm just very glad we have OpenJDK and that my code is very simple.

Java 12 .. Uff da!



On 2/20/19, Christopher Schultz  wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
>
> John,
>
> On 2/20/19 10:58, John Dale wrote:
>> Points taken .. I have a great deal from my cloud provider on a
>> wheezy instance, so I have to see if I can negotiate to keep my
>> rate. I do a lot of custom MVC and security checks so things are
>> nice and tight and I haven't been hacked even though I get several
>> thousand attempts a day mostly from China and Iran.  I'm also
>> kicking around whether to use James or keep using postfix for
>> email.  With an upgrade to Java 8 I can use the latest james
>> release so I'll look into that.
>>
>> I've been struggling to find a nice block of time for a full
>> regression test.  It's funny .. I was working for a bank a couple
>> of years back that was still on Java 1.6 and that's the way they
>> liked it. :)
>>
>> Did you see the road map for Java 10?  Seems like we're moving a
>> little too fast sometimes ..
>
> Java 10's dead, baby.
>
> Java 11 will be a long-term-service release. Java 12 is already
> available for pre-release.
>
> The biggest step is from 8 -> 9/10/11. Once you are over that, it will
> be much better for everyone.
>
> I don't want to have to wait 10 years to get new stuff like TLS 1.3
> support or the forthcoming HTTP/3, so I'm happy with the shorter
> development cycles Oracle has switched-over to.
>
> - -chris
>
>> On 2/20/19, Christopher Schultz 
>> wrote: John,
>>
>> On 2/20/19 09:11, John Dale wrote:
> I'm thinking about migrating to 8 soon myself.  Maybe I'll
> use this as an opportunity to get started on that .. but I
> think the last time I checked, OpenJDK 7 was supported on
> Wheezy, so I'm thinking I have more to do than just upgrade
> tomcat in my scenario.
>>
>> Yes. Wheezy is essentially unsupported and I would drop everything
>> and upgrade to at least Jessie like right now if I were you.
>> Stretch isn't much more work and you'll be good for a few years on
>> that.
>>
>> Stretch has OpenJDK 8 packages. Current version is 1.8.0_181.
>>
>> Jessie looks like it only has OpenJDK 7 packages. I didn't check
>> the backports.
>>
> I'll need to update linux, Java, tomcat, then finally my
> apps. But I'm pretty CDO (that's like OCD, but alphabetical)
> about the platform independence of my apps, so that's going
> to be straightforward.
>> Make sure you don't waste time upgrading from Tomcat 7 to Tomcat 8.
>> Go directly to Tomcat 8.5, since 8.0 is no longer supported.
>>
>> -chris
>>
> On 2/20/19, Nitin Kadam  wrote:
>> Thanks John  for reply..
>>
>> is there any documentation walkthrough for this upgrade
>> available? i am new to Tomcat and doing this 1st time, It
>> will be great help if anyone provide same.
>>
>> On Wed, Feb 20, 2019 at 6:49 PM Olaf Kock
>>  wrote:
>>
>>>
>>> On 20.02.19 13:57, Nitin Kadam wrote:
 Hello Team,

 Can you please guide how we can migrate seamlessly
 from Tomcat apache 7.0.79 to 7.0.92 or any latest
 version that 8.x or 9.x ( Windows 2012 R2 server)escr
>>>
>>> 7.0 to 8.0: https://tomcat.apache.org/migration-8.html
>>>
>>> 8.0 to 8.5: https://tomcat.apache.org/migration-85.html
>>>
>>> 8.x to 9.0: https://tomcat.apache.org/migration-9.html
>>>
 the current environment is configured with SSL
 certificate ( SSL 443)
>>> .jks
 store and needs to upgrade same due to security
 vulnerability detected by Qualys scanner.
>>>
>>> The documents have TLS documentation chapters. If you run
>>> into specific problems, describe them here.
>>>
>>> Olaf
>>>
>>>
>>> -
> - ---
>>
>>>
> - -
>>>
>>>
>> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>>> For additional commands, e-mail:
>>> users-h...@tomcat.apache.org
>>>
>>>
>>
>> -- Regards Nitin Kadam (9967688959)
>>
>
> ---
> - --
>
>
>>
>
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail:
> users-h...@tomcat.apache.org
>
>>>
>>> -
>>>
>>>
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>>> For additional commands, e-mail: users-h...@tomcat.apache.org
>>>
>>>
>>
>> -
>>
>>
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>> For additional commands, e-mail: users-h...@tomcat.apache.org
>>
> -BEGIN PGP SIGNATURE-
> 

Re: [OT] Tomcat Apache 7.0.79 upgrade to Latest version

2019-02-20 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

John,

On 2/20/19 10:58, John Dale wrote:
> Points taken .. I have a great deal from my cloud provider on a
> wheezy instance, so I have to see if I can negotiate to keep my
> rate. I do a lot of custom MVC and security checks so things are
> nice and tight and I haven't been hacked even though I get several
> thousand attempts a day mostly from China and Iran.  I'm also
> kicking around whether to use James or keep using postfix for
> email.  With an upgrade to Java 8 I can use the latest james
> release so I'll look into that.
> 
> I've been struggling to find a nice block of time for a full 
> regression test.  It's funny .. I was working for a bank a couple
> of years back that was still on Java 1.6 and that's the way they
> liked it. :)
> 
> Did you see the road map for Java 10?  Seems like we're moving a 
> little too fast sometimes ..

Java 10's dead, baby.

Java 11 will be a long-term-service release. Java 12 is already
available for pre-release.

The biggest step is from 8 -> 9/10/11. Once you are over that, it will
be much better for everyone.

I don't want to have to wait 10 years to get new stuff like TLS 1.3
support or the forthcoming HTTP/3, so I'm happy with the shorter
development cycles Oracle has switched-over to.

- -chris

> On 2/20/19, Christopher Schultz 
> wrote: John,
> 
> On 2/20/19 09:11, John Dale wrote:
 I'm thinking about migrating to 8 soon myself.  Maybe I'll
 use this as an opportunity to get started on that .. but I
 think the last time I checked, OpenJDK 7 was supported on
 Wheezy, so I'm thinking I have more to do than just upgrade
 tomcat in my scenario.
> 
> Yes. Wheezy is essentially unsupported and I would drop everything
> and upgrade to at least Jessie like right now if I were you.
> Stretch isn't much more work and you'll be good for a few years on
> that.
> 
> Stretch has OpenJDK 8 packages. Current version is 1.8.0_181.
> 
> Jessie looks like it only has OpenJDK 7 packages. I didn't check
> the backports.
> 
 I'll need to update linux, Java, tomcat, then finally my
 apps. But I'm pretty CDO (that's like OCD, but alphabetical)
 about the platform independence of my apps, so that's going
 to be straightforward.
> Make sure you don't waste time upgrading from Tomcat 7 to Tomcat 8.
> Go directly to Tomcat 8.5, since 8.0 is no longer supported.
> 
> -chris
> 
 On 2/20/19, Nitin Kadam  wrote:
> Thanks John  for reply..
> 
> is there any documentation walkthrough for this upgrade 
> available? i am new to Tomcat and doing this 1st time, It
> will be great help if anyone provide same.
> 
> On Wed, Feb 20, 2019 at 6:49 PM Olaf Kock
>  wrote:
> 
>> 
>> On 20.02.19 13:57, Nitin Kadam wrote:
>>> Hello Team,
>>> 
>>> Can you please guide how we can migrate seamlessly
>>> from Tomcat apache 7.0.79 to 7.0.92 or any latest
>>> version that 8.x or 9.x ( Windows 2012 R2 server)escr
>> 
>> 7.0 to 8.0: https://tomcat.apache.org/migration-8.html
>> 
>> 8.0 to 8.5: https://tomcat.apache.org/migration-85.html
>> 
>> 8.x to 9.0: https://tomcat.apache.org/migration-9.html
>> 
>>> the current environment is configured with SSL
>>> certificate ( SSL 443)
>> .jks
>>> store and needs to upgrade same due to security
>>> vulnerability detected by Qualys scanner.
>> 
>> The documents have TLS documentation chapters. If you run
>> into specific problems, describe them here.
>> 
>> Olaf
>> 
>> 
>> -
- ---
>
>> 
- -
>> 
>> 
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>> For additional commands, e-mail:
>> users-h...@tomcat.apache.org
>> 
>> 
> 
> -- Regards Nitin Kadam (9967688959)
> 
 
 ---
- --


>
 
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail:
 users-h...@tomcat.apache.org
 
>> 
>> -
>>
>> 
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>> For additional commands, e-mail: users-h...@tomcat.apache.org
>> 
>> 
> 
> -
>
> 
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
> 
-BEGIN PGP SIGNATURE-
Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/

iQIzBAEBCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAlxtfBwACgkQHPApP6U8
pFj9NQ//R4TxxfPFCtzZzPhRJqtka6A9MSQ7wfoqvZcVD+Wde/WquelT47lZySam
LqyMwKo3/IN7HUCwYBI6zm7JHPJYHrYv7FU+xH8TgpeSNCmxqKY0CPRQbKEPxY+T
CYiikk/9YFIpKA7QWBMpGO0Fs3/dKX2dwlrC9Bx7gllz5nzG6Vq0SWILOPt7FsEt

Re: Tomcat Apache 7.0.79 upgrade to Latest version

2019-02-20 Thread John Dale
Points taken .. I have a great deal from my cloud provider on a wheezy
instance, so I have to see if I can negotiate to keep my rate. I do a
lot of custom MVC and security checks so things are nice and tight and
I haven't been hacked even though I get several thousand attempts a
day mostly from China and Iran.  I'm also kicking around whether to
use James or keep using postfix for email.  With an upgrade to Java 8
I can use the latest james release so I'll look into that.

I've been struggling to find a nice block of time for a full
regression test.  It's funny .. I was working for a bank a couple of
years back that was still on Java 1.6 and that's the way they liked
it. :)

Did you see the road map for Java 10?  Seems like we're moving a
little too fast sometimes ..

On 2/20/19, Christopher Schultz  wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
>
> John,
>
> On 2/20/19 09:11, John Dale wrote:
>> I'm thinking about migrating to 8 soon myself.  Maybe I'll use this
>> as an opportunity to get started on that .. but I think the last
>> time I checked, OpenJDK 7 was supported on Wheezy, so I'm thinking
>> I have more to do than just upgrade tomcat in my scenario.
>
> Yes. Wheezy is essentially unsupported and I would drop everything and
> upgrade to at least Jessie like right now if I were you. Stretch isn't
> much more work and you'll be good for a few years on that.
>
> Stretch has OpenJDK 8 packages. Current version is 1.8.0_181.
>
> Jessie looks like it only has OpenJDK 7 packages. I didn't check the
> backports.
>
>> I'll need to update linux, Java, tomcat, then finally my apps.
>> But I'm pretty CDO (that's like OCD, but alphabetical) about the
>> platform independence of my apps, so that's going to be
>> straightforward.
> Make sure you don't waste time upgrading from Tomcat 7 to Tomcat 8. Go
> directly to Tomcat 8.5, since 8.0 is no longer supported.
>
> - -chris
>
>> On 2/20/19, Nitin Kadam  wrote:
>>> Thanks John  for reply..
>>>
>>> is there any documentation walkthrough for this upgrade
>>> available? i am new to Tomcat and doing this 1st time, It will be
>>> great help if anyone provide same.
>>>
>>> On Wed, Feb 20, 2019 at 6:49 PM Olaf Kock 
>>> wrote:
>>>

 On 20.02.19 13:57, Nitin Kadam wrote:
> Hello Team,
>
> Can you please guide how we can migrate seamlessly from
> Tomcat apache 7.0.79 to 7.0.92 or any latest version that 8.x
> or 9.x ( Windows 2012 R2 server)escr

 7.0 to 8.0: https://tomcat.apache.org/migration-8.html

 8.0 to 8.5: https://tomcat.apache.org/migration-85.html

 8.x to 9.0: https://tomcat.apache.org/migration-9.html

> the current environment is configured with SSL certificate (
> SSL 443)
 .jks
> store and needs to upgrade same due to security vulnerability
> detected by Qualys scanner.

 The documents have TLS documentation chapters. If you run into
 specific problems, describe them here.

 Olaf


 
> - -


> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org


>>>
>>> -- Regards Nitin Kadam (9967688959)
>>>
>>
>> -
>>
>>
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>> For additional commands, e-mail: users-h...@tomcat.apache.org
>>
> -BEGIN PGP SIGNATURE-
> Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/
>
> iQIzBAEBCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAlxtd5oACgkQHPApP6U8
> pFjMshAAi+r0Y8rJa80b0nnv0Wh95qa2rMOzWvqx/Yl5At8D1NuaABnQhuk/8gOJ
> G8A+lY+5DFYI3n5NebO8Cp5GVHQD2ZK5N3A8CyZaQnfVeA4dA/O7baU3tNUINqep
> d680v3rtlVkXnY230H0sWujDFbBBM1SPzuqQyUas7FTQyJ52ehCwxX2aneYj4pF1
> hNsmMbUkF0xkxBEqnr/xqgneuAyVw+eGACA9rjQxTRLWlJSR/Pih3mA+dVlPTQzO
> M+8PhtX/M2mV4RuHaQXTVRwbOfqvHS8QBF2oUBJlO8uiNoy18IcHmbiCNP8S44Tf
> 1ESjQM5k5M/9tW1mv0xFKm22Y32LKLb1PsAtlEM1eWgCJnXPJT1tT0Iuwq8VwJWl
> lxWXg879V/CFr7Xrl0xs/sBLEqn7Sqd8XBy9mBBMKT+YcS0rZDO1mG/a5aVKeni8
> E09Ab2R5d+oKzeEVR/9OwvKb7ZALTwSuPPsR+DyJRRQQuVvrb6u+r6EoqZBtRxGK
> P/T8iRJ2jai5b3PgTwg0hL2mLLE/Ag7VAmNSdmXSvtyXN8xlTDf2y9zZp9Ke4la/
> 6lI7Rt+8+zv1ud/QpwhozyubeOoc+O9NY4Pon2xRjBoFEXoFrNJC1HYpWm+oCKTG
> K7tKEpzdFuKQopdpK97bs0arPiVgz5qUhVPPQSSmV3h+4DyRNRA=
> =7n44
> -END PGP SIGNATURE-
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
>

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Tomcat Apache 7.0.79 upgrade to Latest version

2019-02-20 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

John,

On 2/20/19 09:11, John Dale wrote:
> I'm thinking about migrating to 8 soon myself.  Maybe I'll use this
> as an opportunity to get started on that .. but I think the last
> time I checked, OpenJDK 7 was supported on Wheezy, so I'm thinking
> I have more to do than just upgrade tomcat in my scenario.

Yes. Wheezy is essentially unsupported and I would drop everything and
upgrade to at least Jessie like right now if I were you. Stretch isn't
much more work and you'll be good for a few years on that.

Stretch has OpenJDK 8 packages. Current version is 1.8.0_181.

Jessie looks like it only has OpenJDK 7 packages. I didn't check the
backports.

> I'll need to update linux, Java, tomcat, then finally my apps.
> But I'm pretty CDO (that's like OCD, but alphabetical) about the
> platform independence of my apps, so that's going to be
> straightforward.
Make sure you don't waste time upgrading from Tomcat 7 to Tomcat 8. Go
directly to Tomcat 8.5, since 8.0 is no longer supported.

- -chris

> On 2/20/19, Nitin Kadam  wrote:
>> Thanks John  for reply..
>> 
>> is there any documentation walkthrough for this upgrade
>> available? i am new to Tomcat and doing this 1st time, It will be
>> great help if anyone provide same.
>> 
>> On Wed, Feb 20, 2019 at 6:49 PM Olaf Kock 
>> wrote:
>> 
>>> 
>>> On 20.02.19 13:57, Nitin Kadam wrote:
 Hello Team,
 
 Can you please guide how we can migrate seamlessly from
 Tomcat apache 7.0.79 to 7.0.92 or any latest version that 8.x
 or 9.x ( Windows 2012 R2 server)escr
>>> 
>>> 7.0 to 8.0: https://tomcat.apache.org/migration-8.html
>>> 
>>> 8.0 to 8.5: https://tomcat.apache.org/migration-85.html
>>> 
>>> 8.x to 9.0: https://tomcat.apache.org/migration-9.html
>>> 
 the current environment is configured with SSL certificate (
 SSL 443)
>>> .jks
 store and needs to upgrade same due to security vulnerability
 detected by Qualys scanner.
>>> 
>>> The documents have TLS documentation chapters. If you run into
>>> specific problems, describe them here.
>>> 
>>> Olaf
>>> 
>>> 
>>> 
- -
>>>
>>> 
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>>> For additional commands, e-mail: users-h...@tomcat.apache.org
>>> 
>>> 
>> 
>> -- Regards Nitin Kadam (9967688959)
>> 
> 
> -
>
> 
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
> 
-BEGIN PGP SIGNATURE-
Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/
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=7n44
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Tomcat Apache 7.0.79 upgrade to Latest version

2019-02-20 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

John, Nitin,

On 2/20/19 09:47, John Dale wrote:
> I would recommend verifying your upgrade process on a
> non-production machine first in a way that you can restore if you
> need to start over (sometimes in the heat of battle we can lose
> context and it's good to start fresh).  What version(s) of Java are
> installed?
> 
> The differences in SSL configuration can be found in the
> documentation for the respective version(s) of Tomcat you choose.
> 
> Are you doing DB connection pooling?  Is that configuration in a 
> context file, or are you doing that in the server.xml?
> 
> Correct me if I'm wrong here, but I think it would be safer to
> have two tomcat folders, one for 7 and one for 8/9.

Even better, use a split-configuration where CATALINA_HOME contains
your Tomcat installation and CATALINA_BASE contains your configuration
and web applications. It makes upgrading between point-releases *trivial
*.

Moving between major releases will absolutely require that you
re-write your conf/server.xml, but mostly everything else can stay the
same.

Hope that helps,
- -chris
-BEGIN PGP SIGNATURE-
Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/
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=PMpf
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Tomcat Apache 7.0.79 upgrade to Latest version

2019-02-20 Thread Olaf Kock
Hi Nitin,

John gave you a good primer, for almost all of the rest I'll point to
the fine documentation again. Look at a diff between your current
installation and the plain vanilla download of the tomcat version that
you're running.

What I want to comment on is this:

On 20.02.19 15:33, Nitin Kadam wrote:
> I need to know below details.
> 1 How to take a backup before the upgrade (Main files).

My standard recommendation to this is: Do not specifically back up your
production system, do not plan to "maybe" go back. Rather *take your
existing backup* and *restore* it to a new system. Perform a disaster
recovery, as if your production server failed hard and you can't recover
the data. This will make sure that you have a proper system running
until you switch over to the new system.

This way of working has the nice benefit that you'll prove that your
backup is worth its name. If you don't have a backup: You know what to do.

If you follow this advice, you don't need a specific backup before the
migration.

Of course, you'll need to make sure that the applications that you're
running on the new and restored server use their backend storage
properly - but as we don't have a clue what applications you're running
(and the tomcat list is a bad place to get support for random
applications anyway), this exercise is left for you.


In conclusion: Make sure that your existing backup is worth its name.
Then think further. Operate on a restored server, 100% separate of the
production server that continues to run.

And inspect your installation's diff, read the fine documentation

Olaf



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Tomcat Apache 7.0.79 upgrade to Latest version

2019-02-20 Thread John Dale
I would recommend verifying your upgrade process on a non-production
machine first in a way that you can restore if you need to start over
(sometimes in the heat of battle we can lose context and it's good to
start fresh).  What version(s) of Java are installed?

The differences in SSL configuration can be found in the documentation
for the respective version(s) of Tomcat you choose.

Are you doing DB connection pooling?  Is that configuration in a
context file, or are you doing that in the server.xml?

Correct me if I'm wrong here, but I think it would be safer to have
two tomcat folders, one for 7 and one for 8/9.

You are doing this on a dev/qa machine, right?

On 2/20/19, Nitin Kadam  wrote:
> Hello Olaf,
>
> There are no such changes in original configuration except server.xml for
> SSL and web config for Http header filter,
> and yes application team deploying WAR to we app folders.
>
> I need to know below details.
> 1 How to take a backup before the upgrade (Main files).
> 2. How to migrate from one version to another version without
> losing applications configuration and data.
> 3. SSL configuration.
> 4. Do I need to uninstall the current version and then upgrade directly
> with the latest version?
>
>
>
> Regards
> Nitin
>
>
> On Wed, Feb 20, 2019 at 7:28 PM Olaf Kock  wrote:
>
>>
>> On 20.02.19 14:47, Nitin Kadam wrote:
>> > Thanks John  for reply..
>> >
>> > is there any documentation walkthrough for this upgrade available?
>> > i am new to Tomcat and e to doing this 1st time, It will be great help
>> if anyone
>> > provide same.
>>
>> There's plenty of documentation on https://tomcat.apache.com - start
>> there and come back here if you don't understand the documentation with
>> specific questions. We don't know what's configured in your system, thus
>> can't provide a solution tailored for you.
>>
>> As John said in a different branch of this thread, upgrading is
>> typically easy. The less changes you've made to the default
>> configuration, the easier the migration will be.
>>
>> Start with the documents I've linked earlier, If you don't understand
>> parts of it, try to find that section in the regular documentation. If
>> you still have problems understanding, ask the questions here.
>>
>> For a "walkthrough" guide for your system, there are plenty of companies
>> available that provide consulting, as well as training to get you
>> started. But the documentation is actually quite good.
>>
>> Olaf
>>
>>
>>
>> -
>> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>> For additional commands, e-mail: users-h...@tomcat.apache.org
>>
>>
>
> --
> Regards
> Nitin Kadam
> (9967688959)
>

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Tomcat Apache 7.0.79 upgrade to Latest version

2019-02-20 Thread Nitin Kadam
Hello Olaf,

There are no such changes in original configuration except server.xml for
SSL and web config for Http header filter,
and yes application team deploying WAR to we app folders.

I need to know below details.
1 How to take a backup before the upgrade (Main files).
2. How to migrate from one version to another version without
losing applications configuration and data.
3. SSL configuration.
4. Do I need to uninstall the current version and then upgrade directly
with the latest version?



Regards
Nitin


On Wed, Feb 20, 2019 at 7:28 PM Olaf Kock  wrote:

>
> On 20.02.19 14:47, Nitin Kadam wrote:
> > Thanks John  for reply..
> >
> > is there any documentation walkthrough for this upgrade available?
> > i am new to Tomcat and e to doing this 1st time, It will be great help
> if anyone
> > provide same.
>
> There's plenty of documentation on https://tomcat.apache.com - start
> there and come back here if you don't understand the documentation with
> specific questions. We don't know what's configured in your system, thus
> can't provide a solution tailored for you.
>
> As John said in a different branch of this thread, upgrading is
> typically easy. The less changes you've made to the default
> configuration, the easier the migration will be.
>
> Start with the documents I've linked earlier, If you don't understand
> parts of it, try to find that section in the regular documentation. If
> you still have problems understanding, ask the questions here.
>
> For a "walkthrough" guide for your system, there are plenty of companies
> available that provide consulting, as well as training to get you
> started. But the documentation is actually quite good.
>
> Olaf
>
>
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
>

-- 
Regards
Nitin Kadam
(9967688959)


Re: Tomcat Apache 7.0.79 upgrade to Latest version

2019-02-20 Thread John Dale
Welcome to the Tomcat community!  :D

I've been using Tomcat since .. I think .. around 2000-ish.  I've
always thought that I could solve any problem in IS using Tomcat, and
through the years I've found that to be true.  It's an amazing and
simple tool that many have tried to improve upon.  It's tough. :)

So, for a migration .. maybe some general rules of thumb to get you started.

Are you deploying a war file?  Is the war file assembled using ant or
some other tool?  Are you using a database connection pool?  As Olaf
indicated, it would be interesting to know how much the default
configuration has changed.  Tell us as much as you can about your
application and we'll be glad to help.

Are you deploying your application into the webapps folder, or are you
pointing Tomcat to another location with an expanded directory (tomcat
can deploy from a war file, which is basically a zipped archive of
your application, or you can just point it to a folder on your file
system and it'll deploy that .. pretty slick).

server.xml is the key, I think, to the migration.  Take a peek at the
documentation (connection pooling, connectors, and other syntax may
have changed).

I'm thinking about migrating to 8 soon myself.  Maybe I'll use this as
an opportunity to get started on that .. but I think the last time I
checked, OpenJDK 7 was supported on Wheezy, so I'm thinking I have
more to do than just upgrade tomcat in my scenario.  I'll need to
update linux, Java, tomcat, then finally my apps.  But I'm pretty CDO
(that's like OCD, but alphabetical) about the platform independence of
my apps, so that's going to be straightforward.

So, take a peek at the docs and start asking questions and tell us the
story of your application as much as you feel comfortable.

Good luck and again .. welcome!

John


On 2/20/19, Nitin Kadam  wrote:
> Thanks John  for reply..
>
> is there any documentation walkthrough for this upgrade available?
> i am new to Tomcat and doing this 1st time, It will be great help if anyone
> provide same.
>
> On Wed, Feb 20, 2019 at 6:49 PM Olaf Kock  wrote:
>
>>
>> On 20.02.19 13:57, Nitin Kadam wrote:
>> > Hello Team,
>> >
>> > Can you please guide how we can migrate seamlessly from Tomcat
>> > apache 7.0.79 to 7.0.92 or any latest version that 8.x or 9.x ( Windows
>> > 2012 R2 server)escr
>>
>> 7.0 to 8.0: https://tomcat.apache.org/migration-8.html
>>
>> 8.0 to 8.5: https://tomcat.apache.org/migration-85.html
>>
>> 8.x to 9.0: https://tomcat.apache.org/migration-9.html
>>
>> > the current environment is configured with SSL certificate ( SSL 443)
>> .jks
>> > store and needs to upgrade same due to security vulnerability detected
>> > by
>> > Qualys scanner.
>>
>> The documents have TLS documentation chapters. If you run into specific
>> problems, describe them here.
>>
>> Olaf
>>
>>
>> -
>> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>> For additional commands, e-mail: users-h...@tomcat.apache.org
>>
>>
>
> --
> Regards
> Nitin Kadam
> (9967688959)
>

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Tomcat Apache 7.0.79 upgrade to Latest version

2019-02-20 Thread Olaf Kock


On 20.02.19 14:47, Nitin Kadam wrote:
> Thanks John  for reply..
>
> is there any documentation walkthrough for this upgrade available?
> i am new to Tomcat and e to doing this 1st time, It will be great help if 
> anyone
> provide same.

There's plenty of documentation on https://tomcat.apache.com - start
there and come back here if you don't understand the documentation with
specific questions. We don't know what's configured in your system, thus
can't provide a solution tailored for you.

As John said in a different branch of this thread, upgrading is
typically easy. The less changes you've made to the default
configuration, the easier the migration will be.

Start with the documents I've linked earlier, If you don't understand
parts of it, try to find that section in the regular documentation. If
you still have problems understanding, ask the questions here.

For a "walkthrough" guide for your system, there are plenty of companies
available that provide consulting, as well as training to get you
started. But the documentation is actually quite good.

Olaf



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Tomcat Apache 7.0.79 upgrade to Latest version

2019-02-20 Thread Nitin Kadam
Thanks John  for reply..

is there any documentation walkthrough for this upgrade available?
i am new to Tomcat and doing this 1st time, It will be great help if anyone
provide same.

On Wed, Feb 20, 2019 at 6:49 PM Olaf Kock  wrote:

>
> On 20.02.19 13:57, Nitin Kadam wrote:
> > Hello Team,
> >
> > Can you please guide how we can migrate seamlessly from Tomcat
> > apache 7.0.79 to 7.0.92 or any latest version that 8.x or 9.x ( Windows
> > 2012 R2 server)escr
>
> 7.0 to 8.0: https://tomcat.apache.org/migration-8.html
>
> 8.0 to 8.5: https://tomcat.apache.org/migration-85.html
>
> 8.x to 9.0: https://tomcat.apache.org/migration-9.html
>
> > the current environment is configured with SSL certificate ( SSL 443)
> .jks
> > store and needs to upgrade same due to security vulnerability detected by
> > Qualys scanner.
>
> The documents have TLS documentation chapters. If you run into specific
> problems, describe them here.
>
> Olaf
>
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
>

-- 
Regards
Nitin Kadam
(9967688959)


Re: Tomcat Apache 7.0.79 upgrade to Latest version

2019-02-20 Thread John Dale
I have always found migrating forward is fairly simple.  That said, it
depends  lot no what you're doing in your code.  I have not yet
migrated to 8, but if I had to venture a guess, deployment metadata
syntax of the server.xml may have changed.  Check out this guide and
let us know what we can do to help through some of the details.

https://tomcat.apache.org/migration-8.html

On 2/20/19, Nitin Kadam  wrote:
> Hello Team,
>
> Can you please guide how we can migrate seamlessly from Tomcat
> apache 7.0.79 to 7.0.92 or any latest version that 8.x or 9.x ( Windows
> 2012 R2 server)
>
> the current environment is configured with SSL certificate ( SSL 443) .jks
> store and needs to upgrade same due to security vulnerability detected by
> Qualys scanner.
>
> --
> Regards
> Nitin Kadam
>

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Tomcat Apache 7.0.79 upgrade to Latest version

2019-02-20 Thread Olaf Kock


On 20.02.19 13:57, Nitin Kadam wrote:
> Hello Team,
>
> Can you please guide how we can migrate seamlessly from Tomcat
> apache 7.0.79 to 7.0.92 or any latest version that 8.x or 9.x ( Windows
> 2012 R2 server)escr

7.0 to 8.0: https://tomcat.apache.org/migration-8.html

8.0 to 8.5: https://tomcat.apache.org/migration-85.html

8.x to 9.0: https://tomcat.apache.org/migration-9.html

> the current environment is configured with SSL certificate ( SSL 443) .jks
> store and needs to upgrade same due to security vulnerability detected by
> Qualys scanner.

The documents have TLS documentation chapters. If you run into specific
problems, describe them here.

Olaf


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Tomcat Apache 7.0.79 upgrade to Latest version

2019-02-20 Thread Nitin Kadam
Hello Team,

Can you please guide how we can migrate seamlessly from Tomcat
apache 7.0.79 to 7.0.92 or any latest version that 8.x or 9.x ( Windows
2012 R2 server)

the current environment is configured with SSL certificate ( SSL 443) .jks
store and needs to upgrade same due to security vulnerability detected by
Qualys scanner.

-- 
Regards
Nitin Kadam