websocket endpoints not released

[Alex O'Ree]

I ran into a strange issue today. Running tomcat 8.5 with a websocket
endpoint + some javascript to wire up a browser to the socket. All works as
normal, however sometimes if the user refreshes the browser, it seems as if
second web socket is opened by the browser. This leads to the user seeing
duplicate messages which can be confusing. I do have code on the page for
navigation links to close the socket but i'm thinking i haven't handled all
cases. My assumption was that a full browser reload would trigger any open
websockets to close, but apparently they don't (at least with chrome). Has
anyone else ran into a similar issue?

Re: AJP-APR versus AJP-NIO and AJP-NIO2

[Rémy Maucherat]

On Fri, Aug 31, 2018 at 7:18 PM Christopher Schultz <
ch...@christopherschultz.net> wrote:

> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
>
> James,
>
> On 8/31/18 09:27, recai james wrote:
> > What is the biggest difference about these connectors? Which one
> > performs the best? Is anybody shed a light on this?
>
> Have a look at:
>
> http://tomcat.apache.org/tomcat-9.0-doc/config/http.html#Connector_Compa
> rison
>
> and
>
> http://tomcat.apache.org/presentations.html
> (search for "connector selection")
>
> These mostly focus on HTTP rather than AJP, but the answers are pretty
> much the same. Keep in mind that AJP is usually expected to be a
> persistent connection between reverse-proxy and Tomcat, so things like
> keepalive-blocking, etc. are possibly less (or more!) important.
>
> My recommendation these days would be to use HTTP as your proxy
> protocol, and to use either NIO or NIO2.
>
> Rémy is giving a presentation next month in Montreal about "recent"
> features in Tomcat, and will be discussing NIO2 as a part of that
> presentation:
> (talk)
> https://apachecon.dukecon.org/acna/2018/#/scheduledEvent/7b1817f0af115fd
> b6
> 
> (conf) https://apachecon.dukecon.org/acna/2018/#/schedule
>
> Also possible relevant is Rémy's talk on NIO2 specifically:
> https://apachecon.dukecon.org/acna/2018/#/scheduledEvent/c8e270be4e9cd15
> 05
>

Thanks for the ad ! I won't talk about AJP though, it's kinda not very new
...

Rémy


>
> Hope that helps,
> - -chris
> -BEGIN PGP SIGNATURE-
> Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/
>
> iQIzBAEBCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAluJeG4ACgkQHPApP6U8
> pFhi5xAAucBl/ltdK7nXsfYt0Qc6JORwzmBFDLa4BjUcEglZ8rS0vQ/9tik8ntll
> LOWQNZH9+W8Ly2LaOb4GlEk+mQAH3m8oohHqymq68ilb95GlsR0pFgtsCNcPOqNk
> IpgW1QbUPY5PtlhyLAtVkzc0nUzyLalXv2EC4SO7uRQVp3P3mSr+6UzjciOjsHed
> cHgoPF0SMkOiHmXo1S1EtbiL+50NbFAUyNNGrKkQEPPFnZ3NrVj1UPXp3WC+B0mF
> B3h3dmp28mhLu+/CaRFqrB+UC/XZtKjgq0yrXHXhjvlVBGSeTJYV+JKZHj7rRpf1
> OpxEtMwEe5xePZcgGYb4eeJOq2HkC3uDNw2/mLDUkwsGZ4kJ4l5uw5ICp71+fr/1
> a5n8t6RM+EiHfS7ML85yoKjzmlx11c0XAv84DolytbhF8kqeaM1hGTFdC0aMenMt
> C52lkxWfs9KKWOz4rkaBhdTHtVktuNtBWWtaOwczqJJCPUOCTiiZK5Zp6hMEbIOY
> 3XhT9MVuPjjrakfid5UeugDSbZz0YVgU+/IU64aVrIEuLT53LDgd6Y5qV4X8TAXw
> pP0spjAcrjjEQTXGpD6/5CJTqX/XA800lBFIOQ9tZ/GEkETUXAdAmkSCZdTbPyFD
> lDX5YAWriTmr3yKvgL23oL5RwTMmqatgkLLaFbRajrYkkEY/iCw=
> =LYLW
> -END PGP SIGNATURE-
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
>

Re: Multiple Hosts in server.xml - expected behaviour?

[Christopher Schultz]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Stefan,

On 8/30/18 23:27, Stefan Mayr wrote:
> we got an application has multiple Service, Engine and Host entries
> in server.xml. All Host sections share the same directory:
> 
> appBase="webapps" unpackWARs="true" autoDeploy="true"
> 
> Each host contains Context-Section using docBase="webapps/appX"
> for diffenent applications appX.
> 
> Is this a valid configuration (for Tomcat 7.0)? If yes, what should
> we expect to happen?

Yes, this is valid. You should expect that each  will deploy a
separate copy of each web application found in "webapps". If you have
3 s and 3 web applications in "webapps", you should expect
Tomcat to start 9 separate contexts.

> We currently see and endless loop of application deployments that
> fail because the ports of the Service Connector is already in use.

Something else is wrong, then. Connectors are separate from context
(web app) deployments. Application deployments shouldn't attempt to
configure connectors.

Can you post an error and/or stack trace?

- -chris
-BEGIN PGP SIGNATURE-
Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/

iQIzBAEBCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAluJeTkACgkQHPApP6U8
pFhErw/+IjS1+2OGuUVQgfnW31lssbUWvY7CiD8Dtz9JVe8I3bHWG9fI70ZHrPYW
ivSM9dJjMkSFMCW97kQl7ML5JPL+nG6c9kKxf23qhlH28iERh9hNs8A/iMk773u+
DnX7obBBRDeCECzz7q7bs19PnNjDwKaiuz50zRlEYEROZ59mRR4HhChbESwRw6da
Xk+JBdx8QsvjymfT4D0/g8HvjBvaI54cgqg7kmav41JxOvVQG8EHP2rLuNNxIHfF
OI7aF9XYUqQbu1qQgdp8H0pC7FsfJ9K4fKvobvf+vT6Ioel0RVVCIAngeimtBC/p
9/jGJKALCI4+HWVBvaW+XDhXnkGndpFQc8Vib2KqPLlv4nKSezG6LmDzHrm93irl
O9fkGVb8TMbZTNNLjw0TYOL5KXaR+121Mc//FjjzaLz7fpUPafXgcOKvAYsNueCd
O7C/yj0Yyxk+oUgQCtQLwh0rNPho1VgyypKdgEIemk5VksKcRIjMY4mf2hubnpMD
Af74btr9RAvLZFnlnBjSLzKG1+uoUKmxV6b4Yd4ll+HaBURTz4f3EWN7lJGAcdQh
ILLKW0v+StUHqujQ+pMlCWz5VxzlppRBQ60Pnij9qLYc+qzmGaFtAEOFzm1SqPbV
fyczJGwMrz8NMSXyBr3UDyXvCN9SPbswEh6/qAcnX9tLmuRQo6A=
=4TXL
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: AJP-APR versus AJP-NIO and AJP-NIO2

[Christopher Schultz]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

James,

On 8/31/18 09:27, recai james wrote:
> What is the biggest difference about these connectors? Which one
> performs the best? Is anybody shed a light on this?

Have a look at:

http://tomcat.apache.org/tomcat-9.0-doc/config/http.html#Connector_Compa
rison

and

http://tomcat.apache.org/presentations.html
(search for "connector selection")

These mostly focus on HTTP rather than AJP, but the answers are pretty
much the same. Keep in mind that AJP is usually expected to be a
persistent connection between reverse-proxy and Tomcat, so things like
keepalive-blocking, etc. are possibly less (or more!) important.

My recommendation these days would be to use HTTP as your proxy
protocol, and to use either NIO or NIO2.

Rémy is giving a presentation next month in Montreal about "recent"
features in Tomcat, and will be discussing NIO2 as a part of that
presentation:
(talk)
https://apachecon.dukecon.org/acna/2018/#/scheduledEvent/7b1817f0af115fd
b6
(conf) https://apachecon.dukecon.org/acna/2018/#/schedule

Also possible relevant is Rémy's talk on NIO2 specifically:
https://apachecon.dukecon.org/acna/2018/#/scheduledEvent/c8e270be4e9cd15
05

Hope that helps,
- -chris
-BEGIN PGP SIGNATURE-
Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/
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=LYLW
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

AJP-APR versus AJP-NIO and AJP-NIO2

[recai james]

Hello,
What is the biggest difference about these connectors? Which one performs
the best? Is anybody shed a light on this?
Thanks.
Rec.

RE: AW: AW:

[McIntosh, Carolyn (Carol)]

That's the one I need too!  


Carol McIntosh, SCPM, CSM
Specialist, Infrastructure Engineering
Proud Nationwide Member
Build-Middleware Engineering
W 614-677-7282 | C 614-507-0985 
carol.mcint...@nationwide.com


FORTUNE® and Time Inc. are not affiliated with, and do not endorse the products 
or services of, Nationwide Mutual Insurance Company.

 
 


-Original Message-
From: Julian Ardoin [mailto:julian.ard...@eurotext.de] 
Sent: Friday, August 31, 2018 7:05 AM
To: Tomcat Users List 
Subject: [EXTERNAL] AW: AW: AW:

Nationwide Information Security Warning: This is an external email. Do not 
click on links or open attachments unless you trust the sender.
--

Hi Mark, 

sorry for not being specific enough. I Need the Mailing list that sends E-Mails 
like this:

Subject [ANN] Apache Tomcat 8.5.33 available Date Aug 20th The Apache Tomcat 
team announces the immediate availability of Apache Tomcat 8.5.33.

Apache Tomcat 8 is an open source software implementation of the Java Servlet, 
JavaServer Pages, Java Unified Expression Language, Java WebSocket and Java 
Authentication Service Provider Interface for Containers technologies.

Apache Tomcat 8.5.x replaces 8.0.x and includes new features pulled forward 
from the 9.0.x branch. The notable changes since 8.5.32 include:

- Correctly decode URL paths (+ should not be decoded to a space in the path) 
in the RequestDispatcher and the web application class loader.

-Ursprüngliche Nachricht-
Von: Mark Thomas [mailto:ma...@apache.org]
Gesendet: Freitag, 31. August 2018 11:42
An: users@tomcat.apache.org
Betreff: Re: AW: AW:

On 31/08/18 10:20, Julian Ardoin wrote:
> Oh sorry - The one for Updates! Thanks

Sorry, still not specific enough.

I'm guessing you mean one of the announcement lists. There are individual 
project announcement lists and an ASF-wide one. Given this is a Tomcat list, 
I'm guessing you are interested in Tomact updates.

Do you want to subscribe this address to the Tomcat announcement list, the 
ASF-wide announcement list or something else?

Mark

> 
> -Ursprüngliche Nachricht-
> Von: Mark Thomas [mailto:ma...@apache.org]
> Gesendet: Freitag, 31. August 2018 11:20
> An: users@tomcat.apache.org
> Betreff: Re: AW:
> 
> On 30/08/18 15:01, Julian Ardoin wrote:
>> Hello,
>>
>> is it possible to Subscribe c6u1d1k1h1o3d...@eurotext.slack.com to the 
>> apache mailing list?
> 
> There is not one Apache mailing list. There are hundreds. Which 
> list(s) are you interesting in.
> 
> Mark
> 
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
> 
> 
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
> 


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

AW: AW: AW:

[Julian Ardoin]

Hi Mark, 

sorry for not being specific enough. I Need the Mailing list that sends E-Mails 
like this:

Subject [ANN] Apache Tomcat 8.5.33 available
Date Aug 20th
The Apache Tomcat team announces the immediate availability of Apache
Tomcat 8.5.33.

Apache Tomcat 8 is an open source software implementation of the Java
Servlet, JavaServer Pages, Java Unified Expression Language, Java
WebSocket and Java Authentication Service Provider Interface for
Containers technologies.

Apache Tomcat 8.5.x replaces 8.0.x and includes new features pulled
forward from the 9.0.x branch. The notable changes since 8.5.32 include:

- Correctly decode URL paths (+ should not be decoded to a space in
the path) in the RequestDispatcher and the web application class
loader.

-Ursprüngliche Nachricht-
Von: Mark Thomas [mailto:ma...@apache.org] 
Gesendet: Freitag, 31. August 2018 11:42
An: users@tomcat.apache.org
Betreff: Re: AW: AW:

On 31/08/18 10:20, Julian Ardoin wrote:
> Oh sorry - The one for Updates! Thanks

Sorry, still not specific enough.

I'm guessing you mean one of the announcement lists. There are
individual project announcement lists and an ASF-wide one. Given this is
a Tomcat list, I'm guessing you are interested in Tomact updates.

Do you want to subscribe this address to the Tomcat announcement list,
the ASF-wide announcement list or something else?

Mark

> 
> -Ursprüngliche Nachricht-
> Von: Mark Thomas [mailto:ma...@apache.org] 
> Gesendet: Freitag, 31. August 2018 11:20
> An: users@tomcat.apache.org
> Betreff: Re: AW:
> 
> On 30/08/18 15:01, Julian Ardoin wrote:
>> Hello,
>>
>> is it possible to Subscribe c6u1d1k1h1o3d...@eurotext.slack.com to the 
>> apache mailing list?
> 
> There is not one Apache mailing list. There are hundreds. Which list(s)
> are you interesting in.
> 
> Mark
> 
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
> 
> 
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
> 


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Re: AW: AW:

[McIntosh, Carolyn (Carol)]

I need to be on the mailing list for security alerts/updates/patches/fixes


Carol McIntosh, SCPM, CSM
Specialist, Infrastructure Engineering
Proud Nationwide Member
Build-Middleware Engineering
W 614-677-7282 | C 614-507-0985 
carol.mcint...@nationwide.com


FORTUNE® and Time Inc. are not affiliated with, and do not endorse the products 
or services of, Nationwide Mutual Insurance Company.

 
 


-Original Message-
From: Mark Thomas [mailto:ma...@apache.org] 
Sent: Friday, August 31, 2018 5:42 AM
To: users@tomcat.apache.org
Subject: [EXTERNAL] Re: AW: AW:

Nationwide Information Security Warning: This is an external email. Do not 
click on links or open attachments unless you trust the sender.
--

On 31/08/18 10:20, Julian Ardoin wrote:
> Oh sorry - The one for Updates! Thanks

Sorry, still not specific enough.

I'm guessing you mean one of the announcement lists. There are individual 
project announcement lists and an ASF-wide one. Given this is a Tomcat list, 
I'm guessing you are interested in Tomact updates.

Do you want to subscribe this address to the Tomcat announcement list, the 
ASF-wide announcement list or something else?

Mark

> 
> -Ursprüngliche Nachricht-
> Von: Mark Thomas [mailto:ma...@apache.org]
> Gesendet: Freitag, 31. August 2018 11:20
> An: users@tomcat.apache.org
> Betreff: Re: AW:
> 
> On 30/08/18 15:01, Julian Ardoin wrote:
>> Hello,
>>
>> is it possible to Subscribe c6u1d1k1h1o3d...@eurotext.slack.com to the 
>> apache mailing list?
> 
> There is not one Apache mailing list. There are hundreds. Which 
> list(s) are you interesting in.
> 
> Mark
> 
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
> 
> 
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
> 


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: AW: AW:

[Mark Thomas]

On 31/08/18 10:20, Julian Ardoin wrote:
> Oh sorry - The one for Updates! Thanks

Sorry, still not specific enough.

I'm guessing you mean one of the announcement lists. There are
individual project announcement lists and an ASF-wide one. Given this is
a Tomcat list, I'm guessing you are interested in Tomact updates.

Do you want to subscribe this address to the Tomcat announcement list,
the ASF-wide announcement list or something else?

Mark

> 
> -Ursprüngliche Nachricht-
> Von: Mark Thomas [mailto:ma...@apache.org] 
> Gesendet: Freitag, 31. August 2018 11:20
> An: users@tomcat.apache.org
> Betreff: Re: AW:
> 
> On 30/08/18 15:01, Julian Ardoin wrote:
>> Hello,
>>
>> is it possible to Subscribe c6u1d1k1h1o3d...@eurotext.slack.com to the 
>> apache mailing list?
> 
> There is not one Apache mailing list. There are hundreds. Which list(s)
> are you interesting in.
> 
> Mark
> 
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
> 
> 
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
> 


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: X-Powered-By show JSP/2.1 not JSP/2.3 for tomcat 8.5.32

[Mark Thomas]

On 31/08/18 08:16, jianjun.guo wrote:
> On tomcat 8.5.32 when turn on xpoweredBy
> The http header X-Powered-By show JSP/2.1 not JSP/2.3.

Please don't hijack threads.

Mark


> 
> 
> 
> 
> 
> 
> --
> ??
> ?? ??
> 11??605??
> ??215000
> ??+86 18860923261
> ??jianjun@dev.bessystem.com
> 
>  
> 
>  
>  
>  
> -- Original --
> From:  "Mark Thomas";
> Date:  Wed, Aug 29, 2018 11:22 PM
> To:  "users"; 
> 
> Subject:  Re: Why move to tomcat9 (UNCLASSIFIED)
> 
>  
> On 29/08/18 15:56, M. Manna wrote:
>> The key benefit is - You get all recent CVE patches which protects your
>> product more from known vulnerabilities.
> 
> Not correct. All currently supported Tomcat versions (7.0.x, 8.5.x and
> 9.0.x) receive security fixes.
> 
>> You can see a comparison table here -
>> http://tomcat.apache.org/whichversion.html
>>
>> I would recommend that you review Servlet, Connector, and Java version
>> related changes carefully (if you have hard dependency on them). it would
>> be better to move to 8.5 first in my opinion, but no harm going to 9.x
>> directly if your product is okay.
> 
> The Tomcat community supports 3 major versions in parallel. Currently
> that is 7.0.x, 8.5.x and 9.0.x. 7.0.x will be the next to reach
> end-of-life - although not for a good while yet. [1]
> 
> Depending on how long your organisation takes to upgrade from one major
> version to another, you might want to start your migration soon. The
> longer this process takes for your organisation, the better off you are
> moving to 9.0.x since it will be supported for longer than 8.5.x.
> 
> Also, see http://tomcat.apache.org/migration.html
> 
> Mark
> 
> [1] https://markmail.org/message/5klk3rtf4mb2aacv
> 
>> Regards,
>>
>> On Wed, 29 Aug 2018 at 15:52, Lueders, Paul T CIV USARMY NGIC (US) <
>> paul.t.lueders@mail.mil> wrote:
>>
>>> CLASSIFICATION: UNCLASSIFIED
>>>
>>> I would like to migrate from tomcat 7.0.90 to the latest version of
>>> tomcat9.  Is there a document that lists the benefits of tomcat9 and the
>>> differences between tomcat7 and tomcat9
>>>
>>> Thanks
>>> Paul
>>> CLASSIFICATION: UNCLASSIFIED
>>>
>>> -
>>> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>>> For additional commands, e-mail: users-h...@tomcat.apache.org
>>>
>>>
>>
> 
> 
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
> 


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

AW: AW:

[Julian Ardoin]

Oh sorry - The one for Updates! Thanks 

-Ursprüngliche Nachricht-
Von: Mark Thomas [mailto:ma...@apache.org] 
Gesendet: Freitag, 31. August 2018 11:20
An: users@tomcat.apache.org
Betreff: Re: AW:

On 30/08/18 15:01, Julian Ardoin wrote:
> Hello,
> 
> is it possible to Subscribe c6u1d1k1h1o3d...@eurotext.slack.com to the apache 
> mailing list?

There is not one Apache mailing list. There are hundreds. Which list(s)
are you interesting in.

Mark

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: AW:

[Mark Thomas]

On 30/08/18 15:01, Julian Ardoin wrote:
> Hello,
> 
> is it possible to Subscribe c6u1d1k1h1o3d...@eurotext.slack.com to the apache 
> mailing list?

There is not one Apache mailing list. There are hundreds. Which list(s)
are you interesting in.

Mark

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

X-Powered-By show JSP/2.1 not JSP/2.3 for tomcat 8.5.32

[jianjun.guo]

On tomcat 8.5.32 when turn on xpoweredBy
The http header X-Powered-By show JSP/2.1 not JSP/2.3.






--
??
?? ??
11??605??
??215000
??+86 18860923261
??jianjun@dev.bessystem.com

 

 
 
 
-- Original --
From:  "Mark Thomas";
Date:  Wed, Aug 29, 2018 11:22 PM
To:  "users"; 

Subject:  Re: Why move to tomcat9 (UNCLASSIFIED)

 
On 29/08/18 15:56, M. Manna wrote:
> The key benefit is - You get all recent CVE patches which protects your
> product more from known vulnerabilities.

Not correct. All currently supported Tomcat versions (7.0.x, 8.5.x and
9.0.x) receive security fixes.

> You can see a comparison table here -
> http://tomcat.apache.org/whichversion.html
> 
> I would recommend that you review Servlet, Connector, and Java version
> related changes carefully (if you have hard dependency on them). it would
> be better to move to 8.5 first in my opinion, but no harm going to 9.x
> directly if your product is okay.

The Tomcat community supports 3 major versions in parallel. Currently
that is 7.0.x, 8.5.x and 9.0.x. 7.0.x will be the next to reach
end-of-life - although not for a good while yet. [1]

Depending on how long your organisation takes to upgrade from one major
version to another, you might want to start your migration soon. The
longer this process takes for your organisation, the better off you are
moving to 9.0.x since it will be supported for longer than 8.5.x.

Also, see http://tomcat.apache.org/migration.html

Mark

[1] https://markmail.org/message/5klk3rtf4mb2aacv

> Regards,
> 
> On Wed, 29 Aug 2018 at 15:52, Lueders, Paul T CIV USARMY NGIC (US) <
> paul.t.lueders@mail.mil> wrote:
> 
>> CLASSIFICATION: UNCLASSIFIED
>>
>> I would like to migrate from tomcat 7.0.90 to the latest version of
>> tomcat9.  Is there a document that lists the benefits of tomcat9 and the
>> differences between tomcat7 and tomcat9
>>
>> Thanks
>> Paul
>> CLASSIFICATION: UNCLASSIFIED
>>
>> -
>> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>> For additional commands, e-mail: users-h...@tomcat.apache.org
>>
>>
> 


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org