[prev in list] [next in list] [prev in thread] [next in thread]
List: tomcat-user
Subject: Re: [OT] Tomcat Apache 7.0.79 upgrade to Latest version
From: John Dale <jcdwrrc () gmail ! com>
Date: 2019-02-22 13:22:19
Message-ID: CAN9Wfx0Y-2=Pkz001axgB9qf_0g82rCRge0CuX87pAh3dvCaog () mail ! gmail ! com
[Download RAW message or body]
Your call. Not sure on the video .. your applications and particular
configuration will have bearing on the accuracy of the video. The
ability to revert if it doesn't work will be key. Don't be afraid to
take a deep breath and review the migration guides carefully.
I'll try to check some email Saturday morning in case there is
something specific I can help out with.
Good luck and again .. welcome to Tomcat,
John
On 2/21/19, Nitin Kadam <nitinkadam1982@gmail.com> wrote:
> Hello ,
>
> Thanks for the reply.
> Yes having the plan to remediate same on weekend, ALready informed them
> about Challenges of upgrading and impact of any failure.
>
> Current vulnerability CVE detected in 7.0.79 is showing is taken care in
> 7.0.91 tomcat version So thinking of upgrading to the same family
> version, Which I am thinking will be easier than upgrading to the latest
> version.
>
> Found below Link from Youtube and will be performing same, Please let know
> your thoughts on same.
>
> https://www.youtube.com/watch?v=Jvum4TsTnAQ
>
>
>
>
>
> On Thu, Feb 21, 2019 at 6:30 PM John Dale <jcdwrrc@gmail.com> wrote:
>
>> Are you going to try to do this on Friday night? You might forward
>> some of our comments to your security team if they want you to change
>> a tire on a moving vehicle .. it's possible, but not the best
>> practice.
>>
>> Does your security team have the ability to allocate some more
>> computing resources to your project?
>>
>> On 2/21/19, Nitin Kadam <nitinkadam1982@gmail.com> wrote:
>> > FOr backup - I will be taking Snapshot backup before doing the upgrade
>> but
>> > also going to take folder backup from C: programme Files /Apache Tomcat
>> > folder.
>> >
>> > I am continuously getting emails from the internal security team for
>> > upgrading the version 7.0.79 to the latest version
>> > need to figure out this ASAP
>> >
>> > Apps are hosted in Web apps folders and there are few D3 apps
>> > which connected with SQL for database
>> >
>> >
>> >
>> >
>> > On Wed, Feb 20, 2019 at 9:45 PM John Dale <jcdwrrc@gmail.com> wrote:
>> >
>> >> Without all of those early adopters to take the flack, we'd never know
>> >> where the enemy bases are .. or something like that. ;)
>> >>
>> >> I'm just very glad we have OpenJDK and that my code is very simple.
>> >>
>> >> Java 12 .. Uff da!
>> >>
>> >>
>> >>
>> >> On 2/20/19, Christopher Schultz <chris@christopherschultz.net> wrote:
>> >> > -----BEGIN PGP SIGNED MESSAGE-----
>> >> > Hash: SHA256
>> >> >
>> >> > John,
>> >> >
>> >> > On 2/20/19 10:58, John Dale wrote:
>> >> >> Points taken .. I have a great deal from my cloud provider on a
>> >> >> wheezy instance, so I have to see if I can negotiate to keep my
>> >> >> rate. I do a lot of custom MVC and security checks so things are
>> >> >> nice and tight and I haven't been hacked even though I get several
>> >> >> thousand attempts a day mostly from China and Iran. I'm also
>> >> >> kicking around whether to use James or keep using postfix for
>> >> >> email. With an upgrade to Java 8 I can use the latest james
>> >> >> release so I'll look into that.
>> >> >>
>> >> >> I've been struggling to find a nice block of time for a full
>> >> >> regression test. It's funny .. I was working for a bank a couple
>> >> >> of years back that was still on Java 1.6 and that's the way they
>> >> >> liked it. :)
>> >> >>
>> >> >> Did you see the road map for Java 10? Seems like we're moving a
>> >> >> little too fast sometimes ..
>> >> >
>> >> > Java 10's dead, baby.
>> >> >
>> >> > Java 11 will be a long-term-service release. Java 12 is already
>> >> > available for pre-release.
>> >> >
>> >> > The biggest step is from 8 -> 9/10/11. Once you are over that, it
>> >> > will
>> >> > be much better for everyone.
>> >> >
>> >> > I don't want to have to wait 10 years to get new stuff like TLS 1.3
>> >> > support or the forthcoming HTTP/3, so I'm happy with the shorter
>> >> > development cycles Oracle has switched-over to.
>> >> >
>> >> > - -chris
>> >> >
>> >> >> On 2/20/19, Christopher Schultz <chris@christopherschultz.net>
>> >> >> wrote: John,
>> >> >>
>> >> >> On 2/20/19 09:11, John Dale wrote:
>> >> >>>>> I'm thinking about migrating to 8 soon myself. Maybe I'll
>> >> >>>>> use this as an opportunity to get started on that .. but I
>> >> >>>>> think the last time I checked, OpenJDK 7 was supported on
>> >> >>>>> Wheezy, so I'm thinking I have more to do than just upgrade
>> >> >>>>> tomcat in my scenario.
>> >> >>
>> >> >> Yes. Wheezy is essentially unsupported and I would drop everything
>> >> >> and upgrade to at least Jessie like right now if I were you.
>> >> >> Stretch isn't much more work and you'll be good for a few years on
>> >> >> that.
>> >> >>
>> >> >> Stretch has OpenJDK 8 packages. Current version is 1.8.0_181.
>> >> >>
>> >> >> Jessie looks like it only has OpenJDK 7 packages. I didn't check
>> >> >> the backports.
>> >> >>
>> >> >>>>> I'll need to update linux, Java, tomcat, then finally my
>> >> >>>>> apps. But I'm pretty CDO (that's like OCD, but alphabetical)
>> >> >>>>> about the platform independence of my apps, so that's going
>> >> >>>>> to be straightforward.
>> >> >> Make sure you don't waste time upgrading from Tomcat 7 to Tomcat 8.
>> >> >> Go directly to Tomcat 8.5, since 8.0 is no longer supported.
>> >> >>
>> >> >> -chris
>> >> >>
>> >> >>>>> On 2/20/19, Nitin Kadam <nitinkadam1982@gmail.com> wrote:
>> >> >>>>>> Thanks John for reply..
>> >> >>>>>>
>> >> >>>>>> is there any documentation walkthrough for this upgrade
>> >> >>>>>> available? i am new to Tomcat and doing this 1st time, It
>> >> >>>>>> will be great help if anyone provide same.
>> >> >>>>>>
>> >> >>>>>> On Wed, Feb 20, 2019 at 6:49 PM Olaf Kock
>> >> >>>>>> <tomcat@olafkock.de> wrote:
>> >> >>>>>>
>> >> >>>>>>>
>> >> >>>>>>> On 20.02.19 13:57, Nitin Kadam wrote:
>> >> >>>>>>>> Hello Team,
>> >> >>>>>>>>
>> >> >>>>>>>> Can you please guide how we can migrate seamlessly
>> >> >>>>>>>> from Tomcat apache 7.0.79 to 7.0.92 or any latest
>> >> >>>>>>>> version that 8.x or 9.x ( Windows 2012 R2 server)escr
>> >> >>>>>>>
>> >> >>>>>>> 7.0 to 8.0: https://tomcat.apache.org/migration-8.html
>> >> >>>>>>>
>> >> >>>>>>> 8.0 to 8.5: https://tomcat.apache.org/migration-85.html
>> >> >>>>>>>
>> >> >>>>>>> 8.x to 9.0: https://tomcat.apache.org/migration-9.html
>> >> >>>>>>>
>> >> >>>>>>>> the current environment is configured with SSL
>> >> >>>>>>>> certificate ( SSL 443)
>> >> >>>>>>> .jks
>> >> >>>>>>>> store and needs to upgrade same due to security
>> >> >>>>>>>> vulnerability detected by Qualys scanner.
>> >> >>>>>>>
>> >> >>>>>>> The documents have TLS documentation chapters. If you run
>> >> >>>>>>> into specific problems, describe them here.
>> >> >>>>>>>
>> >> >>>>>>> Olaf
>> >> >>>>>>>
>> >> >>>>>>>
>> >> >>>>>>>
>> -----------------------------------------------------------------
>> >> > - ---
>> >> >>
>> >> >>>>>>>
>> >> > - -
>> >> >>>>>>>
>> >> >>>>>>>
>> >> >> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
>> >> >>>>>>> For additional commands, e-mail:
>> >> >>>>>>> users-help@tomcat.apache.org
>> >> >>>>>>>
>> >> >>>>>>>
>> >> >>>>>>
>> >> >>>>>> -- Regards Nitin Kadam (9967688959)
>> >> >>>>>>
>> >> >>>>>
>> >> >>>>>
>> -------------------------------------------------------------------
>> >> > - --
>> >> >>>>>
>> >> >>>>>
>> >> >>
>> >> >>>>>
>> >> > To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
>> >> >>>>> For additional commands, e-mail:
>> >> >>>>> users-help@tomcat.apache.org
>> >> >>>>>
>> >> >>>
>> >> >>>
>> ---------------------------------------------------------------------
>> >> >>>
>> >> >>>
>> >> > To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
>> >> >>> For additional commands, e-mail: users-help@tomcat.apache.org
>> >> >>>
>> >> >>>
>> >> >>
>> >> >> ---------------------------------------------------------------------
>> >> >>
>> >> >>
>> >> > To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
>> >> >> For additional commands, e-mail: users-help@tomcat.apache.org
>> >> >>
>> >> > -----BEGIN PGP SIGNATURE-----
>> >> > Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/
>> >> >
>> >> > iQIzBAEBCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAlxtfBwACgkQHPApP6U8
>> >> > pFj9NQ//R4TxxfPFCtzZzPhRJqtka6A9MSQ7wfoqvZcVD+Wde/WquelT47lZySam
>> >> > LqyMwKo3/IN7HUCwYBI6zm7JHPJYHrYv7FU+xH8TgpeSNCmxqKY0CPRQbKEPxY+T
>> >> > CYiikk/9YFIpKA7QWBMpGO0Fs3/dKX2dwlrC9Bx7gllz5nzG6Vq0SWILOPt7FsEt
>> >> > cxHpMP9PrAvLOWdeU7CNSk9Mdj2P+ed8ABvQ7WecvMY+gyObkW7OcBo/enuUYbFv
>> >> > zIPHIsMlDrgsIyU+NSvxuOfjnZGgGzeCL1KeKdqkcykUq1/bODC8ThtRhF2fQ6Rx
>> >> > /jxgY0L5ycbWxVqZg0eToW680yaspbW5UbfaWbu/XxWPRPXZwlwrtqsEYSBf0wfV
>> >> > RUbuGwPpBqvOG2dK4meAy6haHwG6fuD3+ko9U522ok313QoqmhCLCepnDDMlHPvL
>> >> > WlBt/zyqsX1K0hej+upNuAsqRPdZdAf2wUbIwPr2WmiFeA3TUaIlrRffYOolK4Sk
>> >> > ukTHWQ4kasQzbmQu2gCGvp6G9loPiEWfyjO7vWZqUBTuQhnWoStZwDOxLa35w1y3
>> >> > 9XYmzNagl0Y4ndSpFg7Vg8h6mdZrWGUW8z5iFRoPkgxvkUk4v+nnxRCRtYI2hcBp
>> >> > m7hRMtB6LA7vFcadySybEqyJvHuZBBvXCbF1nV9n05RerrUdeW8=
>> >> > =neVF
>> >> > -----END PGP SIGNATURE-----
>> >> >
>> >> > ---------------------------------------------------------------------
>> >> > To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
>> >> > For additional commands, e-mail: users-help@tomcat.apache.org
>> >> >
>> >> >
>> >>
>> >> ---------------------------------------------------------------------
>> >> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
>> >> For additional commands, e-mail: users-help@tomcat.apache.org
>> >>
>> >>
>> >
>> > --
>> > Regards
>> > Nitin Kadam
>> > (9967688959)
>> >
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
>> For additional commands, e-mail: users-help@tomcat.apache.org
>>
>>
>
> --
> Regards
> Nitin Kadam
> (9967688959)
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic