Re: Vulnerabilities Patches
Nithiyanandam, On 11/8/23 22:06, Nithiyanandam BALASUBRAMANIYAN (Oneberry) wrote: I want to upgrade form 8.5.94 to 8.5.95. is it the easiest way to upgrade ? like I seen the jar file copy from old version to new version. Sorry I am new to apache I would highly recommend against simply copying "the JARs". You may sometimes be able to get away with that, but it's best to leave Tomcat's installation directory untouched to make sure you have all the resources Tomcat is expecting to find there. -chris -Original Message- From: Christopher Schultz Sent: Thursday, November 9, 2023 4:34 AM To: users@tomcat.apache.org Subject: Re: Vulnerabilities Patches All, On 11/6/23 20:32, James H. H. Lampert wrote: On 11/6/23 5:21 PM, Nithiyanandam BALASUBRAMANIYAN (Oneberry) wrote: I am using Tomcat Apache Version 8.5.94 in Windows server 2012. Recently received following vulnerabilities alert to fix : Short answer: you're already there. And the latest Tomcat 8 (which I just bumped a customer up to) is 8.5.95. On an IBM Midrange box, I just manually copy the keystore, our webapps, and certain configuration settings over from the old version to the new version, then find a good time to switch the customer over (which involves shutting down the old Tomcat, renaming the old and new Tomcat directories, and restarting it with the new version in place. Piece of cake. I understand that Linux, WinDoze, and Mac have ways to bump up the Tomcat version that are even easier. https://tomcat.apache.org/presentations.html#latest-split-installation -chris - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Testing OpenSSL integration using the FFM API with Tomcat 11 on Windows 10
Hi, I wanted to test the OpenSSL integration using the FFM API rather than Tomcat Native in Apache Tomcat 11.0.0-M14. Starting Tomcat is printing an error: Failed to initialize the SSLEngine. java.lang.UnsatisfiedLinkError: no ssl in java.library.path I am running on Windows 10 with openjdk-22-ea+22. Tomcat downloaded from https://dist.apache.org/repos/dist/dev/tomcat/tomcat-11/v11.0.0-M14/bin/apache-tomcat-11.0.0-M14-windows-x64.zip Is there additional steps/configurations required? Configuration: Logs: 09-Nov-2023 17:57:33.451 SEVERE [main] org.apache.catalina.core.OpenSSLLifecycleListener.lifecycleEvent Failed to initialize the SSLEngine. java.lang.UnsatisfiedLinkError: no ssl in java.library.path: C:\apps\JDK\openjdk-22-ea+22_windows-x64_bin\jdk-22\bin;;. at java.base/java.lang.ClassLoader.loadLibrary(ClassLoader.java:2439) at java.base/java.lang.Runtime.loadLibrary0(Runtime.java:916) at java.base/java.lang.System.loadLibrary(System.java:2063) at org.apache.tomcat.util.openssl.RuntimeHelper.(RuntimeHelper.java:60) at org.apache.tomcat.util.openssl.openssl_h.(openssl_h.java:36) at org.apache.tomcat.util.net.openssl.panama.OpenSSLLibrary.initLibrary(OpenSSLLibrary.java:84) at org.apache.tomcat.util.net.openssl.panama.OpenSSLLibrary.init(OpenSSLLibrary.java:177) at java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:103) at java.base/java.lang.reflect.Method.invoke(Method.java:580) at org.apache.catalina.core.OpenSSLLifecycleListener.lifecycleEvent(OpenSSLLifecycleListener.java:99) at org.apache.catalina.util.LifecycleBase.fireLifecycleEvent(LifecycleBase.java:114) at org.apache.catalina.util.LifecycleBase.setStateInternal(LifecycleBase.java:402) at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:126) at org.apache.catalina.startup.Catalina.load(Catalina.java:745) at org.apache.catalina.startup.Catalina.load(Catalina.java:767) at java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:103) at java.base/java.lang.reflect.Method.invoke(Method.java:580) at org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:304) at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:474) 09-Nov-2023 17:57:33.452 INFO [main] org.apache.catalina.core.OpenSSLLifecycleListener.lifecycleEvent Failed shutdown of OpenSSL Eduardo Quintanilla
Re: Testing OpenSSL integration using the FFM API with Tomcat 11 on Windows 10
On 10/11/2023 00:59, Eduardo Guadalupe wrote: Hi, I wanted to test the OpenSSL integration using the FFM API rather than Tomcat Native in Apache Tomcat 11.0.0-M14. Starting Tomcat is printing an error: Failed to initialize the SSLEngine. java.lang.UnsatisfiedLinkError: no ssl in java.library.path I am running on Windows 10 with openjdk-22-ea+22. Tomcat downloaded from https://dist.apache.org/repos/dist/dev/tomcat/tomcat-11/v11.0.0-M14/bin/apache-tomcat-11.0.0-M14-windows-x64.zip Is there additional steps/configurations required? Which OpenSSL binary did you install and where did you install it? Mark - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
