TOMCAT CERTIFICATE RENEWAL

[Ganesan, Prabu]

 Hi Guys,

How to renew the certificate in Tomcat Can anyone provide with steps as we have 
Our tomcat certificate is about to expire in Next week, Anybody can help with  
renew steps:

Tomcat version : 8.5.5.0

Thanks & Regards,
_
PrabuGanesan
Consultant|MS-Nordics
capgemini India Pvt. Ltd. | Bangalore 
Contact: +91 8526554535
Email: prabhu.c.gane...@capgemini.com

www.capgemini.com
People matter, results count.
__
Connect with Capgemini:

 
Please consider the environment and do not print this email unless absolutely 
necessary.
Capgemini encourages environmental awareness.

-Original Message-
From: Christopher Schultz  
Sent: Friday, February 16, 2024 8:56 PM
To: users@tomcat.apache.org
Subject: Re: Tomcat/Java starts using too much memory and not by the heap or 
non-heap memory

**This mail has been sent from an external source. Do not reply to it, or 
open any links/attachments unless you are sure of the sender's identity.**

Chuck and Brian,

On 2/15/24 10:53, Chuck Caldarale wrote:
> 
>> On Feb 15, 2024, at 09:04, Brian Braun  wrote:
>>
>> I discovered the JCMD command to perform the native memory tracking. 
>> When running it, after 3-4 days since I started Tomcat, I found out 
>> that the compiler was using hundreds of MB and that is exactly why 
>> the Tomcat process starts abusing the memory! This is what I saw when 
>> executing "sudo jcmd  VM.native_memory scale=MB":
>>
>> Compiler (reserved=3D340MB, commited=3D340MB) (arena=3D340MB #10)
>>
>> Then I discovered the Jemalloc tool (http://jemalloc.net 
>> ) and its jeprof tool, so I started launching 
>> Tomcat using it. Then, after 3-4 days after Tomcat starts I was able 
>> to create some GIF images from the dumps that Jemalloc creates. The 
>> GIF files show the problem: 75-90% of the memory is being used by 
>> some weird activity in the compiler! It seems that something called 
>> "The C2 compile/JIT compiler" starts doing something after 3-4 days, and 
>> that creates the leak. Why after 3-4 days and not sooner? I don't know.
> 
> 
> There have been numerous bugs filed with OpenJDK for C2 memory leaks over the 
> past few years, mostly related to recompiling certain methods. The C2 
> compiler kicks in when fully optimizing methods, and it may recompile methods 
> after internal instrumentation shows that additional performance can be 
> obtained by doing so.
> 
> 
>> I am attaching the GIF in this email.
> 
> 
> Attachments are stripped on this mailing list.

:(

I'd love to see these.

>> Does anybody know how to deal with this?
> 
> 
> You could disable the C2 compiler temporarily, and just let C1 handle your 
> code. Performance will be somewhat degraded, but may well still be 
> acceptable. Add the following to the JVM options when you launch Tomcat:
> 
> -XX:TieredStopAtLevel=1
> 
> 
>> By the way, I'm running my website using Tomcat 9.0.58, Java 
>> "11.0.21+9-post-Ubuntu-0ubuntu122.04", Ubuntu 22.04.03. And I am 
>> developing using Eclipse and compiling my WAR file with a "Compiler 
>> compliance level:11".
> 
> 
> You could try a more recent JVM version; JDK 11 was first released over 5 
> years ago, although it is still being maintained.

There is an 11.0.22 -- just a patch-release away from what you appear to have. 
I'm not sure if it's offered through your package-manager, but you could give 
it a try directly from e.g. Eclipse Adoptium / Temurin.

Honestly, if your code runs on Java 11, it's very likely that it will run just 
fine on Java 17 or Java 21. Debian has packages for Java 17 for sure, so I 
suspect Ubuntu will have them available as well.

Debian-based distros will allow you to install and run multiple JDKs/JREs in 
parallel, so you can install Java 17 (or 21) without cutting-off access to Java 
11 if you still want it.

-chris

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

This message contains information that may be privileged or confidential and is 
the property of the Capgemini Group. It is intended only for the person to whom 
it is addressed. If you are not the intended recipient, you are not authorized 
to read, print, retain, copy, disseminate, distribute, or use this message or 
any part thereof. If you receive this message in error, please notify the 
sender immediately and delete all copies of this message.

TOMCAT CERTIFICATE RENEWAL

[Ganesan, Prabu]

 Hi Guys,

 How to renew the certificate in Tomcat Can anyone provide with steps as we 
have Our tomcat certificate is about to expire in Next week, Anybody can help 
with  renew steps:

 Tomcat version : 8.5.5.0
Thanks & Regards,
_[Email_CBE.gif]
PrabuGanesan
Consultant|MS-Nordics
capgemini India Pvt. Ltd. | Bangalore
Contact: +91 8526554535
Email: prabhu.c.gane...@capgemini.com

www.capgemini.com
People matter, results count.
__
Connect with Capgemini:
[cid:image002.gif@01DA6330.47AD4A10][cid:image003.gif@01DA6330.47AD4A10][cid:image004.gif@01DA6330.47AD4A10][cid:image005.gif@01DA6330.47AD4A10][cid:image006.gif@01DA6330.47AD4A10][cid:image007.gif@01DA6330.47AD4A10]

Please consider the environment and do not print this email unless absolutely 
necessary.
Capgemini encourages environmental awareness.

This message contains information that may be privileged or confidential and is 
the property of the Capgemini Group. It is intended only for the person to whom 
it is addressed. If you are not the intended recipient, you are not authorized 
to read, print, retain, copy, disseminate, distribute, or use this message or 
any part thereof. If you receive this message in error, please notify the 
sender immediately and delete all copies of this message.

AW: TOMCAT CERTIFICATE RENEWAL

[Thomas Hoffmann (Speed4Trade GmbH)]

Hello Ganesan,

> Von: Ganesan, Prabu  
> Gesendet: Montag, 19. Februar 2024 08:07
> An: Tomcat Users List 
> Betreff: TOMCAT CERTIFICATE RENEWAL
> Priorität: Hoch
>
> Hi Guys,
> How to renew the certificate in Tomcat Can anyone provide with steps as we 
>have Our tomcat certificate is about to expire in Next week, Anybody can help 
>with  renew steps:
> Tomcat version : 8.5.5.0
> Thanks & Regards,
> _
> PrabuGanesan
> Consultant|MS-Nordics
> capgemini India Pvt. Ltd. | Bangalore 
> Contact: +91 8526554535

Take a look at the server.xml and inspect the https connector.
There should be a reference to the key file and certificate-file.
Depending on the used format (pem, jks etc) you need to update these files.

Greetings,
Thomas

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: TOMCAT CERTIFICATE RENEWAL

[Ganesan, Prabu]

Hi  Tomas 

Thanks for your information - its jks file do we have any specific command to 
pass them for renew the certificate?

Thanks & Regards,
_
PrabuGanesan
Consultant|MS-Nordics
capgemini India Pvt. Ltd. | Bangalore 
Contact: +91 8526554535
Email: prabhu.c.gane...@capgemini.com

www.capgemini.com
People matter, results count.
__
Connect with Capgemini:

 
Please consider the environment and do not print this email unless absolutely 
necessary.
Capgemini encourages environmental awareness.

-Original Message-
From: Thomas Hoffmann (Speed4Trade GmbH) 
 
Sent: Monday, February 19, 2024 12:49 PM
To: Tomcat Users List 
Subject: AW: TOMCAT CERTIFICATE RENEWAL

**This mail has been sent from an external source. Do not reply to it, or 
open any links/attachments unless you are sure of the sender's identity.**

Hello Ganesan,

> Von: Ganesan, Prabu  
> Gesendet: Montag, 19. Februar 2024 08:07
> An: Tomcat Users List 
> Betreff: TOMCAT CERTIFICATE RENEWAL
> Priorität: Hoch
>
> Hi Guys,
> How to renew the certificate in Tomcat Can anyone provide with steps as we 
>have Our tomcat certificate is about to expire in Next week, Anybody can help 
>with  renew steps:
> Tomcat version : 8.5.5.0
> Thanks & Regards,
> _
> PrabuGanesan
> Consultant|MS-Nordics
> capgemini India Pvt. Ltd. | Bangalore 
> Contact: +91 8526554535

Take a look at the server.xml and inspect the https connector.
There should be a reference to the key file and certificate-file.
Depending on the used format (pem, jks etc) you need to update these files.

Greetings,
Thomas

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


This message contains information that may be privileged or confidential and is 
the property of the Capgemini Group. It is intended only for the person to whom 
it is addressed. If you are not the intended recipient, you are not authorized 
to read, print, retain, copy, disseminate, distribute, or use this message or 
any part thereof. If you receive this message in error, please notify the 
sender immediately and delete all copies of this message.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org