-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Tobias,
On 6/1/17 3:53 AM, Tobias Soloschenko wrote: > a long time ago I tried out to install Apache Tomcat with HTTP/2 > support on macOS. I finally got a short time window to complete a > developer quickstart guide for that: Wouldn't this all be a lot easier if you used the NIO connector instead of APR? No XCode/OpenSSL/tcnative necessary. > 1. Download XCode from the AppStore > > > 2. Install Brew: http://brew.sh/ > > > 3. Download Apache Tomcat binaries > 8.5 http://tomcat.apache.org/ > > > 4. Install APR and OPENSSL with “brew install openssl” and “brew > install apr” > > > 5. Create pem files in “apache-tomcat-8.5.15/conf” folder - use > “changeit” every time a password is going to be requested (The > commands can be executed separately or within a shell script): > > /usr/local/Cellar/openssl/1.0.2l/bin/openssl genrsa -des3 -out > localhost-rsa-key 1024 > > /usr/local/Cellar/openssl/1.0.2l/bin/openssl genrsa -out > localhost-key 1024 > > /usr/local/Cellar/openssl/1.0.2l/bin/openssl rsa -in > localhost-rsa-key -out localhost-key > > /usr/local/Cellar/openssl/1.0.2l/bin/openssl req -new -key > localhost-key -out localhost-csr > > /usr/local/Cellar/openssl/1.0.2l/bin/openssl x509 -req -days 365 > -in localhost-csr -signkey localhost-key -out localhost-crt > > cat localhost-key localhost-crt > localhost-rsa-cert.pem > > cat localhost-rsa-cert.pem > localhost-rsa-chain.pem > > cat localhost-rsa-key > localhost-rsa-key-mod.pem > > /usr/local/Cellar/openssl/1.0.2l/bin/openssl rsa -in > localhost-rsa-key-mod.pem -out localhost-rsa-key.pem > > > 6. Uncomment the http/2 connector with protocol > “org.apache.coyote.http11.Http11AprProtocol” in the > "apache-tomcat-8.5.15/conf/server.xml" > > > 7. Tomcat native installation > > Extract “apache-tomcat-8.5.15/bin/tomcat-native.tar.gz” > > Go into folder > “apache-tomcat-8.5.15/bin/tomcat-native-1.2.12-src/native” > > Run “./configure --with-apr=/usr/local/Cellar/apr/1.5.2_3/ > --with-ssl=/usr/local/Cellar/openssl/1.0.2l” > > Run “make” > > > 8. Create a setenv.sh file within the <tomcat>/bin folder and add > lines: > > LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/usr/local/Cellar/apr/1.5.2_3/libexec /lib:/Applications/apache-tomcat-8.5.15/bin/tomcat-native-1.2.12-src/nat ive/.libs > > > JAVA_OPTS="-Djava.library.path=/usr/local/Cellar/apr/1.5.2_3/libexec/l ib:/Applications/apache-tomcat-8.5.15/bin/tomcat-native-1.2.12-src/nativ e/.libs" > > > > 9. Start Server > > > * Note1: The paths might be adjusted according to the version of > openssl / apr / tomcat-native / tomcat version > > > Logs: > > 01-Jun-2017 09:32:46.551 INFO [main] > org.apache.catalina.core.AprLifecycleListener.lifecycleEvent Loaded > APR based Apache Tomcat Native library [1.2.12] using APR version > [1.5.2]. > > 01-Jun-2017 09:32:46.551 INFO [main] > org.apache.catalina.core.AprLifecycleListener.lifecycleEvent APR > capabilities: IPv6 [true], sendfile [true], accept filters [false], > random [true]. > > 01-Jun-2017 09:32:46.551 INFO [main] > org.apache.catalina.core.AprLifecycleListener.lifecycleEvent > APR/OpenSSL configuration: useAprConnector [false], useOpenSSL > [true] > > 01-Jun-2017 09:32:46.556 INFO [main] > org.apache.catalina.core.AprLifecycleListener.initializeSSL > OpenSSL successfully initialized [OpenSSL 1.0.2l 25 May 2017] > > > My question regarding this guide: Is there anything which might be > changed or is bad practice? Everything looks good to me. Whenever I try to build tcnative on my Mac, I find that XCode has broken some kind of symlink somewhere that I need to correct in order to use clang from the CLI. Some notes about how to work-around that would be good. - -chris -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBCAAGBQJZMCXKAAoJEBzwKT+lPKRY7x8P/jvES/2Z5MZOWcq2mHabGkxu PDPoi9X+gdWet/ucMToyuI0gHoJe9s51RsqWRn5T4jW+XuOmjgKEpgTM2+qbDwpB q3T/ZFWL31YMFwJ3YFOD6MZzQ89MqfK8pLvJ7pIzXjYLWL+8gaAfBXAwg7lmdLr/ TM5fnl5lwzEw9sTdkNZ+o1bIjbs4PkpxKP7X3vZylnwRVKrP/5q3NQirBiXuG/Dn RMlhjAfepog24L/Wja/DAQVgq4EjHfh9KvxytN1WHO7o9x6d9seBCm5PtR+6If3B GxvGSfd47AcbA/T2nUnSAPLrGQheUCWw31StFvsNY1n2z6/6iISabRzxHLL3JPf4 7Qr92AKt9FVFDlzfHlzYWp+zoRcDX+ApjFUUpeMsp/+ZFDzXbZ/0zRu6J+wnDvMF CYRVkv42ct9wXJjEk2WYUint9Hn2xj5BLGMIRk0xFBohFLHMb6eYDeKoAoWGUG/L T4HSt7cfW2NWV84TdewfIN2u2fr9Hkpm8QohB0FcFHJ8LSRUXHcdtFRuE25XBnum RyQkkpKpaBEsVdZ17EBEX1Kh29Apa7HgpeJ7KCiLHoGkf+OUmYnr3Qm9Tv6zdRWo jousTeghGf0/nolys0/+zLkR/lDtjB19r/H2hav7dP7NGxaCio2V2CyWqLwyOcMu QkfKDlXIohfm3W9L+m1E =X9UM -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
