Are you going to try to do this on Friday night? You might forward some of our comments to your security team if they want you to change a tire on a moving vehicle .. it's possible, but not the best practice.
Does your security team have the ability to allocate some more computing resources to your project? On 2/21/19, Nitin Kadam <nitinkadam1...@gmail.com> wrote: > FOr backup - I will be taking Snapshot backup before doing the upgrade but > also going to take folder backup from C: programme Files /Apache Tomcat > folder. > > I am continuously getting emails from the internal security team for > upgrading the version 7.0.79 to the latest version > need to figure out this ASAP > > Apps are hosted in Web apps folders and there are few D3 apps > which connected with SQL for database > > > > > On Wed, Feb 20, 2019 at 9:45 PM John Dale <jcdw...@gmail.com> wrote: > >> Without all of those early adopters to take the flack, we'd never know >> where the enemy bases are .. or something like that. ;) >> >> I'm just very glad we have OpenJDK and that my code is very simple. >> >> Java 12 .. Uff da! >> >> >> >> On 2/20/19, Christopher Schultz <ch...@christopherschultz.net> wrote: >> > -----BEGIN PGP SIGNED MESSAGE----- >> > Hash: SHA256 >> > >> > John, >> > >> > On 2/20/19 10:58, John Dale wrote: >> >> Points taken .. I have a great deal from my cloud provider on a >> >> wheezy instance, so I have to see if I can negotiate to keep my >> >> rate. I do a lot of custom MVC and security checks so things are >> >> nice and tight and I haven't been hacked even though I get several >> >> thousand attempts a day mostly from China and Iran. I'm also >> >> kicking around whether to use James or keep using postfix for >> >> email. With an upgrade to Java 8 I can use the latest james >> >> release so I'll look into that. >> >> >> >> I've been struggling to find a nice block of time for a full >> >> regression test. It's funny .. I was working for a bank a couple >> >> of years back that was still on Java 1.6 and that's the way they >> >> liked it. :) >> >> >> >> Did you see the road map for Java 10? Seems like we're moving a >> >> little too fast sometimes .. >> > >> > Java 10's dead, baby. >> > >> > Java 11 will be a long-term-service release. Java 12 is already >> > available for pre-release. >> > >> > The biggest step is from 8 -> 9/10/11. Once you are over that, it will >> > be much better for everyone. >> > >> > I don't want to have to wait 10 years to get new stuff like TLS 1.3 >> > support or the forthcoming HTTP/3, so I'm happy with the shorter >> > development cycles Oracle has switched-over to. >> > >> > - -chris >> > >> >> On 2/20/19, Christopher Schultz <ch...@christopherschultz.net> >> >> wrote: John, >> >> >> >> On 2/20/19 09:11, John Dale wrote: >> >>>>> I'm thinking about migrating to 8 soon myself. Maybe I'll >> >>>>> use this as an opportunity to get started on that .. but I >> >>>>> think the last time I checked, OpenJDK 7 was supported on >> >>>>> Wheezy, so I'm thinking I have more to do than just upgrade >> >>>>> tomcat in my scenario. >> >> >> >> Yes. Wheezy is essentially unsupported and I would drop everything >> >> and upgrade to at least Jessie like right now if I were you. >> >> Stretch isn't much more work and you'll be good for a few years on >> >> that. >> >> >> >> Stretch has OpenJDK 8 packages. Current version is 1.8.0_181. >> >> >> >> Jessie looks like it only has OpenJDK 7 packages. I didn't check >> >> the backports. >> >> >> >>>>> I'll need to update linux, Java, tomcat, then finally my >> >>>>> apps. But I'm pretty CDO (that's like OCD, but alphabetical) >> >>>>> about the platform independence of my apps, so that's going >> >>>>> to be straightforward. >> >> Make sure you don't waste time upgrading from Tomcat 7 to Tomcat 8. >> >> Go directly to Tomcat 8.5, since 8.0 is no longer supported. >> >> >> >> -chris >> >> >> >>>>> On 2/20/19, Nitin Kadam <nitinkadam1...@gmail.com> wrote: >> >>>>>> Thanks John for reply.. >> >>>>>> >> >>>>>> is there any documentation walkthrough for this upgrade >> >>>>>> available? i am new to Tomcat and doing this 1st time, It >> >>>>>> will be great help if anyone provide same. >> >>>>>> >> >>>>>> On Wed, Feb 20, 2019 at 6:49 PM Olaf Kock >> >>>>>> <tom...@olafkock.de> wrote: >> >>>>>> >> >>>>>>> >> >>>>>>> On 20.02.19 13:57, Nitin Kadam wrote: >> >>>>>>>> Hello Team, >> >>>>>>>> >> >>>>>>>> Can you please guide how we can migrate seamlessly >> >>>>>>>> from Tomcat apache 7.0.79 to 7.0.92 or any latest >> >>>>>>>> version that 8.x or 9.x ( Windows 2012 R2 server)escr >> >>>>>>> >> >>>>>>> 7.0 to 8.0: https://tomcat.apache.org/migration-8.html >> >>>>>>> >> >>>>>>> 8.0 to 8.5: https://tomcat.apache.org/migration-85.html >> >>>>>>> >> >>>>>>> 8.x to 9.0: https://tomcat.apache.org/migration-9.html >> >>>>>>> >> >>>>>>>> the current environment is configured with SSL >> >>>>>>>> certificate ( SSL 443) >> >>>>>>> .jks >> >>>>>>>> store and needs to upgrade same due to security >> >>>>>>>> vulnerability detected by Qualys scanner. >> >>>>>>> >> >>>>>>> The documents have TLS documentation chapters. If you run >> >>>>>>> into specific problems, describe them here. >> >>>>>>> >> >>>>>>> Olaf >> >>>>>>> >> >>>>>>> >> >>>>>>> ----------------------------------------------------------------- >> > - --- >> >> >> >>>>>>> >> > - - >> >>>>>>> >> >>>>>>> >> >> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org >> >>>>>>> For additional commands, e-mail: >> >>>>>>> users-h...@tomcat.apache.org >> >>>>>>> >> >>>>>>> >> >>>>>> >> >>>>>> -- Regards Nitin Kadam (9967688959) >> >>>>>> >> >>>>> >> >>>>> ------------------------------------------------------------------- >> > - -- >> >>>>> >> >>>>> >> >> >> >>>>> >> > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org >> >>>>> For additional commands, e-mail: >> >>>>> users-h...@tomcat.apache.org >> >>>>> >> >>> >> >>> --------------------------------------------------------------------- >> >>> >> >>> >> > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org >> >>> For additional commands, e-mail: users-h...@tomcat.apache.org >> >>> >> >>> >> >> >> >> --------------------------------------------------------------------- >> >> >> >> >> > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org >> >> For additional commands, e-mail: users-h...@tomcat.apache.org >> >> >> > -----BEGIN PGP SIGNATURE----- >> > Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/ >> > >> > iQIzBAEBCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAlxtfBwACgkQHPApP6U8 >> > pFj9NQ//R4TxxfPFCtzZzPhRJqtka6A9MSQ7wfoqvZcVD+Wde/WquelT47lZySam >> > LqyMwKo3/IN7HUCwYBI6zm7JHPJYHrYv7FU+xH8TgpeSNCmxqKY0CPRQbKEPxY+T >> > CYiikk/9YFIpKA7QWBMpGO0Fs3/dKX2dwlrC9Bx7gllz5nzG6Vq0SWILOPt7FsEt >> > cxHpMP9PrAvLOWdeU7CNSk9Mdj2P+ed8ABvQ7WecvMY+gyObkW7OcBo/enuUYbFv >> > zIPHIsMlDrgsIyU+NSvxuOfjnZGgGzeCL1KeKdqkcykUq1/bODC8ThtRhF2fQ6Rx >> > /jxgY0L5ycbWxVqZg0eToW680yaspbW5UbfaWbu/XxWPRPXZwlwrtqsEYSBf0wfV >> > RUbuGwPpBqvOG2dK4meAy6haHwG6fuD3+ko9U522ok313QoqmhCLCepnDDMlHPvL >> > WlBt/zyqsX1K0hej+upNuAsqRPdZdAf2wUbIwPr2WmiFeA3TUaIlrRffYOolK4Sk >> > ukTHWQ4kasQzbmQu2gCGvp6G9loPiEWfyjO7vWZqUBTuQhnWoStZwDOxLa35w1y3 >> > 9XYmzNagl0Y4ndSpFg7Vg8h6mdZrWGUW8z5iFRoPkgxvkUk4v+nnxRCRtYI2hcBp >> > m7hRMtB6LA7vFcadySybEqyJvHuZBBvXCbF1nV9n05RerrUdeW8= >> > =neVF >> > -----END PGP SIGNATURE----- >> > >> > --------------------------------------------------------------------- >> > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org >> > For additional commands, e-mail: users-h...@tomcat.apache.org >> > >> > >> >> --------------------------------------------------------------------- >> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org >> For additional commands, e-mail: users-h...@tomcat.apache.org >> >> > > -- > Regards > Nitin Kadam > (9967688959) > --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
