At SLAC tomcat is installed in:
/afs/slac.stanford.edu/package/jakarta
To be able to write to this area you need to be in group:
maint-pkg-jakarta
Currently the members of this group are:
tonyj
turri
chee
To install a new version (this may vary by major version):
(The mirror sites may vary, start from http://tomcat.apache.org)
To checksum the downloaded file look for the 'MD5' link on the Tomcat page then run md5sum on the file you downloaded. The number generated from the md5sum command should match the checksum provided by Tomcat. For example:
tar.gz (pgp, md5, sha1) <-- click on 'md5' to get the key that should match when you execute md5sum <filename>.
Notices From announce@tomcat.apache.org |
---|
6Jun2017 Security notice received from announce@tomcat.apache.org. Subject: CVE-2017-5664 Apache Tomcat Security Constraint Bypass. |
Tomcat 9.0
- 14Jun2016 - apache-tomcat-9.0.0.M8.tar.gz from http://tomcat.apache.org/download-90.cgi#9.0.0.M8
- apache-tomcat-9.0.0.M8-deployer.tar.gz from http://tomcat.apache.org/download-90.cgi#9.0.0.M8
- Made softlink apache-tomcat-9.0 points to apache-tomcat-9.0.0.M8
- 14Mar2017 http://tomcat.apache.org/download-90.cgi#9.0.0.M18 9.0.0.M18 and deployer. Checksum matched.
- 6Jun2017 downloaded apache-tomcat-9.0.0.M21.tar.gz from http://tomcat.apache.org/download-90.cgi#9.0.0.M21. Checksum ok
Tomcat 8.0
- 03Mar2016 apache-tomcat-8.0.32.zip (from http://tomcat.apache.org/download-80.cgi#8.0.32)
- Made softlink apache-tomcat-8.0 points to apache-tomcat-8.0.32
- 14Mar2017 http://tomcat.apache.org/download-80.cgi#8.5.12 8.5.12 and http://tomcat.apache.org/download-80.cgi 8.5.12 deployer. Checksum matched.
- 17Jun2017 downloaded apache-tomcat-8.0.44.tar.gz from http://tomcat.apache.org/download-80.cgi#8.0.44. Checksum ok.
- 17Jun2017 downloaded apache-tomcat-8.5.15.tar.gz from http://tomcat.apache.org/download-80.cgi. Checksum ok.
- 17May2017 download -
- apache-tomcat-8.0.44 (from http://tomcat.apache.org/download-80.cgi#8.0.44)
- apache-tomcat-8.0.44-deployer (from http://tomcat.apache.org/download-80.cgi#8.0.44)
- checksum matched for both downloads
- Used tar -xvf to untar and copied files to /afs/slac/package/jakarta
24Feb2015 apache-tomcat-8.0.20 (from http://tomcat.apache.org/download-80.cgi#8.0.20)
tar -xvfz apache-tomcat-8.0.20.tar.gz
apache-tomcat-8.0.15
Tomcat 7.0
- 6Jun2017 downloaded apache-tomcat-7.0.78.tar.gz from http://tomcat.apache.org/download-70.cgi. Checksum ok.
14Mar2017 apache-tomcat-7.0.75.tar.gz (from http://tomcat.apache.org/download-70.cgi#7.0.75). Checksum matched.
apache-tomcat-7.0.75 deployer (from http://tomcat.apache.org/download-70.cgi). Checksum matched.
apache-tomcat-7.0.59
Tomcat 6.0
(The mirror sites may vary, start from http://tomcat.apache.org)
http://www.devlib.org/apache/tomcat/tomcat-6/v6.0.30/bin/apache-tomcat-6.0.30.tar.gz
tar -xvzf apache-tomcat-6.0.30.tar.gz
rm apache-tomcat-6.0.30.tar.gz
wget http://www.devlib.org/apache/tomcat/tomcat-6/v6.0.30/bin/apache-tomcat-6.0.30-deployer.tar.gz
tar -xvzf apache-tomcat-6.0.30-deployer.tar.gz
rm apache-tomcat-6.0.30-deployer.tar.gz
(I am not sure we actually need the deployer).
Tomcat 5.5
wget http://www.trieuvan.com/apache/tomcat/tomcat-5/v5.5.31/bin/apache-tomcat-5.5.31.tar.gz http://www.trieuvan.com/apache/tomcat/tomcat-5/v5.5.31/bin/apache-tomcat-5.5.31.tar.gz
tar -xvzf apache-tomcat-5.5.31.tar.gz
rm apache-tomcat-5.5.31.tar.gz
(I am not sure where we are picking up the admin or deployer from? Maybe we have copies of them in the ~glast/tomcat? If so they should probably also be updated?)
All
To actually use the new version the setting for JAKARTA must be changed in e.g. ~srs/scripts/java-env.sh
Notes
There is now a tomcat 7.0, but perhaps we don't want to try it yet.
The Fermi servers are all running tomcat 5.5, maybe we could simplify things by changing to tomcat 6?
14Nov2014 - Installed tomcat 7.0.57 and tomcat 8.0.15 in /afs/slac/package/jakarta (Chee)
09Feb2015 - Installed tomcat 7.0.59 in /afs/slac/package/jakarta (Chee)
Installation History
Downloads are put into /afs/slac.stanford.edu/package/jakarta
Tomcat Version | Timestamp | From Location | Installer | Comments |
---|---|---|---|---|
apache-tomcat-7.0.82 | Dec 19, 2017 | https://tomcat.apache.org/download-70.cgi | Chee | Installed version for Brian |
apache-tomcat-9.0.0.M8 | June 14, 2016 | http://tomcat.apache.org/download-90.cgi#9.0.0.M8 | Chee | Installed in directory /afs/slac/package/jakarta. Downloaded the *.gz files. |
apache-tomcat-8.0.32 | March 03, 2016 | http://tomcat.apache.org/download-80.cgi#8.0.32 | Chee | Installed in directory /afs/slac/package/jakarta. Downloaded the zip file, not the gz file. Is that a problem? |
apache-tomcat-7.0.57 | February 9, 2015 | http://tomcat.apache.org/download-70.cgi#7.0.59 | Chee | Installed in directory |
apache-tomcat-5.5.33 | April 22, 16:46 | http://www.trieuvan.com/apache/tomcat/tomcat-5/v5.5.33/bin/apache-tomcat-5.5.33.tar.gz | Chee | |
apache-tomcat-6.0.32 | April 22, 16:50 | http://www.trieuvan.com/apache/tomcat/tomcat-6/v6.0.32/bin/apache-tomcat-6.0.32.tar.gz | Chee | |
apache-tomcat-6.0.32-deployer | April 25, 10:40 | http://www.trieuvan.com/apache/tomcat/tomcat-6/v6.0.32/bin/apache-tomcat-6.0.32-deployer.tar.gz | Chee | |
apache-tomcat-7.0.57 | November 14 2014 | http://tomcat.apache.org/download-70.cgi | Chee | scalnx-v04 only |
apache-tomcat-7.0.57-deployer | November 14 2014 | http://tomcat.apache.org/download-70.cgi | Chee | scalnx-v04 only |
apache-tomcat-8.0.15 | November 14 2014 | http://tomcat.apache.org/download-80.cgi | Chee | scalnx-v04 only |
apache-tomcat-8.0.15-deployer | November 14 2014 | http://tomcat.apache.org/download-80.cgi | Chee | scalnx-v04 only |
Changing version of Tomcat Servers
To change the version of a Tomcat server it is necessary to edit the script tomcat/scripts/java-env .sh to change the environment variable JAKARTA.