search

denimgroup / threadfix

ThreadFix is a software vulnerability management platform. This GitHub site is far out of date. Please go to www.threadfix.it for up-to-date information.
339 stars 127 forks source link

Upgrade instructions #1756

Open naranek opened 8 years ago

naranek commented 8 years ago

Hi, what's the recommended way to upgrade the Threadfix installation? Wiki only seems to have instructions about installing.

d-maldonado commented 8 years ago

Upgrading ThreadFix

  1. Stop ThreadFix/Tomcat.
  2. Ensure a back up of your database and application servers have been created.
  3. Copy/replace the following property and configuration files from //TOMCAT_HOME/webapps/threadfix/WEB-INF/classes/ (previous ThreadFix version) to //threadfix/WEB-INF/classes (updated ThreadFix version).
    • log4j.xml
    • custom.properties
    • email.properties
    • ESAPI.properties
    • jdbc.properties
  4. If you are taking advantage of Velocity Templates make sure to copy/replace the ‘velocityTemplates’ as well.
    • Source: //TOMCAT_HOME/webapps/threadfix/velocityTemplates (previous ThreadFix version)
    • Destination: //threadfix/ (updated ThreadFix version).
  5. Replace the ‘threadfix’ folder in your ‘webapps’ directory with the ‘threadfix’ folder that you have copied the ThreadFix configuration and property files to.
  6. Start ThreadFix/Tomcat.