search

dogtagpki / pki

The Dogtag Certificate System is an enterprise-class Certificate Authority (CA) which supports all aspects of certificate lifecycle management, including key archival, OCSP and smartcard management.
https://www.dogtagpki.org
GNU General Public License v2.0
365 stars 135 forks source link

Support for Tomcat 8.0 #1826

Closed pki-bot closed 4 years ago

pki-bot commented 4 years ago

This issue was migrated from Pagure Issue #1264. Originally filed by edewata (@edewata) on 2015-02-24 16:35:14:

Starting from Fedora 22 Tomcat 7.0 has been replaced with Tomcat 8.0 (see http://koji.fedoraproject.org/koji/packageinfo?packageID=12023). The current Dogtag is written for Tomcat 7.0, so it doesn't work on Fedora 22.

One problem is the server.xml included in Dogtag references a class that no longer exists on 8.0:

<Server port="8005" shutdown="SHUTDOWN">
  ...
  <Listener className="org.apache.catalina.core.JasperListener" />
  ...
</Server>

So starting Dogtag on F22 will fail:

24-Feb-2015 02:13:17.815 SEVERE [main] org.apache.tomcat.util.digester.Digester.startElement Begin 

event threw exception
 java.lang.ClassNotFoundException: org.apache.catalina.core.JasperListener 
...

There may be other problems too. This will require further investigation.

One solution is to support both Tomcat versions simultaneously (e.g. providing the server.xml for each Tomcat version). This way the same Dogtag version (e.g. 10.2.x) can run on both F21 and F22.

Another solution is to use different Dogtag versions for different Tomcat versions. Ideally this kind of change should be done in a new minor version, so F21 will have 10.2.x and F22 will have 10.3.x.

Either way, an upgrade script will be needed to convert the 7.0 server.xml in existing instances to 8.0 if necessary.

pki-bot commented 4 years ago

Comment from mkosek (@mkosek) at 2015-02-24 16:44:38

This blocks FreeIPA in Fedora 22.

pki-bot commented 4 years ago

Comment from edewata (@edewata) at 2015-02-24 17:08:10

http://tomcat.apache.org/migration-8.html

pki-bot commented 4 years ago

Comment from mkosek (@mkosek) at 2015-02-24 18:02:01

I created Fedora bug.

pki-bot commented 4 years ago

Comment from edewata (@edewata) at 2015-02-26 04:08:52

The investigation is documented in this page: http://pki.fedoraproject.org/wiki/Tomcat_8

pki-bot commented 4 years ago

Comment from mharmsen (@mharmsen) at 2015-02-27 02:14:19

Per 10.2.3 Triage meeting of 02/26/2015: leave here until we now which release is on F22

pki-bot commented 4 years ago

Comment from edewata (@edewata) at 2015-03-04 16:50:00

Tomcat 8 was reverted in F22 (see https://fedorahosted.org/fesco/ticket/1418) and pushed back to F23.

Dogtag support for Tomcat 8 on F23 depends on tomcatjss (see https://bugzilla.redhat.com/show_bug.cgi?id=1198450).

pki-bot commented 4 years ago

Comment from edewata (@edewata) at 2015-03-05 08:47:15

This also depends on ticket 1281.

pki-bot commented 4 years ago

Comment from mharmsen (@mharmsen) at 2015-03-10 00:39:40

Per CS/DS Meeting of 03/09/2015: 10.3

NOTE: Since Tomcat 8 was postponed until Fedora 23.

pki-bot commented 4 years ago

Comment from edewata (@edewata) at 2015-03-14 01:38:27

pki-edewata-0558-Added-support-for-Tomcat-8.patch pki-edewata-0558-Added-support-for-Tomcat-8.patch

pki-bot commented 4 years ago

Comment from edewata (@edewata) at 2015-03-14 01:38:54

pki-edewata-0559-1-Added-server-migration-command.patch pki-edewata-0559-1-Added-server-migration-command.patch

pki-bot commented 4 years ago

Comment from edewata (@edewata) at 2015-03-14 01:39:52

Still needs an upgrade script.

pki-bot commented 4 years ago

Comment from edewata (@edewata) at 2015-03-17 17:31:12

Moving this ticket to 10.2.3 per discussion with alee. The auto migration will be done in ticket 1310.

pki-bot commented 4 years ago

Comment from edewata (@edewata) at 2015-04-20 20:03:14

pki-edewata-0558-1-Added-support-for-Tomcat-8.patch pki-edewata-0558-1-Added-support-for-Tomcat-8.patch

pki-bot commented 4 years ago

Comment from edewata (@edewata) at 2015-04-21 22:59:39

Fixed in master:

pki-bot commented 4 years ago

Comment from edewata (@edewata) at 2017-02-27 14:03:23

Metadata Update from @edewata: