topic Re: Any time frame for Tomcat 8 support ? in Nuxeo Forum

Any time frame for Tomcat 8 support ?

Rafi_Cohen — Wed, 03 May 2017 20:24:08 GMT

Our customers consider security as a #1 priority, and as such we constantly upgrade our major 3rd parties (including Java/Tomcat/database server/etc) to their latest.

And with regard to Nuxeo, we have attempted to deploy it as a static WAR inside Tomcat 8.5.14 (we have tried with both 8.3 and 9.1 versions of Nuxeo), but it fails to operate properly (I can log in, but the traces show exceptions (see attached file), and e.g. any attempt to navigate anywhere in the workspaces/folders structure fails with a

This page may not be up to date as an other concurrent request is still running. You can refresh the page later.

error popup on the browser and the user left in the same location (landing/home page).

Is there any time frame for when Nuxeo will support Tomcat 8 ?

Re: Any time frame for Tomcat 8 support ?

Florent_Guillau — Wed, 03 May 2017 20:42:35 GMT

Work to support Tomcat 8.5 is planned, see https://jira.nuxeo.com/browse/NXP-20370.

But for security you don't need to upgrade Tomcat 8.5, which is a major upgrade; you should instead upgrade to the latest minor version including security fixes of the Tomcat used by the Nuxeo instance you have.

Re: Any time frame for Tomcat 8 support ?

Rafi_Cohen — Wed, 03 May 2017 21:15:00 GMT

Thank you for your (very quick) reply; Indeed, we agree - minor upgrades will work, but only as long as the Tomcat team back-ports all security fixes to 7, which - as of now - is already 2 major versions behind.