Upgrading to Tomcat 7.0.55, as 7.0.53 is vulnerable

[sunnysharma]

Alfresco CE version 5.0.x comes with Tomcat version 7.0.53, which according to a report is vulnerable to SSL exploits: http://www.tenable.com/plugins/index.php?view=single&id=77475

I am guessing that even the enterprise version comes with same Tomcat version. Is there a way to upgrade the Tomcat version to 7.0.55?

[afaust]

Hello,

typically this would need to be a manual upgrade - there is no Automation. Just replace the Tomcat with the new Version and adapt the configuration(s).

Regards
Axel

[dirigible]

I know this is an old post, but it's the only reference I've seen to my concern.

When I installed Alfresco Community edition, the configuration of the Tomcat server was basically automatic. Now however, I need to upgrade the Tomcat server to a version greater than 7.0.55 for compliance reasons. But I can't find any documentation that covers this situation. I found plenty of info on new deployments, but nothing on in-place upgrades.

Is there a guide or document available that outlines the steps involved in upgrading Tomcat for an existing Alfresco install?

[sscbrian]

I haven't done it yet, but it *should* be really straightforward.  I'd expect an in-place upgrade of Tomcat to work (make sure you have GOOD backups first though, just in case!).  Failing that, I would attempt a side by side install of the new tomcat and move my content over, modifying the paths in alfresco-general.properties.  Alfresco is really just a big WAR file that uses a database.  As long as you stick it in a compatible container and point the configuration files at the right place, it should go…

[dirigible]

Thanks for the suggestion. I've got backups and I'm running on Windows, so I may just make a shadow copy and give it a try. My biggest issue is not knowing where configs are kept. I'm a complete Alfresco noob.