
- #TOMCAT 6 DOWNLOAD INSTALLER MAC OS X#
- #TOMCAT 6 DOWNLOAD INSTALLER WINDOWS#
Packaging Details (or "What Should I Download?") bin/ apache-tomcat-.zip or. RELEASE-NOTES and the RUNNING.txt file in the distribution for more details.
#TOMCAT 6 DOWNLOAD INSTALLER MAC OS X#
Of tar on Solaris and Mac OS X will not work with NOTE: The tar files in this distribution use GNU tar extensions,Īnd must be untarred with a GNU compatible version of tar.
Release notes, with important information. (This analysis will work on the Apachehaus Apache httpd though.)Ī fairly primitive but reliable way then is to use find (or strings if you have it already), from a cmd prompt: cd \Program Files\apache-tomcat\bin To peek at what DLLs a running process has loaded Process Explorer is handy, sadly though it appears that the normal Tomcat binary distribution link OpenSSL (and more) into a single DLL ( tcnative-1.dll) rather than an easily identifiable (and replaceable) libssl.dll/ libcrypto.dll (or similar) as is the convention on *nix systems. If you have LogLevel of "info" or higher, Apache will log the mod_ssl and OpenSSL versions on startup. At least one (Apachehaus) documents the OpenSSL version and provide an openssl.exe you can run, though it may not be in the normal user PATH it's in the bin/ subdirectory of the Apache installation. For 2.4 there are several different packaged versions. If you are using an official (contrib) Apache-2.2 web server binary, the OpenSSL version number is typically encoded in the installer package file name. Further, if you have OpenSSL installed separately, it's irrelevant from Tomcat's point of view (though it might be used by your Apache or other web server). The Apache provided Tomcat 6.0 binaries include APR (and hence OpenSSL) by default, though you may not be using it (upgrade anyway!). If you have a standalone Tomcat server you can determine which HTTPS method is used by inspecting the Connector protocol configuration. Tomcat standalone server with APR connector, OpenSSL in use. Tomcat standalone server with JSSE connector (Java SSL), OpenSSL is not used. Tomcat running behind Apache, OpenSSL is that used by Apache.
Tomcat running behind IIS, OpenSSL is not used. There are several common modes of deployment for Tomcat on MS-Windows if HTTPS is enabled: I tried to change the log level to Info, and then to Debug, each time restarting the web server, to no avail.
#TOMCAT 6 DOWNLOAD INSTALLER WINDOWS#
I'm using Tomcat 6 on Windows Server 2003. Is there another place where I should look? Is there another way to figure this out? I spent a couple of hours searching but can't find this information in the Tomcat logs.
ġ 19:25:29.955 INFO .AprLifecycleListener.initializeSSL OpenSSL successfully initialized (OpenSSL 1.0.1g ) For example, 1 19:25:28.801 INFO .AprLifecycleListener.init Loaded APR based Apache Tomcat Native library 1.1.30 using APR version 1.4.8.ġ 19:25:28.804 INFO .AprLifecycleListener.init APR capabilities: IPv6, sendfile, accept filters, random. This information is logged by AprLifecycleListener when Tomcat starts. After reading an article about the Heartbleed security bug, I understand that it is good practice to check the OpenSSL version Apache Tomcat is using.