You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by "Jim Brikman (ybrikman)" <yb...@cisco.com> on 2008/01/04 22:22:57 UTC

Apache Portable Runtime and Tomcat?

The User Guide for the Apache Portable Runtime with Tomcat (
http://tomcat.apache.org/tomcat-5.5-doc/apr.html) states the following:
 
Windows binaries are provided for tcnative-1, which is a statically
compiled .dll which includes OpenSSL and APR. It can be downloaded from 
here <http://tomcat.heanet.ie/native/>  as 32bit or AMD x86-64 binaries.
In security conscious production environments, it is recommended to use
separate shared dlls for OpenSSL, APR, and libtcnative-1, and update
them as needed according to security bulletins.
 
It may be obvious, but does anyone have step-by-step instructions on
where/how to download/build these "shared dlls for OpenSSL, APR and
libtcnative-1" and configure Tomcat to use them?
 
Thanks,
Jim
 
 	
Yevgeniy (Jim) Brikman
Software Engineer
Voice Technology Group

ybrikman@cisco.com
Phone :978-936-0510
Mobile :617-538-2632



500 Beaver Brook Road
Boxborough, MA 01719
United States
www.cisco.com <http://www.cisco.com/> 

 	
 	

 

Re: Apache Portable Runtime and Tomcat?

Posted by Rainer Jung <ra...@kippdata.de>.
Hi Jim,

to make it work, you need all three of them. I never used it in Windows,
so I can only judge from the download and the docs page. The docs page

http://tomcat.apache.org/tomcat-6.0-doc/apr.html

says, that the precompiled binaries include openssl, apr and tcnative in
one combined DLL. The source download contains two slightly different
.dsp files, so I assume, one of them is for keeping the three DLLs
separate, one for producing a single combined DLL.

Regards,

Rainer


Jim Brikman (ybrikman) schrieb:
> Hi Rainer,
> 
> Thanks for the quick response! A couple more questions: if we grab the
> code for APR, OpenSSL and tcnative, and compile them (yes, we are on
> Windows), what will we get? Several dll's? And if so, do we just replace
> the tcnative-1.dll with these dll's or is there some other configuration
> that is necessary?
> 
> Thanks,
> Jim
> 
> 
> -----Original Message-----
> From: Rainer Jung [mailto:rainer.jung@kippdata.de] 
> Sent: Friday, January 04, 2008 4:34 PM
> To: Tomcat Users List
> Subject: Re: Apache Portable Runtime and Tomcat?
> 
> Hi Jim,
> 
> APR and OpenSSL are maintained by other projects (apr.apache.org resp.
> www.openssl.org).
> 
> The tcnative source can be obtained from
> 
> http://www.apache.org/dist/tomcat/tomcat-connectors/native/
> 
> The download contain a dsp file for Visual Studio (supposing you are
> talking about WIN platform because you mentioned DLL), and a configure
> script for Unix/Linux. The configure script of the most recent version
> is 1.1.12 is broken (see mail on this list today), but the library code
> is fine.
> 
> Regards,
> 
> Rainer
> 
> Jim Brikman (ybrikman) schrieb:
>> The User Guide for the Apache Portable Runtime with Tomcat
>> (http://tomcat.apache.org/tomcat-5.5-doc/apr.html) states the
> following:
>>  
>> Windows binaries are provided for tcnative-1, which is a statically 
>> compiled .dll which includes OpenSSL and APR. It can be downloaded 
>> from here <http://tomcat.heanet.ie/native/> as 32bit or AMD x86-64
> binaries.
>> In security conscious production environments, it is recommended to 
>> use separate shared dlls for OpenSSL, APR, and libtcnative-1, and 
>> update them as needed according to security bulletins.
>>  
>> It may be obvious, but does anyone have step-by-step instructions on 
>> where/how to download/build these "shared dlls for OpenSSL, APR and 
>> libtcnative-1" and configure Tomcat to use them?
>>  
>> Thanks,
>> Jim
>>  
>>
>> *Yevgeniy (Jim) Brikman*
>> *Software Engineer*
>> **Voice Technology Group*
>> *
>> ybrikman@cisco.com <ma...@cisco.com> Phone :*978-936-0510* 
>> Mobile :*617-538-2632*
>>
>> 	
>>
>> **
>> 500 Beaver Brook Road
>> Boxborough, MA 01719
>> United States
>> www.cisco.com <http://www.cisco.com/>

---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


RE: Apache Portable Runtime and Tomcat?

Posted by "Jim Brikman (ybrikman)" <yb...@cisco.com>.
Hi Rainer,

Thanks for the quick response! A couple more questions: if we grab the
code for APR, OpenSSL and tcnative, and compile them (yes, we are on
Windows), what will we get? Several dll's? And if so, do we just replace
the tcnative-1.dll with these dll's or is there some other configuration
that is necessary?

Thanks,
Jim


-----Original Message-----
From: Rainer Jung [mailto:rainer.jung@kippdata.de] 
Sent: Friday, January 04, 2008 4:34 PM
To: Tomcat Users List
Subject: Re: Apache Portable Runtime and Tomcat?

Hi Jim,

APR and OpenSSL are maintained by other projects (apr.apache.org resp.
www.openssl.org).

The tcnative source can be obtained from

http://www.apache.org/dist/tomcat/tomcat-connectors/native/

The download contain a dsp file for Visual Studio (supposing you are
talking about WIN platform because you mentioned DLL), and a configure
script for Unix/Linux. The configure script of the most recent version
is 1.1.12 is broken (see mail on this list today), but the library code
is fine.

Regards,

Rainer

Jim Brikman (ybrikman) schrieb:
> The User Guide for the Apache Portable Runtime with Tomcat
> (http://tomcat.apache.org/tomcat-5.5-doc/apr.html) states the
following:
>  
> Windows binaries are provided for tcnative-1, which is a statically 
> compiled .dll which includes OpenSSL and APR. It can be downloaded 
> from here <http://tomcat.heanet.ie/native/> as 32bit or AMD x86-64
binaries.
> In security conscious production environments, it is recommended to 
> use separate shared dlls for OpenSSL, APR, and libtcnative-1, and 
> update them as needed according to security bulletins.
>  
> It may be obvious, but does anyone have step-by-step instructions on 
> where/how to download/build these "shared dlls for OpenSSL, APR and 
> libtcnative-1" and configure Tomcat to use them?
>  
> Thanks,
> Jim
>  
> 
> *Yevgeniy (Jim) Brikman*
> *Software Engineer*
> **Voice Technology Group*
> *
> ybrikman@cisco.com <ma...@cisco.com> Phone :*978-936-0510* 
> Mobile :*617-538-2632*
> 
> 	
> 
> **
> 500 Beaver Brook Road
> Boxborough, MA 01719
> United States
> www.cisco.com <http://www.cisco.com/>

---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe,
e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: Apache Portable Runtime and Tomcat?

Posted by Rainer Jung <ra...@kippdata.de>.
Hi Jim,

APR and OpenSSL are maintained by other projects (apr.apache.org resp.
www.openssl.org).

The tcnative source can be obtained from

http://www.apache.org/dist/tomcat/tomcat-connectors/native/

The download contain a dsp file for Visual Studio (supposing you are
talking about WIN platform because you mentioned DLL), and a configure
script for Unix/Linux. The configure script of the most recent version
is 1.1.12 is broken (see mail on this list today), but the library code
is fine.

Regards,

Rainer

Jim Brikman (ybrikman) schrieb:
> The User Guide for the Apache Portable Runtime with Tomcat
> (http://tomcat.apache.org/tomcat-5.5-doc/apr.html) states the following:
>  
> Windows binaries are provided for tcnative-1, which is a statically
> compiled .dll which includes OpenSSL and APR. It can be downloaded from
> here <http://tomcat.heanet.ie/native/> as 32bit or AMD x86-64 binaries.
> In security conscious production environments, it is recommended to use
> separate shared dlls for OpenSSL, APR, and libtcnative-1, and update
> them as needed according to security bulletins.
>  
> It may be obvious, but does anyone have step-by-step instructions on
> where/how to download/build these "shared dlls for OpenSSL, APR and
> libtcnative-1" and configure Tomcat to use them?
>  
> Thanks,
> Jim
>  
> 
> *Yevgeniy (Jim) Brikman*
> *Software Engineer*
> **Voice Technology Group*
> *
> ybrikman@cisco.com <ma...@cisco.com>
> Phone :*978-936-0510*
> Mobile :*617-538-2632*
> 
> 	
> 
> **
> 500 Beaver Brook Road
> Boxborough, MA 01719
> United States
> www.cisco.com <http://www.cisco.com/>

---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org