Bug 1089206

Summary: Upgrade tomcat-native to 1.1.30 from 1.1.27
Product: [JBoss] JBoss Enterprise Web Server 2 Reporter: Mladen Turk <mturk>
Component: tomcat-nativeAssignee: Weinan Li <weli>
Status: CLOSED EOL QA Contact: Libor Fuka <lfuka>
Severity: medium Docs Contact:
Priority: unspecified    
Version: unspecifiedCC: jdoyle, pslavice, rsvoboda, vtunka
Target Milestone: ER02   
Target Release: 2.1.0   
Hardware: All   
OS: All   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Previously in JBoss Enterprise Web Server, an outdated version of tomcat-native was included in the product, which did not include bug fixes for FIPS issues and does not include support for ECDGE ciphers. This is now fixed in JBoss Enterprise Web Server 2.1 by including tomcat-native version 1.1.30 is included which incorporates the required FIPS fixes for Red Hat Enterprise Linux 6 and also adds support for ECDHE ciphers to allow Internet Explorer browsers to operate as expected.
Story Points: ---
Clone Of:
: 1090045 (view as bug list) Environment:
Last Closed: 2019-06-13 12:09:49 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1090045    
Attachments:
Description Flags
Patch for upstream Bz56396 issue none

Description Mladen Turk 2014-04-18 09:05:34 UTC
Description of problem:

Upgrade tomcat-native to version 1.1.30.
If fixes some FIPS issues with RHEL6 and adds support for ECDHE ciphers so that Internet Explorer browsers work as expected.

Comment 1 Mladen Turk 2014-04-18 09:20:36 UTC
Created attachment 887488 [details]
Patch for upstream Bz56396 issue

This patch needs to be applied to 1.1.30 to handle some issues with FIPS mode OpenSSL libraries.

Comment 3 Weinan Li 2014-05-28 06:20:22 UTC
Will be included in ER2

Comment 4 Libor Fuka 2014-06-12 09:17:47 UTC
Verified in all 2.1.0 erratas EL5, EL6, EL7

Comment 5 Libor Fuka 2014-06-12 09:58:38 UTC
Verified 2.1.0-ER2 Windows

Comment 6 Libor Fuka 2014-06-12 10:14:45 UTC
Verified upgraded tomcat native to version 1.1.30 with EWS 2.1.0-ER2:
RHEL5, RHEL6, RHEL7

Comment 7 Libor Fuka 2014-06-12 10:30:55 UTC
Verified 2.1.0-ER2 Solaris