Tomcat9及以下升级Tomcat10 部署操作
由于部署环境升级,检测出tomcat漏洞,需要升级使用最新版tomcat,即tomcat10。
Tomcat10升级介绍
Tomcat10 修补漏洞,导致使用javax jar包的项目不能直接部署,需要通过程序转换。
Apache官网 提供转换程序 https://github.com/apache/tomcat-jakartaee-migration
Apache官方说明:Users of Tomcat 10 onwards should be aware that, as a result of the move from Java EE to Jakarta EE as part of the transfer of Java EE to the Eclipse Foundation, the primary package for all implemented APIs has changed from javax.* to jakarta.*. This will almost certainly require code changes to enable applications to migrate from Tomcat 9 and earlier to Tomcat 10 and later. A migration tool has been developed to aid this process.
大意是:由于Java EE 改为 Jakarta EE,javax. 的包全都换成 jakarta.。Tomcat9以及之前的版本需要使用工具来转换一下。
转换步骤
- 使用上边提供地址下载项目并导入,运行 mvn compile package ,生成jar包;
- 运行jar包:jar地址
java -jar jakartaee-migration-版本号-shaded.jar D:\源路径\demo.war D:\目标路径\newdemo.war
3.将新war包放入tomcat启动即可。
参考博客:
记一次tomcat10升级之后的坑