dhis2-devs team mailing list archive

[Bob Jolliffe <bobjolliffe@xxxxxxxxx>]

2011/2/4 Lars Helge Øverland <larshelge@xxxxxxxxx>:
> Speaking of Tomcat, Jason reminded me in a separate mail today that it is
> good to install the native APR (apache portable runtime) library to
> allegedly improve performance and scalability.

Reminds me of another discussion back in March/April when we were
working on getting DHIS through all the hoops for Indian gov security
assessment and certification.  You need APR in order to use openssl
libraries.  And you need openssl libraries if you want to configure
tomcat not to accept connections using known weak ciphers.  The
builtin java cryprto stuff doesn't hack it.  So for the paranoid
(there you go Jason!) or even those just trying to conform to national
security policies you have yet another good reason for installing APR.
 Need to document this stuff ...

Cheers
Bob


>It is intended to make Tomcat
> a full fledget webserver and might reduce need for using Apache (also given
> our limited static resources):
> http://tomcat.apache.org/tomcat-7.0-doc/apr.html
> Detailed instructions for installation on Ubuntu (get required libs, unzip
> src, configure, make and install):
>
> sudo apt-get install libapr1-dev libssl-dev gcc make
> tar -xvf <tomcat-dir>/bin/tomcat-native.tar.gz
>
> cd <tomcat-native-dir>/jni/native
> ./configure --with-apr=/usr/bin/apr-1-config
> --with-java-home=/usr/lib/jvm/java-6-sun
> make
> sudo make install
> - In <tomcat-dir>/bin/startup.sh add below the initial comments: -
>
> export CATALINA_OPTS='-Djava.library.path=/usr/local/apr/lib'
>
>
>
>
>
>
> _______________________________________________
> Mailing list: https://launchpad.net/~dhis2-devs
> Post to     : dhis2-devs@xxxxxxxxxxxxxxxxxxx
> Unsubscribe : https://launchpad.net/~dhis2-devs
> More help   : https://help.launchpad.net/ListHelp
>
>