Stages Documentation

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
79:upgrade_to_7_9_14 [2024/03/14 15:21] – [Stages server does not yet support HTTPS] Weinlein, Thomas79:upgrade_to_7_9_14 [2025/03/12 13:50] (current) – [Stages server does not yet support HTTPS] Linz, Andreas
Line 1: Line 1:
-====== Upgrade to release 7.9.14.0 or higher (wip) ======+====== Upgrade to release 7.9.14.0 or higher ======
  
 With this release we simplify the initial setup of Stages for production and follow a security by default approach. With this release we simplify the initial setup of Stages for production and follow a security by default approach.
-Therefore the default configuration for new Stages installations is prepared for **HTTPS only** access to Stages. To be able to configure the latest TLS version 1.3 it is necessary to update the Java JDK 8 version on the server to **at least ''JDK-8u301''** or any higher 1.8.x version (64-Bit). Latest JDK 8 patch version is recommended.+Therefore the default configuration for new Stages installations is prepared for **HTTPS only** access to Stages. For existing installation - after the upgrade to Stages 7.9.14.0 or higher - a few manual steps are necessary as outlined below.
  
-The error prone configuration for report execution and PDF printing was also unified and delivered by default. The internal Stages communication will now always use a separate connector on port ''8085''.+To be able to configure and use the latest TLS version 1.3 it is necessary to update the Java JDK 8 version on the server to **at least ''JDK-8u381''** or any higher 1.8.x version (64-Bit). Latest JDK 8 patch version is recommended.
  
-To simplify the management of configurations for test and production servers, the variable replacement mechanism of config.xml was extended to server.xml and database.properties files. This should it make easier to sync the general Stages configuration between test and production environments while maintaining individual configuration values in just two files named config.properties and secret.properties. Please read [[configure_stages]] for more details.+The formerly error prone configuration for report execution and PDF printing is now also unified and delivered by default. The internal Stages communication will always use a separate connector on port ''8085'' that is not reachable from the outside. 
 + 
 +To simplify the management of configurations for test and production servers, the variable replacement mechanism of ''config.xml'' was extended to ''server.xml'' and ''database.properties'' files. This should make it easier to sync the general Stages configuration between test and production environments while maintaining individual configuration values in just two files named ''config.properties'' and ''secret.properties''. Please read [[configure_stages]] for more details on that topic.
    
 The following manual configuration changes need to be applied for installations that are [[#Stages server is already configured for HTTPS|configured for HTTPS usage]], meaning you can reach Stages via http**s** e.g. ''%%http%%**s**%%://mystages.mycompany.com%%''. For test server installations that are currently NOT prepared for HTTPS please [[#Stages server does not yet support HTTPS|follow these instructions]]. The following manual configuration changes need to be applied for installations that are [[#Stages server is already configured for HTTPS|configured for HTTPS usage]], meaning you can reach Stages via http**s** e.g. ''%%http%%**s**%%://mystages.mycompany.com%%''. For test server installations that are currently NOT prepared for HTTPS please [[#Stages server does not yet support HTTPS|follow these instructions]].
  
-==== Stages server is already configured for HTTPS ====+===== Stages server is already configured for HTTPS =====
  
 === config.properties === === config.properties ===
Line 51: Line 53:
  
 === Apply configuration changes === === Apply configuration changes ===
-[[configure_stages#apply-configuration-changes|Execute update and restart stages]]+Execute the configuration update and restart Stages as outlined [[configure_stages#apply-configuration-changes|here]]
  
 === Access Stages === === Access Stages ===
Line 57: Line 59:
  
  
-==== Stages server does not yet support HTTPS ====+===== Stages server does not yet support HTTPS =====
  
 As Stages will now enforce usage of HTTPS additional steps are necessary, when you upgrade from a HTTP only setup. As Stages will now enforce usage of HTTPS additional steps are necessary, when you upgrade from a HTTP only setup.
Line 65: Line 67:
 === Download self signed certificate === === Download self signed certificate ===
 Download the certificate keystore for the self signed certificate from here and store it in the ''$STAGES_CONF'' directory: Download the certificate keystore for the self signed certificate from here and store it in the ''$STAGES_CONF'' directory:
-https://download.methodpark.de/stages/stages-self-signed-cert/stages-self-signed-keystore.p12+https://download.stages.digital/stages/stages-self-signed-cert/stages-self-signed-keystore.p12
 Download the self signed certificate to be able to import it into your systems truststore. This is only useful for pure local access to Stages. Download the self signed certificate to be able to import it into your systems truststore. This is only useful for pure local access to Stages.
-https://download.methodpark.de/stages/stages-self-signed-cert/stages-self-signed.crt+https://download.stages.digitale/stages/stages-self-signed-cert/stages-self-signed.crt
  
  
Line 164: Line 166:
  
 === Apply configuration changes === === Apply configuration changes ===
-[[configure_stages#apply-configuration-changes|Execute update and restart stages]]+Execute configuration update and restart Stages as outlined [[configure_stages#apply-configuration-changes|here]]
  
 === Access Stages === === Access Stages ===
-Verify that Stages is available under ''%%https://stages.localhost%%'' or ''%%https://mystages.mycompany.com%%''. Please note that the browser will complain that the provided certificate is not valid or trusted. For the initial test please acknowledge the risk and click through to Stages.  +Verify that Stages is available under ''%%https://stages.localhost%%'' when you open the browser on the server machine or ''%%https://mystages.mycompany.com%%''. Please note that the browser will complain that the provided certificate is not valid or trusted. For the initial test please acknowledge the risk and click through to Stages.  
-After that you should [[configure_stages#configuring-tlsssl-certificate|create and configure your own singed certificate]] or create your own self signed certificate and import it into your browsers or systems truststore. +After that you should [[configure_stages#configuring-tlsssl-certificate|create and configure your own singed certificate]] or create your own self signed certificate and import it into your browsers or systems truststore. For pure local access to Stages you can import the default stages-self-signed.crt certificate as downloaded [[#Download self signed certificate|here]] into your browsers truststore.