Differences

This shows you the differences between two versions of the page.

--- 79:upgrade_to_7_9_14 [2024/03/14 15:32] – Weinlein, Thomas
+++ 79:upgrade_to_7_9_14 [2024/04/02 12:02] (current) – [Upgrade to release 7.9.14.0 or higher] Weinlein, Thomas
@@ Line 1: / Line 1: @@
-====== Upgrade to release 7.9.14.0 or higher (wip) ======
+====== Upgrade to release 7.9.14.0 or higher ======
 With this release we simplify the initial setup of Stages for production and follow a security by default approach.
-Therefore the default configuration for new Stages installations is prepared for **HTTPS only** access to Stages. To be able to configure the latest TLS version 1.3 it is necessary to update the Java JDK 8 version on the server to **at least ''JDK-8u301''** or any higher 1.8.x version (64-Bit). Latest JDK 8 patch version is recommended.
+Therefore the default configuration for new Stages installations is prepared for **HTTPS only** access to Stages. For existing installation - after the upgrade to Stages 7.9.14.0 or higher - a few manual steps are necessary as outlined below.
-The error prone configuration for report execution and PDF printing was also unified and delivered by default. The internal Stages communication will now always use a separate connector on port ''8085''.
+To be able to configure and use the latest TLS version 1.3 it is necessary to update the Java JDK 8 version on the server to **at least ''JDK-8u381''** or any higher 1.8.x version (64-Bit). Latest JDK 8 patch version is recommended.
-To simplify the management of configurations for test and production servers, the variable replacement mechanism of config.xml was extended to server.xml and database.properties files. This should it make easier to sync the general Stages configuration between test and production environments while maintaining individual configuration values in just two files named config.properties and secret.properties. Please read [[configure_stages]] for more details.
+The formerly error prone configuration for report execution and PDF printing is now also unified and delivered by default. The internal Stages communication will always use a separate connector on port ''8085'' that is not reachable from the outside.
+To simplify the management of configurations for test and production servers, the variable replacement mechanism of ''config.xml'' was extended to ''server.xml'' and ''database.properties'' files. This should make it easier to sync the general Stages configuration between test and production environments while maintaining individual configuration values in just two files named ''config.properties'' and ''secret.properties''. Please read [[configure_stages]] for more details on that topic.
 The following manual configuration changes need to be applied for installations that are [[#Stages server is already configured for HTTPS|configured for HTTPS usage]], meaning you can reach Stages via http**s** e.g. ''%%http%%**s**%%://mystages.mycompany.com%%''. For test server installations that are currently NOT prepared for HTTPS please [[#Stages server does not yet support HTTPS|follow these instructions]].
@@ Line 51: / Line 53: @@
 === Apply configuration changes ===
-[[configure_stages#apply-configuration-changes|Execute update and restart stages]]
+Execute the configuration update and restart Stages as outlined [[configure_stages#apply-configuration-changes|here]]
 === Access Stages ===
@@ Line 164: / Line 166: @@
 === Apply configuration changes ===
-[[configure_stages#apply-configuration-changes|Execute update and restart stages]]
+Execute configuration update and restart Stages as outlined [[configure_stages#apply-configuration-changes|here]]
 === Access Stages ===
-Verify that Stages is available under ''%%https://stages.localhost%%'' or ''%%https://mystages.mycompany.com%%''. Please note that the browser will complain that the provided certificate is not valid or trusted. For the initial test please acknowledge the risk and click through to Stages.
+Verify that Stages is available under ''%%https://stages.localhost%%'' when you open the browser on the server machine or ''%%https://mystages.mycompany.com%%''. Please note that the browser will complain that the provided certificate is not valid or trusted. For the initial test please acknowledge the risk and click through to Stages.
-After that you should [[configure_stages#configuring-tlsssl-certificate|create and configure your own singed certificate]] or create your own self signed certificate and import it into your browsers or systems truststore.
+After that you should [[configure_stages#configuring-tlsssl-certificate|create and configure your own singed certificate]] or create your own self signed certificate and import it into your browsers or systems truststore. For pure local access to Stages you can import the default stages-self-signed.crt certificate as downloaded [[#Download self signed certificate|here]] into your browsers truststore.