Verify Folder Existence:
Check if the ApplicationsManager/working/apache/tomcat_new_9 folder exists. If it does, please delete this folder.
Download and Extract Tomcat:
Download the required zip file from the following link:
Tomcat 9 Download
Extract the content and locate the tomcat_new_9 folder.
Copy tomcat_new_9 to the AppManager/working/apache/ directory.
Rename the Existing Tomcat Folder:
Rename the existing AppManager/working/apache/tomcat folder to include the base build version, e.g., tomcat_old_9_16861.
Rename the New Tomcat Folder:
Rename the newly copied AppManager/working/apache/tomcat_new_9 folder to tomcat.
Copy Keystore File:
Copy appmanager.keystore from the old Tomcat directory (AppManager/working/apache/tomcat_old_9_16861) to the new Tomcat directory (AppManager/working/apache/tomcat) if exists.
Copy Configuration Backup:
Copy the content of the conf/backup folder from the previous Tomcat directory (AppManager/working/apache/tomcat_old_9_16861/conf/backup) to the conf folder in the new Tomcat directory (AppManager/working/apache/tomcat/conf).
Copy the Webapps Folder:
Copy the webapps folder from the previous Tomcat directory (AppManager/working/apache/tomcat_old_9_16861/webapps) to the new Tomcat directory (AppManager/working/apache/tomcat) if exists.
Update Keystore and Truststore Files in server.xml
Open the server.xml file in the AppManager/working/apache/tomcat_old_9_16861/conf/backup directory.
Locate the <Connector> element(s) with the SSLEnabled attribute set to true.
Note down the paths for truststoreFile and keystoreFile attributes, if they exist.
Copy the noted files (e.g., keystore and truststore) from the old Tomcat directory to the same relative location in the new Tomcat directory i.e AppManager/working/apache/tomcat.
Update the server.xml file in the new Tomcat configuration to reflect these paths if necessary.
Update TLSv1.3 Ciphers
Open the server.xml file in the AppManager/working/apache/tomcat/conf/backup directory.
Locate the <Connector> element(s) with the SSLEnabled attribute set to true.
Add or set useServerCipherSuitesOrder="true" in the <Connector>
Update Ciphers:
Check the ciphers attribute. If it exists, prepend TLS_AES_256_GCM_SHA384,TLS_AES_128_GCM_SHA256
If the ciphers attribute is missing, add it as: ciphers="TLS_AES_256_GCM_SHA384,TLS_AES_128_GCM_SHA256"