Apache Tomcat v8.5.4 发布

   <p style="text-align: center;"><img alt="" src="https://simg.open-open.com/show/ac1da0db500bf08f819bfa42e86d902c.png" /></p>    <p>Tomcat 是一个小型的轻量级应用服务器，在中小型系统和并发访问用户不是很多的场合下被普遍使用，是开发和调试JSP 程序的首选。对于一个初学者来说，可以这样认为，当在一台机器上配置好Apache 服务器，可利用它响应对HTML 页面的访问请求。实际上Tomcat 部分是Apache 服务器的扩展，但它是独立运行的，所以当你运行tomcat 时，它实际上作为一个与Apache 独立的进程单独运行的。</p>    <h2>更新日志</h2>    <ul>     <li>Fix:  57705: Add debug logging for requests denied by the remote host and remote address valves and filters. Based on a patch by Graham Leggett. (markt)</li>     <li>Fix:  Correct a regression in the fix for 58588 that removed the entire org.apache.juli package from the embedded JARs rendering them unusable. (markt)</li>     <li>Add:  59399: Add a new option to the Realm implementations that ship with Tomcat that allows the HTTP status code used for HTTP -> HTTPS redirects to be controlled per Realm. (markt)</li>     <li>Update:  Change the default of the sessionCookiePathUsesTrailingSlash attribute of the Context element to false since the problems caused when a Servlet is mapped to /* are more significant than the security risk of not enabling this option by default. (markt)</li>     <li>Fix:  Follow-up to 59655. Improve the documentation for configuring permitted cookie names. Patch provided by Kyohei Nakamura. (markt)</li>     <li>Fix:  Do not attempt to start web resources during a web application's initialisation phase since the web application is not fully configured at that point and the web resources may not be correctly configured. (markt)</li>     <li>Fix:  59708: Modify the LockOutRealm logic. Valid authentication attempts during the lock out period will no longer reset the lock out timer to zero. (markt)</li>     <li>Fix:  Improve error handling around user code prior to calling InstanceManager.destroy() to ensure that the method is executed. (markt)</li>     <li>Code:  Refactor the certifcate keystore and trust store generation to make it easier for embedded users to inject their own key stores. (markt)</li>     <li>Add:  59233: Add the ability to add TLS virtual hosts dynamically. (markt)</li>     <li>Update:  Add a maxConcurrentStreamExecution on the HTTP/2 protocol handler to allow restricting the amount of concurrent stream that are being executed in a single connection. The default is to not limit it. (remm)</li>     <li>Fix:  Correct a problem with ServletRequest.getServerPort() for secure HTTP/2 connections that meant an incorrect value was retured when using the default port. (markt)</li>     <li>Fix:  Improve error handling around user code prior to calling InstanceManager.destroy() to ensure that the method is executed. (markt)</li>     <li>Fix:  Improve error handling around user code prior to calling InstanceManager.destroy() to ensure that the method is executed. (markt)</li>     <li>Code:  Now the WebSocket implementation is not built directly on top of the Servlet API and can use Tomcat internals, there is no need for the dedicated WebSocket Executor. It has been replaced by the use of the Connector/Endpoint provided Executor. (markt)</li>     <li>Fix:  Improve error handling around user code prior to calling InstanceManager.destroy() to ensure that the method is executed. (markt)</li>     <li>Fix:  Do not log an additional case of IOExceptions in the error handler for the Drawboard WebSocket example when the root cause is the client disconnecting since the logs add no value. (markt)</li>     <li>Fix:  59642: Mention the localDataSource in the DataSourceRealm section of the Realm How-To. (markt)</li>     <li>Fix:  59672: Update the security considerations page of the documentation web application to take account of the fact that the Manager and HostManager applications now have a RemoteAddrValve configured by default. (markt)</li>     <li>Fix:  Follow-up to the fix for 59399. Ensure that the new attribute transportGuaranteeRedirectStatus is documented for all Realms. Also document the NullRealm and when it is automatically created for an Engine. (markt)</li>     <li>Fix:  Fix the description of maxAge attribute in jdbc-pool doc. This attribute works both when a connection is returned and when a connection is borrowed. (kfujino)</li>     <li>Fix:  59774: Correct the prefix values in the the documented examples for configuring the AccessLogValve. Patch provided by Mike Noordermeer. (markt)</li>     <li>Code:  58588: Remove the JULI extras package from the distribution. It was only useful for switching Tomcat's internal logging to log4j 1.2.x and that version of log4j is no longer supported. No additional Tomcat code is required if switching Tomcat's internal logging to log via log4j 2.x. (markt)</li>     <li>Add:  Add log message when the ping has timed-out. (kfujino)</li>     <li>Fix:  If the ping message has been received at the AbstractReplicatedMap#leftOver method, ensure that notify the member is alive than ignore it. (kfujino)</li>     <li>Fix:  Fix the duplicated connection release when connection verification failed. (kfujino)</li>     <li>Fix:  Ensure that do not remove the abandoned connection that has been already released. (kfujino)</li>     <li>Update:  59276: Update optional Checkstyle library to 6.17. (kkolinko)</li>     <li>Add:  Use the mirror network rather than the ASF master site to download the current ASF dependencies. (markt)</li>     <li>Update:  Update the packaged version of the Tomcat Native Library to 1.2.8 to pick up the latest fixes and make 1.2.8 the minimum recommended version. (markt)</li>     <li>Code:  Use UTF-8 with a standard prolog for all XML files. (markt)</li>    </ul>    <h2>下载</h2>    <p><strong>二进制</strong></p>    <ul>     <li>Core:      <ul>       <li><a href="/misc/goto?guid=4958992154600199910" rel="nofollow">zip</a> (<a href="/misc/goto?guid=4958992154679363617">pgp</a>, <a href="/misc/goto?guid=4958992154771995991">md5</a>, <a href="/misc/goto?guid=4958992154858486042">sha1</a>)</li>       <li><a href="/misc/goto?guid=4958992154949078599" rel="nofollow">tar.gz</a> (<a href="/misc/goto?guid=4958992155033396237">pgp</a>, <a href="/misc/goto?guid=4958992155125824769">md5</a>, <a href="/misc/goto?guid=4958992155203185157">sha1</a>)</li>       <li><a href="/misc/goto?guid=4958992155289327549" rel="nofollow">32-bit Windows zip</a> (<a href="/misc/goto?guid=4958992155379763174">pgp</a>, <a href="/misc/goto?guid=4958992155465836416">md5</a>, <a href="/misc/goto?guid=4958992155544549771">sha1</a>)</li>       <li><a href="/misc/goto?guid=4958992155634256369" rel="nofollow">64-bit Windows zip</a> (<a href="/misc/goto?guid=4958992155732837876">pgp</a>, <a href="/misc/goto?guid=4958992155816576401">md5</a>, <a href="/misc/goto?guid=4958992155899763387">sha1</a>)</li>       <li><a href="/misc/goto?guid=4958992155978793676" rel="nofollow">32-bit/64-bit Windows Service Installer</a> (<a href="/misc/goto?guid=4958992156073913005">pgp</a>, <a href="/misc/goto?guid=4958992156155539896">md5</a>, <a href="/misc/goto?guid=4958992156253142468">sha1</a>)</li>      </ul> </li>     <li>Full documentation:      <ul>       <li><a href="/misc/goto?guid=4958992156339027285" rel="nofollow">tar.gz</a> (<a href="/misc/goto?guid=4958992156427684326">pgp</a>, <a href="/misc/goto?guid=4958992156520889943">md5</a>, <a href="/misc/goto?guid=4958992156599695315">sha1</a>)</li>      </ul> </li>     <li>Deployer:      <ul>       <li><a href="/misc/goto?guid=4958992156688239220" rel="nofollow">zip</a> (<a href="/misc/goto?guid=4958992156778796886">pgp</a>, <a href="/misc/goto?guid=4958992156868211917">md5</a>, <a href="/misc/goto?guid=4958992156952746149">sha1</a>)</li>       <li><a href="/misc/goto?guid=4958992157049768822" rel="nofollow">tar.gz</a> (<a href="/misc/goto?guid=4958992157127653978">pgp</a>, <a href="/misc/goto?guid=4958992157213105636">md5</a>, <a href="/misc/goto?guid=4958992157303770649">sha1</a>)</li>      </ul> </li>     <li>Extras:      <ul>       <li><a href="/misc/goto?guid=4958992157388619110" rel="nofollow">JMX Remote jar</a> (<a href="/misc/goto?guid=4958992157473511370">pgp</a>, <a href="/misc/goto?guid=4958992157559380638">md5</a>, <a href="/misc/goto?guid=4958992157636846867">sha1</a>)</li>       <li><a href="/misc/goto?guid=4958992157724414219" rel="nofollow">Web services jar</a> (<a href="/misc/goto?guid=4958992157798253461">pgp</a>, <a href="/misc/goto?guid=4958992157896517275">md5</a>, <a href="/misc/goto?guid=4958992157990214523">sha1</a>)</li>       <li><a href="/misc/goto?guid=4958992158070357600" rel="nofollow">JULI adapters jar</a> (<a href="/misc/goto?guid=4958992158160669320">pgp</a>, <a href="/misc/goto?guid=4958992158248905789">md5</a>, <a href="/misc/goto?guid=4958992158333572881">sha1</a>)</li>       <li><a href="/misc/goto?guid=4958992158433766101" rel="nofollow">JULI log4j jar</a> (<a href="/misc/goto?guid=4958992158515421223">pgp</a>, <a href="/misc/goto?guid=4958992158603936506">md5</a>, <a href="/misc/goto?guid=4958992158692977728">sha1</a>)</li>      </ul> </li>     <li>Embedded:      <ul>       <li><a href="/misc/goto?guid=4958992158785120662" rel="nofollow">tar.gz</a> (<a href="/misc/goto?guid=4958992158868904308">pgp</a>, <a href="/misc/goto?guid=4958992158963600820">md5</a>, <a href="/misc/goto?guid=4958992159043147181">sha1</a>)</li>       <li><a href="/misc/goto?guid=4958992159129369772" rel="nofollow">zip</a> (<a href="/misc/goto?guid=4958992159210749245">pgp</a>, <a href="/misc/goto?guid=4958992159293412583">md5</a>, <a href="/misc/goto?guid=4958992159387153080">sha1</a>)</li>      </ul> </li>    </ul>    <p><strong>源代码</strong></p>    <ul>     <li><a href="/misc/goto?guid=4958992159469863138" rel="nofollow">tar.gz</a> (<a href="/misc/goto?guid=4958992159553291088">pgp</a>, <a href="/misc/goto?guid=4958992159639387254">md5</a>, <a href="/misc/goto?guid=4958992159732311323">sha1</a>)</li>     <li><a href="/misc/goto?guid=4958992159817271790" rel="nofollow">zip</a> (<a href="/misc/goto?guid=4958992159911236523">pgp</a>, <a href="/misc/goto?guid=4958992159994644192">md5</a>, <a href="/misc/goto?guid=4958992160081522434">sha1</a>)</li>    </ul>    <h2> </h2>