<p>If you have to be PCI-compliant. Redhat is probably the vendor you want the auditors to see here.<br>
RedHat is always behind all the upstream projects.</p>
<p>If you have more than a handful of servers, homogenize your servees as much as you can. Hand-rolled source is great for test boxes, but impossible to maintain at scale.</p>
<p>Wolf Halton<br>
--<br>
<a href="http://wolfhalton.info">http://wolfhalton.info</a> <br>
Apache developer:<br>
<a href="mailto:wolfhalton@apache.org">wolfhalton@apache.org</a></p>
<div class="gmail_quote">On Aug 12, 2013 2:26 PM, "Jim Kinney" <<a href="mailto:jim.kinney@gmail.com">jim.kinney@gmail.com</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr"><div>RHEL Tomcat will work just fine with Oracle JDK. You just have to do the alternatives song-n-dance to make it the default. So install the OpenJDK AND Oracle and make sure you block further updates to OpenJDK in yum/RHN. Be ready to unblock if a security patch for tomcat calls for an updated tomcat which wil then force the OpenJDK to update and likely force alternatives back to openJDK from Oracle.<br>
<br></div>Good luck getting a Non-RedHat vendor to code with OpenJDK.<br></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Mon, Aug 12, 2013 at 1:47 PM, James Sumners <span dir="ltr"><<a href="mailto:james.sumners@gmail.com" target="_blank">james.sumners@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">My problem with the RH provided Tomcat is it depends on OpenJDK. If<br>
you have to worry about support from an application vendor (not RH),<br>
then they are likely requiring the Oracle JDK. Additionally, the last<br>
time I tried to get the Tomcat native libraries to work with RH's<br>
package it was a no-go (had to use the JBoss repos which I don't have<br>
license for).<br>
<br>
I do not, however, compile Tomcat from source for my servers. I use<br>
the binary packages available from Apache.<br>
<div><br>
On Mon, Aug 12, 2013 at 12:40 PM, Neal Rhodes <<a href="mailto:neal@mnopltd.com" target="_blank">neal@mnopltd.com</a>> wrote:<br>
</div><div><div>> Trying to get back on A topic which relates to linux....<br>
><br>
> If you were charged with putting up a secure internal Web Services framework<br>
> on RedHat Enterprise Linux 6.4 for a financial application, would you:<br>
><br>
> "yum install tomcat6"<br>
><br>
> or,<br>
><br>
> go to Apache.org, download the sources, compile, and pray.<br>
><br>
><br>
> No, this is not a trick question. I've always just used the tested<br>
> supplied Redhat version which "just works". But there are apparently other<br>
> opinions, just trying to figure out if they are crazy.<br>
><br>
> Neal Rhodes<br>
> MNOP Ltd<br>
><br>
</div></div><div>> _______________________________________________<br>
> Ale mailing list<br>
> <a href="mailto:Ale@ale.org" target="_blank">Ale@ale.org</a><br>
> <a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
> See JOBS, ANNOUNCE and SCHOOLS lists at<br>
> <a href="http://mail.ale.org/mailman/listinfo" target="_blank">http://mail.ale.org/mailman/listinfo</a><br>
><br>
<br>
<br>
<br>
--<br>
</div>James Sumners<br>
<a href="http://james.roomfullofmirrors.com/" target="_blank">http://james.roomfullofmirrors.com/</a><br>
<br>
"All governments suffer a recurring problem: Power attracts<br>
pathological personalities. It is not that power corrupts but that it<br>
is magnetic to the corruptible. Such people have a tendency to become<br>
drunk on violence, a condition to which they are quickly addicted."<br>
<br>
Missionaria Protectiva, Text QIV (decto)<br>
CH:D 59<br>
<div><div>_______________________________________________<br>
Ale mailing list<br>
<a href="mailto:Ale@ale.org" target="_blank">Ale@ale.org</a><br>
<a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
See JOBS, ANNOUNCE and SCHOOLS lists at<br>
<a href="http://mail.ale.org/mailman/listinfo" target="_blank">http://mail.ale.org/mailman/listinfo</a><br>
</div></div></blockquote></div><br><br clear="all"><br>-- <br><div dir="ltr">-- <br>James P. Kinney III<br><i><i><i><i><br></i></i></i></i>Every time you stop a school, you will have to build a jail. What you
gain at one end you lose at the other. It's like feeding a dog on his
own tail. It won't fatten the dog.<br>
- Speech 11/23/1900 Mark Twain<br><i><i><i><i><br><a href="http://heretothereideas.blogspot.com/" target="_blank">http://heretothereideas.blogspot.com/</a><br></i></i></i></i></div>
</div>
<br>_______________________________________________<br>
Ale mailing list<br>
<a href="mailto:Ale@ale.org">Ale@ale.org</a><br>
<a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
See JOBS, ANNOUNCE and SCHOOLS lists at<br>
<a href="http://mail.ale.org/mailman/listinfo" target="_blank">http://mail.ale.org/mailman/listinfo</a><br>
<br></blockquote></div>