Bug#1034824: tomcat9 should not be released with Bookworm

[Emmanuel Bourg]

Le 2023-05-13 22:38, Markus Koschany a écrit :

> The question is: If we ship libtomcat9-java in Bookworm and change the
> dependency from tomcat9-user to tomcat10-user, will a web application 
> like
> dogtag-pki, which is designed for Tomcat 9, continue to work with 
> Tomcat 10?

I'm pretty sure it won't work. dogtag-pki depends on tomcatjss which is 
tightly
coupled with Tomcat's internal code. Unfortunately tomcatjss upstream is 
lagging
with the Tomcat 10 adoption [1], and we can't hold back Tomcat 10 in 
Debian
indefinitely just for that (for the reminder, Tomcat 10 is a very 
important
release implementing the new Jakarta EE specification, not having it in 
Bookworm
would be a real disservice to our users).

The thing I don't understand is why a CA webapp needs a custom Tomcat
connector (tomcatjss), maybe it could be patched to work without it?

Emmanuel Bourg

[1] https://github.com/dogtagpki/tomcatjss/issues/68