Page History

...

$ mv /opt/shrine/tomcat/webapps/shrine-webclient /opt/shrine/upgrade-backups/shrine-webclient

Make especially sure that the shrine.keystore is backed up. If you lose the private side of a cert you may not be able to recover it.

$ cp /opt/shrine/shrine.keystore /opt/shrine/upgrade-backups/shrine.keystore

Upgrade to JDK 8 and Tomcat 8 

...

$ cd /opt/shrine/tomcat/webapps
$ wget --no-check-certificate https://repo.open.med.harvard.edu/nexus/content/groups/public/net/shrine/meta-war/1.22.4/meta-war-1.22.4.war -O shrine-meta.war

Keystore Cleanup

For hub-and-spoke systems, SHRINE now insists that the only two certificates in shrine's shrine.keystore on spokes are the node's signing cert and the hub's public CA cert. See what certs are there and remove any extras.

Be sure the original keystore is backed up!

$ keytool -list -keystore /opt/shrine/shrine.keystore

$ keytool -delete -noprompt -alias ${cert.alias}  -keystore ${keystore.file}

Database Changes

These instructions all use mysql syntax. Versions of .ddl files exist for Oracle and MSSQLServer within SHRINE's source code.

...