Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

In order to fix the Heartbleed vulnerability a new release of the tomcat java native libraries is being created. Will this release work with older versions of Tomcat 7 such as 7.0.29, or will this possibly cause problems with code running on the system? Would it be better to just update the whole stack at once?

share|improve this question
up vote 0 down vote accepted

I've tested with 7.0.45 and it worked just fine. All you need to do is replace the tcnative-1.dll from /bin folder and restart the tomcat service. catalina log file shall print the new OpenSSL version loaded by APR while initialization. Make sure this version string is different from earlier.

I think this works for 7.0.x version without any issues. Post restart if you webapp is just running fine, implies this dll is working for your tomcat version.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.