TIPS:

To recompile:
mvn package
mvn compile
mvn war:exploded

Seems to not always work. Try restarting Tomcat. Try touching WERTisme/WEB_INF/web.xml. Retry mvn commands.

2022-02-04

The log4j vulnerability means we must upgrade log4j 2 to reduce the risk of hacking before redeploying.
This has been done by Chiara. The remaining problem is that Konteaksta still uses log4j 1,
which had its EOL in 2015. We need to upgrade to log4j 2. A simple way is using the log4j 1.x bridge (https://logging.apache.org/log4j/2.x/manual/migration.html).

Later, the logging with log4j 1 should be replaced with log4j 2 in code. 

Another problem is that we run Konteaksta on Tomcat 7, which just (2021) has reached its EOL.
We should upgrade to at least Tomcat 8.5. As Java 7 soon reaches its EOL, we should also upgrade to Java 8,
which has EOL in 2030.

Log4j jars are located in /usr/local/share/apache-tomcat-7.0.82/webapps/konteaksta/WEB-INF/lib

Remedies made:
-Created setenv.sh in /usr/local/share/apache-tomcat-7.0.82/bin/ setting 
CATALINA_OPTS=-Dlog4j1.compatibility="true" -Dlog4j.configuration=/usr/local/share/apache-tomcat-7.0.82/webapps/konteaksta/WEB-INF/classes/log4j.configuration

-log4j 1 was removed from the pom and replaced by log4j-1.2-api
-log4j-1.2.8.jar was deleted (from the right place?)
-Log4j 2 was upgraded from 2.15.0 to 2.17.1 (in the right place?)


2022-02-15

Need to test locally. It does not work yet, so I have installed java 7 to see if that helps.
The only trustworthy place I could find Java 7 for download was https://www.azul.com/downloads/. I installed the deb package.

I got Konteaksta running locally now, using Java 7 and Tomcat 8.5. Still it does not manage to fetch sites, but maybe this will do for testing.

log4j needs to be 2.12.4 to be compatible with Java 7, not 2.17.1. We should later upgrade to Java 8 and then also log4j 2.17.1.
I changed the POM to reflect this. 

I went though the code replacing what needed to be replaced to upgrade from log4j 1 to log4j 2 according to this manual: https://logging.apache.org/log4j/2.x/manual/migration.html

Then I converted log4j.properties to xml using a conversion program, and then converted the xml to log4j 2 syntax manually, as I found no programs to do this.

Before switching, I got Konteaksta logs at CATALINA_HOME/logs/werti.log. After having switched, the logs now appear at CATALINA_HOME/logs/catalina.out, that is, the console.
This indicates the configuration xml is either not properly written (by me) or not properly read (by log4j/Java/Tomcat).

2022-08-29

Updated opennlp from 1.4.3 to 1.5.3 to be able to use a https repository (needed by new Maven versions). Commented out some repository links, as the new version uses a standard apache repository (and some other repositories returned 404).