Resin Download

resin_logo_25
For testing and starting out.
  • Java EE 6 Web Profile
  • World's fastest web server
  • Watchdog process
  • No third-party dependencies
  • Quercus
GPLv3
resinprologo
For large production applications.
  • Java EE 6 Web Profile
  • World's fastest web server
  • Watchdog process
  • No third-party dependencies
  • Quercus Professional
  • Dynamic cloud servers
  • Distributed sessions
  • Distributed JCache
  • Smart load balancer
  • OpenSSL integration
  • Fast proxy cache
  • Cluster health monitoring
  • High performance socket JNI
  • Enterprise support options

Resin 4.0 is the current stable release branch suitable for production use.

Resin 4.0.61

2019-03-01

Description

Bug fix release, including security fixes.

Change List

  • security: additional invalid-URL rejection for matrix parameters
  • file: redirect must not html convert the location (#6212, rep by stbu)

Resin 4.0.60

2019-02-06

Description

Bug fix release, including important security fixes related to invalid URL detection.

Change List

  • security: invalid-URL rejection for matrix parameters
  • file: redirect must not html convert the location (#6212, rep by stbu)
  • embed: force close of file descriptors (#6208)
  • webapp: add info log when WebApp does not start within active-wait-time starts (#6197)
  • hessian: added default blacklist classes
  • deploy: added alarm for deployment .git gc
  • deploy: .git changes to allow for git clone from resin-data

Resin 4.0.59

2018-12-10

Description

Bug fix release.

Change List

  • database: avoid loop when shared XA connection fails allocation (#6200, rep by Naohisa Ohshima)
  • http-proxy: escape utf-8 urls when used in rewrite (#6198, rep by Yoo)
  • config: updated resin.properties for http examples
  • cluster: cluster .war deployment issues (#6188)
  • tcp: only force socket close on shutdown in test mode to avoid threading issues (#6190, rep by Babak Hefezi)
  • jsp/embed: jsp taglib detection issues with embedded resin (#6191, rep by Tyson Weihs)
  • access.log: truncation of long url in access.log needs matching truncation headers (#6168, rep by Steffen Busch)
  • file: redirect needs to encode with HTML encoding (#6184, rep by marc82ch)
  • embed: deadlock with ResinEmbed and type introspection (#6177, rep by mikeb01)
  • load-balance: cookies losing double quotes (#6181)
  • quercus: curl needs to use TLSv1.2 as default

Resin 4.0.58

2018-08-27

Description

Bug fix release.

Change List

  • servlet: AsyncContext timing issues due to back-compat (#6168)
  • servlet: add load-on-startup-allow-fail (#6171)
  • config: add openssl_protocol and openssl_cipher_suite to resin.properties (#6169)
  • quercus: exception wrapping when stack trace is missing or empty
  • network: change SocketLinkThreadLauncher to permanent (#6166, rep by samlmax)
  • servlet: immutability of getParameterValues (#6172, rep by waiwong)
  • classloading: scanning of module-info should be skipped (#6170)
  • security: invalid URL detection with filters
  • quercus: QuercusContext array extension using wrong variable
  • session: added cookie-same-site for version=0 (#6167, rep by stbu)

Resin 4.0.57

2018-07-10

Description

Bug fix release.

Change List

  • rewrite: added IfProtocolVersion (#6162, rep by stbu)
  • session: added cookie-same-site config for JSESSIONID cookies (#6140)
  • security: critical security issue related to URL normalization and servlet mapping (#6164)
  • resin-admin: clarify that dynamic servers cannot contact other dynamic servers directly (#6128)
  • web-app: possible deadlock/delay in startup (#6159, rep by drsskelkar)
  • elastic: missing synchronization on cloud update (#6152)
  • dependency: dependency-check of 0 forces synchronous check (#6116)
  • elastic: elastic server issues with dist-cache pod (#6157)
  • logging: default to LogManager.addLogger when EnvironmentLogger creation fails (#6121)
  • quercus: use alarm for timeouts instead of spawning new thread (#6156)
  • jdk10: removed -d64 from watchdog start
  • configure: change openssl test to ssl2.h (#6154, rep by gattu)

Download

To help us better understand our users, please be kind enough to provide your information.

Older releases are available in the download archive.