can one app check another is available?

2005-10-06 Thread Paul Singleton
the data app is responding whenever it restarts. I can do this if I know the full URL, but is there any way I can check with just the server-relative URL? Currently I do something like (new java.net.URL(...)).openConnection() (hmm, sorry but I guess this isn't Tomcat-specific...) Paul Sin

Re: Deploying a webapp under two different URIs

2005-10-05 Thread Paul Singleton
k.net but I don't know of any way to alias a Context. Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.344 / Virus Database: 267.11.10/119 - Release Date: 4/Oct/2005 - To

Re: an advice neede for use of encodeURL method...

2005-10-05 Thread Paul Singleton
jonas skrebys wrote: Hi everyone, could anyone help me understand what I am doing wrong... I want to put a session tracking into my jsp page. I use response.encodeURL method to rewrite all url in my page : "> also I think u should not have the space in "/appName/myJSP.jsp?parameter ="

manager for address-based virtual hosts?

2005-10-05 Thread Paul Singleton
Is there a version of the Manager app which handles all address-based virtual hosts in a Tomcat system? I've tried ManagerX which embraces name-based hosts but not the address-based ones which our SSL-enabled apps require... Paul Singleton -- No virus found in this outgoing message. Ch

Re: Running Tomcat as Non-Root under Linux listen for port 80

2005-09-28 Thread Paul Singleton
8080 /sbin/iptables -A FORWARD -p tcp -i eth0 -d 222.123.197.100 --dport 8080 -j ACCEPT Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.344 / Virus Database: 267.11.8/113 - Release Date: 2

ManagerX for 5.5.9

2005-09-27 Thread Paul Singleton
way, and should I notice any difference? I am using it because I have several virtual hosts, both name-based and (where SSL is requirede) address-based, and wish to manage the whole lot together. Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version

virtual host apps in a common appBase

2005-09-25 Thread Paul Singleton
=true). This does what I want, but seems inelegant: can I do better? Am I missing something? Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.344 / Virus Database: 267.11.6/111 - Release Date: 23/Sep

Re: Can't change servlet path

2005-09-25 Thread Paul Singleton
.t will be infered [sic] from the filenames used for either the .xml context file or the docBase." From which I infer that the Context element for the default web application of a virtual host should be held in a file named .xml ? Paul Singleton -- No virus found in this outgoing messag

Re: tomcat and firefox ssl problem - no common encryption algorithms

2005-09-22 Thread Paul Singleton
Have you explicitly set the sslProtocol attribute in your SSL connector (despite the docs this is necessary in 5.5.9, fixed thereafter) Have you tried another browser in case you get a more helpful message (what Firefox said is not true)? cheers Paul Singleton -- No virus found in this outgoi

conf/tomcat-users.xml syntax and semantics

2005-09-21 Thread Paul Singleton
ard' a built-in role, and if so what is it for? Finally (for now) I don't understand why my tomcat-users.xml gets touched (at least) at each restart, and has its permissions reset (from -rw------- to -rw-rw-r--) Paul Singleton -- No virus found in this outgoing message. Checked by AVG Ant

relaying SSL request to a non-SSL server

2005-09-19 Thread Paul Singleton
and writing the image data to the ServletOutputStream. Is there an easier way? I cannot SSL-enable the image server :-( If I do this, how should I read the binary data from the InputStream and write it to the ServletOutputStream? Paul Singleton -- No virus found in this outgoing message

Re: large content directory out of the webapp

2005-09-14 Thread Paul Singleton
Eickvonder Bjoern wrote: Hello, my webapplication consists of a rather small set of classes, jsps and so on but has got a rather large content directory (some GB). My problem is now if I want to update only the application itself but not the content by uploading a new war-file I nevertheless hav

Re: Turning off the containers session

2005-09-08 Thread Paul Singleton
Atif Suleman wrote: Can you stop tomcat container from creating a jsession cookie? Check out the attribute in http://jakarta.apache.org/tomcat/tomcat-5.5-doc/config/context.html (similarly in 5.0 and 4.1) Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti

Re: HTTP status code 404

2005-09-05 Thread Paul Singleton
QM wrote: On Mon, Sep 05, 2005 at 06:28:05PM +0100, Paul Singleton wrote: : But we want *no* error page, just a 404 status returned to : the browser, which will then presumably present this failure : to the user in its own way. Or have I musunderstood 404s? Yes and no. Browsers are free to

Re: HTTP status code 404

2005-09-05 Thread Paul Singleton
owser, which will then presumably present this failure to the user in its own way. Or have I musunderstood 404s? Exactly what element will achieve this, and where should we call ...setStatus(...NOT_FOUND)? Paul Singleton Mirek Stohr wrote: You should use the following proc

Re: With tomcat 5 redirects to a secure port fails

2005-08-31 Thread Paul Singleton
the "www." defined. OK but I can't see that it is Tomcat which is responsible for this: the config details you supply look plausible but are irrelevant. Check your web.xml for the site's welcome page, then check the content of this page. Paul Singleton We had this set up

Re: Use port 443 as non-ssl

2005-08-22 Thread Paul Singleton
he default Connector attributes in your conf/server.xml Im not using the ssl (it is between ). Good - leave it there :-) Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.338 / Virus Database: 267.10.13/78 - Relea

Re: Use port 443 as non-ssl

2005-08-22 Thread Paul Singleton
requirement for this anyway? (at a guess, something about getting through a firewall?) Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.338 / Virus Database: 267.10.13/78 - Rele

Re: tomcat 5.5.9 not recompiling JSPs

2005-08-22 Thread Paul Singleton
Mark Hagger wrote: ... Although to be honest I suspect that the best solution for production boxes is to pre-compile all jsps into the war file anyway. Is this possible? Don't different containers store the compiled pages in different places, with different names? Paul Singleton

Re: refusing low-grade SSL connections

2005-08-22 Thread Paul Singleton
0 bit (!) (the exclamation marks are serversniff's :-) so I am proposing to add a Connector attribute ciphers="EDH-RSA-DES-CBC3-SHA,DES-CBC3-SHA,DHE-RSA-AES128-SHA,AES128-SHA,RC4-SHA,RC4-MD5" and hope that every legitimate client supports at least one of these? Paul Singleton wr

refusing low-grade SSL connections

2005-08-19 Thread Paul Singleton
. How can we achieve all this (esp. with Tomcat 5.5)? Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.338 / Virus Database: 267.10.12/77 - Release Date: 18/Aug/2005 - To

Re: SSL with Tomcat 55

2005-08-19 Thread Paul Singleton
trust a certificate from Verisign... My guess is that she can configure JDeveloper to ignore certificate errors. If your objective is, as you say, to get Tomcat working with SSL, then I think you are already there. Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti

Re: session problems: www.blahblah.com versus blahblah.com

2005-08-15 Thread Paul Singleton
ic site which just serves e.g. <%= a.appTitle %>: redirection page http://blahblah.com"; /> http://blahblah.com')"> NB I haven't actually *tried* this :-) Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus.

Re: TomCat 5.5.9 - 8443

2005-08-15 Thread Paul Singleton
r timeout? Page not found? Do the startup msgs claim that e.g. 09-Aug-2005 15:29:04 org.apache.coyote.http11.Http11Protocol init INFO: Initializing Coyote HTTP/1.1 on http-8443 09-Aug-2005 15:29:09 org.apache.coyote.http11.Http11Protocol start INFO: Starting Coyote HTTP/1.1 on http-8443

Re: suppress directory listing

2005-08-15 Thread Paul Singleton
Many thanks to Tim, Arup, Stephen and Aaron for three different solutions (per-directory, per-application and per-Tomcat), *all* of which I reckon oughta be in the FAQ :) cheers Paul Singleton My JSP app has a /images folder and Tomcat 5.5.9 happily serves up a directory listing of this: how

Re: How "force" Tomcat 5.5.4 to always use URL Rewriting

2005-08-14 Thread Paul Singleton
t sessions in different browser tabs?) (OK I could switch off cookies in the browser but that would affect other things...) but also because it makes support issues cookie-independent hence simpler. But what is the rationale for Tomcat preferring to use cookies? is there a downside to avoiding them? P

Re: anonymising Tomcat

2005-08-14 Thread Paul Singleton
umably that catches exceptions, and we only need to handle nonexistent-page errors? I'll re-read the 2.2 spec... Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.338 / Virus Database: 267.10.8/71 - Release Date: 12/Aug/2005

Re: Security Questions Regarding Tomcat

2005-08-12 Thread Paul Singleton
. Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.338 / Virus Database: 267.10.7/70 - Release Date: 11/Aug/2005 - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands

Re: Using more than one SSL cert in keystore?

2005-08-09 Thread Paul Singleton
JavaScript): redirection page http://me.com/myapp')"> and I think you can also do it with an HTTP header but I don't have details to hand... Paul S. Justin Jaynes --- Paul Singleton <[EMAIL PROTECTED]> wrote: Justin

Re: anonymising Tomcat

2005-08-08 Thread Paul Singleton
catalina.jar into server/classes and then delete it from server/lib before altering the properties? Are all references to Tomcat's description and version number derived from these properties, and is this new in 5.5.10 (we use 5.5.9 in production)? cheers Paul Singleton -- No virus found in this out

Re: anonymising Tomcat

2005-08-05 Thread Paul Singleton
Peter Crowther wrote: From: Paul Singleton [mailto:[EMAIL PROTECTED] Is it possible to configure Tomcat (5.5.9) so that a moderately able hacker couldn't figure out what is serving up our web apps? It's possible to add the 'server' attribute to the connector def

anonymising Tomcat

2005-08-04 Thread Paul Singleton
Is it possible to configure Tomcat (5.5.9) so that a moderately able hacker couldn't figure out what is serving up our web apps? Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.338 / Virus Database: 267.10.0/63 - Release Date: 3/Aug

Re: Which Oracle JDBC Drive for JDK 1.5?

2005-08-04 Thread Paul Singleton
I noticed there are JDBC drivers for 10.1.0.2 and 10.1.0.4. Which should I use? I've always found that Oracle JDBC drivers are backwards compatible (not that I've driven them very hard) so I'd use the .4 (or should I patch to 10.1.0.4) not if it ain't broke :-) Paul S. -- No virus found in

suppress directory listing

2005-08-04 Thread Paul Singleton
My JSP app has a /images folder and Tomcat 5.5.9 happily serves up a directory listing of this: how can I suppress this? Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.338 / Virus Database: 267.10.0/63 - Release Date: 3/Aug/2005

Re: Using more than one SSL cert in keystore?

2005-08-04 Thread Paul Singleton
ot; explicitly, fixed in later versions) Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.338 / Virus Database: 267.10.0/63 - Release Date: 3/Aug/2005 - To unsubscribe, e-mail: [E

How to exclude weak ciphers from SSL in 5.5?

2005-08-04 Thread Paul Singleton
ciphers I *don't* want, not the ones I do... Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.338 / Virus Database: 267.10.0/63 - Release Date: 3/Aug/2005 - To unsubscribe, e

Re: newbie can't start tomcat

2005-07-11 Thread Paul Singleton
but the first option should be -server Paul Singleton dsimmons wrote: I have been googling the archives and anyplace else I can think of for my particular problem, for about three days, without success. ANY help would be greatly appreciated. I suspect a simple path problem or a missin

Re: [OT] UK tomcat hosting recommendations?

2005-07-08 Thread Paul Singleton
would be appreciated. Check out 2020media.com - they meet your requirements Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus Database: 267.8.10/43 - Release Date: 6/Jul/2005

Re: Certificate Authentication for individual apps

2005-07-01 Thread Paul Singleton
(undocumented) keyAlias="myalias" Connector attribute to offer the appropriate certificate for each host, e.g. (in 5.5.9 you also need sslProtocol="TLS" explicitly) Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.

how many Manager apps need I configure?

2005-06-29 Thread Paul Singleton
I have two virtual hosts under 5.5.9, on separate IP addresses and with different SSL certificates, each with just one web app. The Manager App HOW-TO says: If you have Tomcat configured to support multiple virtual hosts (websites) you would need to configure a Manager for each. so I did, but

naming of individual Context files

2005-06-29 Thread Paul Singleton
xt element per file? Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus Database: 267.8.6/33 - Release Date: 28/Jun/2005 - To unsubscribe, e-mail: [EMAIL PROT

Re: SSL keystore with more than one key entry - which alias is used?

2005-06-17 Thread Paul Singleton
with 5.5.9 and which means you (probably) don't need an answer to your question Paul Singleton PS don't believe rumours that it always offers the cert with alias 'tomcat' -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus Database:

Re: email from tomcat

2005-06-14 Thread Paul Singleton
Jenny Yang wrote: Can anyone tell me how to use email from tomcat? Tomcat doesn't do email, but it does Java and Java does email. Search the Web for "JavaMail tutorial" Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.323 /

default IP address connector binding?

2005-06-08 Thread Paul Singleton
My Linux server's eth0 supports ten IP addresses. What happens (in 5.5.9) if my HTTP Connector doesn't specify an address = 216.119.217.240 attribute? Does it use the first one? all of them? (it's working but I need to know exactly what it's doing) Paul Singleton

multiple virtual HTTPS hosts (5.5.9)

2005-06-05 Thread Paul Singleton
. Currently I am having problems with IP address bindings and multiple certificates in one keystore (sould perhaps get around this with multiple keystores). Has anyone got this to work? If so, how (please!!!) NB TC runs under Fedora Core 3 and Sun's JDK 1.5.0_02 Paul Singleton

binding 5.5.9 HTTP connector to specific IP address

2005-06-05 Thread Paul Singleton
refused". What could be going wrong? Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus Database: 267.6.2 - Release Date: 4/Jun/2005 - To unsubscribe, e-mail: [

5.5.9's choice of certificate from keystore

2005-06-05 Thread Paul Singleton
implement multi-IP-address-based virtual root-certified HTTPS hosts)? (Empirically, it seems to pick an arbitrary root certificate if it can find one, else an arbitrary self-signed one...) Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus

sslProtocol default value in 5.5.9 - broken?

2005-06-05 Thread Paul Singleton
"TLS" then it works fine, but if I leave it out, requests just hang and eventually time out (Firefox says "The request to xxx.yyy has terminated unexpectedly. Some data may have been transferred") Am I missing something, is this a documentation bug or a Tomcat bug? Paul S

replying to msgs in digest

2005-05-27 Thread Paul Singleton
If I subscribe only to tomcat-user Digest, how can I send a follow-up to a particular msg? Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.322 / Virus Database: 266.11.17 - Release Date: 25/May/2005

SSL on multiple IP addreses?

2005-05-12 Thread Paul Singleton
there a neater way? Paul Singleton Jambusters Ltd -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.308 / Virus Database: 266.11.8 - Release Date: 10/May/2005 - To unsubscribe, e-mail: [EMAIL PROT