Cannot redirect to html

2012-11-26 Thread basilk
Hi. I’ve got a file, containg html and locating in relative directory. When i return it in a jsp page using out.write(), then everything is ok. But when i return it using response.sendRedirect(), i’ve got a 404 error. What seems to be a problem? Please, help. Thanks.

malware found the tomcat 6.0.29

2012-11-26 Thread Mohan Kumar G
We have found the malware installed on the tomcat version 6.0.29 on two of the servers.The both servers have a war file (Tomcatmanagxesaxsas.war) that installed several java script files to the Tomcat webserver that allow for remote access over the web. OD-VA-W-AG-87 had an additional war file (J

RE: Install - Tomcat Server on Mac OS X 10.8.2

2012-11-26 Thread Caldarale, Charles R
> From: Naga Kishore Vankayala [mailto:vnagakish...@hotmail.com] > Subject: RE: Install - Tomcat Server on Mac OS X 10.8.2 > Do you have any information or document on how we start the > server on Mac. Read the RUNNING.txt file, then use the startup.sh script. - Chuck THIS COMMUNICATION MAY

RE: Install - Tomcat Server on Mac OS X 10.8.2

2012-11-26 Thread Naga Kishore Vankayala
Thanks Daniel/Chuck. I have downloaded the tar.gz. Do you have any information or document on how we start the server on Mac. > Subject: Re: Install - Tomcat Server on Mac OS X 10.8.2 > From: dmik...@vmware.com > Date: Mon, 26 Nov 2012 17:02:58 -0500 > To: users@tomcat.apache.org > > On Nov 26,

Re: tomcat 6.0.35 with java 7 ssl proxy request body failed

2012-11-26 Thread Johanes Soetanto
On 26 November 2012 21:05, Konstantin Kolinko wrote: > 2012/11/26 Johanes Soetanto : >> Hi all, >> >> I am wondering whether there is a known issue with running Tomcat >> 6.0.35 with Java 7 ? >> > > 1. There certainly were fixes in Tomcat 7. I am not sure whether all > of them they were backported

Re: Tomcat ssl vulnerability CVE-2009-3555

2012-11-26 Thread Hermes Flying
Hi, yes I am sorry for not mentioning but I am using BIO connector. I am using IBM JRE 6. Not Oracle/Sun. That is why I am trying to figure out what component (Tomcat/Java) is the one that has the issue. I am not 100% it is the latest. From: Daniel Mikusa

Re: Tomcat ssl vulnerability CVE-2009-3555

2012-11-26 Thread Hermes Flying
Hi, yes I am sorry for not mentioning but I am using BIO connector. I am using IBM JRE 6. Not Oracle/Sun. That is why I am trying to figure out what component (Tomcat/Java) is the one that has the issue. I am not 100% it is the latest. From: Daniel Mikusa

Re: Tomcat ssl vulnerability CVE-2009-3555

2012-11-26 Thread Hermes Flying
Hi, yes I am sorry for not mentioning but I am using BIO connector. I am using IBM JRE 6. Not Oracle/Sun. That is why I am trying to figure out what component (Tomcat/Java) is the one that has the issue. I am not 100% it is the latest. From: Daniel Mikusa

Re: tomcat6 with crl doesn't load

2012-11-26 Thread Daniel Mikusa
On Nov 26, 2012, at 3:35 PM, Will Nordmeyer wrote: > have a new tomcat6.0.34 setup I'm configuring on my CentOS 6.3 (64 > bit). I've downloaded a series of CRLs for the certificate authorities > I am using, converted them from DER to PEM with openssl: > > openssl crl -inform DER -outform PEM -in

Re: Tomcat ssl vulnerability CVE-2009-3555

2012-11-26 Thread Daniel Mikusa
On Nov 26, 2012, at 3:36 PM, Hermes Flying wrote: > Hi, > I am running Tomcat 5.35 and I got a report that it is vulnerable to SSL > client renegotiation DoS. > > You notein your docs that this is not a Tomcat issue per se, but JSSE issue. > Please note that allowUnsafeLegacyRenegotiation is se

Re: Install - Tomcat Server on Mac OS X 10.8.2

2012-11-26 Thread Daniel Mikusa
On Nov 26, 2012, at 4:46 PM, Naga Kishore Vankayala wrote: > Hi All > > > I got a new mac book and am trying to install tomcat server on my mac book. I > searched formac version of tomcat and could not find it. Appreciate if > any one can point me to a site where i can download the server

RE: Install - Tomcat Server on Mac OS X 10.8.2

2012-11-26 Thread Caldarale, Charles R
> From: Naga Kishore Vankayala [mailto:vnagakish...@hotmail.com] > Subject: Install - Tomcat Server on Mac OS X 10.8.2 > I searched for mac version of tomcat and could not find it. Tomcat is pure Java, so it's platform agnostic. The Windows versions are there to facilitate its installation as

Re: Tomcat ssl vulnerability CVE-2009-3555

2012-11-26 Thread Hermes Flying
Hi, fair points. I got this report from 2 separate sources. The one I know for a fact comes from Nessus. The second I don't know if it is also from Nessus or some other tool (I will try to find out and let you know). I understand what you are saying about upgrade, and I will see if I can do that

Install - Tomcat Server on Mac OS X 10.8.2

2012-11-26 Thread Naga Kishore Vankayala
Hi All I got a new mac book and am trying to install tomcat server on my mac book. I searched formac version of tomcat and could not find it. Appreciate if any one can point me to a site where i can download the server Thanks in advance Thanks Naga

Re: Tomcat ssl vulnerability CVE-2009-3555

2012-11-26 Thread André Warnier
Hermes Flying wrote: Just to be clear. When I say report, I mean a report from a security penetration test suite which reports that the server allows renegotiation From: Hermes Flying To: "users@tomcat.apache.org" Sent: Monday, November 26, 2012 10:36 PM

Re: HttpServletReponse#sendError(int) behavior in ErrorReportValve

2012-11-26 Thread Michael-O
Am 2012-11-23 23:02, schrieb Mark Thomas: On 23/11/2012 22:00, Michael-O wrote: Am 2012-11-23 22:50, schrieb Mark Thomas: On 23/11/2012 21:44, Michael-O wrote: Am 2012-11-23 22:28, schrieb Mark Thomas: On 23/11/2012 21:23, Michael-O wrote: Am 2012-11-23 22:16, schrieb Mark Thomas: On 23/11/

Re: Tomcat ssl vulnerability CVE-2009-3555

2012-11-26 Thread Hermes Flying
Just to be clear. When I say report,  I mean a report from a security penetration test suite which reports that the server allows renegotiation From: Hermes Flying To: "users@tomcat.apache.org" Sent: Monday, November 26, 2012 10:36 PM Subject: Tomcat ssl vu

Tomcat ssl vulnerability CVE-2009-3555

2012-11-26 Thread Hermes Flying
Hi, I am running Tomcat 5.35 and I got a report that it is vulnerable to SSL client renegotiation DoS. You notein your docs that this is not a Tomcat issue per se, but JSSE issue. Please note that allowUnsafeLegacyRenegotiation is set to false. Looking into the source code I see the following:

tomcat6 with crl doesn't load

2012-11-26 Thread Will Nordmeyer
have a new tomcat6.0.34 setup I'm configuring on my CentOS 6.3 (64 bit). I've downloaded a series of CRLs for the certificate authorities I am using, converted them from DER to PEM with openssl: openssl crl -inform DER -outform PEM -in f1.der -out f1.pem_crl openssl crl -inform DER -outform PEM -i

Re: Using the Tomcat Native Library can only connect over ipv6 But not over ipv4

2012-11-26 Thread Zorro
Op 26-11-2012 20:31, Jeffrey Janner schreef: -Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: Monday, November 26, 2012 1:17 PM To: Tomcat Users List Subject: Re: Using the Tomcat Native Library can only connect over ipv6 But not over ipv4 -BEG

Re: Using the Tomcat Native Library can only connect over ipv6 But not over ipv4

2012-11-26 Thread André Warnier
Jeffrey Janner wrote: -Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: Monday, November 26, 2012 1:17 PM To: Tomcat Users List Subject: Re: Using the Tomcat Native Library can only connect over ipv6 But not over ipv4 -BEGIN PGP SIGNED MESSAGE--

Re: Logging cookies in Tomcat 7

2012-11-26 Thread Konstantin Kolinko
2012/11/26 Russ Kepler : > On Monday, November 26, 2012 01:44:25 PM Christopher Schultz wrote: > > so if there doesn't seem to be a general "print the cookies" pattern. I see > a %S and that seems to be printing You can print all cookies sent by the client with %{Cookie}i and new cookies sent b

RE: Using the Tomcat Native Library can only connect over ipv6 But not over ipv4

2012-11-26 Thread Jeffrey Janner
> -Original Message- > From: Christopher Schultz [mailto:ch...@christopherschultz.net] > Sent: Monday, November 26, 2012 1:17 PM > To: Tomcat Users List > Subject: Re: Using the Tomcat Native Library can only connect over ipv6 > But not over ipv4 > > -BEGIN PGP SIGNED MESSAGE- > Ha

Re: Logging cookies in Tomcat 7

2012-11-26 Thread Russ Kepler
On Monday, November 26, 2012 12:05:45 PM Russ Kepler wrote: > On Monday, November 26, 2012 01:44:25 PM Christopher Schultz wrote: > > On 11/26/12 1:27 PM, Russ Kepler wrote: > > > I'm running Tomcat 7 with juli logging enabled and so I'm seeing > > > the standard logfiles. In my access log I'm see

Re: Using the Tomcat Native Library can only connect over ipv6 But not over ipv4

2012-11-26 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Zorro, On 11/23/12 4:37 PM, Zorro wrote: > its not really a problem but if we ever migrate the internet to > IPv6 it would be brilliant to have the connector serving both > protocols which the http-bio-80 connector seems to be able to do Let me doubl

Re: How do I know if native plugin in use?

2012-11-26 Thread Tony Anecito
Thanks Chuck! Just call me paranoid I guess. :-) -Tony --- On Mon, 11/26/12, Christopher Schultz wrote: From: Christopher Schultz Subject: Re: How do I know if native plugin in use? To: "Tomcat Users List" Date: Monday, November 26, 2012, 12:01 PM -BEGIN PGP SIGNED MESSAGE- Hash: SH

Re: Logging cookies in Tomcat 7

2012-11-26 Thread Russ Kepler
On Monday, November 26, 2012 01:44:25 PM Christopher Schultz wrote: > On 11/26/12 1:27 PM, Russ Kepler wrote: > > I'm running Tomcat 7 with juli logging enabled and so I'm seeing > > the standard logfiles. In my access log I'm seeing the standard > > entries on each line and I'd like to see the c

Re: How do I know if native plugin in use?

2012-11-26 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chuck, On 11/24/12 2:41 PM, Caldarale, Charles R wrote: >> From: Tony Anecito [mailto:adanec...@yahoo.com] Subject: How do I >> know if native plugin in use? > >> I downloaded and installed TC 7.0.33 64-bit and was wondering how >> do I know the nati

Re: 答复: two questions about websocket in tomcat7.0.30

2012-11-26 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Zane, On 11/26/12 6:08 AM, zane_zh...@wistronits.com wrote: > The servlet is OK, and I have solved the problem. Can you please describe what the problem was and also the solution? This is a community of users and not a help desk. Please contribute ba

Re: Logging cookies in Tomcat 7

2012-11-26 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Russ, On 11/26/12 1:27 PM, Russ Kepler wrote: > I'm running Tomcat 7 with juli logging enabled and so I'm seeing > the standard logfiles. In my access log I'm seeing the standard > entries on each line and I'd like to see the cookies being passed > a

Re: Configuring access to an external directory

2012-11-26 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dude, On 11/24/12 8:17 PM, Baron Von Awsm wrote: > We have a requirement that can be stated as follows, > > * The web app needs to be able to read from and write to a > directory that is external to the webapp's own docBase and > directory structure.

Logging cookies in Tomcat 7

2012-11-26 Thread Russ Kepler
I'm running Tomcat 7 with juli logging enabled and so I'm seeing the standard logfiles. In my access log I'm seeing the standard entries on each line and I'd like to see the cookies being passed as well - is there an easy way to do this - a property to set on the start up or something similar?

答复: two questions about websocket in tomcat7.0.30

2012-11-26 Thread Zane_Zhang
The servlet is OK, and I have solved the problem. And I would like to know how to set the maximum idle time of connection of websocket, and why the function ( onclose() )on server side can be called in windows operating system when I unplug the network cable, but the it can not be called in li

Re: Tomcat performance problem

2012-11-26 Thread Mark Thomas
On 25/11/2012 00:50, Alex Moskvin wrote: > Hi, > > I am using Tomcat 7.0.30 and OpenEJB 4.5 to host high loaded app and at > some point found with VisualVM there is a bottleneck when there is a lot of > concurrent requests (about 400-600 req/sec). Requests and responses are > small (usually not la

Re: tomcat 6.0.35 with java 7 ssl proxy request body failed

2012-11-26 Thread Konstantin Kolinko
2012/11/26 Johanes Soetanto : > Hi all, > > I am wondering whether there is a known issue with running Tomcat > 6.0.35 with Java 7 ? > 1. There certainly were fixes in Tomcat 7. I am not sure whether all of them they were backported to Tomcat 6 or not. I think you would have better luck (and a fa

AW: Configuring access to an external directory

2012-11-26 Thread Stadelmann Josef
If your OS supports ACL's (Access Control Lists) then adding an ACE (Access Control Entry) to the ACL (Access Control List) of the directory, would tell the file system that the user i.e. WWW$APACHE (or how the account under which Tomcat works is called) has Read, Write, Execute access to the di

AW: How do I know if native plugin in use?

2012-11-26 Thread Stadelmann Josef
Apache Tomcat Native library is a dll (isn't it?); So rename it for a moment, restart tomcat and view the startup output, and if it tells you that it cannot find that Apache Tomcat Native library dll, then it would like to use it in fact. Josef -Ursprüngliche Nachricht- Von: Zorro [mail