Re: OCSP with TOMCAT 7

2013-03-20 Thread Amit A
Could not find anything achived on this topic Search query: http://marc.info/?l=tomcat-user&w=2&r=1&s=tomcat+ocsp&q=t Further pointers please? On Wed, Mar 20, 2013 at 4:23 PM, André Warnier wrote: > Amit A wrote: > >> I need to enable OCSP on my application which is running Tomcat 7.0.29. >> L

Re: [OT] Sharing lots of little pieces of data across a cluster

2013-03-20 Thread Albert Kam
I am not sure this might suit you, but if i am currently thinking of http://redis.io/ Key and value storage (binary value is supported), expiry is supported, support scaling horizontally, can be set to be non-persistent (only in memory, which is fast) For more complex data structures, and more abi

Re: Tomcat Behavior on Multiple HTTP requests from same browser

2013-03-20 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 André, On 3/20/13 2:25 PM, André Warnier wrote: > Saurabh Agrawal wrote: >> All our assets are served from L3 CDN. So the asset requests >> never come to the application server. > > That, I do not understand. I do not understand what you mean by >

[OT] Sharing lots of little pieces of data across a cluster

2013-03-20 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, I have an in-process "service" that stores valid nonces on a server for a particular set of client operations. The nonces are created once, then expire after a certain amount of time. They never change. I'd like to make this in-process service

BIO acceptorThreadCount

2013-03-20 Thread igaz
I was curious as to people's actual experience with setting a Connector's acceptorThreadCount while using the BIO http connection (the default) Frankly, I was unaware that java.net.ServerSockets were multi-thread safe (although interestingly the javadoc explicitly states that ServerSocketChannels

Re: 501 error not going to location

2013-03-20 Thread Shelley
> > 1. How to you send your error and how do you test it? > I'm testing the error with simple HTTP clients that send requests using HTTP methods that the container and my app don't support by default (e.g. COPY, PROPFIND). While debugging my app, it's clear that the HTTP method and request are bei

Re: Tomcat 6.0.20/Windows 2008 R2/SSL Configuration

2013-03-20 Thread my business mail
On Wed, Mar 20, 2013 at 3:38 PM, Mark Eggers wrote: > Comments inline and also I pasted your configuration in from a previous > email. > > > On 3/20/2013 11:39 AM, my business mail wrote: > >> I only added the keystore property not truststore. I was just following >> what i'd done for tomcat4.1 o

Re: 501 error not going to location

2013-03-20 Thread Konstantin Kolinko
2013/3/20 Shelley : > I've configured an error-page in my web.xml to handle 501 error-codes, but > the resource specified in the location entry is not being returned by the > container as expected. > > Here is the content of my web deployment descriptor. Note that the 404 > error-page works as expe

RE: SSL Best Practices

2013-03-20 Thread Jeffrey Janner
> -Original Message- > From: Jeffrey D. Fisher [mailto:jeff.fisher12...@cox.net] > Sent: Tuesday, March 19, 2013 9:34 AM > To: 'Tomcat Users List'; mgai...@hotmail.com > Subject: RE: SSL Best Practices > > Yes, I do have a CA-issued certificate with a chain to a trusted CA. > I've imported

Re: Tomcat 6.0.20/Windows 2008 R2/SSL Configuration

2013-03-20 Thread Mark Eggers
Comments inline and also I pasted your configuration in from a previous email. On 3/20/2013 11:39 AM, my business mail wrote: I only added the keystore property not truststore. I was just following what i'd done for tomcat4.1 on w2k3. In general, don't do this. Tomcat 4.1 (rest its weary code

Re: Tomcat 6.0.20/Windows 2008 R2/SSL Configuration

2013-03-20 Thread Cédric Couralet
2013/3/20 Harris, Jeffrey E. : > >> -Original Message- >> From: my business mail [mailto:mv.ma...@gmail.com] >> Sent: Wednesday, March 20, 2013 2:39 PM >> To: Tomcat Users List >> Subject: Re: Tomcat 6.0.20/Windows 2008 R2/SSL Configuration >> >> I only added the keystore property not trust

RE: Tomcat 6.0.20/Windows 2008 R2/SSL Configuration

2013-03-20 Thread Harris, Jeffrey E.
> -Original Message- > From: my business mail [mailto:mv.ma...@gmail.com] > Sent: Wednesday, March 20, 2013 2:39 PM > To: Tomcat Users List > Subject: Re: Tomcat 6.0.20/Windows 2008 R2/SSL Configuration > > I only added the keystore property not truststore. I was just following > what i'd

Re: Tomcat 6.0.20/Windows 2008 R2/SSL Configuration

2013-03-20 Thread my business mail
I only added the keystore property not truststore. I was just following what i'd done for tomcat4.1 on w2k3. Here is the log file. The keystore file is DEF in the path indicated, but i see the error below in the catalina file. Mar 20, 2013 2:35:21 PM org.apache.catalina.startup.SetAllPropertiesRu

Re: Tomcat 6.0.20/Windows 2008 R2/SSL Configuration

2013-03-20 Thread André Warnier
Hi my business mail. Don't top-post. my business mail wrote: On Wed, Mar 20, 2013 at 2:09 PM, David kerber wrote: On 3/20/2013 2:02 PM, my business mail wrote: OK, here is the text copied from notepad. 8442? Shouldn't it be 8443? maxThreads="150" scheme

RE: Tomcat 6.0.20/Windows 2008 R2/SSL Configuration

2013-03-20 Thread Harris, Jeffrey E.
> -Original Message- > From: my business mail [mailto:mv.ma...@gmail.com] > Sent: Wednesday, March 20, 2013 2:18 PM > To: Tomcat Users List > Subject: Re: Tomcat 6.0.20/Windows 2008 R2/SSL Configuration > > So, I know the port numbers can be set to any unused port. I was > toggling betwe

Re: Tomcat Behavior on Multiple HTTP requests from same browser

2013-03-20 Thread André Warnier
Saurabh Agrawal wrote: -Original Message- From: André Warnier [mailto:a...@ice-sa.com] Sent: Wednesday, March 20, 2013 3:27 PM To: Tomcat Users List Subject: Re: Tomcat Behavior on Multiple HTTP requests from same browser Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- H

Re: Tomcat 6.0.20/Windows 2008 R2/SSL Configuration

2013-03-20 Thread my business mail
So, I know the port numbers can be set to any unused port. I was toggling between 8442 and 8443. Neither worked. I just set it back to 8443. I feel like it's connecting somehow, because if I put in a port number that isn't configured...I get a connection error message. Otherwise, the browser icon

Re: Tomcat 6.0.20/Windows 2008 R2/SSL Configuration

2013-03-20 Thread David kerber
On 3/20/2013 2:02 PM, my business mail wrote: OK, here is the text copied from notepad. 8442? Shouldn't it be 8443? maxThreads="150" scheme="https" secure="true" clientAuth="false" sslProtocol="TLS" keystoreFile="D:/DevCert/dev.keystore" keysto

Re: Tomcat 6.0.20/Windows 2008 R2/SSL Configuration

2013-03-20 Thread my business mail
OK, here is the text copied from notepad.

Re: Tomcat 6.0.20/Windows 2008 R2/SSL Configuration

2013-03-20 Thread David kerber
On 3/20/2013 1:41 PM, my business mail wrote: HI, I un-commented the SSL section in the server.xml file and added the path and password to the keystore. But when accessing the https://localhost:8443/ URL, it just keeps spinning. no error , it just doesn't seem to connect. This is my first time

RE: Tomcat Behavior on Multiple HTTP requests from same browser

2013-03-20 Thread Saurabh Agrawal
-Original Message- From: André Warnier [mailto:a...@ice-sa.com] Sent: Wednesday, March 20, 2013 3:27 PM To: Tomcat Users List Subject: Re: Tomcat Behavior on Multiple HTTP requests from same browser Christopher Schultz wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Saura

Re: AW: [tomcat] preventing to use it at startup

2013-03-20 Thread Mark Thomas
On 20/03/2013 16:14, Stadelmann Josef wrote: > Thank you Jeffrey > > BUT > we are not FW owner, AND > we are so tiny little smalls in the AXA world AND > our holly FW godfather admin is keeping his fingers on the holly FW. > > But why can tomcat not close and open the port 8080 and keep > it in

RE: [tomcat] preventing to use it at startup

2013-03-20 Thread Harris, Jeffrey E.
> -Original Message- > From: Stadelmann Josef [mailto:josef.stadelm...@axa-winterthur.ch] > Sent: Wednesday, March 20, 2013 12:15 PM > To: Tomcat Users List > Subject: AW: [tomcat] preventing to use it at startup > > Thank you Jeffrey > > BUT > we are not FW owner, AND > we are so tiny li

AW: [tomcat] preventing to use it at startup

2013-03-20 Thread Stadelmann Josef
Thank you Jeffrey BUT we are not FW owner, AND we are so tiny little smalls in the AXA world AND our holly FW godfather admin is keeping his fingers on the holly FW. But why can tomcat not close and open the port 8080 and keep it in a way inexistent for external access unless the server is real

Re: Tomcat jdbc-pool not closing statements

2013-03-20 Thread Bertrand Guay-Paquet
Bug reported at https://issues.apache.org/bugzilla/show_bug.cgi?id=54732 Due to another bug in TomEE, StatementCache is always enabled. That bug is reported here: https://issues.apache.org/jira/browse/TOMEE-837 Thanks for your help On 20/03/2013 7:28 AM, Felix Schumacher wrote: Am 19.03.2013

Re: Tomcat jdbc-pool not closing statements

2013-03-20 Thread Bertrand Guay-Paquet
Bug reported at https://issues.apache.org/bugzilla/show_bug.cgi?id=54732 Due to another bug in TomEE, StatementCache is always enabled. That bug is reported here: https://issues.apache.org/jira/browse/TOMEE-837 Thanks for your help On 20/03/2013 7:28 AM, Felix Schumacher wrote: Am 19.03.2013

Re: Tomcat Behavior on Multiple HTTP requests from same browser

2013-03-20 Thread André Warnier
Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Saurabh, On 3/19/13 9:46 PM, Saurabh Agrawal wrote: maxThreads="${tomcat.maxthreads}" minSpareThreads="${tomcat.minsparethreads}" maxIdleTime="${tomcat.maxidletime}"/> port="${tomcat.ajp.port}" maxHttpHeaderSize="819

RE: Tomcat Behavior on Multiple HTTP requests from same browser

2013-03-20 Thread Caldarale, Charles R
> From: Saurabh Agrawal [mailto:sagra...@sapient.com] > Subject: RE: Tomcat Behavior on Multiple HTTP requests from same browser > We have not set the "keep alive" explicitly in tomcat's server.xml. It's on by default. > s defined; are the requests coming in over both or just one of them? Th

Re: Tomcat Behavior on Multiple HTTP requests from same browser

2013-03-20 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Saurabh, On 3/19/13 9:46 PM, Saurabh Agrawal wrote: > maxThreads="${tomcat.maxthreads}" > minSpareThreads="${tomcat.minsparethreads}" > maxIdleTime="${tomcat.maxidletime}"/> port="${tomcat.ajp.port}" maxHttpHeaderSize="8192" maxThreads="200" >

Re: Tomcat Behavior on Multiple HTTP requests from same browser

2013-03-20 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 André, On 3/20/13 6:52 AM, André Warnier wrote: > If I may add something : at some point, on each Tomcat server, > there is only 1 "listening socket" for one port (the point being : > you could have several, but you won't have 8000). So even if you

Re: Tomcat Behavior on Multiple HTTP requests from same browser

2013-03-20 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Saurabh, On 3/20/13 3:27 AM, Saurabh Agrawal wrote: > The point I was trying to make when I mentioned that all requests > from the same browser results in same thread is not a mere > coincidence. The reason why it may not be sheer luck is because

RE: Tomcat Behavior on Multiple HTTP requests from same browser

2013-03-20 Thread Saurabh Agrawal
There will be a load of 20,000 users for a special festival for around 4-5 hours ONLY. Regards, Saurabh Agrawal Manager Technology | Sapient -Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: Wednesday, March 20, 2013 1:48 PM To: Tomcat Users List

Re: Tomcat Behavior on Multiple HTTP requests from same browser

2013-03-20 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Nick, On 3/19/13 10:31 PM, Nick Williams wrote: > I'm glad to see that you have a working cluster of some sorts and > that you are performing load tests to evaluate its performance. > This means you are on the right track, making some good decision

Re: Tomcat Behavior on Multiple HTTP requests from same browser

2013-03-20 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Saurabh, On 3/19/13 8:55 PM, Saurabh Agrawal wrote: > What I want to understand is if the Tomcat will keep Thread 1 as > persistent thread to server the second request (for login) from > the same browser or will it assign a separate thread from the

RE: [tomcat] preventing to use it at startup

2013-03-20 Thread Harris, Jeffrey E.
> -Original Message- > From: Stadelmann Josef [mailto:josef.stadelm...@axa-winterthur.ch] > Sent: Wednesday, March 20, 2013 5:06 AM > To: users@tomcat.apache.org > Subject: [tomcat] preventing to use it at startup > > Hi > > Is there an easy way to manage, to prevent, that my AS Tomcat is

Re: Upgrading Tomcat in the customer base

2013-03-20 Thread André Warnier
Pid wrote: On 19/03/2013 19:24, Patrick Flaherty wrote: Hi, We deploy tomcat in our own folder (c:\rsi_tc\tomcat) on a WIndows machine as a service. We use the service.bat to install as a service. Historically to update tomcat we would remove the current version and install the new version. The

Re: Upgrading Tomcat in the customer base

2013-03-20 Thread Pid
On 19/03/2013 19:24, Patrick Flaherty wrote: > Hi, > > We deploy tomcat in our own folder (c:\rsi_tc\tomcat) on a WIndows > machine as a service. We use the service.bat to install > as a service. Historically to update tomcat we would remove the current > version and install the new version. There

Re: Tomcat jdbc-pool not closing statements

2013-03-20 Thread Felix Schumacher
Am 19.03.2013 22:20, schrieb Bertrand Guay-Paquet: On 19/03/2013 5:05 PM, Felix Schumacher wrote: Have you looked at http://grokbase.com/t/openejb/users/13135d2a0v/jdbc-connection-pool-memory-leak ? It seems like your problem. Regards Felix Indeed, this is extremely similar to my issue. Thank

Re: OCSP with TOMCAT 7

2013-03-20 Thread André Warnier
Amit A wrote: I need to enable OCSP on my application which is running Tomcat 7.0.29. Looked up the documentation but did not find quite much : http://tomcat.apache.org/tomcat-7.0-doc/ssl-howto.html 1. Is OCSP with just tomcat actually possible? Do we need a external module/software? 2. Has anyo

Re: Tomcat Behavior on Multiple HTTP requests from same browser

2013-03-20 Thread André Warnier
Mark Thomas wrote: Nick Williams wrote: On Mar 19, 2013, at 8:49 PM, Saurabh Agrawal wrote: Hi Nick, We currently have 8 tomcat nodes with each node configured to have 1000 maxThreads. We did a round of performance test for 8000 concurrent users and the observation was that the number of a

Re: Manager App not working with Windows authentication enabled

2013-03-20 Thread André Warnier
Harris Mark R wrote: Sorry, guess I was not clear enough. We are using Microsoft's IIS to front-end Tomcat, not the Apache HTTP server. Apache HTTP server is not an option for our environment. We would prefer to use the Windows authenticated user passed to Tomcat by IIS, but are open to any

Re: SSL Best Practices

2013-03-20 Thread Ognjen Blagojevic
Jeffrey, On 19.3.2013 15:33, Jeffrey D. Fisher wrote: Yes, I do have a CA-issued certificate with a chain to a trusted CA. I've imported it to the keystore. I am close to a solution. When I attempt to open the default Apache web page using "https:" I get an error page that says that the serve

Re: Tomcat Behavior on Multiple HTTP requests from same browser

2013-03-20 Thread Mark Thomas
Nick Williams wrote: >On Mar 19, 2013, at 8:49 PM, Saurabh Agrawal wrote: > >> Hi Nick, >> >> We currently have 8 tomcat nodes with each node configured to have >1000 maxThreads. We did a round of performance test for 8000 concurrent >users and the observation was that the number of active execu

RE: Tomcat Behavior on Multiple HTTP requests from same browser

2013-03-20 Thread Saurabh Agrawal
Hi Nick, Thanks for your valuable feedback. The point I was trying to make when I mentioned that all requests from the same browser results in same thread is not a mere coincidence. The reason why it may not be sheer luck is because we have seen this on production which is accessed by more than