Re: Documentation on Connectors needs updating

2014-12-01 Thread Daniel Mikusa
On Mon, Dec 1, 2014 at 2:05 PM, Igal @ getRailo.org wrote: > Chris, > > On 11/28/2014 6:26 AM, Christopher Schultz wrote: > > 4. Tomcat can server static content just as quickly as httpd. > > I remember that years ago it was recommended to front Tomcat with a web > server in order to serve static

Re: Client certificates not authenticated by realm

2014-12-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Andrew, On 12/1/14 4:32 PM, Andrew Gronosky wrote: > Problem solved. > > The issue was tomcat-users.xml should contain the client's CN as > the user name, like this: > >username="CN=client1, OU=Application Development, O=GoSmarter, > L=Bangal

Re: Client certificates not authenticated by realm

2014-12-01 Thread Andrew Gronosky
Problem solved. The issue was tomcat-users.xml should contain the client's CN as the user name, like this: So Chris was definitely on the right track when he (I assume, maybe incorrectly, "Chris" is male) inquired about the CNs in my client certs. Thanks again, Chris! -Andrew Gronosk

Re: Client certificates not authenticated by realm

2014-12-01 Thread Andrew Gronosky
On 2014-12-01 15:14, Christopher Schultz wrote: What do the CNs look like for your client certs? - -chris Hi Chris, Thanks for the very quick reply! For the testClient_2 client cert, the CN is: Owner: CN=testClient_2, OU=ATAK, O=BBN, L=Cambridge, ST=MA, C=US Issuer: CN=marti-ca, O=BBN, L=C

Re: Documentation on Connectors needs updating

2014-12-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Igal, On 12/1/14 2:05 PM, Igal @ getRailo.org wrote: > Chris, > > On 11/28/2014 6:26 AM, Christopher Schultz wrote: >> 4. Tomcat can server static content just as quickly as httpd. > > I remember that years ago it was recommended to front Tomcat w

Re: Client certificates not authenticated by realm

2014-12-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Andrew, On 12/1/14 2:33 PM, Andrew Gronosky wrote: > Hello, > > I am trying to set up client-certificate authentication for Tomcat > 7.0.57. I have read the basics in the docs and I have my > configuration working up to a point. > > My problem is

Re: CloseReason 1002

2014-12-01 Thread Mark Thomas
On 01/12/2014 18:30, Jason Ricles wrote: > What might be causing this error on concurrent writes in a websocket, The fact you are doing concurrent writes? The Java WebSocket API doesn't allow that. And it should stop you with a suitable exception. Mark > CloseReason: code [1002], reason [The cli

Client certificates not authenticated by realm

2014-12-01 Thread Andrew Gronosky
Hello, I am trying to set up client-certificate authentication for Tomcat 7.0.57. I have read the basics in the docs and I have my configuration working up to a point. My problem is that Tomcat accepts the client's connection, but returns HTTP status 401 for pages the user is supposed to be

Re: Documentation on Connectors needs updating

2014-12-01 Thread Igal @ getRailo.org
Chris, On 11/28/2014 6:26 AM, Christopher Schultz wrote: > 4. Tomcat can server static content just as quickly as httpd. I remember that years ago it was recommended to front Tomcat with a web server in order to serve static content. I understand from your statement that this is not the case any

CloseReason 1002

2014-12-01 Thread Jason Ricles
What might be causing this error on concurrent writes in a websocket, CloseReason: code [1002], reason [The client frame set the reserved bits to [2] which was not supported by this endpoint]? - To unsubscribe, e-mail: users-unsub

Re: tomcat7-maven-plugin and mail

2014-12-01 Thread Chris Gamache
A few things you might take a look at. I don't think the Tomcat plugin requires javax.mail or activation by itself. That part of the plugin definition probably isn't doing what you intended it to do. I think you might want to remove the section. By including ... org.apache.commons com

Re: APR with PKCS11 support

2014-12-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Sanaullah, On 12/1/14 6:09 AM, Sanaullah wrote: > I have attached the diff [that allows external crypto decides to > be used via tcnative). let me know if its ok? For reference, here's the diff: > > 304c304 < #if 1 //HAVE_ENGINE_LOAD_BUILTIN_ENGI

Back to back writes to websocket server weird behavior

2014-12-01 Thread Jason Ricles
I have a binary queue that I am writing to a websocket server written in java from a client end point with the following code, while((bbuf = messageQueue.take()).get(0) != 0) { bbuf.position(bbuf.limit()); bbuf.flip(); for(Session session : sessi

tomcat7-maven-plugin and mail

2014-12-01 Thread James Green
Is there a way of getting this to work? We have a Maven project that depends on Apache's commons-email. We use JNDI to look up a mail Session. We use the following in our POM: org.apache.maven.plugins maven-war-plugin

Re: APR with PKCS11 support

2014-12-01 Thread Sanaullah
Hi Chris, I have attached the diff.let me know if its ok? Regards, Sanaullah On Fri, Nov 21, 2014 at 2:08 AM, Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Sanaullah, > > On 11/18/14 10:26 PM, Sanaullah wrote: > > Hi Chris, >