Re: RFE: read keystorePass from file

2015-04-16 Thread Luca Menegus
Hi Chris, let me describe what I'm trying to do in more details. Goals: * Completely automate tomcat deployment, and make sure deployment is reproducible and testable in different environment (hence we use ansible+git to manage installation and _configuration for tomcat) * Do not make stupid t

Re: RFE: read keystorePass from file

2015-04-16 Thread Luca Menegus
Hi Jan, thank you very much for your suggestion: it solves my usecase and works like a charm! Regards, Luca - Original Message - > From: "Jan Vávra" > To: "Tomcat Users List" > Sent: Thursday, April 16, 2015 8:29:38 AM > Subject: Re: RFE: read keystorePass from file > > Hello, > >

Fwd: Tomcat 8 and Java 8

2015-04-16 Thread Greg Huber
..To follow on, for others going grey also. The file:/ seems to be from a :/ (colon) on the class path, and the combination of running it from /etc/rc.d/init.d makes it not work. Not working -classpath :/opt/apache-tomcat/apache-tomcat-8.0.21/bin/bootstrap.jar:/opt/apache-tomcat/apache-to

Re: Tomcat 8 and Java 8

2015-04-16 Thread Greg Huber
I have done some some debugging and it seems to be in org.apache.catalina.startup.ContextConfig.java . protected void processAnnotationsUrl(URL url, WebXml fragment, boolean handlesTypesOnly) { if (url == null) { // Nothing to do. return;

Add member to static memebership cluster during runtime

2015-04-16 Thread Christoph Prybila
Tomcat: 7.0.59 OS: Win7 Professional SP1 Java: 1.7.0_67 I want to create a cluster and I need to use static membership. But the number of nodes in my cluster is not static. Is it possible to add members to such a static membership cluster without restarting the other already r

Re: Tomcat 8 and Java 8

2015-04-16 Thread Greg Huber
Hello, It is doing the same with jdk7 jdk1.7.0_51. I do remember a odd Annotation exception in an unrelated folder in the home directory. It looked like it was scanning the home folder for annotations? If I add to the context.xml: it now works OK. So its something to do with the scanning.

RE: TLS Server Accepts RSA_EXPORT Cipher Suites (FREAK)

2015-04-16 Thread Jason Jesso
I think the difference is in the cipher list. I've been trying many things and someone else I know was successful in the JBoss world so I took what they used and used it in Tomcat. It works. From: Christopher Schultz [ch...@christopherschultz.net] Sen

RE: TLS Server Accepts RSA_EXPORT Cipher Suites (FREAK)

2015-04-16 Thread Jason Jesso
The case made no difference. Still works. Jason Jesso | Senior Systems Programmer Direct: (905)752-8238 Toll Free: 1(800)387-1245 | Ext. 238 Fax: (905)479-5421 Web Site: global-matrix.com Blog Site: travelagentmusings.com From: Christopher Schultz [ch.

Re: TLS Server Accepts RSA_EXPORT Cipher Suites (FREAK)

2015-04-16 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jason, On 4/16/15 7:48 AM, Jason Jesso wrote: > My goal was to disable the EXPORT ciphers and not be able to > connect with: > > openssl s_client -cipher EXPORT -connect localhost:443 < /dev/null > 2>/dev/null I think your goal was pretty clear.

RE: TLS Server Accepts RSA_EXPORT Cipher Suites (FREAK)

2015-04-16 Thread Jason Jesso
My goal was to disable the EXPORT ciphers and not be able to connect with: openssl s_client -cipher EXPORT -connect localhost:443 < /dev/null 2>/dev/null I am using Java 6 and Tomcat 6 and we got it working with the following config in the connector: sslProtocols = "TLSv1, TLSv1.1,TLSv1.2" ci