Hi,
I am trying to configure SHA2 algorithm certificates with tomcat6 in
centos 6. I have created a keystore of format "JKS" using keytool and imported
the certificate and intermediates to the keystore. When i restart the tomcat,
logs do not show any kind of errors it starts up normally
Hi,
I am trying to configure SHA2 algorithm certificates with tomcat6 in
centos 6. I have created a keystore of format "JKS" using keytool and imported
the certificate and intermediates to the keystore. When i restart the tomcat,
logs do not show any kind of errors it starts up normally b
Hi Chris, I do not want to start a war but I am using Wildfly 9.0.0 CR1. The
initial reason I looked it was due to Undertow. Then I found out they had a
HTTP/2 implementation and when I tried that for half of my requests headers
went from 3xx bytes down to 3x bytes. The response times were a mil
Am 15.05.2015 um 20:43 schrieb PerfGuru:
Thanks Mark & Chris this is a very informative. I am using a httpd that
supports http/2 and wow is it impressive. Sorry, I had to stop using Apache/Tomcat
to use it but the performance and bandwidth gains are so nice it is addicting and
my users have no
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Tony,
On 5/15/15 2:43 PM, PerfGuru wrote:
> Thanks Mark & Chris this is a very informative. I am using a httpd
> that supports http/2 and wow is it impressive. Sorry, I had to
> stop using Apache/Tomcat to use it but the performance and
> bandwidth
Am 15.05.2015 um 20:23 schrieb Christopher Schultz:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Mark,
On 5/15/15 12:59 PM, Mark Thomas wrote:
On 15/05/2015 17:49, Christopher Schultz wrote:
Tony,
On 5/15/15 12:06 PM, PerfGuru wrote:
Good news thanks for the update. It may be some time b
Thanks Mark & Chris this is a very informative. I am using a httpd that
supports http/2 and wow is it impressive. Sorry, I had to stop using
Apache/Tomcat to use it but the performance and bandwidth gains are so nice it
is addicting and my users have noticed. I will look into jre/jdk 9 and ask
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Simon,
On 5/15/15 2:26 PM, Pilkington, Simon wrote:
> We recently ran into an issue where the requestDestroyed() method
> of listeners were not being called when exceptions were propagated
> out of our application.
>
> Looking into the code, it see
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Raj,
On 5/15/15 12:49 PM, RAJ wrote:
> Thanks Chris for the quick response, for class loader it is
> but as your saying not make that change so will not.
> Validator-rules. Xml file is under
> Catalina_Home/webapps//WEB-INF/ and the app is in
> exp
On 15/05/2015 19:23, Christopher Schultz wrote:
> Mark,
>
> On 5/15/15 12:59 PM, Mark Thomas wrote:
>> On 15/05/2015 17:49, Christopher Schultz wrote:
>>> Tony,
>>>
>>> On 5/15/15 12:06 PM, PerfGuru wrote:
Good news thanks for the update. It may be some time before
servlet 4 support is r
We recently ran into an issue where the requestDestroyed() method of listeners
were not being called when exceptions were propagated out of our application.
Looking into the code, it seems related to this[1]. Is this the expected
behavior for listeners and we can’t rely on the requestDestroyed()
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Mark,
On 5/15/15 12:59 PM, Mark Thomas wrote:
> On 15/05/2015 17:49, Christopher Schultz wrote:
>> Tony,
>>
>> On 5/15/15 12:06 PM, PerfGuru wrote:
>>> Good news thanks for the update. It may be some time before
>>> servlet 4 support is released bu
On 15/05/2015 17:49, Christopher Schultz wrote:
> Tony,
>
> On 5/15/15 12:06 PM, PerfGuru wrote:
>> Good news thanks for the update. It may be some time before servlet
>> 4 support is released but good to know Tomcat will be ready then.
>> But does APR support http/2? I know other web servers now
Thanks Chris for the quick response, for class loader it is but as
your saying not make that change so will not. Validator-rules. Xml file is
under Catalina_Home/webapps//WEB-INF/ and the app is in exploded
format. This is working fine on tomcat 5.x and we just copied the files from
their to t
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Tony,
On 5/15/15 12:06 PM, PerfGuru wrote:
> Good news thanks for the update. It may be some time before servlet
> 4 support is released but good to know Tomcat will be ready then.
> But does APR support http/2? I know other web servers now do.
Mar
Good news thanks for the update. It may be some time before servlet 4 support
is released but good to know Tomcat will be ready then.But does APR support
http/2? I know other web servers now do. Also, I think Tomcat supports
websockets which has the important capabilities that http/2 has and has
On Fri, May 15, 2015 at 6:56 AM, Eric Wood wrote:
> I trying to find a service script (init.d) that I can use to start, stop, and
> check status of my tomcat7 instances. We run multiple instances of tomcat of
> a single server. I have found scripts out that where the status call checks
> the p
I trying to find a service script (init.d) that I can use to start, stop, and
check status of my tomcat7 instances. We run multiple instances of tomcat of a
single server. I have found scripts out that where the status call checks the
ps table to get the pid to determine the status.
I thought
On 5/15/2015 8:23 AM, Penubothu, Srinivasa M wrote:
Here are the details of the vulnerability.
Title: SSL/TLS Server Accepts RSA_EXPORT Cipher Suites (FREAK)
CVE ID: CVE-2015-0204
Diagnosis: The remote SSL/TLS server accepts RSA_EXPORT cipher suites which is
vulnerable to session downgrade vuln
> From: Penubothu, Srinivasa M [mailto:srinivasa.penubo...@bankofamerica.com]
> Subject: RE: CVE-2015-0204 - FREAK vulnerability on tomcat 7.
> Title: SSL/TLS Server Accepts RSA_EXPORT Cipher Suites (FREAK)
> CVE ID: CVE-2015-0204
That particular CVE number is only for the OpenSSL client side of
Here are the details of the vulnerability.
Title: SSL/TLS Server Accepts RSA_EXPORT Cipher Suites (FREAK)
CVE ID: CVE-2015-0204
Diagnosis: The remote SSL/TLS server accepts RSA_EXPORT cipher suites which is
vulnerable to session downgrade vulnerability.
Result: Exploitation allows an attacker to
We would love to help but without the bare minimum description we are
unable to do so.
Sorry!
On Fri, May 15, 2015 at 2:10 PM, Penubothu, Srinivasa M <
srinivasa.penubo...@bankofamerica.com> wrote:
> Hello, I am looking for help with fixing FREAK vulnerability on tomcat 7.
> I am unable to find
Hello, I am looking for help with fixing FREAK vulnerability on tomcat 7. I am
unable to find a solution for tomcat. Any help would be much appreciated.
Regards
Srinivasa(Vasu) Penubothu
--
This message, and any attachments, is
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Prarthana,
On 5/15/15 6:09 AM, Prarthana Agwania wrote:
> I am looking for mod_jk 1.2.40 source/binary on 32 bit, for Linux
> OS to be used with Oracle Http Server build on Apache 2.2
>
> I could not find the details anywhere on your site. Also the
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Jeffrey,
On 5/14/15 6:38 PM, Jeffrey Janner wrote:
> (Hopefully, this isn't a duplicate post, but I sent the original a
> half-hour ago and I haven't seen it come back yet.)
>
> Guys, it's been a long time since I did any work with AJP, but it
>
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Raj,
On 5/13/15 10:29 PM, Raj wrote:
> Hi Chris, Thanks for your response. Sorry for the late response as
> I was out of town.
>
> I verified struts-config.xml the files and have this className="org.apache.struts.validator.ValidatorPlugIn">
>
>
On 14/05/2015 22:29, Mark Thomas wrote:
> On 14/05/2015 21:11, Mark Thomas wrote:
>> On 29/03/2015 23:13, André Warnier wrote:
>>> David Marsh wrote:
I've tested all the following public JDKs
jdk-7u45-windows-i586.exe
jdk-7u65-windows-i586.exe
jdk-7u75-windows-i586.exe
jdk-
Hi,
I am looking for mod_jk 1.2.40 source/binary on 32 bit, for Linux OS
to be used with Oracle Http Server build on Apache 2.2
I could not find the details anywhere on your site. Also the link for
the connector which is made available on your website is on 64 bit.
Hence, request you to please d
[libdefaults]
default_realm = DOMAIN.COM
default_keytab_name = FILE:c:\apache-tomcat-7.0.61\conf\test.keytab
default_tkt_enctypes = rc4-hmac,aes256-cts-hmac-sha1-96,aes128-cts-hmac-sha1-96
default_tgs_enctypes = rc4-hmac,aes256-cts-hmac-sha1-96,aes128-cts-hmac-sha1-96
forwardable=true
[realms]
DOM
Hey Mark
thanks for quick reply ,I followed same doc. Which you provided
-Original Message-
From: Mark Thomas [mailto:ma...@apache.org]
Sent: Friday, May 15, 2015 1:14 PM
To: Tomcat Users List
Subject: Re: KrbException: Do not have keys of types listed in
default_tkt_enctypes available
O
On 15/05/2015 08:55, anjan bacchu wrote:
> wondering what the plans are for supporting HTTP 2 support in tomcat ?
> When is it planned ? Which version(s) are likely to get support ?
Work is in progress now.
http://tomcat.markmail.org/thread/twqufoz53txetagh
I hope to have basic support working
wondering what the plans are for supporting HTTP 2 support in tomcat ?
When is it planned ? Which version(s) are likely to get support ?
On 15/05/2015 08:34, Ravindhar Konka wrote:
> Hi All
> I am trying to use SSO functionality for my app
>
> apache-tomcat-7.0.61
> windows server 2008 R2
> java 1.8.0_25
> active directory machine ( DOMAIN-ad)
> tomcat instance machine (windows-sso-demo)
> username (ss0ad...@domain.com)
> password
Hi All
I am trying to use SSO functionality for my app
apache-tomcat-7.0.61
windows server 2008 R2
java 1.8.0_25
active directory machine ( DOMAIN-ad)
tomcat instance machine (windows-sso-demo)
username (ss0ad...@domain.com)
password (XX)
krb5.ini
[libdefaults]
default_realm = DOMAIN.COM
d
34 matches
Mail list logo
