Re: OpenSSL, Cipher-Suites, and Tomcat standalone vs. native vs. Tomcat behind apache-httpd

2015-05-20 Thread Glen Peterson
OS: Linux i386 2.6.18-404.el5 Java: Oracle Corporation Java HotSpot(TM) Server VM 1.8.0_45 Tomcat: Apache Tomcat/8.0.21 On Wed, May 20, 2015 at 7:12 PM, Glen Peterson wrote: > I've been using Tomcat as a stand-alone web server for years. Last > year, I started testing my site here: > https://www

Re: Problrm with resources added using DirResourceSet

2015-05-20 Thread Konstantin Kolinko
2015-05-20 20:30 GMT+03:00 Ed Rouse : > Server version: Apache Tomcat/8.0.14 A bit old... > Server built: Sep 24 2014 09:01:51 > Server number: 8.0.14.0 > OS Name:Linux > OS Version: 3.8.0-29-generic > Architecture: amd64 > JVM Version:1.7.0_55-b14 > JVM Vendor: Oracle Co

OpenSSL, Cipher-Suites, and Tomcat standalone vs. native vs. Tomcat behind apache-httpd

2015-05-20 Thread Glen Peterson
I've been using Tomcat as a stand-alone web server for years. Last year, I started testing my site here: https://www.ssllabs.com/ssltest I notice that there are only 3 fully secure cipher-suites left (there were 6 left 2 months ago). Also, I only get an A, not an A+ due to "TLS_­FALLBACK_­SCSV n

RE: AJP config questions

2015-05-20 Thread Jeffrey Janner
Thanks for the guidance guys. I understand it better. See in-line comments: > -Original Message- > From: Christopher Schultz [mailto:ch...@christopherschultz.net] > Sent: Friday, May 15, 2015 7:03 AM > To: Tomcat Users List > Subject: Re: AJP config questions > > -BEGIN PGP SIGNED ME

Re: Problrm with resources added using DirResourceSet

2015-05-20 Thread Mark Thomas
On 20/05/2015 18:30, Ed Rouse wrote: > Server version: Apache Tomcat/8.0.14 > Server built: Sep 24 2014 09:01:51 > Server number: 8.0.14.0 > OS Name:Linux > OS Version: 3.8.0-29-generic > Architecture: amd64 > JVM Version:1.7.0_55-b14 > JVM Vendor: Oracle Corporation > > I

Re: APR Buffer NullPointer Error

2015-05-20 Thread Mark Thomas
On 20/05/2015 18:02, Maxim Neshcheret wrote: > Dear All > > I am deploying application (Tomcat 8.0.22, JDK 1.7.79, Solaris, SPARC, APR > 1.5.2) and observing multiple erros while its communicates with client > software (error presented below). It looks like that error happens while > applicatio

Re: what are directories created

2015-05-20 Thread Dave H
11654 (20150520) __ The message was checked by ESET NOD32 Antivirus. http://www.eset.com - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Problrm with resources added using DirResourceSet

2015-05-20 Thread Ed Rouse
Server version: Apache Tomcat/8.0.14 Server built: Sep 24 2014 09:01:51 Server number: 8.0.14.0 OS Name:Linux OS Version: 3.8.0-29-generic Architecture: amd64 JVM Version:1.7.0_55-b14 JVM Vendor: Oracle Corporation I have implemented a custom WebappClassLoaderBase and Stan

APR Buffer NullPointer Error

2015-05-20 Thread Maxim Neshcheret
Dear All I am deploying application (Tomcat 8.0.22, JDK 1.7.79, Solaris, SPARC, APR 1.5.2) and observing multiple erros while its communicates with client software (error presented below). It looks like that error happens while application writes output buffer. Any suggestion what is going wron

Re: Fwd:

2015-05-20 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Yuval, On 5/20/15 9:34 AM, Yuval Schwartz wrote: > I believe I am running tomcat 8.0 (although when I call the > getServerInfo() method of the implicit ServletContext Object It > tells me that I am running on 7.54) Then you are not running Tomcat 8

Fwd:

2015-05-20 Thread Yuval Schwartz
Hello, I believe I am running tomcat 8.0 (although when I call the getServerInfo() method of the implicit ServletContext Object It tells me that I am running on 7.54) I configured my realm element in my context.xml file as follows (based on the howto guide: https://tomcat.apache.org/tomcat-8.0-do

Re:Re: how to block the duplicated requests?

2015-05-20 Thread javalishixml
Understood. Really appreciate for your nice time. Thanks, At 2015-05-20 21:00:33, "Christopher Schultz" wrote: >-BEGIN PGP SIGNED MESSAGE- >Hash: SHA256 > > > >On 5/20/15 4:22 AM, javalishixml wrote: >> More detail information as below: >> >> presudo-code step: > >This isn't pseudo-

Re: how to block the duplicated requests?

2015-05-20 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 5/20/15 4:22 AM, javalishixml wrote: > More detail information as below: > > presudo-code step: This isn't pseudo-code. This is a re-statement of your problem. > 1. a register page named "http://mywebsite.com/register1.jsp"; is > set up, and

RE: Problem with APR library - Tomcat 7

2015-05-20 Thread Dejan Stamenov
Chris, I have tried the commands you wrote me for creating a keystore. When I access my application on ssl port, I get "The connection was reset" error. I have used this command: openssl pkcs12 -export -in server.pem -inkey server.key -certfile serverchain.pem -out server.p12 In serverchain.pem

RE: Re: how to block the duplicated requests?

2015-05-20 Thread Prabhu Mannu
Hi What you explaining now and what you explained before are completely different story. Simple and main cause for your issue is inefficiency and poor design. why don't you simply count number of users registering on particular ip and stop at threshold for certain amount of time. A simple requ

Re:Re: how to block the duplicated requests?

2015-05-20 Thread javalishixml
More detail information as below: presudo-code step: 1. a register page named "http://mywebsite.com/register1.jsp"; is set up, and this page contains a CAPTCHA image 2. the robot(crackers) could successfully register the thousands different users for this web site during only several minutes

Re: Nginx as a proxy...

2015-05-20 Thread Bjørn T Johansen
On 20.05.2015 09:46, Mark Thomas wrote: On 20/05/2015 07:56, Bjørn T Johansen wrote: On 20.05.2015 08:27, Mark Thomas wrote: On 19/05/2015 22:25, Bjørn T Johansen wrote: I have a small problem using nginx as a reverse proxy in front of Tomcat 8.. The problem is that sometimes the context url i

Re: Nginx as a proxy...

2015-05-20 Thread Mark Thomas
On 20/05/2015 07:56, Bjørn T Johansen wrote: > On 20.05.2015 08:27, Mark Thomas wrote: >> On 19/05/2015 22:25, Bjørn T Johansen wrote: >>> I have a small problem using nginx as a reverse proxy in front of >>> Tomcat 8.. The problem is that sometimes the context url is set to >>> the local ip >>> ad