Re: AW: Question concerning mod_jk Security Fix CVE-2014-8111

2015-08-08 Thread Felix Schumacher
Am 8. August 2015 14:11:11 MESZ, schrieb Christopher Schultz : >-BEGIN PGP SIGNED MESSAGE- >Hash: SHA256 > >Chinoy, > >On 8/5/15 4:39 AM, Chinoy Gupta wrote: >> When can we expect the release of JK 1.2.41 source code? > >Well, you can get your hands on it right now: svn trunk is always >

Re: AW: Question concerning mod_jk Security Fix CVE-2014-8111

2015-08-08 Thread Chinoy Gupta
Chris, Is the trunk stable? Regards, Chinoy On Sat, Aug 08, 2015 at 5:42 pm, Christopher Schultz mailto:ch...@christopherschultz.net>> wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Chinoy, On 8/5/15 4:39 AM, Chinoy Gupta wrote: > When can we expect the release of JK 1.2.41 source co

RE: Tomcat 8 jspx and HTML5

2015-08-08 Thread Konstantin Preißer
Hi Christopher, > -Original Message- > From: Christopher Schultz [mailto:ch...@christopherschultz.net] > Sent: Saturday, August 8, 2015 2:32 PM > > This is a common problem, and the reason for it is that for > some reason, in every browser I've ever seen, completely fails to > parse corr

Re: Tomcat 7.0.41 shows v6 manager GUI

2015-08-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Dan, On 8/6/15 9:37 AM, Dan OConnor wrote: > I have tomcat 7.0.41 running on multiple machines all running with > jre1.7.0_80. I know they are identical installations because they > are all extracted from the same tarball. Do you have split CATALI

Re: Firefox SSL with APR - losing client certificate

2015-08-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 David, On 8/7/15 11:37 AM, David Balažic wrote: > I use tomcat 6.0.44 wit APR on Windows x64. I set up > SSLVerifyClient="optional" and since then encounter the following > problem with Firefox 39.0.03 (IE works OK): > > On first access Firefox sho

Re: Tomcat 8 jspx and HTML5

2015-08-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Kevin, On 8/7/15 10:24 AM, Kevin Hale Boyes wrote: > I want to use a jspx to generate some HTML5 but I'm running into a > strange problem. I've produced a very small test to demonstrate the > problem. > > In the jspx pasted below if I remove the co

Re: Running application keeps redirecting back to the Root application

2015-08-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Eric, On 8/6/15 2:42 PM, Eric Wood wrote: > I'm running an application under tomcat6. Also, if I go to the > root of the tomcat server http://myserver:8080, I can see the > tomcat home page displayed. I assume this is the ROOT in webapps. > Regard

Re: FIPS compliancy on Tomcat 7.00.062

2015-08-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Sanaullah, On 8/5/15 5:54 AM, Sanaullah wrote: > run the sslscan tool from the command line > https://github.com/rbsec/sslscan I haven't used that tool in a very long time, because it never updated to support newer protocols (like TLS, I think). I

Re: FIPS compliancy on Tomcat 7.00.062

2015-08-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Nikitha, On 8/5/15 6:52 AM, Nikitha Benny wrote: > Thank you for your valuable suggestion. > > I just ran the openssl s_client scan, and it looks like the server > side is running fine on *TLSv1.2* Protocol. > > [root]## *openssl s_client -connect

Re: AW: Question concerning mod_jk Security Fix CVE-2014-8111

2015-08-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Chinoy, On 8/5/15 4:39 AM, Chinoy Gupta wrote: > When can we expect the release of JK 1.2.41 source code? Well, you can get your hands on it right now: svn trunk is always available. Or you can wait for the vote to finish... I believe we have 3 vo