On 23 June 2016 at 19:43, Mark Thomas wrote:
> On 23/06/2016 17:56, Lyallex wrote:
>> I'm trying to understand why a recent change in 7.0.70 has been done
>> the way it has.
>> The change makes absolutely no sense to me and I need to ask the
>> implementer why in the name of sanity he did what he
Thanks Ben,
Please let me know if Apache HTTP does not support patching as well.
Regards,
Hariprasad Satyamurty
Global Infrastructure Services | Manulife Asia
Email : hariprasad_satyamur...@manulife.com
-Original Message-
From: Ben Stringer [mailto:b...@burbong.com]
Sent: Friday, June 24
On Fri, June 24, 2016 2:00 pm, Satyamurthy, Hariprasad wrote:
> Hi All,
>
> We have multiple vulnerabilities in our environment ( AIX ) which are
> related to Apache, Apache Tomcat and Apache HTTP.
>
> Please let me know if there is a link to documentation which we can use to
> patch these vulnerab
Hi All,
We have multiple vulnerabilities in our environment ( AIX ) which are related
to Apache, Apache Tomcat and Apache HTTP.
Please let me know if there is a link to documentation which we can use to
patch these vulnerabilities.
AIX OS version : 6100-09-05-1524
Note:
These vulnerabilities
On 23.06.2016 21:43, Jason Ricles wrote:
Fail-secure is a condition achieved by the application server in order
to ensure that in the event of an operational failure, the system does
not enter into an unsecure state where intended security properties no
longer hold
Just to make sure : you do kn
Fail-secure is a condition achieved by the application server in order
to ensure that in the event of an operational failure, the system does
not enter into an unsecure state where intended security properties no
longer hold
On Thu, Jun 23, 2016 at 3:33 PM, Mark Thomas wrote:
> On 23/06/2016 20:2
On 23/06/2016 20:21, Jason Ricles wrote:
> Does tomcat have a secure state if system initialization fails,
> shutdown fails, or aborts fail?
Define "secure state", "system initialization", "fails", "shutdown" and
"aborts" and we might be able to help you.
Mark
--
Does tomcat have a secure state if system initialization fails,
shutdown fails, or aborts fail?
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
On 23/06/2016 17:56, Lyallex wrote:
> I'm trying to understand why a recent change in 7.0.70 has been done
> the way it has.
> The change makes absolutely no sense to me and I need to ask the
> implementer why in the name of sanity he did what he did.
> I'm talking to you markt whoever you are :-)
I'm trying to understand why a recent change in 7.0.70 has been done
the way it has.
The change makes absolutely no sense to me and I need to ask the
implementer why in the name of sanity he did what he did.
I'm talking to you markt whoever you are :-)
Where should I ask the question? dev list?
I
Hey Mark,
Thanks for your reply. The problem is, this happens only for some requests,
not all. For eg., for the manager/status call, it shows the request time
correctly.
Thanks,
Mohit
On Thu, Jun 23, 2016 at 1:12 PM, Mark Thomas wrote:
> On 23/06/2016 12:11, Mohit Chawla wrote:
> > Hi,
> >
> >
On 23/06/2016 13:07, Andrei Ivanov wrote:
> On Thu, Jun 23, 2016 at 2:52 PM, Mark Thomas wrote:
>> On 22/06/2016 21:28, Andrei Ivanov wrote:
>>> Yes, I can test.
>>> 64-bit please.
>>
>> Thanks.
>>
>> It turned out not to be quite as simple as just a tc-native update.
>> You'll need this dll:
>> h
On Thu, Jun 23, 2016 at 2:52 PM, Mark Thomas wrote:
> On 22/06/2016 21:28, Andrei Ivanov wrote:
>> Yes, I can test.
>> 64-bit please.
>
> Thanks.
>
> It turned out not to be quite as simple as just a tc-native update.
> You'll need this dll:
> http://home.apache.org/~markt/dev/tc-native-debug/tcna
On 23/06/2016 12:51, Lucas Ventura Carro wrote:
> And here comes the incompatibility: Nginx replaces new lines with tab
> characters, but the valve only try to change white spaces.
> Should not be the SSL Valve smarter and try to replace one or multiple
> whitespaces (the regex '\s+')? Or at leas
On 22/06/2016 21:28, Andrei Ivanov wrote:
> Yes, I can test.
> 64-bit please.
Thanks.
It turned out not to be quite as simple as just a tc-native update.
You'll need this dll:
http://home.apache.org/~markt/dev/tc-native-debug/tcnative-1.dll
and these class files:
http://home.apache.org/~markt/de
I have a webapp which reads a X.509 client certificate from the standard
servlet request attribute:
ServletRequest.getAttribute("javax.servlet.request.X509Certificate").
When Tomcat is the HTTPS endpoint, works like a charm.
But when there is a Nginx as the HTTPS endpoint, and Tomcat is configured
On 23/06/2016 12:11, Mohit Chawla wrote:
> Hi,
>
> Can someone suggest if this should be opened as a bug instead ?
Not a bug. Probably just an unstable system clock.
Mark
>
> Thanks,
> Mohit
>
> On Tue, Jun 21, 2016 at 11:06 AM, Mohit Chawla <
> mohit.chawla.bin...@gmail.com> wrote:
>
>> He
Hi,
Can someone suggest if this should be opened as a bug instead ?
Thanks,
Mohit
On Tue, Jun 21, 2016 at 11:06 AM, Mohit Chawla <
mohit.chawla.bin...@gmail.com> wrote:
> Hello list,
>
> On a new tomcat installation I am noticing extremely high values for
> request processing times being report
On 23/06/2016 11:25, Venkata Reddy P wrote:
> Hi,
>
> Sometimes I have to deploy the one special jar using on top of existing jar
> classes for debugging.
Classes always override JARs in Tomcat so unpack the debug classes to
WEB-INF/classes or CATALINA_BASE/lib as appropriate and restart.
Mark
On 23/06/2016 11:06, Manisha Sapiah wrote:
> Hi ,
>
> Is there any way to get current_statement_cache in tomcat jdbc connection
> pool.
No, given that there is no such field or variable to be found anywhere
in the current 9.0.x code.
Mark
--
Hi,
Sometimes I have to deploy the one special jar using on top of existing jar
classes for debugging.
Thanks
-Original Message-
From: Mark Thomas [mailto:ma...@apache.org]
Sent: Thursday, June 23, 2016 3:51 PM
To: Tomcat Users List
Subject: Re: sequence of loading jars
On 23/06/2016
On 23/06/2016 10:59, Venkata Reddy P wrote:
> Hi,
>
> I am using the tomcat8.0.33, is there a way to control the order of
> loading the jars from particular folder using class loaders
> (common,shared,server)?
Yes, but why do you want to do that?
> I would also like to know if there is a way to
Hi ,
Is there any way to get current_statement_cache in tomcat jdbc connection pool.
Many Thanks in advance.
Hi,
I am using the tomcat8.0.33, is there a way to control the order of loading the
jars from particular folder using class loaders (common,shared,server)?
I would also like to know if there is a way to control the sequence of loading
the jars using "java.ext.dirs" system property?
Many Thanks
25 matches
Mail list logo
