Re: Need help setting up SSL on Tomcat 8

2016-06-30 Thread Daniel Savard
2016-06-29 9:08 GMT-04:00 Sean Son : > Hello Daniel > > Thank you for the information. Here is the output of the keytool command: > > Keystore type: JKS > Keystore provider: SUN > > Your keystore contains 2 entries > > root, Jun 16, 2016, trustedCertEntry, > Certificate fingerprint (SHA1): > 27:AC

Re: Tomcat 7 and SHA-1

2016-06-30 Thread Daniel Savard
2016-06-30 23:05 GMT-04:00 Greg Beresnev : > Hi, > > We're in the process of updating our web application to stop using SHA-1 > certificates and I was wondering if there was some way to configure Tomcat > (we're on version 7.0.39 - yes, I know, we are pretty old-school and should > get with the

Viewing Tomcat DB connection statement cache size via JMX MBeans

2016-06-30 Thread Manisha Sapiah
Hi, I want to know, is there any way to get Tomcat DB connection statement cache size via JMX MBeans. Thanks in advance. Manisha

Tomcat 7 and SHA-1

2016-06-30 Thread Greg Beresnev
Hi, We're in the process of updating our web application to stop using SHA-1 certificates and I was wondering if there was some way to configure Tomcat (we're on version 7.0.39 - yes, I know, we are pretty old-school and should get with the times) to either throw errors or at least log warnings fo

Re: Need help setting up SSL on Tomcat 8

2016-06-30 Thread Philip Hachey
On 16-06-29 09:08 AM, Sean Son wrote: Hello Daniel Thank you for the information. Here is the output of the keytool command: Keystore type: JKS Keystore provider: SUN Your keystore contains 2 entries root, Jun 16, 2016, trustedCertEntry, Certificate fingerprint (SHA1): 27:AC:93:69:FA:F2:52:

Re: tomcat 7 connection pool validation interval

2016-06-30 Thread Phil Steitz
> On Jun 30, 2016, at 9:32 AM, Nir Dweck wrote: > > I am using tomcat connection pool (tomcat 7) in my application (java > application) to connect to a remote Oracle DB on an Azure machine. My > connection pool configuration is as follow: > >PoolProperties p = new PoolProperties(); >

tomcat 7.0.55 jdbc pool "Not a wrapper of oracle.jdbc.OracleConnection"

2016-06-30 Thread Balana, Vishal
I have following resource configuration for Oracle Data source Pool and trying to unwrap the connection object using: OracleConnection conn = connection.unwrap(OracleConnection.class); And getting following exception: com.sun.proxy.$Proxy77.unwrap exception : java.sql.SQLException: Not a wrappe

tomcat 7 connection pool validation interval

2016-06-30 Thread Nir Dweck
I am using tomcat connection pool (tomcat 7) in my application (java application) to connect to a remote Oracle DB on an Azure machine. My connection pool configuration is as follow: PoolProperties p = new PoolProperties(); p.setUrl(connString); p.setUsername(user); p.setPasswor

Re: How to configure SPNEGO authentication with fallback to FORM auth?

2016-06-30 Thread ken edward
I did get it to work. Simply merged existing spnego and form auth valves together, I will try to post later.. On Fri, Jun 24, 2016 at 6:21 PM, Terence M. Bandoian wrote: > On 6/24/2016 10:45 AM, ken edward wrote: > >> On Fri, Jun 24, 2016 at 11:26 AM, Mark Thomas wrote: >> >> On 24/06/2016 16:1

Re: mod-jk (1.2.37) crashes Apache 2 (2.4.7) occasionally with a buffer overflow on Ubuntu 14.04 x64

2016-06-30 Thread Michael Diener
Thank you Rainer! On 29 June 2016 at 14:50, Rainer Jung wrote: > Can you reproduce? Does it also happen on a test system? It only happens on a live system and I'm not able to reproduce it. > Latest we provide in the project is 1.2.41. It is pretty easy to compile > yourself and would be an

Re: [SECURITY][CORRECTION] CVE-2016-3092 Apache Tomcat Denial of Service

2016-06-30 Thread Mark Thomas
On 30/06/2016 09:20, Kyohei Nakamura wrote: > Hi, > > I have a question about the maxHttpHeaderSize. > > In this announcement, the recommended value is 3072 bytes. > However, in the announcement from the Apache Commons project, the > recommended value is 2048 bytes. > http://mail-archives.apache.

Re: [SECURITY][CORRECTION] CVE-2016-3092 Apache Tomcat Denial of Service

2016-06-30 Thread Kyohei Nakamura
Hi, I have a question about the maxHttpHeaderSize. In this announcement, the recommended value is 3072 bytes. However, in the announcement from the Apache Commons project, the recommended value is 2048 bytes. http://mail-archives.apache.org/mod_mbox/www-announce/201606.mbox/%3c45a20804-abff-4fed-

Re: Updating Tomcat native requires APR update

2016-06-30 Thread Ari Luoma
On Thu, Jun 30, 2016 at 8:49 AM, Ari Luoma wrote: > On Wed, Jun 29, 2016 at 3:04 PM, Mark Thomas wrote: >> On 29/06/2016 12:40, Ari Luoma wrote: >>> First I would like to thank you for the great job you do by responding >>> to these questions people have. >>> >>> I am about to update Tomcat 8.0.26