Re: Tomcat7 / Axis2

2016-08-22 Thread Matthias Schmitt
Hello, Thanks for your help. The article with the C3PO helper threads is very interesting. Mit besten Grüßen/with best regards Matthias Schmitt Am 22.08.16, 21:48 schrieb "Mark Eggers" : >Matthias, > >On 8/22/2016 8:32 AM, Matthias Schmitt wrote: >> Hello everybody, >> >> We have a Tomc

Re: Tomcat7 / Axis2

2016-08-22 Thread Matthias Schmitt
Hello, Thanks for your help. Yes, the faulty web service is standing still for some time (sometimes 2 days). Then a request is coming in and it´s not working then. A daily restart could be an option. However, the Tomcat contains multiple endpoints which are working fine. Mit besten Grüßen/with

Re: Tomcat7 / Axis2

2016-08-22 Thread Mark Eggers
Matthias, On 8/22/2016 8:32 AM, Matthias Schmitt wrote: > Hello everybody, > > We have a Tomcat 7 and Axis 2 for our Java SOAP web service over > https on our Ubuntu server. We also use C3PO connection pooling (also > in other web services which is working fine). However, I´m not sure > if this i

Re: Tomcat7 / Axis2

2016-08-22 Thread Aurélien Terrestris
"We have a Tomcat 7 and Axis 2 for our Java SOAP web service over https on our Ubuntu server. We also use C3PO connection pooling (also in other web services which is working fine). However, I´m not sure if this is related to the topic." I believe it is. Is the faulty web service getting requests

Tomcat 7 context.xml update questions

2016-08-22 Thread John Beaulaurier -X (jbeaulau - ADVANCED NETWORK INFORMATION INC at Cisco)
Hello, I have two questions regarding an update to the context.xml file. First I understood that any changes made to the context.xml file would not be read until the Tomcat instance was restarted. I updated the removeAbandonedTimeout attribute from 90 to 300 seconds planning on restarting the To

Tomcat7 / Axis2

2016-08-22 Thread Matthias Schmitt
Hello everybody, We have a Tomcat 7 and Axis 2 for our Java SOAP web service over https on our Ubuntu server. We also use C3PO connection pooling (also in other web services which is working fine). However, I´m not sure if this is related to the topic. The web service is working for about two

Re: Sporadic High CPU consumption on 8.5.x

2016-08-22 Thread Chuck Syperski
I think I found a larger part of the puzzle with the OpenSSL support for tomcat, it looks like when using the ssl config provided below (directly from Let's encrypt in this case) in your server.xml you can consume a large amount of a server's CPU. If you use this config and you attempt to conne

Sporadic High CPU consumption on 8.5.x

2016-08-22 Thread Chuck Syperski
Hello, I am having an issue with a product box running tomcat 8.5.3 consuming a high percent of CPU cycles on a single core at what seems like random intervals (typically days apart), trigger by nothing other than a simple http get request. This didn’t happen when I was using the 8.0.x branch with

Re: CVE-2016-2107 and Tomcat 6.0.45 / Native 1.1.34

2016-08-22 Thread Matthias Reischenbacher
Hi Mark, thanks for your reply. I wrongly assumed that tc-native 1.2 is not compatible with Tomcat 6 and the 1.1 release branch has to be used instead. But I guess I'm wrong and will give it a try. Thanks again for your help & best regards, Matthias On 22.08.2016 11:26, Mark Thomas wrote: > On

Re: CVE-2016-2107 and Tomcat 6.0.45 / Native 1.1.34

2016-08-22 Thread Mark Thomas
On 22/08/2016 15:12, Matthias Reischenbacher wrote: > Hi, > > Tomcat 6.0.45 and Tomcat Native 1.1.34 seem to be affected by the > security issue CVE-2016-2107, see also: > > https://blog.cloudflare.com/yet-another-padding-oracle-in-openssl-cbc-ciphersuites/ > > According to > http://tomcat.10.x6

CVE-2016-2107 and Tomcat 6.0.45 / Native 1.1.34

2016-08-22 Thread Matthias Reischenbacher
Hi, Tomcat 6.0.45 and Tomcat Native 1.1.34 seem to be affected by the security issue CVE-2016-2107, see also: https://blog.cloudflare.com/yet-another-padding-oracle-in-openssl-cbc-ciphersuites/ According to http://tomcat.10.x6.nabble.com/OpenSSL-issues-and-release-plans-td5050269.html a fix seem

Re: 8.5.3 to 8.5.4 SSL Issue

2016-08-22 Thread Chuck Syperski
Great, I'm not crazy! Thanks so much for the help and quick responses! On Mon, Aug 22, 2016 at 1:39 PM, Mark Thomas wrote: > On 22/08/2016 13:40, Chuck Syperski wrote: > > Hello, > > > > I am having issues when upgrading from 8.5.3 to 8.5.4 with SSL. It seems > > that my config from 8.5.3 is n

Re: 8.5.3 to 8.5.4 SSL Issue

2016-08-22 Thread Mark Thomas
On 22/08/2016 13:40, Chuck Syperski wrote: > Hello, > > I am having issues when upgrading from 8.5.3 to 8.5.4 with SSL. It seems > that my config from 8.5.3 is not working with 8.5.4 when using the same > exact file. The majority of the server.xml is stock, but here what I > manually have chang

Re: 8.5.3 to 8.5.4 SSL Issue

2016-08-22 Thread Chuck Syperski
I was under the impressions that as of 8.5.3 you could do JSSE with OpenSSL from this page: https://tomcat.apache.org/tomcat-8.5-doc/ssl-howto.html#Edit_the_Tomcat_Configuration_File Excerpt: "Tomcat can use three different implementations of SSL: JSSE implementation provided as part of the Java

AW: 8.5.3 to 8.5.4 SSL Issue

2016-08-22 Thread Kreuser, Peter
Chuck, > > Hello, > > I am having issues when upgrading from 8.5.3 to 8.5.4 with SSL. It seems > that my config from 8.5.3 is not working with 8.5.4 when using the same > exact file. The majority of the server.xml is stock, but here what I > manually have changed and it is where I am encounter

8.5.3 to 8.5.4 SSL Issue

2016-08-22 Thread Chuck Syperski
Hello, I am having issues when upgrading from 8.5.3 to 8.5.4 with SSL. It seems that my config from 8.5.3 is not working with 8.5.4 when using the same exact file. The majority of the server.xml is stock, but here what I manually have changed and it is where I am encountering my problem ...