Re: How do deal with 'sslv3 alert handshake failure'?

2016-09-27 Thread Persson, Magnus (SE-TLX)
Hi Chris, The java servlet (in webapps folder) was written by a consultant and I have only looked at parts of the source code and don't know all that it does. The purpose is to give external integrators a way in to our software through a REST API. We have made a reference client in python that

Re: How do deal with 'sslv3 alert handshake failure'?

2016-09-27 Thread Persson, Magnus (SE-TLX)
Well...we have not specified SSLv2 or SSLv3 so the initial HELLO must come from TLSv1.x that encapsulate it in an SSLv2 frame. The whole purpose of the enabling the "SSLv2Hello" protocol was to allow the initial encapsulated hello frame. However, with tomcat version greater than 7.0.68 this is no

Re: Using hashes in tomcat-users.xml

2016-09-27 Thread Paquin, Brian
> On Sep 27, 2016, at 4:38 PM, Christopher Schultz > wrote: > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Brian, > > Your email was tough to parse-out of the thread, so I'm going to > heavily edit-down the text. I hope I didn't miss anything. > > On 9/25/16 9:06 PM, Paquin, Brian

Re: SHA-2 issues with Tomcat 6.0.26

2016-09-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 John, On 9/27/16 11:57 AM, Fuchs, John J. wrote: > Certainly late on the SHA-2 move from SHA-1 SSL certificates but > ours hadn't expired yet and wasn't causing any issues. Our > environment is Windows Server 2008 R2, JVM 1.6.0_22-b04 and Apache

Re: Websocket endpoint on Tomcat 8

2016-09-27 Thread Mark Eggers
Astor, On 9/27/2016 12:45 PM, Astor John Pinto wrote: > Hi all, > > We have been trying to set up a websocket end point on Tomcat 8. > > The dependency in the pom.xml is > > > > > > commons-logging > > commons-logging > > 1.2 > > ja

Re: How do deal with 'sslv3 alert handshake failure'?

2016-09-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Magnus, On 9/27/16 10:29 AM, Persson, Magnus (SE-TLX) wrote: > We started out with tomcat 7.0.35 and got that running with our > REST servlet. > > When we upgraded to tomcat 7.0.63 we got this error when we tried > to create a new session: > > { "

Re: SSL setup - Apache Tomcat service won't start

2016-09-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Khisanth, On 9/26/16 7:45 AM, TJ wrote: > I have Apache Tomcat/9.0.0.M10 on Windows 10 64bit and want to > setup SSL. Am following > https://tomcat.apache.org/tomcat-9.0-doc/ssl-howto.html and gone > through the steps of creating the keystore wi

Re: Tomcat 8.5.5 variables

2016-09-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 OSP, On 9/26/16 12:47 AM, Linux Support wrote: > Hi All, > > The environment : > > Using CATALINA_BASE: /apps/TOMCAT/tomcat Using CATALINA_HOME: > /apps/TOMCAT/tomcat Using CATALINA_TMPDIR: /apps/TOMCAT/tomcat/temp > Using JRE_HOME:/usr

Re: Using hashes in tomcat-users.xml

2016-09-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Brian, Your email was tough to parse-out of the thread, so I'm going to heavily edit-down the text. I hope I didn't miss anything. On 9/25/16 9:06 PM, Paquin, Brian wrote: > I tried using the following in server.xml: className="org.apache.catalina

Websocket endpoint on Tomcat 8

2016-09-27 Thread Astor John Pinto
Hi all, We have been trying to set up a websocket end point on Tomcat 8. The dependency in the pom.xml is commons-logging commons-logging 1.2 jar provided javax.websocket jav

SHA-2 issues with Tomcat 6.0.26

2016-09-27 Thread Fuchs, John J.
Hi all: Certainly late on the SHA-2 move from SHA-1 SSL certificates but ours hadn't expired yet and wasn't causing any issues. Our environment is Windows Server 2008 R2, JVM 1.6.0_22-b04 and Apache Tomcat 6.0.26 I'm testing replacement of my soon to expire SHA-1 certificate with an SHA-2. Re

Re: How do deal with 'sslv3 alert handshake failure'?

2016-09-27 Thread Jose María Zaragoza
2016-09-27 16:29 GMT+02:00 Persson, Magnus (SE-TLX) : > Hi, > > We started out with tomcat 7.0.35 and got that running with our REST > servlet. > > When we upgraded to tomcat 7.0.63 we got this error when we tried to > create a new session: > > { > "message": "[Errno 1] _ssl.c:507: error:14077

How do deal with 'sslv3 alert handshake failure'?

2016-09-27 Thread Persson, Magnus (SE-TLX)
Hi, We started out with tomcat 7.0.35 and got that running with our REST servlet. When we upgraded to tomcat 7.0.63 we got this error when we tried to create a new session: { "message": "[Errno 1] _ssl.c:507: error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failur

Re: tomcat-users.xml

2016-09-27 Thread Vincent Hardy
Thank you, it is works : regards vincent 2016-09-27 13:23 GMT+02:00 André Warnier (tomcat) : > Hi. > > It is difficult to be sure, with the extra quoting done by the email > clients, but it seems that you have an extra pair of < > inside the > tomcat-users.xml file. > > Loo

Re: Problem: JSP runtime compilation error after upgrade from 7.0.70 to 7.0.72

2016-09-27 Thread agharta
Ok, editing conf/web.xml and adding compiler=modern does not change anything. "modern" is extracted from tomcat 7 & ant documentation https://tomcat.apache.org/tomcat-7.0-doc/jasper-howto.html#Introduction https://ant.apache.org/manual/Tasks/javac.html (extract from vanilla conf/web.xml, see com

Re: tomcat-users.xml

2016-09-27 Thread tomcat
Hi. It is difficult to be sure, with the extra quoting done by the email clients, but it seems that you have an extra pair of < > inside the tomcat-users.xml file. Look between the initial and the first . From your initial post, it looks like this : < ... ... > If so, the extra "<

Re: tomcat-users.xml

2016-09-27 Thread Vincent Hardy
Thank you all. Thank you for the time I personally do not see anything abnormal in files next log : 27-Sep-2016 12:36:49.410 INFO [localhost-startStop-1] org.apache.jasper.servlet.TldScanner.scanJars At least one JAR was scanned for TLDs yet contained no TLDs. Enable debug logging for this logger

Re: Problem: JSP runtime compilation error after upgrade from 7.0.70 to 7.0.72

2016-09-27 Thread Mark Thomas
On 27/09/2016 10:50, agharta wrote: > Hi, > Thanks for reply. > > This could be a nice test to do. And i do it :-) > > Sorry my poor skill, how to set Jasper to use javac? > And vice-versa, how to set ant to use Eclipse? Jasper to use javac: - set the compiler init parameter in $CATALINA_BASE/co

Re: Problem: JSP runtime compilation error after upgrade from 7.0.70 to 7.0.72

2016-09-27 Thread agharta
Hi, Thanks for reply. This could be a nice test to do. And i do it :-) Sorry my poor skill, how to set Jasper to use javac? And vice-versa, how to set ant to use Eclipse? Thanks a lot, Best regards, Agharta On 09/27/2016 11:45 AM, Mark Thomas wrote: On 27/09/2016 09:58, agharta wrote: So

Re: Problem: JSP runtime compilation error after upgrade from 7.0.70 to 7.0.72

2016-09-27 Thread Mark Thomas
On 27/09/2016 09:58, agharta wrote: > So, errors comes up only at runtime compilation. Why? Compiler differences. Pre-compilation uses Javac. Runtime compilation uses the compiler from Eclipse (by default). Another option to consider would be to run Tomcat on a JDK and configure Jasper to compi

Re: Problem: JSP runtime compilation error after upgrade from 7.0.70 to 7.0.72

2016-09-27 Thread agharta
Another take, Doing a pre jsp compilation via ant task, jasper2 gives me no jsp error (only warnings). Here the netbeans integration (adapted from https://tomcat.apache.org/tomcat-7.0-doc/jasper-howto.html#Web_Application_Compilation ). Forced absolute tomcat path. file="/home/agharta/ne

Re: tomcat under aix has SSL certificate with a weak hash algorithm

2016-09-27 Thread Olaf Kock
Am 27.09.2016 um 09:20 schrieb Michael Mattes: > Dear Tomcat users > > i have the following problem: I am using tomcat 6.0.45 under aix 7.1 > (7100-03-05-1524) > > i got the below Finding and my question is how can i fix it: ( ihave no > experience regarding > how to handle SSL certificates: > >

Re: tomcat-users.xml

2016-09-27 Thread giac ngo le van
Thank Vào 27-09-2016 14:15, "André Warnier (tomcat)" đã viết: > On 27.09.2016 03:36, vincent wrote: > >> Hello all and all, >> >> I can not reach a "host-manager webapp" >> where is the mistake >> >> my tomcat-users.xml file : >> >> >> >> >> >> < *** where does this "<" come from ? >> > >

tomcat under aix has SSL certificate with a weak hash algorithm

2016-09-27 Thread Michael Mattes
Dear Tomcat users i have the following problem: I am using tomcat 6.0.45 under aix 7.1 (7100-03-05-1524) i got the below Finding and my question is how can i fix it: ( ihave no experience regarding how to handle SSL certificates: 1.) Can i change something in a config file to fix it 2) or have

Re: tomcat-users.xml

2016-09-27 Thread tomcat
On 27.09.2016 03:36, vincent wrote: Hello all and all, I can not reach a "host-manager webapp" where is the mistake my tomcat-users.xml file : < *** where does this "<" come from ? > *** and this ">" ? and what does the tomcat logfile say ?