RE: [External] Re: Security Headers Implementation in Tomcat 6.x version

2017-06-01 Thread Shaik, Mohammad N.
Hi Chris, My actual requirement was to implement 7 HTTP headers, out of which 4 are implemented in "HttpHeaderSecurityFilter". The remaining 3 headers (Content-Security-Policy, Public-Key-Pins, X-Robots-Tag) are not addressed in any of the filters available in Tomcat 7, 8 & 9 versions. Is ther

Re: Tomcat 7 antivirus exclusions, firewall exclusions?

2017-06-01 Thread Kerry Hazelton
Awesome, this will point me in the right direction on where to look and how to get this deployed. Thanks! On Thu, Jun 1, 2017 at 11:55 AM, Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Kerry, > > On 6/1/17 10:47 AM, Kerry Hazel

Re: Developer quickstart guide for Tomcat with HTTP/2 on macOS

2017-06-01 Thread Tobias Soloschenko
Christopher, > Am 01.06.2017 um 16:33 schrieb Christopher Schultz > : > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Tobias, > >> On 6/1/17 3:53 AM, Tobias Soloschenko wrote: >> a long time ago I tried out to install Apache Tomcat with HTTP/2 >> support on macOS. I finally got a sho

Re: Developer quickstart guide for Tomcat with HTTP/2 on macOS

2017-06-01 Thread Tobias Soloschenko
Hi, what do you think of adding this to wiki or a place to point to? kind regards Tobias - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Developer quickstart guide for Tomcat with HTTP/2 on macOS

2017-06-01 Thread Mark Thomas
On 1 June 2017 17:03:48 BST, Christopher Schultz wrote: >Mark, > >On 6/1/17 11:46 AM, Mark Thomas wrote: >> On 1 June 2017 15:33:46 BST, Christopher Schultz >> wrote: >>> Tobias, >>> >>> On 6/1/17 3:53 AM, Tobias Soloschenko wrote: a long time ago I tried out to install Apache Tomcat with

Guide for upgrading 8.0 -> 8.5

2017-06-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, Tomcat 8.5 is intended to be a drop-in replacement for Tomcat 8.0 with certain caveats. There is a migration guide[1] but it seems that may be more detail than many need. Is there any appetite for a tl;dr version of the migration guide? Someth

Re: Developer quickstart guide for Tomcat with HTTP/2 on macOS

2017-06-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 6/1/17 11:46 AM, Mark Thomas wrote: > On 1 June 2017 15:33:46 BST, Christopher Schultz > wrote: >> Tobias, >> >> On 6/1/17 3:53 AM, Tobias Soloschenko wrote: >>> a long time ago I tried out to install Apache Tomcat with >>> HTTP/2 support

Re: tomcat 7, null tag attributes

2017-06-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Chris, On 6/1/17 10:51 AM, Chris Cheshire wrote: > 7.0.77 (latest version in EPEL repository) > > On Thu, Jun 1, 2017 at 10:27 AM, Christopher Schultz < > ch...@christopherschultz.net> wrote: > > Chris, > > On 5/31/17 6:31 PM, Chris Cheshire wro

Re: Tomcat 7 antivirus exclusions, firewall exclusions?

2017-06-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Kerry, On 6/1/17 10:47 AM, Kerry Hazelton wrote: > I am attempting to deploy a managed antivirus agent to two > different machines - one runs RHEL 7.3, kernel version 3.10.0-514; > the other runs Microsoft Windows 2012 R2 - and both are hosting web

Re: Developer quickstart guide for Tomcat with HTTP/2 on macOS

2017-06-01 Thread Mark Thomas
On 1 June 2017 15:33:46 BST, Christopher Schultz wrote: >Tobias, > >On 6/1/17 3:53 AM, Tobias Soloschenko wrote: >> a long time ago I tried out to install Apache Tomcat with HTTP/2 >> support on macOS. I finally got a short time window to complete a >> developer quickstart guide for that: > >Woul

Re: Custom Webapp loading..

2017-06-01 Thread Hassan Khan
Also inside the work folder the jsp is not compiled , just the _folder name has been created... does that point to a issue. Thanks On Thu, Jun 1, 2017 at 11:26 AM, Hassan Khan wrote: > Any pointers to the problem .. pls... Have extended webapploader and use > the below function for adding jar in

Re: Custom Webapp loading..

2017-06-01 Thread Hassan Khan
Any pointers to the problem .. pls... Have extended webapploader and use the below function for adding jar in tomcat 6... for tomcat 8.5 the jar are loading but not getting included in the classpath somehow... /** * reflectively add a jar to the classloader. This only works when called after s

Re: tomcat 7, null tag attributes

2017-06-01 Thread Chris Cheshire
7.0.77 (latest version in EPEL repository) On Thu, Jun 1, 2017 at 10:27 AM, Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Chris, > > On 5/31/17 6:31 PM, Chris Cheshire wrote: > > I am using tomcat 7 on CentOS 7 and I need to pas

Tomcat 7 antivirus exclusions, firewall exclusions?

2017-06-01 Thread Kerry Hazelton
All, I am attempting to deploy a managed antivirus agent to two different machines - one runs RHEL 7.3, kernel version 3.10.0-514; the other runs Microsoft Windows 2012 R2 - and both are hosting web pages served up by Apache Tomcat 7.0.78. What I’d like to know is which processes/services, file

Re: a question about Realm config

2017-06-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Ophusky, On 6/1/17 5:09 AM, ophusky wrote: > Thank you very much! I according to what you said it and solved the > problem. I have modified CATALINA_HOME/conf/server.xml to : > > docBase="/home/coremail/tomcat/webapps_exp/sample"> className="org

Re: Developer quickstart guide for Tomcat with HTTP/2 on macOS

2017-06-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Tobias, On 6/1/17 3:53 AM, Tobias Soloschenko wrote: > a long time ago I tried out to install Apache Tomcat with HTTP/2 > support on macOS. I finally got a short time window to complete a > developer quickstart guide for that: Wouldn't this all be

Re: [External] Re: Security Headers Implementation in Tomcat 6.x version

2017-06-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mohammad, On 6/1/17 12:43 AM, Shaik, Mohammad N. wrote: > What should be name of the new JAR file that I would create for > the Filter classes? It doesn't matter. > There are multiple JAR files in lib folder. Does the name of these > JAR files hav

Re: tomcat 7, null tag attributes

2017-06-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Chris, On 5/31/17 6:31 PM, Chris Cheshire wrote: > I am using tomcat 7 on CentOS 7 and I need to pass a null value to > tag attributes of type Long/Integer/Float, however it is *always* > coerced to zero. > > <%@attribute name="parentId" required="

Tomcat Architecture Documentation Contribution

2017-06-01 Thread Adrian Bartlett
Hi All, I have documented the MySQL DBCP Example on the http://tomcat.apache.org/tomcat-8.5-doc/jndi-datasource-examples-howto.html page. It shows architecturally how Tomcat serves the page by using a DataSource, Connection Pool and MySQL. It can be viewed here: https://design.codelytics.io/t

Project to help data analysis on thread dumps

2017-06-01 Thread Robert Anderson
Hi, I've started a project that make data analysis on thread dumps easier (at least I hope so :) ). An example of jupyter notebook: https://github.com/ranophoenix/jvmthreadparser/blob/master/Thread%20Analysis.ipynb All suggestions are welcomed. Thanks, Robert

Re: Possible bug between Apache 2.4 and Tomcat 7 via AJP when POSTing

2017-06-01 Thread Mark Eggers
On 6/1/2017 1:32 AM, Nicholas Cottrell wrote: > yum provides /usr/lib64/httpd/modules/mod_proxy_ajp.so OK - don't know how I missed it. I could have sworn it wasn't there yesterday :-p. I just checked my system and it's there (run CentOS 6 in production). /mde/ signature.asc Description: Open

Re: Possible bug between Apache 2.4 and Tomcat 7 via AJP when POSTing

2017-06-01 Thread Mark Thomas
On 1 June 2017 09:24:16 BST, Nicholas Cottrell wrote: > >> On 31 May 2017, at 22:44, André Warnier (tomcat) >wrote: >> >> On 31.05.2017 21:52, Nicholas Cottrell wrote: On 5/31/17 8:42 AM, Nicholas Cottrell wrote: > Hi All! > > I'm having a problem setting up an existing webapp

Re: Re: a question about Realm config

2017-06-01 Thread ophusky
Thank you very much! I according to what you said it and solved the problem. I have modified CATALINA_HOME/conf/server.xml to : Everything is all right,thanks again! 2017-06-01 ophusky 发件人:Mark Thomas 发

Re: Possible bug between Apache 2.4 and Tomcat 7 via AJP when POSTing

2017-06-01 Thread Nicholas Cottrell
Mark, > > On 5/31/2017 5:42 AM, Nicholas Cottrell wrote: >> Hi All! >> >> I'm having a problem setting up an existing webapp from Apache >> 2.2/Tomcat6 on a new server running Centos 7, and the following >> packages: >> >> httpd2.4.6-45.el7.centos.4 tomcat.noarch >> 7.0.69-11.el7_3

Re: Possible bug between Apache 2.4 and Tomcat 7 via AJP when POSTing

2017-06-01 Thread Nicholas Cottrell
> On 31 May 2017, at 22:44, André Warnier (tomcat) wrote: > > On 31.05.2017 21:52, Nicholas Cottrell wrote: >>> On 5/31/17 8:42 AM, Nicholas Cottrell wrote: Hi All! I'm having a problem setting up an existing webapp from Apache 2.2/Tomcat6 on a new server running Centos 7, a

Developer quickstart guide for Tomcat with HTTP/2 on macOS

2017-06-01 Thread Tobias Soloschenko
Hi everyone, a long time ago I tried out to install Apache Tomcat with HTTP/2 support on macOS. I finally got a short time window to complete a developer quickstart guide for that: 1. Download XCode from the AppStore 2. Install Brew: http://brew.sh/ 3. Download Apache Tomcat binaries > 8.5 ht

Re: a question about Realm config

2017-06-01 Thread Mark Thomas
This time to the list... On 01/06/17 08:02, ophusky wrote: > Tomcat version:8.0.43.0 > Nginx version:openresty/1.11.2.2 > OS:CentOS Linux release 7.3.1611 (Core) > > I have already configure tomcat to use the DIGEST certification, > When I have direct access to Tomcat all normal, > http://192.1

a question about Realm config

2017-06-01 Thread ophusky
Tomcat version:8.0.43.0 Nginx version:openresty/1.11.2.2 OS:CentOS Linux release 7.3.1611 (Core) I have already configure tomcat to use the DIGEST certification, When I have direct access to Tomcat all normal, http://192.168.122.130:8080/sample/test/test.html can trigger the certification and