Tomcat 8 APR/openSSL Issue

2017-10-05 Thread Syam Pillai
On my AMI (Amazon Linux) server, tomcat 8 was running happily but today, after an upgrade (Version is now 8.5.16.0), the server is failing to start with the following message: INFO [main] org.apache.coyote.AbstractProtocol.init Initializing ProtocolHandler ["https-openssl-nio-8443"] /usr/share/soe

Re: Performance settings for Multiple Hosts

2017-10-05 Thread Mark Thomas
On 05/10/17 21:36, Jerry Malcolm wrote: > I am running TC 8.0 on WinServer8 on a commercially hosted platform with > a WAMP environment.   I am running around 10 virtual hosts.   2 hosts > are dedicated to JSPWiki.  The other 8 are running variations of the > same custom application with around 10-

Performance settings for Multiple Hosts

2017-10-05 Thread Jerry Malcolm
I am running TC 8.0 on WinServer8 on a commercially hosted platform with a WAMP environment.   I am running around 10 virtual hosts.   2 hosts are dedicated to JSPWiki.  The other 8 are running variations of the same custom application with around 10-15 individual webapps each. When I am runni

Re: Severity of CVE-2016-6816

2017-10-05 Thread Mark Thomas
On 05/10/17 20:35, Justin wrote: > Hi all, > I'm curious about the severity of CVE-2016-6816 fixed last November. > http://svn.apache.org/viewvc?view=revision&revision=1767653 > > I see that vendors backported this fix (over time). > http://www.securitytracker.com/id/1037332 > Severity is describe

RE: ISAPI and IIS 10 Logging Issue

2017-10-05 Thread Thomas, Michael
[External Email] -- On 05.10.2017 17:09, George Stanchev wrote: > > >> Note that also in the course of my investigations, somewhere I found a >> phrase to the effect that Mirosoft would be discouraging the future use of >> ISAP

Severity of CVE-2016-6816

2017-10-05 Thread Justin
Hi all, I'm curious about the severity of CVE-2016-6816 fixed last November. http://svn.apache.org/viewvc?view=revision&revision=1767653 I see that vendors backported this fix (over time). http://www.securitytracker.com/id/1037332 Severity is described as Important, Moderate, CVSS v2 Medium, and C

Re: Problem: (GSKit) No compatible cipher suite available between SSL end points.

2017-10-05 Thread James H. H. Lampert
This just keeps getting weirder. Late yesterday afternoon, I did a lengthy "stare-and-compare" between what SSLInfo returned for the two different Tomcat servers, and I couldn't find any differences. But then, I got called away from this on something that kept me in the office until after 7 PM

Re: ISAPI and IIS 10 Logging Issue

2017-10-05 Thread tomcat
On 05.10.2017 17:09, George Stanchev wrote: Note that also in the course of my investigations, somewhere I found a phrase to the effect that Mirosoft would be discouraging the future use of ISAPI modules in IIS, and recommends some other architecture instead now. Do you remember where you

Tomcat 8.5.23 - Nio2 Connector - Error reading request, ignored

2017-10-05 Thread Eirik Lykken
Dear All, We are running Tomcat 8.5.23 production server on a CentOS 6.9 machine, Oracle JVM 1.8.0_144, and OpenSSL 1.1.0f. The server hosts a web application where almost all the traffic is https. We used to have a Http11NioProtocol connector with Java SSL using HTTP 1.1 but we switched to Ht

RE: [error] SSL0266E: Handshake Failed, Could not establish SSL proxy connection

2017-10-05 Thread Gali, Vamsi A
Hello, I just realized that I didn’t provide the environment info & following are the details: Tomcat: apache-tomcat-7.0.75 IHS: HIS v8.5.5.x OS: RHEL We have IHS→mod_proxy(on IHS) → Tomcat. I know that IHS isn’t the suggested webserver to use with Tomcat but it’s in use. [error] SSL0266E: Han

[error] SSL0266E: Handshake Failed, Could not establish SSL proxy connection

2017-10-05 Thread Gali, Vamsi A
Hello, We have IHS→mod_proxy(on IHS) → Tomcat. I know that IHS isn’t the suggested webserver to use with Tomcat but it’s in use. [error] SSL0266E: Handshake Failed, Could not establish SSL proxy connection When Tomcat is accessed through webserver url, it throws ‘500’ with the following stack

RE: ISAPI and IIS 10 Logging Issue

2017-10-05 Thread George Stanchev
> Note that also in the course of my investigations, somewhere I found a phrase > to the effect that Mirosoft would be discouraging the future use of ISAPI > modules in IIS, and recommends some other architecture instead now. Do you remember where you saw that? Can you provide a link? --

Re: Tomcat unstable after updating apache http client

2017-10-05 Thread Konstantin Kolinko
2017-10-05 14:12 GMT+03:00 Alex O'Ree : > I ran into a strange issue the other day. Running tomcat 7.0.81. I have a > war file with apache http client vs 4.3.3. I was having some issues with my > code in the war and experimented with updating the http client to 4.5.3. > The result was bizarre. > >

Bug 45014 - Request and Response classes should have wrappers for use in Valves

2017-10-05 Thread Amit Pande
https://bz.apache.org/bugzilla/show_bug.cgi?id=45014 Any plans/thoughts on merging Chris' mod in Tomcat 9.x branch? It is really a nice to have built in support for Valves to have wrapper classes for Request and Response. We also had a requirement to read the request payload at a valve level (

Re: Tomcat unstable after updating apache http client

2017-10-05 Thread Alex O'Ree
Ill see if I can make a test war they'd reduces it to the minium. On Oct 5, 2017 8:04 AM, "Mark Thomas" wrote: On 05/10/17 12:12, Alex O'Ree wrote: > I ran into a strange issue the other day. Running tomcat 7.0.81. I have a > war file with apache http client vs 4.3.3. I was having some issues w

RE: ISAPI and IIS 10 Logging Issue

2017-10-05 Thread Thomas, Michael
-- On 06.09.2017 22:07, Thomas, Michael wrote: > > -- >> On 01.09.2017 22:21, Thomas, Michael wrote: >>> All, >>> >>> When using the ISAPI Handler Mapping in IIS 1

Re: Tomcat unstable after updating apache http client

2017-10-05 Thread Mark Thomas
On 05/10/17 12:12, Alex O'Ree wrote: > I ran into a strange issue the other day. Running tomcat 7.0.81. I have a > war file with apache http client vs 4.3.3. I was having some issues with my > code in the war and experimented with updating the http client to 4.5.3. > The result was bizarre. > > T

Tomcat unstable after updating apache http client

2017-10-05 Thread Alex O'Ree
I ran into a strange issue the other day. Running tomcat 7.0.81. I have a war file with apache http client vs 4.3.3. I was having some issues with my code in the war and experimented with updating the http client to 4.5.3. The result was bizarre. Tomcat would start as normal but stop serving http