Re: CONNECTION_CLOSED 200 Error with HTTP/2 Enabled

2019-05-22 Thread Tom Coudyzer
Thanks Mark, Will have a look to enable debug mode. Probably need to do some investigation as Tomcat is embedded in the full product and some probably some standard logging configuration is changed. Tom On Wed, May 22, 2019 at 5:01 PM Mark Thomas wrote: > On 22/05/2019 15:47, Tom Coudyzer wrot

RE: OCSP with openSSL

2019-05-22 Thread Усманов Азат Анварович
Chris, [root] ~# openssl version OpenSSL 1.1.1a 20 Nov 2018 [root] ~# openssl help Standard commands asn1parse caciphers cms crl crl2pkcs7 dgst dhparam dsa dsaparam ececparam enc

Re: OCSP with openSSL

2019-05-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Усманов, On 5/22/19 07:28, Усманов Азат Анварович wrote: > Mark, I installed it just by downloading tcnative src tar.gz > file from tomcat website and issued ./configure > --with-apr=/usr/local/apr --with-java-home=/usr/java/jdk1.7.0_79 > -

Re: Running sudo from a servlet

2019-05-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Claude, On 5/21/19 14:20, Claude Brisson wrote: > (responding to myself) > > The culprit is the option > > NoNewPrivileges=true > > in the file > /etc/systemd/system/multi-user.target.wants/tomcat8.service > > When changed to false, one must als

Re: ApacheCon agenda?

2019-05-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Israel, On 5/20/19 13:46, Israel Timoteo wrote: > It would be very interesting having a talk where I can experiment > (like in a lab) building a configuration for HTTPD as a proxy for > a Tomcat cluster; something where I can see details for best >

Re: Latest Best Practices for Tomcat Tuning

2019-05-22 Thread Olaf Kock
On 22.05.19 16:36, Louis Zipes wrote: > Hi Experts, > I know that if you Google 'Tomcat Tuning' you will get some hits (ex. > https://www.mulesoft.com/tcat/tomcat-performance) but I would like to see if > we can have a discussion of best practices for Tomcat tuning from the group > of experts

Re: CONNECTION_CLOSED 200 Error with HTTP/2 Enabled

2019-05-22 Thread Mark Thomas
On 22/05/2019 15:47, Tom Coudyzer wrote: > Hi, > > We wanted to upgrade our application to start using HTTP/2. We added the > necessary and we see that the browser is using HTTP/2 in the browsers' > development tools. > > However since we activated it we get random CONNECTION_CLOSED 200 Errors in

Re: Latest Best Practices for Tomcat Tuning

2019-05-22 Thread Mark Thomas
On 22/05/2019 15:36, Louis Zipes wrote: > Hi Experts, > I know that if you Google 'Tomcat Tuning' you will get some hits (ex. > https://www.mulesoft.com/tcat/tomcat-performance) but I would like to see if > we can have a discussion of best practices for Tomcat tuning from the group > of expert

CONNECTION_CLOSED 200 Error with HTTP/2 Enabled

2019-05-22 Thread Tom Coudyzer
Hi, We wanted to upgrade our application to start using HTTP/2. We added the necessary and we see that the browser is using HTTP/2 in the browsers' development tools. However since we activated it we get random CONNECTION_CLOSED 200 Errors in Chrome. It's not always on the same files and sometime

Latest Best Practices for Tomcat Tuning

2019-05-22 Thread Louis Zipes
Hi Experts, I know that if you Google 'Tomcat Tuning' you will get some hits (ex. https://www.mulesoft.com/tcat/tomcat-performance) but I would like to see if we can have a discussion of best practices for Tomcat tuning from the group of experts here. Is there an updated top 10 list or someth

RE: OCSP with openSSL

2019-05-22 Thread Усманов Азат Анварович
Mark, I installed it just by downloading tcnative src tar.gz file from tomcat website and issued ./configure --with-apr=/usr/local/apr --with-java-home=/usr/java/jdk1.7.0_79 -with-ssl=/usr/local/openssl && make && make install && make clean I'm not sure how to specify any ocsp related

Re: Usage of Tomcat Logo combined with own logo.

2019-05-22 Thread Mark Thomas
On 21/05/2019 14:31, bernd.sch...@daimler.com wrote: > Hi, > > We created a library that offers an easy integration in our internal oidc > infrastructure. > It is based on jaspic so it would work on any application server that support > it, > But we want to push the use of open source applicatio

Re: OCSP with openSSL

2019-05-22 Thread Mark Thomas
On 22/05/2019 11:28, Усманов Азат Анварович wrote: > Hi everyone! I have a web app running on tomcat and java 7 using apr for TLS > related issues. I m still unable to have OCSP verification working with > tomcat. > I have tried running tcpdump on the server but don't' see any Comodo related

OCSP with openSSL

2019-05-22 Thread Усманов Азат Анварович
Hi everyone! I have a web app running on tomcat and java 7 using apr for TLS related issues. I m still unable to have OCSP verification working with tomcat. I'm NOT talking about the client- certificate based auth here, just the opposite. I want tomcat to present it's OCSP status to the clie