Re: Vulnerability on Apache Tomcat Default Files

2020-08-12 Thread FANG YAP
hello chris, they only mention on port 8080 and no other info. I will try that telnet command and see. On Thu, 6 Aug 2020 at 23:20, Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > > Fang, > > On 8/5/20 22:16, FANG YAP wrote: > >

Re: request and response body logging for async servlets

2020-08-12 Thread Mark Thomas
On 12/08/2020 17:50, Suraj Puvvada wrote: > I'm trying to capture the request and response body for async servlets. > Currently I'm using a filter to wrap the request and response via the > HttpServletRequestWrapper and HttpServletResponseWrapper and wrap the > InputStream and OutputStream objects

request and response body logging for async servlets

2020-08-12 Thread Suraj Puvvada
I'm trying to capture the request and response body for async servlets. Currently I'm using a filter to wrap the request and response via the HttpServletRequestWrapper and HttpServletResponseWrapper and wrap the InputStream and OutputStream objects and copy the data whenever read or write calls are

Re: SSL debug?

2020-08-12 Thread Mark Thomas
On 12/08/2020 16:29, James H. H. Lampert wrote: > Question: > > We are once again having SSL difficulties with our webapp connecting > with an outside web service: the java.security override that had solved > the problem in the past (specifically, removing "DESede" from the > "jdk.tls.disabledAlgo

SSL debug?

2020-08-12 Thread James H. H. Lampert
Question: We are once again having SSL difficulties with our webapp connecting with an outside web service: the java.security override that had solved the problem in the past (specifically, removing "DESede" from the "jdk.tls.disabledAlgorithms" in an override file) is now failing with certai