Re[3]: TomCat 9 service failed to start on Windows after TomCat 9 update

2021-01-19 Thread Igor Sluge
Hello, For all who is interested in how to do that: the following «--ServiceUser=LocalSystem» should be added to the «//IS//» command   >Понедельник, 18 января 2021, 7:40 +03:00 от Igor Sluge : >  > >Hello, >Thanks for your answer. Do you know is anyway to specify «Local System» user >for «tomc

RE: Reg: Jars under web-inf lib being accessed by tomcat even when the application is not running.

2021-01-19 Thread Jalaj Asher
Chris, Yes the auto deploy is set to false in our environment. I am not sure which background processor are you referring to ? if you can share that info I can check on it. -Original Message- From: Christopher Schultz Sent: Tuesday, January 19, 2021 11:46 AM To: users@tomcat.apache.org

Re: [SECURITY][CORRECTION] CVE-2020-17527 Apache Tomcat HTTP/2 Request header mix-up

2021-01-19 Thread Mark Thomas
Please note the updated affected version information below. Mark On 03/12/2020 18:01, Mark Thomas wrote: > CVE-2020-17527 Apache Tomcat HTTP/2 Request header mix-up > > Severity: Moderate > > Vendor: The Apache Software Foundation > > Versions Affected: > Apache Tomcat 10.0.0-M1 to 10.0.0-M9

Re: Reg: Jars under web-inf lib being accessed by tomcat even when the application is not running.

2021-01-19 Thread Christopher Schultz
Jalaj, On 1/18/21 11:13, Jalaj Asher wrote: We have a situation where in we are seeing with tomcat 8.5 and higher that even when the application is not in use , tomcat is accessing different jars in that web-inf/ lib folder every few seconds or few minutes. These jars are not getting loaded

Re: Extensibility of LegacyCookieProcessor?

2021-01-19 Thread Christopher Schultz
Polina, On 1/18/21 08:51, Polina Georgieva wrote: On our Tomcat 8 we are currently using org.apache.tomcat.util.http.LegacyCookieProcessor and we need to override its method generateHeader(Cookie cookie, HttpServletRequest request) to handle sameSite cookie attribute in a custom way. However the

Re: How to install the APR for Tomcat9 version in Linux OS with out internet access

2021-01-19 Thread Christopher Schultz
Naga, On 1/17/21 23:31, Naga Ramesh wrote: I am trying to install the APR for tomcat 9 version in my local linux (RHEL-6 OS version) server but don't have the internet access and keep on asking many dependencies and tried multiple ways. Can you please let me know, where can I download the all d

Re: SSL trouble in embeddedLand

2021-01-19 Thread Rob Sargent
My recommendation would be: - start with the test certs from the Tomcat unit tests as they are known to work - get your code working so you know the code is good - they try with your own keys certificates Mark That's exactly what I'll do next.  Thank you very much. rjs

Re: SSL trouble in embeddedLand

2021-01-19 Thread Mark Thomas
On 19/01/2021 04:02, Rob Sargent wrote: > > Stuck in my basement with no real domain I'm having trouble setting up > SSL/TLS on an embedded tomcat instance. And I'm very lost, having tried > more dead ends than I can remember. > > I used this to generate cert and key > openssl req -out localhost.