AW: Password in Tomcat 9.x

2023-01-17 Thread Thomas Hoffmann (Speed4Trade GmbH)
Hello Alex, I usually remove the password on the p12 file via openssl. Protecting with password and writing the password in clear text somewhere doesn't improve security much I think. Dunno if this is a possible way to go for you. Greetings, Thomas Von: a.grub...@b

Re: Tomcat maven plugin

2023-01-17 Thread hantsy bai
The official tomcat maven plugin has not been updated for years, for the latest tomcat/Maven support, I would like to use the Cargo maven plugin instead. https://codehaus-cargo.github.io/cargo/Maven+3+Plugin.html Example project: https://github.com/hantsy/jakartaee9-servlet-starter-boilerplate --

AW: Password in Tomcat 9.x

2023-01-17 Thread a.grubner
Hoi Thomas Received also from Mark an email where he requested an example of the web.xml. Will provide you this tomorrow. Below is what I wrote him. Regards Alex # # # Hi Mark I will provide a config example tomorrow. Let you know the details. I have them on the other machine. In general it i

AW: Password in Tomcat 9.x

2023-01-17 Thread a.grubner
Hi Mark I will provide a config example tomorrow. Let you know the details. I have them on the other machine. In general it is like that - we have a webserver certificate (p12), which we use to have the https protocol. The certificate comes together with a p12.pwd file and this password of the

Re: SSO Token not found with RewriteRules

2023-01-17 Thread Jerry Malcolm
On 1/17/2023 12:30 PM, Jerry Malcolm wrote: On 1/17/2023 3:43 AM, Mark Thomas wrote: On 16/01/2023 23:07, Jerry Malcolm wrote: Well, after downloading and installing the Tomcat source in my Eclipse environment and tracking through a bunch of breakpoints, I figured out what was happening. Si

Tomcat JDBC CP: Exponential backoff?

2023-01-17 Thread Thomas Meyer
Hi, Does Tomcat's CP support exponential backoff in case DB is unavailable for some reason? I didn't find anything in the documentation in this regards. Mfg Thomas -- Diese Nachricht wurde von meinem Android-Gerät mit K-9 Mail gesendet.

Re: SSO Token not found with RewriteRules

2023-01-17 Thread Jerry Malcolm
On 1/17/2023 3:43 AM, Mark Thomas wrote: On 16/01/2023 23:07, Jerry Malcolm wrote: Well, after downloading and installing the Tomcat source in my Eclipse environment and tracking through a bunch of breakpoints, I figured out what was happening. SingleSignOn.invoke() was querying for the list

AW: Password in Tomcat 9.x

2023-01-17 Thread Thomas Hoffmann (Speed4Trade GmbH)
Hello Alex, I am not sure what your goal is. Webserver certificate (with private key) is used for encryption / ssl / tls. Password is used for user authentication and in web.xml you only specify the auth method, not any passwords. Or do you plan auth with client certificates? Greetings, Thomas __

Re: Tomcat maven plugin

2023-01-17 Thread Mark Thomas
On 17/01/2023 17:35, Alex O'Ree wrote: Is the tomcat maven plugin still maintained? I noticed it hasn't been updated in a while Not at the moment, but if someone wants to volunteer to do so it is a great opportunity to start contributing. Mark ---

Re: Password in Tomcat 9.x

2023-01-17 Thread Mark Thomas
On 17/01/2023 17:34, a.grub...@bluewin.ch wrote: Hello together I would like to understand, when implementing passwords into web.xml, then I would like NOT to implement a password, I want to include the path to a certificate (p12.pwd). I want to basically avoid, changing all the time the passwor

Tomcat maven plugin

2023-01-17 Thread Alex O'Ree
Is the tomcat maven plugin still maintained? I noticed it hasn't been updated in a while

Password in Tomcat 9.x

2023-01-17 Thread a.grubner
Hello together I would like to understand, when implementing passwords into web.xml, then I would like NOT to implement a password, I want to include the path to a certificate (p12.pwd). I want to basically avoid, changing all the time the password, when I renew my webserver certificate in the

Re: How-To apply Tomcat patch

2023-01-17 Thread Linwood Doty
Thanks Chris.. I use the windows installer downloaded from tomcat.apache.org ( apache-tomcat-9.0.70.exe ) -Original Message- From: Tomcat Users List Sent: Jan 17, 2023 9:18 AM To: Subject: Re: How-To apply Tomcat patch Linwood, On 1/17/23 09:03, Linwood Doty wrote: > We have Apache

Re: How-To apply Tomcat patch

2023-01-17 Thread Christopher Schultz
Linwood, On 1/17/23 09:03, Linwood Doty wrote: We have Apache Tomcat 9.0.65 and need to apply .70 patch . 1. Is it necessary to uninstall current Tomcat installation and reinstall with latest target patch - or is there a way to just apply the patch ? environment Windows 2012, Tomcat is used fo

Re: Tomcat for Apple silicon coming soon?

2023-01-17 Thread Christopher Schultz
Mark, On 1/17/23 09:12, Mark Thomas wrote: On 17/01/2023 14:08, Christopher Schultz wrote: Chris and Robert, On 1/16/23 17:08, Mark Thomas wrote: On 16/01/2023 20:40, Robert Turner wrote: You can run an aarm64 version of the Java runtime (various distributions exist) and run Tomcat on that

Re: Query: HSTS | Tomcat 9.0.50

2023-01-17 Thread Christopher Schultz
Deepti, On 1/16/23 23:00, Deepti Sharma S wrote: 1. There is no reverse proxy in between tomcat and UA in my use case. 2. In Tomcat/conf/server.xml I have below connector settings : When I configure HSTS in Tomcat/conf/web.xml and try to access website via HTTPS https://[domain]:8443, HS

Re: Tomcat for Apple silicon coming soon?

2023-01-17 Thread Mark Thomas
On 17/01/2023 14:08, Christopher Schultz wrote: Chris and Robert, On 1/16/23 17:08, Mark Thomas wrote: On 16/01/2023 20:40, Robert Turner wrote: You can run an aarm64 version of the Java runtime (various distributions exist) and run Tomcat on that -- it works well. No specific version of Tomca

Re: Tomcat for Apple silicon coming soon?

2023-01-17 Thread Christopher Schultz
Chris and Robert, On 1/16/23 17:08, Mark Thomas wrote: On 16/01/2023 20:40, Robert Turner wrote: You can run an aarm64 version of the Java runtime (various distributions exist) and run Tomcat on that -- it works well. No specific version of Tomcat is required as it a Java package. +1 I've be

How-To apply Tomcat patch

2023-01-17 Thread Linwood Doty
Hello, We have Apache Tomcat 9.0.65 and need to apply .70 patch . 1. Is it necessary to uninstall current Tomcat installation and reinstall with latest target patch - or is there a way to just apply the patch ? environment Windows 2012, Tomcat is used for BSI TaxFactory 11.0 Thanks! Linwood Do

Re: Query: HSTS | Tomcat 9.0.50

2023-01-17 Thread Olaf Kock
On 17.01.23 13:09, Olaf Kock wrote: On 17.01.23 11:45, Deepti Sharma S wrote: Hello, I have tried with both Chrome and Mozilla in private window where information is not cached. HSTS is not working on custom ports. I'm not confident that HSTS is among those cached values that are not sha

Re: Query: HSTS | Tomcat 9.0.50

2023-01-17 Thread Olaf Kock
On 17.01.23 11:45, Deepti Sharma S wrote: Hello, I have tried with both Chrome and Mozilla in private window where information is not cached. HSTS is not working on custom ports. I'm not confident that HSTS is among those cached values that are not shared between normal and incognito mode.

RE: Query: HSTS | Tomcat 9.0.50

2023-01-17 Thread Deepti Sharma S
Hello, I have tried with both Chrome and Mozilla in private window where information is not cached. HSTS is not working on custom ports. Regards, Deepti Sharma PMP(r) & ITIL -Original Message- From: Thomas Hoffmann (Speed4Trade GmbH) Sent: 17 January 2023 15:40 To: Tomcat Users Li

Re: SSO Token not found with RewriteRules

2023-01-17 Thread Mark Thomas
On 17/01/2023 09:43, Mark Thomas wrote: On 16/01/2023 23:07, Jerry Malcolm wrote: Well, after downloading and installing the Tomcat source in my Eclipse environment and tracking through a bunch of breakpoints, I figured out what was happening.   SingleSignOn.invoke() was querying for the list

AW: Query: HSTS | Tomcat 9.0.50

2023-01-17 Thread Thomas Hoffmann (Speed4Trade GmbH)
Hello, Which browser are you using? Can you clear the hsts information in the browser after changing the port in your configuration? I think browsers cache the hsts and port Informationen and don't switch to other ports with hsts. Greetings, Thomas Von: Deepti

Re: SSO Token not found with RewriteRules

2023-01-17 Thread Mark Thomas
On 16/01/2023 23:07, Jerry Malcolm wrote: Well, after downloading and installing the Tomcat source in my Eclipse environment and tracking through a bunch of breakpoints, I figured out what was happening.   SingleSignOn.invoke() was querying for the list of cookies in the request (that were inde