Re: Question in regards to the Connector allowHostHeaderMismatch when it is set to "false"

2023-05-08 Thread Mark Thomas
On 08/05/2023 22:04, Christopher Schultz wrote: On 5/8/23 10:39, Mark Thomas wrote: The port the client connects to is irrelevant. All that matters is the host in the request line and the host header. 1. The host header MUST be present 2. If a host is present in the request line it MUST be

CommunityOverCode Asia 2023 is calling for Presentations!

2023-05-08 Thread Huxing Zhang
Hi All, Community over Code Asia 2023 (formerly ApacheCon Asia) will be held in person this year in Beijing [1]. The CFP will end on Tuesday, Jun 6th, 2023 8:00 AM (Beijing time - UTC +8). For details could be found on the website [1]. Note that for those that can't be present, a pre-recorded v

RE: Question in regards to the Connector allowHostHeaderMismatch when it is set to "false"

2023-05-08 Thread Alvaro Garay
Hi, This makes sense now. Thank you for clarifying. Best, Alvaro From: Christopher Schultz Sent: Monday, May 8, 2023 5:04 PM To: users@tomcat.apache.org Subject: [EXTERNAL] Re: Question in regards to the Connector allowHostHeaderMismatch when it is set to "fals

Re: Question in regards to the Connector allowHostHeaderMismatch when it is set to "false"

2023-05-08 Thread Christopher Schultz
Alvaro, On 5/8/23 10:39, Mark Thomas wrote: On 08/05/2023 13:52, Alvaro Garay wrote: Hi Mark, In the example above...the port remains the same (8143). How is it different? GET http://myhostname.company.com/api/v1/endpoint  HTTP/1.1 The host is "myhostname.company.com" Host: myhostname.com

Re: Jakarta - Sources you'd recommend

2023-05-08 Thread Christopher Schultz
Amn, On 5/8/23 10:20, Amn Ojee Uw wrote: I am trying to learn how to program web pages using Java, but I am having serious difficulties understanding the how to. So, is there a source [books, web sites, etc.] anyone here can recommend me. How much do you want to read, and how much do you want

Re: Apache httpd as reverse proxy in front of Tomcat 10.1 - Different Connectors vs. HTTP request smuggling

2023-05-08 Thread Christopher Schultz
Reg, On 5/5/23 23:48, r.barc...@habmalnefrage.de wrote: I have some questions about HTTP request smuggling in the context of Tomcat with Apache httpd as its reverse proxy. First of all, a few words about my current setup: At the moment I have a few applications that are deployed this way: I u

Re: Supporting Proxy Protocol in Tomcat

2023-05-08 Thread Christopher Schultz
Amit, On 5/4/23 16:07, Amit Pande wrote: We have a similar requirement as mentioned in the below enhancement request. https://bz.apache.org/bugzilla/show_bug.cgi?id=57830 Is there any plan to add this support in Tomcat in future releases? Nothing at the moment that I know of. I thought that

Re: Question in regards to the Connector allowHostHeaderMismatch when it is set to "false"

2023-05-08 Thread Mark Thomas
On 08/05/2023 13:52, Alvaro Garay wrote: Hi Mark, In the example above...the port remains the same (8143). How is it different? GET http://myhostname.company.com/api/v1/endpoint HTTP/1.1 The host is "myhostname.company.com" Host: myhostname.company.com:8143 The host is "myhostname.company.

RE: Jakarta - Sources you'd recommend

2023-05-08 Thread stephanie.panah
YouTube is an excellent resource.Sent from my T-Mobile 5G Device Original message From: Amn Ojee Uw Date: 5/8/23 10:21 AM (GMT-05:00) To: users@tomcat.apache.org Subject: Jakarta - Sources you'd recommend Hello folks!I am trying to learn how to program web pages using Java, b

Jakarta - Sources you'd recommend

2023-05-08 Thread Amn Ojee Uw
Hello folks! I am trying to learn how to program web pages using Java, but I am having serious difficulties understanding the how to. So, is there a source [books, web sites, etc.] anyone here can recommend me. Thanks in advance. -

RE: Question in regards to the Connector allowHostHeaderMismatch when it is set to "false"

2023-05-08 Thread Alvaro Garay
Hi Mark, In the example above...the port remains the same (8143). How is it different? From: Mark Thomas Sent: Friday, May 5, 2023 4:56 PM To: Tomcat Users List Subject: [EXTERNAL] Re: Question in regards to the Connector allowHostHeaderMismatch when it is set t