Re: TLSCertificateReloadListener Detects Expiration But Never Reads New Cert & Key Files

2024-03-18 Thread Justin Y
Hi Mark --   Ha!  I just ran a test (while you were responding) and made the same confirmation:  TLSCertificateReloadListener in 10.1.18 works, TLSCertificateReloadListener in 10.1.19 doesn't.   Thank you!  Happy to confirm 10.1.20 for you; just ask.  And, by the way, I've seen 'markt' showi

Re: TLSCertificateReloadListener Detects Expiration But Never Reads New Cert & Key Files

2024-03-18 Thread Mark Thomas
On 18/03/2024 08:21, Mark Thomas wrote: On 17/03/2024 15:26, Justin Y wrote: Hi Everyone --    I've spent a few hours scratching my head and then diving into the source code of 10.1.19 to figure out what's going on. Could you test with 10.1.18? I'm wondering if the user provided SSLContext

Memory leak in EncodingDetector?

2024-03-18 Thread Simon Niederberger
Hi I'm analyzing a memory leak reported by Tomcat, and have narrowed it down to org.apache.jasper.compiler.EncodingDetector: private static final XMLInputFactory XML_INPUT_FACTORY; static { XML_INPUT_FACTORY = XMLInputFactory.newInstance(); } This class is called by webapp code on a GET requ

Re: problems with partitioned cookies

2024-03-18 Thread Mark Thomas
On 18/03/2024 15:16, info@klawitter.de wrote: What am I doing wrong here? (Tomcat 9.0.82) https://tomcat.apache.org/tomcat-9.0-doc/changelog.html Search for "partitioned" The problem is you are using Tomcat 9.0.82. Support for a default partitioned attribute wasn't added until 9.0.85.

problems with partitioned cookies

2024-03-18 Thread info . asf
Hi there, I have to make my webapp complying to CHIPS. For this I am trying to configure the CookieProcessor to allow partitioned cookies. For this I added a CookieProcessor directive to the context.xml like this: However tomcat complains about this with [Catalina-utility-1] org.apache.tomca

Re: Regression in mutual authentication in 9.0.86+?

2024-03-18 Thread Mark Thomas
I've just tested 9.0.x and mutual TLS authentication appears to be working as expected. I suggest starting with testing a simple JSP that echoes that attribute and if you still see the issue, provide us with your configuration. Note that the issue may be related to the certs you are using so t

Re: TLSCertificateReloadListener Detects Expiration But Never Reads New Cert & Key Files

2024-03-18 Thread Mark Thomas
On 17/03/2024 15:26, Justin Y wrote: Hi Everyone --   I've spent a few hours scratching my head and then diving into the source code of 10.1.19 to figure out what's going on. Could you test with 10.1.18? I'm wondering if the user provided SSLContext changes in 10.1.19 have triggered a regre