Re: Tomcat 10.1 Http11NioProtocol with the OpenSSLImplementation does not sent close_notify in response to client's close_notify

2024-08-26 Thread Isaac Klickstein
Hello Chris > What is the "Tomcat Native Client"? I am using the Tomcat Native software (maybe "client" was wrong) available here to build the OpenSSLImplementation: https://tomcat.apache.org/download-native.cgi#2.0.8 I then link to this library using LD_LIBRARY_PATH in the Tomcat's setenv.sh

Re: Tomcat 10.1 Http11NioProtocol with the OpenSSLImplementation does not sent close_notify in response to client's close_notify

2024-08-26 Thread Christopher Schultz
Isaac, On 8/25/24 13:27, Isaac Klickstein wrote: Hello Tomcat Users Tomcat Version: 10.1.28 OpenSSL version: 3.0.14 Tomcat Native Client: 2.0.8 What is the "Tomcat Native Client"? I have configured an HTTPS connector with the org.apache.coyote.http11.Http11NioProtocol protocol and the org

Re: j_security_check error

2024-08-26 Thread Christopher Schultz
Mark, On 8/16/24 11:38, Mark Thomas wrote: On 16/08/2024 16:16, Fernando wrote: Hi all, I need help with problem that I can't fix. I am using Apache Tomee 8, but I know that Apache Tomee rest on Apache Tomcat, in this case version 9. My problem is when some user exit from application this forwa

Re: How to Prevent Dynamic Code manipulation via Java Attach API for Tomcat

2024-08-26 Thread Christopher Schultz
Bhavesh, On 8/15/24 14:49, Bhavesh Mistry wrote: I recently came to know that with Java Attach API, anyone with access can attach to a local process and manipulate Java Byte code. For example, password harvesting is attached to the Filter Chain. https://github.com/rebeyond/memShell What I foun

Re: Might switching to Tomcat 9 solve this?

2024-08-26 Thread Christopher Schultz
On 8/15/24 12:40, Chuck Caldarale wrote: On Aug 15, 2024, at 11:20, James H. H. Lampert wrote: In the wake of my recently switching a customer over from 8.5 to 9.0, a question came up about another customer installation. They are quite possibly the most heavily loaded customer installat

Re: Refresh my memory: Any "gotchas" in going from Tomcat 8.5 to Tomcat 9?

2024-08-26 Thread Christopher Schultz
James, On 8/15/24 11:12, James H. H. Lampert wrote: On 8/14/24 6:12 PM, Chuck Caldarale wrote: The blocking IO implementation (http11.Http11Protocol) was actually removed in 8.5, but if specified in the config, 8.5 would substitute the default non-blocking one (http11.Http11NioProtocol). In 9.

Re: Web browser clocking issue at Apache Tomcat 10.1.20 on Linux

2024-08-26 Thread Christopher Schultz
Tim, On 8/15/24 10:55, Tim Zielke wrote: When the web browser clocking issue happens, the web browser will just clock when I click on a link in this application and then eventually time out on the browser side. When you say "clock" Do you mean "the browse throbber just keeps going and goi

Re: Migration to Tomcat Assistance

2024-08-26 Thread Christopher Schultz
Melvin, On 8/13/24 16:35, Baez, Melvin L wrote: Hi all, I’m reaching out to the community seeking assistance. I support Tomcat from an infrastructure perspective and assist our developers with migrating a set of existing applications from WebSphere and TomEE to Tomcat as the application web

Re: mod_jk retry continuing existing stream?

2024-08-26 Thread Christopher Schultz
Jess, On 8/12/24 14:54, Holle, Jess wrote: I have mod_jk load balancing over several back-end Java processes which embed Tomcat. When I Ctrl-C one of those processes, a server-sent-event response stream (which has already sent a number of events) does not end from a client perspective. Rath

Re: [Semi OT] Suggestion: Maven repository for Tomcat native library

2024-08-26 Thread Christopher Schultz
Harri, On 8/12/24 03:26, Harri Pesonen wrote: Tomcat native gives much better SSL connection performance, they say. At least in Windows. I have not personally performed any tests though. https://tomcat.apache.org/tomcat-9.0-doc/apr.html I would love for you to do some of your own benchmarking