Your connection is not private Issue

Hi, I'm experiencing an issue when accessing the production web servers without using the .xxx.com domain. The browser displays a message stating, "Your connection is not private." This problem occurs in Edge, Chrome, and Firefox, while the development environment URLs work well with or without

Re: HOWTO: the right way to configure security constraints to protect CGI scripts in web.xml

Hi, Per jsp-url per servlet is never on the menu. The difference between CGI Servlet and JSP Servlet is the script file search mechanism. e.g. two requests, "/xxx/update" and "/xxx/update/abc" are mapping into two different JSP script files if ruled by JSP Servlet. Unfortunately, the differen

10.1.x [ANN] are missing for x >= 33

I noticed this in February and have attempted multiple times to contact the list owners and have received no response. There are no posts for Tomcat 10.1.x to tomcat-announce after 33 on 2024-11-11. https://lists.apache.org/thread/pbovsrrm11jqwccwfj8c8655oy8vj1rx I rely on the tomcat-announce li

[ANN] Apache Tomcat 9.0.104 available

The Apache Tomcat team announces the immediate availability of Apache Tomcat 9.0.104. Apache Tomcat 9 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 9.0.104 is a bugfix and fe

Re: 9.0.102 sessions

Thanks for the curl check. This is what I get from the default page (from the server) curl -vv http://www.myapp.co.uk/ *   Trying 127.0.0.1... * TCP_NODELAY set * Connected to www.myapp.co.uk (127.0.0.1) port 80 (#0) > GET / HTTP/1.1 > Host: www.myapp.co.uk > User-Agent: curl/7.61.1 > Accept: *

Re: 9.0.102 sessions

Thanks for the reply. I have rechecked the manager app and the sessions are around 40, and steady. I did not notice the link on the number of sessions, and checking now I can see they are all under 30 minutes, which is good. I will go through the logs and analyse the urls to see what was tri

Re: 9.0.102 sessions

Greg, On 4/9/25 7:22 AM, Greg Huber wrote: I have noticed that seems I have alot of sessions open, when  looking in the application manager.  It was was 800+.  I don't remember seeing it this high before.  If I refresh the screen I can see the number going up slowly.  I have not made any chang

Re: HOWTO: the right way to configure security constraints to protect CGI scripts in web.xml

Mark, On 4/8/25 5:40 PM, Mark Thomas wrote: 8 Apr 2025 21:45:50 Christopher Schultz : Justin, On 4/8/25 3:16 AM, Justin Chen wrote: Dear users and supporters, Currently I have two CGI scripts: 1. "/cgi-bin/update" //an administrative command, required role="admin" 2. "/cgi-bin/updateOrder" /

Apache Tomcat 9 SAML Setup With Active Directory

Hi, Is there any current up-to-date documentation on how to setup Apache Tomcat 9 with SAML and Active Directory that is not AI generated? I know you can do Keycloak IdP with Tomcat, but I was trying to avoid setting up an identity provider. I am finding links, but I think there is some missin

Re: Exception: Server name value of host_name cannot have the trailing dot

On 09/04/2025 12:45, Vishwas Bm wrote: Hi, I am getting below error when having tomcat server name with trailing dot (.) when using tomcat 10. From the stacktrace, it looks like it is coming as part of SNI handling. That is generated by the JRE. Nothing to do with Tomcat. I'll note that RFC

Re: 9.0.102 sessions

On 09/04/2025 12:22, Greg Huber wrote: Hello, I have noticed that seems I have alot of sessions open, when  looking in the application manager.  It was was 800+.  I don't remember seeing it this high before. Before what?   If I refresh the screen I can see the number going up slowly.  I ha

Exception: Server name value of host_name cannot have the trailing dot

Hi, I am getting below error when having tomcat server name with trailing dot (.) when using tomcat 10. >From the stacktrace, it looks like it is coming as part of SNI handling. Is this supported in tomcat 11 or any way to bypass it ? javax.net.ssl.SSLProtocolException: Illegal server name, type=

9.0.102 sessions

Hello, I have noticed that seems I have alot of sessions open, when  looking in the application manager.  It was was 800+.  I don't remember seeing it this high before.  If I refresh the screen I can see the number going up slowly.  I have not made any changes on my app that would cause this.

Re: Monitoring Virtual Threads via JMX / MBeans in Tomcat

On 03/04/2025 13:05, Rose Mary P T wrote: HI Mark, Thanks for your response. I would like to seek your guidance regarding an issue I am encountering with my current Tomcat setup. Specifically, your recent suggestions appear to contradict my existing configuration. Could you kindly confirm

RE: Monitoring Virtual Threads via JMX / MBeans in Tomcat

Hi Mark, I hope this message finds you well. I just wanted to send a quick reminder regarding the email I sent on 3rd April,2025 about Monitoring Virtual Threads via JMX / MBeans in Tomcat . If you haven’t had the chance to review it yet, I would greatly appreciate your thoughts or any updates

Re: Tomcat Clustering Roadmap And Max Node Limit

On 08/04/2025 00:27, Tim N wrote: Thanks for clarifying that. Does BackupManager support auto-scaling Yes, if you use a cluster membership mechanism that allows that. and cycled restarts of all nodes (for web-app upgrades) without losing the user's session? Yes, but you need to trigger the

Re: EOL timeline for tomcat 9 and 10.1

On 08/04/2025 13:29, Aniket Pachpute wrote: No Plans. Please See: https://lists.apache.org/thread/qlzpscgoqct9wspkj5qjkm34s66jswj0 Plans have evolved a little since that message. For Tomcat 9: https://lists.apache.org/thread/o8d1nz8mj8dhwq88jbt7zxopp3omkkkb Work has now started on Tomcat 12 /