Re: Tcnative-2 PQC support

2025-05-21 Thread Mark Thomas
On 21/05/2025 23:04, federico bustamante wrote: Yes, I don't have high hopes on make in it work on Ubuntu, but I thought of giving it a try using mingw-64. I'll report back. I've been building the Tomcat Native binaries for Windows for a while. I'll try with 3.5 and report back. I'll also st

Re: WebSocket session is never closed

2025-05-21 Thread Mark Thomas
On 21/05/2025 10:37, Harri Pesonen wrote: Hello, We have a random problem with Apache Tomcat/9.0.100 in Windows, JDK 11.0.13. We have seen this problem only once so far. Problem is that WebSocket connection is apparently closed but there is no callback to @OnClose handler, which is implemented

Re: Adding a CRL to certificate client authentication causes connector to stop responding to all requests having a client certificate.

2025-05-21 Thread My Subs
Chris, > Is the client sending just their own cert, or also the chain? It would be unusual for the client to send a chain, but instead just sends their own leaf certificate. I'm assuming that both the root and the intermediate / subordinate cert are both in the trust store. Is that corre

Re: Tcnative-2 PQC support

2025-05-21 Thread federico bustamante
Yes, I don't have high hopes on make in it work on Ubuntu, but I thought of giving it a try using mingw-64. I'll report back. Fede On Wed, May 21, 2025, 18:20 Christopher Schultz < ch...@christopherschultz.net> wrote: > Federico, > > On 5/21/25 2:22 PM, federico bustamante wrote: > > I've only t

Re: Adding a CRL to certificate client authentication causes connector to stop responding to all requests having a client certificate.

2025-05-21 Thread Christopher Schultz
Alex, On 5/21/25 1:26 PM, My Subs wrote: To test this, I set certificateRevocationListPath to the directory having the CRL file; changed to certificateVerification="optional"; and downgraded to HTTP 1.1 (as mentioned, "optional" does not work with HTTP 2). The result is that requests without a

Re: Tcnative-2 PQC support

2025-05-21 Thread Christopher Schultz
Federico, On 5/21/25 2:22 PM, federico bustamante wrote: I've only tried with OpenSSL 3.5, but I suspect it's the same story with older versions (which, to be honest, wouldn't bother me as much as it being a specific problem with 3.5). I'll try reproducing the build process on Windows. We know

Re: Tcnative-2 PQC support

2025-05-21 Thread federico bustamante
I've only tried with OpenSSL 3.5, but I suspect it's the same story with older versions (which, to be honest, wouldn't bother me as much as it being a specific problem with 3.5). I'll try building the DLL on Ubuntu. Thanks, Fede. On Wed, May 21, 2025, 13:35 Christopher Schultz < ch...@christophe

Re: Adding a CRL to certificate client authentication causes connector to stop responding to all requests having a client certificate.

2025-05-21 Thread My Subs
Hello Christopher, I'm answering below. >When you have configured a CRL, are *all* requests rejected, or only those which include a client certificate during the handshake? I see you have configured certificateVerification="required" so maybe there are no modes of operation where client

Re: Tcnative-2 PQC support

2025-05-21 Thread Christopher Schultz
Federico, On 5/21/25 12:27 PM, Christopher Schultz wrote: Federico, On 5/21/25 10:58 AM, federico bustamante wrote: Hi! Did anyone have any luck building tcnative-2.dll with Openssl 3.5 to add Post Quantum Cryptography support? I tried following the steps in the wiki, but didn't have any luck

Re: Tcnative-2 PQC support

2025-05-21 Thread Christopher Schultz
Federico, On 5/21/25 10:58 AM, federico bustamante wrote: Hi! Did anyone have any luck building tcnative-2.dll with Openssl 3.5 to add Post Quantum Cryptography support? I tried following the steps in the wiki, but didn't have any luck (tried with cmake and nmake). Have you been able to compil

Tcnative-2 PQC support

2025-05-21 Thread federico bustamante
Hi! Did anyone have any luck building tcnative-2.dll with Openssl 3.5 to add Post Quantum Cryptography support? I tried following the steps in the wiki, but didn't have any luck (tried with cmake and nmake). Thanks!

Re: Tomcat 9, ClassCast exception

2025-05-21 Thread Mark Thomas
On 21/05/2025 13:44, Zdeněk Henek wrote: Hello, I am getting these errors in one of our systems: java.lang.ClassCastException: class com.sun.mail.handlers.text_html cannot be cast to class javax.activation.DataContentHandler (com.sun.mail.handlers.text_html is in unnamed module of loader org.ap

Re: Tomcat 9, ClassCast exception

2025-05-21 Thread Zdeněk Henek
I log classes when loaded into a separate log file. I am sure classes are loaded from expected jar files The files are 4 times because I have four web applications in the system. $ grep javax.activation.DataContentHandler classloaded.log [5436.540s][info][class,load] javax.activation.DataContentHa

Tomcat 9, ClassCast exception

2025-05-21 Thread Zdeněk Henek
Hello, I am getting these errors in one of our systems: java.lang.ClassCastException: class com.sun.mail.handlers.text_html cannot be cast to class javax.activation.DataContentHandler (com.sun.mail.handlers.text_html is in unnamed module of loader org.apache.catalina.loader.ParallelWebappClassLoa

Re: Adding a CRL to certificate client authentication causes connector to stop responding to all requests having a client certificate.

2025-05-21 Thread Christopher Schultz
Alex, On 5/19/25 5:37 PM, My Subs wrote: > I'm using Ubuntu 20.04 with OpenSSL 1.1.1f. Okay. In your earlier message, you had a different configuration. This time you haven't specified the class name in the "protocol" attribute. Which one are you actually using? I did change the connecto

VS: WebSocket session is never closed

2025-05-21 Thread Harri Pesonen
One more thing, we are using Tomcat native.dll: 19:39:09.263 INF> (main) (org.apache.catalina.core.AprLifecycleListener#lifecycleEvent) Loaded Apache Tomcat Native library [1.3.1] using APR version [1.7.4]. 19:39:09.263 INF> (main) (org.apache.catalina.core.AprLifecycleListener#lifecycleEvent)

WebSocket session is never closed

2025-05-21 Thread Harri Pesonen
Hello, We have a random problem with Apache Tomcat/9.0.100 in Windows, JDK 11.0.13. We have seen this problem only once so far. Problem is that WebSocket connection is apparently closed but there is no callback to @OnClose handler, which is implemented in @ServerEndpoint class. Then this WebSocke