Re: rewrite.config hot update?

2025-05-28 Thread Mark Thomas
On 28/05/2025 15:48, Troels Arvin wrote: Hello, Mark Thomas wrote:   Try with per context rewrite rules rather than global ones. What does that mean? https://tomcat.apache.org/tomcat-11.0-doc/rewrite.html Define the Valve at the web application level in the web application's META-INF/cont

Re: Tcnative-2 PQC support

2025-05-28 Thread federico bustamante
Done! Fede. On Wed, May 28, 2025, 14:05 Christopher Schultz < ch...@christopherschultz.net> wrote: > Federico, > > On 5/28/25 10:43 AM, federico bustamante wrote: > > Excellent news, thank you for taking the time to make it work. > > I tested it in 9.0.105 (using NIO2) , 10.1.41 and 11.0.7 on W

Re: Tcnative-2 PQC support

2025-05-28 Thread Christopher Schultz
Federico, On 5/28/25 10:43 AM, federico bustamante wrote: Excellent news, thank you for taking the time to make it work. I tested it in 9.0.105 (using NIO2) , 10.1.41 and 11.0.7 on Windows and it works fine. On Chrome 136 the negotiated DH group is X25519MLKEM768, as expected. I'll keep doing te

Re: rewrite.config hot update?

2025-05-28 Thread Troels Arvin
Hello, Mark Thomas wrote:   Try with per context rewrite rules rather than global ones. What does that mean? I've added my ... clause to ...tomcat/conf/context.xml   You might be able to trick watched resources with "../../conf/standalone/rewrite.config" Thanks, but unfortunately, that

Re: Tcnative-2 PQC support

2025-05-28 Thread federico bustamante
Mark, Excellent news, thank you for taking the time to make it work. I tested it in 9.0.105 (using NIO2) , 10.1.41 and 11.0.7 on Windows and it works fine. On Chrome 136 the negotiated DH group is X25519MLKEM768, as expected. I'll keep doing tests. Fede. On Wed, May 28, 2025, 04:51 Mark Thomas

Re: rewrite.config hot update?

2025-05-28 Thread Mark Thomas
Try with per context rewrite rules rather than global ones. The watched resource path is relative to the docBase. You might be able to trick watched resources with "../../conf/standalone/rewrite.config" but I haven't tested it and I'm fairly sure it was never intended to work that way (even if

Re: rewrite.config hot update?

2025-05-28 Thread Troels Arvin
Hello, Holger Klawitter wrote: In the context.xml you should be able to specify WEB-INF/rewrite.config It doesn't work. I've tried ${catalina.base}/conf/standalone/rewrite.config and /PATH_TO/tomcat/conf/standalone/rewrite.config However, I can still only get Tomcat to pick up my cha

Re: Consolidating and harmonizing users from multiple realms

2025-05-28 Thread Christopher Schultz
Michael, On 5/26/25 9:14 AM, Michael Osipov wrote: Hi folks, I seek guidance on a larger problem I need to solve where I do have a few ideas, but am also considering to what degree it would make sense to add code to the Tomcat codebase for the common good: I have a realm impl called MyRealm wh

Re: adding new SSL certificate without restarting tomcat

2025-05-28 Thread Christopher Schultz
Ivano, On 5/28/25 4:17 AM, Ivano Luberti wrote: Thanks for all the responses. I try to be more clear. My server.xml configuration contains a few SSLHostConfig configurations like this certificateKeystoreFile="/etc/ssl/LetsEncrypt/host domain.it/host domain.it.pfx" certificateKeystoreP

Re: adding new SSL certificate without restarting tomcat

2025-05-28 Thread Ivano Luberti
Thanks for all the responses. I try to be more clear. My server.xml configuration contains a few SSLHostConfig configurations like this certificateKeystoreFile="/etc/ssl/LetsEncrypt/host domain.it/host domain.it.pfx" certificateKeystorePassword="passwrod" certificateKeystoreType="PKCS1

Re: adding new SSL certificate without restarting tomcat

2025-05-28 Thread Michael Osipov
On 2025/05/27 20:11:25 Ivano Luberti wrote: > Hi all, is there a way to configure tomcat in order to avoid restart > when I change the list of ssl certificates? > > I know and I do it, how to reload existing certificates, but I'm > searching a qay to avoid reloading when I add or remove a certif

Re: adding new SSL certificate without restarting tomcat

2025-05-28 Thread Mark Thomas
On 27/05/2025 21:11, Ivano Luberti wrote: Hi all, is there a way to configure tomcat in order to avoid restart when I change the list of ssl certificates? Which list of certificates? There are several. Exactly what are you changing? Are you adding a cert to a keystore, adding a PEM file to a

Re: Tcnative-2 PQC support

2025-05-28 Thread Mark Thomas
On 27/05/2025 19:20, federico bustamante wrote: Hi Mark, hope to find you well. Just following up, did you get the build working? I tried a few more times but I couldn't make any progress. Yes, all working. There is a Tomcat Native release in progress now with the Windows binaries built with O

Re: Tomcat 9.0.x support Java 17 ?

2025-05-28 Thread Zdeněk Henek
Hi, here is all you need https://tomcat.apache.org/whichversion.html We run Tomcat 9 even with OpenJDK 21. Regards, Zdenek Henek On Wed, May 28, 2025 at 5:04 AM dineshk wrote: > Hi Team, > Could anybody clarify on if we could use Java 17 with Java EE specs with > tomcat 9.0.x ? > > RegardsDin