Re: Support for microsecond precision in timestamps (Tomcat 9.0.108 / 10.1.44)

Poojashree, On 9/18/25 6:48 AM, Poojashree Prakash wrote: Yes, I am talking about the access log https://bz.apache.org/bugzilla/show_bug.cgi?id=69817 -chris On Wed, Sep 17, 2025 at 5:42 PM Christopher Schultz < ch...@christopherschultz.net> wrote: Poojashree, On 9/17/25 3

Re: Tomcat maxConnections API

g helps! Regards, Nitish On Thu, 31 Jul 2025 at 03:59, Christopher Schultz < ch...@christopherschultz.net> wrote: Nitish, On 7/30/25 10:03 AM, Nitish Chitta wrote: Any suggestions from your side for Linux? Tried out multiple approaches but none seem to work. The best you can do is

Re: HTTP/3 (QUIC) support

Jee仔, On 9/17/25 4:39 AM, Jee仔 wrote: I hope this message finds you well. I'm currently exploring HTTP/3 integration possibilities and noticed that Tomcat doesn't yet natively support this protocol. Could you kindly share if there are any plans to implement HTTP/3 (QUIC) support in future releas

Re: Tomcat Native 1.3.1 vs 2.0.9

Harri, On 9/17/25 2:11 AM, Harri Pesonen wrote: So the statement was actually true for Tomcat 9 (which we use) but false for Tomcat 10, which loads tcnative-2 first. I now run several benchmarks to find out if tcnative-1.dll or tcnative-2.dll make a difference compared to each other and to runn

Re: Support for microsecond precision in timestamps (Tomcat 9.0.108 / 10.1.44)

nd not some other kind of log. Thanks, -chris On Wed, Sep 17, 2025 at 12:44 AM Christopher Schultz < ch...@christopherschultz.net> wrote: Poojashree, On 9/15/25 6:26 AM, Poojashree Prakash wrote: The request is not to change the default logging format, but to have an option in Tomcat l

Re: Support for microsecond precision in timestamps (Tomcat 9.0.108 / 10.1.44)

Poojashree, On 9/15/25 6:26 AM, Poojashree Prakash wrote: The request is not to change the default logging format, but to have an option in Tomcat logging to include microseconds in the timestamp. Having this option would allow us to enable microsecond precision only when needed, for detailed de

Re: Migrating (new server) tomcat 10 issue

Hello, On 9/16/25 2:29 PM, A Name wrote: We've been running tomcat9 on linux (and 8 and 7 etc.) for years. I stood up a new server for tomcat 10 and pulled 10.1.44. I built the tomcat.service in /etc/systemd/system [Unit]Description=Tomcat - instance %iAfter=syslog.target network.target [Serv

[ANN] Apache Tomcat 10.1.46 Available

The Apache Tomcat team announces the immediate availability of Apache Tomcat 10.1.46. Apache Tomcat 10 is an open source software implementation of the Jakarta Servlet, Jakarta Pages, Jakarta Expression Language, Jakarta WebSocket, Jakarta Authentication and Jakarta Annotations specifications.

[ANN] Apache Tomcat 10.1.45 Available (with IMPORTANT NOTE)

The Apache Tomcat team announces the immediate availability of Apache Tomcat 10.1.45. *** IMPORTANT NOTE FOR USERS OF FileStore *** There is a packaging error in this release which will be corrected in 10.1.46, which will be forthcoming. If you use FileStore for session storage (which is not t

Re: JAAS Extra Spaces in Username

Zoran, On 8/27/25 5:01 PM, Zoran Avtarovski wrote: Really helped to know where the issue had changed. You might be able to fix this issue very quickly using this ALTER statement: ALTER TABLE user MODIFY COLUMN user_name varchar(255) NOT NULL <-- double-check this COLLATE utf8mb4_general_nopad

Re: Tomcat 11 and JDK 17 application ciphers difference

asked questions, not provided any of the information anyone has requested so far. That makes it difficult to help. -chris -Original Message- From: Christopher Schultz Sent: Saturday, August 23, 2025 10:06 PM To: users@tomcat.apache.org Subject: Re: Tomcat 11 and JDK 17 application ci

Re: Tomcat 11 and JDK 17 application ciphers difference

Abirami, On 8/22/25 2:53 AM, S Abirami wrote: I have a follow-up question on the below concern with SSL/TLS cipher configuration in our Tomcat deployment and need your assistance. Issue Description: We have explicitly configured a specific set of ciphers in our server.xml connector configura

Re: [EXTERNAL EMAIL] How to access a REST service

Daniel, On 8/16/25 10:57 PM, Daniel Schwartz wrote: There was a Chris too, but I think he made his recommendation and left. I'm still here, but I do have a job and a family. Rob, Robert and Chuck were making plenty of noise so I decided to reduce the clutter. I'm coming to think that his adv

Re: Tomcat 9.0.87 not releasing or re-using the pooled connections.

Parameshwara, On 8/1/25 12:15 AM, Parameshwara Bhat wrote: I am working on a task of migrating a  running a JSP/JSF application on tomcat-6.0 to tomcat 9.0 My installation of tomcat-9.0.87 is on Opensuse-Leap-15.6. Database is postgresql 17, using postgresql-42.7.7.jar for driver. I am able

Re: [EXTERNAL EMAIL] How to access a REST service

difference. -chris On 8/15/25 12:33 PM, Daniel Schwartz wrote: -Original Message----- From: Christopher Schultz Sent: Friday, August 15, 2025 12:18 PM To: users@tomcat.apache.org Subject: Re: [EXTERNAL EMAIL] How to access a REST service Daniel, On 8/15/25 12:49 AM, Daniel Schwartz wrote: R

Re: [EXTERNAL EMAIL] How to access a REST service

Daniel, On 8/15/25 12:49 AM, Daniel Schwartz wrote: Robert (and all), I will work on answers your various questions. However, I decided to first explore the comment (by someone) that a servlet can "swallow" an exception, which I take to mean that it can throw an exception without reporting t

Re: [EXTERNAL EMAIL] How to access a REST service

: Christopher Schultz mailto:ch...@christopherschultz.net>> Sent: Wednesday, August 13, 2025 2:21 PM To: users@tomcat.apache.org<mailto:users@tomcat.apache.org> Subject: Re: [EXTERNAL EMAIL] RE: How to access a REST service Application servers don't work that way. A fai

Re: [EXTERNAL EMAIL] RE: How to access a REST service

_connect(): Invalid argument (22)" or something, try using "127.0.0.1" instead of "localhost". -chris [1] https://apachelounge.com/downloads [2] (https://apachelounge.com/downloads) -Original Message- From: Christopher Schultz Sent: Wednesday, August 13, 202

Re: How to access a REST service

Dan, On 8/12/25 10:52 PM, Daniel Schwartz wrote: If you go to my website, www.worldholidaysandevents.com, and make a request for holiday info for, say, Tallahassee, Florida, USA, 2025, you will see the following actions: 1. The Countries list is filled with a list of countries. This is on

Re: How to access a REST service

Dan, On 8/13/25 12:38 AM, Daniel Schwartz wrote: -Original Message- From: Robert Turner Sent: Monday, August 11, 2025 10:12 PM To: Tomcat Users List Subject: Re: How to access a REST service If one is going to make multiple requests (especially without much logic in-between), I would

Re: [EXTERNAL EMAIL] RE: How to access a REST service

Dan, On 8/12/25 11:33 PM, Daniel Schwartz wrote: -Original Message- From: Robert Turner Sent: Tuesday, August 12, 2025 11:09 PM To: Tomcat Users List Subject: Re: [EXTERNAL EMAIL] RE: How to access a REST service > [snip]> For clarity, the 13 ms is the time it takes the pool to retu

Re: [EXTERNAL EMAIL] RE: How to access a REST service

Dan, At the risk of extending an already-lengthy conversation... On 8/12/25 1:31 PM, Daniel Schwartz wrote: -Original Message- From: Christopher Schultz Sent: Tuesday, August 12, 2025 11:19 AM To: users@tomcat.apache.org Subject: Re: [EXTERNAL EMAIL] RE: How to access a REST service

Re: [EXTERNAL EMAIL] RE: How to access a REST service

Daniel, On 8/11/25 9:38 PM, Daniel Schwartz wrote: Chris, Again, see my replies marked DSG. Dan -Original Message- From: Christopher Schultz Sent: Monday, August 11, 2025 3:21 PM To: users@tomcat.apache.org Subject: Re: [EXTERNAL EMAIL] RE: How to access a REST service Daniel, On

Re: HotSwapAgent with jdk17+

Mark, On 8/6/25 9:26 PM, Mark Gordon wrote: My company just upgraded from jdk 8.5 and tomcat 8.5. We upgraded to jdk 24 and tomcat 11. We have used hotswapagent for years. Now I can't seem to get it to work with jdk17+ and tomcat 11. Is anyone using this? And if so, do you have any advice

Re: Tomcat acceptCount limitation and connection refused errors

John, On 8/11/25 1:17 PM, John Williams wrote: Hi Chuck, I tested this on Linux. - The default somaxconn limit was 4096. I did not see any connection refused errors with 500 threads. - When somaxconn was reduced to 128 even, I did not see any connection refused errors on the client, with as

Re: How to access a REST service

Dan, On 8/8/25 12:21 PM, Daniel Schwartz wrote: From your and other people's replies, I'm learning that tracking down memory leaks can be quite daunting and possibly beyond me. No, you can definitely figure this out, and it will be well worth the trouble. I'm aware of the try-with-resource

Re: How to access a REST service

Dan, On 8/7/25 10:29 PM, Daniel Schwartz wrote: Robert, Chris, and others who have responded to my queries, Everyone is convinced that I have problem with my code. Here are what I consider to be the relevant code fragments. I've also indicated where I consider it to be possible that there m

Re: How to access a REST service

re fairly equivalent. I would get some instrumentation going before you start changing anything. It would be good to be able to see the state of the connection pool. Using something like JMX is definitely possible with Tomcat; I'm unsure of how to check Glassfish. -chris ---Original Message- From

Re: [EXTERNAL EMAIL] RE: How to access a REST service

Daniel, On 8/5/25 3:05 PM, Daniel Schwartz wrote: I just replied to Rob Sargent regarding this. Did you see that reply? > Maybe I’m not using Glassfish correctly, but if I set the maximum> pool size to 1, the system almost immediately outputs an error message saying that it is unable to allo

Re: How to access a REST service

Daniel, On 8/5/25 12:43 PM, Daniel Schwartz wrote: My understanding is that only as many connection objects are created and placed in the pool as are needed, so even if you set the upper limit high it doesn’t necessarily mean that you will have that many. This is correct. Once a database sess

[ANN] Apache Tomcat 10.1.44 Available

The Apache Tomcat team announces the immediate availability of Apache Tomcat 10.1.44. Apache Tomcat 10 is an open source software implementation of the Jakarta Servlet, Jakarta Pages, Jakarta Expression Language, Jakarta WebSocket, Jakarta Authentication and Jakarta Annotations specifications.

Re: [OT] How to access a REST service

Harri, On 8/5/25 2:40 AM, Harri Pesonen wrote: Chris's article is fine except that it does not use the try-with- resources feature of Java language: try (Connection conn = getConnection()) { try (Statement stmt = conn.createStatement()) { try (ResultSet rs = stmt.executeQuery(sql)) {

Re: How to access a REST service

Daniel, Apologies for top-posting, but I would highly recommend reading this: https://blog.christopherschultz.net/2009/03/16/properly-handling-pooled-jdbc-connections/ -chris On 8/1/25 3:33 PM, Daniel Schwartz wrote: Hello Thorsten, Please see my replies below, marked DGS. -Original Mes

Re: Tomcat 9.0.87 not releasing or re-using the pooled connections.

Parameshwara, On 8/2/25 1:54 AM, Parameshwara Bhat wrote: I am working on a task of migrating a  running a JSP/JSF application on tomcat-6.0 to tomcat 9.0 My installation of tomcat-9.0.87 is on Opensuse-Leap-15.6. Database is postgresql 17, using postgresql-42.7.7.jar for driver. I am able

Re: Tomcat maxConnections API

Nitish, On 7/30/25 10:03 AM, Nitish Chitta wrote: Any suggestions from your side for Linux? Tried out multiple approaches but none seem to work. The best you can do is set maxConnections to the number you want at the maximum and set acceptCount=0, but even then the OS may accept more connect

Re: memory leak analysis

Mircea, On 7/29/25 3:33 PM, Mircea Butmalai wrote: I have created a public repo on github with the following URL: mirceabutmalai/test-docs: test-docs Inside you have 2 png files which are referred from initial email and also the complete jstat log f

Re: Tomcat 10.1.13 - z17 Compatibility

Dimitris, On 7/24/25 9:01 AM, Dimitris Soumis wrote: On Thu, Jul 24, 2025 at 3:05 PM Brian Proffitt wrote: Forwarded from apa...@apache.org. If you choose to respond, please respond to the original sender. -- Forwarded message - From: MATHEW THOMAS Date: Thu, Jul 24, 2025 at

Re: Classloading has a long delay after idle period

Daniel and Mark, On 7/21/25 12:48 PM, Daniel Sheridan wrote: On 18/07/2025 16:04, Daniel Sheridan wrote: I definitely think there is something happening on the Tomcat side here around caching, I've played with some resource caching settings but it didn't make any difference unfortunately.

Re: Server Vulnerabilities for Apache Tomcat 9.0.0.M1 < 9.0.98

Hassan, On 7/17/25 1:04 PM, Jacobs, Hassan wrote: I am reaching out in regards to multiple vulnerabilities that we have found in our servers with you all. Is there a representative that we could speak with? You're speaking to the whole community. The ASF does not provide support through any

Re: RHEL 10 Compatibility for Apache Tomcat 8.x, 9.x, 10.x, and 11.x

appreciated. If Red Hat drops support for Apache httpd, I'll eat my (red) hat. -chris From: Christopher Schultz Date: Monday, 14 July 2025 at 19:34 To: users@tomcat.apache.org Subject: Re: RHEL 10 Compatibility for Apache Tomcat 8.x, 9.x, 10.x, and 11.x Bharath, On 7/14/25 9:17 AM, Cheruku

Re: RHEL 10 Compatibility for Apache Tomcat 8.x, 9.x, 10.x, and 11.x

Bharath, On 7/14/25 9:17 AM, Cheruku, B.R. (Bharath) wrote: I would like to ask if anyone in the community has experience running Apache Tomcat versions 8.x, 9.x, 10.x, or 11.x on Red Hat Enterprise Linux 10 (RHEL 10). Are there any known issues, limitations, or recommendations for these ver

Re: POST parameters chopped

their support for the various specification versions. Where their (Tomcats') features overlap, they should be implemented identically. -chris On Thu, Jul 10, 2025 at 1:54 PM Christopher Schultz < ch...@christopherschultz.net> wrote: Hrvoje, On 7/10/25 6:52 AM, Hrvoje Lončar wrote:

Re: Classloading has a long delay after idle period

Daniel, On 7/11/25 11:57 AM, Daniel Sheridan wrote: > > [snip] > Correct, almost the entire delay is during the JAR scanning when the files are being accessed. We are using expanded-WAR deployment. Good. That fixes at least one known performance issue (scanning WAR files is inefficient regar

Re: [SECURITY] CVE-2025-52520 Apache Tomcat - DoS in multipart upload

Mark, Oops, I'm sorry I didn't see this correction and just sent one of my own. :( -chris On 7/10/25 3:18 PM, Mark Thomas wrote: Correcting typo in fixed versions CVE-2025-52520 Apache Tomcat - DoS in multipart upload Severity: Low Vendor: The Apache Software Foundation Versions Affected:

[SECURITY] CVE-2025-52520 Apache Tomcat - DoS in multipart upload [CORRECTION]

CVE-2025-52520 Apache Tomcat - DoS in multipart upload Severity: Low Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 11.0.0-M1 to 11.0.8 Apache Tomcat 10.1.0-M1 to 10.1.42 Apache Tomcat 9.0.0.M1 to 9.0.106 Description: For some unlikely configurations of multipart uploa

Re: [EXTERNAL] [SECURITY] CVE-2025-52520 Apache Tomcat - DoS in multipart upload

Joey, On 7/10/25 3:14 PM, Joey Cochran wrote: Is this accurate? Versions Affected: Apache Tomcat 10.1.0-M1 to 10.1.42 Mitigation: - Upgrade to Apache Tomcat 10.1.32 or later Nope, this should be "Upgrade to 10.1.43 or later". Thanks for noticing; we'll get this corrected anywhere it needs t

Re: POST parameters chopped

Hrvoje, On 7/10/25 6:52 AM, Hrvoje Lončar wrote: Currently it's 10.1.39 as I wanted to avoid 10.1.42 but I get the same unpredictable behaviour from both. Oh, that's interesting. Of course, upon your first report I had assumed it was the "maxPartCount" but then you posted your configuration w

Re: Content negotiation for Accept-Language (static pages)?

Fab, On 7/9/25 2:27 PM, Fab Stz wrote: Le mercredi 9 juillet 2025, 16:20:56 CEST Christopher Schultz a écrit : Fab, On 7/9/25 9:12 AM, Fab Stz wrote: I'm packaging upstream software (css-validator) for Debian so your suggestions won't really fit to ship a package working out

Re: I have some Java Version Confusion

Alan, On 7/9/25 1:04 PM, Alan Masters wrote: I have successfully developed a WAR file with Eclipse  Version: 2024-06 (4.32.0) which has JRE System Library Java SE-17   and tested using Tomcat 9.0.91 as a local host on Windows 11. I had started work on this around a year ago and do not recall

Re: POST parameters chopped

. Which exact version of Tomcat is being used? Thanks, -chris On Wed, 9 Jul 2025, 16:14 Christopher Schultz, wrote: Hrvoje, On 7/6/25 7:33 AM, Hrvoje Lončar wrote: > After recent Tomcat security changes, my POST request are failing > but not all the time. The problem is that th

Re: Content negotiation for Accept-Language (static pages)?

.en from a directory. But do you need support for type-map files? Do you need support for Accept-Encoding and Accept-Charset? -chris Le mardi 8 juillet 2025, 21:21:53 CEST Christopher Schultz a écrit : Fab, On 7/6/25 6:58 AM, Fab Stz wrote: Does tomcat support content negotiation like apache htt

Re: POST parameters chopped

Hrvoje, On 7/6/25 7:33 AM, Hrvoje Lončar wrote: > After recent Tomcat security changes, my POST request are failing > but not all the time. The problem is that the same request sometimes > ends up with an error and sometimes not. > > Tomcat is 10.0.42 protected by nginx which handles SSL certific

Re: Content negotiation for Accept-Language (static pages)?

Fab, On 7/6/25 6:58 AM, Fab Stz wrote: Does tomcat support content negotiation like apache httpd does [1] for the Accept-Language header? No. How to configure this for a webapp context? You'll have to build this capability into your own web application. > Use case is *serving static pages

Re: Classloading has a long delay after idle period

Daniel, On 7/8/25 11:15 AM, Daniel Sheridan wrote: On 7/2/25 10:22 AM, Daniel Sheridan wrote: Hi folks, We're using Tomcat 10.1.40, but also seeing this issue with multiple Tomcat 9 versions, running on Windows Server 2019 and Server 2022 machines. We're hosting a web app with a REST API, an

[ANN] Apache Tomcat 10.1.43 Available

The Apache Tomcat team announces the immediate availability of Apache Tomcat 10.1.43. Apache Tomcat 10 is an open source software implementation of the Jakarta Servlet, Jakarta Pages, Jakarta Expression Language, Jakarta WebSocket, Jakarta Authentication and Jakarta Annotations specifications.

Re: Classloading has a long delay after idle period

Dan, On 7/2/25 10:22 AM, Daniel Sheridan wrote: Hi folks, We're using Tomcat 10.1.40, but also seeing this issue with multiple Tomcat 9 versions, running on Windows Server 2019 and Server 2022 machines. We're hosting a web app with a REST API, and encounter delays on requests when they hit o

Re: Servlet 6.2 / Tomcat 12 - Welcome files

Mark, On 6/25/25 9:58 AM, Mark Thomas wrote: On 25/06/2025 14:07, Mark Thomas wrote: I think I need to look at the rules for merging welcome resources. That might prompt some changes to the PR. At the moment, a is almost certain to match since it will likely be using extension mapping ma

Re: Updating configTest to include shutdown port validation

Amit, On 6/20/25 11:32 AM, Amit Pande wrote: Thank you Mark for the feedback. Reason to ask for shutdown port availability was that, configtest already check that for connector ports. E.g. SEVERE: Failed to initialize component [Connector["nbhttps-jsse-nio-127.0.0.1-12345"]] org.apache.catal

Re: Unexpected behavior of dead-simple servlet

Konstantin, On 6/18/25 6:08 PM, Konstantin Kolinko wrote: A quick review of all Filters that are running tells me that there are a few that can set response headers, but mostly are not in this particular case. The list of headers coming back in the response are: HTTP/1.1 200 Via: HTTP/1.1

Re: Unexpected behavior of dead-simple servlet

Mark, On 6/18/25 11:02 AM, Christopher Schultz wrote: Mark, On 6/18/25 3:08 AM, Mark Thomas wrote: On 17/06/2025 21:13, Christopher Schultz wrote: All, I recently wrote a relatively simple Servlet (which is less and less common these days with frameworks, etc.) and I was surprised that I

Re: Unexpected behavior of dead-simple servlet

Mark, On 6/18/25 3:08 AM, Mark Thomas wrote: On 17/06/2025 21:13, Christopher Schultz wrote: All, I recently wrote a relatively simple Servlet (which is less and less common these days with frameworks, etc.) and I was surprised that I got a chunked response. It's not interfering

Unexpected behavior of dead-simple servlet

All, I recently wrote a relatively simple Servlet (which is less and less common these days with frameworks, etc.) and I was surprised that I got a chunked response. Here is the entirety of the servlet code: public class HtlloWorldServlet extends HttpServlet { @Override public vo

Re: [tomcat] Odd behavior enumerating http headers

Alex, On 6/10/25 6:54 PM, Alex O'Ree wrote: Greetings I'm running tomcat v9.0.105 with a CXF based SOAP service (you know, the old school JAXWS services). Within that service, I had a need to retrieve a specific http header and i've been running into some inconsistent results. The tomcat server

Re: Certificates and keystores. I think I may have asked this before.

James, On 6/9/25 11:53 AM, James H. H. Lampert wrote: Our customer Tomcat installations are, without exception, set up to use a Java Keystore file (mainly because that appeared to be the only option back when we started setting them up) I think this has come up before, but we have a customer

[ANN] Apache Tomcat 10.1.42 Available

The Apache Tomcat team announces the immediate availability of Apache Tomcat 10.1.42. Apache Tomcat 10 is an open source software implementation of the Jakarta Servlet, Jakarta Pages, Jakarta Expression Language, Jakarta WebSocket, Jakarta Authentication and Jakarta Annotations specifications.

Re: Tomcat Performance from JMX data

Mark, On 6/4/25 1:43 PM, Timothy Resh wrote: I have a production server with JMX enabled. However, we cannot install any additional software to do performance monitoring. We can, however, extract data from the MBeans and transfer it elsewhere for analysis. I saw the ant tasks in the Tomcat do

Re: Problem Accessing https

Jerome, On 5/31/25 5:53 PM, Jerome A. Wendell wrote: The problem has been resolved. My server hosting company provides an interface to make changes on the firewall, so being a Windows server, we don't use the Windows Defender firewall (it is disabled). It appears that someone at the server hos

Re: Problem Accessing https

Jerome, On 5/30/25 10:04 AM, Jerome A. Wendell wrote: I am in the process of setting up a new server to replace our existing server. I run Tomcat 9.0.73 with Geoserver 2.22.2 for the mapping on our web site. It is a Windows server running Windows Server 2019. I have been using this setup on o

Re: Tcnative-2 PQC support

x27;m working on some updates. I'll also start a discussion on dev@ about switching the convenience builds to use OpenSSL 3.5 since that is the new LTS version. Looks like we are heading towards consensus to do that - assuming I can get the build working. Mark Mark Fed

Re: Consolidating and harmonizing users from multiple realms

Michael, On 5/26/25 9:14 AM, Michael Osipov wrote: Hi folks, I seek guidance on a larger problem I need to solve where I do have a few ideas, but am also considering to what degree it would make sense to add code to the Tomcat codebase for the common good: I have a realm impl called MyRealm wh

Re: adding new SSL certificate without restarting tomcat

Ivano, On 5/28/25 4:17 AM, Ivano Luberti wrote: Thanks for all the responses. I try to be more clear. My server.xml configuration contains a few SSLHostConfig configurations like this certificateKeystoreFile="/etc/ssl/LetsEncrypt/host domain.it/host domain.it.pfx" certificateKeystoreP

Re: Apache Tomcat 9 SAML Setup With Active Directory

William, On 4/9/25 11:09 AM, William Crowell wrote: Is there any current up-to-date documentation on how to setup Apache Tomcat 9 with SAML and Active Directory that is not AI generated? I know you can do Keycloak IdP with Tomcat, but I was trying to avoid setting up an identity provider. I am

Re: Adding a CRL to certificate client authentication causes connector to stop responding to all requests having a client certificate.

me to duplicate your setup. Guess the finger increasingly points to the CRL checking code. Agreed, at least in theory. -chris On Wed, 21 May 2025 16:29:10 -0500 Christopher Schultz wrote --- Alex, On 5/21/25 1:26 PM, My Subs wrote: To test this, I set certificateRevocationListPath to

Re: Adding a CRL to certificate client authentication causes connector to stop responding to all requests having a client certificate.

ificate, and use ONLY that self-signed certificate in your trust store, and have the client send that to the server? It will be easier for me if I just have to deal with a single cert on either side of the connection rather than set up a whole signing authority, etc. before I'm able to

Re: Tcnative-2 PQC support

chris On Wed, May 21, 2025, 13:35 Christopher Schultz < ch...@christopherschultz.net> wrote: Federico, On 5/21/25 12:27 PM, Christopher Schultz wrote: Federico, On 5/21/25 10:58 AM, federico bustamante wrote: Hi! Did anyone have any luck building tcnative-2.dll with Openssl 3.5 to add P

Re: Tcnative-2 PQC support

Federico, On 5/21/25 12:27 PM, Christopher Schultz wrote: Federico, On 5/21/25 10:58 AM, federico bustamante wrote: Hi! Did anyone have any luck building tcnative-2.dll with Openssl 3.5 to add Post Quantum Cryptography support? I tried following the steps in the wiki, but didn't have any

Re: Tcnative-2 PQC support

Federico, On 5/21/25 10:58 AM, federico bustamante wrote: Hi! Did anyone have any luck building tcnative-2.dll with Openssl 3.5 to add Post Quantum Cryptography support? I tried following the steps in the wiki, but didn't have any luck (tried with cmake and nmake). Have you been able to compil

Re: Adding a CRL to certificate client authentication causes connector to stop responding to all requests having a client certificate.

clear, this is my current :                             Thanks for posting the whole thing. -chris On Fri, 09 May 2025 13:46:35 -0500 Christopher Schultz wrote --- Alex, On 5/9/25 2:11 PM, My Subs wrote: I have tested on Tomcat 10.1.40 with

Re: CRL verification broken?

Alex, On 5/19/25 9:44 AM, My Subs wrote: Ten days ago, I wrote reporting that CRL verification is not working on Tomcat 10.1.40. But I have not heard back, since. Is this feature expected to remain broken? It is not working either on 11.0.6. Did you see my reply? -chris Hello Chuck, I

Re: Still unable to get exception info from StandardContext in log output

David, On 5/14/25 3:50 PM, KARR, DAVID wrote: I've tried several times to configure tomcat-embed-core in SpringBoot to give me better log info when Tomcat fails to start up. I thought I had this working, but apparently I was mistaken. I figured out how to get this information by stepping th

Re: Adding a CRL to certificate client authentication causes connector to stop responding to all requests having a client certificate.

Alex, On 5/9/25 2:11 PM, My Subs wrote: I have tested on Tomcat 10.1.40 with Native Library 1.3.1 running on JDK 21.0.7+6. The result is exactly the same as described before. The connector below works well with client authentication, until I add the caCertificatePath attribute. There are no e

Re: Null Byte Injection?

James, On 5/9/25 1:49 PM, James H. H. Lampert wrote: On 5/9/25 10:21 AM, Christopher Schultz wrote: . . . A lot of this comes from the fact that Tomcat is written in Java which does not use null-terminated strings. A null byte in a string in Java is not special in any way, and so it can'

Re: Null Byte Injection?

James, On 5/9/25 11:43 AM, James H. H. Lampert wrote: One of the customers whose Tomcat installation we manage brought up the possible threat of null byte injection. Is there anything within Tomcat itself that can mitigate this? Or is it purely something I need to take up with our webapp peop

Re: Skip resource path in TLD scanner?

Jakub, On 5/7/25 3:26 PM, Jakub Królikowski wrote: On Sat, Apr 29, 2017 at 12:01 PM Mark Thomas wrote: On 28/04/17 17:00, Matt Cosentino wrote: Yes, it's other folders within WEB-INF. I turned on the TldScanner logging and it is definitely what is causing the delay. My situation probably isn

Re: Content type unknown after upgrading Tomcat 10.1.39 => 10.1.40

Thorsten, On 5/2/25 2:49 PM, Thorsten Heit wrote: please excuse the long delay in answering (unplanned holidays...) Tomcat is never going to figure out what MIME type should be used for a request like "/my/servlet/app?version=!!1.22.32-4-g8a3c060!!" So I think Mark is probably right (well, h

Re: multipart and Apache Tomcat 11

Ernesto, On 5/1/25 8:51 PM, Ernesto Reinaldo Barreiro wrote: We have an Apache Wicket application that I just ported to wicket 10. The application works as expected with the latest Tomcat 10.1.40. But our application does not work with Tomcat 11.0.6 because file upload (multipart processing is b

Re: Help with Cluster Setup on Tomcat 9

g a default session configuration? -chris On 26/4/2025 5:29 am, Christopher Schultz wrote: Zoran, On 4/24/25 4:21 AM, Zoran Avtarovski wrote: Thanks Chuck, I missed that and will implement. Bigger problem is that PersistentManager is incompatible with Clusters so we have to migrate back to m

Re: What is a reasonable performance degradation?

Rainer and Doug, On 4/30/25 12:47 PM, Rainer Jung wrote: Am 30.04.25 um 15:59 schrieb Doug Whitfield: Hi folks, This feature was added in 9.0.90: The system property org.apache.catalina.connector.RECYCLE_FACADES will now default to true if not specified, which will in turn set the default va

Re: global web.xml question

ABT, On 4/29/25 11:25 AM, A Name wrote: On Tue, Apr 29, 2025 at 10:54 AM Christopher Schultz < ch...@christopherschultz.net> wrote: Are you able to view the sources of the application? Are you (or your team) knowledgeable enough about the code to make such changes? IMHO, I would take th

Re: global web.xml question

ABT, On 4/29/25 8:23 AM, A Name wrote: On Mon, Apr 28, 2025 at 1:07 PM Mark Thomas wrote: On 28/04/2025 16:35, Christopher Schultz wrote: ABT, On 4/28/25 9:05 AM, A Name wrote: We are looking at adding a second instance of our app (named differently -- myappA and myappB) to our Tomcat 9

Re: When was the first stable GA release of Apache Tomcat 11.0.x?

William, On 4/29/25 7:04 AM, William Crowell wrote: Just for my clarification: When was the first stable GA release of Apache Tomcat 11.0.x? I believe it was October 9th, 2024, but I did see the Jakarta EE Platform Web Profile 11 was released on March 30th, 2025: https://projects.eclipse.org/p

Re: global web.xml question

ABT, On 4/28/25 9:05 AM, A Name wrote: We are looking at adding a second instance of our app (named differently -- myappA and myappB) to our Tomcat 9. We currently have the app installed at a number of customer locations, we are looking at dropping 1 app Currently, our database connections are

Re: tomcat9 - Connection refused/closed and parse error

Ramesh, On 4/28/25 7:00 AM, Ramesh B R wrote: The application hosted on tomcat9 exposes soap api which is consumed by SAP. On a daily basis we are getting 200 thousands transactions and out of that we could see around 1000 to 2000 failed transactions due to CONNECTION REFUSED, CONNECTION CLOSED

Re: Help with Cluster Setup on Tomcat 9

Zoran, On 4/24/25 4:21 AM, Zoran Avtarovski wrote: Thanks Chuck, I missed that and will implement. Bigger problem is that PersistentManager is incompatible with Clusters so we have to migrate back to memory based sessions and use clusters to share sessions. I would have thought that cluster

Re: tomcat 11 tomcat-util.jar is contains a soon to be removed class

Rick, On 4/24/25 10:47 AM, Rick Noel wrote: Hello, When I upgraded to tomcat 11.0.5 and Java 24, Tomcat log gives this warning.. WARNING: A terminally deprecated method in sun.misc.Unsafe has been called WARNING: sun.misc.Unsafe::invokeCleaner has been called by org.apache.tomcat.util

Re: Best practices to set heap memory

Mark, On 4/22/25 3:38 AM, Mark Thomas wrote: On 21/04/2025 17:49, Christopher Schultz wrote: Ramesh, On 4/21/25 1:06 AM, Ramesh B R wrote: How to decide on heap memory size? is it 25% of total memory? or 50% total memory? What is the ideal value (in %) for heap memory ? Only you can

Re: Best practices to set heap memory

Ramesh, On 4/21/25 1:06 AM, Ramesh B R wrote: How to decide on heap memory size? is it 25% of total memory? or 50% total memory? What is the ideal value (in %) for heap memory ? Only you can answer that question about your own application environment. The percentage of total memory is comple

Re: Tomcat 9.0.104 Crashing at Startup on RHEL 8.4

Mark, On 4/17/25 4:56 PM, Mark Thomas wrote: On 17/04/2025 20:32, RAY, DAVID wrote: I updated from Tomcat 9.0.102 to 9.0.104 on two RHEL servers.  Both are 'crashing' at startup after the update.    Version 9.0.102 and prior versions ran fine.  No issues.  Version 9.0.104 is crashing at start

Re: Apache Tomcat 12+

Rémy, On 4/17/25 11:47 AM, Rémy Maucherat wrote: On Thu, Apr 17, 2025 at 5:16 PM William Crowell wrote: Hi, A few questions on the future direction of the project. It seems like Project Panama is still in preview mode as of JDK 24. Is that correct? No, it's a stable regular part of Java

Re: Content type unknown after upgrading Tomcat 10.1.39 => 10.1.40

Thorsten, On 4/17/25 1:54 AM, Thorsten Heit wrote: Hi Chris, That definitely sounds odd. Do you have anything on the network between the client (browser) and the server (Tomcat)? Specifically, anything like a load-balancer, proxy, or similar? I just want to remove other possible causes befo

  1   2   3   4   5   6   7   8   9   10   >