Happy Birthday, Chuck!

2012-07-26 Thread Gregor S.
Hi Chuck, thanks again for your valuable comments on this list, and keep it up! Cheers! Gregor -- just because you're paranoid, don't mean they're not after you... gpgp-fp: 3DB13F197F8A0360814885D1F1F1E2EFAD509AFD skype:rc46fi gplus.to/gregor twitter.com/#/2smart4u

Re: Problems w/ TLS (record-splitting)

2012-04-10 Thread Gregor S.
Hi Chris, first, thanks for your answer. Since this is a *sic* "managed server", I don't have root-access, so I can only guess regarding the version of the APR (it's the one from the packages, but AFAIK the APR has been stable since quite a while, so I asume it should be the latest one. As for t

Problems w/ TLS (record-splitting)

2012-04-10 Thread Gregor S.
Hi guys, I know, it's actually not a Tomcat-problem, but I was wondering if one of those guru hanging around in this mailing-list could give me a hint on how to handle this problem. As some of you might be aware, Firefox (from on version 9.x) cannot handle TLS-records which are served from a serv

Re: is der any default username for tomcat?

2012-01-06 Thread Gregor S.
On Fri, Jan 6, 2012 at 3:59 PM, Caldarale, Charles R wrote: >> From: charan raj [mailto:charanraj...@gmail.com] >> Subject: Re: is der any default username for tomcat? > > > Is it a full moon? > Over there: Definately YES. Cheers Gregor -- just because you're paranoid, don't mean they're not af

Re: Can't get APR running w/ Tomcat 6.0.33 (Debian)

2011-12-20 Thread Gregor S.
Chris, On Tue, Dec 20, 2011 at 9:25 PM, Christopher Schultz wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > That's an interesting academic question: would "the stock market" > provide enough entropy? when looking at my small portfolio becoming smaller and smaller and determing again

Re: Can't get APR running w/ Tomcat 6.0.33 (Debian)

2011-12-20 Thread Gregor S.
Hi Chris, On Tue, Dec 20, 2011 at 7:43 PM, Christopher Schultz wrote: > Yeah, it's a question of faster startup or "better" entropy. > Everything is PRNGs, anyway. If you want real entropy, you have to > listen to cosmic background radiation or something. Now *that* sound interesting: How do I

Re: Can't get APR running w/ Tomcat 6.0.33 (Debian)

2011-12-20 Thread Gregor S.
This time, it's great some of the guys are on Google+. Thanks to +Jean-Frederic Clere, I changed the listener-definition to and it's working now. Ok, it's not the best solution since AFAIK /dev/urandom is not the most secure implementation, but at least it's working now. When reading the docs

Re: Can't get APR running w/ Tomcat 6.0.33 (Debian)

2011-12-20 Thread Gregor S.
Ok, here's some news: When using the APR without SSL by changing the attribute of APRLiefeCycleListener to it's working. My SSL-version is OpenSSL> version OpenSSL 0.9.8c 05 Sep 2006 According to the docs (http://tomcat.apache.org/tomcat-6.0-doc/apr.html) this should be fine. Anybody got an

Re: Can't get APR running w/ Tomcat 6.0.33 (Debian)

2011-12-20 Thread Gregor S.
Hi André, that's a good idea trying the APR w/o SSL, I'll give it a try pretty soon. Still, we do need SSL (personal data, we're obliged by law), but that might give me a clue at what to look at. Updating Java and the OS unfortunately (big, big sighh) is not an option, at least for the next

Can't get APR running w/ Tomcat 6.0.33 (Debian)

2011-12-20 Thread Gregor S.
Hi guys, I'm a bit desperated: I'm trying to re-organize our "pet" Tomcat within the following environment: Using CATALINA_BASE: /home/tomcat/local/apache-tomcat-6.0.33 Using CATALINA_HOME: /home/tomcat/local/apache-tomcat-6.0.33 Using CATALINA_TMPDIR: /home/tomcat/local/apache-tomcat-6.0.33

Re: path used for tc-natuve

2011-12-16 Thread Gregor S.
Guys, I feel you're seeing thing way too complicated. Chris: > IIRC, Tomcat loads tcnative without a version number in it's name even > when it prefers a version that is of a certain level. I don't believe you're right, since when I upgraded Tomcat5.5 having an old version of tcnative installed

Re: path used for tc-natuve

2011-12-15 Thread Gregor S.
Hi Chuck! On Thu, Dec 15, 2011 at 5:36 PM, Caldarale, Charles R wrote: >> From: Gregor S. [mailto:rc4...@googlemail.com] >> Subject: Re: path used for tc-natuve > >> I guess it's a bad idea to run two different versions >> of Tomcat on the same box. > > ?

Re: path used for tc-natuve

2011-12-15 Thread Gregor S.
...and sorry for my typoes, I'm kind in a rush... -- just because you're paranoid, don't mean they're not after you... gpgp-fp: 3DB13F197F8A0360814885D1F1F1E2EFAD509AFD skype:rc46fi gplus.to/gregor twitter.com/#/2smart4u - To uns

Re: path used for tc-natuve

2011-12-15 Thread Gregor S.
Hi Chris, On Thu, Dec 15, 2011 at 4:34 PM, Christopher Schultz wrote: > > I think that's a bad idea because then you have built your libtcnative > (which can be considered Tomcat-version-specific, or at least > Tomcat-version-sensitive) for the whole system to use and that > essentially locks you

Re: path used for tc-natuve

2011-12-15 Thread Gregor S.
Hi André, On Thu, Dec 15, 2011 at 3:45 PM, André Warnier wrote: > > Indeed. Where have you been ? > either in the office or changing Junior's nappies ;) > I am not using HTTPS, and my problem is not at the /running/ stage. > But from the README, I got the impression that I needed OpenSSL in ord

Re: path used for tc-natuve

2011-12-15 Thread Gregor S.
Hi André, long time no see ;) Ok, let's try to free you from your wprries: You'l only need OpenSSL if you are running a https-connector. if you don't use https, you don't need OpenSSL. And even if you want to run https, it's no big deal: apt-get install OpenSSL and you're all set. One questi

Re: Problems with forwaring HTTP to HTTPS

2011-12-01 Thread Gregor S.
deployment descriptor. Wondering if I'm the first person missing such a feature. Thanks! Gregor On Thu, Dec 1, 2011 at 3:43 PM, Mark Thomas wrote: > On 30/11/2011 18:32, Gregor S. wrote: >> My understanding was, that in the global web.xml >> ($catalina.home/conf/web.xml)

Problems with forwaring HTTP to HTTPS

2011-11-30 Thread Gregor S.
Hi list, I'm a bit puzzled. I want to forward all incoming HTTP-traffic to HTTPS. Within my $catalina.home/conf/server.xml I've specified the following connectors: Then I specified in $catalina.home/conf/web.xml the following transport-guarantee: