Re: AW: JNDIRealm with required ChannelBindingToken fails

2025-03-19 Thread Michael Osipov
On 2025/03/19 08:02:43 "Thomas Hoffmann (Speed4Trade GmbH)" wrote: > Hello Michael, > > > -Ursprüngliche Nachricht- > > Von: Michael Osipov > > Gesendet: Dienstag, 18. März 2025 22:50 > > An: users@tomcat.apache.org > > Betreff: Re: JND

Re: JNDIRealm with required ChannelBindingToken fails

2025-03-18 Thread Michael Osipov
On 2025/03/18 16:22:42 "Thomas Hoffmann (Speed4Trade GmbH)" wrote: > Hello Tomcat-Team, > we are currently using a JNDIRealm to authenticate against an ActiveDirectory > via LDAPs. > For security reasons, the LDAP-Server should be configured to enforce channel > binding token (CBT). > > If CBT i

Re: context path version number with parallel deployment

2025-03-17 Thread Michael Osipov
There is also https://tomcat.apache.org/tomcat-9.0-doc/config/listeners.html#Context_Naming_Info_Listener_-_org.apache.catalina.core.ContextNamingInfoListener which I have added years ago. Works perfeclty from servlets, Logback and Spring. On 2025/03/17 12:53:22 Усманов Азат Анварович wrote: >

Re: The future of Tomcat 9

2025-02-25 Thread Michael Osipov
On 2025/02/25 10:45:53 Mark Thomas wrote: > All, > > Tomcat 9 is the last major Tomcat version supporting Java EE. Therefore, > the Tomcat community intends to provide support for Tomcat 9 beyond the > 10 years for which major Tomcat versions are typically supported. > > Extended support will b

Re: AllowLiking below contex resources

2025-02-18 Thread Michael Osipov
On 2025/02/17 14:09:36 Mark Thomas wrote: > On 17/02/2025 11:50, Michael Osipov wrote: > > Folks, > > > > consider the following usecase: > >> > >> >> > >> clas

AllowLiking below contex resources

2025-02-17 Thread Michael Osipov
Folks, consider the following usecase: > > > className="org.apache.catalina.webresources.DirResourceSet" > webAppMount="/dav" readOnly="true" > allowLinking="true" /> > ... > This, of course does not work. I have to mo

Re: [OT] accessing manager app

2024-10-07 Thread Michael Osipov
On 2024/10/02 14:41:25 Christopher Schultz wrote: > > Michael, > > On 10/1/24 15:27, Michael Osipov wrote: > > > > On 2024/10/01 17:12:55 Christopher Schultz wrote: > >> Michael, > >> > >> On 10/1/24 12:13, Michael Osipov wrote: >

Re: Considerations for the WebDAV servlet

2024-10-03 Thread Michael Osipov
On 2024/10/02 14:46:06 Christopher Schultz wrote: > Michael, > > On 10/1/24 12:14, Michael Osipov wrote: > > On 2024/10/01 15:20:53 Rémy Maucherat wrote: > >> On Tue, Oct 1, 2024 at 4:53 PM Michael Osipov wrote: > >>> > >>> Folks, > >>&g

Re: [OT] accessing manager app

2024-10-01 Thread Michael Osipov
On 2024/10/01 17:12:55 Christopher Schultz wrote: > Michael, > > On 10/1/24 12:13, Michael Osipov wrote: > > On 2024/10/01 13:56:22 Christopher Schultz wrote: > >> Michael, > >> > >> On 10/1/24 05:21, Michael Osipov wrote: > >>> On 2024/09

Re: Considerations for the WebDAV servlet

2024-10-01 Thread Michael Osipov
On 2024/10/01 15:20:53 Rémy Maucherat wrote: > On Tue, Oct 1, 2024 at 4:53 PM Michael Osipov wrote: > > > > Folks, > > > > I'd like to put some effort into the DefaultServlet and the WebDAV servlet > > to align them more with mod_autoindex and add some mi

Re: [OT] accessing manager app

2024-10-01 Thread Michael Osipov
On 2024/10/01 13:56:22 Christopher Schultz wrote: > Michael, > > On 10/1/24 05:21, Michael Osipov wrote: > > On 2024/09/30 17:21:30 Christopher Schultz wrote: > >> Michael, > >> > >> On 9/30/24 11:41, Michael Osipov wrote: > >>> Chris, > &

Considerations for the WebDAV servlet

2024-10-01 Thread Michael Osipov
Folks, I'd like to put some effort into the DefaultServlet and the WebDAV servlet to align them more with mod_autoindex and add some minor improvements if I can cover my usecases here at work. Currently, I use mod_dav which I want to replace with the WebDAV servlet because I don't have the authz

Re: [OT] accessing manager app

2024-10-01 Thread Michael Osipov
On 2024/09/30 17:21:30 Christopher Schultz wrote: > Michael, > > On 9/30/24 11:41, Michael Osipov wrote: > > Chris, > > > > On 2024/09/30 14:33:53 Christopher Schultz wrote: > >> Michael, > >> > >> On 9/28/24 13:34, Michael Osipov wrote:

Re: accessing manager app

2024-09-30 Thread Michael Osipov
Chris, On 2024/09/30 14:33:53 Christopher Schultz wrote: > Michael, > > On 9/28/24 13:34, Michael Osipov wrote: > > On 2024/09/27 15:14:15 Christopher Schultz wrote: > >> Sebastian, > >> > >> On 9/27/24 11:04, Sebastian Trost wrote: > >>>

Re: accessing manager app

2024-09-28 Thread Michael Osipov
On 2024/09/27 15:14:15 Christopher Schultz wrote: > Sebastian, > > On 9/27/24 11:04, Sebastian Trost wrote: > > Francesco, > > > > On 26.09.2024 16:12, Francesco Viscomi wrote: > >> Hi all, > >> I'm not able to understand why I cannot access to > >>   http://localhost:8080/manager/html > >> > >>

Re: Apache Tomcat Default Files - TEN-12085

2024-07-10 Thread Michael Osipov
He's a contractor, what do you expect? At best someone logs in via SSH and solves the problem for him. On 2024/07/08 19:58:42 Chuck Caldarale wrote: > > > On Jul 8, 2024, at 14:54, Pramod Kumar Adhi > > wrote: > > > > We are using tomcat version 9.87 can you guide on the same. > > > Serious

Re: Inquiry about CVE-2024-5535 Vulnerability in Tomcat 10.1.20 Version

2024-07-08 Thread Michael Osipov
On 2024/07/08 03:50:44 "Zhong, Peyton" wrote: > Hi Mark, > > Thanks for your information. Let me briefly explain for myself. > > Because OpenSSL is one of the most widely used open-source cryptographic > libraries for implementing secure communications on the internet, it is > essential for us

Re: JVM crashing with caCertificatePath in server.xml

2024-05-22 Thread Michael Osipov
On 2024/05/22 00:05:18 Andy Arismendi wrote: > Hi Micheal, you had asked to try these - > http://home.apache.org/~michaelo/issues/tomcat/openssl-crash/. I replaced my > files with these but Tomcat failed to start at this point with this message - > > 22-May-2024 00:02:30.808 INFO [main] org.apac

Re: JVM crashing with caCertificatePath in server.xml

2024-05-22 Thread Michael Osipov
On 2024/05/22 00:05:18 Andy Arismendi wrote: > Hi Micheal, you had asked to try these - > http://home.apache.org/~michaelo/issues/tomcat/openssl-crash/. I replaced my > files with these but Tomcat failed to start at this point with this message - > > 22-May-2024 00:02:30.808 INFO [main] org.apac

Re: JVM crashing with caCertificatePath in server.xml

2024-05-22 Thread Michael Osipov
On 2024/05/21 18:04:18 Christopher Schultz wrote: > Michael, > > On 5/21/24 03:32, Michael Osipov wrote: > > On 2024/05/20 13:30:43 Christopher Schultz wrote: > >> Michael, > >> > >> On 5/20/24 06:52, Michael Osipov wrote: > >>> On 2024/05

Re: JVM crashing with caCertificatePath in server.xml

2024-05-21 Thread Michael Osipov
On 2024/05/20 13:30:43 Christopher Schultz wrote: > Michael, > > On 5/20/24 06:52, Michael Osipov wrote: > > On 2024/05/17 15:11:58 Christopher Schultz wrote: > >> Michael, > >> > >> On 5/17/24 03:42, Michael Osipov wrote: > >>> On 2024/05

Re: JVM crashing with caCertificatePath in server.xml

2024-05-20 Thread Michael Osipov
On 2024/05/17 15:11:58 Christopher Schultz wrote: > Michael, > > On 5/17/24 03:42, Michael Osipov wrote: > > On 2024/05/16 21:37:34 Christopher Schultz wrote: > >> Michael, > >> > >> On 5/16/24 12:00, Michael Osipov wrote: > >>> On 2024/05/16

Re: JVM crashing with caCertificatePath in server.xml

2024-05-17 Thread Michael Osipov
On 2024/05/16 21:37:34 Christopher Schultz wrote: > Michael, > > On 5/16/24 12:00, Michael Osipov wrote: > > On 2024/05/16 15:55:04 Andy Arismendi wrote: > >> Ok great! Thank you for taking the time and making the effort to look into > >> this Michael, muc

Re: JVM crashing with caCertificatePath in server.xml

2024-05-16 Thread Michael Osipov
On 2024/05/16 15:55:04 Andy Arismendi wrote: > Ok great! Thank you for taking the time and making the effort to look into > this Michael, much appreciated! Here is a dynamically linked, patched version until there is an official release: http://home.apache.org/~michaelo/issues/tomcat/openssl-cra

Re: JVM crashing with caCertificatePath in server.xml

2024-05-16 Thread Michael Osipov
On 2024/05/15 20:35:08 Michael Osipov wrote: > On 2024/05/15 14:41:43 Michael Osipov wrote: > > Good news. I can reproduce on Windows: > > 15-May-2024 16:40:31.092 INFORMATION [main] > > org.apache.coyote.AbstractProtocol.init Initialisiere > > ProtocolHandler["

Re: JVM crashing with caCertificatePath in server.xml

2024-05-15 Thread Michael Osipov
On 2024/05/15 14:41:43 Michael Osipov wrote: > Good news. I can reproduce on Windows: > 15-May-2024 16:40:31.092 INFORMATION [main] > org.apache.coyote.AbstractProtocol.init Initialisiere > ProtocolHandler["https-openssl-apr-18444"] > 15-May-2024 1

Re: JVM crashing with caCertificatePath in server.xml

2024-05-15 Thread Michael Osipov
Good news. I can reproduce on Windows: 15-May-2024 16:40:31.092 INFORMATION [main] org.apache.coyote.AbstractProtocol.init Initialisiere ProtocolHandler["https-openssl-apr-18444"] 15-May-2024 16:40:31.144 WARNUNG [main] org.apache.tomcat.util.net.SSLUtilBase.getEnabled Tomcat interprets the [ci

Re: JVM crashing with caCertificatePath in server.xml

2024-05-15 Thread Michael Osipov
On 2024/05/15 01:51:41 Andy Arismendi wrote: > ADDITIONAL ENVIRONMENT INFO UPDATE: > > libtcnative: org.apache.catalina.core.AprLifecycleListener.lifecycleEvent > Loaded Apache Tomcat Native library [1.3.0] using APR version [1.7.4]. > > CRASH LOG > > See enclosed: hs_err_pid4464.log > > c_reh

Re: JVM crashing with caCertificatePath in server.xml

2024-05-15 Thread Michael Osipov
On 2024/05/14 20:27:02 Christopher Schultz wrote: > > > On 5/14/24 15:23, Andy Arismendi wrote: > > Sure thing - > > > > ADDITIONAL ENVIRONMENT INFO: > > > > libtcnative: tcnative-1.dll is included in the Tomcat 9.0.89 64-bit Windows > > zip download, not sure about the version... > > OpenSSL

Re: JVM crashing with caCertificatePath in server.xml

2024-05-15 Thread Michael Osipov
On 2024/05/15 01:51:41 Andy Arismendi wrote: > ADDITIONAL ENVIRONMENT INFO UPDATE: > > libtcnative: org.apache.catalina.core.AprLifecycleListener.lifecycleEvent > Loaded Apache Tomcat Native library [1.3.0] using APR version [1.7.4]. > > CRASH LOG > > See enclosed: hs_err_pid4464.log Attachmen

Re: JVM crashing with caCertificatePath in server.xml

2024-05-14 Thread Michael Osipov
On 2024/05/14 19:23:47 Andy Arismendi wrote: > Sure thing - > > ADDITIONAL ENVIRONMENT INFO: > > libtcnative: tcnative-1.dll is included in the Tomcat 9.0.89 64-bit Windows > zip download, not sure about the version... > OpenSSL version: 3.0.13 30 Jan 2024 (Library: OpenSSL 3.0.13 30 Jan 2024)

Re: JVM crashing with caCertificatePath in server.xml

2024-05-14 Thread Michael Osipov
On 2024/05/14 18:21:36 Andy Arismendi wrote: > Hi, just ran into this today. The JVM is crashing when caCertificatePath is > added to server.xml. I tried the latest Zulu JRE 8 and 11 but still had the > crash. > > > ENVIRONMENT > > Tomcat: 9.0.89 (64-bit Windows zip) > OS: Windows Server 2019

Re: SPNEGO GSSCaller {UNKNOWN} No Delegated Creds

2024-05-07 Thread Michael Osipov
ate/timestamp}" > > P.S > I see in my ktpass command I made a typo and meant to put SA_EX_VAISSO > instead of "SA_EX_SSO" > > On Fri, May 3, 2024 at 8:26 AM Michael Osipov wrote: > > > On 2024/05/02 19:20:59 Tom Delaney wrote: > > > Hi All, >

Re: SPNEGO GSSCaller {UNKNOWN} No Delegated Creds

2024-05-03 Thread Michael Osipov
On 2024/05/02 19:20:59 Tom Delaney wrote: > Hi All, > > Sorry for the duplicate requests. The first one was accidentally flagged > for Google's new Confidential Mode which happened to be flagged. > I have a red hat 9.2 server hosting a web application on a single instance > of Apache Tomcat. This

Re: [ANN] Apache Tomcat Native 1.3.0 released

2024-02-13 Thread Michael Osipov
On 2024/02/13 08:46:42 Mark Thomas wrote: > The Apache Tomcat team announces the immediate availability of Apache > Tomcat Native 1.3.0 stable. > > The key features of this release are: > > - The minimum supported OpenSSL version is 1.1.1 > - The minimum supported APR version in 1.6.3 > - The win

Re: Rotating/archiving catalina.out

2024-01-30 Thread Michael Osipov
On 2024/01/29 20:28:05 Aryeh Friedman wrote: > We need to shrink the size of catalina.out but looking at the logging > documentation I do not see any way to do this with the standard > logging.properties (or else where). Due to the nature of the > production site we never bring it completely down

Re: Problems with cross app uploads (migrating from 9.0.35 to 9.0.84)

2024-01-15 Thread Michael Osipov
Aryeh, a general advice: The current Tomcat ports on FreeBSD are a bit unfortunate since they don't motivate to use separate catalina bases. I do not recommend using it as-is. Leverage the multi-instance options provided by its rc script to split out and the do: > tomcat_{name}_enable="YES" > t

Re: 9.0.83 addSslHostConfig failures?

2023-11-21 Thread Michael Osipov
On 2023/11/21 11:25:11 Michael Osipov wrote: > On 2023/11/20 22:14:14 Daniel Skiles wrote: > > Was there a change to the addSslHostConfig JMX mbean operation between > > 9.0.82 and 9.0.83? I have some code that works in 82, but fails with an > > MBeanException:

Re: 9.0.83 addSslHostConfig failures?

2023-11-21 Thread Michael Osipov
On 2023/11/20 22:14:14 Daniel Skiles wrote: > Was there a change to the addSslHostConfig JMX mbean operation between > 9.0.82 and 9.0.83? I have some code that works in 82, but fails with an > MBeanException: Cannot find operation [addSslHostConfig] in 9.0.83. > > When I attempt to look at the av

Re: AW: Solution to "Invalid keystore format" (cross-posted to Tomcat Users List at Apache, and Java 400 List at Midrange)

2023-09-12 Thread Michael Osipov
On 2023/09/12 07:06:52 "Thomas Hoffmann (Speed4Trade GmbH)" wrote: > Hallo James, > > > -Ursprüngliche Nachricht- > > Von: James H. H. Lampert > > Gesendet: Montag, 11. September 2023 18:31 > > An: Java 400 List ; Tomcat Users List > > > > Betreff: Solution to "Invalid keystore format" (

Re: Tomcat 9.0.76 Memory leak with Java 17

2023-07-12 Thread Michael Osipov
On 2023/07/11 18:16:24 Christopher Schultz wrote: > You should report all of the previous issues to Oracle against their > ORDS version 22.1 and ask them to fix them. It's why you write those > big, fat checks in the first place ;) This doesn't really matter. I have reported a memory leak in OJD

Re: Mimicking two distinct virtual hosts just like in HTTPd

2021-11-09 Thread Michael Osipov
Am 2021-11-08 um 17:36 schrieb Mark Thomas: On 08/11/2021 15:36, Michael Osipov wrote: Folks, consider the following in httpd.conf: Listen {IP}:8443 Listen {IP}:8444 later:    DocumentRoot /www/webapps1    ServerName {hostname}    mod_ssl config...    DocumentRoot /www/webapps2

Mimicking two distinct virtual hosts just like in HTTPd

2021-11-08 Thread Michael Osipov
Folks, consider the following in httpd.conf: Listen {IP}:8443 Listen {IP}:8444 later: DocumentRoot /www/webapps1 ServerName {hostname} mod_ssl config... DocumentRoot /www/webapps2 ServerName {hostname} mod_ssl config2... The second virtual host shall deliver only a subset of we

Re: Specifying a Custom Authenticator Class

2021-10-03 Thread Michael Osipov
Am 2021-10-02 um 02:48 schrieb Jerry Malcolm: I need to write a custom BasicAuthenticator class to decode a specialized encoding of the authToken.  I have been scouring google for info.  I found one post where the answer included the statement: This would clearly violate Basic auth scheme and

Re: reporting a problem with LDAP auth to Windows Active Directory with Kerberos using the default spnegoDelegationQop="auth-conf" value for Tomcat 9.0.31 and 9.0.52

2021-09-19 Thread Michael Osipov
Am 2021-09-14 um 18:23 schrieb Tim Miller Dyck: Hello, I wanted to report an issue with Tomcat LDAP user authentication lookups with Tomcat container Kerberos security that I found in our environment when upgrading to version Tomcat 9.0.52 from 9.0.30 and what configuration settings bypassed

Re: Updating Oracle JDK or JRE from 1.8.0-1.8.0_291 to 1.8.0-1.8.0_301, Breaks Apache Tomcat 9 Connector Http11AprProtocol

2021-08-01 Thread Michael Osipov
https://bugs.openjdk.java.net/browse/JDK-8202837 https://www.oracle.com/java/technologies/javase/8u301-bugfixes.html What now? - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-

Re: Enhancement: Additional user attributes queried by (some) realms

2021-05-27 Thread Michael Osipov
You read my mind. I always wanted to report this, but never find time. Implemented this for our realm and principal years ago: http://tomcatspnegoad.sourceforge.net/apidocs/net/sf/michaelo/tomcat/realm/ActiveDirectoryPrincipal.html#getAdditionalAttributes-- The entire principal should be immutab

Re: HTTP thread pool size remained high after database failover

2020-11-11 Thread Michael Osipov
Am 2020-11-11 um 12:40 schrieb Suvendu Sekhar Mondal: Hello Everyone, During database failover resiliency testing we noticed something unusual which we still cannot explain. So, reaching out to the community for help. Application Setup: AdoptOpenJDK 1.8.192, Tomcat 7.0.55, Apache httpd, Windows

Re: No thread name in AccessLogValve printed

2020-10-20 Thread Michael Osipov
Am 2020-10-20 um 11:44 schrieb Mark Thomas: On 20/10/2020 10:10, Michael Osipov wrote: Folks, I have seen recently entried like this on our access logs: 2020-10-19T20:00:05.591 [null] xyz - "-" 400 - 0 2020-10-19T20:00:05.591 [null] abc- "-" 400 - 0 2020-10-19T20:

No thread name in AccessLogValve printed

2020-10-20 Thread Michael Osipov
Folks, I have seen recently entried like this on our access logs: 2020-10-19T20:00:05.591 [null] xyz - "-" 400 - 0 2020-10-19T20:00:05.591 [null] abc- "-" 400 - 0 2020-10-19T20:00:05.592 [null] abc - "-" 400 - 0 2020-10-19T20:00:05.593 [null] abc - "-" 400 - 0 2020-10-19T20:00:05.616 [null] abc

Re: OpenSSL prompts for key password

2020-10-15 Thread Michael Osipov
Am 2020-10-15 um 17:34 schrieb Christopher Schultz: Michael, On 10/15/20 08:12, Michael Osipov wrote: Michael, On 10/14/20 12:46, Michael Osipov wrote: Folks, I have recently upgrade a cert and left out the last char of the key password by accident. # /sbin/init.d/tomcat-smartld start

Re: Re: OpenSSL prompts for key password

2020-10-15 Thread Michael Osipov
> Michael, > > On 10/14/20 12:46, Michael Osipov wrote: > > Folks, > > > > I have recently upgrade a cert and left out the last char of the key > > password by accident. > > > >> # /sbin/init.d/tomcat-smartld start > >> Starting Apache

OpenSSL prompts for key password

2020-10-14 Thread Michael Osipov
Folks, I have recently upgrade a cert and left out the last char of the key password by accident. # /sbin/init.d/tomcat-smartld start Starting Apache Tomcat 8.5... Using CATALINA_BASE: /var/opt/tomcat-smartld Using CATALINA_HOME: /opt/ports/apache-tomcat-8.5.57 Using CATALINA_TMPDIR: /var

Re: [tomcat-users] Re: getting web application version string?

2020-08-17 Thread Michael Osipov
Am 2020-08-17 um 17:57 schrieb Jason Pyeron: -Original Message- From: Michael Osipov Sent: Sunday, August 16, 2020 1:27 PM Am 2020-08-16 um 18:16 schrieb Jason Pyeron: Is there a better way than this? Specifically - detect running Tomcat, then if under Tomcat (today only interested

Re: getting web application version string?

2020-08-16 Thread Michael Osipov
Am 2020-08-16 um 18:16 schrieb Jason Pyeron: Is there a better way than this? Specifically - detect running Tomcat, then if under Tomcat (today only interested in v7 and v9) obtain the version string as described [1] and shown on the Manager web application. At least for the version, you can

Re: [Tomcat 9.0.37] Https / SSL on Windows server 2016 with windows certificate store

2020-07-12 Thread Michael Osipov
Am 2020-07-11 um 23:52 schrieb Valentin: Hello, I try to configure my tomcat 9.0.37 installed on a windows server 2016 to use a certificate located in *cert:LocalMachine\My* I mention that I am an administrator of this machine. This certificate is also used by IIS. What I did was to configure

Re: Looking for mod_proxy_ajp or mod_proxy_http users

2020-07-09 Thread Michael Osipov
Am 2020-07-08 um 23:52 schrieb Christopher Schultz: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, I'm (likely) giving a presentation at this year's ApacheCon North America (which is *virtual* this year, so the "North America" just means "it was supposed to be in New Orleans in September"

Re: RFC7807 ErrorReportValve

2020-07-07 Thread Michael Osipov
Am 2020-07-06 um 16:04 schrieb Mark Thomas: On 05/07/2020 10:28, Michael Osipov wrote: Am 2020-07-02 um 21:30 schrieb Thomas Meyer: Hi, What are your opinions on providing a RFC7807 based ErrorReportValve as part of Tomcat default distribution? Thomas, this has been bugging me for a while

Re: RFC7807 ErrorReportValve

2020-07-05 Thread Michael Osipov
Am 2020-07-02 um 21:30 schrieb Thomas Meyer: Hi, What are your opinions on providing a RFC7807 based ErrorReportValve as part of Tomcat default distribution? Thomas, this has been bugging me for a while. Let me share some thoughts on this, I'll limit my experiences with Tomcat, Spring Web an

Re: jsvc - non root - log as root

2020-06-27 Thread Michael Osipov
Am 2020-06-26 um 09:21 schrieb Jürgen Weber: Hi, when you run tomcat with jsvc and have jsvc drop privileges to a different user, stdout and stderr log files are still created with root as owner. Can you make jsvc create them as the -user ? What is you actual problem with that? I have talked

Re: Connection Closure due to Fatal Stream with HTTP2

2020-06-13 Thread Michael Osipov
Am 2020-06-13 um 08:42 schrieb Chirag Dewan: Hi, We are observing that under high load, my clients start receiving a GoAway frame with error: *Connection[{id}], Stream[{id}] an error occurred during processing that was fatal to the connection.* Background : We have implemented our clients to c

Re: Should Tomcat 10 enable response compression by default?

2020-06-10 Thread Michael Osipov
Am 2020-06-09 um 22:20 schrieb Mark Thomas: Hi all, An enhancement has been opened to enable response compression by default: https://bz.apache.org/bugzilla/show_bug.cgi?id=64431 In short, the proposal is to change the default for the Connector's compression attribute from "off" to "on". This

Re: Tomcat 9.0.27 loads incorrect openssl version

2020-06-07 Thread Michael Osipov
RPATH and some other situations You can use Python's ctypes.CDLL() function to perform the same operation quick and easy in Python's REPL. Please also provide the ./configure args and output of libtcnative as well as config.log after configure. Michael -Original Messag

Re: Tomcat 9.0.27 loads incorrect openssl version

2020-06-07 Thread Michael Osipov
Am 2020-06-07 um 20:16 schrieb Norbert Elbanbuena: Hi, I removed the previous version of OpenSSL 1.0.2k-fips from yum. Then I installed OpenSSL 1.1.1g from source and made a clean install of tomcat-native 1.2.24 pointing to the correct OpenSSL path. When I start Tomcat, it still shows OpenSSL

Re: Is ARM64 architecture officially supported ?

2020-04-19 Thread Michael Osipov
Am 2020-04-19 um 19:51 schrieb Martin Grigorov: Hi Emilio, On Fri, Apr 17, 2020 at 2:14 PM Emilio Fernandes < emilio.fernande...@gmail.com> wrote: Hola Tomcat community! We consider using AWS Graviton [1] based instances which use ARM64 processors for our backend services. I've googled around

Re: AccessLogValve and IPv6 string representation (RFC 5952 section 4)

2020-04-13 Thread Michael Osipov
Am 2020-04-14 um 01:45 schrieb Manuel Dominguez Sarmiento: Hi, we are in the middle of a thorough review to fully support IPv6 across our platform. It has come to our attention that Java does not fully conform to RFC 5952 section 4 which deals with IPv6 zero compression (i.e. ::1 instead of 0:0

Re: Practical multipart handling

2020-03-26 Thread Michael Osipov
Am 2020-03-26 um 16:03 schrieb Christopher Schultz: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, I'm developing my first multipart handler since .. I dunno, maybe 2005? This is the first time I'll be using the Servlet 3.0 multipart handling, of course through Tomcat. Some of these quest

Re: Client cert auth on demand

2020-02-29 Thread Michael Osipov
Am 2020-02-29 um 15:12 schrieb Mark Thomas: On 29/02/2020 13:05, Thomas Meyer wrote: Am 29. Februar 2020 13:10:13 MEZ schrieb Mark Thomas : On 29/02/2020 11:23, Michael Osipov wrote: Am 2020-02-29 um 12:13 schrieb Mark Thomas: On 29/02/2020 11:07, Michael Osipov wrote: Am 2020-02-29 um 12

Re: Client cert auth on demand

2020-02-29 Thread Michael Osipov
Am 2020-02-29 um 14:05 schrieb Thomas Meyer: Am 29. Februar 2020 13:10:13 MEZ schrieb Mark Thomas : On 29/02/2020 11:23, Michael Osipov wrote: Am 2020-02-29 um 12:13 schrieb Mark Thomas: On 29/02/2020 11:07, Michael Osipov wrote: Am 2020-02-29 um 12:05 schrieb Mark Thomas: On 29/02/2020 10

Re: Client cert auth on demand

2020-02-29 Thread Michael Osipov
Am 2020-02-29 um 12:13 schrieb Mark Thomas: On 29/02/2020 11:07, Michael Osipov wrote: Am 2020-02-29 um 12:05 schrieb Mark Thomas: On 29/02/2020 10:40, Michael Osipov wrote: Tomcat does not support renegotiation of TLS contexts based on URLs like HTTPd. Yes it does. If you specify

Re: Client cert auth on demand

2020-02-29 Thread Michael Osipov
Am 2020-02-29 um 12:13 schrieb Mark Thomas: On 29/02/2020 11:07, Michael Osipov wrote: Am 2020-02-29 um 12:05 schrieb Mark Thomas: On 29/02/2020 10:40, Michael Osipov wrote: Tomcat does not support renegotiation of TLS contexts based on URLs like HTTPd. Yes it does. If you specify

Re: Client cert auth on demand

2020-02-29 Thread Michael Osipov
Am 2020-02-29 um 12:05 schrieb Mark Thomas: On 29/02/2020 10:40, Michael Osipov wrote: Am 2020-02-29 um 10:09 schrieb Thomas Meyer: Hi, Instead of configuring the container for client cert Auth change the webapp: 1) define a realm in local context.xml 2) add resp security constraint only

Re: Client cert auth on demand

2020-02-29 Thread Michael Osipov
Am 2020-02-29 um 10:09 schrieb Thomas Meyer: Am 27. Februar 2020 10:58:01 MEZ schrieb "Martynas Jusevičius" : Hi list, I'm using a Docker image based on tomcat:8.0-jre8. It serves as an end-user facing webapp but also as a REST API which authenticates using client certificates. The same URLs s

Re: Expect: 100-continue with filters vs valves

2020-02-19 Thread Michael Osipov
Am 2020-02-18 um 23:43 schrieb Mark Thomas: On 18/02/2020 19:47, Michael Osipov wrote: Am 2020-02-18 um 20:28 schrieb Mark Thomas: Got it - I think. Let me re-phrase to see if I understand correctly. You have a code fragment that issues a redirect. The app submits a request with an

Re: Expect: 100-continue with filters vs valves

2020-02-18 Thread Michael Osipov
Am 2020-02-18 um 20:28 schrieb Mark Thomas: On 18/02/2020 18:13, Michael Osipov wrote: Am 2020-02-18 um 10:00 schrieb Mark Thomas: On 17/02/2020 20:17, Michael Osipov wrote: I have continued some tests on 8.5.51 with PUT requests and Expect: 100 continue header from HttpClient 5.0. I have

Re: Expect: 100-continue with filters vs valves

2020-02-18 Thread Michael Osipov
Am 2020-02-18 um 10:00 schrieb Mark Thomas: On 17/02/2020 20:17, Michael Osipov wrote: I have continued some tests on 8.5.51 with PUT requests and Expect: 100 continue header from HttpClient 5.0. I have noticed that the very same code code fragment What code fragment? My bad, here it is

Expect: 100-continue with filters vs valves

2020-02-17 Thread Michael Osipov
I have continued some tests on 8.5.51 with PUT requests and Expect: 100 continue header from HttpClient 5.0. I have noticed that the very same code code fragment kicks in in the expect header evaluation when run as valve, but completely ignored when run in a filter. Tomcat will simply signal t

Re: Tomcat responding 500 instead of 408

2020-02-17 Thread Michael Osipov
Am 2020-02-17 um 16:47 schrieb Mark Thomas: On 17/02/2020 15:07, Michael Osipov wrote: Folks, I am recently working an issue with Maven Wagon and HttpClient and noticed that Tomcat responds with 500 while I would expect 408 in this case. Tried very simple code on Tomcat 8.5.51

Tomcat responding 500 instead of 408

2020-02-17 Thread Michael Osipov
Folks, I am recently working an issue with Maven Wagon and HttpClient and noticed that Tomcat responds with 500 while I would expect 408 in this case. Tried very simple code on Tomcat 8.5.51: @Override protected void doPut(HttpServletRequest request, HttpServletResponse respo

Re: Tomcat 9.0.27 intermittent JVM crashing on libapr-1.so

2020-01-22 Thread Michael Osipov
Am 2020-01-22 um 23:30 schrieb Norbert Elbanbuena: Hello and greetings, I'm running tomcat 9.0.27 using APR and OpenSSL and get intermittent crashes with the hs_err log always pointing that the problematic frame is libapr-1.so. Our machine details: OS: CentOS Linux release 7.6.1810 (Core) Jav

Re: Possible release of next 8.5.x in 2020

2020-01-12 Thread Michael Osipov
Am 2020-01-12 um 19:26 schrieb M. Manna: Hey All, Just trying to get a timeline (or possible release time) for next 8.5.x. The latest release is 8.5.50 from December 2020. I am assuming there is one imminent for January 2020? This is purely for individual interest as my dev cycle requires a tom

Re: [OT] Specifying a custom SSLSocketFactory for an LDAP connection

2020-01-08 Thread Michael Osipov
Am 2020-01-09 um 01:34 schrieb Christopher Schultz: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, For anyone who has experience with LDAP in Java, I need a little help. I have some code connecting to an LDAP server and doing all the wonderful things I want to do, but I'd like to customiz

Re: Dates on Linux vs. Windows

2020-01-07 Thread Michael Osipov
Am 2020-01-07 um 21:58 schrieb Jerry Malcolm: This may be more of a Java question than Tomcat.  But I'm not sure.  I have the same code, talking to the same MySql Linux (AWS) database.  I read a date column value in a Tomcat app.  After calling resultSet.getDate(...) I printed the date instance

Re: [OT] Re: Maven Warning. Ubuntu Users

2020-01-06 Thread Michael Osipov
Am 2020-01-06 um 21:13 schrieb Zahid Rahman: That must be the reason why Apache Netbeans is using a version from 2015 and Apache Struts is recommending to use jdk 8. Because there is somebody like you keeps telling people it is off topic and Giant IT companies are not releasing jdk further

Re: Jakarta EE 9

2019-10-28 Thread Michael Osipov
Am 2019-10-28 um 22:00 schrieb Stefan Mayr: Am 28.10.2019 um 14:13 schrieb Rémy Maucherat: On Mon, Oct 28, 2019 at 1:46 PM Johan Compagner wrote: Hi On Mon, 28 Oct 2019 at 13:15, Mark Thomas wrote: Hi all, A frequent topic of discussion at ApacheCon EU was Jakarta EE 9. For those of

Re: Jakarta EE 9

2019-10-28 Thread Michael Osipov
Am 2019-10-28 um 14:59 schrieb Mark Thomas: On October 28, 2019 12:37:14 PM UTC, Johan Compagner wrote: Hi On Mon, 28 Oct 2019 at 13:15, Mark Thomas wrote: Hi all, A frequent topic of discussion at ApacheCon EU was Jakarta EE 9. For those of you who aren't familiar with Jakarta EE the

Re: Jakarta EE 9

2019-10-28 Thread Michael Osipov
Am 2019-10-28 um 13:15 schrieb Mark Thomas: Hi all, A frequent topic of discussion at ApacheCon EU was Jakarta EE 9. For those of you who aren't familiar with Jakarta EE the key points are: - Oracle have donated Java EE to Eclipse - Eclipse have released Jakarta EE 8 which is essentially ident

Re: EOL for Tomcat 9.X ?

2019-10-22 Thread Michael Osipov
Am 2019-10-22 um 16:43 schrieb Christopher Schultz: Robert, On 10/18/19 11:46, Robert Hicks wrote: Thanks! Further, releases of the servlet spec seem to be published approximately every 4 years in recent memory[1]. Tomcat 9 implements spec version 4.0, released in Sept 2017. If that version

Re: FW: Apache Vulnerability - Understanding Connector Protocols

2019-08-01 Thread Michael Osipov
Am 2019-08-01 um 21:19 schrieb Mark Thomas: On 01/08/2019 20:07, Justiniano, Tony wrote: And that is what I was thinking, inadvertently, our scanning tool just found the apache version during a scan and corresponded it (the apache version) with a CVE. Do you concur? Sounds likely. Most low

Re: Invalid HTTP Header - attack?

2019-08-01 Thread Michael Osipov
Am 2019-08-01 um 20:36 schrieb Mark Thomas: On 01/08/2019 19:08, John Dale wrote: I'm getting this in my logs - is this an attack do you think? Unlikely to be an attack. Most likely a broken client. There is another scenario: Regular security scans on all corporate subnets from sec dept. I

Re: Tomcat Authentication + Spring Security J2EEPreAuthentication

2019-05-21 Thread Michael Osipov
Am 2019-05-20 um 21:35 schrieb Nacho Ganguli: My last attempt used Spring Security JEE pre-authentication filters. This works as I would like "provided" that I only use basic auth and tomcat's default realm (tomcat-users.xml). As soon as I introduce form-based auth, it does not work and I am pro

Re: Tomcat Authentication + Spring Security J2EEPreAuthentication

2019-05-18 Thread Michael Osipov
Am 2019-05-17 um 19:11 schrieb Nacho Ganguli: HELP, I NEED SOMEBODY, NOT JUST ANYBODY! HELP (It all started weeks ago when I tried unsuccessfully to use Tomcat's SSO Valve and decided to try pre-authentication...) We are developing a subscription-based "portal" webapp that we use to authen

Re: Expect: 100-continue not working with curl and HTTP/2

2019-03-30 Thread Michael Osipov
Am 2019-03-29 um 22:07 schrieb Mark Thomas: On 29/03/2019 12:28, Michael Osipov wrote: Am 2019-03-29 um 12:14 schrieb Mark Thomas: On 28/03/2019 15:14, Osipov, Michael wrote: Hi folks, right away, I don't know whether it is us (Tomcat) or curl. I'd lke to narrow down the cause. I

Tomcat 8.5 drops query string on protocol upgrade

2019-03-30 Thread Michael Osipov
While searching for a cause for "Expect: 100-continue not working with curl and HTTP/2" I have found another issue. I'd be happy if someone else can reproduce this: $ curl --verbose --negotiate -u : --upload-file target/lda-docgen-webapp-0.1-backend-dev.war 'http://sitex-ldadw.ad001.siemens.

Re: Expect: 100-continue not working with curl and HTTP/2

2019-03-29 Thread Michael Osipov
Am 2019-03-29 um 22:07 schrieb Mark Thomas: On 29/03/2019 12:28, Michael Osipov wrote: Am 2019-03-29 um 12:14 schrieb Mark Thomas: On 28/03/2019 15:14, Osipov, Michael wrote: Hi folks, right away, I don't know whether it is us (Tomcat) or curl. I'd lke to narrow down the cause. I

Re: Expect: 100-continue not working with curl and HTTP/2

2019-03-29 Thread Michael Osipov
Am 2019-03-29 um 22:07 schrieb Mark Thomas: On 29/03/2019 12:28, Michael Osipov wrote: Am 2019-03-29 um 12:14 schrieb Mark Thomas: On 28/03/2019 15:14, Osipov, Michael wrote: Hi folks, right away, I don't know whether it is us (Tomcat) or curl. I'd lke to narrow down the cause. I

Re: Expect: 100-continue not working with curl and HTTP/2

2019-03-29 Thread Michael Osipov
Am 2019-03-29 um 12:14 schrieb Mark Thomas: On 28/03/2019 15:14, Osipov, Michael wrote: Hi folks, right away, I don't know whether it is us (Tomcat) or curl. I'd lke to narrow down the cause. It seems to be related to the use of kerberos. I don't see any errors when I provide the user name an

Re: Followup2: Changed behaviour of Tomcat Deployment/Context/Lifecycle Manager concerning symbolic links

2019-03-11 Thread Michael Osipov
Am 2019-03-11 um 09:03 schrieb Rainer Jung: Am 11.03.2019 um 08:09 schrieb Michael Osipov: Am 2019-03-10 um 22:29 schrieb Mark Thomas: On 10/03/2019 20:54, Michael Osipov wrote: Am 2019-03-10 um 12:16 schrieb Mark Thomas: On 10/03/2019 09:08, Guido Jäkel wrote: Dear John, Hi Rainer, Thank

Re: Followup2: Changed behaviour of Tomcat Deployment/Context/Lifecycle Manager concerning symbolic links

2019-03-11 Thread Michael Osipov
Am 2019-03-10 um 22:29 schrieb Mark Thomas: On 10/03/2019 20:54, Michael Osipov wrote: Am 2019-03-10 um 12:16 schrieb Mark Thomas: On 10/03/2019 09:08, Guido Jäkel wrote: Dear John, Hi Rainer, Thank you for your hints. I leaned to used this features on Github locate the commit - it&#

Re: Followup2: Changed behaviour of Tomcat Deployment/Context/Lifecycle Manager concerning symbolic links

2019-03-10 Thread Michael Osipov
Am 2019-03-10 um 12:16 schrieb Mark Thomas: On 10/03/2019 09:08, Guido Jäkel wrote: Dear John, Hi Rainer, Thank you for your hints. I leaned to used this features on Github locate the commit - it's https://github.com/apache/tomcat/commit/fd2abbb525660a9968694afd99a58f8c22cb54c6 and

  1   2   >