Hello Everyone,
I am using JRE 1.8.060 and tomcat 7.00.068 ,after enabling the FIPS mode
and performing the steps to create a certificate(PKCS12 format). I was able
to access the tomcat home page using HTTPS
But when I was using the same JRE 1.8.060 with tomcat 7.00.069 and then
enabling the FI
Thank you Mark :)
On Tue, Nov 17, 2015 at 1:05 PM, Mark Thomas wrote:
> On 17/11/2015 05:23, Nikitha Benny wrote:
> > Hello,
> >
> > I am not sure as to where to post this question, so I am posting it here.
> >
> > Please let me know the End of Support (EOS)
Hello,
I am not sure as to where to post this question, so I am posting it here.
Please let me know the End of Support (EOS) dates for:
Apache Tomcat version 7.0.62
Apache Tomcat version 7.0.65
Apache Tomcat version 8.0.23
Apache Tomcat version 8.0.28
Kindly reply.
Thanks & Regards,
Nikitha
Hi All,
Tomcat stopped working (blank page when browsing to the website using
firefox).
Checking in the catalina.2015-04-21.log on one of the problematic servers,
following messages were seen :
*Apr 21, 2015 11:35:11 AM org.apache.catalina.startup.TldConfig tldScanJar*
*WARNING: Failed to proces
Hi All,
I am using Tomcat version 7.00.062 supported on JRE 8u45.
How do i disable the LogJam Vulnerability?
I have added a line in the java.security file of the JRE.
jdk.tls.disabledAlgorithms=DH
Is this good enough? Or do we need to add DiffieHelmann also?
jdk.tls.disabledAlgorithms=DH, Diffie
s,
> Sanaullah
>
>
>
> On Wed, Aug 5, 2015 at 3:52 PM, Nikitha Benny
> wrote:
>
> > Hi Mark, Sanaullah,
> >
> > Thank you for your valuable suggestion.
> >
> > I just ran the openssl s_client scan, and it looks like the server side
> is
>
reason for the
issue?
Regards,
Nikitha
On Wed, Aug 5, 2015 at 3:24 PM, Sanaullah wrote:
> Hi Nikhita,
>
> run the sslscan tool from the command line or openssl s_client in debug
> mode
> https://github.com/rbsec/sslscan
>
> Regards,
> Sanaullah
>
> On Wed, A
Hi Mark,
My server is not on a public domain.
How can i verify the setup which is on a private network?
Regards,
Nikitha
On Wed, Aug 5, 2015 at 2:14 PM, Mark Thomas wrote:
> On 05/08/2015 07:32, Nikitha Benny wrote:
> > Hi Mark,
> >
> > When I try to run Tomcat on
certificate
that you don't have*
**
We have set the client authentication to False, so it does not need any
client authorized certificate.
Regards,
Nikitha
On Wed, Aug 5, 2015 at 10:07 AM, Nikitha Benny
wrote:
> > But still Tomcat does not run on the https port.
>
&g
> But still Tomcat does not run on the https port.
As in, when we run Tomcat on the https server port it does not display the
page.
Where as it goes through fine on the http port. The url opens.
On Tue, Aug 4, 2015 at 6:18 PM, Mark Thomas wrote:
> On 04/08/2015 13:19, Nikitha Benny
.
Any clue as to why this happens?
The protocol I am using is* "org.apache.coyote.http11.Http11Protocol".*
Could it be because I am not using an APR connector protocol?
Regards,
Nikitha
On Tue, Aug 4, 2015 at 2:37 PM, Mark Thomas wrote:
> On 04/08/2015 09:30, Nikitha Benny wrote:
Hello All,
We are working on Tomcat 7.00.062 with java 1.08.045.
We require to configure FIPS compliancy on the Tomcat.
We were successful in configuring FIPS compliancy on java 1.08.045.
A keystore file has already been created for Tomcat.
When we run the Tomcat 7.00.062 with the FIPS compliant
Hi All,
I have installed java JRE version 1.07.079 and Tomcat version 8.00.023.
And it installs and runs fine on all unix platforms (Linux_x64, Linux_x86,
Solaris and HP-UX).
Now when it comes to Windows (both x86 and x64), Tomcat installs fine but
does not run.
Also logs are not being thrown.
Hi,
I am confused regarding the 2 security issues CVE-2007-6750
and CVE-2009-5111.
Can they be tracked to CVE-2012-5568?
According to CVE-2012-5568, I understand that this is not a vulnerability
in Tomcat. Please confirm.
When Tomcat 7.0.62 was scanned using McAfee Vulnerability Manager Tool, i
14 matches
Mail list logo