On Sat, Jan 21, 2012 at 9:02 AM, David Jorm wrote:
> Hi All
>
> I am working on resolving the CVE-2012-0022 DoS in JBoss Web, and I wanted to
> confirm some details if anyone can help. Based on reading the advisory and
> Tomcat patch code, it seems to me that the issue is simply slow processing
On Wed, Sep 7, 2011 at 2:23 PM, Adrian Gonzalez wrote:
> Hello,
>
> I've noticed a performance difference between classic Tags and simple Tags in
> Tomcat 7.0.21 (also tested it on 7.0.6 with the same results).
>
> Simple tags or tagfiles execution is at 5 times superior to classic tag
> executi
On Wed, Feb 9, 2011 at 7:46 AM, Konstantin Kolinko
wrote:
> 2011/2/8 Christopher Schultz :
>> On 2/8/2011 4:31 AM, Stevo Slavić wrote:
>>> I don't see support for
>>> ordering in @WebFilter annotation. Am I missing something?
>>
>> I don't see anything that would allow an ordering to be specified.
The Apache Tomcat team announces the immediate availability of Apache
Tomcat 6.0.20 stable. This release includes many bugfixes over Apache
Tomcat 6.0.18.
Apache Tomcat 6.0 includes new features over Apache Tomcat 5.5,
including support for the new Servlet 2.5 and JSP 2.1 specifications, a
refacto
The Apache Tomcat team announces the immediate availability of Apache
Tomcat 6.0.18 stable. This release includes many bugfixes over Apache
Tomcat 6.0.16.
Apache Tomcat 6.0 includes new features over Apache Tomcat 5.5,
including support for the new Servlet 2.5 and JSP 2.1 specifications, a
refacto
The Apache Tomcat team announces the immediate availability of Apache
Tomcat 6.0.16 stable. This release includes many bugfixes over Apache
Tomcat 6.0.14.
Apache Tomcat 6.0 includes new features over Apache Tomcat 5.5,
including support for the new Servlet 2.5 and JSP 2.1 specifications, a
refacto
The Apache Tomcat team announces the immediate availability of Apache
Tomcat 6.0.14 stable. This release includes bugfixes over Apache Tomcat
6.0.13.
Apache Tomcat 6.0 includes new features over Apache Tomcat 5.5,
including support for the new Servlet 2.5 and JSP 2.1 specifications, a
refactore
The Apache Tomcat team announces the immediate availability of Apache
Tomcat 6.0.13 stable. This release is the second stable release of the
6.0.x branch, and includes bugfixes over Apache Tomcat 6.0.10.
Apache Tomcat 6.0 includes new features over Apache Tomcat 5.5,
including support for the new
The Apache Tomcat team announces the immediate availability of Apache
Tomcat 6.0.10 stable. This release is the first stable release of the
6.0.x branch.
Apache Tomcat 6.0 includes new features over Apache Tomcat 5.5,
including support for the new Servlet 2.5 and JSP 2.1 specifications, a
refacto
The Apache Tomcat team announces the immediate availability of Apache
Tomcat 6.0.9 beta. This release is the third beta release of the
6.0.x branch.
Apache Tomcat 6.0 includes new features over Apache Tomcat 5.5,
including support for the new Servlet 2.5 and JSP 2.1 specifications, a
refactored c
The Apache Tomcat team announces the immediate availability of Apache
Tomcat 6.0.7 beta. This release is the second beta release of the
6.0.x branch.
Apache Tomcat 6.0 includes new features over Apache Tomcat 5.5,
including support for the new Servlet 2.5 and JSP 2.1 specifications, a
refactored
The Apache Tomcat team announces the immediate availability of Apache
Tomcat 6.0.2 beta. This release is the first non alpha release of the
6.0.x branch.
Apache Tomcat 6.0 includes new features over Apache Tomcat 5.5,
including support for the new Servlet 2.5 and JSP 2.1 specifications, a
refacto
On 8/26/06, Andrew Miehs <[EMAIL PROTECTED]> wrote:
?! Now I am confused ?!
10,000 connections and 10,000 virtual hosts have NOTHING to do with
one another.
As to 10,000 virtual hosts in Tomcat, vs 10,000 virtual hosts in
Apache
No idea - I don't think 10,000 virtual hosts on either is a g
On 8/23/06, COURTAULT Francois <[EMAIL PROTECTED]> wrote:
Hello,
Do you know when the next version of Tomcat (6.0 ?) will be released ?
The packaging is finalized, and we're working on some API refinements,
and porting the clustering functionality.
Rémy
--
On 6/22/06, Markus Schönhaber <[EMAIL PROTECTED]> wrote:
Jeff Chuang wrote:
> To make port 80 use APR and port 443 NOT use APR, I have tried it
> several times, without any luck. After tomcat starts, port 80 is fine,
> but connections to port 443 are always timeout. It looks from the log
> the H
On 6/2/06, Jim Jagielski <[EMAIL PROTECTED]> wrote:
IMO, if you need to move out of "pure Java" in your Java Web
Server to get acceptable performance, then why use it in
the first place? Plus, if you are "concerned" about the
security of Apache (cause it's nasty C) and therefore
want to use a Jav
On 6/2/06, Stefan Baramov <[EMAIL PROTECTED]> wrote:
Hi everyone:
Tomcat 5.5.17 for Windows (distribution apache-tomcat-5.5.17.exe) comes
with a DLL file called tcnative-1.dll. According to the Tomcat
documentation this is a native extension based on the APR and Open SSL
projects. However, the
On 6/1/06, Michael Echerer <[EMAIL PROTECTED]> wrote:
Danny Lee wrote:
> Hi guys!
>
> I wondering if it's really so good to use Tomcat behind "a real" web
> server like Apache or IIS.
>
In case you have a lot of HTTPS traffic, you'll find that having Apache
handle SSL is faster than the Java imp
On 5/12/06, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:
I am pleased to announce the immediate availability of LambdaProbe 1.5
LambdaProbe is an Open Source (GPL) Tomcat monitoring and mangement webapp. The
new release features OS memory usage, swap usage and CPU utilization monitors,
support
On 4/19/06, Corey Kaiser <[EMAIL PROTECTED]> wrote:
> 5.5.17 beta exhibits all of the same issues as 5.5.16.
> 5.5.12 works just as great as 5.5.15.
The differences between 5.5.15 and 5.5.16+ are fairly safe looking
bugfixes (especially in Jasper, the changes are nearly non existent).
IMO, you are
On 4/3/06, Markus Schönhaber <[EMAIL PROTECTED]> wrote:
> Richard Mundell wrote:
> > In 5.5.15 we switched to using the (ever-so-well-documented) APR native
> > library so I suspect it's the OpenSSL code in the APR library which is
> > causing the problem.
>
> First thing I'd try is to update to to
On 4/3/06, Tp <[EMAIL PROTECTED]> wrote:
> Also the reference to the OutputStream itself? I mean it should stay
> open until the connection closes. Are you sure?
This OutputStream object is a fake facade, and loses its relationship
to the actual socket at the end of the request.
--
xx
On 4/3/06, Daniel Guggi <[EMAIL PROTECTED]> wrote:
> Hi!
> >
> > Right. I said you need to use polling, or use 5000 threads (which is
> > not a problem if you have enough memory).
> >
> Are you sure that 5000 threads is not a problem when you have enough
> memory. I'd be worried about wasting lots
On 4/3/06, Tp <[EMAIL PROTECTED]> wrote:
> Remy Maucherat schrieb:
> But you said that the connection will not close, when the doGet() or
> doPost() method returns, which of course make a lot of sense. Otherwise
> Persistent connections would not be possible at all.
>
> S
On 4/3/06, Tp <[EMAIL PROTECTED]> wrote:
> Well, I don't know what you understand under polling. I guess you mean
> the clients will have to sent GET and POST requests repeately, right?
>
> The load is going to be even higher with polling. That's I would not
> introduce any polling. How would I do
On 4/3/06, Leon Rosenberg <[EMAIL PROTECTED]> wrote:
> Why then using tomcat at all? What's wrong with writing own app, which
> listens on a socket and does whatever it has to do? Before you have to
> rape tomcat to perform a task it was never designed for...
Yes, indeed. In many cases, it would s
On 4/3/06, Tp <[EMAIL PROTECTED]> wrote:
> > The hype friendly "continuation" name has no business being associated
> > with this particular feature, since the said feature is not
> > continuations (which is a fancy - and IMO forward thinking and
> > actually useful - programming model for implemen
On 4/3/06, Rajeev Jha <[EMAIL PROTECTED]> wrote:
> Tp wrote:
> > And there seems to be no workaround, because the connection will close
> > after the doGet() and doPost() method finishes (is that actually
> > true?). So, the only way to keep 3000 simultaneous connections is to
> > keep 3000 of thos
On 4/3/06, Tp <[EMAIL PROTECTED]> wrote:
> Hi,
>
> we have to develop a high performance chat based only on HTML and HTTP
> only for a television company. The biggest issue is performance. The
> chat's output window requires one open HTTP connection per client. This
> means, that when you have 3000
On 3/31/06, Bruno Georges <[EMAIL PROTECTED]> wrote:
> JBossWeb does. Soon to be released.
We're distributing a package for Tomcat too, but it's not fully tested yet.
http://labs.jboss.com/portal/index.html?ctrl:id=page.default.downloads&project=jbossweb
--
x
Rémy Mauchera
On 3/30/06, Markus Schönhaber <[EMAIL PROTECTED]> wrote:
> > The RuntimeException is to make it more noticeable in the logs. I mean
> > 953 hits on googling is quite alot of people having trouble. Would be
> > nice to cut that number down with an easy log statement that tomcat
> > could add!!!
>
On 3/28/06, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:
> Anyone have much experience with running on these. On tomcat 5.5, I have
> ran into many problems
> 1. exception fron ServletContextListener.contextInitialized causes the
> vague error of "Error listenerStart" with no details. Most people
On 3/28/06, Armand Rock <[EMAIL PROTECTED]> wrote:
> Thanks for the help...it works now...kind of...
> Http is no longer functioning 100% of the time (random images seem to not
> display anymore...
> getting rid of the APR changes fixes the problem...
> I'm going to have to take a look and see if t
On 3/23/06, Clemens Eisserer <[EMAIL PROTECTED]> wrote:
> under Tomcat 5.5.12 I see tons of uncontended thin locks on instances
> of java.lang.Vector, none of the beeing ever contended.
Some rarely used (and old) code is still using some vectors, but I
doubt you're using them (or your application
On 3/22/06, Rajeev Jha <[EMAIL PROTECTED]> wrote:
> In our case,the servlet is interfacing to the back-end that sends
> async events from time to time.
As you may have noticed, the HTTP protocol (and the Servlet API) are
not designed for this kind of usage. You can try to hack your way
through if
On 3/8/06, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:
> yeah, that makes sense. If you have a context referencing the datasource in
> question via ResourceLink it will be displayed. Datasources declared in
> contexts would also be shown.
>
> Whilst we are on this subject, can global datasources
On 3/8/06, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:
> hi Remy,
>
> the probe does not use JMX to read DBCP datasources or any datasources for
> that matter.
>
> Did you get any error or is it the case of datasource(s) missing from the
> list on "datasources" tab?
>
> If it is the latter could
On 3/7/06, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:
> It is a difficult question. I wrote it because of these reasons:
>
> 1. To see how busy the datasources are and be able to reset them without
> server restart.
I didn't get it to work (the JMX bean for the DBCP datasource was
available). Ho
On 3/4/06, James Reynolds <[EMAIL PROTECTED]> wrote:
>
> I'm working on setting up BASIC authentication using container managed
> security in Tomcat 5.5.15. However, It's not working so now I'm
> wondering if my set up is wrong. The JNDI DataSource definitely works,
> I'm not so sure about the re
On 2/28/06, Peter Lin <[EMAIL PROTECTED]> wrote:
> honestly, besides Weblogic, most servlet and ejb containers do not provide
> simple and clear instructions for tracing issues. With websphere, you have
> to buy an expensive license of WASD and even then debugging an issue won't
> be better in my e
On 2/28/06, Tomasz Nowak <[EMAIL PROTECTED]> wrote:
> Your right, the tone of my postings is inproper.
> I've been using 'free' software for almost 10 years now
> and I pretty well get the rules. My only excuse is the
> level of my frustration, based on recent Tomcat use.
>
> For now, the only cont
On 2/27/06, Andreas Schildbach <[EMAIL PROTECTED]> wrote:
> Boris Unckel wrote:
>
> > I have a workaround:
> > You provide a logging.properties in your webapp. All relevant parameters are
> > controlled per system -D properties.
>
> A workaround for what? Providing a logging.properties in my webapp
On 2/26/06, Andreas Schildbach <[EMAIL PROTECTED]> wrote:
> Could it be that all libraries I use go to the wrong log?
All your libraries, like Spring, will use their own logger names. All
these loggers are not defined in your configuration, so will all use
the handlers for the root logger (".handl
On 2/20/06, Tim Lucia <[EMAIL PROTECTED]> wrote:
> If you use the manager application to undeploy and redeploy (for rolling
> back, or for upgrading) then the old files will be removed undeploy, and the
> dates and times will not matter.
And also: http://issues.apache.org/bugzilla/show_bug.cgi?id=
On 2/18/06, Jon Saville <[EMAIL PROTECTED]> wrote:
> I'm seeing very similar issues on reloading since 5.5.12.
>
> I posted details on the 3rd Feb, but nobody seemed that
> interested...
>
> http://marc.theaimsgroup.com/?l=tomcat-user&m=113896054222793&w=2
>
> Question: what has changed in how log4
On 2/11/06, Matt Raible <[EMAIL PROTECTED]> wrote:
> Just to follow up on this, the settings below work - but HSQLDB
> doesn't seem to support nested transactions.
>
> <<< beginning the transaction >>>
> DBTest >> javax.transaction.NotSupportedException: Nested transactions not
> suppo
> rted
>
Since you're doing docs, META-INF/context.xml should be simplified to:
No servlet class reloading anymore (not useful to many people), and
the Transaction element has all the necessary defaults since it's a
special resource.
--
x
Rémy Maucherat
Developer & C
On 2/8/06, Matt Raible <[EMAIL PROTECTED]> wrote:
> > No. It's not useful to anyone (well, almost) either.
>
> Just curious - what do you mean? Are you saying that no one uses a
> JTA TransactionManager with Tomcat? Is it something you don't
> recommend? My guess is it's better to use a server li
On 2/7/06, Matt Raible <[EMAIL PROTECTED]> wrote:
> Thanks Remy - this is good stuff, I didn't know about the
> element. Is that new in 5.5.x? Is it documented
> anywhere?
No. It's not useful to anyone (well, almost) either.
> As far as the JARs location - this shouldn't matter should it? I c
On 2/7/06, Remy Maucherat <[EMAIL PROTECTED]> wrote:
> For 1), it's simple: Resources are bound in "comp/env", while the
> UserTransaction should go in "comp". ResourceLink has a special case
> for UserTransaction, so it works. There's a special Transac
On 2/7/06, Matt Raible <[EMAIL PROTECTED]> wrote:
> Howdy all,
>
> I'm trying to get JOTM working on Tomcat 5.5.x. I'm using 5.5.15 and
> I've run into some strange issues. More than anything, I'm looking
> for explanations and (hopefully) some help.
>
> I've updated the following tutorial for To
On 1/31/06, Blair Cooper <[EMAIL PROTECTED]> wrote:
> The following code generates an exception when getId() is called with
> Tomcat 5.5.15. In 5.5.7 it returned the session id.
>
> I realize that the session is being invalidated, thus valueUnbound()
> being
> called. I also realize that the servle
On 1/27/06, Boris Unckel <[EMAIL PROTECTED]> wrote:
> Hello Remy,
>
> nice to hear from you.
> O.K. So this problem is not solvable in JULI/x4juli. Is there a chance to
> initialize JUL (independently from any other backend) early enough in the
> bootstrap process?
> Second: How can we check Tomcat
On 1/26/06, Boris Unckel <[EMAIL PROTECTED]> wrote:
> Hi,
>
> I will try to fix this. Please post a bugzilla record with here at
> Apache (please post the id in this thread).
> Another good place for this special bug is
> http://developer.berlios.de/bugs/?group_id=5430
> of x4juli - http://www.x4ju
On 1/17/06, Chris Mooring <[EMAIL PROTECTED]> wrote:
> Hi All,
>
> I have just read various configuration documents for jk2 and jk. It seems as
> though support for jk2 is no longer available.
> Is jk the recommended connector to use now? It seems odd...like I am using a
> previous version.
>
> Als
On 1/6/06, Michael Echerer <[EMAIL PROTECTED]> wrote:
> In worst case you won't even achieve what you want using single thread
> mode because according to the servlet specification servlet containers
> are free to pool servlets, if it implements SingleThreadModel. Hence you
> could have multiple po
On 1/6/06, Michael Czeiszperger <[EMAIL PROTECTED]> wrote:
>
> On Jan 5, 2006, at 6:22 PM, Remy Maucherat wrote:
> Sorry, for the potentially redundant question, but to clarify, is the
> APR version of Tomcat officially released? The last time I checked it
> was not. I don&#
On 1/6/06, Christian Stalp <[EMAIL PROTECTED]> wrote:
> Hello out there,
> I want to build a servelt which access a database. To avoid
> race-conditions and to realize synchronous access, I decited to make a
> "Singe Thread" Servlet. But Eclipse told me that this is no longer a
> usable code.
>
> S
On 1/5/06, ALEX HYDE <[EMAIL PROTECTED]> wrote:
> Stupid question Remy but are you refering to the
> proces per java thread issue that had effected Linux?
> I am well behind the times so is this all resolved? I
> am soon to set-up a Tomcat server, preferably on Linux
> FC3 with a 2.6 kernal. Would
On 1/5/06, Michael Czeiszperger <[EMAIL PROTECTED]> wrote:
>
> On Jan 5, 2006, at 3:39 PM, Jess Holle wrote:
>
> > Also a Tomcat 5.5.12 (or better 5.5.15) with and without APR test
> > against recent IBM, Sun, and BEA offerings would be really nice :-)
> >
>
> We did a previous test with tomcat aga
On 1/5/06, Jess Holle <[EMAIL PROTECTED]> wrote:
> Michael Czeiszperger wrote:
>
> > On Jan 5, 2006, at 2:24 PM, Tim Funk wrote:
> >
> >> Interesting. In enterprise environments, I also hear it common to
> >> see antivirus software also run on windows servers too. (Yes, you
> >> read that correctly
On 1/5/06, Michael Czeiszperger <[EMAIL PROTECTED]> wrote:
> I thought that Tomcat users would be interested to know that we just
> published an in-depth comparison of Tomcat performance on Windows and
> Linux.
>
> The articles are available here:
>
> http://webperformance.com/library/reports
>
> I
On 1/3/06, Hasan, Nadeem <[EMAIL PROTECTED]> wrote:
> Hi all,
>
> I just upgraded our Tomcat installation on our dev box to 5.5.12 and I am
> seeing very strange results. Certain files are sent by Tomcat with a large
> hole in the middle. In the response header, it does report the size
> (Conten
On 12/16/05, Yogesh Prajapati <[EMAIL PROTECTED]> wrote:
> Is there something else I am missing that I need to look at?
http://issues.apache.org/bugzilla/show_bug.cgi?id=37808
--
x
Rémy Maucherat
Developer & Consultant
JBoss Group (Europe) SàRL
x
-
On 12/1/05, Joan K. Drejer (AH/LMD) <[EMAIL PROTECTED]> wrote:
> Hi
>
> At Ericsson we are considering using Jasper-runtime and Jasper-compile
> in a commercial product.
>
> However, we would like to know if the product contains encryption, and
> if you possibly know about which ECCN (Export code)
On 12/1/05, Nate Rock <[EMAIL PROTECTED]> wrote:
> debug="5"
> maxHttpHeaderSize="8192"
> maxThreads="150"
> minSpareThreads="25"
> maxSpareThreads="75"
> enableLookups="false"
> disableUploadTimeout="true"
> acceptCount="100"
>
> Lines 639-650 of the org.apache.coyote.Http11AprProtocol.java
>
> // FIXME: SSL implementation
> /*
> if( proto.secure ) {
> SSLSupport sslSupport=null;
> if(proto.sslImplementation != null)
>
On 11/30/05, Nate Rock <[EMAIL PROTECTED]> wrote:
> All to no avail =(
Cool, but how about really reading *all* the APR documentation. For
example, there's a SSLEngine attribute, also.
--
x
Rémy Maucherat
Developer & Consultant
JBoss Group (Europe) SàRL
xxx
On 11/30/05, Remy Maucherat <[EMAIL PROTECTED]> wrote:
> This issue also affects Hibernate. As it doesn't seem to be a Tomcat
> bug, but would be good to have a fix for, I've added possible
> workarounds for that (reflection code which sets as many static fields
> a
On 11/28/05, kurrele <[EMAIL PROTECTED]> wrote:
> Hi to everyone!! This is my first email to this list, hope is the correct
> one.
>
> I've been analyzing my code with a profiler (JProbe) because I was getting
> an
> OutOfMemoryException after a few redeploys of my application.
>
> After some tests
On 11/24/05, Eric Jain <[EMAIL PROTECTED]> wrote:
> After adding the APR library to the java.library.path [as described in
> http://tomcat.apache.org/tomcat-5.5-doc/apr.html], certain JSPs that
> produce a lot of output (but used to be served in under a second) are now
> very slow and produce incom
On 11/23/05, Akoulov, Alexandre [IT] <[EMAIL PROTECTED]> wrote:
> Hi all,
>
> I am in the process of upgrading from tomcat-3.3 to tomcat-5.5 and would
> greatly appreciate if you could let me know whether I understood tomcat-5.5's
> default logging correctly.
>
> As of tomcat 5.5 Context element
On 11/17/05, Dhaval Patel <[EMAIL PROTECTED]> wrote:
> Thanks for your response Remy. But I didnt quite get it. I need help
> configuring
> SSL with Tomcat on Windows XP. I read the documentation that I found. I could
> not
> solve the problem that's why I posted on forum. I wrote what I did. How
On 11/17/05, Dhaval Patel <[EMAIL PROTECTED]> wrote:
> Hello all,
>
>Then I read at some place that if you want APR you have do some extra
> configuration, which I followed in part 2.
>
> (2) Using OpenSSL.
>
>I installed OpenSSL. I read documentation about how to generate key and
> certifi
On 11/2/05, Johnny Tolliver <[EMAIL PROTECTED]> wrote:
> I use JULI for my servlet logging and am having trouble defining a custom
> formatter for console handler output. An excerpt of my logging.properties file
> is this:
>
> handlers=org.apache.juli.FileHandler,java.util.logging.ConsoleHandle
On 11/2/05, Stanislav Mironov <[EMAIL PROTECTED]> wrote:
> Hello All!
>
> I have upgraded Tomcat to 5.5.12 from 5.5.9.
> Now link https://host:8443 hangs forever trying to get response and
> http://host:8443 returns correct plain html page without SSL. So SSL
> actually doesn't work at all.
>
> My
76 matches
Mail list logo
