Tomcat 11 catalina.policy file removed

2025-04-16 Thread S Abirami
Hi All, After upgrading to Tomcat 11, I noticed Catalina.policy file removed from the tomcat. I haven't see any specific documentation regarding it in tomcat release note, migration guide etc. But Gen AI provides the following input, please let me know the following input is right/wrong? The

catalina.policy file not available Tomcat 11.0.0

2025-02-11 Thread S Abirami
Hi All, Tomcat catalina.policy file is not available from Tomcat 11.0.0. Is there any specific reason for the removal? Regards, Abirami.S

RE: Tomcat 11 and JDK 17 Upgraded from Tomcat 9 & JDK 8

2025-02-10 Thread S Abirami
sage- From: Rémy Maucherat Sent: Monday, February 10, 2025 4:20 PM To: Tomcat Users List Subject: Re: Tomcat 11 and JDK 17 Upgraded from Tomcat 9 & JDK 8 On Mon, Feb 10, 2025 at 11:41 AM S Abirami wrote: > > Hi Remm, > > Our application uses both standalone and Embedded Tomcat

RE: Tomcat 11 and JDK 17 Upgraded from Tomcat 9 & JDK 8

2025-02-10 Thread S Abirami
, 2025 3:38 PM To: Tomcat Users List Subject: Re: Tomcat 11 and JDK 17 Upgraded from Tomcat 9 & JDK 8 On Mon, Feb 10, 2025 at 10:46 AM S Abirami wrote: > > Hi , > > I am using a embedded tomcat while the below mentioned exception is > thrown when starting the Embedded

Tomcat 11 and JDK 17 Upgraded from Tomcat 9 & JDK 8

2025-02-10 Thread S Abirami
Hi , I am using a embedded tomcat while the below mentioned exception is thrown when starting the Embedded tomcat server when upgrading To Tomcat 11 and JDK 17 Upgraded from Tomcat 9 & JDK 8 Time: 2025-02-10 10:27:41.415, Level: FINE, Logger: org.apache.tomcat.util.compat.Jre19Compat org.apach

RE: Tomcat 9 to Tomcat 10 SSLHostConfig issue in Embedded Tomcat

2025-01-09 Thread S Abirami
, On 1/9/25 6:57 AM, S Abirami wrote: > After migrating from Tomcat 9 to Tomcat 10, there is an error to introduce > SSLHostConfig. > Introduced SSLHostConfig with Keystorefile and KeystorePassword as mentioned > below is not working and throwing error with file is tampered. >

Tomcat 9 to Tomcat 10 SSLHostConfig issue in Embedded Tomcat

2025-01-09 Thread S Abirami
Hi All, After migrating from Tomcat 9 to Tomcat 10, there is an error to introduce SSLHostConfig. Introduced SSLHostConfig with Keystorefile and KeystorePassword as mentioned below is not working and throwing error with file is tampered. SSLHostConfig sslHostConfig = new SSLHostConfig(); SSLHos

Re: [ANN] New committer: Dimitris Soumis

2024-07-05 Thread Jonathan S. Fisher
Many new committers lately, congrats to everyone! On Fri, Jul 5, 2024 at 2:25 PM Mark Thomas wrote: > > On behalf of the Tomcat committers I am delighted to announce that > Dimitris Soumis (dsoumis) has been voted in as a new Tomcat committer. > > Please join me in congratulating Dimitris. > > Ki

Re: [EXT]Re: Tomcat 10 session replication fails

2024-04-13 Thread Jonathan S. Fisher
Sort of off topic, but sort of related. If you're having tremendous trouble using the built in replication methods, we built a redis based session manager: https://github.com/exabrial/redex-sm Currently redex-sm only works with Tomcat 8.5, but it wouldn't be a big leap to make it work with Tomcat

EOL for Tomcat 9.0.x and Tomcat 10.1.x

2023-12-19 Thread Kaluva S
Hi, We are planning to migrate from tomcat 9.0.x to Tomcat 10.1.x but want to know about EOL for both the releases. On the official tomcat website, we couldn't find any information about this. If anyone knows, please share so that we will plan accordingly. Thanks in advance, Sreenivas K.

Re: [External] Re: Supporting Proxy Protocol in Tomcat

2023-11-27 Thread Jonathan S. Fisher
his thread. Is someone actively working on this? > > I am more than happy to contribute/help in any way to move this forward > quickly. > > > Thanks, > Adwait. > > On Tue, Sep 5, 2023 at 1:11 PM Mark Thomas wrote: > > > On 04/09/2023 15:41, Jonathan S. Fisher

Re: [External] Re: Supporting Proxy Protocol in Tomcat

2023-09-04 Thread Jonathan S. Fisher
ng proxy protocol > >>> support in Tomcat? > >> > >> I think that is a little too strong. At this point there is a proposed > >> approach and no one is objecting but until there is an actual patch to > >> discuss... > >> > >> K

Re: [External] Re: Supporting Proxy Protocol in Tomcat

2023-07-27 Thread Jonathan S. Fisher
; Yes and no. RemoteIP[Filter|Valve] insert/modify the data at a higher > level because that is where they sit but the data originates from the > SocketWrapper. > > > If some kind of UberConnector could be built which essentially does > > something like the fol

Re: [External] Re: Supporting Proxy Protocol in Tomcat

2023-07-26 Thread Jonathan S. Fisher
ssage- > > From: Amit Pande > > Sent: Wednesday, July 26, 2023 11:43 AM > > To: Tomcat Users List > > Subject: RE: [External] Re: Supporting Proxy Protocol in Tomcat > > > > Chris, Mark, > > > > Any thoughts on this? > > > > Mark,

Re: Problem with session timeout

2023-07-25 Thread Jonathan S. Fisher
Find all implementations of Session, then set breakpoiunt on session.invalidate() would be a good place to start. Another good place would be your SessionManager as it has several interesting methods. The JVM's JDI does not allow you to set breakpoint on an interface, but some IDE's have a magic t

Re: [External] Re: Supporting Proxy Protocol in Tomcat

2023-07-24 Thread Jonathan S. Fisher
erse-proxy > and I do terminate TLS. I also use it for load-balancing/fail-over, > caching, some authorization, etc. I wouldn't be able to use a TCP > load-balancer because I hide multiple services behind my reverse-proxy > which run in different places. It's not just s dumb pa

New Redis based SessionManager implementation: redex-sm

2023-07-12 Thread Jonathan S. Fisher
Hello Tomcat friends, We recently published to Maven Central (com.github.exabrial:redex-sm:1.0.2) a new Tomcat SessionManager that stores your serialized Sessions in Redis instance. Details and usage are available here: https://github.com/exabrial/redex-sm The advantage of using a SessionManager

RE: RHEL 8.6 ==> Tomcat Native 1.2.32 ==> OpenSSLEngine could not initialize

2023-06-22 Thread S Abirami
7:35 PM To: users@tomcat.apache.org Subject: Re: RHEL 8.6 ==> Tomcat Native 1.2.32 ==> OpenSSLEngine could not initialize Hello, On 6/22/23 07:47, S Abirami wrote: > Hi All, > > Our application using embedded tomcat 9.0.62 on RHEL linux environment. > Tomcat native version

RHEL 8.6 ==> Tomcat Native 1.2.32 ==> OpenSSLEngine could not initialize

2023-06-22 Thread S Abirami
Hi All, Our application using embedded tomcat 9.0.62 on RHEL linux environment. Tomcat native version :1.2.32 openssl version OpenSSL 1.1.1k After upgrading from RHEL 7.9 to RHEL 8.6 version, embedded tomcat throws an exception when starting the application for https. org.apache.catalina.uti

RE: CVE-2023-24998 : Apache Denial of Service

2023-03-16 Thread S Abirami
Thanks Mark -Original Message- From: Mark Thomas Sent: Thursday, March 16, 2023 2:34 PM To: users@tomcat.apache.org Subject: Re: CVE-2023-24998 : Apache Denial of Service On 16/03/2023 05:33, S Abirami wrote: > Hi All, > > Currently, In our product we are using 9.0.65 v

CVE-2023-24998 : Apache Denial of Service

2023-03-15 Thread S Abirami
Hi All, Currently, In our product we are using 9.0.65 version of Tomcat. We are not using FileUpload option in any of our application and in Servlet. We don't have any config to limit the file uploads also. Whether our attacker still able to perform a malicious upload to our server via url. Plea

CVE-2023-24998 : Apache Denial of Service

2023-03-15 Thread S Abirami
Hi All, Currently, In our product we are using 9.0.65 version of Tomcat. We are not using FileUpload option in any of our application and in Servlet. We don't have any config to limit the file uploads also. Whether our attacker still able to perform a malicious upload to our server via url. Plea

Re: Tomcat 9 crashes because of a Windows update

2023-03-02 Thread Katie S
losed the stderr.log to this email. - Katie Le jeu. 2 mars 2023 à 15:09, Mark Thomas a écrit : > On 02/03/2023 13:59, Katie S wrote: > > I'm using the Central Configuration Manager from Business Objects 4.0. > > I start Apache Tomcat for BI4, it says "running" and t

Re: Tomcat 9 crashes because of a Windows update

2023-03-02 Thread Katie S
I'm using the Central Configuration Manager from Business Objects 4.0. I start Apache Tomcat for BI4, it says "running" and then after a few minutes and without any action, the status becomes "stopped". - Katie Le jeu. 2 mars 2023 à 11:10, Mark Thomas a écrit : >

Re: Tomcat 9 crashes because of a Windows update

2023-03-02 Thread Katie S
Sorry for being unclear and thank you for your answer. I can start Tomcat but after a few minutes it stops working. And everytime I restart it, the behavior is the same. - Katie Le jeu. 2 mars 2023 à 09:39, Mark Thomas a écrit : > On 02/03/2023 08:28, Katie S wrote: > > Hello, >

Tomcat 9 crashes because of a Windows update

2023-03-02 Thread Katie S
Hello, Do you have any information on Tomcat 9 not working after some Windows Updates ? We have installed the KB5022838 on our Windows Server 2016 Standard and since this we can restart Tomcat but it stops working after only few minutes. We are sure about the fact that the Windows update is guilt

RE: Query: HSTS | Tomcat 9.0.50

2023-01-17 Thread Deepti Sharma S
s, Thomas Von: Deepti Sharma S Gesendet: Dienstag, 17. Januar 2023 05:00:35 An: Tomcat Users List Betreff: RE: Query: HSTS | Tomcat 9.0.50 Hi Olaf, Let me explain more on my use-case : 1. There is no reverse proxy in between tomcat and UA in my use case. 2.

RE: Query: HSTS | Tomcat 9.0.50

2023-01-16 Thread Deepti Sharma S
? Regards, Deepti Sharma PMP® & ITIL -Original Message- From: Olaf Kock Sent: 16 January 2023 13:56 To: users@tomcat.apache.org Subject: Re: Query: HSTS | Tomcat 9.0.50 On 16.01.23 06:57, Deepti Sharma S wrote: > Hello Team, > > Can you please help us for below query: >

Query: HSTS | Tomcat 9.0.50

2023-01-15 Thread Deepti Sharma S
Hello Team, Can you please help us for below query: Query : How to enable HSTS in Apache Tomcat on non-default ports? We have custom ports for http and https and we want to enable HSTS on those custom ports. Note: We could see HSTS is working with default ports 80/443 though it's not work

Tomcat support RHEL9

2023-01-08 Thread Deepti Sharma S
Hello Tomcat Team, Can you please confirm, if any Tomcat version is supported on/with RHEL9? Regards, Deepti Sharma PMP(r) & ITIL

RE: xsd version used for web.xml etc

2021-10-21 Thread S Abirami
Thanks a lot Mark. -Original Message- From: Mark Thomas Sent: Thursday, October 21, 2021 4:23 PM To: users@tomcat.apache.org Subject: Re: xsd version used for web.xml etc On 21/10/2021 10:37, S Abirami wrote: > Hi Thomas, > > How I can identify whether the schema validation e

RE: xsd version used for web.xml etc

2021-10-21 Thread S Abirami
: xsd version used for web.xml etc On 21/10/2021 09:45, S Abirami wrote: > Hi All, > > In web.xml, if we didn't define any xsd schema or dtd schema which version of > xsd will be loaded for Tomcat 9.0.45. By default none - whether a schema is defined or not. Schemas ar

RE: xsd version used for web.xml etc

2021-10-21 Thread S Abirami
Thanks Thomas. -Original Message- From: Mark Thomas Sent: Thursday, October 21, 2021 2:40 PM To: users@tomcat.apache.org Subject: Re: xsd version used for web.xml etc On 21/10/2021 09:45, S Abirami wrote: > Hi All, > > In web.xml, if we didn't define any xsd schema or dt

RE: xsd version used for web.xml etc

2021-10-21 Thread S Abirami
used for web.xml etc My guess, the one that is specified in TOMCAT_BASE/conf/web.xml -Original Message- From: S Abirami Sent: donderdag 21 oktober 2021 10:46 To: Tomcat Users List Subject: xsd version used for web.xml etc Hi All, In web.xml, if we didn't define any xsd schema o

xsd version used for web.xml etc

2021-10-21 Thread S Abirami
Hi All, In web.xml, if we didn't define any xsd schema or dtd schema which version of xsd will be loaded for Tomcat 9.0.45. Regards, Abirami.S

NIO write operation timeout with 8.5.x NioBlockingSelector

2021-09-20 Thread Mathias S
Hi all, we are using tomcat-embed (Tomcat 8.5.70) in our product which also contains a custom NIO implementation. So i think i cannot give you a configuration to reproduce the issue. Anyway, i will explain in short what happens. It is within the included BlockPoller class in the NioBlockingSelec

RE: TLSv1.3 Support in Tomcat

2021-06-29 Thread S Abirami
https://wiki.openssl.org/index.php/TLS1.3#Ciphersuites TLSv1.3 supports 5 cipher suites and none is in your list. - Daniel Savard Le mar. 29 juin 2021 à 01:44, S Abirami a écrit : > Hi Christopher, > > Below is my Connector element, sslEnabledProtocols =TLSv1.2

RE: TLSv1.3 Support in Tomcat

2021-06-29 Thread S Abirami
juin 2021 à 01:44, S Abirami a écrit : > Hi Christopher, > > Below is my Connector element, sslEnabledProtocols =TLSv1.2 ,TLS 1.3 > it is working fine with TLSv1.2. When sslEnabledProtocols=TLSv1.3, > Tomcat is started but, the browser unable to perform handshake with weba

RE: TLSv1.3 Support in Tomcat

2021-06-28 Thread S Abirami
, Abirami.S -Original Message- From: Christopher Schultz Sent: Monday, June 28, 2021 7:27 PM To: users@tomcat.apache.org Subject: Re: TLSv1.3 Support in Tomcat Abirami, On 6/28/21 07:16, S Abirami wrote: > TLSv1.3 support is available in Tomcat. > > I tried just updating s

RE: TLSv1.3 Support in Tomcat

2021-06-28 Thread S Abirami
Hi All, We are using Tomcat 9.0.46 and JDK 8u291 Regards, Abirami.S -Original Message- From: S Abirami Sent: Monday, June 28, 2021 4:47 PM To: Tomcat Users List Subject: TLSv1.3 Support in Tomcat Hi All, TLSv1.3 support is available in Tomcat. I tried just updating server.xml

TLSv1.3 Support in Tomcat

2021-06-28 Thread S Abirami
Hi All, TLSv1.3 support is available in Tomcat. I tried just updating server.xml[sslEnabledProtocols=TLSv1.3] and restarted tomcat. It doesn't work. Please let me know any other configuration also needs to be changed. Regards, Abirami.S

Tomcat JreMemoryLeakPreventionListener Testing scenario

2021-06-02 Thread S Abirami
Hi Team, As part of CISCAT Tomcat 9 benchmark, we have added JreMemoryLeakPreventionListener in server.xml. We understood that it prevents memory leak. Do you any tool (or) testcase to test this functionality is working fine in our product? Please let us know, if any input available. Regards,

BUG-64671

2021-05-07 Thread Deepti Sharma S
Hello Team, We would like to know if, https://bz.apache.org/bugzilla/show_bug.cgi?id=64671 this BUG has some workaround instead of upgrading the version of tomcat. Regards, Deepti Sharma PMP(r) & ITIL

RE: Embedded Tomcat 9.0.33

2021-03-21 Thread S Abirami
Thanks Christopher for detailed explanation with testing tools. -Original Message- From: Christopher Schultz Sent: Sunday, March 21, 2021 9:02 AM To: users@tomcat.apache.org Subject: Re: Embedded Tomcat 9.0.33 Abirami, On 3/20/21 11:36, S Abirami wrote: > We have deployed embed

Embedded Tomcat 9.0.33

2021-03-20 Thread S Abirami
Hi ALL, We have deployed embedded tomcat in RHEL 7 with jdk 1.8. For sweet32 vulnerability, we have configured jdk.tls.disabled.algorithm to remove the encryption cipher have 64bit block size. I need a clarification whether JDK configuration is enough for embedded tomcat to avoid sweet32 atta

RE: Embedded and Standalone Tomcat

2020-08-21 Thread S Abirami
Thanks Mark Thomas. -Original Message- From: Mark Thomas Sent: Friday, August 21, 2020 4:03 PM To: users@tomcat.apache.org Subject: Re: Embedded and Standalone Tomcat On 21/08/2020 11:27, S Abirami wrote: > Hi All, > > In our application, we used to create embedded tomcat in

Embedded and Standalone Tomcat

2020-08-21 Thread S Abirami
Hi All, In our application, we used to create embedded tomcat instance by taking a copy of lib jars from the Deployable Tomcat. It's working properly. I have noticed that there is some jars in Embed package https://mirrors.estointernet.in/apache/tomcat/tomcat-9/v9.0.37/bin/embed/apache-tomcat-9.

RE: SameSite attribute handling

2020-07-06 Thread S Abirami
11:07 PM To: Tomcat Users List Subject: Re: SameSite attribute handling -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Abirami, On 7/1/20 03:06, S Abirami wrote: > We can add the samesite attribute in set-cookie header through > context.xml entry in tomcat. Is there any other way, can

SameSite attribute handling

2020-07-01 Thread S Abirami
Hi All, We can add the samesite attribute in set-cookie header through context.xml entry in tomcat. Is there any other way, can we add samesite attribute in response of set-cookie header. Context changes reflecting issue in tenable vulnerable. Hence looking for any other way. I tried with

Tomcat rfc6265 Cookie Dates

2020-06-13 Thread S V Pavankumar
Hi, I am checking the RFC6265 as we wanted to switch to the RFC6265 Cookie processor. One thing I have noticed is around, the way cookie expires date is written to the response. As per the RFC the date should follow RFC1123 date format https://tools.ietf.org/html/rfc6265#section-4.1.1 expire

RE: context.xml under META-INF was not working

2020-06-11 Thread S Abirami
x27;t have SameSite attribute. Regards, Abirami.S -Original Message- From: Mark Thomas Sent: Thursday, June 11, 2020 8:19 PM To: Tomcat Users List Subject: RE: context.xml under META-INF was not working On June 11, 2020 2:32:51 PM UTC, S Abirami wrote: >Hi Mark, > >We are using A

RE: context.xml under META-INF was not working

2020-06-11 Thread S Abirami
. Regards, Abirami.S -Original Message- From: Mark Thomas Sent: Thursday, June 11, 2020 7:27 PM To: users@tomcat.apache.org Subject: Re: context.xml under META-INF was not working On 11/06/2020 12:46, S Abirami wrote: > Hi Mark, > > The below is the content of the co

RE: context.xml under META-INF was not working

2020-06-11 Thread S Abirami
Hi Mark, The below is the content of the context.xml Regards, Abirami.S -Original Message- From: Mark Thomas Sent: Thursday, June 11, 2020 5:12 PM To: users@tomcat.apache.org Subject: Re: context.xml under META-INF was not working On 11/06/2020 11:42, S Abirami wrote: > Hi

RE: context.xml under META-INF was not working

2020-06-11 Thread S Abirami
Hi All, I want to configure SameSite attribute to the specific web-application. For that, I have updated the context.xml of specific web application located in /META-INF/context.xml It is not working. Only the changes in global context.xml is working. Please guide to solve the issue. Regard

RE: Regarding context.xml changes impact other web service not deployed

2020-06-09 Thread S Abirami
: Mark Thomas Sent: Tuesday, June 9, 2020 1:50 PM To: users@tomcat.apache.org Subject: Re: Regarding context.xml changes impact other web service not deployed On 09/06/2020 06:59, S Abirami wrote: > Hi Team, > > In our product to address security vulnerability in context.xml,

RE: Regarding context.xml changes impact other web service not deployed

2020-06-09 Thread S Abirami
pache%2Ftomcat%2Futil%2Fhttp%2FLegacyCookieProcessor.java El mar., 9 jun. 2020 a las 7:59, S Abirami () escribió: > Hi Team, > > In our product to address security vulnerability in context.xml, > we have introduced following entry > > > > > After introducing the above line, I noticed f

Regarding context.xml changes impact other web service not deployed

2020-06-08 Thread S Abirami
Hi Team, In our product to address security vulnerability in context.xml, we have introduced following entry After introducing the above line, I noticed few rest service which is not deployed in that Tomcat also getting impact. Deployment Details Deployed :RHEL Tomcat Installatio

Clustering/Session Replication in docker swarm

2020-05-20 Thread Praveen Kumar K S
Hello, I'm not sure if this is the right forum to ask this question. Since this is a bigger community, I hope someone might have faced this issue and hope I will get some help. I'm seeing many posts achieving Tomcat session replication in docker swarm using traefik. But I just don't want to add a

Issue with Host Header Mismatch

2020-04-07 Thread Rajah Yoghindra K S
Hello everyone, Tomcat Version: 9.0.26 OS: Windows and Linux We recently upgraded from Tomcat 8.5.35 to 9.0.26 and in 9.0.26 there is change in default value of "allowHostHeaderMismatch" flag which is causing few issues for us. 8.5.35 - Default valu

RE: After upgraded to Tomcat 9.0.31, ISAPI Redirector is not "working" when SSL enabled in IIS

2020-03-11 Thread S V Pavankumar
Set this on AJP Connector in tomcat server.xml allowedRequestAttributesPattern="CERT_(ISSUER|SUBJECT|COOKIE|FLAGS|SERIALNUMBER)|HTTPS_(SERVER_(SUBJECT|ISSUER)|(SECRETKEYSIZE|KEYSIZE))" All on one line. I can see tomcat fixing this in 9.0.32 which isn't yet released. Thanks, P. -Original Mes

Re: Enhancement: New option 'persistAuthentication' for session manager

2020-02-18 Thread Jonathan S. Fisher
https://github.com/cklein05/tomcat/pull/1/files Remy: Thank you for the feedback, but please see the other threads about this. The feature is not there right now because not everyone can/wants to use the Delta Session Manager. For instance, we do _not_ want a p2p architecture as they create scala

Re: Enhancement: New option 'persistAuthentication' for session manager

2020-02-18 Thread Jonathan S. Fisher
Open the pull request in your own fork... this link should work: https://github.com/cklein05/tomcat/compare/cklein05:master...cklein05:session-manager-persist-authentication?expand=1 On Tue, Feb 18, 2020 at 6:42 AM Carsten Klein wrote: > Mark, > > > Please don't be put off by the number of comme

Re: Enhancement: New option 'persistAuthentication' for session manager

2020-02-17 Thread Jonathan S. Fisher
Can you open a PR so we can diff your changes? Very excited to see this! We used a workaround in a Valve to add the authentication information into the session. On Mon, Feb 17, 2020 at 11:31 AM Carsten Klein wrote: > Hi there, > > finally, I got my first Tomcat enhancement ready. You can view it

Re: cloud cluster

2020-02-16 Thread Jonathan S. Fisher
We're doing the second: sessions stored in a Redis cluster with sticky sessions. This topology is simple and it scales pretty easily until it doesn't anymore [couple thousand simultaneous users]. You'll need to judiciously use your debugger and unix tools to find bottlenecks, as they're often hidde

Re: Tomcat doesn't propogate Security Credentials during session failover

2020-02-12 Thread Jonathan S. Fisher
ption is true). He encouraged > > me to write an enhancement/patch and provide it as a Pull Request. > > > > The only problem for me is lack of time. Although the code itself > > is quite simple, the things making me holding back are the Git > > stuff, making Tomcat

Re: Tomcat doesn't propogate Security Credentials during session failover

2020-02-11 Thread Jonathan S. Fisher
Apologies, I'm not seeing how this helps, I don't see where authentication information is transmitted On Tue, Feb 11, 2020 at 5:39 PM Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Jon, > > On 2

Re: Tomcat doesn't propogate Security Credentials during session failover

2020-02-11 Thread Jonathan S. Fisher
> What do you mean by logged out > If it's one from Redisson, then you should look at their code and not Tomcat's code. So you have two tomcat nodes: A & B, clustered in any fashion (forget I mentioned redisson) of your choosing; let's say they're clustered using the built in tcp point-to-point r

Re: Re: TLS 1.3 with client auth fails with NOT_HANDSHAKING during handshake

2019-10-30 Thread Mathias S
> > That looks like a bug. Please open a Bugzilla issue. > > JSSE doesn't implement post-handshake authentication for TLSv1.3 but as > the Connector is configured with clientAuth="true" authentication > should > be happening during the initial handshake and, therefore, should work. > > Mark > Thank

TLS 1.3 with client auth fails with NOT_HANDSHAKING during handshake

2019-10-29 Thread Mathias S
Hi all, i installed Tomcat 9.0.27 on my Windows 7 machine and using the following java runtime to get support for TLSv1.3 Server built: Oct 7 2019 09:57:22 UTC Server version number: 9.0.27.0 Architecture: amd64 JVM Version: 13.0.1+9 JVM Vendor:Oracle Corp

Re: Any tutorials or hints about JSP using javax.script engines instead of Java?

2019-10-11 Thread George S.
ds, e-mail: users-h...@tomcat.apache.org -- George S. *MH Software, Inc.* Voice: 303 438 9585 http://www.mhsoftware.com

Re: confusions with conf/tomcat-users.xml setup

2019-07-25 Thread Hu, Zhiliang [AN S]
-gui,admin”. Even better, try to create new roles and assign them correctly. See if that works for you. Thanks, On Thu, 25 Jul 2019 at 12:35, Hu, Zhiliang [AN S] wrote: > I have Apache Tomcat/7.0.94 installed and running. However I had a hard > time to get to the ManagerApp and Host Mana

confusions with conf/tomcat-users.xml setup

2019-07-24 Thread Hu, Zhiliang [AN S]
I have Apache Tomcat/7.0.94 installed and running. However I had a hard time to get to the ManagerApp and Host Manager to work properly. Briefly: If I set up "conf/tomcat-users.xml" as in: -- The "/manager/html/" can get connected and "/host-manager/html" gets "404 Access Denied";

Re: Running sudo from a servlet

2019-05-25 Thread George S.
--- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org -- George S. *MH Software, Inc.* Voice: 303 438 9585 http://www.mhsoftware.com

Re: 2 instance of ParallelWebAppClassLoaders in Tomcat JVM

2019-03-15 Thread Shankar P S
"work/Catalina/localhost/ROOT" - The server.xml & context.xml is the same and they have very few custom configs. How can I debug from here? On Fri, Mar 15, 2019 at 1:30 AM Mark Thomas wrote: > On 14/03/2019 21:15, Shankar P S wrote: > > Version - Tomcat 8.5.38 > >

2 instance of ParallelWebAppClassLoaders in Tomcat JVM

2019-03-14 Thread Shankar P S
Version - Tomcat 8.5.38 OS - Centos 7.6 JVM - openjdk 1.8, 4 CPU We recently upgraded an existing server running a Spring 3.0 web app from Tomcat 8.5.35 to 8.5.38. After the upgrade, I noticed OutOfMemory exceptions several times. Increasing the heap size (-Xmx) several times upto nearly twice (f

RE: HTTP/2 SETTINGS Parameters and WINDOW_UPDATE : Tomcat:9.0.11

2018-10-29 Thread S Abirami
On 29/10/2018 12:36, S Abirami wrote: > Hi Mark, > > Thanks for response . > > Please confirm whether > > Windows_Update has Window Size Increment (31) is configurable in Tomcat. > SETTINGS_MAX_FRAME_SIZE : Whether this param is configurable in Tomcat and &g

RE: HTTP/2 SETTINGS Parameters and WINDOW_UPDATE : Tomcat:9.0.11

2018-10-29 Thread S Abirami
Thomas [mailto:ma...@apache.org] Sent: Monday, October 29, 2018 5:53 PM To: users@tomcat.apache.org Subject: Re: HTTP/2 SETTINGS Parameters and WINDOW_UPDATE : Tomcat:9.0.11 On 29/10/18 06:21, S Abirami wrote: > Hi Mark Thomas, > > Thanks for response. > > Need input on

RE: HTTP/2 SETTINGS Parameters and WINDOW_UPDATE : Tomcat:9.0.11

2018-10-28 Thread S Abirami
7, 2018 11:24 PM To: users@tomcat.apache.org Subject: Re: HTTP/2 SETTINGS Parameters and WINDOW_UPDATE : Tomcat:9.0.11 On 27/10/18 17:27, S Abirami wrote: > Hi All, > > I want your guidance how to set the below Setting Parameters and > Wndows_Update using Tomcat. > S

HTTP/2 SETTINGS Parameters and WINDOW_UPDATE : Tomcat:9.0.11

2018-10-27 Thread S Abirami
Hi All, I want your guidance how to set the below Setting Parameters and Wndows_Update using Tomcat. SETTINGS_HEADER_TABLE_SIZE, SETTINGS_ENABLE_PUSH, SETTINGS_INITIAL_WINDOW_SIZE etc which is mentioned 6.5.2 section in RFC 7540 Similarly How to set the Windows_Update using Tomcat whic

Embedded Tomcat 9.0.11 : Already port in use

2018-10-11 Thread S Abirami
Hi All, I have checked the port is not in use before allocating to the connector and started the tomcat. During start , it's mentioning that Port already in use. It is going and binding to the Application Server where this app is deployed. SERVER -- > Ran Embedded tomcat server in that

Re: IIS Connector Not Working

2018-08-06 Thread George S.
18 7:38 PM, George S. wrote: I'm having a rough time getting the IIS Connector working on a specific machine. I'm getting a 404 error when I request a file in my Tomcat application. I'm using version 1.2.43 of the ISAPI Redirector on Windows Server 2016 with IIS 10.0. I've car

IIS Connector Not Working

2018-08-06 Thread George S.
Tracing for 404 requests, and the log files aren't getting created by IIS for the failed request. Does anyone have any ideas? Is there another way to integrate with IIS via reverse proxy? I would REALLY appreciate any ideas. -- George S. *MH Software, Inc.* Voice: 303 438 9585 http://www.mhsoftware.com

Re: User session validation

2018-03-28 Thread George S.
n. If you're using SSL, I don't think intercepting the session ID would be possible. -- George S. *MH Software, Inc.* Voice: 303 438 9585 http://www.mhsoftware.com

Re: Granting permission to a single application-supplied JAR

2018-03-27 Thread George S.
8M3uu3FpDMmsfcRcYzQSZ1yCEharMLzKR6zn0c4odnJpUWmVzLnO brtsSvTBTsIlH3F7dlocMV63W+U= =xlk2 -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org -- George S. *MH Software, Inc.* Voice: 303 438 9585 http://www.mhsoftware.com

Re: HOME user folder change & tomcat HOME

2018-03-27 Thread George S.
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org -- George S. *MH Software, Inc.* Voice: 303 438 9585 http://www.mhsoftware.com

Tomcat 8.5.28 SSL - Cannot store non-PrivateKeys

2018-03-01 Thread George S.
e me a pointer on what to do here? -- George S. *MH Software, Inc.* Voice: 303 438 9585 http://www.mhsoftware.com

Re: Apache Tomcat 8.5.24 SSL Configuration

2017-12-22 Thread George S.
subscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org -- George S. *MH Software, Inc.* Voice: 303 438 9585 http://www.mhsoftware.com

Re: Apache Tomcat 8.5.24 SSL Configuration

2017-12-21 Thread George S.
4GQGuqS7c nm6gsOP6Wd/PiL67mVClJ6cN9LEPEqxs2QivK2/zzBcmYunXQK0GAbi25C5tG9Ha 4zB5VuRo0IjPmEKnRuqfZ2KcOVCQaJFbWgV0dJ9UWb7vO5662hYvSssX7jS6or5e /aq7VBV+GiEaWzZweAi8/k4R3wk= =DEHk -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional co

Re: daemon.sh and multiple tomcat instances

2017-12-07 Thread George S.
aking it more complicated than it needs to be? - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org -- George S. *MH Software, Inc.* Voice: 303 438 9585 http://www.mhsoftware.com

Contributor on Wiki

2017-12-07 Thread George S.
Could someone please add me (George Sexton) to the contributor group on the Tomcat Wiki? Thanks. -- George S. *MH Software, Inc.* Voice: 303 438 9585 http://www.mhsoftware.com

Re: SSL connectors

2017-12-05 Thread George S.
y appear as operations on the ThreadPool objects. Mark - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org -- George S. *MH Software, Inc.* Voice: 303 438 9585 http://www.mhsoftware.com

Re: How to run Tomcat in Synology

2017-11-29 Thread Antonio S . Cofiño
ail you alway can install the "vanilla" package from https://tomcat.apache.org/download-80.cgi assuming that you have the right Java version in your Synology box. Saludos Antonio S. Cofiño Tarjet: My intention is install Tomcat with MariaDB and MyPhpAdmin to run my web pages with s

Tomcat 8.5.23 Initialization PRNG/SSL

2017-10-27 Thread George S.
not my code. Anyhow, am I right that the exception is probably related to the connectors coming up before the PRNG? -- George S. *MH Software, Inc.* Voice: 303 438 9585 http://www.connectdaily.com

Re: Can i use tomcat 9.0.x version in production

2017-10-04 Thread s v n trimurthulu
Thanks Mark and Christopher On Wed, Oct 4, 2017 at 6:12 AM, Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Murthy, > > On 10/3/17 7:38 AM, s v n trimurthulu wrote: > > At present we are using 7.0.x

Can i use tomcat 9.0.x version in production

2017-10-03 Thread s v n trimurthulu
Hello There, At present we are using 7.0.x in our production environment. As we have received few CVE alerts we wanted to migrate it to latest version 9.0.x. But when i see the status of the 9.0.x release it is showing "Stable = No". So i request you to suggest me whether i can use the latest ver

Need to upgrade Tomcat version from 4.1.3 to 7 version on OS400(AS400).

2017-09-13 Thread Vinay A S
Hello, We have installed Apache Tomcat version 4.1.30 on our iSeries server(AS400). As it very old version, we are thinking to upgrade it to version 7. Please share detailed steps to upgrade it. Regards, Vinay A S

Re: Apache Tomcat 4.1.30 - not working with OS400 after upgrading the OS to V7R3 which uses Java 7/Java 8

2017-09-13 Thread Vinay A S
var (F4) and select *SYS and scroll for the JAVA_HOME. > > > or STRQSH and run java -version will also display the version. > > > > > On 8 September 2017 at 14:25, Vinay A S wrote: > > > Hi, > > > > Below error messages are recorded in the log txt file

RE: Encrypt Keystore password in server.xml 8.0.45

2017-09-11 Thread S Abirami
ssword= Please share your input. Regards, Abirami.S -Original Message- From: Mark Thomas [mailto:ma...@apache.org] Sent: Monday, September 11, 2017 4:03 PM To: Tomcat Users List Subject: Re: Encrypt Keystore password in server.xml 8.0.45 On 11/09/17 10:11, S Abirami wrote: > > Hi A

RE: Encrypt Keystore password in server.xml 8.0.45

2017-09-11 Thread S Abirami
Subject: Re: Encrypt Keystore password in server.xml 8.0.45 On 11/09/17 10:11, S Abirami wrote: > > Hi All, > > I have to encrypt keystore password in server.xml. https://wiki.apache.org/tomcat/FAQ/Password Mark

RE: Encrypt Keystore password in server.xml 8.0.45

2017-09-11 Thread S Abirami
setKeyStorePass .I could see the encryption happened successfully. But I am getting following error and server is not opening @Override public void setKeystorePass(String s) { try{ System.out.println( "This method called" + s );

  1   2   3   4   5   >