Re: Servlet 6.2 / Tomcat 12 - Welcome files

2025-06-25 Thread Christopher Schultz
Mark, On 6/25/25 9:58 AM, Mark Thomas wrote: On 25/06/2025 14:07, Mark Thomas wrote: I think I need to look at the rules for merging welcome resources. That might prompt some changes to the PR. At the moment, a is almost certain to match since it will likely be using extension mapping ma

Re: Updating configTest to include shutdown port validation

2025-06-22 Thread Christopher Schultz
Amit, On 6/20/25 11:32 AM, Amit Pande wrote: Thank you Mark for the feedback. Reason to ask for shutdown port availability was that, configtest already check that for connector ports. E.g. SEVERE: Failed to initialize component [Connector["nbhttps-jsse-nio-127.0.0.1-12345"]] org.apache.catal

Re: Unexpected behavior of dead-simple servlet

2025-06-19 Thread Christopher Schultz
Konstantin, On 6/18/25 6:08 PM, Konstantin Kolinko wrote: A quick review of all Filters that are running tells me that there are a few that can set response headers, but mostly are not in this particular case. The list of headers coming back in the response are: HTTP/1.1 200 Via: HTTP/1.1

Re: Unexpected behavior of dead-simple servlet

2025-06-18 Thread Christopher Schultz
Mark, On 6/18/25 11:02 AM, Christopher Schultz wrote: Mark, On 6/18/25 3:08 AM, Mark Thomas wrote: On 17/06/2025 21:13, Christopher Schultz wrote: All, I recently wrote a relatively simple Servlet (which is less and less common these days with frameworks, etc.) and I was surprised that I

Re: Unexpected behavior of dead-simple servlet

2025-06-18 Thread Christopher Schultz
Mark, On 6/18/25 3:08 AM, Mark Thomas wrote: On 17/06/2025 21:13, Christopher Schultz wrote: All, I recently wrote a relatively simple Servlet (which is less and less common these days with frameworks, etc.) and I was surprised that I got a chunked response. It's not interfering

Unexpected behavior of dead-simple servlet

2025-06-17 Thread Christopher Schultz
All, I recently wrote a relatively simple Servlet (which is less and less common these days with frameworks, etc.) and I was surprised that I got a chunked response. Here is the entirety of the servlet code: public class HtlloWorldServlet extends HttpServlet { @Override public vo

Re: [tomcat] Odd behavior enumerating http headers

2025-06-11 Thread Christopher Schultz
Alex, On 6/10/25 6:54 PM, Alex O'Ree wrote: Greetings I'm running tomcat v9.0.105 with a CXF based SOAP service (you know, the old school JAXWS services). Within that service, I had a need to retrieve a specific http header and i've been running into some inconsistent results. The tomcat server

Re: Certificates and keystores. I think I may have asked this before.

2025-06-10 Thread Christopher Schultz
James, On 6/9/25 11:53 AM, James H. H. Lampert wrote: Our customer Tomcat installations are, without exception, set up to use a Java Keystore file (mainly because that appeared to be the only option back when we started setting them up) I think this has come up before, but we have a customer

[ANN] Apache Tomcat 10.1.42 Available

2025-06-09 Thread Christopher Schultz
The Apache Tomcat team announces the immediate availability of Apache Tomcat 10.1.42. Apache Tomcat 10 is an open source software implementation of the Jakarta Servlet, Jakarta Pages, Jakarta Expression Language, Jakarta WebSocket, Jakarta Authentication and Jakarta Annotations specifications.

Re: Tomcat Performance from JMX data

2025-06-04 Thread Christopher Schultz
Mark, On 6/4/25 1:43 PM, Timothy Resh wrote: I have a production server with JMX enabled. However, we cannot install any additional software to do performance monitoring. We can, however, extract data from the MBeans and transfer it elsewhere for analysis. I saw the ant tasks in the Tomcat do

Re: Problem Accessing https

2025-06-01 Thread Christopher Schultz
Jerome, On 5/31/25 5:53 PM, Jerome A. Wendell wrote: The problem has been resolved. My server hosting company provides an interface to make changes on the firewall, so being a Windows server, we don't use the Windows Defender firewall (it is disabled). It appears that someone at the server hos

Re: Problem Accessing https

2025-05-31 Thread Christopher Schultz
Jerome, On 5/30/25 10:04 AM, Jerome A. Wendell wrote: I am in the process of setting up a new server to replace our existing server. I run Tomcat 9.0.73 with Geoserver 2.22.2 for the mapping on our web site. It is a Windows server running Windows Server 2019. I have been using this setup on o

Re: Tcnative-2 PQC support

2025-05-28 Thread Christopher Schultz
x27;m working on some updates. I'll also start a discussion on dev@ about switching the convenience builds to use OpenSSL 3.5 since that is the new LTS version. Looks like we are heading towards consensus to do that - assuming I can get the build working. Mark Mark Fed

Re: Consolidating and harmonizing users from multiple realms

2025-05-28 Thread Christopher Schultz
Michael, On 5/26/25 9:14 AM, Michael Osipov wrote: Hi folks, I seek guidance on a larger problem I need to solve where I do have a few ideas, but am also considering to what degree it would make sense to add code to the Tomcat codebase for the common good: I have a realm impl called MyRealm wh

Re: adding new SSL certificate without restarting tomcat

2025-05-28 Thread Christopher Schultz
Ivano, On 5/28/25 4:17 AM, Ivano Luberti wrote: Thanks for all the responses. I try to be more clear. My server.xml configuration contains a few SSLHostConfig configurations like this certificateKeystoreFile="/etc/ssl/LetsEncrypt/host domain.it/host domain.it.pfx" certificateKeystoreP

Re: Apache Tomcat 9 SAML Setup With Active Directory

2025-05-22 Thread Christopher Schultz
William, On 4/9/25 11:09 AM, William Crowell wrote: Is there any current up-to-date documentation on how to setup Apache Tomcat 9 with SAML and Active Directory that is not AI generated? I know you can do Keycloak IdP with Tomcat, but I was trying to avoid setting up an identity provider. I am

Re: Adding a CRL to certificate client authentication causes connector to stop responding to all requests having a client certificate.

2025-05-22 Thread Christopher Schultz
me to duplicate your setup. Guess the finger increasingly points to the CRL checking code. Agreed, at least in theory. -chris On Wed, 21 May 2025 16:29:10 -0500 Christopher Schultz wrote --- Alex, On 5/21/25 1:26 PM, My Subs wrote: To test this, I set certificateRevocationListPath to

Re: Adding a CRL to certificate client authentication causes connector to stop responding to all requests having a client certificate.

2025-05-21 Thread Christopher Schultz
ificate, and use ONLY that self-signed certificate in your trust store, and have the client send that to the server? It will be easier for me if I just have to deal with a single cert on either side of the connection rather than set up a whole signing authority, etc. before I'm able to

Re: Tcnative-2 PQC support

2025-05-21 Thread Christopher Schultz
chris On Wed, May 21, 2025, 13:35 Christopher Schultz < ch...@christopherschultz.net> wrote: Federico, On 5/21/25 12:27 PM, Christopher Schultz wrote: Federico, On 5/21/25 10:58 AM, federico bustamante wrote: Hi! Did anyone have any luck building tcnative-2.dll with Openssl 3.5 to add P

Re: Tcnative-2 PQC support

2025-05-21 Thread Christopher Schultz
Federico, On 5/21/25 12:27 PM, Christopher Schultz wrote: Federico, On 5/21/25 10:58 AM, federico bustamante wrote: Hi! Did anyone have any luck building tcnative-2.dll with Openssl 3.5 to add Post Quantum Cryptography support? I tried following the steps in the wiki, but didn't have any

Re: Tcnative-2 PQC support

2025-05-21 Thread Christopher Schultz
Federico, On 5/21/25 10:58 AM, federico bustamante wrote: Hi! Did anyone have any luck building tcnative-2.dll with Openssl 3.5 to add Post Quantum Cryptography support? I tried following the steps in the wiki, but didn't have any luck (tried with cmake and nmake). Have you been able to compil

Re: Adding a CRL to certificate client authentication causes connector to stop responding to all requests having a client certificate.

2025-05-21 Thread Christopher Schultz
clear, this is my current :                         Thanks for posting the whole thing. -chris On Fri, 09 May 2025 13:46:35 -0500 Christopher Schultz wrote --- Alex, On 5/9/25 2:11 PM, My Subs wrote: I have tested on Tomcat 10.1.40 with

Re: CRL verification broken?

2025-05-19 Thread Christopher Schultz
Alex, On 5/19/25 9:44 AM, My Subs wrote: Ten days ago, I wrote reporting that CRL verification is not working on Tomcat 10.1.40. But I have not heard back, since. Is this feature expected to remain broken? It is not working either on 11.0.6. Did you see my reply? -chris Hello Chuck, I

Re: Still unable to get exception info from StandardContext in log output

2025-05-15 Thread Christopher Schultz
David, On 5/14/25 3:50 PM, KARR, DAVID wrote: I've tried several times to configure tomcat-embed-core in SpringBoot to give me better log info when Tomcat fails to start up. I thought I had this working, but apparently I was mistaken. I figured out how to get this information by stepping th

Re: Adding a CRL to certificate client authentication causes connector to stop responding to all requests having a client certificate.

2025-05-09 Thread Christopher Schultz
Alex, On 5/9/25 2:11 PM, My Subs wrote: I have tested on Tomcat 10.1.40 with Native Library 1.3.1 running on JDK 21.0.7+6. The result is exactly the same as described before. The connector below works well with client authentication, until I add the caCertificatePath attribute. There are no e

Re: Null Byte Injection?

2025-05-09 Thread Christopher Schultz
James, On 5/9/25 1:49 PM, James H. H. Lampert wrote: On 5/9/25 10:21 AM, Christopher Schultz wrote: . . . A lot of this comes from the fact that Tomcat is written in Java which does not use null-terminated strings. A null byte in a string in Java is not special in any way, and so it can'

Re: Null Byte Injection?

2025-05-09 Thread Christopher Schultz
James, On 5/9/25 11:43 AM, James H. H. Lampert wrote: One of the customers whose Tomcat installation we manage brought up the possible threat of null byte injection. Is there anything within Tomcat itself that can mitigate this? Or is it purely something I need to take up with our webapp peop

Re: Skip resource path in TLD scanner?

2025-05-08 Thread Christopher Schultz
Jakub, On 5/7/25 3:26 PM, Jakub Królikowski wrote: On Sat, Apr 29, 2017 at 12:01 PM Mark Thomas wrote: On 28/04/17 17:00, Matt Cosentino wrote: Yes, it's other folders within WEB-INF. I turned on the TldScanner logging and it is definitely what is causing the delay. My situation probably isn

Re: Content type unknown after upgrading Tomcat 10.1.39 => 10.1.40

2025-05-05 Thread Christopher Schultz
Thorsten, On 5/2/25 2:49 PM, Thorsten Heit wrote: please excuse the long delay in answering (unplanned holidays...) Tomcat is never going to figure out what MIME type should be used for a request like "/my/servlet/app?version=!!1.22.32-4-g8a3c060!!" So I think Mark is probably right (well, h

Re: multipart and Apache Tomcat 11

2025-05-02 Thread Christopher Schultz
Ernesto, On 5/1/25 8:51 PM, Ernesto Reinaldo Barreiro wrote: We have an Apache Wicket application that I just ported to wicket 10. The application works as expected with the latest Tomcat 10.1.40. But our application does not work with Tomcat 11.0.6 because file upload (multipart processing is b

Re: Help with Cluster Setup on Tomcat 9

2025-05-02 Thread Christopher Schultz
g a default session configuration? -chris On 26/4/2025 5:29 am, Christopher Schultz wrote: Zoran, On 4/24/25 4:21 AM, Zoran Avtarovski wrote: Thanks Chuck, I missed that and will implement. Bigger problem is that PersistentManager is incompatible with Clusters so we have to migrate back to m

Re: What is a reasonable performance degradation?

2025-05-01 Thread Christopher Schultz
Rainer and Doug, On 4/30/25 12:47 PM, Rainer Jung wrote: Am 30.04.25 um 15:59 schrieb Doug Whitfield: Hi folks, This feature was added in 9.0.90: The system property org.apache.catalina.connector.RECYCLE_FACADES will now default to true if not specified, which will in turn set the default va

Re: global web.xml question

2025-04-29 Thread Christopher Schultz
ABT, On 4/29/25 11:25 AM, A Name wrote: On Tue, Apr 29, 2025 at 10:54 AM Christopher Schultz < ch...@christopherschultz.net> wrote: Are you able to view the sources of the application? Are you (or your team) knowledgeable enough about the code to make such changes? IMHO, I would take th

Re: global web.xml question

2025-04-29 Thread Christopher Schultz
ABT, On 4/29/25 8:23 AM, A Name wrote: On Mon, Apr 28, 2025 at 1:07 PM Mark Thomas wrote: On 28/04/2025 16:35, Christopher Schultz wrote: ABT, On 4/28/25 9:05 AM, A Name wrote: We are looking at adding a second instance of our app (named differently -- myappA and myappB) to our Tomcat 9

Re: When was the first stable GA release of Apache Tomcat 11.0.x?

2025-04-29 Thread Christopher Schultz
William, On 4/29/25 7:04 AM, William Crowell wrote: Just for my clarification: When was the first stable GA release of Apache Tomcat 11.0.x? I believe it was October 9th, 2024, but I did see the Jakarta EE Platform Web Profile 11 was released on March 30th, 2025: https://projects.eclipse.org/p

Re: global web.xml question

2025-04-28 Thread Christopher Schultz
ABT, On 4/28/25 9:05 AM, A Name wrote: We are looking at adding a second instance of our app (named differently -- myappA and myappB) to our Tomcat 9. We currently have the app installed at a number of customer locations, we are looking at dropping 1 app Currently, our database connections are

Re: tomcat9 - Connection refused/closed and parse error

2025-04-28 Thread Christopher Schultz
Ramesh, On 4/28/25 7:00 AM, Ramesh B R wrote: The application hosted on tomcat9 exposes soap api which is consumed by SAP. On a daily basis we are getting 200 thousands transactions and out of that we could see around 1000 to 2000 failed transactions due to CONNECTION REFUSED, CONNECTION CLOSED

Re: Help with Cluster Setup on Tomcat 9

2025-04-25 Thread Christopher Schultz
Zoran, On 4/24/25 4:21 AM, Zoran Avtarovski wrote: Thanks Chuck, I missed that and will implement. Bigger problem is that PersistentManager is incompatible with Clusters so we have to migrate back to memory based sessions and use clusters to share sessions. I would have thought that cluster

Re: tomcat 11 tomcat-util.jar is contains a soon to be removed class

2025-04-25 Thread Christopher Schultz
Rick, On 4/24/25 10:47 AM, Rick Noel wrote: Hello, When I upgraded to tomcat 11.0.5 and Java 24, Tomcat log gives this warning.. WARNING: A terminally deprecated method in sun.misc.Unsafe has been called WARNING: sun.misc.Unsafe::invokeCleaner has been called by org.apache.tomcat.util

Re: Best practices to set heap memory

2025-04-22 Thread Christopher Schultz
Mark, On 4/22/25 3:38 AM, Mark Thomas wrote: On 21/04/2025 17:49, Christopher Schultz wrote: Ramesh, On 4/21/25 1:06 AM, Ramesh B R wrote: How to decide on heap memory size? is it 25% of total memory? or 50% total memory? What is the ideal value (in %) for heap memory ? Only you can

Re: Best practices to set heap memory

2025-04-21 Thread Christopher Schultz
Ramesh, On 4/21/25 1:06 AM, Ramesh B R wrote: How to decide on heap memory size? is it 25% of total memory? or 50% total memory? What is the ideal value (in %) for heap memory ? Only you can answer that question about your own application environment. The percentage of total memory is comple

Re: Tomcat 9.0.104 Crashing at Startup on RHEL 8.4

2025-04-20 Thread Christopher Schultz
Mark, On 4/17/25 4:56 PM, Mark Thomas wrote: On 17/04/2025 20:32, RAY, DAVID wrote: I updated from Tomcat 9.0.102 to 9.0.104 on two RHEL servers.  Both are 'crashing' at startup after the update.    Version 9.0.102 and prior versions ran fine.  No issues.  Version 9.0.104 is crashing at start

Re: Apache Tomcat 12+

2025-04-20 Thread Christopher Schultz
Rémy, On 4/17/25 11:47 AM, Rémy Maucherat wrote: On Thu, Apr 17, 2025 at 5:16 PM William Crowell wrote: Hi, A few questions on the future direction of the project. It seems like Project Panama is still in preview mode as of JDK 24. Is that correct? No, it's a stable regular part of Java

Re: Content type unknown after upgrading Tomcat 10.1.39 => 10.1.40

2025-04-20 Thread Christopher Schultz
Thorsten, On 4/17/25 1:54 AM, Thorsten Heit wrote: Hi Chris, That definitely sounds odd. Do you have anything on the network between the client (browser) and the server (Tomcat)? Specifically, anything like a load-balancer, proxy, or similar? I just want to remove other possible causes befo

Re: Content type unknown after upgrading Tomcat 10.1.39 => 10.1.40

2025-04-16 Thread Christopher Schultz
Thorsten, On 4/16/25 2:35 PM, Thorsten Heit wrote: long time Tomcat user, but first time I'm posting, so hi to you all :-) I'm suffering a strange phenomenon after I upgraded Tomcat on one of our virtual machines from 10.1.39 to 10.1.40: When I open the link to an application being served by

Re: Problem when put a one-byte file partially

2025-04-15 Thread Christopher Schultz
Chenjp, On 4/14/25 5:46 AM, Justin Chen wrote: Main branch: Receive unexpected 400 for curl put with content-range header value "bytes 0-0/1" and -d c. PR submitted. I think HTTP 400 is the correct response for this. You are saying "I'd like to update bytes 0-0 (a zero-width update) with th

Re: 10.1.x [ANN] are missing for x >= 33

2025-04-10 Thread Christopher Schultz
Charles, On 4/9/25 6:57 PM, Charles Slivkoff wrote: I noticed this in February and have attempted multiple times to contact the list owners and have received no response. There are no posts for Tomcat 10.1.x to tomcat-announce after 33 on 2024-11-11. https://lists.apache.org/thread/pbovsrrm11j

Re: Your connection is not private Issue

2025-04-10 Thread Christopher Schultz
Uday, On 4/10/25 2:44 AM, Uday Upadhyay wrote: I'm experiencing an issue when accessing the production web servers without using the .xxx.com domain. The browser displays a message stating, "Your connection is not private." This problem occurs in Edge, Chrome, and Firefox, while the developmen

Re: 9.0.102 sessions

2025-04-09 Thread Christopher Schultz
Greg, On 4/9/25 7:22 AM, Greg Huber wrote: I have noticed that seems I have alot of sessions open, when  looking in the application manager.  It was was 800+.  I don't remember seeing it this high before.  If I refresh the screen I can see the number going up slowly.  I have not made any chang

Re: HOWTO: the right way to configure security constraints to protect CGI scripts in web.xml

2025-04-09 Thread Christopher Schultz
Mark, On 4/8/25 5:40 PM, Mark Thomas wrote: 8 Apr 2025 21:45:50 Christopher Schultz : Justin, On 4/8/25 3:16 AM, Justin Chen wrote: Dear users and supporters, Currently I have two CGI scripts: 1. "/cgi-bin/update" //an administrative command, required role="admin" 2. &

Re: HOWTO: the right way to configure security constraints to protect CGI scripts in web.xml

2025-04-08 Thread Christopher Schultz
Justin, On 4/8/25 3:16 AM, Justin Chen wrote: Dear users and supporters, Currently I have two CGI scripts: 1. "/cgi-bin/update" //an administrative command, required role="admin" 2. "/cgi-bin/updateOrder" //update order, required role="biz" In order to protect above endpoints via web.xml secur

Re: Question About Tomcat 11.0.5

2025-04-08 Thread Christopher Schultz
Juan, On 4/6/25 9:36 AM, juan wrote: I read it But couldn't make it work After hours i got it : This configuration looks acceptable at first glance. When you use this configuration, you said you "couldn't make it work". Can you be more spec

Re: Headless Mode

2025-04-08 Thread Christopher Schultz
William, On 4/7/25 2:28 PM, William Crowell wrote: I am running Apache Tomcat 9.0.97 on Windows Server 2022 using Oracle’s JDK 1.8.0_441-b07. Anytime I generate a thread dump I see an AWT-Windows thread. Should this thread not be there when I am specifying the JVM to run in headless mode? -

Re: start the server

2025-04-03 Thread Christopher Schultz
Lei, On 4/3/25 3:37 AM, 2428694096 wrote: It is a Windows Server running on a laptop. How did you install Tomcat? -chris 发件人:Christopher Schultz - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For

Re: NIO Thread Madness

2025-03-31 Thread Christopher Schultz
William, On 3/31/25 3:59 PM, William Crowell wrote: Oracle’s ojdbc8.jar version 19.25.0.0.0 which should support JDBC 4.2: They I don't think you are experiencing what was reported in DBCP-599. -chris From: Christopher Schultz Date: Monday, March 31, 2025 at 3:50 PM To:

Re: NIO Thread Madness

2025-03-31 Thread Christopher Schultz
omcat Users List Subject: Re: NIO Thread Madness Very good idea Chriis. Thank you. Regards, William Crowell From: Christopher Schultz Date: Friday, March 28, 2025 at 12:05 PM To: users@tomcat.apache.org Subject: Re: NIO Thread Madness William, On 3/26/25 7:06 PM, William Crowell wrote: That max

Re: NIO Thread Madness

2025-03-28 Thread Christopher Schultz
arate pool. -chris From: Christopher Schultz Date: Wednesday, March 26, 2025 at 6:57 PM To: users@tomcat.apache.org Subject: Re: NIO Thread Madness William, On 3/25/25 2:51 PM, William Crowell wrote: Mark, I think we might have found something. I think the DBCP2 connection pool is retur

Re: Additional Property File For Substitution Variables

2025-03-28 Thread Christopher Schultz
William, Sebastian, and Mark, On 3/27/25 12:00 PM, Mark Thomas wrote: On 27/03/2025 14:54, William Crowell wrote: Sebastian, Thanks for your reply.  I did know about environment variables.  I would be concerned about someone doing a “ps -ef” on the box and getting the password from the comma

Re: start the server

2025-03-28 Thread Christopher Schultz
To whom it may concern, On 3/27/25 4:05 AM, 2428694...@qq.com wrote: How to start the tomcat server? What kinda server? -chris - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: u

Re: NIO Thread Madness

2025-03-26 Thread Christopher Schultz
. Which port/protocol are you using to connect to Tomcat? HTTP and 8080? Are you connecting directly to Tomcat or is there a proxy involved at all? Mark Regards, William Crowell From: Christopher Schultz Date: Tuesday, March 25, 2025 at 7:20 AM To: users@tomcat.apache.org Subject: Re: NIO Th

Re: NIO Thread Madness

2025-03-25 Thread Christopher Schultz
William, On 3/24/25 2:56 PM, William Crowell wrote: I am running Apache Tomcat 9.0.97 on Windows Server 2022. I’m running Oracle JDK 1.8.0_371-b11 with a 4GB min heap and a 16GB max heap. I have an application deployed on this server that is hitting an Oracle database server. I have noticed

Re: [OT] NIO Thread Madness

2025-03-25 Thread Christopher Schultz
William, On 3/24/25 2:56 PM, William Crowell wrote: I am running Apache Tomcat 9.0.97 on Windows Server 2022. I’m running Oracle JDK 1.8.0_371-b11 with a 4GB min heap and a 16GB max heap. Might I suggest that you stick with both min and max heap sizes set to 16GiB? If you expect to run for

Community over Code North America 2025 Call for Presentations is OPEN

2025-03-24 Thread Christopher Schultz
All, Anyone who has ever considered doing a presentation at a Community over Code Conference (formerly ApacheCon), please head over to the Call for Presentations page and submit a proposal: https://communityovercode.org/call-for-presentations/ You do NOT need to have anything ready to submit

Re: Verifying tomcat downloads: PGP keys unavailable at https://keys.openpgp.org

2025-03-20 Thread Christopher Schultz
Maucherat with key fingerprint 48F8E69F6390C9F25CFEDCD268248959359E722B Present in the file. --- I tried also to check for the keys mentioned in the KEYS file for tomcat10: https://downloads.apache.org/tomcat/tomcat-10/KEYS Yor old key here is no more mentioned. The actual key (associate

Re: Tomcat not releasing connector port at shutdown

2025-03-20 Thread Christopher Schultz
Jason, On 3/19/25 1:53 PM, Jason Countryman wrote: Hello, I'm using Tomcat 10.1.34 on Debian Bookworm. I have a multiple CATALINA_HOME one CATALINA_BASE configuration, which works perfectly, most of the time. There are 4 CATALINA_HOME setups. The issue is that one of these CATALINA_BASE se

Re: context path version number with parallel deployment

2025-03-17 Thread Christopher Schultz
Азат, On 3/17/25 8:53 AM, Усманов Азат Анварович wrote: Hi everyone! is it possible to display current version number in a jsp page or servlet when using parallel deployment . using some property. Currently when building an app war we use git to calculate last revision number, store it in

Re: Struggling to get trace/debug logging from Tomcat components

2025-03-14 Thread Christopher Schultz
Konstantin, On 3/14/25 9:58 AM, Konstantin Kolinko wrote: чт, 13 мар. 2025 г. в 20:37, Christopher Schultz : Konstantin, On 3/13/25 12:34 PM, Christopher Schultz wrote: Konstantin, On 3/13/25 10:55 AM, Konstantin Kolinko wrote: чт, 13 мар. 2025 г. в 16:42, Christopher Schultz : All, I

Re: Struggling to get trace/debug logging from Tomcat components

2025-03-13 Thread Christopher Schultz
Konstantin, On 3/13/25 12:34 PM, Christopher Schultz wrote: Konstantin, On 3/13/25 10:55 AM, Konstantin Kolinko wrote: чт, 13 мар. 2025 г. в 16:42, Christopher Schultz : All, I really should be able to figure this out for myself but I'm frustrated and might just need someone to sh

Re: Struggling to get trace/debug logging from Tomcat components

2025-03-13 Thread Christopher Schultz
Konstantin, On 3/13/25 10:55 AM, Konstantin Kolinko wrote: чт, 13 мар. 2025 г. в 16:42, Christopher Schultz : All, I really should be able to figure this out for myself but I'm frustrated and might just need someone to show me that I'm spelling something wrong. I'm trying

Struggling to get trace/debug logging from Tomcat components

2025-03-13 Thread Christopher Schultz
All, I really should be able to figure this out for myself but I'm frustrated and might just need someone to show me that I'm spelling something wrong. I'm trying to get all logs from the CsrfPReventionFilter. I know it's working because I get 403 responses when it's enabled and don't get the

Re: [SECURITY] CVE-2025-24813 Potential RCE and/or information disclosure and/or information corruption with partial PUT

2025-03-12 Thread Christopher Schultz
Darryl, On 3/12/25 1:23 PM, Darryl Baker wrote: For us the CVSS score is a way to determine how deeply to investigate and more importantly to describe the criticality to management in a way they understand. If you haven't changed the default configuration for the DefaultServlet from readonly="t

Re: Tomcat 9.0.98 Performance hits AWS 100% CPU

2025-03-12 Thread Christopher Schultz
or. Right-click the process, select Properties, and then select the Threads tab. Sort by CPU column and note thread ID. Note top CPU consuming thread IDs. Convert those numbers to hex values and search it in the thread dumps. On Sat, Mar 8, 2025, 5:31 AM Christopher Schultz < ch...@christopher

Re: Tomcat 9.0.98 Performance hits AWS 100% CPU

2025-03-07 Thread Christopher Schultz
Chuck, On 3/7/25 5:38 PM, Chuck Caldarale wrote: On 2025 Mar 7, at 16:06, Timothy Resh wrote: Dear Apache Support Team, I'm running Tomcat 9.0.98 in the AWS Cloud. After several days of use, we see that the CPU utilization eventually reaches 100% in the Cloud, but when we RDP into the Serve

Re: Async servlet and request recycle synchronization

2025-03-04 Thread Christopher Schultz
François, On 3/4/25 10:32 AM, François Rajotte wrote: Hi, I'm looking for advice on how to properly synchronize asynchronous servlets that use the Java servlet 3.0 async APIs. Especially, I'm trying to avoid having the servlet experience IllegalStateExceptions when accessing HttpServletRequest

Re: Tomcat 10.1.36 Configuration Question: Client Certificate(s) missing from servlet request object

2025-02-26 Thread Christopher Schultz
Robert, On 2/25/25 5:59 PM, Robert Turner wrote: Tomcat 10.x uses the jakarta versions of the API, and I believe all the attributes have been renamed: "javax.servlet.request.X509Certificate" -> "jakarta.servlet.request.X509Certificate" +1 This is documented in Jakarta Servlet Specification[1

Re: The future of Tomcat 9

2025-02-25 Thread Christopher Schultz
James, On 2/25/25 11:59 AM, James H. H. Lampert wrote: On 2/25/25 8:26 AM, Chuck Caldarale wrote: Jakarta EE - all the related javax classes have been renamed to jakarta. https://tomcat.apache.org/whichversion.html Thanks. I've just asked the Java list over at Midrange.com about how this a

Re: Subject: Issue with Non-Printable Characters in Java API Response

2025-02-20 Thread Christopher Schultz
Ramavtar, On 2/20/25 6:46 AM, Ramavtar Pareek wrote: I am facing an issue where some specific keys in my API response contain non-printable characters instead of the expected Hindi characters. The issue occurs in our production environment, which has the following architecture: System Flow:

Re: [ANN] Apache Tomcat 10.1.36 Available

2025-02-19 Thread Christopher Schultz
with the release as-is. Those dates and headers will be updated automatically with future releases. If it's really bothering you, I can update it on the web site right no. -chris From: Christopher Schultz Sent: Tuesday, February 18, 2025 8:32 AM To: T

Re: [OT] tomcat and linux oom-killer

2025-02-18 Thread Christopher Schultz
Азат, On 2/15/25 4:36 PM, Усманов Азат Анварович wrote: Hi everyone! I'm not sure if this is an appropriate place to ask, but here is my Problem I have an old oracle 10g server with 2 schemas/sid, moon and moonutf8. tomcat is also installed as a webserver on the same physical server . 1-st sc

[ANN] Apache Tomcat 10.1.36 Available

2025-02-18 Thread Christopher Schultz
The Apache Tomcat team announces the immediate availability of Apache Tomcat 10.1.36. Apache Tomcat 10 is an open source software implementation of the Jakarta Servlet, Jakarta Pages, Jakarta Expression Language, Jakarta WebSocket, Jakarta Authentication and Jakarta Annotations specifications. A

Re: Tomcat 11 and JDK 17 Upgraded from Tomcat 9 & JDK 8

2025-02-11 Thread Christopher Schultz
Abirami, On 2/10/25 6:14 AM, S Abirami wrote: We are deploying webservices SOAP using embedded tomcat. It worked fine with JDK 8 & tomcat 10. After upgrading to JDK 17 with tomcat 11, webservices generate source failed first then I utilized Metrowebservices and Jax-ws related jars to solve the

Re: Tomcat `11.0.3` embedded fails to start with `InaccessibleObjectException`

2025-02-11 Thread Christopher Schultz
Jack, On 2/11/25 5:56 AM, Jack Green wrote: When you try to start `11.0.3` via: ``` new Tomcat(); ``` An error is thrown: ``` Exception in thread "main" java.lang.ExceptionInInitializerError at TomcatReproducer.main(TomcatReproducer.java:6) Caused by: java.lang.reflect.InaccessibleObjec

Re: REG: Version stability of Tomcat 9.0.96

2025-02-11 Thread Christopher Schultz
Jason, On 2/7/25 6:53 AM, Jason Wee wrote: Why not use releaseTag with 2 arguments? That 3 arguments method is deprecated in tomcat9.0.98 anyway...sooner it will be removed... This isn't really an application issue. The application isn't calling releaseTag() itself; the JSP compiler generated

Re: Custom error page for invalid mutual authentication (TLS)

2025-02-11 Thread Christopher Schultz
Sebastian, On 2/7/25 4:37 PM, Sebastian Trost wrote: if updating your application is out of the question, I'm guessing that there is no way to achieve this. If updating your application is an option, you can set the clientAuth attribute of your connector to 'want' instead of 'true' and then t

Re: Reg: Tomcat temp file deletion

2025-02-11 Thread Christopher Schultz
Mark, On 2/7/25 3:42 AM, Mark Thomas wrote: On 06/02/2025 19:25, Jalaj Asher wrote: Hello, Is it ok to delete files from tomcat/temp folder  while the tomcat is running ? Generally, no. There are instances where that will break things. It may be possible to delete some files safely - althou

[ANN] Apache Tomcat 10.1.35 Available

2025-02-10 Thread Christopher Schultz
The Apache Tomcat team announces the immediate availability of Apache Tomcat 10.1.35. Apache Tomcat 10 is an open source software implementation of the Jakarta Servlet, Jakarta Pages, Jakarta Expression Language, Jakarta WebSocket, Jakarta Authentication and Jakarta Annotations specifications. A

Re: Availability of Tomcat Version 9.0.99 or more

2025-02-10 Thread Christopher Schultz
Akram, On 2/10/25 9:00 AM, Akram Hussain wrote: > Any idea when tomcat 9.0.99 or more will be available? The release vote has passed and the release candidate has actually been promoted to an actual release. It just hasn't been announced, yet. You can wait for the announcement, or you can get

Re: Building tomcat-native on RHEL 8

2025-02-10 Thread Christopher Schultz
ion of APR 1.7.0 or later to meet the requirement. There is no tomcat-native package available for RHEL 8. Kind regards, Dimitris On Wed, Feb 5, 2025 at 12:27 AM Christopher Schultz < ch...@christopherschultz.net <mailto:ch...@christopherschultz.net>> wrote: Darryl, On 2/3/25 1:

Re: Release 10.1.35

2025-02-10 Thread Christopher Schultz
. Excellent. Next time, reply to the release VOTE thread on the dev list and cast your vote. I closed the voting just a few minutes ago, and the official release should be ready shortly. Thank you very much for this fix! ;) -chris On Tue, Feb 4, 2025 at 5:15 PM Christopher Schultz wrote

Re: [ANN] New committer: Dimitris Soumis

2025-02-10 Thread Christopher Schultz
All, Whoops, "Edit as New" strikes again! -chris On 2/10/25 9:05 AM, Christopher Schultz wrote: On behalf of the Tomcat committers I am happy to announce that John Engebretson (jengebr) has been voted in as a new Tomcat committer. Please join me in congratulating and welcoming Joh

[ANN] New committer: John Engebretson

2025-02-10 Thread Christopher Schultz
On behalf of the Tomcat committers I am happy to announce that John Engebretson (jengebr) has been voted in as a new Tomcat committer. Please join me in congratulating and welcoming John. Thanks, -chris - To unsubscribe, e-mai

[ANN] New committer: Dimitris Soumis

2025-02-10 Thread Christopher Schultz
On behalf of the Tomcat committers I am happy to announce that John Engebretson (jengebr) has been voted in as a new Tomcat committer. Please join me in congratulating and welcoming John. Thanks, -chris - To unsubscribe, e-mai

Re: Building tomcat-native on RHEL 8

2025-02-04 Thread Christopher Schultz
Darryl, On 2/3/25 1:17 PM, Darryl Baker wrote: Would someone please point me to the documentation on building tomcat-native on RHEL 8 using the Red Hat supplied APR package? Do you need to build from source, or can you use the RHEL binary? $ sudo yum search tomcat-native = Name Exactly M

Re: Release 10.1.35

2025-02-04 Thread Christopher Schultz
Adrienne and Mark, On 2/3/25 9:30 AM, Mark Thomas wrote: On 03/02/2025 13:52, Adrienne Farrell wrote: Hello I am seeing https://bz.apache.org/bugzilla/show_bug.cgi?id=69527 in my Tomcat 10.1.33 and 10.1.34 and have to roll back to 10.1.31. I am just wondering when 10.1.35 might be released as

Re: JspWriterImpl BufferSize And Flushing In Tomcat 10.1.16

2025-01-29 Thread Christopher Schultz
Tim, Your original post says there is no error, so what exactly is this a stack-trace OF? -chris On 1/28/25 11:43 PM, Tim N wrote: I'm including the stack-trace in case that's helpful Note references to tiles is for the Jakarta EE upgraded tiles at https://github.com/tntim96/tiles/tree/jaka

Re: Trouble passing through backslash in URL path

2025-01-24 Thread Christopher Schultz
ny) extension point to implement this. It would have to be a custom Tomcat build. Are you able to test some snapshot builds if this gets implemented? Mark Thanks, James On Fri, Jan 17, 2025, 10:00 AM Christopher Schultz < ch...@christopherschultz.net> wrote: James, On 1/17/25 8:04 AM,

Re: Openssl Connector configuration for Dynamic Client Authorization does not work.

2025-01-24 Thread Christopher Schultz
Jon, On 1/23/25 1:17 PM, Mcalexander, Jon J. wrote: From: Christopher Schultz Sent: Wednesday, January 22, 2025 11:19 AM To: users@tomcat.apache.org Subject: Re: Openssl Connector configuration for Dynamic Client Authorization does not work. > There is also Vault for Tomcat[2], which I h

Re: Openssl Connector configuration for Dynamic Client Authorization does not work.

2025-01-22 Thread Christopher Schultz
Thomas, On 1/21/25 2:08 PM, Timothy Resh wrote: In the old configuration we were able to hide the password using the following parameter in the config SSLPassword="${KSENC(6qXemkaMkIOCflnMN4pErQ==; C:\\Certificate\Keystore\Tomcat SAMM Vessel.p12)}" We then used this org.apache.tomcat.util.dige

Re: [OT] Openssl Connector configuration for Dynamic Client Authorization does not work.

2025-01-22 Thread Christopher Schultz
Mark, On 1/22/25 10:04 AM, Mark Thomas wrote: On 21/01/2025 19:08, Timothy Resh wrote: Good afternoon, If I use this configuration, then the prompts for the client auth work, where the intermediate.p12 file has all the intermediates from DOD ID CAx imported. I do not see where the caCertificat

Re: Tomcat Virtual Threads Performance

2025-01-21 Thread Christopher Schultz
All, On 1/21/25 7:12 AM, Mark Thomas wrote: On 21/01/2025 11:17, joan.balagu...@ventusproxy.com wrote: Hi, Virtual threads only shine on I/O bound tasks, in terms of throughput (not latency). They were created for that, don't expect any improvement on CPU bound tasks. +1. If I had to gues

  1   2   3   4   5   6   7   8   9   10   >