Re: [PROPOSAL] Tomcat Webinar series

Hi, Very nice idea. one more suggestion for session: Hardening Tomcat to make it more secure. Regards SJ On Sat, Nov 14, 2015 at 3:57 AM, Christopher Schultz < ch...@christopherschultz.net> wrote: > Prashant, > > On 11/13/15 12:00 PM, prashant sharma wrote: > > You mentioned about Apachecon

java deserialization vulnerability for Tomcat 7/8

Hi, Would like to get your opinion on the java deserialization vulnerability issue for Tomcat. As Jboss seems to have been impacted with, is there a way to verify wether this vulnerability affects Tomcat as well? Regards SJ

Re: Tomcat threads dependency on net.core.somaxconn value on Linux

Thanks Christopher, it makes more sense now. On Fri, Apr 17, 2015 at 8:51 PM, Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Satish, > > On 4/17/15 7:20 AM, satish jupalli wrote: > > I would lik

Tomcat threads dependency on net.core.somaxconn value on Linux

omcat threads and Linux net.core.somaxconn will be greatly appreciated to support many concurrent connections. Regards Satish Jupalli

Re: Tomcat upgrades/security patching best practises

Thanks Mark. That helped a lot. On Mon, Feb 24, 2014 at 5:50 PM, Mark Thomas wrote: > On 24/02/2014 09:20, satish jupalli wrote: > > Hi, > > > > What are the best practices for upgrading the tomcat given the fact that > > they are no direct security patches availa

Tomcat upgrades/security patching best practises

Hi, What are the best practices for upgrading the tomcat given the fact that they are no direct security patches available. Specially with the environments where there are large instances of Tomcat servers running it is challenging to upgrade these servers manually in all the systems. Are there