Re: Specific questions, Re: HSTS parameters in the httpHeaderSecurity filter

On 10/14/25 6:33 AM, Christopher Schultz wrote: Thanks for reminding me about the filter-mapping; I'd forgotten to uncomment it when I'd stuck the filter configuration onto the "guinea pig" server. Once I did that, and restarted, Firefox started showing: Strict-Transport-Security max

Re: Tomcat 10 migration

On 14/10/2025 16:59, Joel Griffith wrote: My organization's main webapp has been disabled since upgrading to Tomcat 10 due to the jakarta namespace transition. I'm attempting to use the migration tool provided at https://tomcat.apache.org/download-migration.cgi, but I haven't had much luck. I d

Re: Specific questions, Re: HSTS parameters in the httpHeaderSecurity filter

On 10/13/25 4:36 PM, Christopher Schultz wrote: Do you have any reverse proxy or anything like that? Does Tomcat serve HTTPS directly? If not, it will not return HSTS headers. Hmm. It is definitely serving HTTPS directly, because I'm seeing the same cert serial number as the one in the Java K

Re: Specific questions, Re: HSTS parameters in the httpHeaderSecurity filter

browser will just say "no site for you." (Pro tip: in Google Chrome, you can type (literally, without quotes) "thisisinsafe" while looking at that "no site for you" page and it will switch to the "accept & continue" page and you can, in fact, get in. I

Specific questions, Re: HSTS parameters in the httpHeaderSecurity filter

ven offering one the option of overriding an out-of-date cert? (the one on my "guinea pig" server is 5 years out-of-date, and up until I looked at it just now, I thought it was probably also wrong-domain-name). I *do* have a permanent override for it in Firefox, though. But would HS

Re: HSTS parameters in the httpHeaderSecurity filter

On 10/13/25 9:02 AM, Olaf Kock wrote: Do you have any question about this, that is missing in your original post? HSTS can still help you, as even in case of a breach, or a MITM attack, no browser (that has seen your site's HSTS header before) will ever even try to access port 80, but automat

Re: Content negotiation for Accept-Language (static pages)?

Hello, Le mercredi 9 juillet 2025, 20:41:18 CEST Christopher Schultz a écrit : > Oh, I see: you have a bunch of static files and you just want to be able > to have them load on as many web servers as possible. > > You've been spoiled by general-purpose web servers like httpd and > jigsaw, which

Re: Possible access log changes for 9.0.x - nanoseconds - feedback request

milliseconds precision based upon the type of system clock being consulted by each of those calls from Java. -chris -Original Message- From: Michael Osipov Sent: perjantai 26. syyskuuta 2025 14.58 To: users@tomcat.apache.org Subject: Re: Possible access log changes for 9.0.x - nanoseconds

Re: File upload and download issue in Tomcat 9.0.106

Jianh, On 9/26/25 1:29 AM, jianhlang wrote: Thank you for your reply,its helpful to me. Were you able to resolve your issue? -chris 发件人：Christopher Schultz https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.106_(remm) I think this change might be relevant: " Provide finer 

Re: Help with FileStore configuration change between 9.0.108 and 9.0.109

Thanks both. Apologies for having failed to spot that. Dave On 29/09/2025 14:02, Mark Thomas wrote: Looks like a variation of the known regression with FileStore and 9.0.109. There will be a fix in the October releases. Mark On 29/09/2025 13:03, Dave Reynolds wrote: Hi, We have been succe

Re: Help with FileStore configuration change between 9.0.108 and 9.0.109

Looks like a variation of the known regression with FileStore and 9.0.109. There will be a fix in the October releases. Mark On 29/09/2025 13:03, Dave Reynolds wrote: Hi, We have been successfully running a set of Tomcat 9.0.108 instances using FileStore for session persistence.  However, up

Re: Help with FileStore configuration change between 9.0.108 and 9.0.109

Hi, there is release bug in 109, you have to wait with upgrade to 110 read https://tomcat.apache.org/ 109 release. Regards, Zdenek Henek On Mon, Sep 29, 2025 at 12:13 PM Dave Reynolds < dave.reyno...@epimorphics.com> wrote: > Hi, > > We have been successfully running a set of Tomcat 9.0.108 in

RE: Possible access log changes for 9.0.x - nanoseconds - feedback request

@tomcat.apache.org Subject: Re: Possible access log changes for 9.0.x - nanoseconds - feedback request On 2025/09/24 14:25:29 Mark Thomas wrote: > All, > > You may have seen the request for nanosecond precision in the access > log. The Tomcat committers are currently looking at imple

Re: Possible access log changes for 9.0.x - nanoseconds - feedback request

On 2025/09/24 14:25:29 Mark Thomas wrote: > All, > > You may have seen the request for nanosecond precision in the access > log. The Tomcat committers are currently looking at implementing this. > > For 10.1.x onwards, it is relatively simple because nearly all the > internal and public APIs fo

Re: HTTP/3 (QUIC) support

On 9/17/25 11:10 PM, Rémy Maucherat wrote: On Wed, Sep 17, 2025 at 10:59 AM William Crowell wrote: Hi, I asked the same question back in April, and here was the combined response I got from Mark Thomas, Chris Schultz, and Rémy Maucherat: https://lists.apache.org/thread/l4f9f47hzytr28wvgw1fvl

Re: File upload and download issue in Tomcat 9.0.106

Chris, Thank you for your reply,its helpful to me. 原始邮件 发件人：Christopher Schultz https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.106_(remm) I think this change might be relevant: " Provide finer grained control of multi-part request processing vi

Re: Weirdness with manager and remote address valve

On 9/24/25 10:30 AM, Mark Thomas wrote: Make a bunch of requests that should get routed to that Tomcat instance but will result in 404s. Then check the access log for those URLs (they are hopefully unique) and see what IP address they are associated with. Briefly, I was stumped by "access log

Re: Weirdness with manager and remote address valve

On 24/09/2025 18:12, James H. H. Lampert wrote: I'm preparing to do a Tomcat update on a customer box, and I find that I'm unable to reach the manager context. I have the RemoteAddrValve on the manager set to denyStatus="404" and I have (with the actual IP addresses redacted): allow="127\.\d

Re: File upload and download issue in Tomcat 9.0.106

Jianh, On 9/24/25 4:58 AM, jianhlang wrote: When i use Tomcat 9.0.105(no configures changed) to deploy my app and upload a pdf file on a function,everything goes well,and pdf file uploaded. But when change to Tomcat 9.0.106(no configures changed) to deploy the same app, then upload the same fi

Re: File upload and download issue in Tomcat 9.0.106

When i use Tomcat 9.0.105(no configures changed) to deploy my app and upload a pdf file on a function,everything goes well,and pdf file uploaded. But when change to Tomcat 9.0.106(no configures changed) to deploy the same app, then upload the same file,the page auto refreshed and file stream is n

Re: File upload and download issue in Tomcat 9.0.106

> On 2025 Sep 23, at 22:02, jianhlang wrote: > > My application(jsf2.2+primeface6.0,OEPNJDK1.8) running well when deployed in > Tomcat9.0.105,but without any code changes and it facing a file upload and > file download issue by using Tomcat9(>= 9.0.106). > > code as below: > fileLimit="1" >

Re: Clarify adoption of JPMS Java modules in webapps

Rony, On 9/23/25 12:10 PM, Rony G. Flatscher (Apache) wrote: On 23.09.2025 12:13, Mark Thomas wrote: On 23/09/2025 10:49, Christian Ortlepp wrote: So my concrete questions are: 1. Am I correct in saying that there is no way to make the tomcat webapp classloader load (some of) my classes

Re: Clarify adoption of JPMS Java modules in webapps

On 23.09.2025 12:13, Mark Thomas wrote: On 23/09/2025 10:49, Christian Ortlepp wrote: So my concrete questions are: 1. Am I correct in saying that there is no way to make the tomcat webapp classloader load (some of) my classes onto the module-path instead of the class-path? Yes. And if

Re: Clarify adoption of JPMS Java modules in webapps

Okay, thanks for the quick reply! On 9/23/25 12:13, Mark Thomas wrote: External Message - Please be cautious when opening links or attachments On 23/09/2025 10:49, Christian Ortlepp wrote: So my concrete questions are: 1. Am I correct in saying that there is no way to make the tomcat weba

Re: Clarify adoption of JPMS Java modules in webapps

On 23/09/2025 10:49, Christian Ortlepp wrote: So my concrete questions are: 1. Am I correct in saying that there is no way to make the tomcat webapp classloader load (some of) my classes onto the module-path instead of the class-path? Yes. And if that is the case, is this a deliberate de

Re: Support for microsecond precision in timestamps (Tomcat 9.0.108 / 10.1.44)

nanoseconds but they are all zeros). Personally I don't see much reason for microsecond precision in logs either, but perhaps it could be an option. -Harri -Original Message- From: Mark Thomas Sent: perjantai 12. syyskuuta 2025 17.44 To: Tomcat Users List Subject: Re: Support for micr

Re: Support for microsecond precision in timestamps (Tomcat 9.0.108 / 10.1.44)

ava-based servers, such as WildFly, are already considering > >>>>>> support > >>>>>>> for microsecond-level logging - > >>>>>>> https://stackoverflow.com/users/152794/james-r-perkins > >>>>>>> > >>>>>&g

Re: Support for microsecond precision in timestamps (Tomcat 9.0.108 / 10.1.44)

lly I don't see much reason for microsecond precision in logs either, but perhaps it could be an option. -Harri -Original Message- From: Mark Thomas Sent: perjantai 12. syyskuuta 2025 17.44 To: Tomcat Users List Subject: Re: Support for microsecond precision in timestamps (Tomcat 9.0.108

Re: Support for microsecond precision in timestamps (Tomcat 9.0.108 / 10.1.44)

t; Tomcat. > >>>>> If there is a limitation with tomcat9 and below, could it be > considered > >>>> for > >>>>> tomcat 10 and above. > >>>>> > >>>>> Regards, > >>>>> Poojashree Prak

Re: HTTP/3 (QUIC) support

On Wed, Sep 17, 2025 at 10:59 AM William Crowell wrote: > > Hi, I asked the same question back in April, and here was the combined > response I got from Mark Thomas, Chris Schultz, and Rémy Maucherat: > > https://lists.apache.org/thread/l4f9f47hzytr28wvgw1fvl2k2gnplx4j > > “The QUIC plans have be

RE: HTTP/3 (QUIC) support

or any information herein. If you have received this message in error, please advise the sender immediately by reply e-mail and delete this message. Thank you for your cooperation. From: William Crowell Sent: Wednesday, September 17, 2025 3:59 AM To: Tomcat Users List Subject: Re: HTTP/3

Re: Tomcat maxConnections API

Nitish, On 9/12/25 7:33 AM, Nitish Chitta wrote: Please let me know if the maxQueueSize attribute will be of any help to tackle this case. The default for that is Integer.MAX_VALUE which is ... high. I assume you are considering reducing that? I've actually never played around with that set

Re: HTTP/3 (QUIC) support

Jee仔, On 9/17/25 4:39 AM, Jee仔 wrote: I hope this message finds you well. I'm currently exploring HTTP/3 integration possibilities and noticed that Tomcat doesn't yet natively support this protocol. Could you kindly share if there are any plans to implement HTTP/3 (QUIC) support in future releas

Re: Tomcat Native 1.3.1 vs 2.0.9

retire tcnative entirely and give OpenSSL access through FFM instead of tcnative. -chris -Original Message- From: Michael Osipov Sent: tiistai 16. syyskuuta 2025 21.20 To: users@tomcat.apache.org Subject: Re: Tomcat Native 1.3.1 vs 2.0.9 On 2025/09/16 09:09:45 Mark Thomas wrote: On

Re: Support for microsecond precision in timestamps (Tomcat 9.0.108 / 10.1.44)

hey are all zeros). Personally I don't see much reason for microsecond precision in logs either, but perhaps it could be an option. -Harri -Original Message- From: Mark Thomas Sent: perjantai 12. syyskuuta 2025 17.44 To: Tomcat Users List Subject: Re: Support for microsecond precision

Re: HTTP/3 (QUIC) support

My apologies I forgot to add: I think it would be better for now if HTTP/3 is required is to front Tomcat with NGINX as a reverse proxy. From: William Crowell Date: Wednesday, September 17, 2025 at 4:58 AM To: Tomcat Users List Subject: Re: HTTP/3 (QUIC) support Hi, I asked the same question

Re: HTTP/3 (QUIC) support

Hi, I asked the same question back in April, and here was the combined response I got from Mark Thomas, Chris Schultz, and Rémy Maucherat: https://lists.apache.org/thread/l4f9f47hzytr28wvgw1fvl2k2gnplx4j “The QUIC plans have been on and off. Currently more off than on. If we were to implement

Re: Support for microsecond precision in timestamps (Tomcat 9.0.108 / 10.1.44)

gt;> On Fri, Sep 12, 2025 at 8:38 PM Harri Pesonen > >>> wrote: > >>> > >>>> java.lang.Instant comes with Java 8 but there it does not have > >> microsecond > >>>> precision yet (it can store even nanoseconds but they are all zero

RE: Tomcat Native 1.3.1 vs 2.0.9

APR, then it tcnative-1 is required. -Harri -Original Message- From: Michael Osipov Sent: tiistai 16. syyskuuta 2025 21.20 To: users@tomcat.apache.org Subject: Re: Tomcat Native 1.3.1 vs 2.0.9 On 2025/09/16 09:09:45 Mark Thomas wrote: > On 16/09/2025 08:49, Michael Osipov wrote: >

Re: Support for microsecond precision in timestamps (Tomcat 9.0.108 / 10.1.44)

Harri -Original Message- From: Mark Thomas Sent: perjantai 12. syyskuuta 2025 17.44 To: Tomcat Users List Subject: Re: Support for microsecond precision in timestamps (Tomcat 9.0.108 / 10.1.44) On 12/09/2025 13:00, Poojashree Prakash wrote: +1 Java9 and above supports precision logging - time

Re: Migrating (new server) tomcat 10 issue

On Tue, Sep 16, 2025 at 2:47 PM Christopher Schultz wrote: > > Hello, > > On 9/16/25 2:29 PM, A Name wrote: > > We've been running tomcat9 on linux (and 8 and 7 etc.) for years. I stood > > up a new server for tomcat 10 and pulled 10.1.44. > > > > I built the tomcat.service in /etc/systemd/system

Re: Migrating (new server) tomcat 10 issue

Hello, On 9/16/25 2:29 PM, A Name wrote: We've been running tomcat9 on linux (and 8 and 7 etc.) for years. I stood up a new server for tomcat 10 and pulled 10.1.44. I built the tomcat.service in /etc/systemd/system [Unit]Description=Tomcat - instance %iAfter=syslog.target network.target [Serv

Re: Migrating (new server) tomcat 10 issue

> On 2025 Sep 16, at 13:29, A Name wrote: > > We've been running tomcat9 on linux (and 8 and 7 etc.) for years. I stood > up a new server for tomcat 10 and pulled 10.1.44. Pulled from where? The Tomcat website? Some repository? A USB stick? How was Tomcat installed after it was “pulled”?

Re: Tomcat Native 1.3.1 vs 2.0.9

On 2025/09/16 09:09:45 Mark Thomas wrote: > On 16/09/2025 08:49, Michael Osipov wrote: > > On 2025/09/12 14:46:44 Mark Thomas wrote: > >> On 12/09/2025 15:33, Harri Pesonen wrote: > >>> Thanks, currently we have option to use APR but NIO is the default. > >>> Perhaps we drop APR and then switch to

Re: Tomcat Native 1.3.1 vs 2.0.9

On 16/09/2025 08:49, Michael Osipov wrote: On 2025/09/12 14:46:44 Mark Thomas wrote: On 12/09/2025 15:33, Harri Pesonen wrote: Thanks, currently we have option to use APR but NIO is the default. Perhaps we drop APR and then switch to Tomcat Native 2. What if we have both tcnative-1.dll and tcn

Re: Tomcat Native 1.3.1 vs 2.0.9

On 2025/09/12 14:46:44 Mark Thomas wrote: > On 12/09/2025 15:33, Harri Pesonen wrote: > > Thanks, currently we have option to use APR but NIO is the default. > > Perhaps we drop APR and then switch to Tomcat Native 2. > > > > What if we have both tcnative-1.dll and tcnative-2.dll available, I gues

Re: Support for microsecond precision in timestamps (Tomcat 9.0.108 / 10.1.44)

logs > >> either, but perhaps it could be an option. > >> > >> -Harri > >> > >> -Original Message- > >> From: Mark Thomas > >> Sent: perjantai 12. syyskuuta 2025 17.44 > >> To: Tomcat Users List > >> Subject: Re: Suppor

Re: Support for microsecond precision in timestamps (Tomcat 9.0.108 / 10.1.44)

ginal Message- From: Mark Thomas Sent: perjantai 12. syyskuuta 2025 17.44 To: Tomcat Users List Subject: Re: Support for microsecond precision in timestamps (Tomcat 9.0.108 / 10.1.44) On 12/09/2025 13:00, Poojashree Prakash wrote: +1 Java9 and above supports precision logging - timestamp - Current

Re: Support for microsecond precision in timestamps (Tomcat 9.0.108 / 10.1.44)

n option. > > -Harri > > -Original Message- > From: Mark Thomas > Sent: perjantai 12. syyskuuta 2025 17.44 > To: Tomcat Users List > Subject: Re: Support for microsecond precision in timestamps (Tomcat > 9.0.108 / 10.1.44) > > On 12/09/2025 13:00, Poojashr

Re: Tomcat maxConnections API

Appreciate any help here! Regards, Nitish On Fri, Sep 12, 2025 at 5:08 PM Nitish Chitta wrote: > Link to the initial thread : > https://lists.apache.org/thread/hd3cxd3xh8kkh0fosf9czy6b9fchrqvb > > Regards, > Nitish > > On Fri, Sep 12, 2025 at 5:04 PM Nitish Chitta > wrote: > >> Just another qu

RE: Tomcat Native 1.3.1 vs 2.0.9

-Original Message- From: Mark Thomas Sent: perjantai 12. syyskuuta 2025 15.17 To: Tomcat Users List Subject: Re: Tomcat Native 1.3.1 vs 2.0.9 On 12/09/2025 12:06, Harri Pesonen wrote: > Hello, > > download page for Tomcat Native has two versions, 2.0.9 and 1.3.1: > > https://tomc/

Re: Support for microsecond precision in timestamps (Tomcat 9.0.108 / 10.1.44)

On 12/09/2025 13:00, Poojashree Prakash wrote: +1 Java9 and above supports precision logging - timestamp - Current time in microseconds in java - Stack Overflow Also considering - Apache Tomcat® - Which Version Do

RE: Support for microsecond precision in timestamps (Tomcat 9.0.108 / 10.1.44)

ssage- From: Mark Thomas Sent: perjantai 12. syyskuuta 2025 17.44 To: Tomcat Users List Subject: Re: Support for microsecond precision in timestamps (Tomcat 9.0.108 / 10.1.44) On 12/09/2025 13:00, Poojashree Prakash wrote: > +1 > Java9 and above supports precision logging - timestamp - C

RE: Tomcat Native 1.3.1 vs 2.0.9

[true] 14:55:32.021 INF> (main) (org.apache.catalina.core.AprLifecycleListener#initializeSSL) OpenSSL successfully initialized [OpenSSL 3.5.0 8 Apr 2025] -Harri -Original Message- From: Mark Thomas Sent: perjantai 12. syyskuuta 2025 17.47 To: users@tomcat.apache.org Subject: Re: Tomcat Native 1.3.1 vs

Re: Tomcat Native 1.3.1 vs 2.0.9

tcnative-1.dll with APR ? 😊 You can only load one version of Tomcat Native into the JVM at any one time. If both are present, 1.x is used in preference to 2.x. Mark -Harri -Original Message- From: Mark Thomas Sent: perjantai 12. syyskuuta 2025 15.17 To: Tomcat Users List Subject: Re

Re: Tomcat Native 1.3.1 vs 2.0.9

On 12/09/2025 12:06, Harri Pesonen wrote: Hello, download page for Tomcat Native has two versions, 2.0.9 and 1.3.1: https://tomcat.apache.org/download-native.cgi We are currently using 1.3.1 and there has not been so many changes lately, compare to version 2. I fail to find documentation for

Re: Support for microsecond precision in timestamps (Tomcat 9.0.108 / 10.1.44)

+1 Java9 and above supports precision logging - timestamp - Current time in microseconds in java - Stack Overflow Also considering - Apache Tomcat® - Which Version Do I Want?

Re: Tomcat maxConnections API

Link to the initial thread : https://lists.apache.org/thread/hd3cxd3xh8kkh0fosf9czy6b9fchrqvb Regards, Nitish On Fri, Sep 12, 2025 at 5:04 PM Nitish Chitta wrote: > Just another query here! > Please let me know if the maxQueueSize attribute will be of any help to > tackle this case. > > Regards

Re: Tomcat maxConnections API

Just another query here! Please let me know if the maxQueueSize attribute will be of any help to tackle this case. Regards, Nitish On Thu, Jul 31, 2025 at 8:48 AM Nitish Chitta wrote: > Thats right, Chris! > > Tried that and also multiple ways of enforcing the setting on the Kernel > level. Not

Re: Tomcat maxConnections API

Just another query here! Please let me know if the maxQueueSize attribute will be of any help to tackle this case. Regards, Nitish On Fri, Sep 12, 2025 at 4:59 PM Nitish Chitta wrote: > Just another query here! > Please let me know if the maxQueueSize attribute will be of any help to > tackle t

RE: Support for microsecond precision in timestamps (Tomcat 9.0.108 / 10.1.44)

- From: Mark Thomas Sent: perjantai 12. syyskuuta 2025 13.46 To: users@tomcat.apache.org Subject: Re: Support for microsecond precision in timestamps (Tomcat 9.0.108 / 10.1.44) On 12/09/2025 09:02, Poojashree Prakash wrote: > Hello, > > I am working with Tomcat 9.0.108 and 10.1.44 a

Re: Support for microsecond precision in timestamps (Tomcat 9.0.108 / 10.1.44)

On 12/09/2025 09:02, Poojashree Prakash wrote: Hello, I am working with Tomcat 9.0.108 and 10.1.44 and trying to configure my logging to include timestamps with microsecond precision. I have configured the pattern to use - %{-MM-dd'T'HH:mm:ss.SS'Z'}t Where in the docs suggests that th

Re: Tomcat Upgrade from 9.0.89 to 9.0.108 is failing

From: Thomas Sörensen Sent: Thursday, September 4, 2025 4:08 PM To: users@tomcat.apache.org Subject: Re: Tomcat Upgrade from 9.0.89 to 9.0.108 is failing Hi We had a similar issue and it was resolve by updating the isapi_redirect.dll from 1.2.48 to 1.2.50 https://dlcdn.apache.org/tomcat/tomcat-co

Re: Migrating from TC 9 to 11

> On 2025 Sep 7, at 18:21, Zoran Avtarovski wrote: > > We are investigating the feasibility of migrating our Struts based > applications from struts 6 running on tomcat 9 to struts 7 on tomcat 11. > > We completed initial testing and came across a few issues about which I > wanted ask your ad

Re: Updating CONTRIBUTING.md

Tx for spotting that. Just a PR would be fine. Mark 6 Sept 2025 09:48:14 Sebastian Trost : Hi, I noticed that the "Beginner issues"-link in CONTRIBUTING.md is outdated. The link still sets the bugzilla search filter to Tomcat 7 and Tomcat 8.5 and ignores Tomcat 10 and Tomcat 11. Should I cr

Re: Tomcat Upgrade from 9.0.89 to 9.0.108 is failing

ional details to assist with troubleshooting. From: Thomas Sörensen Sent: Thursday, September 4, 2025 4:08 PM To: users@tomcat.apache.org Subject: Re: Tomcat Upgrade from 9.0.89 to 9.0.108 is failing Hi We had a similar issue and it was resolve by updating

Re: Tomcat Upgrade from 9.0.89 to 9.0.108 is failing

org Subject: Re: Tomcat Upgrade from 9.0.89 to 9.0.108 is failing Hi We had a similar issue and it was resolve by updating the isapi_redirect.dll from 1.2.48 to 1.2.50 https://dlcdn.apache.org/tomcat/tomcat-connectors/jk/binaries/windows/<https://urldefense.com/v3/__https://dlcdn.apache.org/

Re: Tomcat Upgrade from 9.0.89 to 9.0.108 is failing

soren...@excosoft.se<mailto:thomas.soren...@excosoft.se> www.excosoft.se<http://www.excosoft.se/> From: Boddapu, Ramdev Sent: 03 September 2025 17:08 To: users@tomcat.apache.org Subject: Re: Tomcat Upgrade from 9.0.89 to 9.0.108 is failing Tha

Re: Tomcat Upgrade from 9.0.89 to 9.0.108 is failing

e status worker.status.type = status AJP connector config?        Thanks, Ramdev. From: Mark Thomas Sent: Wednesday, September 3, 2025 8:19 PM To: users@tomcat.apache.org Subject: Re: Tomcat Upgrade from 9.0.89 to 9.0.108 is failing Windows OS vers

Re: Tomcat Upgrade from 9.0.89 to 9.0.108 is failing

. From: Mark Thomas Sent: Thursday, September 4, 2025 12:58 PM To: users@tomcat.apache.org Subject: Re: Tomcat Upgrade from 9.0.89 to 9.0.108 is failing On 03/09/2025 16:08, Boddapu, Ramdev wrote: > Thanks Mark for your responce , below is the required details . Thanks that i

Re: Tomcat Upgrade from 9.0.89 to 9.0.108 is failing

amdev. From: Mark Thomas Sent: Wednesday, September 3, 2025 8:19 PM To: users@tomcat.apache.org Subject: Re: Tomcat Upgrade from 9.0.89 to 9.0.108 is failing Windows OS version? IIS version? ISAPI redirector version? ISAPI redirector config? AJP connector config?

Re: Tomcat Upgrade from 9.0.89 to 9.0.108 is failing

Windows OS version? IIS version? ISAPI redirector version? ISAPI redirector config? AJP connector config? Does this happen on all connections or just some connections? Which version of Tomcat does this start with? You will need to perform a (I suggest binary) search from 9.0.89 to 9.0.108 to fi

Re: [EXTERNAL] Re: Tomcat 10.1.13 - z17 Compatibility

is apricated . Ramdev From: Dimitris Soumis Sent: Wednesday, September 3, 2025 6:41 PM To: Tomcat Users List Subject: Re: [EXTERNAL] Re: Tomcat 10.1.13 - z17 Compatibility On Wed, Sep 3, 2025 at 3:11 PM MATHEW THOMAS wrote: Thank you Dimitris, is there a link etc wh

Re: [EXTERNAL] Re: Tomcat 10.1.13 - z17 Compatibility

ead$WrappingRunnable.run(TaskThread.java:63) at java.base/java.lang.Thread.run(Thread.java:834) Thanks , any help is apricated . Ramdev From: Dimitris Soumis Sent: Wednesday, September 3, 2025 6:41 PM To: Tomcat Users List Subject: Re: [EXTERNAL] Re: Tomcat 10.1

Re: [EXTERNAL] Re: Tomcat 10.1.13 - z17 Compatibility

rom:* Dimitris Soumis > *Sent:* Wednesday, September 3, 2025 12:11 PM > *To:* Tomcat Users List > *Subject:* [EXTERNAL] Re: Tomcat 10.1.13 - z17 Compatibility > > ATTENTION:This email originated from outside of GM. > > > > On Wed, Sep 3, 2025 at 1:22 PM Torsten Krah wrote:

Re: [EXTERNAL] Re: Tomcat 10.1.13 - z17 Compatibility

12:11 PM To: Tomcat Users List Subject: [EXTERNAL] Re: Tomcat 10.1.13 - z17 Compatibility ATTENTION:This email originated from outside of GM. On Wed, Sep 3, 2025 at 1:22 PM Torsten Krah wrote: > Am Mittwoch, dem 03.09.2025 um 09:42 + schrieb MATHEW THOMAS: > > Your assistance i

Re: Tomcat 10.1.13 - z17 Compatibility

On Wed, Sep 3, 2025 at 1:22 PM Torsten Krah wrote: > Am Mittwoch, dem 03.09.2025 um 09:42 + schrieb MATHEW THOMAS: > > Your assistance is greatly appreciated. > > I can't help you with your z17, but that tomcat version you are using > was released over two years ago ([0] 2023-08-25), you shou

Re: Tomcat 10.1.13 - z17 Compatibility

Am Mittwoch, dem 03.09.2025 um 09:42 + schrieb MATHEW THOMAS: > Your assistance is greatly appreciated. I can't help you with your z17, but that tomcat version you are using was released over two years ago ([0] 2023-08-25), you should not run this anymore imho. [0] https://tomcat.apache.org/

Re: Mitigation on WebDAV function when writable is necessary for authenticated user

On 2025/08/29 17:11:39 Justin Chen wrote: > Hi, > > We are trying Tomcat WebDAV for document sharing scenario. Months ago, an > update said, ```If the WebDAV servlet is enabled, the WebDAV functionality > should be appropriately secured.```. > > Before bring them to PRODUCTION, we want to know

Re: Mitigation on WebDAV function when writable is necessary for authenticated user

On Fri, Aug 29, 2025 at 8:22 PM Justin Chen wrote: > Hi, > > We are trying Tomcat WebDAV for document sharing scenario. Months ago, an > update said, ```If the WebDAV servlet is enabled, the WebDAV functionality > should be appropriately secured.```. > > Before bring them to PRODUCTION, we want t

Re: JAAS Extra Spaces in Username

Thanks Chris, That's exactly what we did. At some point the collation for that field had changed and setting it back resolved the issue with minimum fuss. Z. On 28/8/2025 11:37 pm, Christopher Schultz wrote: Zoran, On 8/27/25 5:01 PM, Zoran Avtarovski wrote: Really helped to know where the

Re: JAAS Extra Spaces in Username

On Thu, Aug 28, 2025 at 4:46 PM Christopher Schultz < ch...@christopherschultz.net> wrote: > Zoran, > > On 8/27/25 5:01 PM, Zoran Avtarovski wrote: > > Really helped to know where the issue had changed. > > You might be able to fix this issue very quickly using this ALTER > statement: > > ALTER TA

Re: JAAS Extra Spaces in Username

Zoran, On 8/27/25 5:01 PM, Zoran Avtarovski wrote: Really helped to know where the issue had changed. You might be able to fix this issue very quickly using this ALTER statement: ALTER TABLE user MODIFY COLUMN user_name varchar(255) NOT NULL <-- double-check this COLLATE utf8mb4_general_nopad

Re: JAAS Extra Spaces in Username

Thanks Dimitris, Really helped to know where the issue had changed. Zoran On 27/8/2025 10:12 pm, Dimitris Soumis wrote: On Wed, Aug 27, 2025 at 2:56 AM Zoran Avtarovski wrote: Hi Guys, We are seeing a strange issue with user logins. If a user includes extra spaces in their username the lo

Re: JAAS Extra Spaces in Username

On Wed, Aug 27, 2025 at 2:56 AM Zoran Avtarovski wrote: > Hi Guys, > > We are seeing a strange issue with user logins. If a user includes extra > spaces in their username the login process is successful, but the > request username from request.getRemoteUser() still has the extra space > which is

Re: Tomcat 11 and JDK 17 application ciphers difference

asked questions, not provided any of the information anyone has requested so far. That makes it difficult to help. -chris -Original Message- From: Christopher Schultz Sent: Saturday, August 23, 2025 10:06 PM To: users@tomcat.apache.org Subject: Re: Tomcat 11 and JDK 17 application ci

Re: Tomcat 11 and JDK 17 application ciphers difference

> security policies. > > Request: > Please provide guidance on how to configure Tomcat to use the exact cipher > suite list specified in our configuration, or explain the rationale behind > the current filtering behaviour and how to work around it. > > We appreciate yo

RE: Tomcat 11 and JDK 17 application ciphers difference

work around it. We appreciate your assistance in resolving this configuration issue. Regards, Abirami.S -Original Message- From: Christopher Schultz Sent: Saturday, August 23, 2025 10:06 PM To: users@tomcat.apache.org Subject: Re: Tomcat 11 and JDK 17 application ciphers difference

Re: [EXTERNAL EMAIL] How to access a REST service

e still being > thrown, but the program keeps running with no memory leak. > > Thanks again to everyone for your comments. It's been very helpful, and I > have learned a lot in the process. > > Dan > > -Original Message- > From: Robert Turner > Sent: Tuesday,

RE: [EXTERNAL EMAIL] How to access a REST service

rt Turner Sent: Tuesday, August 19, 2025 8:27 PM To: Tomcat Users List Subject: Re: [EXTERNAL EMAIL] How to access a REST service Daniel, If you would like to validate your theory, simply remove the try-with-resources and revert to your previous logic. However, I strongly believe your theory is

Re: Tomcat 11 and JDK 17 application ciphers difference

which ones you are able to use to connect to your running server. -chris -Original Message- From: Mark Thomas Sent: Tuesday, August 19, 2025 5:30 PM To: Tomcat Users List Subject: Re: Tomcat 11 and JDK 17 application ciphers difference On 19/08/2025 12:17, S Abirami wrote

Re: Tomcat 11 and JDK 17 application ciphers difference

On 22/08/2025 07:53, S Abirami wrote: Questions: 1. Why are the cipher configuration properties not being recognized in the connector configuration? No idea. Your organisation wrote the protocol implementation. That would be a question for your development team. I will note that is that

RE: Tomcat 11 and JDK 17 application ciphers difference

To: Tomcat Users List Subject: Re: Tomcat 11 and JDK 17 application ciphers difference On 19/08/2025 12:17, S Abirami wrote: > Questions:> > 1. Is Tomcat 11 intentionally filtering out RSA key exchange cipher suites by > default? If so, where is this documented? Yes. https://tomca

Re: [SECURITY INQUIRY] CVE-2025-52520: Regarding "Unlikely Configurations of Multipart Upload" that are Affected

ll be limited by limit_requestbody.conf. Is my understanding correct? 差出人: Mark Thomas 送信日時: 2025年8月5日 17:09 宛先: users@tomcat.apache.org 件名: Re: [SECURITY INQUIRY] CVE-2025-52520: Regarding "Unlikely Configurations of Multipart Upload" that are Affected On 0

RE: [EXTERNAL EMAIL] How to access a REST service

Dan -Original Message- From: Robert Turner Sent: Tuesday, August 19, 2025 8:27 PM To: Tomcat Users List Subject: Re: [EXTERNAL EMAIL] How to access a REST service Daniel, If you would like to validate your theory, simply remove the try-with-resources and revert to your previous logic. Howev

Re: [EXTERNAL EMAIL] How to access a REST service

kful > for everyone's efforts and that the issue now seems to be resolved. > > Best regards, > > Dan > > From: Chuck Caldarale > Sent: Tuesday, August 19, 2025 1:33 AM > To: Tomcat Users List > Subject: Re: [EXTERNAL EMAIL] How to access a REST service > > >

RE: [EXTERNAL EMAIL] How to access a REST service

ether this had to do with my code changes or the issue I just described, I'm thankful for everyone's efforts and that the issue now seems to be resolved. Best regards, Dan From: Chuck Caldarale Sent: Tuesday, August 19, 2025 1:33 AM To: Tomcat Users List Subject: Re: [EXTERNAL EMAIL

Re: Tomcat 11 and JDK 17 application ciphers difference

On 19/08/2025 12:17, S Abirami wrote: > Questions:> 1. Is Tomcat 11 intentionally filtering out RSA key exchange cipher suites by default? If so, where is this documented? Yes. https://tomcat.apache.org/tomcat-11.0-doc/config/http.html look for the "ciphers" attribute 2. What is the mecha

Re: [EXTERNAL EMAIL] How to access a REST service

> On 2025 Aug 18, at 21:22, Daniel Schwartz wrote: > > I wasn't resisting using the try-with-resources construct, only when I tried > to do this, I was getting compiler errors. But I evidently wasn't doing it > right, because I tried it again and this time it worked. > > Following is the

Re: [EXTERNAL EMAIL] How to access a REST service

> NumConnSuccessfullyMatched 0 count Aug 18, 2025 5:47:56 PM -- > > -- Number of connections succesfully matched > > NumConnNotSuccessfullyMatched 0 count Aug 18, 2025 5:47:56 PM -- > > -- Number of connections rejected during matching > > NumConnUsed

  1   2   3   4   5   6   7   8   9   10   >