Re: Issue with RewriteValve and folders (tomcat 8.0.15)

2015-02-19 Thread Jérémie Barthés
Hi Chris, When an URL target a folder on the server, tomcat automaticly add a "/" at the end of the URL if missing : myHost.com/myFolder => myHost.com/myFolder/ (automatic tomcat 302 redirection) If you use a rewriteValve to forward "myHost.com/myFolder" to "myHost.com/rewriteTrick/myFolder"

Re: JDBC Realm & exceptions

2015-02-19 Thread Leonid Rozenblyum
I'm sorry for the late response. 1. After deeper check I see our structure is NOT much more complex than standard Tomcat structure. Actually the significant difference is : user roles table has foreign key to id in users table (so we join by id not by username) 2. Great news about fix in 8.0.19!

Chunked encoding bug in tomcat embedded/spring MVC

2015-02-19 Thread andrew-c.brown
Not sure whether the responsibility lies here or with spring so I thought I'd ask here first. Here's the scenario. We have a Jetty 9.2.7 async reverse proxy. It always sends back to the servers behind using chunked encoding. We have backend servers built around embedded 7.0.23 (also tested the l

Fwd: singed code deployment

2015-02-19 Thread Sanaullah
Any one there to help me on this ? Regards, Sanaullah -- Forwarded message -- From: Sanaullah Date: Fri, Feb 13, 2015 at 10:48 PM Subject: singed code deployment To: Tomcat Users List Hi, I have signed the ear package using jar signer and start the tomee using ./startup.sh

Re: Issue with RewriteValve and folders (tomcat 8.0.15)

2015-02-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jérémie, On 2/19/15 4:54 AM, Jérémie Barthés wrote: > When an URL target a folder on the server, tomcat automaticly add a > "/" at the end of the URL if missing : myHost.com/myFolder => > myHost.com/myFolder/ (automatic tomcat 302 redirection) > >

Re: Chunked encoding bug in tomcat embedded/spring MVC

2015-02-19 Thread Mark Thomas
On 19/02/2015 13:05, andrew-c.br...@ubs.com wrote: > Not sure whether the responsibility lies here or with spring so I > thought I'd ask here first. Here's the scenario. > > We have a Jetty 9.2.7 async reverse proxy. It always sends back to the > servers behind using chunked encoding. > > We have

Re: Intermittent handshake_failure message Tomcat

2015-02-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Rajesh, On 2/19/15 1:41 AM, Rajesh Biswas wrote: > We are facing intermittent ssl handshake failure exception in the > client code while connecting the server which runs on Tomcat 7.0.54 > version. > > Below is the ssl configuration in server.xml f

Re: Issue with RewriteValve and folders (tomcat 8.0.15)

2015-02-19 Thread Jérémie Barthés
Tell me what you need about my configuration : rewrite.config file : RewriteRule^/jamfiles/(.*)$/newapp/jamfiles/$1 RewriteRule^/workspace/(.*)$ /newapp/htdocuments/workspace/$1 RewriteRule ^/([a-zA-Z0-9]+)(\.jsp|\.html|\.txt)$ /newapp/htdocuments/$1$2 tomcat version : 8.0.15 (tried

Re: Fwd: singed code deployment

2015-02-19 Thread David kerber
On 2/19/2015 8:56 AM, Sanaullah wrote: Any one there to help me on this ? I don't think there are many tomee people on this list, so you might get better responses somewhere else. Regards, Sanaullah -- Forwarded message -- From: Sanaullah Date: Fri, Feb 13, 2015 at 10:48

Re: Fwd: singed code deployment

2015-02-19 Thread Sanaullah
Thanks David, I think the security Manager is the same as tomcat[1] but need to get some clue on how code signature verification is done? tomcat.apache.org/tomcat-8.0-doc/security-manager-howto.html Regards, Sanaullah On Thu, Feb 19, 2015 at 7:29 PM, David kerber wrote: > On 2/19/2015 8:56 AM

Re: Fwd: singed code deployment

2015-02-19 Thread David kerber
On 2/19/2015 9:52 AM, Sanaullah wrote: Thanks David, I think the security Manager is the same as tomcat[1] but need to get some clue on how code signature verification is done? tomcat.apache.org/tomcat-8.0-doc/security-manager-howto.html I'm sorry, I don't have a clue to give you about code s

Re: Issue with RewriteValve and folders (tomcat 8.0.15)

2015-02-19 Thread Jérémie Barthés
Hi, I made a scenario to make the issue happens : Use a tomcat 8.0.18 Make a file rewrite.config in conf/Catalina/localhost/ that contains : RewriteRule^/mypath/(.*)$/examples/jsp/$1 copy the line className="org.apache.catalina.valves.rewrite.RewriteValve" /> in the conf/serve

Re: singed code deployment

2015-02-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Sanaullah, On 2/13/15 12:48 PM, Sanaullah wrote: > I have signed the ear package using jar signer and start the tomee > using ./startup.sh -security and also edit the catalina.policy > file looks like below. > > I am confused here, how code sign v

Re: singed code deployment

2015-02-19 Thread Sanaullah
Hey Chris, I have imported the public key (singed certificate) of the code signing certificate using keytool to JVM cacerts "/usr/lib/jvm/jdk1.8.0_25/jre/lib/security/cacerts" and certificate alias name is "codesigntest" I mentioned the same alias in in catalina.policy grant signedBy "codesignt

RE: Chunked encoding bug in tomcat embedded/spring MVC

2015-02-19 Thread andrew-c.brown
> From: Mark Thomas [mailto:ma...@apache.org] > On 19/02/2015 13:05, andrew-c.br...@ubs.com wrote: > > Not sure whether the responsibility lies here or with spring so I > > thought I'd ask here first. Here's the scenario. > > > > We have a Jetty 9.2.7 async reverse proxy. It always sends back to th

Re: singed code deployment

2015-02-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Sanaullah, On 2/19/15 10:28 AM, Sanaullah wrote: > I have imported the public key (singed certificate) of the code > signing certificate using keytool to JVM cacerts > "/usr/lib/jvm/jdk1.8.0_25/jre/lib/security/cacerts" and certificate > alias nam

RE: Chunked encoding bug in tomcat embedded/spring MVC

2015-02-19 Thread andrew-c.brown
> > From: Mark Thomas [mailto:ma...@apache.org] On 19/02/2015 13:05, > > andrew-c.br...@ubs.com wrote: > > > Not sure whether the responsibility lies here or with spring so I > > > thought I'd ask here first. Here's the scenario. > > > > > > We have a Jetty 9.2.7 async reverse proxy. It always send

Re: singed code deployment

2015-02-19 Thread Sanaullah
>Can you verify that the certificate is in there by doing "keytool >- -list .../cacerts"? keytool -v --list -keystore /usr/lib/jvm/jdk1.8.0_25/jre/lib/security/cacerts |grep "codesigntest" Enter keystore password: Alias name: codesigntest Owner: CN=codesigntest >> I mentioned the same alias in

Re: Intermittent handshake_failure message Tomcat

2015-02-19 Thread Rajesh Biswas
I am using java version JDK 1.7.0_51. I have java client running in Linux X64 platform. Both the commands which you provided are working perfectly for me. As I mention in my previous mail, the problem is intermittent. Rajesh On Thu, Feb 19, 2015 at 7:50 PM, Christopher Schultz < ch...@christoph

Re: Intermittent handshake_failure message Tomcat

2015-02-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Rajesh, On 2/19/15 12:33 PM, Rajesh Biswas wrote: > I am using java version JDK 1.7.0_51. I have java client running in > Linux X64 platform. > > Both the commands which you provided are working perfectly for me. > > As I mention in my previous ma

Re: Issue with RewriteValve and folders (tomcat 8.0.15)

2015-02-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jérémie, On 2/19/15 10:05 AM, Jérémie Barthés wrote: > I made a scenario to make the issue happens : > > Use a tomcat 8.0.18 > > Make a file rewrite.config in conf/Catalina/localhost/ that > contains : RewriteRule^/mypath/(.*)$/examples/js

Re: JDBC Realm & exceptions

2015-02-19 Thread Felix Schumacher
Am 19.02.2015 um 13:58 schrieb Leonid Rozenblyum: I'm sorry for the late response. 1. After deeper check I see our structure is NOT much more complex than standard Tomcat structure. Actually the significant difference is : user roles table has foreign key to id in users table (so we join by id n

Re: [Tomcat 8] [Listener Web] [RequestDispatcher]

2015-02-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Marco, This is probably a question better asked on the user mailing list. I'm cross-posting to both lists, and I'll give more feedback on the user list. - -chris On 2/19/15 11:25 AM, Marco Semiao wrote: > I use on my application a web listener ( S

Re: singed code deployment

2015-02-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Sanaullah, On 2/19/15 12:26 PM, Sanaullah wrote: >> Can you verify that the certificate is in there by doing >> "keytool - -list .../cacerts"? > > keytool -v --list -keystore > /usr/lib/jvm/jdk1.8.0_25/jre/lib/security/cacerts |grep > "codesigntes

Is NIO2 ready for prime-time?

2015-02-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, I've been using both BIO and NIO connectors for quite some time, now. A few years back, Mark Thomas suggested that the NIO connector was solid enough and offered significant advantages over the BIO connector which is definitely true. The only

[Tomcat 8] [Listener Web] [RequestDispatcher]

2015-02-19 Thread Marco Semiao
Hello, I use on my application a web listener ( ServletContextListener ) that allows you to compile jsp at startup . It does not work on Tomcat 8 because the NullPointerException thrown in : servletContext.getRequestDispatcher ( path); Here is the stack : org.apache.catalina.core.ApplicationCo

Re: Issue with RewriteValve and folders (tomcat 8.0.15)

2015-02-19 Thread André Warnier
Jérémie Barthés wrote: ... Make a file rewrite.config in conf/Catalina/localhost/ that contains : RewriteRule^/mypath/(.*)$/examples/jsp/$1 copy the line className="org.apache.catalina.valves.rewrite.RewriteValve" /> in the conf/server.xml file, line 131 Since this is a Val

Re: Issue with RewriteValve and folders (tomcat 8.0.15)

2015-02-19 Thread Felix Schumacher
Am 19.02.2015 um 21:41 schrieb André Warnier: Jérémie Barthés wrote: ... Make a file rewrite.config in conf/Catalina/localhost/ that contains : RewriteRule^/mypath/(.*)$/examples/jsp/$1 copy the line className="org.apache.catalina.valves.rewrite.RewriteValve" /> in the conf/s

Re: Issue with RewriteValve and folders (tomcat 8.0.15)

2015-02-19 Thread André Warnier
Felix Schumacher wrote: Am 19.02.2015 um 21:41 schrieb André Warnier: Jérémie Barthés wrote: ... Make a file rewrite.config in conf/Catalina/localhost/ that contains : RewriteRule^/mypath/(.*)$/examples/jsp/$1 copy the line className="org.apache.catalina.valves.rewrite.Rewrit

Re: Apparent Bug Introduced between 8.0.15 & 8.0.17

2015-02-19 Thread Ken
Thank you for your comment. I read JSP spec and, I realized there was no mention about static import. Then Im not sure, I would consider that the behavior of previous version of tomcat which supported static import, was non-standard JSP spec. 2015-02-19 2:43 GMT+09:00 Konstantin Kolinko : > 2015

Re: Issue with RewriteValve and folders (tomcat 8.0.15)

2015-02-19 Thread André Warnier
André Warnier wrote: Felix Schumacher wrote: Am 19.02.2015 um 21:41 schrieb André Warnier: Jérémie Barthés wrote: ... ... in the browser, you have to modify your rewrite rules, perhaps by using a RewriteCond with the -d flag, to check first if the URL points to an existing directory, and

Re: singed code deployment

2015-02-19 Thread Sanaullah
I haven't seen anything in the log related to signature verification even i wrote the wrong certificate alias in the catalina.policy file. the resultant log will be the same INFO - Loaded APR based Apache Tomcat Native library 1.1.32 using APR version 1.5.1. INFO - APR capabilities: IPv6 [true]

Re: Issue with RewriteValve and folders (tomcat 8.0.15)

2015-02-19 Thread Felix Schumacher
Am 20. Februar 2015 00:43:40 MEZ, schrieb "André Warnier" : >André Warnier wrote: >> Felix Schumacher wrote: >>> Am 19.02.2015 um 21:41 schrieb André Warnier: Jérémie Barthés wrote: ... >... > in the browser, you have to modify your rewrite rules, perhaps by using a Rewr

Re: Issue with RewriteValve and folders (tomcat 8.0.15)

2015-02-19 Thread Rainer Jung
Am 19.02.2015 um 22:13 schrieb Felix Schumacher: Am 19.02.2015 um 21:41 schrieb André Warnier: Jérémie Barthés wrote: ... Make a file rewrite.config in conf/Catalina/localhost/ that contains : RewriteRule^/mypath/(.*)$/examples/jsp/$1 copy the line in the conf/server.xml fil