[ANN] Apache Tomcat 10.0.0 (beta) available

The Apache Tomcat team announces the immediate availability of Apache Tomcat 10.0.0 (beta). Apache Tomcat 10 is an open source software implementation of the Jakarta Servlet, Jakarta Server Pages, Jakarta Expression Language, Jakarta WebSocket, Jakarta Authentication and Jakarta Annotations specif

[ANN] Apache Tomcat 9.0.41 available

The Apache Tomcat team announces the immediate availability of Apache Tomcat 9.0.41. Apache Tomcat 9 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 9.0.41 is a bugfix and feat

RE: [EXTERNAL] Re: Bouncy Castle FIPS on RHEL 7.3

Thank you Stefan, Chris for the inputs. As I understood from our security experts, there is no moving away from /dev/random (anything else isn't (strongly) FIPS compliant) for us. Thanks, Amit -Original Message- From: Christopher Schultz Sent: Wednesday, December 2, 2020 10:29 AM To:

Re: Updates to POEditor.com

Nice! So we can edit in POEditor without worrying about any escaping issue then. That's great. Cheers, Woonsan On Tue, Dec 8, 2020 at 4:49 AM Mark Thomas wrote: > > All, > > As you are probably aware, the Apache Tomcat project uses POEditor.com > to manage the i18n translations used by the proj

RE: [EXTERNAL] Re: Can Tomcat 9 be FIPS compliant without OpenSSL?

Thank you George for letting us know on -Dorg.bouncycastle.rsa.allow_multi_use=true" JVM option. Will explore this further and update the document (https://github.com/amitlpande/tomcat-9-fips/blob/master/README.md) appropriately. Albeit reluctantly, we have given in to use BCFIPS (over PKCS12

[ANN] Apache Tomcat 8.5.61 available

The Apache Tomcat team announces the immediate availability of Apache Tomcat 8.5.61. Apache Tomcat 8 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and Java Authentication Service Provider Interface for Containers t

TLS on Tomcat: Using ECC and RSA certificates together -- invalid intermediate certificate in chain

I am trying to configure Tomcat 9.0.37 (or later if I need to) to use both an RSA and an ECC certificate for the same host. Platform is Windows 2008 R2, with the Tomcat Native 1.2.24 library installed. My configuration is roughly as follows: The onl

Re: TLS on Tomcat: Using ECC and RSA certificates together -- invalid intermediate certificate in chain

Robert, On 12/9/20 17:54, Robert Turner wrote: I am trying to configure Tomcat 9.0.37 (or later if I need to) to use both an RSA and an ECC certificate for the same host. Platform is Windows 2008 R2, with the Tomcat Native 1.2.24 library installed. Do you know if you are using the APR connect

Re: TLS on Tomcat: Using ECC and RSA certificates together -- invalid intermediate certificate in chain

Thanks Chris for replying. I'm pretty sure I'm using the APR connector. Without double-checking how things are configured... the startup logs show: 09-Dec-2020 21:05:25.689 INFO [main] org.apache.catalina.core.AprLifecycleListener.lifecycleEvent Loaded Apache Tomcat Native library [1.2.24] using

Re: TLS on Tomcat: Using ECC and RSA certificates together -- invalid intermediate certificate in chain

Actually, one incorrect statement in my previous response. testssl.sh didn't report the details of the certificate chain, only that it was broken. I used https://ssllabs.com/ssltest/analyze.html as well, and it reported the specific details of the certificate chain (and that the chain was also brok

Off-loading heavy process

My apologies if this is too vague to warrant consideration. In the recent past I managed a naked port, a Selector, a ThreadPoolExecutor and friends (and it worked well enough...) but a dear and knowledgeable friend suggested embedding tomcat and using http.[3] I have that working, one request