Re: Extensibility of LegacyCookieProcessor?

2021-01-20 Thread Polina Georgieva
Hi Chris, >I'm curious: what customization do you need, here? We’d like to override the generateHeader(Cookie cookie, HttpServletRequest request) because we need to centrally handle the addition of the sameSite cookie attribute of the session cookie as some old browser versions do not support the

AccessLog implementation via logging subsystem?

2021-01-20 Thread Thomas Meyer
Hi, as far as I can see there seems to be no AccessLog interface implementation that is using the standard tomcat logging subsystem. Is there a reason for this? I have a use case were I want to forward access log to splunk via http event collector endpoint. The idea is to log access log via tomc

Re: SSL trouble in embeddedLand

2021-01-20 Thread Rémy Maucherat
On Tue, Jan 19, 2021 at 5:02 AM Rob Sargent wrote: > > Stuck in my basement with no real domain I'm having trouble setting up > SSL/TLS on an embedded tomcat instance. And I'm very lost, having tried > more dead ends than I can remember. > > I used this to generate cert and key > openssl req -out

Re: SSL trouble in embeddedLand

2021-01-20 Thread Rob Sargent
On 1/20/21 8:15 AM, Rémy Maucherat wrote: On Tue, Jan 19, 2021 at 5:02 AM Rob Sargent wrote: Dealing with a complex configuration using the embedded API can be a bit problematic. If you're using a recent Tomcat 9 (9.0.38+), you could use the code generator that was designed for ahead of time c

Re: AccessLog implementation via logging subsystem?

2021-01-20 Thread Mark Eggers
Thomas, On 1/20/2021 2:59 AM, Thomas Meyer wrote: Hi, as far as I can see there seems to be no AccessLog interface implementation that is using the standard tomcat logging subsystem. Is there a reason for this? I have a use case were I want to forward access log to splunk via http event colle

Re: AccessLog implementation via logging subsystem?

2021-01-20 Thread Mark Thomas
On 20/01/2021 10:59, Thomas Meyer wrote: > Hi, > > as far as I can see there seems to be no AccessLog interface implementation > that is using the standard tomcat logging subsystem. > Is there a reason for this? > I have a use case were I want to forward access log to splunk via http event > col

Re: AccessLog implementation via logging subsystem?

2021-01-20 Thread Felix Schumacher
Am 20.01.21 um 18:44 schrieb Mark Thomas: > On 20/01/2021 10:59, Thomas Meyer wrote: >> Hi, >> >> as far as I can see there seems to be no AccessLog interface implementation >> that is using the standard tomcat logging subsystem. >> Is there a reason for this? >> I have a use case were I want to

Re: Reg: Jars under web-inf lib being accessed by tomcat even when the application is not running.

2021-01-20 Thread Christopher Schultz
Jalaj, On 1/19/21 14:34, Jalaj Asher wrote: Yes the auto deploy is set to false in our environment. How about auto-reload for the application? auto-deploy is a property of the host, not the application (context). I am not sure which background processor are you referring to ? if you can shar

Re: Extensibility of LegacyCookieProcessor?

2021-01-20 Thread Christopher Schultz
Polina, On 1/20/21 04:24, Polina Georgieva wrote: I'm curious: what customization do you need, here? We’d like to override the generateHeader(Cookie cookie, HttpServletRequest request) because we need to centrally handle the addition of the sameSite cookie attribute of the session cookie as so

Regarding PSK and SRP support for Tomcat 9.0.37 server

2021-01-20 Thread Rahul Shukla
Hi All, I am using Tomcat server with version 9.0.37 and JSSE is configured for TLS. *Use Case:* TLS Client, that uses OpenSSL1.1.1d internally, is trying to connect this Tomcat server using PSK and SRP based ciphers(Ex : _RSA-PSK-AES256-GCM-SHA384). Here we are observing a Fatal error on the clien