Re: Debugging Tomcat during shutdown

2022-06-08 Thread Mark Thomas
tch to what you have running. Often you can get away with it, but sometimes I have had issues with breakpoints not activating because I was using the wrong source code. Glad you fixed the NPE anyway. Mark -Original Message- From: Mark Thomas Sent: woensdag 8 juni 2022

Re: LDAPS Configuration with Tomcat

2022-06-08 Thread Mark Thomas
On 08/06/2022 11:54, rakesh meka wrote: Hi Mark/Chirs, The tomact logs says Ldap exception : connection has timed out and sometimes it says error connecting with LDAp server. Time outs could be lots of things. "error" is pretty general. Can you please help me with how do we confi

[ANN] Apache Tomcat 10.1.0-M16 (beta) available

2022-06-09 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat 10.1.0-M16 (beta). Apache Tomcat 10 is an open source software implementation of the Jakarta Servlet, Jakarta Server Pages, Jakarta Expression Language, Jakarta WebSocket, Jakarta Authentication and Jakarta Annotations s

Re: [External] Re: SSL Handshake Failure - Logging Level

2022-06-10 Thread Mark Thomas
etail without impacting the configuration of any other loggers. Mark On 06/06/2022 15:50, Amit Pande wrote: I mean this log is helpful troubleshooting issues in production systems. We can't have Tomcat log level set to DEBUG in this case. And debugging on local/development environments.

[ANN] Apache Tomcat 10.0.22 available

2022-06-11 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat 10.0.22. This release is targeted at Jakarta EE 9. Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 without changes. Java EE applications designed for Tomcat 9 and earlier may be placed in the $

Re: Compile JSP pages dynamically using Tomcat 6.0.45

2022-06-13 Thread Mark Thomas
ed compilation when using a JRE with the latest release of a currently supported version of Apache Tomcat. At the time of writing this email that would be one of: 8.5.81, 9.0.64, 10.0.22 or 10.1.0-M16 Mark - To unsubscribe,

Re: Debugging Tomcat during shutdown

2022-06-13 Thread Mark Thomas
until the debugger attaches. I don't see any reason why that would impact behaviour during JVM shutdown. Mark JP -----Original Message- From: Mark Thomas Sent: woensdag 8 juni 2022 14:50 To: users@tomcat.apache.org Subject: Re: Debugging Tomcat during shutdown On 08/06/2022 13:39, Je

Re: New Install - Manager/html issue

2022-06-13 Thread Mark Thomas
r the target resource or is not willing to disclose that one exists" Any idea how I can resolve the issue? How did you install Tomcat? What is the contents of the $CATALINA_BASE/webapps directory? Mark - To unsubscribe, e-m

Re: New Install - Manager/html issue

2022-06-13 Thread Mark Thomas
Where are you trying to access the Manager from? The same machine as you installed Tomcat or a different one? Mark On 13/06/2022 17:28, brucetobyga...@me.com.INVALID wrote: Chris Both BASE and Home point to the same. I used the attached https://www.digitalocean.com/community/tutorials/how

Re: New Install - Manager/html issue

2022-06-13 Thread Mark Thomas
Take a look in manager/META-INF/context.xml. You'll need to adjust the RemoteAddrValve Mark On 13/06/2022 18:00, Bruce Gavin wrote: That might be the problem! A different machine. On 13 Jun 2022, at 17:41, Mark Thomas wrote: Where are you trying to access the Manager from? The

[ANN] Apache Tomcat Native 1.2.34 released

2022-06-14 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat Native 1.2.34 stable. The key features of this release are: - Refactor the initialization of the native code so it is compatible with Tomcat 10.1.x where deprecated Java classes will be removed - Map the OpenSSL 3.0.

Re: AW: AW: Filehandle left open when using sendfile

2022-06-20 Thread Mark Thomas
Something else? Mark - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: AW: AW: AW: Filehandle left open when using sendfile

2022-06-20 Thread Mark Thomas
On 20/06/2022 11:39, Thomas Hoffmann (Speed4Trade GmbH) wrote: Hello Mark, thanks for your reply! -Ursprüngliche Nachricht- Von: Mark Thomas Gesendet: Montag, 20. Juni 2022 12:06 An: users@tomcat.apache.org Betreff: Re: AW: AW: Filehandle left open when using sendfile On 16/06/2022

Re: Are Apache versions cumulative ?

2022-06-22 Thread Mark Thomas
x contains all the fixes in major.minor.(x-1) Mark - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: CVE-2022-29885

2022-06-22 Thread Mark Thomas
it wasn't safe to do this. If we implement message size limits for cluster messages then an appropriate message limit along with the EncryptInterceptor should be safe (but I can't be certain as we haven't implement

Re: Apache Tomcat 8 - Require Tomcat configuration to restrict exe's from downloading

2022-06-22 Thread Mark Thomas
is my web.xml configuration: abc /abc.exe Change the mapping to /abc.exe/* See section 12.2 of the Servlet specification for details. Mark Can you please help how to stop downloading the CGI application( *http:///abc.exe/* ) from being downloading (I am trying to fix t

Re: How to configure Tomcat 8.5.x to run in with a different windows service user, and what are minimum permissions

2022-06-22 Thread Mark Thomas
the top of my head that will be at least: - file permissions as documented in the security guide - run as service - network access Exactly where are you looking to encrypt the password? Mark - To unsubscribe, e-mail:

[SECURITY] CVE-2022-34305 Apache Tomcat - XSS in examples web application

2022-06-23 Thread Mark Thomas
CVE-2022-34305 Apache Tomcat - XSS in examples web application Severity: Low Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 10.1.0-M1 to 10.1.0-M16 Apache Tomcat 10.0.0-M1 to 10.0.22 Apache Tomcat 9.0.30 to 9.0.64 Apache Tomcat 8.5.50 to 8.5.81 Description: The Form au

Re: State of the Cat 2022

2022-06-27 Thread Mark Thomas
I'm currently drafting one for ApacheCon Asia. Mark On 27/06/2022 20:01, Cathy Spears wrote: Wondering if there will be a State of the cat 2022. Thanks, Cathy DISCLAIMER: The information transmitted in this e-mail message and attachments, if any, may be attorney-client inform

Re: Tomcat 10 with Http2 and compression sometimes closes connection with Firefox

2022-06-27 Thread Mark Thomas
On 26/06/2022 15:59, Thomas Hoffmann (Speed4Trade GmbH) wrote: Hello Mark, few months ago we already discussed an issue with http2 and compression. The old title was "Many IllegalStateException when using http2 protocol". I start from scratch so nobody needs to lookup old stuff and fi

Re: Tomcat freezes with axios

2022-06-29 Thread Mark Thomas
Hi, We need more information to help you. Tomcat version? Tomcat connector configuration (from server.xml)? httpd version? httpd MPM and configuration? mod_proxy configuration? Was the httpd restart graceful or not? Mark On 29/06/2022 19:36, Stephane Passignat wrote: Hello, I&#

Re: AW: Tomcat 10 with Http2 and compression sometimes closes connection with Firefox

2022-06-29 Thread Mark Thomas
On 27/06/2022 21:49, Thomas Hoffmann (Speed4Trade GmbH) wrote: Von: Mark Thomas On 26/06/2022 15:59, Thomas Hoffmann (Speed4Trade GmbH) wrote: Problem: When opening a webpage at a new Tab, Firefox sometimes doesn't load the full page from Tomcat 10 Observation / Circumstances: - Do

Re: Websockets: get Reference to @ServerEndpoint in a Servlet ?

2022-07-04 Thread Mark Thomas
case, it might be sufficient to have a single Endpoint instance. That would allow the use of instance fields rather than static fields. See section 3.1.78 of the WebSocket 2.1 specification for a description of how to configure the use of a single endpoint instance. Mark

Re: AW: Tomcat 10 with Http2 and compression sometimes closes connection with Firefox

2022-07-04 Thread Mark Thomas
On 30/06/2022 07:40, Mark Thomas wrote: I think I'm going to need the sample app to investigate this. I have received the sample application and can recreate the issue. Going back to your original summary: 1) Main page was requested by Firefox from Tomcat (GET ...) 2) Tomcat send

Re: SSL handshake failure logs required for auditing purpose

2022-07-07 Thread Mark Thomas
The next release (9.0.65) will have a dedicated logger for TLS handshake failures. You will be able to configure it like any other logger - including directing it to a dedicated file. Mark On 07/07/2022 17:11, Ragavendhiran Bhiman (rabhiman) wrote: Hi All, I require your kind help in

Re: AW: SSL handshake failure logs required for auditing purpose

2022-07-08 Thread Mark Thomas
he ciphers etc.,? You'll get the remote IP, remote port and whatever information is in the exception. https://github.com/apache/tomcat/blob/9.0.x/java/org/apache/tomcat/util/net/NioEndpoint.java#L1776 Mark Regards, Raghav From: Christopher Schultz Date: Friday, 8 July 2022 at

Re: too many "CLOSE_WAIT" states on Tomcat 80 port and Tomcat does not responding requests to port 80 anymore

2022-07-10 Thread Mark Thomas
probably where you need to be asking for help. Mark - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: too many "CLOSE_WAIT" states on Tomcat 80 port and Tomcat does not responding requests to port 80 anymore

2022-07-10 Thread Mark Thomas
On 10/07/2022 14:25, Jason Zhang wrote: Hi Mark, Thank you for your response. We are currently working with the Alfresco team on this issue. No updates so far. Does this configuration help to mitigate the issue (temporary workaround)? keepAliveTimeout = "0" Given that that is a s

Re: Getting SSL Working on Tomcat9

2022-07-11 Thread Mark Thomas
default value of "_default_" is being used. The error message you are seeing is complaining that the SSLHostConfig for "_default_" is incomplete. Either adding the defaultSSLHostConfigName="*.mydomain.com" attribute to the Connector element or removing

[ANN] Apache Tomcat Migration tool for Jakarta EE 1.0.1

2022-07-11 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat Migration Tool for Jakarta EE 1.0.1 Apache Tomcat Migration Tool for Jakarta EE is an open source software tool for migrating binary web applications (WAR files) and other binary artefacts from Java EE 8 to Jakarta EE 9.

ApacheCon

2022-07-11 Thread Mark Thomas
Mark - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Getting SSL Working on Tomcat9

2022-07-11 Thread Mark Thomas
On 11/07/2022 14:56, George Sexton wrote: Mark, Thanks for looking. If I specify the value for defaultSSLHostConfigName, I still get /SSLHostConfig attribute certificateFile must be defined shen using an SSL connector/. If I remove the hostName from the SSLHostConfig (or specify hostName

[ANN] Apache Tomcat Native 2.0.1 released

2022-07-13 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat Native 2.0.1 stable. The key features of this release are: - JNI API has been reduced to just that required to support Tomcat's OpenSSL based TLS implementation. The APR/native connector is no longer supported in th

Re: Apache Tomcat 8.5.82 Release Date

2022-07-13 Thread Mark Thomas
users. Like all currently supported Tomcat versions, 8.5.x is released on a roughly monthly cycle. The July release for 8.5.x hasn't started yet so I'd expect the release later this month. If you want to follow release planning more closely, then that is discussed on the dev list.

Re: Tomcat 9.0.62: Setting STRICT_SERVLET_COMPLIANCE to true breaks Tomcat Single Sign On

2022-07-14 Thread Mark Thomas
That system property only affects / in Cookie names. Mark On 14/07/2022 21:13, Wenshiuan Tang wrote: --- Description --- I have a web app that is a collection of a few web apps, with a structure like: - apache-tomcat - myWebSite - webapps - web app #1 (login

Re: AW: AW: AW: AW: Filehandle left open when using sendfile

2022-07-20 Thread Mark Thomas
20 Jul 2022 12:09:46 Thomas Hoffmann (Speed4Trade GmbH) : Hello Mark, I briefly want to ask whether the internal discussion about the open JVM file handle when using sendfile/Memory-Mapped-Files resulted in any conclusions? We opted to document the risk of file locking and left the

[ANN] Apache Tomcat 10.1.0-M17 (beta) available

2022-07-20 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat 10.1.0-M17 (beta). Apache Tomcat 10 is an open source software implementation of the Jakarta Servlet, Jakarta Server Pages, Jakarta Expression Language, Jakarta WebSocket, Jakarta Authentication and Jakarta Annotations s

Re: AW: [ANN] Apache Tomcat 9.0.65 available

2022-07-21 Thread Mark Thomas
21 Jul 2022 07:32:20 Thomas Hoffmann (Speed4Trade GmbH) : Hello, I saw just a little typo I think. In the changelog: jmvRoute --> jvmRoute Thanks. Should've fixed in git now. Mark Thanks! Thomas -Ursprüngliche Nachricht- Von: Rémy Maucherat Gesendet: Mittwoch,

[ANN] Apache Tomcat 10.0.23 available

2022-07-26 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat 10.0.23. This release is targeted at Jakarta EE 9. Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 without changes. Java EE applications designed for Tomcat 9 and earlier may be placed in the $

Re: Tomcat 9.0.33 for ubuntu 20.04

2022-08-01 Thread Mark Thomas
where was this bug was fixed? N/A If yes, then is it possible to integrate TOMCAT 9.0.33 in the official repo of Ubuntu 20.04? That would be a question for Ubuntu support. The Apache Tomcat project has no control over downstream distributions. Mark

Re: Tomcat is Automatically Getting Stopped Frequently

2022-08-03 Thread Mark Thomas
Tomcat won't be shutting itself down. Something external must be stopping the process. Check the OS logs. This sounds like the Linux OOM killer. Note: Attachments rarely make it to the list. If you need to share attachments, use a file sharing service. Mark On 03/08/2022 09:12, Pras

Re: TCP timestamp vulnerability -- any insights on how this relates to Tomcat?

2022-08-06 Thread Mark Thomas
relates to Tomcat? It doesn't. This is a a network be stack/ OS issue. The attacks I could find related to the issue were all information disclosure style issue that could help target other attacks. I'd make sure the OS was kept fully patched and not worry about

Re: Error during startup

2022-08-08 Thread Mark Thomas
stion was correct if the problem you are seeing is in application code (i.e. part of the web application under WEB-INF/lib or WEB-INF/classes). If this is an agent then the JAR won't be in the web application. Where, exactly, is the JAR that contains the agent you are trying to use? Mark

Re: End user files uploaded to sftp getting stored in tomcat root directory

2022-08-09 Thread Mark Thomas
This will always be an application issue. Mark On 09/08/2022 09:41, Farash Ahamad wrote: Dear All, I am observing there and several documents (pdf, png, jpeg, etc) which the end user uploads in the application getting stored in tomcat / directory. I would like to understand whether this is

Re: Simple SSL question

2022-08-10 Thread Mark Thomas
osting with SNI you'll need to use SSLHostConfig. Both approaches can be used with JSSE and OpenSSL based TLS implementations. Mark Thanks, Dream * Excel * Explore * Inspire Jon McAlexander Senior Infrastructure Engineer Asst. Vice President He/His Middleware Product Engineering

Re: Simple SSL question

2022-08-11 Thread Mark Thomas
that saves the current config it will use the SSLHostConfig style. Mark - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Find the effective classpath in a spring webapp's Controller

2022-08-22 Thread Mark Thomas
howto at https://tomcat.apache.org/tomcat-9.0-doc/class-loader-howto.html ) 2) Is there a way to read this licenseFile in the WEB-INF\lib directory from the Controller ? ServletContext.getResource("/WEB-INF/lib/licenseFile&quo

Re: Difference between versions

2022-08-22 Thread Mark Thomas
ng That does not helps to support you. Just reply to the list and the OP will see the response. Mark Regards Alex On 22.08.22 16:17, Alex wrote: Hi Mohan. On 21.08.22 04:45, Mohan T wrote: Dear All, Just want to know if there are any major differences between the below tomca

Re: Fwd: users Digest 17 Aug 2022 09:26:06 -0000 Issue 14393 - "BLANK" DIGEST MESSAGE ATTACHMENTS

2022-08-22 Thread Mark Thomas
ot sure if that is causing issues so I have removed one of the subscriptions. Mark Hi. This is the qmail-send program at apache.org. I'm afraid I wasn't able to deliver your message to the following addresses. This is a permanent error; I've given up. Sorry it didn't wo

Re: Tomcat Native and macOS 10.15.7

2022-08-23 Thread Mark Thomas
internally but some use the AJP connector for Apache, and IIRC that needs Tomcat Native, too. AJP does not require APR/Native. There are NIO and NIO2 implementations for AJP. Mark - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: How to setup Strict-Transport-Security in TOMCAT

2022-08-31 Thread Mark Thomas
s any additional steps need to be done for setting up this security flag. Please provide the Connector element(s) (with sensitive data like passwords masked) from your $CATALINA_BASE/conf/server.xml file. Mark - To unsubscri

Re: [EXTERNAL] Re: How to setup Strict-Transport-Security in TOMCAT

2022-08-31 Thread Mark Thomas
c has been received via a secure channel and which via an insecure channel. Mark On 31/08/2022 16:10, Yanhua Wusands wrote: -Original Message----- From: Mark Thomas Sent: Wednesday, August 31, 2022 11:03 AM To: users@tomcat.apache.o

Re: [EXTERNAL] Re: How to setup Strict-Transport-Security in TOMCAT

2022-08-31 Thread Mark Thomas
. That is not correct. There are several options at this point. We need more information to identify the best one. Is it true that all traffic seen by Tomcat must have been sent over TLS between the user agent and AWS LB? Mark -Original Message- From: Mark Thomas Sent: Wednesday

Re: Latest version url

2022-09-03 Thread Mark Thomas
something with a dummy Maven project and a dependency on org.apache.tomcat:tomcat and an appropriate version range. Mark On 03/09/2022 00:27, NH Rao wrote: Greetings, I am looking for a perma link or similar which won't go away and point to latest version of tomcat for the currently supp

Re: Issue with SSL connector in tomcat 10.0.23

2022-09-05 Thread Mark Thomas
perty [clientAuth] to [false] I don't find any equivalent attribute for clientAuth in the documentation. It is certificateVerification on the Connector. Mark PFB snippet of our server.xml file Thanks, Saicharan Burle -Original Message- From: Thomas Hoffmann (Speed4Trade Gm

[ANN] New committer: Han Li

2022-09-06 Thread Mark Thomas
On behalf of the Tomcat committers I am delighted to announce that Han Li (lihan) has been voted in as a new Tomcat committer. Please join me in congratulating Han. Kind regards, Mark - To unsubscribe, e-mail: users-unsubscr

Re: Customizing CorsFilter

2022-09-06 Thread Mark Thomas
one. My concern would be the performance impacts of any measures taken to ensure thread safety. Mark - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Fwd: users Digest 17 Aug 2022 09:26:06 -0000 Issue 14393 - "BLANK" DIGEST MESSAGE ATTACHMENTS

2022-09-06 Thread Mark Thomas
hanged recently? Thanks for looking into this. ezmlm (the software that runs the mailing lists) was updated around the time you first reported these problems. Please raise the issue of the missing line with the ASF infrastructure team as they manage ezmlm for all ASF projec

Re: Customizing CorsFilter

2022-09-06 Thread Mark Thomas
On 07/09/2022 07:31, Mark Thomas wrote: On 06/09/2022 18:42, Amit Pande wrote: Hello all, I am currently using the Tomcat 9.0.65 (9.x) and looking at the possibility of extending the CorsFilter<https://tomcat.apache.org/tomcat-9.0-doc/config/filter.html#CORS_Filter>, special

Re: [External] Re: Customizing CorsFilter

2022-09-07 Thread Mark Thomas
ry lightly used web applications. Provided you don't have long running requests I'd recommend that approach. For editing web.xml, if you want to be sure use a schema aware XML editor. That should a) ensure it is syntactically correct and b) provide auto-completion options. I normally use a

Re: [External] Re: Customizing CorsFilter

2022-09-07 Thread Mark Thomas
On 07/09/2022 12:22, Amit Pande wrote: Thank you, Mark! Will do some more research on this and see if I can leverage this. However, are we still okay refactoring the CorsFilter for extension? Yes, I am sure the committers will consider any such proposal. Mark Thanks, Amit

[ANN] Apache Tomcat Migration tool for Jakarta EE 1.0.3

2022-09-12 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat Migration Tool for Jakarta EE 1.0.3 Apache Tomcat Migration Tool for Jakarta EE is an open source software tool for migrating binary web applications (WAR files) and other binary artefacts from Java EE 8 to Jakarta EE 9.

Re: Tomcat 9 - Missing auth-constraint configuration appears to allow access to protected content

2022-09-18 Thread Mark Thomas
appears to lie within Tomcat as I can reproduce my original issue seen with a Spring Boot application in a stand-alone instance of Tomcat and a simple hand-craft application deployed to it. There is no Tomcat issue here. Tomcat is behaving as required by the Servl

Re: tomcats starting with 200 threads

2022-09-19 Thread Mark Thomas
If the machine / VM / container you are running Tomcat on can't handle 200 threads you should be using a smaller value for maxThreads. Mark On 19/09/2022 15:46, Jonathan Yom-Tov wrote: hi, Sometimes one of our production Tomcats will start with the maximum (200) number of threads i

Re: Tomcat 9.0.65 suspected memory leak

2022-09-19 Thread Mark Thomas
er an OOME - it just has to demonstrate the JVM retaining references to objects you'd expect to have been eligible for GC. If you can reduce it to a single request even better. Mark - To unsubscribe, e-mail: users-unsubsc

Re: AW: AW: AW: Tomcat 10 with Http2 and compression sometimes closes connection with Firefox

2022-09-20 Thread Mark Thomas
On 19/09/2022 19:19, Thomas Hoffmann (Speed4Trade GmbH) wrote: Hello Mark, thanks for the update. The commit looked promising. I tried with Tomcat 10.1 M17 but unfortunately it didn't help. The partly loaded website is still occuring. Setting http2 logging to fine, I can see the foll

[ANN] Apache Tomcat Migration tool for Jakarta EE 1.0.4

2022-09-20 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat Migration Tool for Jakarta EE 1.0.4 Apache Tomcat Migration Tool for Jakarta EE is an open source software tool for migrating binary web applications (WAR files) and other binary artefacts from Java EE 8 to Jakarta EE 9.

Re: AW: AW: AW: AW: Tomcat 10 with Http2 and compression sometimes closes connection with Firefox

2022-09-20 Thread Mark Thomas
On 20/09/2022 17:58, Thomas Hoffmann (Speed4Trade GmbH) wrote: Hello Mark, I will send you the log and access-log to your email address. I am not sure whether it contradicts the observation. For example: - Browser opens a TCP-connection and requests the HTML page. - Tomcat sends single

Re: AW: AW: AW: AW: AW: Tomcat 10 with Http2 and compression sometimes closes connection with Firefox

2022-09-20 Thread Mark Thomas
On 20/09/2022 20:22, Thomas Hoffmann (Speed4Trade GmbH) wrote: Hello Mark, -Ursprüngliche Nachricht- Von: Mark Thomas Gesendet: Dienstag, 20. September 2022 20:13 An: users@tomcat.apache.org Betreff: Re: AW: AW: AW: AW: Tomcat 10 with Http2 and compression sometimes closes connection

Re: AW: AW: AW: AW: AW: AW: Tomcat 10 with Http2 and compression sometimes closes connection with Firefox

2022-09-20 Thread Mark Thomas
On 21/09/2022 06:48, Thomas Hoffmann (Speed4Trade GmbH) wrote: Hallo Mark, thank you for the explanation. Could you guide me in this case? Shall I set all logging options in tomcat to trace (logging.properties)? Thomas, The level of logging in your most recent off-list trace was perfect. The

Re: Question about windows servers support platform for Tomcat 7 and Tomcat 9

2022-09-21 Thread Mark Thomas
.10.x and 9.11.x will be released which will be Tomcat 11 but with Java EE support and so on. Apache Tomcat is supported on any Windows platform currently supported by Microsoft. Mark - To unsubscribe, e-mail: users-uns

Re: Question about windows servers support platform for Tomcat 7 and Tomcat 9

2022-09-21 Thread Mark Thomas
On 21/09/2022 09:16, Terry ST SY/OGCIO wrote: Dear Mark, Many thanks for your reply. As there is some limitation/dependence on upgrade Tomcat 7, may I know Tomcat 7 the windows platform support status before Tomcat 7 end of support. Tomcat 7 was supported on any Windows platform supported by

Re: Choosing Tomcat version for upgrade

2022-09-22 Thread Mark Thomas
guess* that: - Tomcat 8.5.x will no EOL no earlier than 31 March 2024 - Tomcat 9.0.x will be EOL no earlier than 31 March 2027 There is no need up update the specification version in your web application to run on a newer version of Tomcat

Re: Tomcat 8.5.8x patch upgrade failing

2022-09-23 Thread Mark Thomas
Please do not re-post the same question multiple times. Mark On 23/09/2022 16:20, Cannatella, Douglas wrote: Hi All, We are currently using Tomcat 8.5.53 and tried to upgrade patch 8.5.81 & 8.5.82 using Ivanti Patch tool. Our project is using OpenJDK version: 1.8.0_242, Micro

[ANN] Apache Tomcat 10.1.0 (stable) available

2022-09-26 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat 10.1.0 (stable). This is the first stable release of the 10.1.x branch. Apache Tomcat 10 is an open source software implementation of the Jakarta Servlet, Jakarta Server Pages, Jakarta Expression Language, Jakarta WebSo

[ANN] Apache Tomcat 10.0.26 available

2022-09-27 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat 10.0.26. This release is targeted at Jakarta EE 9. Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 without changes. Java EE applications designed for Tomcat 9 and earlier may be placed in the $

Re: AW: Slow startup first time after reboot

2022-09-28 Thread Mark Thomas
Take three thread dumps 5s apart during the slowness and then diff them to see what is moving and what is not. Mark On 28/09/2022 07:30, Thomas Hoffmann (Speed4Trade GmbH) wrote: Hello, could the underlying hardware cause the delay? Maybe the OS has cached some data and don’t need to read

[SECURITY] CVE-2021-43980 Apache Tomcat - Information Disclosure

2022-09-28 Thread Mark Thomas
CVE-2021-43980 Apache Tomcat - Information Disclosure Severity: High Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 10.1.0-M1 to 10.1.0-M12 Apache Tomcat 10.0.0-M1 to 10.0.18 Apache Tomcat 9.0.0-M1 to 9.0.60 Apache Tomcat 8.5.0 to 8.5.77 Description: The simplified imp

Re: AW: Slow startup first time after reboot

2022-09-28 Thread Mark Thomas
Lots of ways. I'd try starting with the jstack tool which should be provided as part of the JDK you are using. Mark On 28/09/2022 17:16, Jerry Malcolm wrote: Thanks, Mark, I'm not familiar with how to take a thread dump in TC. Can you point me to documentation on that? Jerry On

Re: OT: Question about TomcatX.exe files

2022-09-28 Thread Mark Thomas
always be changed. Mark Just curious. Thank you for your time. Dream * Excel * Explore * Inspire Jon McAlexander Senior Infrastructure Engineer Asst. Vice President He/His Middleware Product Engineering Enterprise CIO | EAS | Middleware | Infrastructure Solutions 8080 Cobblestone Rd | Urb

Re: tomcat cherrypick process

2022-09-29 Thread Mark Thomas
august 2022 Author - Mark Thomas Changes - Improve naming . No functional changes *Time of commit: * main branch -3:36:34 10.0.x branch - 3:36:45 9.0.x branch -3:36:49 8.5.x branch - 3:36:53 (i have attached the screenshot of same commit) My question is "Are these changes go though

Re: AW: Slow startup first time after reboot

2022-09-29 Thread Mark Thomas
On 29/09/2022 04:05, Jerry Malcolm wrote: Hi, Mark, Thanks for the info. Getting several thread dumps is not going to be easy in this specific situation.  This problem only occurs on initial boot up of a newly-imaged linux EC2 which is built and launched automatically by the AWS autoscaling

Re: [ANN] Apache Tomcat 9.0.67 available

2022-09-29 Thread Mark Thomas
Yes. Both 10.0.26 and 10.1.0 are also affected. Mark On 29/09/2022 16:35, jonmcalexan...@wellsfargo.com.INVALID wrote: Does this also affect the 10.1.0 (stable) version? Dream * Excel * Explore * Inspire Jon McAlexander Senior Infrastructure Engineer Asst. Vice President He/His Middleware

Re: tomcat 9.0.67 not supported

2022-09-30 Thread Mark Thomas
On 30/09/2022 12:54, zhta...@163.com wrote: Hi, I used the latest version of tomcat (9.0.67) to deploy jsp applications. I found that thetag is not supported, but 9.0.65 does. Is it no longer supported in later versions? https://bz.apache.org/bugzilla/show_bug.cgi?id=66277 -

Re: Context Name replacement variable for conf/context.xml

2022-10-03 Thread Mark Thomas
ht be possible to leverage WebappProperties that JULI uses to implement a new PropertySource. I haven't looked. I suggest created an enhancement request for this feature in Bugzilla. Mark On 03/10/2022 03:14, Christopher Schultz wrote: Kok Hoor, On 10/1/22 10:20, Chew Kok Hoor wrote: I

Re: Question about upgrade from Tomcat 7 to Tomcat 9.0.67

2022-10-05 Thread Mark Thomas
tep 1, determine if you still need to apply it in Tomcat 9. The HttpNioProtocol is the default in 9.0.x. Generally, the settings will translate from 7.0.x but you should still review them to ensure they remain appropriate for your environment.

[ANN] Apache Tomcat 9.0.68 available

2022-10-07 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat 9.0.68. Apache Tomcat 9 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 9.0.68 is a bugfix and fea

Re: Tomcat Redirect Port 80 to 443 and Block OPTIONS HTTP Method

2022-10-07 Thread Mark Thomas
eb.xml. Security constraints get processed before Filters. You can't change the either of the above. What you could do, is remove the transport-guarantee from web.xml and perform the http to https redirect in your Filter. Then you'd have the option to return 405 instead of the

Re: Tomcat Redirect Port 80 to 443 and Block OPTIONS HTTP Method

2022-10-07 Thread Mark Thomas
On 07/10/2022 19:47, Bhavesh Mistry wrote: Hi Mark, Thank you for your quick response. Your proposed solution works by removing the transport-guarantee element. Another quick question, I have Connection has a property called allowTrace method. Is it possible to configure TOMCAT Connector to

Re: About granting permissions to Tomcat JVM

2022-10-08 Thread Mark Thomas
, exactly, are you storing these files? Where, exactly, are CATALINA_HOME and CATALINA_BASE? Mark - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Cannot find annotation method 'value()' in type 'aQute.bnd.annotation.spi.ServiceConsumer'

2022-10-10 Thread Mark Thomas
in the artifact or via a transitive dependency) just to build a project that references the Tomcat classes? That JAR does contain everythign you need. Nothing is stopping you building against the Tomcat embedded JAR. Neither will you see any runtime errors. What is missing here? Nothing.

[ANN] Apache Tomcat 10.0.27 available

2022-10-10 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat 10.0.27. This release is targeted at Jakarta EE 9. Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 without changes. Java EE applications designed for Tomcat 9 and earlier may be placed in the $

Re: Cannot find annotation method 'value()' in type 'aQute.bnd.annotation.spi.ServiceConsumer'

2022-10-11 Thread Mark Thomas
On 10/10/2022 13:34, Garret Wilson wrote: On 10/10/2022 12:14 AM, Mark Thomas wrote: … That is a fairly old version. You should upgrade to the latest version first. I certainly will. I first went through a long list of linting problems in the project; this was one of the things left over

[ANN] Apache Tomcat 8.5.83 available

2022-10-11 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat 8.5.83. Apache Tomcat 8 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 8.5.83 is a bugfix and fea

Re: Cannot find annotation method 'value()' in type 'aQute.bnd.annotation.spi.ServiceConsumer'

2022-10-11 Thread Mark Thomas
On 11/10/2022 16:36, Garret Wilson wrote: Mark, with your help I've figured this out and resolved the issue. Let me summarize and propose a more long-lasting solution. I don't expect you to agree, but please humor me and and least point out anything I understood incorrectly. (After

[ANN] Apache Tomcat 10.1.1 available

2022-10-11 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat 10.1.1. Apache Tomcat 10 is an open source software implementation of the Jakarta Servlet, Jakarta Server Pages, Jakarta Expression Language, Jakarta WebSocket, Jakarta Authentication and Jakarta Annotations specificatio

Re: It seems Tomcat shares libraries between web applications

2022-10-13 Thread Mark Thomas
applications. Mark - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: BIO connector vs NIO connector

2022-10-20 Thread Mark Thomas
can I get the bench mark comparison report ? The raw performance difference for a single connection is marginal. You could probably construct a test that demonstrates either is a few percentage points "better" than the other. The key difference is scalability. Look at the descri

Re: Tomcat 10.1.1 error starting

2022-10-20 Thread Mark Thomas
on of Java 8 that is required? Tomcat 10.1.x requires Java 11 as a minimum. Mark - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: AJP Connector is configured with secretRequired="true" but the secret attribute is either null

2022-10-20 Thread Mark Thomas
no, what else should I do? Show us all the Connector elements in you server.xml file. Mask any sensitive information. Mark - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

<    2   3   4   5   6   7   8   9   10   11   >