Re: Multiple concurrent sessions

2023-05-25 Thread Christopher Schultz
Stephane, On 5/25/23 12:44, Stephane Passignat wrote: Hello, I would like to open multiple concurrent session in a web-application for one user. As far as I understand, the sessionid is stored in the cookie and the cookie is associated to the server (http://localhost:8080/). So if I open a

Re: OT: java.net.socket exception

2023-05-26 Thread Christopher Schultz
Mark, Jon, On 5/26/23 04:39, Mark Thomas wrote: On 25/05/2023 20:46, jonmcalexan...@wellsfargo.com.INVALID wrote: So, to start I'm not a developer. With that said, have a development team that is getting the exception below in their Tomcat 9.0.74 implementation using Java 11 (also with Java 8)

Get actual protocol from request

2023-06-02 Thread Christopher Schultz
All, Is it possible to get the /actual/ protocol used for communication with a tomcat server? I'm using AJP/13 and request.getProtocol is returning "HTTP/1.1" which is not 100% surprising. I'm wondering if the request has anything in it which specifies the "actual" protocol which was used.

Re: Re-Cannot upload an image file from a deployed JSP page in Tomcat 10

2023-06-02 Thread Christopher Schultz
Lauri, On 6/2/23 02:58, Lauri wrote: @Thomas: I have made a test using the request.getParts() API, as mentioned here: https://docs.oracle.com/javaee/6/tutorial/doc/glrbb.html The test upload application has been modified as: -- web.xml --- http://xmlns.jcp.org/xml/ns/javaee"; xmlns:

Re: Get actual protocol from request

2023-06-02 Thread Christopher Schultz
Mark, On 6/2/23 10:57, Mark Thomas wrote: On 02/06/2023 15:31, Christopher Schultz wrote: All, Is it possible to get the /actual/ protocol used for communication with a tomcat server? I'm using AJP/13 and request.getProtocol is returning "HTTP/1.1" which is not 100% su

[ANN] Community Over Code Conference NA 2023 in Halifax, Canada, 7-10 Oct 2023, CFP is OPEN!

2023-06-06 Thread Christopher Schultz
All, [Cross-posting to dev@, please reply to users@] The Community Over Code Conference (formerly ApacheCon) North America 2023 is in-person in Halifax, Nova Scotia, Canada. It will be held 7 - 10 October 2023 at a location to-be-announced. The call-for-presentations (CFP) is currently open

Re: isGraalAvailable error

2023-06-12 Thread Christopher Schultz
Blake, On 6/9/23 21:33, Blake McBride wrote: I should add that in the stack trace I am seeing: loadClass:862 GroovyClassLoader (groovy.lang) loadClass:973 GroovyClassLoader (groovy.lang) loadClass:960 GroovyClassLoader(groovy.lang) loadClass:593, GroovyClassLoader$InnerLoader (groovy.lang) Ca

Re: Re-Cannot upload an image file from a deployed JSP page in Tomcat 10

2023-06-12 Thread Christopher Schultz
supports that switchover in a very elegant fashion. -chris From: Christopher Schultz Sent: Friday, June 2, 2023 4:45 PM To: users@tomcat.apache.org Subject: Re: Re-Cannot upload an image file from a deployed JSP page in Tomcat 10 Lauri, On 6/2/23 02:58, Lauri wrote: @Thomas: I have made a

[ANN] Apache Tomcat 8.5.90 available

2023-06-12 Thread Christopher Schultz
The Apache Tomcat team announces the immediate availability of Apache Tomcat 8.5.90. Apache Tomcat 8 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 8.5.90 is a bugfix and fea

[ANN] Apache Tomcat 10.1.10 available

2023-06-12 Thread Christopher Schultz
The Apache Tomcat team announces the immediate availability of Apache Tomcat 10.1.110. Apache Tomcat 10 is an open source software implementation of the Jakarta Servlet, Jakarta Server Pages, Jakarta Expression Language, Jakarta WebSocket, Jakarta Authentication and Jakarta Annotations specificat

Re: Informal CIS Benchmark question

2023-06-13 Thread Christopher Schultz
Mark, On 6/12/23 15:52, Mark Thomas wrote: On 12/06/2023 19:13, jonmcalexan...@wellsfargo.com.INVALID wrote: I'm asking because we are doing a review of our base settings. We are using the CIS Benchmarks as a verification. One of these states to set matadata-complete to true. We have never use

Re: Crypto Randomly Not Getting Initialized

2023-06-13 Thread Christopher Schultz
Jerry, On 6/13/23 11:42, Jerry Malcolm wrote: Simon, On 6/13/2023 2:20 AM, Simon Matter wrote: Hi, I am running Tomcat 9.0.56 in multiple AWS EC2 instances with Amazon Linux2 in a production environment.  A couple of years ago, we started getting weird errors that the "Crypto Mechanism" fail

Re: Crypto Randomly Not Getting Initialized

2023-06-13 Thread Christopher Schultz
Jerry, On 6/13/23 11:51, Jerry Malcolm wrote: Reg, On 6/13/2023 2:57 AM, r.barc...@habmalnefrage.de wrote: Hey Jerry, Caused by: java.lang.SecurityException: Can not initialize cryptographic mechanism       at java.base/javax.crypto.JceSecurity.(JceSecurity.java:120) ... 86 mo Caused b

Re: Is it possible to use the PersistentManager with the DeltaManager?

2023-06-13 Thread Christopher Schultz
Manak, On 6/12/23 11:59, Manak Bisht wrote: I am using the DeltaManager to support non-sticky sessions. Every node has a copy of the session information, therefore, there's no issues with this setup in a live application. However, sometimes, in a new build, there are changes which require downti

Re: Crypto Randomly Not Getting Initialized

2023-06-14 Thread Christopher Schultz
Jerry, On 6/13/23 12:25, Jerry Malcolm wrote: Chris, On 6/13/2023 11:03 AM, Christopher Schultz wrote: Jerry, On 6/13/23 11:51, Jerry Malcolm wrote: Reg, On 6/13/2023 2:57 AM, r.barc...@habmalnefrage.de wrote: Hey Jerry, Caused by: java.lang.SecurityException: Can not initialize

Re: Conclusion - Re: Crypto Randomly Not Getting Initialized

2023-06-20 Thread Christopher Schultz
Jerry, On 6/15/23 00:41, Jerry Malcolm wrote: On 6/13/2023 3:46 PM, Jerry Malcolm wrote: On 6/13/2023 12:39 PM, Jerry Malcolm wrote: Rob, On 6/13/2023 11:34 AM, Rob Sargent wrote: In /etc/rc.local I have: -- sleep 120s systemctl start tomcat9 - I

Re: Deploying Multiple versions of Apache Tomcat on the same physical server/Machine

2023-06-20 Thread Christopher Schultz
Shakila, On 6/14/23 12:33, Shakila Rajaiah wrote: I have several java applications running on different production servers. I have the first production server set up to run Java 1.8 and  apache-tomcat-9.0.46. I have the second production server set up to run Java 11 and  apache-tomcat-10.0.27 du

Re: AW: Deploying Multiple versions of Apache Tomcat on the same physical server/Machine

2023-06-20 Thread Christopher Schultz
Alex, On 6/14/23 15:28, a.grub...@bluewin.ch wrote: To be honest, on a production server, I would never install more than one application - of course, if possible. Just the fact, when the server dies, what do you do then? When it is a critical product, then distribute it. Technically, I canno

Re: Words of Wisdom re: Context Versioning - Parallel Deployment

2023-06-20 Thread Christopher Schultz
Dan, On 6/16/23 12:54, Dan McLaughlin wrote: Does anyone have any advice on implementing Context Versioning (parallel deployment) in Tomcat? It seems to have been a feature for quite some time. Is it stable? What are the typical issues people run into? JMX issues? Classloader issues? It shou

Re: Tomcat 9 returns INameEnvironment error

2023-06-20 Thread Christopher Schultz
Joel, On 6/19/23 15:28, Joel Griffith wrote: I found a workaround that I'll post here in case anyone with the same problem stumbles on this thread. The fix is to install the older `libeclipse-jdt-core-java` JDT package from the Ubuntu 20.04 repo. 1. Add the line `deb http://de.archive.ubuntu.c

Re: Tomcat Clustering, Mod_JK, Fail_on_Status, Stopped Application

2023-06-20 Thread Christopher Schultz
Dan, On 6/20/23 11:32, Dan McLaughlin wrote: When I attach with a debugger, I can see what's causing it not to work. When the Web Application is started, then request.getContext(); returns the correct Web Application context, but when the application is stopped, request.getContext(); returns t

Re: Words of Wisdom re: Context Versioning - Parallel Deployment

2023-06-21 Thread Christopher Schultz
Dan, On 6/20/23 18:03, Christopher Schultz wrote: Dan, On 6/16/23 12:54, Dan McLaughlin wrote: Does anyone have any advice on implementing Context Versioning (parallel deployment) in Tomcat? It seems to have been a feature for quite some time. Is it stable?   What are the typical issues

Re: Tomcat hosting issue/bug:

2023-06-21 Thread Christopher Schultz
Virenda, On 6/21/23 00:20, Virendra Barad wrote: I have multiple application with jdk-1.8. And i have alredy checked there is no log printed of any files like stdout, stderror, etc... it's only buffering for particular that application. How are you launching Tomcat? If you are using the standard

Re: Conclusion - Re: Crypto Randomly Not Getting Initialized

2023-06-21 Thread Christopher Schultz
Simon, On 6/21/23 03:19, Simon Matter wrote: Jerry, On 6/15/23 00:41, Jerry Malcolm wrote: On 6/13/2023 3:46 PM, Jerry Malcolm wrote: On 6/13/2023 12:39 PM, Jerry Malcolm wrote: Rob, On 6/13/2023 11:34 AM, Rob Sargent wrote: In /etc/rc.local I have: -- sleep 120s sy

Re: Tomcat Clustering, Mod_JK, Fail_on_Status, Stopped Application

2023-06-21 Thread Christopher Schultz
Mark and Dan, On 6/21/23 04:57, Mark Thomas wrote: On 20/06/2023 17:12, Dan McLaughlin wrote: Mark, What are your thoughts on changing the Tomcat codebase to return a 503 instead of a 404 if a context is marked as distributable or if clustering is enabled and deployed but stopped?  When I did

Re: Get Client Certificate Information

2023-06-21 Thread Christopher Schultz
Timothy, On 6/21/23 13:55, Timothy Ward wrote: Not sure it's lined up right, lost in copy/paste I think, the ^ seems to be initially under the (X509Certificate[]) right before the getHttpServletRequest(), so I thought it didn't like the getHttpServletRequest itself, maybe it doesn't like the get

Re: Get Client Certificate Information

2023-06-22 Thread Christopher Schultz
l. I think your class needs a lot more support than what you have there. -chris On Wed, Jun 21, 2023 at 2:32 PM Christopher Schultz < ch...@christopherschultz.net> wrote: Timothy, On 6/21/23 13:55, Timothy Ward wrote: Not sure it's lined up right, lost in copy/paste I

Re: RHEL 8.6 ==> Tomcat Native 1.2.32 ==> OpenSSLEngine could not initialize

2023-06-22 Thread Christopher Schultz
Hello, On 6/22/23 07:47, S Abirami wrote: Hi All, Our application using embedded tomcat 9.0.62 on RHEL linux environment. Tomcat native version :1.2.32 openssl version OpenSSL 1.1.1k After upgrading from RHEL 7.9 to RHEL 8.6 version, embedded tomcat throws an exception when starting the ap

Re: Get Client Certificate Information

2023-06-22 Thread Christopher Schultz
oyment (in output/build) that you can use directly if you'd like. -chris On Thu, Jun 22, 2023 at 10:04 AM Christopher Schultz < ch...@christopherschultz.net> wrote: Timothy, On 6/21/23 16:56, Timothy Ward wrote: import javax.servlet.http.HttpServletReq

Re: problem with SSL connection java.security.NoSuchAlgorithmException: Error constructing implementation

2023-06-23 Thread Christopher Schultz
Ivano, On 6/8/23 06:10, Ivano Luberti wrote: My web application executes an SSL connection but fails with the following exception  AxisFault: java.security.NoSuchAlgorithmException: Error constructing implementation (algorithm: Default, provider: SunJSSE, class: sun.security.ssl.SSLContextIm

Re: problem with SSL connection java.security.NoSuchAlgorithmException: Error constructing implementation

2023-06-26 Thread Christopher Schultz
Ivano, On 6/8/23 06:10, Ivano Luberti wrote: Hi, all I have the following problem. [snip] My guess is that looking at the code in this general area would be helpful. If you are able to add debug logging in there to spoit-out some of the crypto configuration being used, I'm sure it would hel

Re: Tomcat 10.1.x: Using CoyoteInputStream to read a Chunked Transfer Encoding (CTE) stream, manually, skiping ChunkedInputFilter

2023-06-26 Thread Christopher Schultz
Daniel, On 6/26/23 12:47, Daniel Andres Pelaez Lopez wrote: Hi Tomcat community, I have a requirement where we want to manually decode a Chunked Transfer Encoding (CTE) stream using CoyoteInputStream to have access to the chunk size. This means I want to use CoyoteInputStream.read method and ge

JSP servlet gets tired after a while

2023-06-26 Thread Christopher Schultz
All, Just saw this in production. We resolved it by bouncing the server because we needed to use it :) This is Tomcat 8.5.89. > Exception: java.lang.NullPointerException Stack Trace: > java.lang.NullPointerException: (no message) > org.apache.jasper.JspCompilationContext.createOutputDir(JspC

Re: Tomcat 10.1.x: Using CoyoteInputStream to read a Chunked Transfer Encoding (CTE) stream, manually, skiping ChunkedInputFilter

2023-06-27 Thread Christopher Schultz
Daniel, On 6/26/23 16:15, Daniel Andres Pelaez Lopez wrote: El lun, 26 jun 2023 a las 14:53, Mark Thomas () escribió: On 26/06/2023 20:34, Christopher Schultz wrote: Daniel, On 6/26/23 12:47, Daniel Andres Pelaez Lopez wrote: Hi Tomcat community, I have a requirement where we want to

Re: problem with SSL connection java.security.NoSuchAlgorithmException: Error constructing implementation

2023-06-27 Thread Christopher Schultz
re-building the server. There was nothing specific that could be pointed-to as a likely source of the problem, but now it's just /gone/. It's not entirely satisfying from a "what if it happens again" perspective, but "you can't argue with results." -ch

Re: Tomcat 10.1.x: Using CoyoteInputStream to read a Chunked Transfer Encoding (CTE) stream, manually, skiping ChunkedInputFilter

2023-06-27 Thread Christopher Schultz
Daniel, On 6/27/23 12:56, Daniel Andres Pelaez Lopez wrote: Christopher, El mar, 27 jun 2023 a las 9:33, Christopher Schultz (< ch...@christopherschultz.net>) escribió: Daniel, On 6/26/23 16:15, Daniel Andres Pelaez Lopez wrote: El lun, 26 jun 2023 a las 14:53, Mark Thomas () es

Re: Tomcat 10.1.x: Using CoyoteInputStream to read a Chunked Transfer Encoding (CTE) stream, manually, skiping ChunkedInputFilter

2023-06-28 Thread Christopher Schultz
Daniel, On 6/27/23 15:40, Daniel Andres Pelaez Lopez wrote: You are right, the CMAF format of the segment might bring the fragment size information, but as you state, we might need to parse the segment as it is being uploaded to figure out the fragment size, that's an option over the table, but

[mod_jk] Is it possible to set the value of a specific attribute via HTTP?

2023-06-29 Thread Christopher Schultz
All, I've been using mod_jk forever and have some tools[1][2] to check on the status of a worker and change its state using the status worker. One of the samples I check is the "errors" count and if it's above 0 then I report an error to my monitoring system. The problem is that sometimes w

Re: Unexpected Cache-Control Header Transmission in Dual-Server API Setup

2023-06-30 Thread Christopher Schultz
Uday, On 6/30/23 06:57, Uday Kumar wrote: *Hello,* *Observations:* *1. Issue not replicated through integrated tomcat of Spring-boot when the application was started in IntelliJ IDE* *2. Issue was replicated by installing Tomcat 9 on my local machine and building the corresponding war file.* *

Re: Tomcat Deployment scripts

2023-06-30 Thread Christopher Schultz
Alan, On 6/30/23 06:35, Alan F wrote: This is great thankyou Thomas. Just wondering how secure this is, prefer to be able to deploy with a non 'admin' account does this support a deploy only profile there? So... you are concerned about security but would like a non-admin account to be able to d

Re: View Differences for Tomcat Configuration file versions

2023-06-30 Thread Christopher Schultz
Nadine, On 6/29/23 12:38, Nadine Young wrote: From the following page, the View Differences button nolonger lists the differences in versions of the Configuration file selected.  tomcat.apache.org/migration-9.html#Upgrading_9.0.x Is there another way to easily view the differences? I

Re: [mod_jk] Is it possible to set the value of a specific attribute via HTTP?

2023-06-30 Thread Christopher Schultz
Rainer, On 6/29/23 17:06, Rainer Jung wrote: Hi Chris, Am 29.06.23 um 15:00 schrieb Christopher Schultz: All, I've been using mod_jk forever and have some tools[1][2] to check on the status of a worker and change its state using the status worker. One of the samples I check is the &q

Re: Get Client Certificate Information

2023-06-30 Thread Christopher Schultz
^ [Error] (1: 0): symbol: method HttpServletRequest() [Error] (1: 0): location: class GrabCert [Error] (1: 0): 1 error On Wed, Jun 21, 2023 at 2:32 PM Christopher Schultz < ch...@christopherschultz.net> wrote: Timothy, On 6/21/23 13:55,

Re: [mod_jk] Is it possible to set the value of a specific attribute via HTTP?

2023-07-05 Thread Christopher Schultz
configure Tomcat to participate in that draining, etc. It's this one from ApacheCon 2015: http://home.apache.org/~schultz/ApacheCon%20NA%202015/Load-balancing%20Tomcat%20with%20mod_jk.pdf -chris -Original Message- From: Christopher Schultz Sent: Friday, June 30, 2023 2:19 PM To

Re: [mod_jk] Is it possible to set the value of a specific attribute via HTTP?

2023-07-05 Thread Christopher Schultz
Martin, On 7/3/23 04:47, Martin Knoblauch wrote: On 6/29/23 17:06, Rainer Jung wrote: Since I try to push people into mod_proxy, I am hesitant to implement more and more features which keep people from switching ;) Hi Rainer, so, what do you suggest for the mod_jk retirement? mod_proxy

Re: OT: Question regarding the listeners in the upcoming releases.

2023-07-07 Thread Christopher Schultz
Jon, On 7/6/23 16:22, jonmcalexan...@wellsfargo.com.INVALID wrote: I have a question which is based around the idea of the new Listeners that are being introduced in the upcoming releases. This is based on something I’ve been thinking on for the last 6 to 9 mos. Would it be possible to have a Li

Re: Tomcat9 silently ignores web application

2023-07-07 Thread Christopher Schultz
Graham, On 7/7/23 08:48, Graham Leggett wrote: 1. Please read https://tomcat.apache.org/tomcat-9.0-doc/config/context.html#Defining_a_context You are injecting a Context into a Host at the time when the server.xm

Re: Tomcat links application at the root of the server?

2023-07-07 Thread Christopher Schultz
Graham, On 7/7/23 09:26, Graham Leggett wrote: Is there is application out there that will provide, at / (or a path of your choosing), a list of links of applications currently deployed and running under tomcat? Ideally I want tomcat to tell me what applications have been deployed and if the

Re: OT: Question regarding the listeners in the upcoming releases.

2023-07-07 Thread Christopher Schultz
Elastic). -chris -Original Message----- From: Christopher Schultz Sent: Friday, July 7, 2023 8:39 AM To: users@tomcat.apache.org Subject: Re: OT: Question regarding the listeners in the upcoming releases. Jon, On 7/6/23 16:22, jonmcalexan...@wellsfargo.com.INVALID wrote: I have a question w

[ANN] Apache Tomcat 10.1.11 available

2023-07-10 Thread Christopher Schultz
The Apache Tomcat team announces the immediate availability of Apache Tomcat 10.1.11. Apache Tomcat 10 is an open source software implementation of the Jakarta Servlet, Jakarta Server Pages, Jakarta Expression Language, Jakarta WebSocket, Jakarta Authentication and Jakarta Annotations specificati

[ANN] Apache Tomcat 8.5.91 available

2023-07-10 Thread Christopher Schultz
The Apache Tomcat team announces the immediate availability of Apache Tomcat 8.5.91. Apache Tomcat 8 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 8.5.91 is a bugfix and fea

Re: OT: Question regarding the listeners in the upcoming releases.

2023-07-10 Thread Christopher Schultz
? Yep: have a look at the Manager application docs and let me know if something isn't clear. The docs are kind of thin, so if you think there is room for improvement, I'd be happy to have you augment what's there and I can commit a docs-update. -chris -----Original Message-

Re: Tomcat9 silently ignores web application

2023-07-11 Thread Christopher Schultz
Graham, (Sorry, just getting back to your messages in this thread.) On 7/8/23 06:20, Graham Leggett wrote: On 08 Jul 2023, at 10:08, Graham Leggett wrote: Another data point - when starting the application up under tomcat9 in eclipse, there is also no mention in the logs of the web applicati

Re: Tomcat 9.0.76 Memory leak with Java 17

2023-07-11 Thread Christopher Schultz
James, On 7/11/23 10:21, James Boggs wrote: We had a stable SSL enabled website with Apache Tomcat 9.0.73 on Windows Server 2012 o/s, Java 8, Oracle ORDS 21.4 and SSL. We simultaneously upgraded to Tomcat 9.0.75, upgraded to Java 17 and to ORDS 22.1, then used Java 17 to create a new Java Key

Re: Angular -> Apache 2.4.57 -> Tomcat 10.1.10 over HTTP2

2023-07-11 Thread Christopher Schultz
Dan, On 7/11/23 13:10, Dan McLaughlin wrote: One other note, is I can switch to h2c, and it still fails, and a packet capture shows the entire JSON is delivered to Tomcat, and when I put the JSON from the packet inspection together (Packets 10199 --> 10208) and compare it to what the browser say

Re: Tomcat 9.0.76 Memory leak with Java 17

2023-07-12 Thread Christopher Schultz
Suvendu, On 7/12/23 07:11, Suvendu Sekhar Mondal wrote: On Tue, Jul 11, 2023 at 11:48 PM Christopher Schultz wrote: James, On 7/11/23 10:21, James Boggs wrote: We had a stable SSL enabled website with Apache Tomcat 9.0.73 on Windows Server 2012 o/s, Java 8, Oracle ORDS 21.4 and SSL. We

Re: Tomcat 9.0.76 Memory leak with Java 17

2023-07-12 Thread Christopher Schultz
Michael, On 7/12/23 07:33, Michael Osipov wrote: On 2023/07/11 18:16:24 Christopher Schultz wrote: You should report all of the previous issues to Oracle against their ORDS version 22.1 and ask them to fix them. It's why you write those big, fat checks in the first place ;) This do

Re: Update javax libs to Jakarta libs in Apache Taglibs.

2023-07-12 Thread Christopher Schultz
Bharath, On 7/12/23 05:08, CHILUKA BHARATH wrote: The latest Apache Taglibs( https://tomcat.apache.org/download-taglibs.cgi#Standard-1.2.5) jar classes using javax.servlet.* packages. Do we have any information w.r.t supporting Jakarta when using this specific jar ? If not, is there any plan t

Re: Tomcat 9.0.76 Memory leak with Java 17

2023-07-12 Thread Christopher Schultz
erent) that are usually dumped when a JVM crash occurs. Each of your logs seems to show that Tomcat is being shut-down in an orderly way, though. Are you sure it's crashing and not being intentionally stopped? -chris -Original Message----- From: Christopher Schultz Sent: Wednesda

Re: AW: Tomcat 9.0.76 Memory leak with Java 17

2023-07-13 Thread Christopher Schultz
Thomas, On 7/13/23 02:19, Thomas Hoffmann (Speed4Trade GmbH) wrote: Hello, -Ursprüngliche Nachricht- Von: Christopher Schultz Gesendet: Mittwoch, 12. Juli 2023 21:34 An: users@tomcat.apache.org Betreff: Re: Tomcat 9.0.76 Memory leak with Java 17 Michael, On 7/12/23 07:33, Michael

Re: Update javax libs to Jakarta libs in Apache Taglibs.

2023-07-13 Thread Christopher Schultz
Mark, On 7/13/23 08:08, Mark Thomas wrote: 12 Jul 2023 11:08:23 CHILUKA BHARATH : Hi Team, The latest Apache Taglibs( https://tomcat.apache.org/download-taglibs.cgi#Standard-1.2.5) jar classes using javax.servlet.* packages. Do we have any information w.r.t supporting Jakarta when using th

Re: Angular -> Apache 2.4.57 -> Tomcat 10.1.10 over HTTP2

2023-07-13 Thread Christopher Schultz
Dan, On 7/12/23 22:58, Dan McLaughlin wrote: Well, the deeper I get into the problem, the more complicated it gets. I thought I was onto something, thinking the size of the JSON might have something to do with it, so I created a Python script to call curl POSTs with increasingly larger JSON thi

Re: Migrating tomcat 6 to 9 , rmi client not working

2023-07-14 Thread Christopher Schultz
Dhayalan, On 7/14/23 01:42, Dhayalan Ganapathy wrote: I am trying to migrate tomcat6 with the war to tomcat 9, but rmiclient which is running in tomcat 6 not working in tomcat9. Is rmiclient a component of your application, or something from a third-party? It throws an error  unknown protoc

Re: Client Certificates

2023-07-17 Thread Christopher Schultz
Tim, On 7/17/23 10:58, Timothy Ward wrote: Here is a filter that I am using to get the client certificates, the issue I'm having is passing them along via the headers so they can be picked up as CGI Environment Variables down the road. This does get me the certificate information though. Just

Re: why is @ServerEndpoint not implemented as @inherited?

2023-07-20 Thread Christopher Schultz
To whom it may concern, On 7/18/23 22:50, X wrote: My team is developing a new web app with tomcat 9.0.65 and Spring boot 2.7.4. We declare a @ServerEndpoint  annotated class, which can not be aop-proxied. The root cause is the tomcat implemented like this: ServerEnpoint annotation = pojo.getA

Re: [External] Re: Client Certificates

2023-07-24 Thread Christopher Schultz
ribute. -chris On Mon, Jul 17, 2023 at 3:45 PM Christopher Schultz < ch...@christopherschultz.net> wrote: Tim, On 7/17/23 10:58, Timothy Ward wrote: Here is a filter that I am using to get the client certificates, the issue I'm having is passing them along via the headers so

Re: Problem with the redirect after j_security_check

2023-07-24 Thread Christopher Schultz
Helge, On 7/22/23 11:03, Wiemann, Helge (ESI) wrote: we are using Tomcat 9 and the still the JDBC Realm for authentication. Our starting URL (which is protected) ends with “/boot1#index” The form authentication is then processed through the common url j_security_check. But after a successfu

Re: Problem with session timeout

2023-07-25 Thread Christopher Schultz
Helge, On 7/25/23 05:24, Wiemann, Helge (ESI) wrote: we have a problem that we have set the tomcat timeout to 10 minutes. But after a successful login with a realm, the user is automatically logged out, sometimes after one minute, sometimes other times. I have downloaded the source code, want

Re: Persist function in host manager working in 9.0.60 but not 10.1.x

2023-07-26 Thread Christopher Schultz
Mason, On 7/24/23 20:39, Fong Mason wrote: Last month I setup a new Tomcat instance (10.1.9) since I want to have a try of Spring 6.x. Everything was working fine until I need to add a new virtual host. I had followed the instructions in https://tomcat.apache.org/tomcat-10.1-doc/host-manager-

Re: [External] Re: Supporting Proxy Protocol in Tomcat

2023-07-26 Thread Christopher Schultz
using the patch in its current state, but I see last comment (#24) on the issue and looks like there are some more points to be concluded. Thanks, Amit -Original Message- From: Christopher Schultz Sent: Wednesday, May 10, 2023 4:21 PM To: users@tomcat.apache.org Subject: Re: [External

Re: [External] Re: Supporting Proxy Protocol in Tomcat

2023-07-27 Thread Christopher Schultz
wrote: On 26/07/2023 21:53, Christopher Schultz wrote: Mark, On 7/26/23 13:58, Mark Thomas wrote: I'm not a huge fan of this feature in general. I prefer supporting features backed by specifications rather than vendor specific hacks. I think the PROXY protocol is fairly standard, even i

Re: AW: AW: AJP Connector issue

2020-03-20 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jon, On 3/20/20 13:28, jonmcalexan...@wellsfargo.com.INVALID wrote: > Christopher, > > Is there an entry that can go in the AJP connector to restrict > what addresses it will listen to requests from? Meaning you can list the IP addresse

Re: AW: AW: AJP Connector issue

2020-03-20 Thread Christopher Schultz
to see what I would recommend in terms of a secure deployment of AJP. - -chris > On Fri, Mar 20, 2020 at 12:40 PM Christopher Schultz < > ch...@christopherschultz.net> wrote: > > RK, > > On 3/20/20 09:57, RK Ashburn wrote: >>>> I have tested r successful AJP conn

Re: valve execution order

2020-03-23 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 3/23/20 09:59, Mark Thomas wrote: > On 23/03/2020 13:13, Jonathan Yom-Tov wrote: >> I'm trying to create a valve which will prevent another valve >> from working in case a particular request is made. Is there a way >> to control the valve e

Re: Strange side effect of "antiClickJackingOption" clause in "httpHeaderSecurity"

2020-03-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 James, On 3/23/20 18:10, James H. H. Lampert wrote: > We recently enabled the httpHeaderSecurity filter globally (i.e., > in conf/web.xml) on several customer Tomcat servers, thusly: > >> >> >> >> httpHeaderSecurity >> >> >> org.apache.catalina.fil

Re: Tomcat Wiki Source Code Download

2020-03-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Brian, On 3/24/20 03:11, Brian Burch wrote: > I'm quite baffled! > > http://tomcat.apache.org/source.html gives me the url:- > > http://svn.apache.org/repos/asf/tomcat/site > > I made a clean "svn checkout" and referred to the README.txt about > the

Re: Is it possible to programmatically compile jsp files?

2020-03-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jonathan, On 3/24/20 10:44, Jonathan Yom-Tov wrote: > I have a set of jsp files. These jsps' compilation result changes > whenever a variable in my cache changes. I want to compile them > whenever that variable changes so they're ready to serve with

Re: [OT] Tomcat Wiki Source Code Download

2020-03-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Brian, On 3/24/20 17:54, Brian Burch wrote: > brian@schizo:~/sandboxApache/TOMCAT_8_5_53-dev/tomcat$ find . > -iname "*.xml" | grep -i logging ./webapps/docs/logging.xml This makes my heart ache. Try this instead: brian@schizo:~/sandboxApache/TOMC

Re: Is it possible to programmatically compile jsp files?

2020-03-25 Thread Christopher Schultz
proxies are certainly capable of caching as well. Remember that your "dynamic" page needs to return caching-control headers that are appropriate for your needs. - -chris > On Tue, Mar 24, 2020 at 11:59 PM Christopher Schultz < > ch...@christopherschultz.net> wrote: > >

Re: Connector compressibleMimeType

2020-03-26 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Martynas, On 3/26/20 07:17, Martynas Jusevičius wrote: > I enabled GZip compression on using 8.0.44. You need to upgrade. Support for Tomcat 8.0 ended nearly 2 years ago: http://tomcat.apache.org/tomcat-80-eol.html > Then I noticed that text/html

Practical multipart handling

2020-03-26 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, I'm developing my first multipart handler since .. I dunno, maybe 2005? This is the first time I'll be using the Servlet 3.0 multipart handling, of course through Tomcat. Some of these questions may have answers which are "implementation-specif

Re: Strange side effect of "antiClickJackingOption" clause in "httpHeaderSecurity"

2020-03-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 James, On 3/26/20 12:54, James H. H. Lampert wrote: > On 3/24/20 2:25 PM, Christopher Schultz wrote: >> I don't understand exactly how X-Frame-Options (which is what >> the HttpHeaderSecurityFilter is configuring) is b

Re: Practical multipart handling

2020-03-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Michael, On 3/26/20 12:36, Michael Osipov wrote: > Am 2020-03-26 um 16:03 schrieb Christopher Schultz: >> -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 >> >> All, >> >> I'm developing my first multipart h

Re: Practical multipart handling

2020-03-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Konstantin, On 3/26/20 18:44, Konstantin Kolinko wrote: > чт, 26 мар. 2020 г. в 18:03, Christopher Schultz > : >> >> All, >> >> I'm developing my first multipart handler since .. I dunno, >> maybe 2005?

Re: Does Tomcat/Java get around the problem of 64K maximum client source ports?

2020-03-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Eric, On 3/26/20 13:58, Eric Robinson wrote: > Many people say the maximum number of client ports is 64K. > However, TCP connections only require unique sockets, which are > defined as... > > local_IP:local_port -> remote_ip:remote_port > > Theoreti

Re: Does Tomcat/Java get around the problem of 64K maximum client source ports?

2020-03-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 John, On 3/27/20 13:37, john.e.gr...@wellsfargo.com.INVALID wrote: > A few random thoughts. > > First, this is really a MySQL driver thing, not a Tomcat thing. > If you want to know why the driver does what it does, look at the > driver source. The

Re: Does Tomcat/Java get around the problem of 64K maximum client source ports?

2020-03-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 André, On 3/27/20 11:01, André Warnier (tomcat/perl) wrote: > On 27.03.2020 14:27, André Warnier (tomcat/perl) wrote: >> On 26.03.2020 20:42, Eric Robinson wrote: -Original Message- From: Olaf Kock Sent: Thursday, March 26, 2020 2

Re: Practical multipart handling

2020-03-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 3/27/20 13:35, Mark Thomas wrote: > On 27/03/2020 15:52, Christopher Schultz wrote: >> On 3/26/20 18:44, Konstantin Kolinko wrote: > > > >>> I think that those are available via the standard >>> reques

Re: Practical multipart handling

2020-03-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 3/27/20 14:46, Christopher Schultz wrote: > Mark, > > On 3/27/20 13:35, Mark Thomas wrote: >> On 27/03/2020 15:52, Christopher Schultz wrote: >>> On 3/26/20 18:44, Konstantin Kolinko wrote: > >> > >&

Re: R: Support with error in launcher.log

2020-03-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Luigi, On 3/30/20 08:38, Luigi Tagliafierro wrote: > we have already tried to implement the legacy cookie processor but > with no result. What did you actually do? What was the actual result? I suspect that because: 1. The cookie domain is invali

Re: Does Tomcat/Java get around the problem of 64K maximum client source ports?

2020-03-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Eric, On 3/27/20 16:39, Eric Robinson wrote: > Thanks for all the feedback, André, Christopher, and John. Let me > see if I can quickly answer everyone's comments.> Since there is a > TCB for each connection, and the OS kno

Limiting multipart file upload sizes

2020-03-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, In my application under Tomcat 8.5.51, I have configured a servlet to allow multipart/form-data submissions and I have added this configuration as a part of the config: 1048576 1049600 Without the section, the upload d

Re: Limiting multipart file upload sizes

2020-03-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 3/30/20 16:51, Mark Thomas wrote: > On 30/03/2020 21:45, Christopher Schultz wrote: >> All, >> >> In my application under Tomcat 8.5.51, I have configured a >> servlet to allow multipart/form-data submissio

Re: tomcat7 does not log x-forwarded-for

2020-03-31 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Frank, On 3/31/20 02:26, Frank Tornack wrote: > I currently have a problem with Tomcat7, or rather a colleague has > it. Which exact version of Tomcat 7? > Personally I would like to help him, but I can't find the error > myself. We already asked

Re: R: R: Support with error in launcher.log

2020-03-31 Thread Christopher Schultz
. Try using "grep" on your Java source tree, looking for "new Cookie". - -chris > Da: Christopher Schultz Inviato: > lunedì 30 marzo 2020 17:55 A: users@tomcat.apache.org > Oggetto: Re: R: Support with error in > launcher.log > > Luigi, > > On 3/

Re: Why does Tomcat open connections on localhost?

2020-03-31 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Frank, On 3/31/20 09:30, Frank Tornack wrote: > Yes, these too are for communication between processes. Only you > don't use the network stack. This is a special feature of Unix-like > operating systems. > > DGRAM, unlike STREAM, does not know conne

Re: Why does Tomcat open connections on localhost?

2020-03-31 Thread Christopher Schultz
ns. Why do they need it? Why did they choose those specific manifestations? I have no idea. Go ask Ken Thompson or Dennis Richie (RIP). Or serverfault. The information is out there. I can't give you a canonical source myself. If someone wants to provide a good reference, I'd love to rea

Re: Tomcat Connection Rest Error

2020-03-31 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Gary, On 3/31/20 13:20, Hua, Gary - Saint Louis, MO - Contractor wrote: > After we deploy our application to production in Tomcat server > 9.0.33, we got following error when multiple users login for some > time and the server hangs. Where does th

Re: Increase Transfer-Encoding limit in Apache Tomcat 9.0.14

2020-03-31 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Suraj, On 3/31/20 13:44, Agrawal, Suraj (CORP) wrote: > Thanks for your response, yes the source application is not able > to handle "Chunked" response so we want to disable it or at least > increase the size. 🤦‍♂️ This is a required part of HTTP 1

Re: How to increase Memory available to Tomcat?

2020-04-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jim, On 3/31/20 23:57, o haya wrote: > I think I figured out what is going on. I think that the > parameters were working all right, but the memory that is shown by > the "free" command isn't corresponding to the JVM memory. > > I put together a sm

<    6   7   8   9   10   11   12   13   14   15   >