Re: [OP but IMPORTANT!] How to increase Memory available to Tomcat?

2020-04-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Calder, On 4/1/20 08:52, calder wrote: > (BTW, I hope you're not running TC as the root user. I see > references to the root user in your CLI output) Great catch! Jim, the first think you should do without doing anything else is stop running at ro

Re: Fwd: Tomcat 9.0.31 - BUG

2020-04-03 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Sathis, You have run across this known bug: https://bz.apache.org/bugzilla/show_bug.cgi?id=64097 Please read that bug report for more details, particularly comment #8. Hope that helps, - -chris On 4/3/20 11:05, sathis kumar wrote: > -- Fo

Re: [EXTERNAL] Re: Tomcat Connection Rest Error

2020-04-06 Thread Christopher Schultz
those successful connection message > suppose to be? I was just asking. How about this part of my reply? On 3/31/20 13:28, Christopher Schultz wrote:> Gary, > > Where does the server hang? On logins? Do you have a thread dump of > a "hung" server? - -chris > -Or

Re: JNI memory leak?

2020-04-06 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 4/3/20 21:48, Mark Boon wrote: > For the past few months we’ve been trying to trace what looks like > gradual memory creep. After some long-running experiments it seems > due to memory leaking when jni_invoke_static(JNIEnv_*, JavaValue*, >

Re: Setting up Tomcat behind an existing Apache httpd server (on Amazon Linux 2)

2020-04-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 James, On 4/6/20 15:53, James H. H. Lampert wrote: > Here is the situation: > > We have an existing Amazon EC2 instance, running Amazon Linux 2, > with an Apache httpd server already running our web sites (for > argument's sake, "foo.com," "bar.com,

Re: 2 questions

2020-04-10 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jon, On 4/9/20 18:45, jonmcalexan...@wellsfargo.com.INVALID wrote: > Potentially off-topic, sorta, questions.> Asking here as it has to > do with connecting to Tomcat. :) Nope, this is the right place. mod_jk is a Tomcat project, not a part of e.g.

Re: Alternatives for AJP

2020-04-10 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 David, On 4/10/20 11:45, David Cleary wrote: > Some of our customers are currently using the AJP connector. Given > the vulnerability and breaking change to address it, now may be a > good time to prompt them look at alternatives. One requirement is

Re: mod_proxy_ajp equivalent for JK_LB_ACTIVATION?

2020-04-10 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, https://bz.apache.org/bugzilla/show_bug.cgi?id=64338 For anyone who likes beer. Or whatever you like to drink (within reason) . - -chris On 3/9/20 17:44, Christopher Schultz wrote: > Rainer, > > On 3/6/20 13:44, Rainer Jung wro

Re: mod_proxy_ajp equivalent for JK_LB_ACTIVATION?

2020-04-10 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, Maybe I can earn myself a beer. >> On 3/6/20 13:44, Rainer Jung wrote: >>> no, the status unfortunately is not available as an Apache env >>> var. > >>> mod_proxy_ajp has a builtin provision for automatic env var >>> forwarding: alle env vars

Re: Alternatives for AJP

2020-04-14 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Frank, On 4/12/20 10:20, Frank Tornack wrote: > It is possible to replace AJP with normal HTTP or HTTPs. > > AJP has an advantage, it needs less bandwidth. Reference? > But it shouldn't make too much difference with today's computer > networks. If

Re: java.lang.IllegalArgumentException: Invalid character found in the request target. The valid characters are defined in RFC 7230 and RFC 3986

2020-04-15 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Manuel, On 4/13/20 15:13, Manuel Dominguez Sarmiento wrote: > Thanks Mark. Including the request line (encoded if necessary to > avoid issues with control characters) should definitely help. Yeah, I was thinking that maybe base64-encoding the reque

Re: Tomcat SSL Connector - Http11NioProtocol - javax.crypto.ShortBufferException on second request

2020-04-15 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Andrea, On 4/14/20 04:29, Parigino Andrea Aiello wrote: > Il giorno lun 13 apr 2020 alle ore 21:49 Rémy Maucherat > ha scritto: > >> On Mon, Apr 13, 2020 at 7:07 PM Mark Thomas >> wrote: >> >>> On 13/04/2020 11:39, Parigino Andrea Aiello wrote: >>

Re: Alternatives for AJP

2020-04-15 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Frank, On 4/15/20 03:05, Frank Tornack wrote: > Chris, > > Am Dienstag, den 14.04.2020, 10:56 -0400 schrieb Christopher > Schultz: >> Frank, >> >> On 4/12/20 10:20, Frank Tornack wrote: >>> It is possible t

Re: [OT] Webapp deployed in Tomcat 8.5.31 fail to use TLSv1.2 when sending mail

2020-04-15 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Curt, Marking [OT] since Tomcat is not responsible for sending email. Responses in-line. On 4/14/20 06:48, Curt Johansson wrote: > Hi, I have a written a webapplication deployed in Tomcat 8.5.31 > that sends mail using Apache-commons email client.

Re: How to shutdown tomcat

2020-04-20 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Olaf and Blake, On 4/17/20 11:51, Olaf Kock wrote: > > On 17.04.20 16:55, Blake McBride wrote: >> I suppose, never mind. I created a startup listener that just >> does a System.exit(0) on contextDestroyed which is what I want - >> exit. >> >> Thank

Re: Reverse proxy and SSL redirect

2020-04-20 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 John, On 4/17/20 13:02, rugman66 . wrote: > I have Apache 2.4.6 running as reverse proxy Stop right now and patch that thing. > for Tomcat 7.0.96 Not quite as old, but depending upon your environment, there may be some critical changes in later v

Re: JNDI match of LDAP hashed passwords fail against cleartext

2020-04-20 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Brian, On 4/20/20 12:17, Christopher Schultz wrote: > Brian, > > On 4/17/20 08:28, Mark Thomas wrote: >> On 16/04/2020 09:56, Brian Burch wrote: >>> On 15/4/20 6:24 am, Mark Thomas wrote: > >> > >>>>

Re: JNDI match of LDAP hashed passwords fail against cleartext

2020-04-20 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Brian, On 4/17/20 08:28, Mark Thomas wrote: > On 16/04/2020 09:56, Brian Burch wrote: >> On 15/4/20 6:24 am, Mark Thomas wrote: > > > >>> I'd expect you to see an error message if your server.xml isn't >>> quite right although that is what this loo

Re: JNDI match of LDAP hashed passwords fail against cleartext

2020-04-21 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 4/21/20 10:31, Mark H. Wood wrote: > On Mon, Apr 20, 2020 at 12:17:54PM -0400, Christopher Schultz > wrote: >> Hmm. The LDAP stuff I think wasn't me, but I understand it a >> little bit. Brian, is there a standard I

Re: Using AJP with 2 versions of Tomcat.

2020-04-21 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Darryl, On 4/21/20 12:03, Darryl Philip Baker wrote: > We currently have an application running in Tomcat7 that is > connected to Apache HTTPD via the mod_jk plugin. I have been asked > to get a newer version of the same application running on the s

Re: [OT] Removing Tomcat ROOT directory causes the server to hang on startup

2020-04-21 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Don, On 4/21/20 09:20, Clough, Don wrote: > Is it possible to remove the tomcat ROOT directory? We have > several applications running on a tomcat instance. I was asked to > clean the webapps directory up and remove any unused folders. This is a goo

Re: Using AJP with 2 versions of Tomcat.

2020-04-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Darryl, On 4/22/20 00:40, Darryl Philip Baker wrote: > Thank you, Christopher, > > I do want to run both versions of the application and tomcat > simultaneously. The current version of the app on using tomcat7 on > the current ports

Re: [OT] Removing Tomcat ROOT directory causes the server to hang on startup

2020-04-22 Thread Christopher Schultz
web app). - -chris > -Original Message- From: Christopher Schultz > Sent: Tuesday, April 21, 2020 6:33 > PM To: users@tomcat.apache.org Subject: Re: [OT] Removing Tomcat > ROOT directory causes the server to hang on startup > > Don, > > On 4/21/20 09:20, Clough, Don wrote:

Re: Strange behavior when deploying new war

2020-04-23 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 John, On 4/23/20 14:38, John Larsen wrote: > New tomcats 9.0.34 seems to fail when uploading new war when theres > a context in server.xml pointing to the particular exploded war. > Says 'The main resource set specified is not valid.' It's like hot

Re: Strange behavior when deploying new war

2020-04-23 Thread Christopher Schultz
t;ROOT.war" >> >> And if you need some sort of identifier on the file: >> "ROOT##alnomost-any-text-you-like.war" >> >> In the meantime, try specifying the path in server.xml as "" >> rather than "/". >> >> Mark >&

Re: Catalina PID file

2020-04-23 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Rafael, On 4/23/20 17:18, Rafael Oliveira wrote: > I does not happen every time, but it happens, actually it happened > twice during a couple of deployments and only in one instance of > several that I have. > > I could not reproduce in a safe and c

Re: Catalina PID file

2020-04-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Konstantin, On 4/24/20 11:27, Konstantin Kolinko wrote: > пт, 24 апр. 2020 г. в 05:25, Christopher Schultz > : >> >> -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 >> >> Rafael, >> >> On 4/23/20 17:18, Ra

Re: JNI memory leak?

2020-04-26 Thread Christopher Schultz
he archives of this list in case someone else is having a similar problem. Thanks, - -chris > On 4/6/20, 12:12 PM, "Christopher Schultz" wrote: > > Mark, > > On 4/3/20 21:48, Mark Boon wrote: >> For the past few months we’ve been trying to trace what looks >

Re: How to write a filter in web.xml to accept partially a URL ?

2020-04-26 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Gilbert, On 4/25/20 08:47, Gilbert Soucy wrote: > Hello, > > I am new to tomcat and I need to filter the URLs to accept all > clients for part of a URL and reject for all clients another part > of this URL. > > In details, I want: > > /abc/def/xyz/*

Re: Limiting multipart file upload sizes

2020-04-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 3/30/20 16:51, Mark Thomas wrote: > On 30/03/2020 21:45, Christopher Schultz wrote: >> All, >> >> In my application under Tomcat 8.5.51, I have configured a >> servlet to allow multipart/form-data submissio

Re: Limiting multipart file upload sizes

2020-04-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 4/27/20 11:30, Christopher Schultz wrote: > Mark, > > On 3/30/20 16:51, Mark Thomas wrote: >> On 30/03/2020 21:45, Christopher Schultz wrote: >>> All, >>> >>> In my application under Tomcat 8.5.51

Re: Limiting multipart file upload sizes

2020-04-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 4/27/20 12:02, Christopher Schultz wrote: > Mark, > > On 4/27/20 11:30, Christopher Schultz wrote: >> Mark, > >> On 3/30/20 16:51, Mark Thomas wrote: >>> On 30/03/2020 21:45, Christopher Schultz wrote: >

Re: Limiting multipart file upload sizes

2020-04-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, I've filed this in Bugzilla: https://bz.apache.org/bugzilla/show_bug.cgi?id=64384 - -chris On 4/27/20 12:10, Christopher Schultz wrote: > Mark, > > On 4/27/20 12:02, Christopher Schultz wrote: >> Mark, > >>

Re: Issue with AJP listener

2020-04-28 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Satya, On 4/28/20 06:06, Satya Kishore Thumu wrote: > We are using apache before Tomcat as front end and using modjk for > connection between apache and Tomcat. After upgrading tomcat(to > 7.0.100 as we have other dependencies we can't use latest as

Re: Issue with AJP listener

2020-04-29 Thread Christopher Schultz
possible to bind to all interfaces, right? Just don't specify a specific interface when creating the server socket? - -chris >> -Original Message- From: Christopher Schultz >> Sent: Tuesday, April 28, 2020 8:19 >> PM To: users@tomcat.apache.org Subject: Re: Issue with AJ

Re: Losing session between calls from mobile phone

2020-04-29 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 AJ, On 4/28/20 16:13, AJ Chen wrote: > Andre, thanks for asking the questions. Yes, we try to get > understand the behaviors. > > We have seen iphone and other android phones, on different > carriers, from different networks, encounter this problem

Re: Losing session between calls from mobile phone

2020-04-29 Thread Christopher Schultz
. Are you always using TLS (HTTPS)? - -chris > On Wed, Apr 29, 2020 at 10:13 AM Christopher Schultz < > ch...@christopherschultz.net> wrote: > > AJ, > > On 4/28/20 16:13, AJ Chen wrote: >>>> Andre, thanks for asking the questions. Yes, we try to get >>>>

Re: Losing session between calls from mobile phone

2020-04-29 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 AJ, On 4/29/20 13:46, AJ Chen wrote: > On Wed, Apr 29, 2020 at 10:28 AM Christopher Schultz < > ch...@christopherschultz.net> wrote: > > AJ, > > On 4/29/20 13:24, AJ Chen wrote: >>>> Chris, When i use my la

Re: Some questions regarding the TLS1.2 port 443 continuously communicating and too many open threads

2020-04-29 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Raghav, On 4/29/20 22:26, Ragavendhiran Bhiman (rabhiman) wrote: > The below is the executer element. > > maxThreads="450" minSpareThreads="5"/> > > I also captured the network pcap and able to see many RST packets > in between that is marked as RE

Re: Some questions regarding the TLS1.2 port 443 continuously communicating and too many open threads

2020-04-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Raghav, On 4/30/20 03:02, Ragavendhiran Bhiman (rabhiman) wrote: > Hello Chris, > > Please see my reply below in line. > > Thanks & Regards, > > Raghav > > On 30/04/20, 9:23 AM, "Christopher Schultz"

Re: Issue with AJP listener

2020-04-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 4/30/20 04:15, Mark Thomas wrote: > On 29/04/2020 18:11, Christopher Schultz wrote: >> Mark, >> >> On 4/28/20 13:33, Mark Thomas wrote: >>> On 28/04/2020 16:30, Satya Kishore Thumu wrote: >>>> Hi C

Re: Issue with AJP listener

2020-04-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Martin, On 4/30/20 05:02, Martin Grigorov wrote: > Hi, > > On Thu, Apr 30, 2020 at 11:15 AM Mark Thomas > wrote: > >> On 29/04/2020 18:11, Christopher Schultz wrote: >>> Mark, >>> >>> On 4/28/20 13

Re: Upgrading from 9.0.20 to 9.0.34 AJP connector issue

2020-04-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Darryl, On 4/30/20 07:59, Darryl Philip Baker wrote: > I am trying to upgrade a development environment from 9.0.20 to > 9.0.34 and I am having issues getting the tomcat-connectors-1.2.46 > (mod_jk) to work in with the new version. Can you be more

Re: Losing session between calls from mobile phone

2020-04-30 Thread Christopher Schultz
ure="true" and the browser will refuse to send them to the server along with requests. So this is likely the problem. So stop using HTTP and always use HTTPS :) - -chris > On Wed, Apr 29, 2020 at 3:05 PM Christopher Schultz < > ch...@christopherschultz.net> wrote: > > AJ, &g

Re: Upgrading from 9.0.20 to 9.0.34 AJP connector issue

2020-05-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Darryl, On 5/1/20 14:32, Darryl Philip Baker wrote: > Continuing the investigation: > > I have the two tomcat installation in /opt/tomcat. Apache HTTPD references the worker file using a path that has a symbolic link that "latest" I can switch to po

Re: Getting 404 error while accessing URL after deployment

2020-05-06 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Megha, On 5/5/20 00:23, Megha Agrawal wrote: > Hi, > >> Where did you look for the logs ? > I look into the files inside the logs folder. > >> Please check your Tomcat configuration. If there are errors >> during the deployment they must be written

Re: Why encrypt with letsencrypt.org

2020-05-07 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jeff, On 5/7/20 14:39, JeffEvans wrote: > So why use letsencrypt.org ? Is this a serious question? Your initial email just looked like weird spam. - -chris > ‐‐‐ Original Message ‐‐‐ On Thursday, 7 May 2020 06:56, > JeffEvans wrote: > >

Re: log4j failed on tomcat9

2020-05-07 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 AJ, On 5/7/20 16:40, AJ Chen wrote: > I use eclipse to develop web app for tomcat, Web app has a > dependent project and so the dependent project and all jars are > added on the classpath for tomcat runtime. Log4j works on tomcat 6. > But after upgr

Re: APR connector questions

2020-05-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Daniel, On 5/8/20 04:25, daniel@dell.com wrote: > We are changing from Nio connector to APR connector to enable FIPS > mode in tomcat. But we hit tomcat hang issue, ssl handshake no > response when run long time. So many close_wait in netstat ou

Re: how do I switch class loaders

2020-05-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Olaf, On 5/8/20 13:19, Olaf Kock wrote: > > On 08.05.20 18:23, Jonathan Yom-Tov wrote: >> Oops, my bad 😁 But that still leaves my original issue: why do I >> get a ClassCastException casting RedissonSessionManager to >> RedissonSessionManager? > > T

Re: Tomcat shutdown password complexity

2020-05-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Calder, On 5/9/20 00:36, calder wrote: > On Fri, May 8, 2020 at 9:07 PM calder > wrote: >> >> On Fri, May 8, 2020, 19:20 Robert Hicks >> wrote: >>> >>> I am trying to find what the password complexity can be. I've >>> looked at several hardening g

Re: APR connector questions

2020-05-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Daniel, On 5/9/20 12:34, daniel@dell.com wrote: > We want to use APR to call openssl also do with native to support FIPS mode in tomcat. > > Software info Tomcat/9.0.34 libtcnative-1-0-1.2.23-15.30.x86_64 Where did you get that? Is it tcnative-

Re: Tomcat shutdown password complexity

2020-05-11 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Roger, On 5/9/20 20:45, Roger Marquis wrote: > calder wrote: >> We've never had occasion to use the password, because we disable >> shutdown (the better option). > > Never did understand this Tomcat oddity. What other application > is configured by

Re: how do I switch class loaders

2020-05-12 Thread Christopher Schultz
r library "helpfully" package log4j inside its own JAR file? - -chris > On Fri, May 8, 2020 at 9:29 PM Olaf Kock > wrote: > >> >> On 08.05.20 19:50, Christopher Schultz wrote: >>> Olaf, >>> >>> On 5/8/20 13:19, Olaf Kock wrote: >&g

Re: seamless restart

2020-05-12 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jonathan, On 5/12/20 05:51, Jonathan Yom-Tov wrote: > I have an application which changes the state of user sessions in > lots of places in the code. Is it possible to do a seamless switch > of Tomcat servers, preserving all sessions? > > I know I c

Re: seamless restart

2020-05-12 Thread Christopher Schultz
ership/cloud/CloudMembershipService.java#L34 > On Tue, May 12, 2020 at 6:06 PM Christopher Schultz < > ch...@christopherschultz.net> wrote: > > Jonathan, > > On 5/12/20 05:51, Jonathan Yom-Tov wrote: >>>> I have an application which changes the state of user >&g

Re: seamless restart

2020-05-12 Thread Christopher Schultz
lly all state >>> would be stored in a central location (e.g. Redis). But, since >>> this is difficult because of the way >> the >>> application is built I thought of using one server and only >>> persisting >> the >>> sessions when the server goes

Re: CentOS Tomcat install seems to ignore setenv.sh

2020-05-12 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 John, Patrick, On 5/12/20 11:47, John Larsen wrote: > Should be chmod 644 and also I wouldnt recommend running tomcat as > root. It's not clear that Tomcaat is running as root, but it IS clear that setenv.sh is writable by ANYBODY and likely run by

Re: seamless restart

2020-05-12 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 5/12/20 16:14, Mark Eggers wrote: > Chris, > > On 5/12/2020 12:55 PM, Christopher Schultz wrote: >> Jonathan, >> >> On 5/12/20 11:20, Jonathan Yom-Tov wrote: >>> The problem is that my application is

Re: CentOS Tomcat install seems to ignore setenv.sh

2020-05-12 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Patrick, On 5/12/20 17:08, Patrick Baldwin wrote: > 102$ sudo service tomcat start Redirecting to /bin/systemctl start > tomcat.service Uhh, doesn't that just call systemd? Are you sure it's restarting at all? If you launch Tomcat with catalina.s

Re: [OT] Re: CentOS Tomcat install seems to ignore setenv.sh

2020-05-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Peter, On 5/13/20 02:48, logo wrote: > Hi calder, > > >> Am 13.05.2020 um 04:59 schrieb calder : >> >> On Tue, May 12, 2020, 21:48 kohmoto >> wrote: >> >>> Hi, Calder, >>> >>> Thank you for your prompt reply. I think Tomcat binary files >>> all hav

Re: Does Tomcat 9 still support AJP connections, REMOTE_USER, and tomcatAuthentication="false"?

2020-05-15 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jim, On 5/15/20 08:42, ohaya wrote: > Yes, I am using Oracle Access Manager (OAM) so we have what they > call an "OAM webgate" that is integrated with the Apache. That > webgate automatically populates an HTTP header named "remote_user" > with the u

Re: RST on TCP level sent by Tomcat

2020-05-18 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Arshiya, On 5/18/20 05:42, Arshiya Shariff wrote: > Hi Team, Can you please help us with the below queries : > > 1. When does a http2 connection close ? We see that the > keepAliveTimeout is 20 seconds by default, but it is not closing > the connect

Re: persistentmanager loads only part of session?

2020-05-18 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jonathan, On 5/18/20 12:52, Jonathan Yom-Tov wrote: > I see the persisted copy in the file and it has two keys, so I > don't think that's it. It's probably some sort of parallelism issue > since it happens only occasionally, but the map is a > Concu

Re: Tomcat 8.5 appends null characters

2020-05-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Martin, On 5/19/20 09:50, Martin Grigorov wrote: > Hi, > > On Tue, May 19, 2020 at 3:32 PM Tuukka Ilomäki > wrote: > >> Dear collective wisdom, as the EOL of Tomcat 7 is looming, we are >> migrating our legacy app from Tomcat 7.0 to Tomcat 8.5. We

Re: Strange occurrence with Tomcat running on an AWS EC2 instance

2020-05-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 James, On 5/18/20 18:47, James H. H. Lampert wrote: > I'm hoping to get the one web server we still have on a cert we > have to pay for switched over to Let's Encrypt, and so I cloned the > server in question to a spot instance. > > The server in qu

Re: Tomcat and Qualsys QID: 87413

2020-05-21 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jon, On 5/18/20 18:37, jonmcalexan...@wellsfargo.com.INVALID wrote: > -Original Message- From: Mark Thomas > Sent: Monday, May 18, 2020 5:29 PM To: users@tomcat.apache.org > Subject: Re: Tomcat and Qualsys QID: 87413 > > On 18/05/2020 21:45

Re: Tomcat 8.5 appends null characters

2020-05-21 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Tuukka, On 5/20/20 14:25, Tuukka Ilomäki wrote: > On 5/19/20 09:50, Martin Grigorov wrote: >>> Hi, >>> >>> On Tue, May 19, 2020 at 3:32 PM Tuukka Ilomäki >>> wrote: >>> Dear collective wisdom, as the EOL of Tomcat 7 is looming, we are mig

Re: Implementing Store and getting java.io.StreamCorruptedException

2020-05-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jonathan, On 5/20/20 10:55, Jonathan Yom-Tov wrote: > I implemented my own Store which uses Redis to persist sessions > (I'm using Jedis as the interface library). I copied most of the > load()/save() code from FileStore. When my Store loads the ses

Re: Clustering/Session Replication in docker swarm

2020-05-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Praveen, On 5/20/20 12:27, Praveen Kumar K S wrote: > Hello, > > I'm not sure if this is the right forum to ask this question. Since > this is a bigger community, I hope someone might have faced this > issue and hope I will get some help. > > I'm se

[OT] Loading KeyStores, detecting types

2020-05-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, I've been writing a utility to scan a bunch of arbitrary files for certificates that are nearing expiration. It's written in Java and it currently works with PEM-encoded DER files (aka OpenSSL files) and PKCS12 keystores. I'm sure it would also

Re: [OT] Loading KeyStores, detecting types

2020-05-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, On 5/22/20 17:01, Christopher Schultz wrote: > All, > > I've been writing a utility to scan a bunch of arbitrary files for > certificates that are nearing expiration. It's written in Java and > it currently works w

Re: HELP wanted: Configure 2 domains, 2 SSL and 2 keyfiles on 1 VPS

2020-05-26 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Maurice, On 5/26/20 09:19, Maurice Poos wrote: > Hello and thank you in advance for looking into this. > > I'm a Dutch native so bare with me... Welcome to the community! > Problem: Trying to configure TOMCAT9 to handle 2 domains on the > same ser

Re: HELP wanted: Configure 2 domains, 2 SSL and 2 keyfiles on 1 VPS

2020-05-26 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Maurice, On 5/26/20 15:02, Maurice Poos wrote: > > > On Tue, May 26, 2020 at 5:30 PM Christopher Schultz > <mailto:ch...@christopherschultz.net>> wrote: > > Maurice, > > On 5/26/20 09:19, Maurice Poos wrote: >

Re: HELP wanted: Configure 2 domains, 2 SSL and 2 keyfiles on 1 VPS

2020-05-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Maurice, On 5/27/20 09:04, Maurice Poos wrote: > Hello Mark, > > It's an honour! > > I reply to this in a non standard way because a few things have > happened while it was night over here. Long story short: it works > now. > > 1) The first thing wa

Re: [OT] HELP wanted: Configure 2 domains, 2 SSL and 2 keyfiles on 1 VPS

2020-05-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, On 5/27/20 08:18, Ian Brown wrote: > I would suggest adding type="RSA" to your certificate elements. > (As shown in Christopher's example & matching your set up). It > defaults to UNDEFINED. Further, the Tomcat documentation talks > about one c

Re: tomcat 8.5 config for ecommerce site, seeing request timeouts

2020-05-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Ayub, On 5/27/20 09:26, Ayub Khan wrote: > previously I was using HTTP/1.1 connector, recently I changed to > NIO2 to see the performance. I read that NIO2 is non blocking so > trying to check how this works. Both NIO and NIO2 are non-blocking. The

Re: tomcat 8.5 config for ecommerce site, seeing request timeouts

2020-05-28 Thread Christopher Schultz
t /is/ providing any value to you. > The current setup is able to handle most of the load, however > there are predictable times where there is an avalanche of requests > and thinking how to handle it gracefully. You are using AWS: use auto-scaling. That's what it's for.

Re: Off topic question

2020-05-28 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jon, On 5/27/20 23:38, jonmcalexan...@wellsfargo.com.INVALID wrote: > I know this is off topic some, but does anyone know why > development seemed to just stop on the tomcat-vault? Maybe because it's just not that useful? It's also pretty simple. Ma

Re: tomcat 8.5 config for ecommerce site, seeing request timeouts

2020-05-29 Thread Christopher Schultz
(2) and (3) to have their own, independent connector and thread pool, just to be safe. You don't want a connection in (1) to stall because a loopback connection can't be made to (2)/(3). Meanwhile, it's sitting there making no progress but also consuming a connection+thread. - -chri

Re: mod_jk and application deployed check

2020-05-29 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Giuseppe, On 5/29/20 11:57, Giuseppe Sacco wrote: > Hello,I have an apache httpd with mod_jk that load balance > requests among two different tomcat servers.Today, one of the > tomcat servers has been rebooted and tomcat could not deploy the > appli

Re: tomcat 8.5 config for ecommerce site, seeing request timeouts

2020-05-31 Thread Christopher Schultz
through nginx (which I wouldn't recommend) or know the correct port numbers to use (which I *do* recommend). - -chris > * protocol="org.apache.coyote.http11.Http11NioProtocol" > connectionTimeout="2" URIEncoding="UTF-8" > redirectPo

Re: tomcat 8.5 config for ecommerce site, seeing request timeouts

2020-06-01 Thread Christopher Schultz
> On Sun, 31 May 2020, 15:44 Christopher Schultz, < > ch...@christopherschultz.net> wrote: > > Ayub, > > On 5/29/20 20:23, Ayub Khan wrote: >>>> Chris, >>>> >>>> You might want (2) and (3) to have their own, independent >>>>

Re: tomcat 8.5 config for ecommerce site, seeing request timeouts

2020-06-01 Thread Christopher Schultz
ht also want to make sure that you do the same thing for any database connections you might use, although holding a database connection open while making a REST API call might be considered a Bad Idea. Hope that helps, - -chris > On Mon, 1 Jun 2020, 16:27 Christopher Schultz, > wrote: > > A

Re: tomcat 9.0 doesn't load the ECDSA keystore. (ver # 9.0.24)

2020-06-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Madhan, On 6/3/20 21:08, Madhan Raj wrote: > OS - CentOS 7.6.1810( Core) > > Below connector doesn't load my EC keystore whereas it works with > RSA . Any insights please . When you say "doesn't load", what do you mean? Possible reasonable response

Re: tomcat 8.5 config for ecommerce site, seeing request timeouts

2020-06-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Ayub, On 6/4/20 11:05, Ayub Khan wrote: > Christopher Schultz wrote: >> There's no particular reason why a request to node1:/app1 needs >> to have its loopback request call node1:/app2, is there? Can >> node1:/app1 call

Re: tomcat 8.5 config for ecommerce site, seeing request timeouts

2020-06-04 Thread Christopher Schultz
, or does it just fill-up your logs? - -chris > On Thu, 4 Jun 2020, 19:47 Christopher Schultz, > wrote: > > Ayub, > > On 6/4/20 11:05, Ayub Khan wrote: >>>> Christopher Schultz wrote: >>>>> There's no particular reason why a request to node1:/app1

Re: Tomcat DB Connection pool timeBetweenEvictionRunsMillis

2020-06-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Steve, On 6/4/20 16:59, Sanders, Steve wrote: > I'm working with an application team that wishes to set the > timeBetweenEvictionRunsMillis setting of their database connection > pool to a very low setting - 20ms. Hah! Sorry. Continue... > Accordi

Re: Vulnerability flagged in Nessus Scan

2020-06-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Fang, Your application's web.xml will only provide error messages for errors which occur when a request has been issued to your application (e.g. /myapp/doesnotexist -> 404 -> your 404 page). But if you request something outside your web application

Re: Tomcat 9.0.0 multiple thread issue

2020-06-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Ripu, On 6/9/20 08:03, Ripu Daman wrote: > Hello everyone, > > I work in an IT firm as a software engineer. I don't know whether > it's a right platform to ask questions based on personal projects > but i believe i will get some help from here. > >

Re: tomcat 9.0 doesn't load the ECDSA keystore. (ver # 9.0.24)

2020-06-11 Thread Christopher Schultz
; On Thu, 4 Jun, 2020, 11:12 pm Madhan Raj, <mailto:madhanra...@gmail.com>> wrote: > > Hi Christopher, > > Yes you correct I can only complete a handshake with RSA cert, not > ECDSA cert. when i try to connect with ECDSA ciphers using > s_client negotiation fails. Madh

Re: Warning "AJP13 protocol: Reuse is set to false" written logs every second of every day. Please help.

2020-06-11 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Alfred, On 6/11/20 11:57, Alfred Bakia wrote: > Hi Everyone, > > This is my very first mail to the users list since joining > yesterday. Not an auspicious start. But I hope I will be able to > contribute in future. I seek your help for a persistent

Re: Warning "AJP13 protocol: Reuse is set to false" written logs every second of every day. Please help.

2020-06-12 Thread Christopher Schultz
privileged > information. If you are not the addressee or authorized to receive this for the addressee, you must not use, copy, disclose, or take any action based on this message or any information herein. If you have received this message in error, please advise the sender immediately by reply e

Re: tomcat 9.0 doesn't load the ECDSA keystore. (ver # 9.0.24)

2020-06-12 Thread Christopher Schultz
" sessionCacheSize="1" > sessionTimeout="1800" sslProtocol="TLS" truststoreType="PKCS12"> Note that you can't handshake using an RSA authentication with an ECDSA certificate. While those ECDHE-RSA-* ciphers in there won't hurt, th

Re: Warning "AJP13 protocol: Reuse is set to false" written logs every second of every day. Please help.

2020-06-16 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Alfred, On 6/15/20 09:45, Alfred Bakia wrote: > Thanks, Chris. To respond to your remarks: > > 1) The warnings, "AJP13 protocol: Reuse is set to false", are > being logged by Tomcat (in the Tomcat AJP connector logs). Weird. I can't find that strin

Re: [OT] [tomcat-users] Issue found during migration of Tomcat version 6.0.35 to 8.5.5

2020-06-16 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, On 6/15/20 10:02, Jason Pyeron wrote: > A quick brief on etiquette. > > 1. Please do not harvest emails and send linked in requests OMG +1 many many times to this. If I haven't met you in person, don't send me a LinkedIn request. > 2.

Re: Cryptominer malware and Tomcat

2020-06-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Pete, On 6/17/20 17:44, Pete Helgren wrote: > I am going to guess that it is one of these two known > vulnerabilities: > > CST-7111: RCE via JSON deserialization (LPS-88051/LPE-165981) The > JSONDeserializer of Flexjson allows the instantiation of a

Re: Version migration problems

2020-06-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Niranjan, On 6/18/20 13:47, Niranjan Rao wrote: > I am trying to migrate from 7.0.73 to 9.0.36 and facing > challenges. > > Java version and operating system version remains same in both > cases. ... and what are those versions? > I have carefully

Re: Version migration problems

2020-06-19 Thread Christopher Schultz
ve always been the case, though, so I'm not sure why it would have worked on Tomcat 7 but no longer works on Tomcat 9. - -chris > On 6/19/20 6:13 AM, Mark Thomas wrote: >> On 19/06/2020 13:19, Christopher Schultz wrote: >>> Niranjan, >>> >>> On 6/18/20 13:

Re: Strange crash-on-takeoff, Tomcat 7.0.104

2020-06-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 James, On 6/19/20 16:14, James H. H. Lampert wrote: > Ladies and Gentlemen: > > In preparation for updating a customer box, I installed Tomcat > 7.0.104 on our own AS/400 (64-bit Java 6 JVM). > > 7.0.93 works just fine on our box, but 7.0.104 seems

<    7   8   9   10   11   12   13   14   15   16   >