Yes, I inherited this mess part time when the original developer left, and am trying to keep it alive, and fix problems as they arise. There are a lot of issues, some cosmetic, and others not so much. The current staff is planning to rewrite using an environment that they are more familiar with, probably .NET. In the meantime I need to keep this thing on life support.
On Thu, Apr 17, 2014 at 10:40 AM, Christopher Schultz < ch...@christopherschultz.net> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA256 > > Mark, > > On 4/17/14, 10:01 AM, Mark Murphy wrote: > > Here is the configuration, as you can see the default host is set > > and the IP is not aliased. > > > > in server.xml ... <Connector port="80" protocol="HTTP/1.1" > > connectionTimeout="20000" redirectPort="443" /> ... <Connector > > protocol="org.apache.coyote.http11.Http11NioProtocol" port="443" > > scheme="https" secure="true" SSLEnabled="true" > > keystoreFile="xxxxxxx.keystore" keystorePass="xxxxxxx" > > keyAlias="xxxxxxx" clientAuth="false" sslProtocol="TLS" /> ... > > <Engine name="Catalina" > > defaultHost="www.torquewrenchrecalibration.com"> ... <Host > > name="www.torquewrenchrecalibration.com" appBase="webapps" > > > Just for the heck of it, I visited this site. The markup there is > horrendous. It's not well-formed, does not conform to the HTML spec, > and has a bunch of totally superfluous Javascript. > > Did your security vendor complain that the server responds with > "Server: Apache-Coyote/1.1"? They often do, even though it makes no > difference whatsoever IMHO. > > - -chris > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1 > Comment: GPGTools - http://gpgtools.org > Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ > > iQIcBAEBCAAGBQJTT+fyAAoJEBzwKT+lPKRY6qsP/RfClbLB57VT7G5eyDaCeMQI > WeuTRi1du39GP3C1zSgqy7iz2ifgM740znKLi7hFkOSAA/Sb0G3iN2gPg/IX7uku > ItGNi0GRYa+k6NqXuwxegGGdUSvMqD2dkmohutJMAC+ANXtOXELO29GLYT5dJk+V > ROH3f0wci73t1jMgf/zuhWiHLyB32jlC2tHXRLhnD+yofMWS3iz4/5pcRk7JRm9f > NjdndQK/mV15P2ZrFMBRaK29bd591VtWZIvCvXnp3RzYesjfDAEqnp6kGZrq+zBe > sbWhigh7Lz1d0O7vjGMc2PMqq+uLckxfNRRcbsmve9qfezNgwLxGh20AiK57Bda3 > 3X5RUlGUh6KgkRuXqFa0BOzsEt3GcpyFDGoTWDwszA5P2l2mkx+n2cq1fGTEk69k > kZjC9i2CbeZ4Bj1gTVGpMP/lpB0QH/TNVVhaaqt19RrFWWrknzVOjcrDvbfDL/du > KYTAfMWJvezdXErLULddczDZ+Yk9hHfllNHg2+DEtmT7Q2DSEf8gYLn1lDgw3Hha > PfirjJAVIQ+i4vpa7zFrDuzvtX33KnEfDx+6Jtif+4XbHBqhD7dPUsW0Vzvcl9o2 > 6SEcvxscqgiWTRYTJZ/jZ7GGY3MdJknYzMJolZ4Jx8qqWMxSYT0M3Xg7H+6+gEvf > uW/+8ke4TsnxZPwWGqkT > =jhbr > -----END PGP SIGNATURE----- > > --------------------------------------------------------------------- > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org > >