Re: tcnative-1.dll on windows environment questions

2009-06-09 Thread Mark Thomas
Derrick Koes wrote:
 The IRI http://tomcat.apache.org/tomcat-5.5-doc/apr.html has the
 information quoted below about the tcnative-1.dll.
 
  
 
 Windows binaries are provided for tcnative-1, which is a statically
 compiled .dll which includes OpenSSL and APR. It can be downloaded from
 here http://tomcat.heanet.ie/native/  as 32bit or AMD x86-64 binaries.
 In security conscious production environments, it is recommended to use
 separate shared dlls for OpenSSL, APR, and libtcnative-1, and update
 them as needed according to security bulletins. Windows OpenSSL binaries
 are linked from the Official OpenSSL website http://www.openssl.org
 (see related/binaries).
 
  
 
 Why would I be concerned security-wise, to use separate dll files?

As it says, so you can update them if a security vulnerability is
announced in one of the ddls without having to wait for the ASF to
provide you with a new static dll.

Mark

 Can I get the separate, compatible binaries for libtcnative and APR?

I think you'd need to compile tcnative yourself. APR is almost certainly
available.

Mark



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



RE: tcnative-1.dll

2009-03-16 Thread Markov.Yanko
As you can see, Chuck, there are other characteristics (common for both 
versions) , too:

 org.apache.coyote.http11.Http11AprProtocol init.

Thank you, Ilya.


Best Regards,
YANKO MARKOV
LTS BULGARIA
-Original Message-
From: Янко Димов Марков 
Sent: Friday, March 13, 2009 4:44 PM
To: users@tomcat.apache.org
Subject: tcnative-1.dll 

Hi, all

How can I tell for sure that tcnative-1.dll is used by tomcat ?
System is Windows 2003 SP2, Tomcat 5.5.20, JDK 1.5.0_11, tcnative-1.dll used is 
1.1.12
Tomcat is started as a service.
File tcnative-1.dll is placed in directory mentioned within 
-Djava.library.path =... in registry.

If it's not in this directory there is a warning in stdout.log(which is the 
only one used for logging).
(can't find... tcnative-1.dll... ), but when it's placed in the directory, 
there is no message about it's loading (as stated in 
http://tomcat.apache.org/native-doc/).

Difference in version behaviour, or...?

Best Regards,
YANKO MARKOV
LTS BULGARIA


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



RE: tcnative-1.dll

2009-03-13 Thread Ilya Kazakevich
Check your stdout (or catalina.out), it should have something like 

org.apache.coyote.http11.Http11AprProtocol init.

Http11AprProtocol  means you use APR, 
Http11Protocol  -- no.



-Original Message-
From: markov.ya...@neftochim.bg [mailto:markov.ya...@neftochim.bg] 
Sent: Friday, March 13, 2009 5:44 PM
To: users@tomcat.apache.org
Subject: tcnative-1.dll 

Hi, all

How can I tell for sure that tcnative-1.dll is used by tomcat ?
System is Windows 2003 SP2, Tomcat 5.5.20, JDK 1.5.0_11, tcnative-1.dll used
is 1.1.12 Tomcat is started as a service.
File tcnative-1.dll is placed in directory mentioned within
-Djava.library.path =... in registry.

If it's not in this directory there is a warning in stdout.log(which is the
only one used for logging).
(can't find... tcnative-1.dll... ), but when it's placed in the
directory, there is no message about it's loading (as stated in
http://tomcat.apache.org/native-doc/).

Difference in version behaviour, or...?

Best Regards,
YANKO MARKOV
LTS BULGARIA


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



RE: tcnative-1.dll

2009-03-13 Thread Jorge Medina

Check catalina.out (or whatever file your Tomcat is logging to). 
I get the following in Unix when not using the APR, you should get a
similar message in Windows or a message indicating that the APR was
found and loaded.

INFO: The APR based Apache Tomcat Native library which allows optimal
performance in production environments was not found on the
java.library.path:
/opt/pdsdk/openssl/lib:/opt/pdsdk/apr/lib:/opt/pdsdk/apr-util/lib::/usr/
java/jdk1.6.0_07/jre/lib/amd64/server:/usr/java/jdk1.6.0_07/jre/lib/amd6
4:/usr/java/packages/lib/amd64:/lib:/usr/lib
Mar 12, 2009 1:42:40 PM org.apache.coyote.http11.Http11Protocol init


-Jorge

-Original Message-
From: markov.ya...@neftochim.bg [mailto:markov.ya...@neftochim.bg] 
Sent: Friday, March 13, 2009 10:44 AM
To: users@tomcat.apache.org
Subject: tcnative-1.dll 

Hi, all

How can I tell for sure that tcnative-1.dll is used by tomcat ?
System is Windows 2003 SP2, Tomcat 5.5.20, JDK 1.5.0_11, tcnative-1.dll
used is 1.1.12 Tomcat is started as a service.
File tcnative-1.dll is placed in directory mentioned within
-Djava.library.path =... in registry.

If it's not in this directory there is a warning in stdout.log(which is
the only one used for logging).
(can't find... tcnative-1.dll... ), but when it's placed in the
directory, there is no message about it's loading (as stated in
http://tomcat.apache.org/native-doc/).

Difference in version behaviour, or...?

Best Regards,
YANKO MARKOV
LTS BULGARIA


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



RE: tcnative-1.dll

2009-03-13 Thread Caldarale, Charles R
 From: markov.ya...@neftochim.bg [mailto:markov.ya...@neftochim.bg] 
 Subject: tcnative-1.dll 
 
 If it's not in this directory there is a warning in 
 stdout.log(which is the only one used for logging).
 (can't find... tcnative-1.dll... ), but when it's placed 
 in the directory, there is no message about it's loading (as 
 stated in http://tomcat.apache.org/native-doc/).

That's characteristic of the 2.5-year old Tomcat you're running; newer ones put 
a positive message in the logs when APR is being used. Your lack of a negative 
message is the only indication you'll get on such an old level.

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: tcnative-1.dll

2009-03-13 Thread Markus Schönhaber
markov.ya...@neftochim.bg:

 How can I tell for sure that tcnative-1.dll is used by tomcat ?
 System is Windows 2003 SP2, Tomcat 5.5.20, JDK 1.5.0_11, tcnative-1.dll used 
 is 1.1.12
 Tomcat is started as a service.
 File tcnative-1.dll is placed in directory mentioned within 
 -Djava.library.path =... in registry.
 
 If it's not in this directory there is a warning in stdout.log(which is the 
 only one used for logging).
 (can't find... tcnative-1.dll... ), but when it's placed in the 
 directory, there is no message about it's loading (as stated in 
 http://tomcat.apache.org/native-doc/).
 
 Difference in version behaviour, or...?

It was not that long ago that Chuck proved me wrong, so I could easily
remember that this question was asked recently:
http://marc.info/?l=tomcat-userm=123326323910806w=2

Bottom line for Tomcat 5.5: if the native lib is found, no message will
appear in the logs. Only failure to load it will be logged.
Tomcat 6.0 will print out information in either case.

Regards
  mks

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: tcnative-1.dll version 1.1.6 getaddrinfo error

2006-10-24 Thread Mladen Turk

Ron Wheeler wrote:
In Windows 2000, you get a message that an entry point for getaddrinfo 
can not be found when Tomcat tries to start. Replacing the 1.1.6 version 
with 1.1.4 gets Tomcat working again.





If you don't like the Microsoft IPV6 update for WIN2000,
use the tcnative-1-noipv6.dll (rename it to the tcnative-1.dll)
from:
http://tomcat.heanet.ie/native/1.1.6/binaries/win32/
This is the version for pre-ipv6 winsock.

Regards,
Mladen.

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: tcnative-1.dll version 1.1.6 getaddrinfo error

2006-10-23 Thread Mladen Turk

Ron Wheeler wrote:
The download of version 1.1.6 of the windows binary of tcnative-1.dll 
from http://tomcat.heanet.ie/native/ appears to have been built with a 
set of libraries that only work on Windows XP.
In Windows 2000, you get a message that an entry point for getaddrinfo 
can not be found when Tomcat tries to start. Replacing the 1.1.6 version 
with 1.1.4 gets Tomcat working again.




1.1.6 binary was build with IPV6 support, so
you will need IPV6 Support for Win 2000
See how to install:
http://msdn.microsoft.com/downloads/sdks/platform/tpipv6/faq.asp

Of course, you can build an binary by yourself without IPV6.

Regards,
Mladen.

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]