can one app check another is available?

is responding whenever it restarts. I can do this if I know the full URL, but is there any way I can check with just the server-relative URL? Currently I do something like (new java.net.URL(...)).openConnection() (hmm, sorry but I guess this isn't Tomcat-specific...) Paul Singleton -- No virus found

manager for address-based virtual hosts?

Is there a version of the Manager app which handles all address-based virtual hosts in a Tomcat system? I've tried ManagerX which embraces name-based hosts but not the address-based ones which our SSL-enabled apps require... Paul Singleton -- No virus found in this outgoing message. Checked

Re: an advice neede for use of encodeURL method...

jonas skrebys wrote: Hi everyone, could anyone help me understand what I am doing wrong... I want to put a session tracking into my jsp page. I use response.encodeURL method to rewrite all url in my page : a href=% response.encodeURL(/appName/myJSP.jsp?parameter = + value); % also I

Re: Deploying a webapp under two different URIs

Aliascarshare2work.net/Alias Aliaswww.carshare2work.co.uk/Alias Aliaswww.carshare2work.com/Alias Aliaswww.carshare2work.net/Alias but I don't know of any way to alias a Context. Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.344 / Virus Database

Re: Running Tomcat as Non-Root under Linux listen for port 80

-A FORWARD -p tcp -i eth0 -d 222.123.197.100 --dport 8080 -j ACCEPT Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.344 / Virus Database: 267.11.8/113 - Release Date: 27/Sep/2005

ManagerX for 5.5.9

way, and should I notice any difference? I am using it because I have several virtual hosts, both name-based and (where SSL is requirede) address-based, and wish to manage the whole lot together. Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version

Re: Can't change servlet path

the filenames used for either the .xml context file or the docBase. From which I infer that the Context element for the default web application of a virtual host should be held in a file named .xml ? Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version

virtual host apps in a common appBase

). This does what I want, but seems inelegant: can I do better? Am I missing something? Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.344 / Virus Database: 267.11.6/111 - Release Date: 23/Sep/2005

Re: tomcat and firefox ssl problem - no common encryption algorithms

? Have you explicitly set the sslProtocol attribute in your SSL connector (despite the docs this is necessary in 5.5.9, fixed thereafter) Connector ... sslProtocol=TLS ... Have you tried another browser in case you get a more helpful message (what Firefox said is not true)? cheers Paul

conf/tomcat-users.xml syntax and semantics

restart, and has its permissions reset (from -rw--- to -rw-rw-r--) Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.344 / Virus Database: 267.11.3/107 - Release Date: 20/Sep/2005

relaying SSL request to a non-SSL server

and writing the image data to the ServletOutputStream. Is there an easier way? I cannot SSL-enable the image server :-( If I do this, how should I read the binary data from the InputStream and write it to the ServletOutputStream? Paul Singleton -- No virus found in this outgoing message

Re: large content directory out of the webapp

Eickvonder Bjoern wrote: Hello, my webapplication consists of a rather small set of classes, jsps and so on but has got a rather large content directory (some GB). My problem is now if I want to update only the application itself but not the content by uploading a new war-file I nevertheless

Re: Turning off the containers session

Atif Suleman wrote: Can you stop tomcat container from creating a jsession cookie? Check out the Context cookies=false attribute in http://jakarta.apache.org/tomcat/tomcat-5.5-doc/config/context.html (similarly in 5.0 and 4.1) Paul Singleton -- No virus found in this outgoing message

Re: HTTP status code 404

to the browser, which will then presumably present this failure to the user in its own way. Or have I musunderstood 404s? Exactly what error-page element will achieve this, and where should we call ...setStatus(...NOT_FOUND)? Paul Singleton Mirek Stohr wrote: You should use the following procedure

Re: HTTP status code 404

QM wrote: On Mon, Sep 05, 2005 at 06:28:05PM +0100, Paul Singleton wrote: : But we want *no* error page, just a 404 status returned to : the browser, which will then presumably present this failure : to the user in its own way. Or have I musunderstood 404s? Yes and no. Browsers are free

Re: With tomcat 5 redirects to a secure port fails

with the www. defined. OK but I can't see that it is Tomcat which is responsible for this: the config details you supply look plausible but are irrelevant. Check your web.xml for the site's welcome page, then check the content of this page. Paul Singleton We had this set up in tomcat 4

Re: refusing low-grade SSL connections

(!) (the exclamation marks are serversniff's :-) so I am proposing to add a Connector attribute ciphers=EDH-RSA-DES-CBC3-SHA,DES-CBC3-SHA,DHE-RSA-AES128-SHA,AES128-SHA,RC4-SHA,RC4-MD5 and hope that every legitimate client supports at least one of these? Paul Singleton wrote: According

Re: tomcat 5.5.9 not recompiling JSPs

Mark Hagger wrote: ... Although to be honest I suspect that the best solution for production boxes is to pre-compile all jsps into the war file anyway. Is this possible? Don't different containers store the compiled pages in different places, with different names? Paul Singleton

Re: Use port 443 as non-ssl

for this anyway? (at a guess, something about getting through a firewall?) Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.338 / Virus Database: 267.10.13/78 - Release Date: 19/Aug/2005

Re: Use port 443 as non-ssl

attributes in your conf/server.xml Im not using the ssl (it is between !-- --). Good - leave it there :-) Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.338 / Virus Database: 267.10.13/78 - Release Date: 19/Aug/2005

Re: SSL with Tomcat 55

is that she can configure JDeveloper to ignore certificate errors. If your objective is, as you say, to get Tomcat working with SSL, then I think you are already there. Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.338 / Virus Database: 267.10.12

refusing low-grade SSL connections

. How can we achieve all this (esp. with Tomcat 5.5)? Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.338 / Virus Database: 267.10.12/77 - Release Date: 18/Aug/2005

Re: suppress directory listing

Many thanks to Tim, Arup, Stephen and Aaron for three different solutions (per-directory, per-application and per-Tomcat), *all* of which I reckon oughta be in the FAQ :) cheers Paul Singleton My JSP app has a /images folder and Tomcat 5.5.9 happily serves up a directory listing of this: how

Re: TomCat 5.5.9 - 8443

not found? Do the startup msgs claim that e.g. 09-Aug-2005 15:29:04 org.apache.coyote.http11.Http11Protocol init INFO: Initializing Coyote HTTP/1.1 on http-8443 09-Aug-2005 15:29:09 org.apache.coyote.http11.Http11Protocol start INFO: Starting Coyote HTTP/1.1 on http-8443 Paul Singleton

Re: session problems: www.blahblah.com versus blahblah.com

* this :-) Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.338 / Virus Database: 267.10.9/72 - Release Date: 14/Aug/2005 - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional

Re: anonymising Tomcat

they baulk at a 2.4 web.xml? Since every JSP nominates an error page, presumably that catches exceptions, and we only need to handle nonexistent-page errors? I'll re-read the 2.2 spec... Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.338

Re: How force Tomcat 5.5.4 to always use URL Rewriting

in different browser tabs?) (OK I could switch off cookies in the browser but that would affect other things...) but also because it makes support issues cookie-independent hence simpler. But what is the rationale for Tomcat preferring to use cookies? is there a downside to avoiding them? Paul

Re: Security Questions Regarding Tomcat

. Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.338 / Virus Database: 267.10.7/70 - Release Date: 11/Aug/2005 - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands

Re: Using more than one SSL cert in keystore?

address=288.104.197.211 port=8443 scheme=https secure=true sslProtocol=TLS keyAlias=mrk2 / (in 5.5.9 you also need sslProtocol=TLS explicitly, fixed in later versions) Paul Singleton -- No virus found in this outgoing message. Checked

Re: anonymising Tomcat

catalina.jar into server/classes and then delete it from server/lib before altering the properties? Are all references to Tomcat's description and version number derived from these properties, and is this new in 5.5.10 (we use 5.5.9 in production)? cheers Paul Singleton -- No virus found in this outgoing

Re: anonymising Tomcat

Peter Crowther wrote: From: Paul Singleton [mailto:[EMAIL PROTECTED] Is it possible to configure Tomcat (5.5.9) so that a moderately able hacker couldn't figure out what is serving up our web apps? It's possible to add the 'server' attribute to the connector definition for the HTTP

How to exclude weak ciphers from SSL in 5.5?

of allowed ciphers but I only know the ciphers I *don't* want, not the ones I do... Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.338 / Virus Database: 267.10.0/63 - Release Date: 3/Aug/2005

Re: Using more than one SSL cert in keystore?

scheme=https secure=true sslProtocol=TLS keyAlias=mrk2 / (in 5.5.9 you also need sslProtocol=TLS explicitly, fixed in later versions) Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.338 / Virus Database

suppress directory listing

My JSP app has a /images folder and Tomcat 5.5.9 happily serves up a directory listing of this: how can I suppress this? Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.338 / Virus Database: 267.10.0/63 - Release Date: 3/Aug/2005

Re: Which Oracle JDBC Drive for JDK 1.5?

I noticed there are JDBC drivers for 10.1.0.2 and 10.1.0.4. Which should I use? I've always found that Oracle JDBC drivers are backwards compatible (not that I've driven them very hard) so I'd use the .4 (or should I patch to 10.1.0.4) not if it ain't broke :-) Paul S. -- No virus found in

anonymising Tomcat

Is it possible to configure Tomcat (5.5.9) so that a moderately able hacker couldn't figure out what is serving up our web apps? Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.338 / Virus Database: 267.10.0/63 - Release Date: 3/Aug/2005

Re: newbie can't start tomcat

be -server Paul Singleton dsimmons wrote: I have been googling the archives and anyplace else I can think of for my particular problem, for about three days, without success. ANY help would be greatly appreciated. I suspect a simple path problem or a missing component, but honestly I've been

Re: [OT] UK tomcat hosting recommendations?

would be appreciated. Check out 2020media.com - they meet your requirements Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus Database: 267.8.10/43 - Release Date: 6/Jul/2005

Re: Certificate Authentication for individual apps

keyAlias=mrk2 / (in 5.5.9 you also need sslProtocol=TLS explicitly) Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus Database: 267.8.8/35 - Release Date: 30/Jun/2005

naming of individual Context files

per file? Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus Database: 267.8.6/33 - Release Date: 28/Jun/2005 - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional

how many Manager apps need I configure?

now I don't entirely trust what either manager tells me, I wonder why I need one for each virtual host, and wonder whether one would be enough, and if so, how to configure it? Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus Database

Re: SSL keystore with more than one key entry - which alias is used?

and which means you (probably) don't need an answer to your question Paul Singleton PS don't believe rumours that it always offers the cert with alias 'tomcat' -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus Database: 267.7.7/20 - Release Date: 16/Jun

Re: email from tomcat

Jenny Yang wrote: Can anyone tell me how to use email from tomcat? Tomcat doesn't do email, but it does Java and Java does email. Search the Web for JavaMail tutorial Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus Database

default IP address connector binding?

My Linux server's eth0 supports ten IP addresses. What happens (in 5.5.9) if my HTTP Connector doesn't specify an address = 216.119.217.240 attribute? Does it use the first one? all of them? (it's working but I need to know exactly what it's doing) Paul Singleton -- No virus found

sslProtocol default value in 5.5.9 - broken?

, is this a documentation bug or a Tomcat bug? Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus Database: 267.6.2 - Release Date: 4/Jun/2005 - To unsubscribe, e-mail: [EMAIL

5.5.9's choice of certificate from keystore

implement multi-IP-address-based virtual root-certified HTTPS hosts)? (Empirically, it seems to pick an arbitrary root certificate if it can find one, else an arbitrary self-signed one...) Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus

binding 5.5.9 HTTP connector to specific IP address

could be going wrong? Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus Database: 267.6.2 - Release Date: 4/Jun/2005 - To unsubscribe, e-mail: [EMAIL PROTECTED

multiple virtual HTTPS hosts (5.5.9)

this with multiple keystores). Has anyone got this to work? If so, how (please!!!) NB TC runs under Fedora Core 3 and Sun's JDK 1.5.0_02 Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus Database: 267.6.2 - Release Date: 4/Jun/2005

replying to msgs in digest

If I subscribe only to tomcat-user Digest, how can I send a follow-up to a particular msg? Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.322 / Virus Database: 266.11.17 - Release Date: 25/May/2005

SSL on multiple IP addreses?

? or is there a neater way? Paul Singleton Jambusters Ltd -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.308 / Virus Database: 266.11.8 - Release Date: 10/May/2005 - To unsubscribe, e-mail: [EMAIL PROTECTED