Re: Tomcat 7 and SHA-1

2016-07-01 Thread Daniel Savard
2016-07-01 16:21 GMT-04:00 Christopher Schultz : > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Greg, > > On 7/1/16 3:03 AM, Greg Beresnev wrote: > > Thanks Daniel - any idea which cipher in particular needs to be > > absent in order for the SHA-1-based

Re: Need help setting up SSL on Tomcat 8

2016-07-01 Thread Daniel Savard
2016-07-01 16:08 GMT-04:00 Christopher Schultz : > > > > > Thank you for the reply. How would I go about specifying the alias > > of the certificate? > > You may have to re-import it, but I've had bad experiences with Java > keystores so ALWAYS keep a backup in

Re: How to configure SPNEGO authentication with fallback to FORM auth?

2016-07-01 Thread Terence M. Bandoian
On 6/30/2016 7:52 AM, ken edward wrote: I did get it to work. Simply merged existing spnego and form auth valves together, I will try to post later.. On Fri, Jun 24, 2016 at 6:21 PM, Terence M. Bandoian wrote: On 6/24/2016 10:45 AM, ken edward wrote: On Fri, Jun 24, 2016

Re: Tomcat 7 and SHA-1

2016-07-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Greg, On 7/1/16 3:03 AM, Greg Beresnev wrote: > Thanks Daniel - any idea which cipher in particular needs to be > absent in order for the SHA-1-based connection/authentication was > rejected/failed? I'm afraid Daniel may have confused the issue,

Re: Need help setting up SSL on Tomcat 8

2016-07-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Sean, On 7/1/16 11:11 AM, Sean Son wrote: > On Fri, Jul 1, 2016 at 2:57 AM, Daniel Savard > wrote: > >> 2016-06-29 9:08 GMT-04:00 Sean Son >> : >> >>> Hello Daniel >>> >>> Thank you for

Re: tomcat 7 connection pool validation interval

2016-07-01 Thread Phil Steitz
On 7/1/16 7:14 AM, Nir Dweck wrote: > -Original Message- > From: Phil Steitz [mailto:phil.ste...@gmail.com] > Sent: Thursday, June 30, 2016 6:57 PM > To: Tomcat Users List > Subject: Re: tomcat 7 connection pool validation interval > > > >>> On Jun 30, 2016, at 9:32 AM, Nir Dweck

poor upload performance with isapi_redirect.dll and IIS

2016-07-01 Thread Wang, Andy
We're seeing some really poor performance with isapi_redirect.dll and uploading files with IIS. In a particular example, using a 200MB file, the file upload (POST) takes ~50 seconds on localhost.  The same upload using Apache and mod_jk takes about ~6 seconds. The interesting thing is, on a

SSL/TLS 8.5.3 upgrade from 8.0.32 using NIO2 url encoding issues

2016-07-01 Thread Mekkelsen Madden, Steve
Hi all, Is anyone aware of why after upgrading from Tomcat 8.0.32x64 (Windows) to 8.5.3x64 using the connector protocol of: protocol="org.apache.coyote.http11.Http11Nio2Protocol" fails with url encoding errors? Once it was changed back to

Re: Need help setting up SSL on Tomcat 8

2016-07-01 Thread Sean Son
On Fri, Jul 1, 2016 at 2:57 AM, Daniel Savard wrote: > 2016-06-29 9:08 GMT-04:00 Sean Son : > > > Hello Daniel > > > > Thank you for the information. Here is the output of the keytool command: > > > > Keystore type: JKS > > Keystore

RE: tomcat 7 connection pool validation interval

2016-07-01 Thread Nir Dweck
-Original Message- From: Phil Steitz [mailto:phil.ste...@gmail.com] Sent: Thursday, June 30, 2016 6:57 PM To: Tomcat Users List Subject: Re: tomcat 7 connection pool validation interval >> On Jun 30, 2016, at 9:32 AM, Nir Dweck wrote: >> >> I am using tomcat

Re: ***UNCHECKED*** Re: Tomcat 7 and SHA-1

2016-07-01 Thread Mark Thomas
On 01/07/2016 08:03, Greg Beresnev wrote: > Thanks Daniel - any idea which cipher in particular needs to be absent in > order for the SHA-1-based connection/authentication was rejected/failed? I recommend using SSLLabs to test your site. Also, the version of Java you use is important. See this

Re: Tomcat 7 and SHA-1

2016-07-01 Thread Greg Beresnev
Thanks Daniel - any idea which cipher in particular needs to be absent in order for the SHA-1-based connection/authentication was rejected/failed? regards, Greg On Fri, Jul 1, 2016 at 4:53 PM, Daniel Savard wrote: > 2016-06-30 23:05 GMT-04:00 Greg Beresnev

Re: Need help setting up SSL on Tomcat 8

2016-07-01 Thread Daniel Savard
2016-06-29 9:08 GMT-04:00 Sean Son : > Hello Daniel > > Thank you for the information. Here is the output of the keytool command: > > Keystore type: JKS > Keystore provider: SUN > > Your keystore contains 2 entries > > root, Jun 16, 2016, trustedCertEntry, >

Re: Tomcat 7 and SHA-1

2016-07-01 Thread Daniel Savard
2016-06-30 23:05 GMT-04:00 Greg Beresnev : > Hi, > > We're in the process of updating our web application to stop using SHA-1 > certificates and I was wondering if there was some way to configure Tomcat > (we're on version 7.0.39 - yes, I know, we are pretty old-school