HTTP2 Pseudo Headers in HttpServletRequest

2020-04-14 Thread Chirag Dewan
Hi, I have a Jersey application deployed on an Embedded Tomcat 9.0.29. I have enabled the APR connector with HTTP2 Upgrade Protocol to support HTTP2 requests. Now when I try to get :authority and :path header from the HttpServletRequest, I get null. I debugged this and saw that the

Re: JNDI match of LDAP hashed passwords fail against cleartext

2020-04-14 Thread Brian Burch
On 14/4/20 8:05 pm, Brian Burch wrote: On 14/4/20 6:53 pm, logo wrote: Brian, see down below Am 2020-04-14 08:34, schrieb Brian Burch: My initial code inspection makes me strongly suspect tomcat does not initialise JNDIRealm and a nested CredentialHandler properly during startup.

Re: JNDI match of LDAP hashed passwords fail against cleartext

2020-04-14 Thread Mark Thomas
On 14/04/2020 07:34, Brian Burch wrote: > I searched for usages of MessageDigestCredentialHandler.setAlgorithm, > but only found it used once - within TestJNDIRealm. I did not find any > occurrences within tomcat mainline code, but would not be surprised if > the algorithm was intended to be

Re: Alternatives for AJP

2020-04-14 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Frank, On 4/12/20 10:20, Frank Tornack wrote: > It is possible to replace AJP with normal HTTP or HTTPs. > > AJP has an advantage, it needs less bandwidth. Reference? > But it shouldn't make too much difference with today's computer > networks.

Webapp deployed in Tomcat 8.5.31 fail to use TLSv1.2 when sending mail

2020-04-14 Thread Curt Johansson
Hi, I have a written a webapplication deployed in Tomcat 8.5.31 that sends mail using Apache-commons email client. This is working fine but the mail server will be configured to accept only TLSv1.2 in the future so I have to make sure the client can open a TLSv1.2 connection. Tomcat is

Re: JNDI match of LDAP hashed passwords fail against cleartext

2020-04-14 Thread Brian Burch
On 14/4/20 6:53 pm, logo wrote: Brian, see down below Am 2020-04-14 08:34, schrieb Brian Burch: I thought it would be helpful to start this issue on the users list because it will contain a lot of helpful search terms. I am upgrading a stable production tomcat 7.0.52 system to tomcat

Re: JNDI match of LDAP hashed passwords fail against cleartext

2020-04-14 Thread logo
Brian, see down below Am 2020-04-14 08:34, schrieb Brian Burch: I thought it would be helpful to start this issue on the users list because it will contain a lot of helpful search terms. I am upgrading a stable production tomcat 7.0.52 system to tomcat 8.5.54. Both were built from source

Re: Tomcat SSL Connector - Http11NioProtocol - javax.crypto.ShortBufferException on second request

2020-04-14 Thread Parigino Andrea Aiello
Il giorno lun 13 apr 2020 alle ore 21:49 Rémy Maucherat ha scritto: > On Mon, Apr 13, 2020 at 7:07 PM Mark Thomas wrote: > > > On 13/04/2020 11:39, Parigino Andrea Aiello wrote: > > > Hello! > > > i'm having a problem with Tomcat 8.5.51 hosting my Spring Boot 2 > > > application (with 2-way

JNDI match of LDAP hashed passwords fail against cleartext

2020-04-14 Thread Brian Burch
I thought it would be helpful to start this issue on the users list because it will contain a lot of helpful search terms. I am upgrading a stable production tomcat 7.0.52 system to tomcat 8.5.54. Both were built from source code (tc8 cloned from git) and compiled under openjdk8. Many users