Re: Tomcat 9 and FIP-140 mode

2020-08-24 Thread Robert Hicks
On Mon, Aug 24, 2020 at 12:48 PM Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Robert, > > On 8/24/20 11:04, Robert Hicks wrote: > > Maybe it's just better to straight up ask. I've found a couple of > > Google searches but

Re: Allowing dir listing of root (/) dir of the machine

2020-08-24 Thread Aryeh Friedman
On Mon, Aug 24, 2020 at 12:34 PM Olaf Kock wrote: > > On 24.08.20 16:41, Aryeh Friedman wrote: > > On Mon, Aug 24, 2020 at 4:27 AM Mark Thomas wrote: > > > >> On 23/08/2020 22:05, Aryeh Friedman wrote: > >>> In order to allow my developers to quickly access any temporarily > >> produced > >>>

Re: Allowing dir listing of root (/) dir of the machine

2020-08-24 Thread Aryeh Friedman
On Mon, Aug 24, 2020 at 1:03 PM Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Aryeh, > > On 8/24/20 10:41, Aryeh Friedman wrote: > > On Mon, Aug 24, 2020 at 4:27 AM Mark Thomas > > wrote: > > > >> On 23/08/2020 22:05, Aryeh

Re: Something I still don't quite understand, Re: Let's Encrypt with Tomcat behind httpd

2020-08-24 Thread James H. H. Lampert
On 8/24/20 9:57 AM, Christopher Schultz wrote: So your RewriteCond[ition] is expected to always be true? Okay. Maybe remove it, then? BTW I think your rewrite will strip query strings and stuff like that. Maybe you just want RedirectPermanent instead of Rewrite(Cond|Rule)? Okay, so everyone

Re: Allowing dir listing of root (/) dir of the machine

2020-08-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Aryeh, On 8/24/20 10:41, Aryeh Friedman wrote: > On Mon, Aug 24, 2020 at 4:27 AM Mark Thomas > wrote: > >> On 23/08/2020 22:05, Aryeh Friedman wrote: >>> In order to allow my developers to quickly access any >>> temporarily >> produced >>> html

Re: Something I still don't quite understand, Re: Let's Encrypt with Tomcat behind httpd

2020-08-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 James, On 8/24/20 11:45, James H. H. Lampert wrote: > On 8/22/20 7:35 AM, Christopher Schultz wrote: > >>> (1) every http request is unconditionally redirected to https: >>> >>> RewriteEngine on RewriteCond %{HTTP_HOST} !^www\. [NC] >>> RewriteRule

Re: Tomcat 9 and FIP-140 mode

2020-08-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Robert, On 8/24/20 11:04, Robert Hicks wrote: > Maybe it's just better to straight up ask. I've found a couple of > Google searches but nothing for Tomcat 9 and the information seems > sporadic, incomplete, or contradictory. > > How do you enable

Re: Allowing dir listing of root (/) dir of the machine

2020-08-24 Thread Olaf Kock
On 24.08.20 16:41, Aryeh Friedman wrote: > On Mon, Aug 24, 2020 at 4:27 AM Mark Thomas wrote: > >> On 23/08/2020 22:05, Aryeh Friedman wrote: >>> In order to allow my developers to quickly access any temporarily >> produced >>> html files created/stored outside of webapps (such as those created

Re: Something I still don't quite understand, Re: Let's Encrypt with Tomcat behind httpd

2020-08-24 Thread James H. H. Lampert
On 8/22/20 7:35 AM, Christopher Schultz wrote: (1) every http request is unconditionally redirected to https: RewriteEngine on RewriteCond %{HTTP_HOST} !^www\. [NC] RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L] This is not unconditional. That's what "RewriteCond" does: it

Tomcat 9 and FIP-140 mode

2020-08-24 Thread Robert Hicks
Maybe it's just better to straight up ask. I've found a couple of Google searches but nothing for Tomcat 9 and the information seems sporadic, incomplete, or contradictory. How do you enable FIPS-140 for Tomcat 9 (using JDK 8)? Thanks in advance. -- Bob

Re: Allowing dir listing of root (/) dir of the machine

2020-08-24 Thread Aryeh Friedman
On Mon, Aug 24, 2020 at 4:27 AM Mark Thomas wrote: > On 23/08/2020 22:05, Aryeh Friedman wrote: > > In order to allow my developers to quickly access any temporarily > produced > > html files created/stored outside of webapps (such as those created by > the > > jacoco test coverage tool) I want

Re: Tomcat 9 : Unable to specify wildcard care name in Host

2020-08-24 Thread Mark Thomas
On 24/08/2020 13:14, Tom Chiverton wrote: > Am I mis-reading the docs ? Yes. The relevant part is: "Aliases may also use the wildcard form" Alias is a sub-element of Host. The name element of Host needs to use a valid host name. Mark > > Tom Chiverton -- > *Tom Chiverton* > Lead

Tomcat 9 : Unable to specify wildcard care name in Host

2020-08-24 Thread Tom Chiverton
The docs at https://tomcat.apache.org/tomcat-9.0-doc/config/host.html say I should be able to use a name attribute starting "*." to use wildcard hosts in Tomcat's server.xml I have downloaded the 9.0.37 distribution and replaced the default ... with     however Tomcat fails to

Re: Allowing dir listing of root (/) dir of the machine

2020-08-24 Thread Mark Thomas
On 23/08/2020 22:05, Aryeh Friedman wrote: > In order to allow my developers to quickly access any temporarily produced > html files created/stored outside of webapps (such as those created by the > jacoco test coverage tool) I want to allow read only access to the root > directory of the