Re: Connection closed error and certificateVerification="required"

2018-03-22 Thread Mark Thomas
On 22/03/18 15:27, Richard Tearle wrote: > On 22 March 2018 at 14:49, Mark Thomas wrote: >> What we have so far is: >> >> 8.0.x, http-nio- (this is always JSSE in 8.0.x), clientAuth="true" >> This works. > > Yes this works. > >> 8.5.x, http-nio-openssl-,

Re: Granting permission to a single application-supplied JAR

2018-03-22 Thread Konstantin Kolinko
2018-03-23 1:32 GMT+03:00 Christopher Schultz : > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Konstantin, > > Thanks for the reply. > > On 3/22/18 6:12 PM, Konstantin Kolinko wrote: >> 2018-03-23 0:39 GMT+03:00 Christopher Schultz >>

Re: Granting permission to a single application-supplied JAR

2018-03-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Konstantin, Thanks for the reply. On 3/22/18 6:12 PM, Konstantin Kolinko wrote: > 2018-03-23 0:39 GMT+03:00 Christopher Schultz > : >> All, >> >> I'm working on getting my application working under a >>

Re: Granting permission to a single application-supplied JAR

2018-03-22 Thread Konstantin Kolinko
2018-03-23 0:39 GMT+03:00 Christopher Schultz : > All, > > I'm working on getting my application working under a SecurityManager. > It's actually been a little less painful than I thought it would be. > > I'm using Solr for some index searching. I'm using SolrJ for

Re: Connection Pool only evicts closed connections when validator runs?

2018-03-22 Thread Casey Merrill
Here's my configuration for dropwizard driverClass: com.mysql.jdbc.Driver charSet: UTF-8 characterEncoding: UTF-8 maxWaitForConnection: 1s validationQuery: "select case when @@read_only + @@innodb_read_only = 0 then 1 else (select table_name from information_schema.tables) end as `1`"

Granting permission to a single application-supplied JAR

2018-03-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, I'm working on getting my application working under a SecurityManager. It's actually been a little less painful than I thought it would be. I'm using Solr for some index searching. I'm using SolrJ for the library to communicate via HTTP to a

Re: Connection Pool only evicts closed connections when validator runs?

2018-03-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Casey, On 3/22/18 3:33 PM, Casey Merrill wrote: > I’m currently using Dropwizard + Jooq and Tomcat jdbc for the > connection pool. I’m seeing issues when a connection dies it’s not > evicted from the connection pool until the validator runs.

Connection Pool only evicts closed connections when validator runs?

2018-03-22 Thread Casey Merrill
I’m currently using Dropwizard + Jooq and Tomcat jdbc for the connection pool. I’m seeing issues when a connection dies it’s not evicted from the connection pool until the validator runs. While I can turn the rate up at which the validator runs its seems odd that a closed connection is

Re: Connection closed error and certificateVerification="required"

2018-03-22 Thread Richard Tearle
On 22 March 2018 at 14:49, Mark Thomas wrote: > On 22/03/18 07:46, Richard Tearle wrote: >> On 21 March 2018 at 14:54, Mark Thomas wrote: [snip] > Excellent. > > There have been a few moving parts here so I'd like to get some > clarification on exactly where

Silencing broken pipe I/O exceptions

2018-03-22 Thread Claude Brisson
Hi all. I have set up a server-side events mechanism using tomcat (and https://github.com/byjg/jquery-sse), and everything is working smoothly. But each time the server tries to send some data on an SSE channel which has just been closed on the client side, even though this exception is

Re: Connection closed error and certificateVerification="required"

2018-03-22 Thread Mark Thomas
On 22/03/18 07:46, Richard Tearle wrote: > On 21 March 2018 at 14:54, Mark Thomas wrote: >> Please can you test your set-up with 8.5.x, the modified trust store and >> the same configuration as 8.0.x (NIO, JSSE). That should help us track >> down where the problem may lie. >>

Re: mod_jk: sessions connecting although worker is oset to DIS

2018-03-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Rainer, On 3/22/18 10:11 AM, Rainer Jung wrote: > Am 22.03.2018 um 15:07 schrieb Rainer Jung: >> Am 22.03.2018 um 11:58 schrieb Martin Knoblauch: >>> Hi, >>> >>> we have this annoying problem that although Tomcat workers are >>> set to DIS state

Re: mod_jk: sessions connecting although worker is oset to DIS

2018-03-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Martin, On 3/22/18 6:58 AM, Martin Knoblauch wrote: > we have this annoying problem that although Tomcat workers are set > to DIS state in mod_jk, there are new connections being opened. > This prevents us from "idle down" Tomcats in a timely

Re: mod_jk: sessions connecting although worker is oset to DIS

2018-03-22 Thread Rainer Jung
Am 22.03.2018 um 15:07 schrieb Rainer Jung: Am 22.03.2018 um 11:58 schrieb Martin Knoblauch: Hi,   we have this annoying problem that although Tomcat workers are set to DIS state in mod_jk, there are new connections being opened. This prevents us from "idle down" Tomcats in a timely fashion.

Re: mod_jk: sessions connecting although worker is oset to DIS

2018-03-22 Thread Rainer Jung
Am 22.03.2018 um 11:58 schrieb Martin Knoblauch: Hi, we have this annoying problem that although Tomcat workers are set to DIS state in mod_jk, there are new connections being opened. This prevents us from "idle down" Tomcats in a timely fashion. This hurts when a restart is needed. While our

mod_jk: sessions connecting although worker is oset to DIS

2018-03-22 Thread Martin Knoblauch
Hi, we have this annoying problem that although Tomcat workers are set to DIS state in mod_jk, there are new connections being opened. This prevents us from "idle down" Tomcats in a timely fashion. This hurts when a restart is needed. While our empathy for human clients is pretty limited, we

Re: Connection closed error and certificateVerification="required"

2018-03-22 Thread Richard Tearle
On 21 March 2018 at 14:54, Mark Thomas wrote: > > > Progress. > > Tomcat 8.0.x is more relaxed about the content of PKCS12 trust stores > then 8.5.x because of a change[1] made so that the effectiveness of the > certificateVerificationDepth configuration attribute did not depend