Re: Securing Tomcat Applications from Reverse Engineering

2010-01-22 Thread Kranti™ K K Parisa
Hi, Thanks for the info I shall take a look at the new licensing link you have sent. Best Regards, Kranti K K Parisa On Fri, Jan 22, 2010 at 11:17 AM, Dmitry Leskov dles...@excelsior-usa.comwrote: To list owner: I am not sure if vendors are prohibited from posting comments to this list, if

(tomcat 6) percent encoding problem

2010-01-22 Thread François Duvalier
Hi, When I execute this command: curl -XGET -i http://localhost:8080/app/rs/system/EN/foo%2Fbar I receive a 400 BAD REQUEST. However if I deploy the app to Jetty, the command will work fine. Question: Is there a way to configure tomcat to behave like jetty with regards to percent-encodings in

Re: (tomcat 6) percent encoding problem

2010-01-22 Thread Konstantin Kolinko
2010/1/22 François Duvalier m.francois.duval...@gmail.com: Hi, When I execute this command: curl -XGET -i http://localhost:8080/app/rs/system/EN/foo%2Fbar I receive a 400 BAD REQUEST. However if I deploy the app to Jetty, the command will work fine. Question: Is there a way to configure

problem with tomcat 5.5 and apache AJP

2010-01-22 Thread David Delbecq
Hello, we are trying to get a working configuration of tomcat behind apache httpd using AJP. This has worked well, for a while. But after some time, the apache httpd server replies with one of those two message, it changes randomly but we are unable to get the tomcat pages to show: Service

6.0.24

2010-01-22 Thread Pid
Just a quick FYI Looks like there's some errors on the mirrors at the moment. I got a couple of 404s and a 500 from different servers. p - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands,

Tomcat 5.5.28 EL not evaluated

2010-01-22 Thread sharmila punde
Dear All, My OS is fedora, and i have installed tomcat 5.5.28. I have web app. My jsp page has EL as follow- ${perosn.name}. I put jsp-api.jar, servlet-api.jar into /usr/java/jdk1.5.0_16/jre/lib/ext. Servlet works fine, but above EL is considered as plain text. My web.xml of web app has

Re: 6.0.24

2010-01-22 Thread Konstantin Kolinko
2010/1/22 Pid p...@pidster.com: Just a quick FYI Looks like there's some errors on the mirrors at the moment. I got a couple of 404s and a 500 from different servers. It might happen, though according to the mirror status monitor page, most mirrors are up-to-date and running.

RE: Tomcat 5.5.28 EL not evaluated

2010-01-22 Thread Hadole, Nishant IN BOM SISL
Check this FAQ - http://faq.javaranch.com/java/ElOrJstlNotWorkingAsExpected With best regards, Nishant Hadole Siemens IT Solutions and Services SIS PRO SI-I Tel.: +91 22 2495 7816 Fax: +91 22 6660 8521 Mailto: nishant.had...@siemens.com www.siemens.co.in -Original Message- From: sharmila

error-page problem - nested exceptions

2010-01-22 Thread rotis23
Hi All, I use web.xml error-page handlers, some with error-code and other with exception-type. At the end I have a catchall error-page that handles java.lang.Throwable - users never see a stack trace and the world is a good place. However, I've recently added a Hibernate security layer that

mod_jk errors with tomcat 6.0.20 and Apache 2.0.52

2010-01-22 Thread Matt Turner
Hi All, I have an existing Apache 2.0.52 installation, and a new tomcat 6.0.20 installation. They are both sitting on the same Linux box - uname -a returns the following: Linux [machine name] 2.6.9-55.ELsmp #1 SMP Fri Apr 20 16:36:54 EDT 2007 x86_64 x86_64 x86_64 GNU/Linux I'd like if

Re: mod_jk errors with tomcat 6.0.20 and Apache 2.0.52

2010-01-22 Thread Peter Crowther
I'm not an AJP expert, but I suspect: - You're telling AJP to use a secure connection between httpd and Tomcat; - The Tomcat connector on port 8443 is a SSL connector, not an AJP connector; - AJP is getting confused. I believe you should only need to configure one worker (the one on 8009); AJP

RE: mod_jk errors with tomcat 6.0.20 and Apache 2.0.52

2010-01-22 Thread Matt Turner
OK - sounds likely, many thanks. I'll give that a whirl. Date: Fri, 22 Jan 2010 12:49:49 + Subject: Re: mod_jk errors with tomcat 6.0.20 and Apache 2.0.52 From: peter.crowt...@melandra.com To: users@tomcat.apache.org I'm not an AJP expert, but I suspect: - You're telling AJP to use

Re: Problem starting connection pooling

2010-01-22 Thread David Smith
Mark Witczak wrote: I'm very new to Tomcat, connection pooling, JSP, etc. and I've been banging my head against a wall for two weeks trying to get a simple program to connect to a MySQL database. *Vital Stats:* Ubuntu 9.10, Java 1.6.0_0, Java Servelet 2.5, Java Server Pages 2.1, JSTL 1.2,

Re: problem with tomcat 5.5 and apache AJP

2010-01-22 Thread André Warnier
David Delbecq wrote: Connector port=8019 protocol=AJP/1.3 request.secret=MyPass protocolHandlerClassName=org.apache.jk.server.JkCoyoteHandler redirectPort=443 /Connector and apache is configured as follow: worker.list=lbJboss,lbOld,lbTomcat,status #

Re: mod_jk errors with tomcat 6.0.20 and Apache 2.0.52

2010-01-22 Thread Tobias Crefeld
I guess that you should exchange the JkMount /* tomcatssl by JkMount /* tomcat1 provided you use a standard Tomcat-setup. For a parallel SSL- + Non-SSL-Setup using Apache2 you basically need 2 virtual-hosts in Apache2. One for Port 443 with the standard-SSL-parameters Apache2 expects to integrate

Re: Problem starting connection pooling

2010-01-22 Thread Mark Witczak
On 1/22/2010 8:05 AM, David Smith wrote: Mark Witczak wrote: I'm very new to Tomcat, connection pooling, JSP, etc. and I've been banging my head against a wall for two weeks trying to get a simple program to connect to a MySQL database. *Vital Stats:* Ubuntu 9.10, Java 1.6.0_0, Java

RE: mod_jk errors with tomcat 6.0.20 and Apache 2.0.52

2010-01-22 Thread Matt Turner
In my case sometimes I do need to pass through the SSL to Tomcat, as I'm running CAS which requires geniune SSL requests. (I do also have some SSL requests that tomcat doesn't need to see - which I will send via 8009 as has been suggested). The SSL pass-through requirement explains why I

Re: [OT] Re: Securing Tomcat Applications from Reverse Engineering

2010-01-22 Thread Mark H. Wood
On Thu, Jan 21, 2010 at 03:02:41PM +, Peter Crowther wrote: 2010/1/21 Mark H. Wood mw...@iupui.edu Reverse engineering is not a technical problem; it is a legal problem. You need a lawyer, not a program. Mmm, yes and no. Burglary is also a legal problem, but I have locks (on /

Re: mod_jk errors with tomcat 6.0.20 and Apache 2.0.52

2010-01-22 Thread Tobias Crefeld
Am Fri, 22 Jan 2010 14:25:11 + schrieb Matt Turner m4tt_tur...@hotmail.com: The SSL pass-through requirement explains why I was attempting to pass through to :8443 directly - but it sounds like that's the wrong approach. If it isn't possible to move the SSL-certificate and -keys to the

Re: Polling and session timeout

2010-01-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Pid, On 1/21/2010 5:07 PM, Pid wrote: On 21/01/2010 15:26, Christopher Schultz wrote: Pid, On 1/21/2010 3:32 AM, Pid wrote: On 21/01/2010 04:45, grailcattt wrote: That is exactly what I ended up doing and it is working well. I was hoping

Re: Polling and session timeout

2010-01-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Bob, On 1/21/2010 8:36 PM, Bob Hall wrote: --- On Thu, 1/21/10 at 7:26 AM, Christopher Schultz ch...@christopherschultz.net wrote: If you access the session at all, it counts as a touch, thereby extending the life of the session. It's not

Re: Basic Authentication Failed with multibyte username

2010-01-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, On 1/21/2010 6:35 PM, André Warnier wrote: Basically, I would tend to say that if the server knows who the clients are and vice-versa, you should be free to use any encoding you want, with the limitation that what is exchanged on the wire

TLS+SSLv3 but no SSLv2

2010-01-22 Thread Jens Neu
Dear all, on http://tomcat.apache.org/tomcat-6.0-doc/apr.html I read for the SSLProtocol: Protocol which may be used for communicating with clients. The default is all, with other acceptable values being SSLv2, SSLv3, TLSv1, and SSLv2+SSLv3. Does this really mean that I can not allow a

RMI reaper thread prevents JVM from exiting

2010-01-22 Thread Thomas Chabaud
Hi, I have a problem with a webapp using RMI. When I try to shutdown Tomcat instance, the JVM doesn't exit. I have called jstack to see the thread dump : http://pastebin.com/fa55647 There is a non-daemon thread : RMI Reaper. I've tried to add a servlet context listener to force RMI Object

RE: TLS+SSLv3 but no SSLv2

2010-01-22 Thread Caldarale, Charles R
From: Jens Neu [mailto:jens@biotronik.com] Subject: TLS+SSLv3 but no SSLv2 Does this really mean that I can not allow a TLSv1+SSLv3 setting while forbidding SSLv2? I was under the impression that specifying TLSv1 would include SSLv3, since there are provisions within TLS to handle

Re: error-page problem - nested exceptions

2010-01-22 Thread Len Popp
You could have your error handler check if the exception is a NestedServletException and its getRootCause() is a UnAuthorisedAccessException, and display the nested exception's error message in that case. You might want to use a separate error-page for NestedServletException. -- Len On Fri,

RE: TLS+SSLv3 but no SSLv2

2010-01-22 Thread Jens Neu
unfortunately the behaviour for SSLProtocol=TLSv1 is: j...@eluveitie:~ openssl s_client -ssl3 -connect server:8443 CONNECTED(0003) 9167:error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure:s3_pkt.c:1053:SSL alert number 40 9167:error:1409E0E5:SSL

Re: RMI reaper thread prevents JVM from exiting

2010-01-22 Thread Peter Crowther
2010/1/22 Thomas Chabaud ext_chabaud.tho...@agora.msa.fr: I have a problem with a webapp using RMI. When I try to shutdown Tomcat instance, the JVM doesn't exit. I have called jstack to see the thread dump : http://pastebin.com/fa55647 There is a non-daemon thread : RMI Reaper. I've tried

Re: TLS+SSLv3 but no SSLv2

2010-01-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jens, On 1/22/2010 11:10 AM, Jens Neu wrote: on http://tomcat.apache.org/tomcat-6.0-doc/apr.html I read for the SSLProtocol: Protocol which may be used for communicating with clients. The default is all, with other acceptable values being

Re: RMI reaper thread prevents JVM from exiting

2010-01-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Thomas, On 1/22/2010 11:25 AM, Thomas Chabaud wrote: There is a non-daemon thread : RMI Reaper. I've tried to add a servlet context listener to force RMI Object unexport on shutdown, but it has no effect : http://pastebin.com/f324201e2 This

Re: error-page problem - nested exceptions

2010-01-22 Thread rotis23
Hi Len, Thanks for your message. I don't have my 'own' error handler - I just use the error-page elements in web.xml. If I add an error-page for NestedServletException will the exception be available to the corresponding jsp [in the request]? Has anyone extended tomcats error-page

Re: Adding/removing hosts dynamically?

2010-01-22 Thread Jordan Michaels
Thanks Chuck, I was able to find it and play with it a little bit. Pretty self-explanatory once I figured out how to modify the tomcat-users.xml file to get access to it. It's a real bummer that it's not persistent, but it's still a great app. Thanks for your help! -Jordan Caldarale,

Re: TLS+SSLv3 but no SSLv2

2010-01-22 Thread Jens Neu
Christopher, my Problem is that I have a requirement that SSLv2 shall be forbidden, but not SSLv3 and TLS. On top, also forbidden are ciphers =128bit. I was hoping to tackle this with SSLProtocol=TLSv1+SSLv3 SSLCipher=-ALL:+HIGH:+MEDIUM without manually

Re: TLS+SSLv3 but no SSLv2

2010-01-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jens, On 1/22/2010 12:30 PM, Jens Neu wrote: Christopher, my Problem is that I have a requirement that SSLv2 shall be forbidden, but not SSLv3 and TLS. On top, also forbidden are ciphers =128bit. I was hoping to tackle this with

Re: TLS+SSLv3 but no SSLv2

2010-01-22 Thread Jens Neu
Christopher, yes, thats it! Merci bien :-) I was reading http://www.openssl.org/docs/apps/ciphers.html for reference, thats where I got scared that I had to check all of them for 128bit. Didn't know that SSLCipher= is actually understood by openssl. Its Friday finally :) Jens Health Services

Re: TLS+SSLv3 but no SSLv2

2010-01-22 Thread Jens Neu
Christopher, maybe that was a bit premature, running with SSLCipher=-ALL:+HIGH:+MEDIUM:!SSLv2: openssl s_client -ssl2 -connect server:8443 CONNECTED(0003) ... --- Ciphers common between both SSL endpoints: RC4-MD5 EXP-RC4-MD5 RC2-CBC-MD5 EXP-RC2-CBC-MD5 DES-CBC-MD5

RE: newbie: multiple ports for same tomcat server 5.0

2010-01-22 Thread Chart
Chuck, I am now confused. I stated I am using port 8082 from the outside and need to use port 80 on the inside. So I am using different ports. So the port conflick that you talked about orignal would never happen (is this correct?). If I am going to have a port conflick, how would Impliment

RE: newbie: multiple ports for same tomcat server 5.0

2010-01-22 Thread Caldarale, Charles R
From: Chart [mailto:ccha...@hotmail.com] Subject: RE: newbie: multiple ports for same tomcat server 5.0 I stated I am using port 8082 from the outside and need to use port 80 on the inside. If your front-end is on the same machine, you will have a port conflict, since it's already got port

Re: Tomcat 5.5.28 EL not evaluated

2010-01-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sharmila, On 1/22/2010 5:43 AM, sharmila punde wrote: My OS is fedora, and i have installed tomcat 5.5.28. I have web app. My jsp page has EL as follow- ${perosn.name}. Did you mean ${person.name}? Could that be the problem? I put jsp-api.jar,

RE: Solved Tomcat 5.5.28 EL not evaluated

2010-01-22 Thread sharmila punde
Thanks Nishant, Thank you very much. It was very helpful. Regards --- On Fri, 22/1/10, Hadole, Nishant IN BOM SISL nishant.had...@siemens.com wrote: From: Hadole, Nishant IN BOM SISL nishant.had...@siemens.com Subject: RE: Tomcat 5.5.28 EL not evaluated To: 'Tomcat Users List'

RE: newbie: multiple ports for same tomcat server 5.0

2010-01-22 Thread Chart
Chuck, Yes we have a firewall that does not allow traffic from the IIS server to the tomcat server on port 80. Just for learning purposes. Could you take the line out of my original file and add information like you had stated in your original update? thanks, n828cl wrote: From: Chart

RE: newbie: multiple ports for same tomcat server 5.0

2010-01-22 Thread Caldarale, Charles R
From: Chart [mailto:ccha...@hotmail.com] Subject: RE: newbie: multiple ports for same tomcat server 5.0 Just for learning purposes. Could you take the line out of my original file and add information like you had stated in your original update? Sorry, I don't understand what you're asking

Re: TLS+SSLv3 but no SSLv2

2010-01-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jens, On 1/22/2010 12:51 PM, Jens Neu wrote: Christopher, maybe that was a bit premature, running with SSLCipher=-ALL:+HIGH:+MEDIUM:!SSLv2: openssl s_client -ssl2 -connect server:8443 CONNECTED(0003) --- SSL handshake has read 1135

Re: newbie: multiple ports for same tomcat server 5.0

2010-01-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chart, On 1/21/2010 1:53 PM, Chart wrote: There is a SSI server on the outside that sends request to 8009 for this tomcat server (from what I have been told). The tomcat server is running on port 8082. You mean that Tomcat is accepting requests

Re: Problem starting connection pooling

2010-01-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mark, On 1/22/2010 8:44 AM, Mark Witczak wrote: I used: mysql -u foo -p -h test.hostname.com Is there a way to force the command to use TCP/IP? is there a parameter for networking that I should include in context.xml? What you did ought to be

Re: mod_jk errors with tomcat 6.0.20 and Apache 2.0.52

2010-01-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Peter, On 1/22/2010 7:49 AM, Peter Crowther wrote: - You're telling AJP to use a secure connection between httpd and Tomcat; AJP doesn't recognize any secure connection capability for its own communication. As you've said, AJP /does/ forward SSL

Re: mod_jk errors with tomcat 6.0.20 and Apache 2.0.52

2010-01-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Matt, On 1/22/2010 9:25 AM, Matt Turner wrote: In my case sometimes I do need to pass through the SSL to Tomcat, as I'm running CAS which requires geniune SSL requests. mod_jk ought to be able to forward all SSL information to Tomcat.

Re: Basic Authentication Failed with multibyte username

2010-01-22 Thread André Warnier
Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, On 1/21/2010 6:35 PM, André Warnier wrote: Basically, I would tend to say that if the server knows who the clients are and vice-versa, you should be free to use any encoding you want, with the limitation that what

Re: error-page problem - nested exceptions

2010-01-22 Thread Len Popp
Yes, in the error page you can get the exception as a request attribute, either javax.servlet.jsp.jspException or javax.servlet.error.exception (sometimes it's one, sometimes the other). In my app, I found that this exception has already been unwrapped - it's the original exception, not a

Re: newbie: multiple ports for same tomcat server 5.0

2010-01-22 Thread André Warnier
Now here we have a case where I, the dummy on this forum, spend hours creating a work of ascii art explaining clearly and precisely to the OP what he needs to change, and where subsequently the two gurus manage, in just a couple of posts, to totally confuse the OP. t. (And, by the way,

AW: Comet Connection Writeable?

2010-01-22 Thread Steffen Heil
Hi I'd like to try it. However I am not accustomed to building tomcat. Do you have this compiled somewhere? Best regards, Steffen -Ursprüngliche Nachricht- Von: Filip Hanik - Dev Lists [mailto:devli...@hanik.com] Gesendet: Dienstag, 19. Januar 2010 15:50 An: Tomcat Users List

Re: [OT] Basic Authentication Failed with multibyte username

2010-01-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, (Marking OT because, well... just because). On 1/22/2010 2:59 PM, Warnier wrote: Christopher Schultz wrote: That authorization.getBytes() is just asking for trouble, because it uses the platform default encoding to convert characters to

RE: mod_jk errors with tomcat 6.0.20 and Apache 2.0.52

2010-01-22 Thread Matt Turner
Thanks for the responses. In between times I tried the ProxyPass which seems to work fine, but I'd much rather use plain AJP so I'll try that next. I've had problems previously getting CAS working where the SSL is handled by the webserver - however from what everyone has said and having read

Windows Installer with support for 32 bit JVM on 64 bit OS

2010-01-22 Thread Patrick Flaherty
Will there be an WIndows installer that will install and use a 32 bit JVM on a 64 bit OS (Like 6.0.20 did)? I have some 32 bit native extensions (dlls) and have some time before I see a 64 bit version of the dll. Thanks -p

RE: Windows Installer with support for 32 bit JVM on 64 bit OS

2010-01-22 Thread Caldarale, Charles R
From: Patrick Flaherty [mailto:pflah...@rampageinc.com] Subject: Windows Installer with support for 32 bit JVM on 64 bit OS Will there be an WIndows installer that will install and use a 32 bit JVM on a 64 bit OS (Like 6.0.20 did)? Don't know, but you can use the *-x86.zip download and use

Re: Windows Installer with support for 32 bit JVM on 64 bit OS

2010-01-22 Thread Patrick Flaherty
Perfect, that works ! Thanks Charles. -P -- From: Caldarale, Charles R chuck.caldar...@unisys.com Sent: Friday, January 22, 2010 7:19 PM To: Tomcat Users List users@tomcat.apache.org Subject: RE: Windows Installer with support for 32 bit JVM on

Re: newbie: multiple ports for same tomcat server 5.0

2010-01-22 Thread Chart
I have everything working from the first post. Per the last update the problem looks like I confused chuck on my original post when I thought I stated the that IIS was running on a different box. There are two distinct boxes (one of the outside running IIS and one on the inside running Tomcat).

question for deploystartup forROOT.war on tomcat cluster

2010-01-22 Thread Okubo, Yasushi (TSD)
Hi I have my application packaged as ROOT.war file. I can auto-deploy this war file on single tomcat instance whenever I restart tomcat or put a new war file into webapps. However, if I put the same war file into tomcat cluster and restart tomcat, tomcat does not redeploy this war file. In

Including a file into server.xml

2010-01-22 Thread Aryeh M. Friedman
I have an Java based XML DB that keeps track of different configurations for various sites we host and it is trivial to have it spit out a Host entery compatible with server.xml for each site... the only problem we have is how to insert the output into server.xml without garbaging and/or

Re: Including a file into server.xml

2010-01-22 Thread Jorge Medina
I don't know of any inclusion tag. I had a similar problem with context.xml, I used an XSLT transformation to add new Resources entries during installation time depending on the number of databases a user wanted to configure. I used a dummy Resource entry and used XSLT to make a copy of it

Please Validate this Question

2010-01-22 Thread Karthik Nanjangude
Hi Please Validate this Question SPEC : JDK1.5 TOMCAT 6.0.20 O/s 1, 2 Windows 2000 Server Apache Http - 2.x 1) A Custom built web application uses Quartz process ( Kron job) every 20 minutes to DB (JNDI based Connection pool ) to process some data on when deployed on