TLS client cert clarification

I was hoping to get some clarification on when to expect client x509 certs in http requests where the Tomcat server (v9.x) has been configured to “want” or “need” client auth. https://javaee.github.io/servlet-spec/downloads/servlet-4.0/servlet-4_0_FINAL.pdf says: “If there is an SSL

Re: OCSP Connector on Tomcat 8.5 not working

Thanks Mark. I would like to deny access if an unknown response is received. From: Mark Thomas Sent: Thursday, July 11, 2019 12:59 PM To: users@tomcat.apache.org Subject: Re: OCSP Connector on Tomcat 8.5 not working On 11/07/2019 17:46, Michael Magnuson

Re: OCSP Connector on Tomcat 8.5 not working

On 11/07/2019 17:46, Michael Magnuson wrote: > The OCSP function is working as expected for both "good" and "revoked" > responses. However, I find that it also allows "unknown" responses. Is the > "unknown" response behavior adjustable? The relevant code is: else if (ocsp_response ==

Re: Webapp previously stopped with Tomcat Manager started unexpectedly

On 11/07/2019 19:30, Kevin Brake wrote: > Reply to Kevin Brake > > Tomcat 8.5.32JVM 1.8.0_181-b13 Windows Server 2016 amd64 > > We had stopped a webapp via Manager in February. Over July 4th the webapp > started and ran for several days before

Re: Tomcat 9 & Port 80

Thank you for your reply, André. Unfortunately, the Tomcat 9 Ubuntu package is only available on Ubuntu 18 and 19 (at least that I could find). I'm on 16 at the moment (though I did think about upgrading) which is why I'm using the binary distribution from tomcat.apache.org. The good news is

Webapp previously stopped with Tomcat Manager started unexpectedly

Reply to Kevin Brake Tomcat 8.5.32JVM 1.8.0_181-b13 Windows Server 2016 amd64 We had stopped a webapp via Manager in February. Over July 4th the webapp started and ran for several days before it was discovered. There was a windows restart at

Tomcat version 9.0.22 release

Hi, Is there a way to find out if tomcat version 9.0.22 https://tomcat.apache.org/download-90.cgi#9.0.22 is a security or enhancement or bug fix to tomcat version 9.0.21? Any help would be appreciated and i look forward to hearing from you. Thanks in Advance. Best Regards, Kaushal

Re: OCSP Connector on Tomcat 8.5 not working

The OCSP function is working as expected for both "good" and "revoked" responses. However, I find that it also allows "unknown" responses. Is the "unknown" response behavior adjustable? Thanks, Mike From: Michael Magnuson Sent: Friday, June 28, 2019 10:38 AM

RE: [EXTERNAL] Re: java.lang.NoClassDefFoundError: Could not initialize class net.sf.ehcache.Element

Paul: Thanks.I put the ehcache-3.6.3.jar and the error seemed to be gone. Gary -Original Message- From: Paul Carter-Brown [mailto:paul.carter-br...@jini.guru] Sent: Wednesday, July 10, 2019 3:42 PM To: Tomcat Users List Subject: [EXTERNAL] Re: