Re: Using CsrfPreventionFilter with GET-based submissions

Chris, > Am 13.11.2019 um 02:35 schrieb Christopher Schultz > : > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Peter, > >> On 11/10/19 19:05, Peter Kreuser wrote: >> Chris, >> >>> >>> Am 09.11.2019 um 03:58 schrieb Christopher Schultz >>> : >>> >>> -BEGIN PGP SIGNED

Re: tomcat thread incurring CPU load

HI Mark, following my previous reply, we have now confirmed that it's indeed 8.5.45 with APR 1.2.23 that's causing such high JVM CPU usage. We used took out 2 out of 50 servers from the load balancer config, reverted tomcat, and redeployed. With near to identical user traffic, the two servers are

Re: Using CsrfPreventionFilter with GET-based submissions

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Peter, On 11/10/19 19:05, Peter Kreuser wrote: > Chris, > >> >> Am 09.11.2019 um 03:58 schrieb Christopher Schultz >> : >> >> -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 >> >> All, >> >> I'm playing with the CsrfPreventionFilter and

Re: Tomcat Loader putting my modules to module-path as unnamed module

Man! I really didn't expect this answer! On Tue, Nov 12, 2019 at 3:27 PM Mark Thomas wrote: > On 12/11/2019 14:13, Nedim Kulovac wrote: > > Hi there. I had an issue with starting a modular Java 11 app. Basically, > I > > was wondering why my module-info. java does not require to use 'open' > >

Re: Tomcat Loader putting my modules to module-path as unnamed module

On 12/11/2019 14:13, Nedim Kulovac wrote: > Hi there. I had an issue with starting a modular Java 11 app. Basically, I > was wondering why my module-info. java does not require to use 'open' > directive when using Spring Framework. I posted the question here >

Tomcat Loader putting my modules to module-path as unnamed module

Hi there. I had an issue with starting a modular Java 11 app. Basically, I was wondering why my module-info. java does not require to use 'open' directive when using Spring Framework. I posted the question here

Re: tomcat thread incurring CPU load

Hey Mark (appreciate your response in US holiday time) On Tue, 12 Nov 2019 at 07:51, Mark Thomas wrote: > On November 12, 2019 12:54:53 AM UTC, "M. Manna" > wrote: > >Just to give an update again: > > > >1) We reverted the APR to 1.2.21 - but observed no difference. > >2) We took 3 thread

Re: TLS key management

On 11/11/2019 23:40, George Stanchev wrote: > Currently, (in most cases) Tomcat creates an in-memory keystore and > initializes kmf as follows: > KeyManagementFactory.getInstance(algo).init(keystore, kspass). The in-memory > keystore has the key, the certificate and the chain and nothing else.