Re: Win10 installation progress

2024-05-18 Thread Chuck Caldarale
> On May 18, 2024, at 22:40, DdC wrote: > > Gave up on installing 9.0.88. on Win10. Some of us have just given up on Windows entirely… > Succeeded with 10.1.23 andjdk-18.0.2.1.The lib directory has j2ee.jar, which > I have used in earliertomcat versions. Not lately. I can’t recall when

Win10 installation progress

2024-05-18 Thread DdC
Dear Tomcatters, Gave up on installing 9.0.88. on Win10.  Succeeded with  10.1.23 andjdk-18.0.2.1.The lib directory has j2ee.jar, which I have used in earliertomcat versions.Compilation of a system was OK apart from some warnings because Java haschanged since the code was written.There is a

Re: JVM crashing with caCertificatePath in server.xml

2024-05-17 Thread Christopher Schultz
Michael, On 5/17/24 03:42, Michael Osipov wrote: On 2024/05/16 21:37:34 Christopher Schultz wrote: Michael, On 5/16/24 12:00, Michael Osipov wrote: On 2024/05/16 15:55:04 Andy Arismendi wrote: Ok great! Thank you for taking the time and making the effort to look into this Michael, much

Is there any way to add "connection: close" response header via http/1.1 connection after graceful shutdown begin by outside library

2024-05-17 Thread SG H
Hello all. I have a question about connection close header in http/1.1 protocol. While configure k8s environment run Spring Boot Server with Application Load Balancer(a.k.a ALB) I heard there are chance to client can get 503 from ALB. ALB are communicating with a pod using HTTP/1.1 in my case.

Re: JVM crashing with caCertificatePath in server.xml

2024-05-17 Thread Michael Osipov
On 2024/05/16 21:37:34 Christopher Schultz wrote: > Michael, > > On 5/16/24 12:00, Michael Osipov wrote: > > On 2024/05/16 15:55:04 Andy Arismendi wrote: > >> Ok great! Thank you for taking the time and making the effort to look into > >> this Michael, much appreciated! > > > > Here is a

Re: Regarding Tomcat url redirection

2024-05-16 Thread Christopher Schultz
Lavanya, On 5/15/24 09:09, lavanya tech wrote: Hi Chris, If i remove this from server.xml file i have the below error. Message java.lang.NoClassDefFoundError: org/towl/indexer/web/Prefix Description The server encountered an unexpected condition that prevented it from

Re: Regarding Tomcat url redirection

2024-05-16 Thread Christopher Schultz
Lavanya, On 5/15/24 09:09, lavanya tech wrote: Hi Chris, If i remove this from server.xml file i have the below error. Message java.lang.NoClassDefFoundError: org/towl/indexer/web/Prefix Description The server encountered an unexpected condition that prevented it from

Re: JVM crashing with caCertificatePath in server.xml

2024-05-16 Thread Christopher Schultz
Michael, On 5/16/24 12:00, Michael Osipov wrote: On 2024/05/16 15:55:04 Andy Arismendi wrote: Ok great! Thank you for taking the time and making the effort to look into this Michael, much appreciated! Here is a dynamically linked, patched version until there is an official release:

Re: JVM crashing with caCertificatePath in server.xml

2024-05-16 Thread Michael Osipov
On 2024/05/16 15:55:04 Andy Arismendi wrote: > Ok great! Thank you for taking the time and making the effort to look into > this Michael, much appreciated! Here is a dynamically linked, patched version until there is an official release:

Re: JVM crashing with caCertificatePath in server.xml

2024-05-16 Thread Andy Arismendi
Ok great! Thank you for taking the time and making the effort to look into this Michael, much appreciated! -Andy - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail:

Re: JVM crashing with caCertificatePath in server.xml

2024-05-16 Thread Michael Osipov
On 2024/05/15 20:35:08 Michael Osipov wrote: > On 2024/05/15 14:41:43 Michael Osipov wrote: > > Good news. I can reproduce on Windows: > > 15-May-2024 16:40:31.092 INFORMATION [main] > > org.apache.coyote.AbstractProtocol.init Initialisiere > > ProtocolHandler["https-openssl-apr-18444"] > >

Re: JVM crashing with caCertificatePath in server.xml

2024-05-15 Thread Michael Osipov
On 2024/05/15 14:41:43 Michael Osipov wrote: > Good news. I can reproduce on Windows: > 15-May-2024 16:40:31.092 INFORMATION [main] > org.apache.coyote.AbstractProtocol.init Initialisiere > ProtocolHandler["https-openssl-apr-18444"] > 15-May-2024 16:40:31.144 WARNUNG [main] >

Aw: Re: Logrotation throu CATALINA_OUT_CMD in Tomcat9

2024-05-15 Thread Peter Rader
> You need to do what the instructions state: create a FIFO and specify its > name in the CATALINA_OUT variable. For example, do Ah, yes, mkfifo catalina.out fixed it for me. I had no idea what a fifo is, now I knew. Kind regards

Re: Logrotation throu CATALINA_OUT_CMD in Tomcat9

2024-05-15 Thread Chuck Caldarale
> On May 15, 2024, at 12:43, Peter Rader wrote: > > my catalina.out is getting bigger and bigger. (I should Insert a philosophical discussion on not using stdout for application logging here, but I’ll leave that for some other time.) > In order to have smaller catalina.out I noticed this

Logrotation throu CATALINA_OUT_CMD in Tomcat9

2024-05-15 Thread Peter Rader
Hi, my catalina.out is getting bigger and bigger. In order to have smaller catalina.out I noticed this environment-variable: CATALINA_OUT_CMD Inside the catalina.sh is documented: # CATALINA_OUT_CMD (Optional) Command which will be executed and receive # as its stdin the

Re: JVM crashing with caCertificatePath in server.xml

2024-05-15 Thread Michael Osipov
Good news. I can reproduce on Windows: 15-May-2024 16:40:31.092 INFORMATION [main] org.apache.coyote.AbstractProtocol.init Initialisiere ProtocolHandler["https-openssl-apr-18444"] 15-May-2024 16:40:31.144 WARNUNG [main] org.apache.tomcat.util.net.SSLUtilBase.getEnabled Tomcat interprets the

Re: Regarding Tomcat url redirection

2024-05-15 Thread lavanya tech
Hi Chris, > If i remove this from server.xml file i have the below error. Message java.lang.NoClassDefFoundError: org/towl/indexer/web/Prefix Description The server encountered an unexpected condition that prevented it from fulfilling the request. Exception

Re: JVM crashing with caCertificatePath in server.xml

2024-05-15 Thread Andy Arismendi
Ah wasn’t sure if attachments worked, log content information below. Yea the docs just say directory for trusted CA PEM certificates. TOMCAT DOCS https://tomcat.apache.org/tomcat-9.0-doc/config/http.html: caCertificatePath (OpenSSL only) Name of the directory that contains the certificates

Re: Regarding Tomcat url redirection

2024-05-15 Thread Christopher Schultz
Lavanya, On 5/15/24 04:43, lavanya tech wrote: Though to write you privately, regaridng the tomcat url redirection as the mail chain is getting more big big It's better to post to the list, so anyone in your situation can learn from it. Let me know if its fine for you and here is what I

Re: JVM crashing with caCertificatePath in server.xml

2024-05-15 Thread Michael Osipov
On 2024/05/15 01:51:41 Andy Arismendi wrote: > ADDITIONAL ENVIRONMENT INFO UPDATE: > > libtcnative: org.apache.catalina.core.AprLifecycleListener.lifecycleEvent > Loaded Apache Tomcat Native library [1.3.0] using APR version [1.7.4]. > > CRASH LOG > > See enclosed: hs_err_pid4464.log > >

Re: JVM crashing with caCertificatePath in server.xml

2024-05-15 Thread Michael Osipov
On 2024/05/14 20:27:02 Christopher Schultz wrote: > > > On 5/14/24 15:23, Andy Arismendi wrote: > > Sure thing - > > > > ADDITIONAL ENVIRONMENT INFO: > > > > libtcnative: tcnative-1.dll is included in the Tomcat 9.0.89 64-bit Windows > > zip download, not sure about the version... > > OpenSSL

Re: JVM crashing with caCertificatePath in server.xml

2024-05-15 Thread Michael Osipov
On 2024/05/15 01:51:41 Andy Arismendi wrote: > ADDITIONAL ENVIRONMENT INFO UPDATE: > > libtcnative: org.apache.catalina.core.AprLifecycleListener.lifecycleEvent > Loaded Apache Tomcat Native library [1.3.0] using APR version [1.7.4]. > > CRASH LOG > > See enclosed: hs_err_pid4464.log

Re: JVM crashing with caCertificatePath in server.xml

2024-05-14 Thread Andy Arismendi
ADDITIONAL ENVIRONMENT INFO UPDATE: libtcnative: org.apache.catalina.core.AprLifecycleListener.lifecycleEvent Loaded Apache Tomcat Native library [1.3.0] using APR version [1.7.4]. CRASH LOG See enclosed: hs_err_pid4464.log c_rehash.pl I didn’t have perl, tried strawberry perl, it didn’t

Re: Regarding Tomcat url redirection

2024-05-14 Thread Christopher Schultz
Lavanya, On 5/14/24 15:11, lavanya tech wrote: You are right. We need aliasing here which means the URL in the browser does not change. May I know where should I put the below rewrite files ? # Redirect everything that is not server.lbg.com to # server.lbg.com. Don't worry about /towl yet.

Re: JVM crashing with caCertificatePath in server.xml

2024-05-14 Thread Christopher Schultz
On 5/14/24 15:23, Andy Arismendi wrote: Sure thing - ADDITIONAL ENVIRONMENT INFO: libtcnative: tcnative-1.dll is included in the Tomcat 9.0.89 64-bit Windows zip download, not sure about the version... OpenSSL version: 3.0.13 30 Jan 2024 (Library: OpenSSL 3.0.13 30 Jan 2024) (with FIPS

Re: JVM crashing with caCertificatePath in server.xml

2024-05-14 Thread Michael Osipov
On 2024/05/14 19:23:47 Andy Arismendi wrote: > Sure thing - > > ADDITIONAL ENVIRONMENT INFO: > > libtcnative: tcnative-1.dll is included in the Tomcat 9.0.89 64-bit Windows > zip download, not sure about the version... > OpenSSL version: 3.0.13 30 Jan 2024 (Library: OpenSSL 3.0.13 30 Jan 2024)

Re: JVM crashing with caCertificatePath in server.xml

2024-05-14 Thread Andy Arismendi
Sure thing - ADDITIONAL ENVIRONMENT INFO: libtcnative: tcnative-1.dll is included in the Tomcat 9.0.89 64-bit Windows zip download, not sure about the version... OpenSSL version: 3.0.13 30 Jan 2024 (Library: OpenSSL 3.0.13 30 Jan 2024) (with FIPS 140-2) Regarding expecting a directory of

Re: Regarding Tomcat url redirection

2024-05-14 Thread lavanya tech
Hi Chris, You are right. We need aliasing here which means the URL in the browser does not change. May I know where should I put the below rewrite files ? # Redirect everything that is not server.lbg.com to # server.lbg.com. Don't worry about /towl yet. RewriteCond %{HTTP_HOST}

Re: JVM crashing with caCertificatePath in server.xml

2024-05-14 Thread Michael Osipov
On 2024/05/14 18:21:36 Andy Arismendi wrote: > Hi, just ran into this today. The JVM is crashing when caCertificatePath is > added to server.xml. I tried the latest Zulu JRE 8 and 11 but still had the > crash. > > > ENVIRONMENT > > Tomcat: 9.0.89 (64-bit Windows zip) > OS: Windows Server 2019

JVM crashing with caCertificatePath in server.xml

2024-05-14 Thread Andy Arismendi
Hi, just ran into this today. The JVM is crashing when caCertificatePath is added to server.xml. I tried the latest Zulu JRE 8 and 11 but still had the crash. ENVIRONMENT Tomcat: 9.0.89 (64-bit Windows zip) OS: Windows Server 2019 JVM: openjdk version "1.8.0_322" OpenJDK Runtime Environment

Re: Regarding Tomcat url redirection

2024-05-14 Thread Christopher Schultz
Lavanya, On 5/14/24 09:12, lavanya tech wrote: IMHO removing the port number is always the preferred solution — I never did it can we achieve this with tomcat or we need to setup an reverse proxy here. Your application uses whatever internal URLs it wants. Are you building those yourself,

Re: Regarding Tomcat url redirection

2024-05-14 Thread lavanya tech
Hi Chris, > > IMHO removing the port number is always the preferred solution — I never > did it > >> >> can we achieve this with tomcat or we need to setup an reverse proxy here. >> > > Your application uses whatever internal URLs it wants. Are you building > those yourself, or are you asking

Re: Regarding Tomcat url redirection

2024-05-14 Thread Christopher Schultz
Lavanya, On 5/14/24 03:47, lavanya tech wrote: Hi Chris, Tried the below steps. I have the redirection working. But the URL is not in the browser anymore. 1) 2) /conf/Catalina/localhost --> I added the below in rewrite.config RewriteCond %{HTTP_HOST} ^example\.lbg\.com$

Re: Regarding Tomcat url redirection

2024-05-14 Thread lavanya tech
Hi Chris, Tried the below steps. I have the redirection working. But the URL is not in the browser anymore. 1) 2) /conf/Catalina/localhost --> I added the below in rewrite.config RewriteCond %{HTTP_HOST} ^example\.lbg\.com$ RewriteCond %{REQUEST_URI} !^/towl$ RewriteRule

Re: Regarding Tomcat url redirection

2024-05-13 Thread lavanya tech
Hi Chris, Sorry, If I did confuse. It’s important that https://server.lbg.com:8443/towl is always working. Goal is not to disable /towl, but just redirect or aliasing https//example.lbg.com/ to https://server.lbg.com:8443/towl Thanks, Lavanya On Monday, May 13, 2024, Christopher Schultz

Re: Regarding Tomcat url redirection

2024-05-13 Thread Christopher Schultz
Lavanya, On 5/13/24 05:57, lavanya tech wrote: Somehow made it work now i can only access urls as you mentioned before https://example.lbg.com and https://server.lbg.com with port 8443 and with out https://example.lbg.com/towl and https://server.lbg.com/towl --> I have an error now File not

Re: Upgrade query

2024-05-13 Thread Christopher Schultz
Kalaivani, On 5/13/24 06:13, GANESAN, Kalaivani wrote: I have a question regarding upgrading to 9.0.86. The current version is 9.0.8 and needs to be upgraded to 9.0.86. We have apache tomcat running in our openptk servers. Do you have any detailed steps on the process? We have downloaded

Upgrade query

2024-05-13 Thread GANESAN, Kalaivani
Hi, I have a question regarding upgrading to 9.0.86. The current version is 9.0.8 and needs to be upgraded to 9.0.86. We have apache tomcat running in our openptk servers. Do you have any detailed steps on the process? We have downloaded apache-tomcat-9.0.86.tar.gz. Thanks, Kalaivani G

Re: Regarding Tomcat url redirection

2024-05-13 Thread lavanya tech
Hi Chris, Somehow made it work now i can only access urls as you mentioned before https://example.lbg.com and https://server.lbg.com with port 8443 and with out https://example.lbg.com/towl and https://server.lbg.com/towl --> I have an error now File not found. So i think we need to make work

Re: Regarding Tomcat url redirection

2024-05-13 Thread lavanya tech
Hi Chris, Where are you defining the RewriteValve itself? Defined rewritevalve here resource="conf/rewrite.config" /> 2) reated rewrite.config and added as below under conf/ RewriteCond %{REQUEST_URI} ^/towl/(.*) RewriteRule ^/towl/(.*)

Re: Regarding Tomcat url redirection

2024-05-10 Thread Christopher Schultz
Lavanya, On 5/10/24 06:03, lavanya tech wrote: If we create new java.filter as below then we can redirect the urls ? import javax.servlet.*; import javax.servlet.annotation.WebFilter; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import

Re: Regarding Tomcat url redirection

2024-05-10 Thread Christopher Schultz
Lavanya, On 5/10/24 04:37, lavanya tech wrote: I tried the below and have the issues. 1)proxyPort="443" and proxyName="example.lbg.com" to the connector 2) remanmed towl.war to ROOT.war 3) created rewrite.config and added as below under conf/ Where are you defining the RewriteValve itself?

Re: Regarding Tomcat url redirection

2024-05-10 Thread lavanya tech
Hi Chris, If we create new java.filter as below then we can redirect the urls ? import javax.servlet.*; import javax.servlet.annotation.WebFilter; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import java.io.IOException; @WebFilter("/*") public

Re: Regarding Tomcat url redirection

2024-05-10 Thread lavanya tech
Hi Chris, I tried the below and have the issues. 1)proxyPort="443" and proxyName="example.lbg.com" to the connector 2) remanmed towl.war to ROOT.war 3) created rewrite.config and added as below under conf/ RewriteCond %{REQUEST_URI} ^/towl/(.*) RewriteRule ^/towl/(.*) https://example.lbg.com/%1

Re: Regarding Tomcat url redirection

2024-05-09 Thread Christopher Schultz
Lavanya, On 5/9/24 13:48, lavanya tech wrote: Thank you so much for your explanation. I will try these options. Do server and example both resolve to the same IP? -yes Good, that significantly reduces the complexity required, since you can do it will a single process (Tomcat) in a

Re: Regarding Tomcat url redirection

2024-05-09 Thread lavanya tech
Hi Chris, Thank you so much for your explanation. I will try these options. Do server and example both resolve to the same IP? -yes So I need follow both 4a/b and 5a/b steps here or any of them ? If I setup exactly by using below steps , then I should access both the urls right ?

Re: FileUpload class not working with Tomcat 10.1

2024-05-09 Thread Christopher Schultz
Mark and Chuck, On 5/9/24 09:35, Chuck Caldarale wrote: You need the web.xml entries because you have extra configuration items (the settings) that aren’t part of the default JSP servlet definition. +1 If you didn't need to upload files to your JSP, you wouldn't have needed any of this in

Re: Regarding Tomcat url redirection

2024-05-09 Thread Christopher Schultz
Lavanya, On 5/9/24 02:58, lavanya tech wrote: Just giving background again of this topic again. 1) The application team who is working they wanted to access the url https://server.lbg.com:8443/towl —> which should redirect or point to https://example.lbg.com Is that a typo? You want

Re: FileUpload class not working with Tomcat 10.1

2024-05-09 Thread Chuck Caldarale
> On May 9, 2024, at 01:25, Mark Foley wrote: > >> Does the JSP need to reference the "program" (servlet?) at all? > The program, as shown above didn'twork at all until I put that servlet > definition on WEB-INF/web.xml, so I suppose the answer is "yes". As to why, I > have not a clue. A

Re: Regarding Tomcat url redirection

2024-05-09 Thread lavanya tech
Hi Chris, Thanks. Just giving background again of this topic again. 1) The application team who is working they wanted to access the url https://server.lbg.com:8443/towl —> which should redirect or point to https://example.lbg.com Is that a typo? You want specifically

Re: FileUpload class not working with Tomcat 10.1

2024-05-09 Thread Mark Foley
On 5/7/2024 4:52 PM, Christopher Schultz wrote: Mark, On 5/3/24 12:16, Mark Foley wrote: On 4/23/24 18:44, Chuck Caldarale wrote:    uploadfile    uploadfile /schDistImportResults.jsp The first servlet is named “uploadfile”. On Apr 23, 2024, at 12:42, Mark Foley  wrote: Now I

Re: Regarding Tomcat url redirection

2024-05-08 Thread Christopher Schultz
Lavanya, On 5/8/24 06:48, lavanya tech wrote: I figured out how I can it make it work with 443. Now the URls are working. I added iptables route 443 to 8443 and it started working. nslookup example.lbg.com Non-authoritative answer: Name:server.lbg.com Address: 192.168.200.105 Aliases:

Re: Regarding Tomcat url redirection

2024-05-08 Thread lavanya tech
Hello Chris, I figured out how I can it make it work with 443. Now the URls are working. I added iptables route 443 to 8443 and it started working. nslookup example.lbg.com Non-authoritative answer: Name:server.lbg.com Address: 192.168.200.105 Aliases: example.lbg.com I have some

Re: [EXTERNAL] RE: After Windows Server Restart, tomcat generating New JSESSIONID even with <%@ page session="false" %>

2024-05-07 Thread Christopher Schultz
Joey, On 5/7/24 10:50, Joey Cochran wrote: Coud this be the culprit ? ${CATALINA_BASE}/conf/context.xml Possible, but the report was that every single request generates a new JSESSIONID, not that every session seems to have expired and needs to be re-initialized.

Re: FileUpload class not working with Tomcat 10.1

2024-05-07 Thread Christopher Schultz
Mark, On 5/3/24 12:16, Mark Foley wrote: On 4/23/24 18:44, Chuck Caldarale wrote:    uploadfile    uploadfile    /schDistImportResults.jsp The first servlet is named “uploadfile”. On Apr 23, 2024, at 12:42, Mark Foley  wrote: Now I need to add another program to the system that

[ANN] Apache Tomcat 9.0.89 available

2024-05-07 Thread Rémy Maucherat
The Apache Tomcat team announces the immediate availability of Apache Tomcat 9.0.89. Apache Tomcat 9 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 9.0.89 is a bugfix and

Re: [EXTERNAL] RE: After Windows Server Restart, tomcat generating New JSESSIONID even with <%@ page session="false" %>

2024-05-07 Thread Joey Cochran
Coud this be the culprit ? ${CATALINA_BASE}/conf/context.xml From: Hamdan Khan Sent: Tuesday, May 7, 2024 9:09 AM To: users@tomcat.apache.org Subject: [EXTERNAL] RE: After Windows Server Restart, tomcat generating New JSESSIONID even with

RE: After Windows Server Restart, tomcat generating New JSESSIONID even with <%@ page session="false" %>

2024-05-07 Thread Hamdan Khan
Thank you Mark, We have har files when the server is in error state, it shows that the jsessionid is sent in request. *Is there a reverse proxy in the mix?* No. we directly access tomcat. *Are you using sessions at all* Yes, we are using the default tomcat session in debugger it says

Re: SPNEGO GSSCaller {UNKNOWN} No Delegated Creds

2024-05-07 Thread Michael Osipov
We need to split between constrained and unconstrained delegation. Let's stay with uncontrained, simplest one. For that to happen you need: * Enable it for the service account (acceptor side) * Set the delegate flag (also there is a policy) on the security context (initiator side) Try again.

Re: After Windows Server Restart, tomcat generating New JSESSIONID even with <%@ page session="false" %>

2024-05-07 Thread Mark Thomas
On 06/05/2024 11:05, Hamdan Khan wrote: Hello everyone, We're having a problem with Tomcat on Windows servers. It only happens when: Tomcat is running as a service (automatically started by Windows). The Windows server automatically restarts for updates. After the restart, Tomcat starts

After Windows Server Restart, tomcat generating New JSESSIONID even with <%@ page session="false" %>

2024-05-06 Thread Hamdan Khan
Hello everyone, We're having a problem with Tomcat on Windows servers. It only happens when: Tomcat is running as a service (automatically started by Windows). The Windows server automatically restarts for updates. After the restart, Tomcat starts creating new session IDs for every request, even

Re: FileUpload class not working with Tomcat 10.1

2024-05-03 Thread Mark Foley
On 4/23/24 18:44, Chuck Caldarale wrote: uploadfile uploadfile /schDistImportResults.jsp The first servlet is named “uploadfile”. On Apr 23, 2024, at 12:42, Mark Foley wrote: Now I need to add another program to the system that does file uploads. I created another

Re: SPNEGO GSSCaller {UNKNOWN} No Delegated Creds

2024-05-03 Thread Tom Delaney
Thanks for the reply Michael, I'm trying to achieve retrieving delegated credentials. I'm confused by the debug output because I'm being told that authentication succeeded but no indication of why I'm not receiving delegated credentials other than there are none.I have looked over the delegation

Re: Package URLs for Apache Tomcat distributions

2024-05-03 Thread von Loewenstein, Jan
Hi, I think in the end it boils down to something very simple (and probably very complicated from another perpsective ): Can the id of a piece of software be used to find vulnerabilities? In the context of this mailing list and the example you brought up with defaulting to pkg:maven, the

Re: Package URLs for Apache Tomcat distributions

2024-05-03 Thread Lars Francke
Just as an FYI that we established an official TG (Task Group) for PURL in yesterdays Ecma TC54 (CycloneDX) meeting: https://docs.google.com/document/d/1BkBd4PRhpP_u1WO_GueYB89vehT_HPKgFMMfbTuKWV4/edit#heading=h.si64e7edhupe This will take a bit to get set up but this may be something some people

Re: Package URLs for Apache Tomcat distributions

2024-05-03 Thread Arnout Engelen
Thanks for bringing this up! The topic of software (artifact) identification is indeed a tricky one. CPEs have long been the main contender, but are not great for the SBOM (and 'vulnerability scanning' based on SBOMs) use case because CPE allocations need through the NVD CPE team, and generally

Re: SPNEGO GSSCaller {UNKNOWN} No Delegated Creds

2024-05-03 Thread Michael Osipov
On 2024/05/02 19:20:59 Tom Delaney wrote: > Hi All, > > Sorry for the duplicate requests. The first one was accidentally flagged > for Google's new Confidential Mode which happened to be flagged. > I have a red hat 9.2 server hosting a web application on a single instance > of Apache Tomcat. This

SPNEGO GSSCaller {UNKNOWN} No Delegated Creds

2024-05-02 Thread Tom Delaney
Hi All, Sorry for the duplicate requests. The first one was accidentally flagged for Google's new Confidential Mode which happened to be flagged. I have a red hat 9.2 server hosting a web application on a single instance of Apache Tomcat. This instance is behind an apache HTTP server on version

Re: SPNEGO GSSCaller {UNKNOWN} No Delegated Creds

2024-05-02 Thread Tom Delaney
Tom Delaney has sent you an email via Gmail confidential mode: [image: Gmail logo]Re: SPNEGO GSSCaller {UNKNOWN} No Delegated Creds

Re: missing headers

2024-05-02 Thread Mark Thomas
On 02/05/2024 06:15, Piyush Sharma wrote: Hi, How to forward custom headers from frontend tomcat to backend tomcat witn mod_jk? When using mod_jk the front end is always httpd, not Tomcat. You don't need to do anything. mod_jk passes all the http headers it receives. *Scenario :* 1.

missing headers

2024-05-01 Thread Piyush Sharma
Hi, How to forward custom headers from frontend tomcat to backend tomcat witn mod_jk? *Scenario :* 1. APP1 : Apache (mod_jk) + Tomcat 2. APP2 : Apache (mod_jk) + Tomcat Now, when a user accesses APP1 it add fews headers via SSO app user details etc.. I can see in Tomcat logs as by adding

SPNEGO GSSCaller {UNKNOWN} No Delegated Creds

2024-05-01 Thread Tom Delaney
Tom Delaney has sent you an email via Gmail confidential mode: [image: Gmail logo]SPNEGO GSSCaller {UNKNOWN} No Delegated Creds

Re: Monitoring and Tuning Tomcat

2024-05-01 Thread Christopher Schultz
Mark and Jerry, On 5/1/24 04:00, Mark Thomas wrote: On 30/04/2024 21:24, Jerry Malcolm wrote: I'm trying to optimize my instance, CPU, tuning, and size requirements for Tomcat.  It's easy to see CPU usage.  But this TC instance is running a lot of microservices that are often in and out

Re: Monitoring and Tuning Tomcat

2024-05-01 Thread Mark Thomas
On 30/04/2024 21:24, Jerry Malcolm wrote: I'm trying to optimize my instance, CPU, tuning, and size requirements for Tomcat.  It's easy to see CPU usage.  But this TC instance is running a lot of microservices that are often in and out fairly quickly.  So there can be a huge number of requests

Re: Disabling OPTIONS HTTP method with * path

2024-05-01 Thread Mark Thomas
On 30/04/2024 19:56, Oleg Frenkel wrote: This issue exists in 9.0.88 and 10.1.23. I am looking to disable the following HTTP request (note 'OPTIONS *' in the request): Why? Please confirm if this is a bug in Tomcat or if I am missing something in Tomcat configuration. Neither. Tomcat is

Monitoring and Tuning Tomcat

2024-04-30 Thread Jerry Malcolm
I'm trying to optimize my instance, CPU, tuning, and size requirements for Tomcat.  It's easy to see CPU usage.  But this TC instance is running a lot of microservices that are often in and out fairly quickly.  So there can be a huge number of requests coming in.  I'm not sure that CPU

Re: [EXTERNAL] Disabling OPTIONS HTTP method with * path

2024-04-30 Thread Joey Cochran
From: Oleg Frenkel Sent: Tuesday, April 30, 2024 1:56 PM To: users@tomcat.apache.org Subject: [EXTERNAL] Disabling OPTIONS HTTP method with * path This issue exists in 9.0.88 and 10.1.23. I am looking to disable the following HTTP request (note 'OPTIONS *' in the request): $ curl -v

Disabling OPTIONS HTTP method with * path

2024-04-30 Thread Oleg Frenkel
This issue exists in 9.0.88 and 10.1.23. I am looking to disable the following HTTP request (note 'OPTIONS *' in the request): $ curl -v --request-target "*" -X OPTIONS http://: * Rebuilt URL to: :/ * Trying ... *

Re: Regarding Tomcat url redirection

2024-04-30 Thread Christopher Schultz
Lavanya, On 4/30/24 07:10, lavanya tech wrote: Can you tell me how to do the below ? How should I setup Tomcat in server.xml ? If you want to use port 443 (the default port for HTTPS) then you will need to change Tomcat to bind to port 443 (if that's allowed on your OS) or arrange to have

Re: Regarding Tomcat url redirection

2024-04-30 Thread lavanya tech
Hi Chris, Can you tell me how to do the below ? How should I setup Tomcat in server.xml ? If you want to use port 443 (the default port for HTTPS) then you will need to change Tomcat to bind to port 443 (if that's allowed on your OS) or arrange to have port 443 routed to port 8443. You may need

Re: Tomcat closes connections on unexpected status codes

2024-04-29 Thread Pawel Veselov
Chris, On Fri, Apr 19, 2024 at 4:40 AM Christopher Schultz wrote: > > Pawel, > > On 4/18/24 20:21, Pawel Veselov wrote: > >> On 18/04/2024 15:18, Stefan Ansing wrote: > >>> Hi Rémy, Mark, > >>> I just want to make sure that we’re understanding each other. I can see > >>> that the connection

Re: Regarding Tomcat url redirection

2024-04-29 Thread lavanya tech
Hi Chris, There is no issues with browser, because I tested with different browsers and it all works fine. I am sure that there is no issue with the certificate. Because I was able to establish successful connections with port 8443, it just doesnot work with out port curl

Re: Regarding Tomcat url redirection

2024-04-26 Thread Christopher Schultz
Lavanya, On 4/25/24 09:36, lavanya tech wrote: I have updated the certificate now, but still I cannot access url https://example.lbg.com/towl either https://server.lbg.com/towl ? I wonder why its working with port 8443 and not with out port If Tomcat is listening to port 8443, then you need

Re: Regarding Tomcat url redirection

2024-04-26 Thread Christopher Schultz
Lavanya, On 4/25/24 07:24, lavanya tech wrote: Hi Chris, One question / doubt: As I mentioned earlier, the below URLS already working in the browser https://server.lbg.com:8443/towl https://example.lbg.com:8443/towl -> redirect ( which means when I hit in browser) it points to

Re: Regarding Tomcat url redirection

2024-04-25 Thread lavanya tech
Hi I have updated the certificate now, but still I cannot access url https://example.lbg.com/towl either https://server.lbg.com/towl ? I wonder why its working with port 8443 and not with out port On Thu, Apr 25, 2024 at 1:24 PM lavanya tech wrote: > Hi Chris, > > One question / doubt: > >

Re: Regarding Tomcat url redirection

2024-04-25 Thread lavanya tech
Hi Chris, One question / doubt: As I mentioned earlier, the below URLS already working in the browser > https://server.lbg.com:8443/towl > https://example.lbg.com:8443/towl -> redirect ( which means when I hit in browser) it points to https://server.lbg.com:8443/towl ---> To be frank, even I

Re: Regarding Tomcat url redirection

2024-04-25 Thread lavanya tech
Hi Chris, Thanks I will request new certificate with SANs and I will try to fix the things from our end. Best Regards, Lavanya On Wed, Apr 24, 2024 at 11:12 PM Christopher Schultz < ch...@christopherschultz.net> wrote: > Lavanya, > > On 4/24/24 15:39, lavanya tech wrote: > > Local host means

Re: Regarding Tomcat url redirection

2024-04-24 Thread Christopher Schultz
Lavanya, On 4/24/24 15:39, lavanya tech wrote: Local host means the machine i am logged in to server.lbg.com You are right, example.lbg.com is CNAME record. Okay, thanks for clearing that up. I dont have any SAN configured for the certificate. The certificate is requested for only

Re: Tomcat closes connections on unexpected status codes

2024-04-24 Thread Adwait Kumar Singh
> Assuming it's easy for Tomcat to differentiate between errors generated My PR was based on the assumption that it is easy, since Tomcat always invokes this method[1] if it's a badRequest. [1]

Re: Regarding Tomcat url redirection

2024-04-24 Thread lavanya tech
Hi Chris, Thanks for the reply. Local host means the machine i am logged in to server.lbg.com You are right, example.lbg.com is CNAME record. I dont have any SAN configured for the certificate. The certificate is requested for only server.lbg.com So if i just request new certificate with SAN

Re: Tomcat closes connections on unexpected status codes

2024-04-24 Thread Christopher Schultz
Stefan, On 4/24/24 13:58, Stefan Ansing wrote: Op do 18 apr 2024 om 17:42 schreef Mark Thomas : On 18/04/2024 15:18, Stefan Ansing wrote: Hi Rémy, Mark, I just want to make sure that we’re understanding each other. I can see that the connection needs to be closed in certain conditions to

Re: Tomcat closes connections on unexpected status codes

2024-04-24 Thread Stefan Ansing
Op do 18 apr 2024 om 17:42 schreef Mark Thomas : > On 18/04/2024 15:18, Stefan Ansing wrote: > > Hi Rémy, Mark, > > > > > > > > I just want to make sure that we’re understanding each other. I can see > > that the connection needs to be closed in certain conditions to prevent > > request smuggling

Re: Regarding Tomcat url redirection

2024-04-24 Thread Christopher Schultz
Lavanya, On 4/24/24 07:37, lavanya tech wrote: Sorry I understood wrongly here with regards to my environment, Let me start from the beginning. I donot want to use redirect at all. I simply wanted to force apache tomcat to use both localhost and dns name of the localhost via url. When you say

Re: allow symlink tomcat 9

2024-04-24 Thread Giacomo Morri
Thanks. it works fine. G On 24/04/24 12:27, Holger Klawitter wrote: A plain should suffice. Giacomo Morri wrote (at 2024-04-24 12:03 +0200): Hi Holger, thanks for your reply. consider that the symlink is /MTF/Content -> /realt/path/, how can i set the Resource element for that path?

Re: Regarding Tomcat url redirection

2024-04-24 Thread lavanya tech
Hi Chris, Sorry I understood wrongly here with regards to my environment, Let me start from the beginning. I donot want to use redirect at all. I simply wanted to force apache tomcat to use both localhost and dns name of the localhost via url. I have DNS resollution as below. server.lbg.com -->

Re: allow symlink tomcat 9

2024-04-24 Thread Holger Klawitter
A plain should suffice. Giacomo Morri wrote (at 2024-04-24 12:03 +0200): > Hi Holger, thanks for your reply. > > consider that the symlink is /MTF/Content -> /realt/path/, how can i set the > Resource element for that path? > > Regards, > > Giacomo > > > > On 24/04/24 11:55, Holger Klawitter

Re: allow symlink tomcat 9

2024-04-24 Thread Giacomo Morri
Hi Holger, thanks for your reply. consider that the symlink is /MTF/Content -> /realt/path/, how can i set the Resource element for that path? Regards, Giacomo On 24/04/24 11:55, Holger Klawitter wrote: Hi, allowLinking goes into a Resource Element inside Context, not into Context

Re: allow symlink tomcat 9

2024-04-24 Thread Holger Klawitter
Hi, allowLinking goes into a Resource Element inside Context, not into Context itself. This changed in Tomcat 8.0 IIRC. Giacomo Morri wrote (at 2024-04-24 11:42 +0200): > Hi, i have a servlet for uploading files inside a path that contains a > symbolic link, the upload works fine with tomcat 7

allow symlink tomcat 9

2024-04-24 Thread Giacomo Morri
Hi, i have a servlet for uploading files inside a path that contains a symbolic link, the upload works fine with tomcat 7 but after upgrading it to tomcat 9 the servlet give me a java.lang.NullPointerException at java.io.File.. I tried setting the allowLinking param to true for the context in

Re: FileUpload class not working with Tomcat 10.1

2024-04-23 Thread Chuck Caldarale
>>> >>> uploadfile >>> >>> >>> uploadfile >>> /schDistImportResults.jsp >>> The first servlet is named “uploadfile”. > On Apr 23, 2024, at 12:42, Mark Foley wrote: > > Now I need to add another program to the system that does file uploads. I > created another definition in

  1   2   3   4   5   6   7   8   9   10   >