Bug report for Taglibs [2010/11/28]
+---+ | Bugzilla Bug ID | | +-+ | | Status: UNC=Unconfirmed NEW=New ASS=Assigned| | | OPN=ReopenedVER=Verified(Skipped Closed/Resolved) | | | +-+ | | | Severity: BLK=Blocker CRI=Critical REG=Regression MAJ=Major | | | | MIN=Minor NOR=NormalENH=Enhancement TRV=Trivial | | | | +-+ | | | | Date Posted | | | | | +--+ | | | | | Description | | | | | | | |27717|New|Maj|2004-03-16|x:forEach very slow in JSTL 1.1 | |38193|Ass|Enh|2006-01-09|[RDC] BuiltIn Grammar support for Field | |38600|Ass|Enh|2006-02-10|[RDC] Enable RDCs to be used in X+V markup (X+RDC)| |42413|New|Enh|2007-05-14|[PATCH] Log Taglib enhancements | |46052|New|Nor|2008-10-21|SetLocaleSupport is slow to initialize when many l| |48333|New|Enh|2009-12-02|TLD generator | |49578|New|Nor|2010-07-09|XPath handling only supports single reference to v| |50064|New|Nor|2010-10-09|bundle-ify the taglibs jars | |50068|New|Nor|2010-10-09|Memory leak with Driver registration | |50250|New|Maj|2010-11-10|Split package issue in impl and jstlel bundles| |50263|New|Nor|2010-11-13|README_src.txt out of date| |50265|New|Nor|2010-11-13|FormatDateSupport.dateFormatCache lazy init is not| +-+---+---+--+--+ | Total 12 bugs | +---+ - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
Bug report for Tomcat 5 [2010/11/28]
+---+ | Bugzilla Bug ID | | +-+ | | Status: UNC=Unconfirmed NEW=New ASS=Assigned| | | OPN=ReopenedVER=Verified(Skipped Closed/Resolved) | | | +-+ | | | Severity: BLK=Blocker CRI=Critical REG=Regression MAJ=Major | | | | MIN=Minor NOR=NormalENH=Enhancement TRV=Trivial | | | | +-+ | | | | Date Posted | | | | | +--+ | | | | | Description | | | | | | | |27122|Opn|Enh|2004-02-20|IE plugins cannot access components through Tomcat| |28039|Opn|Enh|2004-03-30|Cluster Support for SingleSignOn | |29494|Inf|Enh|2004-06-10|No way to set PATH when running as a service on Wi| |33262|Inf|Enh|2005-01-27|Service Manager autostart should check for adminis| |33453|Opn|Enh|2005-02-08|Jasper should recompile JSP files whose datestamps| |33671|Opn|Enh|2005-02-21|Manual Windows service installation with custom na| |34801|New|Enh|2005-05-08|PATCH: CGIServlet does not terminate child after a| |34805|Ass|Enh|2005-05-08|warn about invalid security constraint url pattern| |34868|Ass|Enh|2005-05-11|allow to register a trust store for a session that| |35054|Inf|Enh|2005-05-25|warn if appBase is not existing as a File or direc| |36362|New|Enh|2005-08-25|missing check for Java reserved keywords in tag fi| |36569|Inf|Enh|2005-09-09|Redirects produce illegal URL's | |36837|Inf|Enh|2005-09-28|Looking for ProxyHandler implementation of Http re| |37018|Ass|Enh|2005-10-11|Document how to use tomcat-SSL with a pkcs11 token| |37334|Inf|Enh|2005-11-02|Realm digest property not aligned with the adminis| |38216|Inf|Enh|2006-01-10|Extend Jmxproxy to allow call of MBean Operations | |38268|Inf|Enh|2006-01-13|User friendly: Need submit button on adding/deleti| |38360|Inf|Enh|2006-01-24|Domain for session cookies| |38546|Inf|Enh|2006-02-07|Google bot sends invalid If-Modifed-Since Header, | |38577|Inf|Enh|2006-02-08|Enhance logging of security failures | |38916|Inf|Enh|2006-03-10|HttpServletRequest cannot handle multipart request| |39053|Inf|Enh|2006-03-21|include Tomcat embedded sample| |39740|New|Enh|2006-06-07|semi-colon ; isn't allowed as a query argument sep| |39862|Inf|Enh|2006-06-22|provide support for protocol-independent GenericSe| |40211|Inf|Enh|2006-08-08|Compiled JSP don't indent HTML code | |40402|New|Enh|2006-09-03|Manager should display Exceptions | |40510|New|Enh|2006-09-14|installer does not create shortcuts for all users | |40712|New|Enh|2006-10-10|Realm admin error.| |40728|Inf|Enh|2006-10-11|Catalina MBeans use non-serializable classes | |40766|New|Enh|2006-10-16|Using an unsecure jsessionid with mod_proxy_ajp ov| |40881|Opn|Enh|2006-11-02|Unable to receive message through TCP channel - | |41007|Opn|Enh|2006-11-20|Can't define customized 503 error page| |41179|New|Enh|2006-12-15|400 Bad Request response during auto re-deployment| |41227|Opn|Enh|2006-12-21|When the jasper compiler fails to compile a JSP, i| |41337|Opn|Enh|2007-01-10|Display an error page if no cert is available on C| |41496|New|Enh|2007-01-30|set a security provider for jsse in a connector co| |41498|New|Enh|2007-01-30|allRolesMode Realm configuration option not docume| |41539|Inf|Enh|2007-02-05|NullPointerException during Embedded tomcat restar| |41673|New|Enh|2007-02-21|Jasper output the message of compiling error using| |41697|Ver|Enh|2007-02-25|make visible in debug output if charset from brows| |41709|Inf|Enh|2007-02-26|When calling the API that relates to the buffer af| |41718|New|Enh|2007-02-27|Status 302 response to GET request has no body whe| |42416|New|Enh|2007-05-14|Tomcat startup hangs and AJP13 connector port 8009| |43423|New|Enh|2007-09-18|catalina.sh -force too fast | |43538|New|Enh|2007-10-02|[patch] Show the hostname and IP address in the ma| |43796|Inf|Enh|2007-11-05|Add MIME type mapping for the log extension | |43866|New|Enh|2007-11-14|add support for session attribute propagation with| |43925|Opn|Enh|2007-11-21|org.apache.jasper.runtime.BodyContentImpl causing | |43960|New|Enh|2007-11-26|Expose StandardWrapper unavailable and/or availabl| |43991|New|Enh|2007-11-29|Contributing a URLResourceFactory | |44216|New|Enh|2008-01-11|Don't reuse session ID even if emptySessionPath=tr|
Bug report for Tomcat 6 [2010/11/28]
+---+ | Bugzilla Bug ID | | +-+ | | Status: UNC=Unconfirmed NEW=New ASS=Assigned| | | OPN=ReopenedVER=Verified(Skipped Closed/Resolved) | | | +-+ | | | Severity: BLK=Blocker CRI=Critical REG=Regression MAJ=Major | | | | MIN=Minor NOR=NormalENH=Enhancement TRV=Trivial | | | | +-+ | | | | Date Posted | | | | | +--+ | | | | | Description | | | | | | | |39661|Opn|Enh|2006-05-25|Please document JULI FileHandler configuration pro| |41128|Inf|Enh|2006-12-07|Reference to java Thread name from RequestProcesso| |41679|New|Enh|2007-02-22|SemaphoreValve should be able to filter on url pat| |41883|Ass|Enh|2007-03-18|use abstract wrapper instead of plain X509Certific| |41992|New|Enh|2007-03-30|Need ability to set OS process title | |42463|New|Enh|2007-05-20|crossContext and classloader issues - pls amend | |43001|New|Enh|2007-07-30|JspC lacks setMappedFile and setDie for use in Ant| |43400|New|Enh|2007-09-14|enum support for tag libs | |43497|New|Enh|2007-09-26|Add ability to escape rendered output of JSP expre| |43548|Opn|Enh|2007-10-04|xml schema for tomcat-users.xml | |43682|New|Enh|2007-10-23|JULI: web-inf/classes/logging.properties to suppor| |43742|New|Enh|2007-10-30|.tag compiles performed one at a time -- extremel| |43790|Ass|Enh|2007-11-03|concurrent access issue on TagHandlerPool | |43979|New|Enh|2007-11-27|Add abstraction for Java and Classfile output | |44047|New|Enh|2007-12-10|Provide a way for Tomcat to serve up error pages w| |44199|New|Enh|2008-01-10|expose current backlog queue size | |44225|New|Enh|2008-01-14|SSL connector tries to load the private keystore f| |44264|New|Enh|2008-01-18|Clustering - Support for disabling multicasting an| |44284|New|Enh|2008-01-23|Support java.lang.Iterable in c:forEach tag | |44294|New|Enh|2008-01-25|Support for EL functions with varargs | |44299|New|Enh|2008-01-26|Provider manager app with a log out button| |44312|New|Enh|2008-01-28|Warn when overwritting docBase of the default Host| |44598|New|Enh|2008-03-13|JAASRealm is suppressing Exceptions | |44645|New|Enh|2008-03-20|[Patch] JNDIRealm - Doesn't support JNDI java.nam| |44787|New|Enh|2008-04-09|provide more error context on java.lang.IllegalSt| |44818|New|Enh|2008-04-13|tomcat hangs with GET when content-length is defin| |45014|New|Enh|2008-05-15|Request and Response classes should have wrappers | |45282|New|Enh|2008-06-25|NioReceiver doesn't close cleanly, leaving sockets| |45283|Opn|Enh|2008-06-25|Allow multiple authenticators to be added to pipel| |45428|New|Enh|2008-07-18|warn if the tomcat stop doesn't complete | |45654|New|Enh|2008-08-19|use static methods and attributes in a direct way!| |45731|New|Enh|2008-09-02|Enhancement request : pluggable httpsession cache | |45832|New|Enh|2008-09-18|add DIGEST authentication support to Ant tasks| |45871|New|Enh|2008-09-23|Support for salted and digested patches in DataSou| |45878|New|Enh|2008-09-24|Generated jars do not contain proper manifests or | |45879|Opn|Enh|2008-09-24|Windows installer fails to install NOTICE and RELE| |45931|Opn|Enh|2008-10-01|trimSpaces incorrectly modifies output| |45995|New|Enh|2008-10-13|RFE - MIME type extension not case sensitive | |46173|New|Enh|2008-11-09|Small patch for manager app: Setting an optional c| |46263|New|Enh|2008-11-21|Tomcat reloading of context does not update contex| |46264|New|Enh|2008-11-21|Shutting down tomcat with large number of contexts| |46284|New|Enh|2008-11-24|Add flag to DeltaManager that blocks processing cl| |46350|New|Enh|2008-12-05|Maven repository should contain source bundles| |46451|New|Enh|2008-12-30|Configure svn:bugtraq properties | |46461|New|Enh|2009-01-01|fail graceful on dns changes for connectors/hosts | |46497|New|Enh|2009-01-08|Install Tomcat Deployer/ANT on Windows Platform | |46655|New|Enh|2009-02-03|keystore's password handler | |46727|New|Enh|2009-02-17|DefaultServlet - serving multiple encodings | |46819|New|Enh|2009-03-07|Remove redundant object instantiations in JspRunti| |46902|New|Enh|2009-03-24|LoginValve to bypass restrictions of j_security_ch| |47061|New|Enh|2009-04-21|JDBCStore for saving sessions doesn't support data|
Bug report for Tomcat 7 [2010/11/28]
+---+
| Bugzilla Bug ID |
| +-+
| | Status: UNC=Unconfirmed NEW=New ASS=Assigned|
| | OPN=ReopenedVER=Verified(Skipped Closed/Resolved) |
| | +-+
| | | Severity: BLK=Blocker CRI=Critical REG=Regression MAJ=Major |
| | | MIN=Minor NOR=NormalENH=Enhancement TRV=Trivial |
| | | +-+
| | | | Date Posted |
| | | | +--+
| | | | | Description |
| | | | | |
|48550|Inf|Enh|2010-01-14|Update examples and default server.xml to use UTF-|
|48692|New|Enh|2010-02-07|Provide option to parse application/x-www-form-url|
|48870|New|Enh|2010-03-08|avoid parallel arrays of base types |
|48892|New|Enh|2010-03-11|Use URIEncoding from server.xml for decoding post |
|49000|New|Enh|2010-03-26|Cookie parsing bug when an empty value has an equa|
|49122|Opn|Enh|2010-04-14|Update of ROOT application index.html |
|49125|New|Enh|2010-04-14|toString on byte[] array probably is not correct |
|49159|New|Enh|2010-04-20|Improve ThreadLocal memory leak clean-up |
|49165|New|Enh|2010-04-21|Enhancement - Allow %{TIME_FORMAT}t As Configurati|
|49284|New|Enh|2010-05-12|Implement SSL renegotiation for the NIO connector |
|49290|New|Enh|2010-05-14|Using a JarScanner with scanAllDirectories=true ca|
|49318|New|Enh|2010-05-20|add a Negotiate (Kerberos/NTLM) authenticator / in|
|49395|New|Enh|2010-06-06|manager.findLeaks : display the date when the leak|
|49589|New|Enh|2010-07-12|Tag handlers with constant attribute values are al|
|49591|New|Enh|2010-07-13|Custom error page always uses Transfer-Encoding: c|
|49683|New|Nor|2010-08-01|Separate keep-alive and connection timeout with AP|
|49711|New|Enh|2010-08-05|HttpServletRequest#getParts() does not work in a F|
|49785|New|Enh|2010-08-19|Enabling TLS for JNDIRealm|
|49821|New|Enh|2010-08-25|Tomcat CLI|
|50019|New|Enh|2010-09-28|Adding JNDI lookup-name support In XML and Resou|
|50175|New|Enh|2010-10-28|Enhance memory leak detection by selectively apply|
|50205|New|Enh|2010-11-03|Add deployIgnorePaths attribute to StandardHost |
|50234|New|Enh|2010-11-08|JspC use servlet 3.0 features |
|50282|New|Enh|2010-11-16|Reference from javax.security.auth.login.LoginCont|
|50306|New|Enh|2010-11-19|Detect stuck threads |
|50325|New|Enh|2010-11-24|Update Tomcat to use JRE provided solutions for CV|
|50351|New|Reg|2010-11-27|javax.naming.NamingException: No set method found |
|50352|New|Nor|2010-11-27|AsyncListener.onComplete is not called after Async|
|50353|New|Nor|2010-11-27|Calling asyncContext.getResponse() returns null af|
+-+---+---+--+--+
| Total 29 bugs |
+---+
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
Bug report for Tomcat Connectors [2010/11/28]
+---+ | Bugzilla Bug ID | | +-+ | | Status: UNC=Unconfirmed NEW=New ASS=Assigned| | | OPN=ReopenedVER=Verified(Skipped Closed/Resolved) | | | +-+ | | | Severity: BLK=Blocker CRI=Critical REG=Regression MAJ=Major | | | | MIN=Minor NOR=NormalENH=Enhancement TRV=Trivial | | | | +-+ | | | | Date Posted | | | | | +--+ | | | | | Description | | | | | | | |34526|Opn|Nor|2005-04-19|Truncated content in decompressed requests from mo| |35959|Opn|Enh|2005-08-01|mod_jk not independant of UseCanonicalName| |36155|Opn|Nor|2005-08-12|tomcat chooses wrong host if using mod_jk | |39967|Inf|Nor|2006-07-05|mod_jk gives segmentation fault when apache is sta| |40208|Inf|Nor|2006-08-08|Request-Dump when ErrorDocument in httpd.conf is a| |41170|Inf|Nor|2006-12-13|single crlf in header termination crashes app.| |41923|Opn|Nor|2007-03-21|Tomcat doesnt recognized client abort | |42366|Inf|Nor|2007-05-09|Memory leak in newer mod_jk version when connectio| |42554|Opn|Nor|2007-05-31|mod_ssl + mod_jk with status_worker does not work | |43303|New|Enh|2007-09-04|Versioning under Windows not reported by many conn| |43968|New|Enh|2007-11-26|[patch] support ipv6 with mod_jk | |44290|New|Nor|2008-01-24|mod_jk/1.2.26: retry is not useful for an importan| |44349|New|Maj|2008-02-04|mod_jk/1.2.26 module does not read worker.status.s| |44379|New|Enh|2008-02-07|convert the output of strftime into UTF-8 | |44454|New|Nor|2008-02-19|busy count reported in mod_jk inflated, causes inc| |44571|New|Enh|2008-03-10|Limits busy per worker to a threshold | |45063|New|Nor|2008-05-22|JK-1.2.26 IIS ISAPI filter issue when running diff| |45313|New|Nor|2008-06-30|mod_jk 1.2.26 apache 2.2.9 static compiled on so| |45395|New|Min|2008-07-14|MsgAjp dump method does not dump packet when being| |46337|New|Nor|2008-12-04|real worker name is wrong | |46406|New|Enh|2008-12-16|Supporting relative paths in isapi_redirect.proper| |46676|New|Enh|2009-02-09|Configurable test request for Watchdog thread | |46767|New|Enh|2009-02-25|mod_jk to send DECLINED in case no fail-over tomca| |47038|New|Enh|2009-04-15|USE_FLOCK_LK redefined compiler warning when using| |47327|New|Enh|2009-06-07|remote_user not logged in apache logfile | |47617|New|Enh|2009-07-31|include time spent doing ajp_get_endpoint() in err| |47678|New|Cri|2009-08-11|Unable to allocate shared memory when using isapi_| |47679|New|Nor|2009-08-11|Not all headers get passed to Tomcat server from i| |47692|New|Reg|2009-08-12|Can not compile mod_jk with apache2.0.63 and tomca| |47714|New|Cri|2009-08-20|Reponse mixed between users | |47750|New|Maj|2009-08-27|Loss of worker settings when changing via jkstatus| |47795|New|Maj|2009-09-07|service sticky_session not being set correctly wit| |47840|Inf|Min|2009-09-14|A broken worker name is written in the log file. | |48191|New|Maj|2009-11-13|Problem with mod_jk 1.2.28 - Can not render up the| |48460|New|Nor|2009-12-30|mod_proxy_ajp document has three misleading portio| |48490|New|Nor|2010-01-05|Changing a node to stopped in uriworkermap.propert| |48513|New|Enh|2010-01-09|IIS Quick setup instructions | |48564|New|Nor|2010-01-18|Unable to turn off retries for LB worker | |48830|New|Nor|2010-03-01|IIS shutdown blocked in endpoint service when serv| |48891|Opn|Enh|2010-03-11|Missing EOL-style settings in tomcat/jk/trunk | |48940|New|Maj|2010-03-18|IIS to Tomcat occasionally fails on POST with T-E | |49035|New|Maj|2010-04-01|data lost when post a multipart/form-data form| |49048|New|Nor|2010-04-05|ACL not applied to redirect URLs | |49063|New|Enh|2010-04-07|Please add JkStripSession status in jk-status work| |49135|New|Enh|2010-04-16|SPDY Connector for The Tomcat | |49413|Opn|Reg|2010-06-09|Apache Mod_jk 1.2.30 is shutting down communicatio| |49469|New|Enh|2010-06-19|Workers status page has negative number of connect| |49511|Inf|Maj|2010-06-28|IIS 7.5 incorrect logging: pfc-pFilterContext is | |49732|Opn|Nor|2010-08-10|reply_timeout can't wait forever. | |49822|New|Enh|2010-08-25|Add hash lb worker method | |49903|New|Enh|2010-09-09|Make workers file reloadable |
Bug report for Tomcat Modules [2010/11/28]
+---+ | Bugzilla Bug ID | | +-+ | | Status: UNC=Unconfirmed NEW=New ASS=Assigned| | | OPN=ReopenedVER=Verified(Skipped Closed/Resolved) | | | +-+ | | | Severity: BLK=Blocker CRI=Critical REG=Regression MAJ=Major | | | | MIN=Minor NOR=NormalENH=Enhancement TRV=Trivial | | | | +-+ | | | | Date Posted | | | | | +--+ | | | | | Description | | | | | | | |48240|New|Nor|2009-11-19|Tomcat-Lite missing @Override markers | |48268|New|Nor|2009-11-23|Patch to fix generics in tomcat-lite | |48861|New|Nor|2010-03-04|Files without AL headers | |49543|New|Enh|2010-07-02|Request for a shared datasource configuration as| |49685|New|Nor|2010-08-02|Unsafe synchronization in class ManagedBean | |49686|New|Nor|2010-08-02|Using an instance lock to protect static shared da| |49953|New|Nor|2010-09-17|Missing @Override annotations | |49954|New|Nor|2010-09-17|Code tidyup | |50025|New|Cri|2010-09-29|getConnection method in class DataSourceProxy is i| |50333|New|Nor|2010-11-25|IllegalArgumentException occurs when setting maxAc| +-+---+---+--+--+ | Total 10 bugs | +---+ - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
Bug report for Tomcat Native [2010/11/28]
+---+ | Bugzilla Bug ID | | +-+ | | Status: UNC=Unconfirmed NEW=New ASS=Assigned| | | OPN=ReopenedVER=Verified(Skipped Closed/Resolved) | | | +-+ | | | Severity: BLK=Blocker CRI=Critical REG=Regression MAJ=Major | | | | MIN=Minor NOR=NormalENH=Enhancement TRV=Trivial | | | | +-+ | | | | Date Posted | | | | | +--+ | | | | | Description | | | | | | | |38372|Inf|Cri|2006-01-25|tcnative-1.dll response overflow corruption, parti| |41361|New|Nor|2007-01-14|Content lost when read by a slow client. | |42090|New|Cri|2007-04-11|tcnative badly handles some OpenSSL disconnections| |45392|New|Nor|2008-07-14|No OCSP support for client SSL verification | |46041|New|Cri|2008-10-20|Tomcat service is terminated unexpectedly (tcnativ| |46179|New|Maj|2008-11-10|apr ssl client authentication | |46571|New|Nor|2009-01-21|tcnative blocks in APR poll on Solaris| |47319|New|Nor|2009-06-05|With APR, getRemoteHost() returns NULL for unknown| |47851|New|Nor|2009-09-16|thread-safety issues in the TC native Java code | |48253|New|Min|2009-11-20|Tomcat Native patch - adding dynamic locking callb| |48655|New|Nor|2010-02-02|Active multipart downloads prevent tomcat shutdown| |49038|Inf|Nor|2010-04-02|Crash in tcnative | |49556|New|Cri|2010-07-05|the proc.create function used args as env to get t| |49557|New|Cri|2010-07-05|index erro in the loop to get the env info in the | |49595|New|Cri|2010-07-15|Tomcat crashes in tcnative-1.dll frequently | |49795|New|Nor|2010-08-22|Crash in Socket.destroy | |49796|New|Nor|2010-08-22|Crash in SSLSocket.handshake()| |49851|New|Blk|2010-08-31|JNI Registry.deleteKey and Registry.deleteValue co| |50135|New|Nor|2010-10-21|IPV6 problem: unable to connect from other host | +-+---+---+--+--+ | Total 19 bugs | +---+ - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
DO NOT REPLY [Bug 50351] javax.naming.NamingException: No set method found for property: singleton
https://issues.apache.org/bugzilla/show_bug.cgi?id=50351 Mark Thomas ma...@apache.org changed: What|Removed |Added Version|trunk |7.0.5 OS/Version||All --- Comment #1 from Mark Thomas ma...@apache.org 2010-11-28 08:12:12 EST --- Update version -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
svn commit: r1039882 - /tomcat/trunk/java/org/apache/catalina/session/ManagerBase.java
Author: markt
Date: Sun Nov 28 13:31:39 2010
New Revision: 1039882
URL: http://svn.apache.org/viewvc?rev=1039882view=rev
Log:
SecureRandom is self-seeding
Modified:
tomcat/trunk/java/org/apache/catalina/session/ManagerBase.java
Modified: tomcat/trunk/java/org/apache/catalina/session/ManagerBase.java
URL:
http://svn.apache.org/viewvc/tomcat/trunk/java/org/apache/catalina/session/ManagerBase.java?rev=1039882r1=1039881r2=1039882view=diff
==
--- tomcat/trunk/java/org/apache/catalina/session/ManagerBase.java (original)
+++ tomcat/trunk/java/org/apache/catalina/session/ManagerBase.java Sun Nov 28
13:31:39 2010
@@ -555,12 +555,10 @@ public abstract class ManagerBase extend
return;
}
-long seed = System.currentTimeMillis();
-long t1 = seed;
+long t1 = System.currentTimeMillis();
// Construct and seed a new random number generator
SecureRandom result = new SecureRandom();
-result.setSeed(seed);
if(log.isDebugEnabled()) {
long t2=System.currentTimeMillis();
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
Re: svn commit: r1039707 - in /tomcat/trunk: java/org/apache/catalina/session/ManagerBase.java webapps/docs/config/manager.xml
On 27/11/2010 21:01, Phil Steitz wrote:
With this change to createRandom it is not clear to me what the value of the
reseeding is when the SecureRandom is not user-supplied.
Maybe not a huge amount.
It would speed up initialization in the default case if
the reseeding was only done for user-defined generators. Alternatively, you
could remove it altogether and doc the fact that user-supplied classes are
expected to be self-seeding.
That makes sense but my focus right now isn't on performance at
initialisation but performance of session ID generation. I want to get
to the bottom of why SecureRandom on OSX was behaving as if it was
synchronized internally even though I didn't see any blocking in
YourKit. More importantly, does it behave the same way on Linux? More
testing is required.
Mark
Phil
On Sat, Nov 27, 2010 at 12:05 PM, ma...@apache.org wrote:
Author: markt
Date: Sat Nov 27 17:05:27 2010
New Revision: 1039707
URL: http://svn.apache.org/viewvc?rev=1039707view=rev
Log:
Make SecureRandom the fall-back and use SecureRandom throughout rather than
Random
Modified:
tomcat/trunk/java/org/apache/catalina/session/ManagerBase.java
tomcat/trunk/webapps/docs/config/manager.xml
Modified: tomcat/trunk/java/org/apache/catalina/session/ManagerBase.java
URL:
http://svn.apache.org/viewvc/tomcat/trunk/java/org/apache/catalina/session/ManagerBase.java?rev=1039707r1=1039706r2=1039707view=diff
==
--- tomcat/trunk/java/org/apache/catalina/session/ManagerBase.java
(original)
+++ tomcat/trunk/java/org/apache/catalina/session/ManagerBase.java Sat Nov
27 17:05:27 2010
@@ -41,7 +41,6 @@ import java.util.LinkedList;
import java.util.List;
import java.util.Map;
import java.util.Queue;
-import java.util.Random;
import java.util.concurrent.ConcurrentHashMap;
import java.util.concurrent.ConcurrentLinkedQueue;
import java.util.concurrent.atomic.AtomicLong;
@@ -128,7 +127,8 @@ public abstract class ManagerBase extend
* designed this way since random number generator use a sync to make
them
* thread-safe and the sync makes using a a single object slow(er).
*/
-protected QueueRandom randoms = new ConcurrentLinkedQueueRandom();
+protected QueueSecureRandom randoms =
+new ConcurrentLinkedQueueSecureRandom();
/**
* Random number generator used to see @{link {...@link #randoms}.
@@ -136,9 +136,9 @@ public abstract class ManagerBase extend
protected SecureRandom randomSeed = null;
/**
- * The Java class name of the random number generator class to be used
- * when generating session identifiers. The random number generator(s)
will
- * always be seeded from a SecureRandom instance.
+ * The Java class name of the secure random number generator class to
be
+ * used when generating session identifiers. The random number
generator(s)
+ * will always be seeded from a SecureRandom instance.
*/
protected String randomClass = java.security.SecureRandom;
@@ -505,23 +505,23 @@ public abstract class ManagerBase extend
* Create a new random number generator instance we should use for
* generating session identifiers.
*/
-protected Random createRandom() {
+protected SecureRandom createRandom() {
if (randomSeed == null) {
createRandomSeed();
}
-Random result = null;
+SecureRandom result = null;
long t1 = System.currentTimeMillis();
try {
// Construct and seed a new random number generator
Class? clazz = Class.forName(randomClass);
-result = (Random) clazz.newInstance();
+result = (SecureRandom) clazz.newInstance();
} catch (Exception e) {
-// Fall back to the simple case
+// Fall back to the default case
log.error(sm.getString(managerBase.random,
randomClass), e);
-result = new java.util.Random();
+result = new java.security.SecureRandom();
}
byte[] seedBytes = randomSeed.generateSeed(64);
ByteArrayInputStream bais = new ByteArrayInputStream(seedBytes);
@@ -966,7 +966,7 @@ public abstract class ManagerBase extend
}
closeRandomInputStreams();
}
-Random random = randoms.poll();
+SecureRandom random = randoms.poll();
if (random == null) {
random = createRandom();
}
Modified: tomcat/trunk/webapps/docs/config/manager.xml
URL:
http://svn.apache.org/viewvc/tomcat/trunk/webapps/docs/config/manager.xml?rev=1039707r1=1039706r2=1039707view=diff
==
--- tomcat/trunk/webapps/docs/config/manager.xml (original)
+++ tomcat/trunk/webapps/docs/config/manager.xml Sat Nov 27 17:05:27 2010
@@ -134,8
Re: svn commit: r1039657 - in /tomcat/trunk: java/org/apache/catalina/session/ManagerBase.java java/org/apache/catalina/session/mbeans-descriptors.xml webapps/docs/changelog.xml webapps/docs/config/ma
On 27/11/2010 20:37, Phil Steitz wrote: Author: markt Date: Sat Nov 27 11:41:10 2010 New Revision: 1039657 I think you need to drop the line result.setSeed(seed); following this; otherwise you are seeding result with (unadulterated) currentTimeMillis. For a SecureRandom that should not cause a problem but it is of little to no value. There is no need to removed it as it is not reducing entropy but it may as well be removed as it is unlikely to be adding that much entropy either. If you want to take the initialization hit in this method, you can call nextBytes; otherwise you may as well just return new SecureRandom() (in which case, the self-seeding and initialization hit will take place the first time the generator is used). The initialisation hit is taken when the Manager starts triggered by the call to generateSessionId() in startInternal(). Mark - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
DO NOT REPLY [Bug 50353] Calling asyncContext.getResponse() returns null after async timeout
https://issues.apache.org/bugzilla/show_bug.cgi?id=50353 Sylvain Laurent sylvain.laur...@gmail.com changed: What|Removed |Added Version|trunk |7.0.5 -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
DO NOT REPLY [Bug 50352] AsyncListener.onComplete is not called after AsyncContext.complete() is called
https://issues.apache.org/bugzilla/show_bug.cgi?id=50352 Sylvain Laurent sylvain.laur...@gmail.com changed: What|Removed |Added Version|7.0.4 |7.0.5 -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
[Tomcat Wiki] Trivial Update of PoweredBy by TomBJF
Dear Wiki user,
You have subscribed to a wiki page or wiki category on Tomcat Wiki for change
notification.
The PoweredBy page has been changed by TomBJF.
http://wiki.apache.org/tomcat/PoweredBy?action=diffrev1=274rev2=275
--
=== Become.com ===
{{http://www.become.com/images/become_home.gif}}
[[http://Become.com|Become.com]] - The statistics servers for this
massively-scaled shopping web crawler:
[[http://java.sun.com/developer/technicalArticles/WebServices/become/|Read
About It]]
+
+ === BergenJerseyForeclosures.com ===
+
{{http://www.bergenjerseyforeclosures.com/templates/default/images/BergenJerseyForeclosures.png}}
[[http://www.bergenjerseyforeclosures.com|Bergen Jersey Foreclosures]] - The
most popular site for free [[http://www.bergenjerseyforeclosures.com|NJ
foreclosure]] listings has been powered by Tomcat for years since it was first
deployed.
=== BlogScope.net ===
[[http://www.blogscope.net/|{{http://www.blogscope.net/images/blogscope-white-logo.png|http://www.blogscope.net/}}]]
[[http://www.blogscope.net/|BlogScope]] is a search and analysis tool for
blogosphere. Developed as research project at U of Toronto, built upon many
open source applications including Tomcat.
[[http://www.blogscope.net/about/|Read more about it]].
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
Re: svn commit: r1039707 - in /tomcat/trunk: java/org/apache/catalina/session/ManagerBase.java webapps/docs/config/manager.xml
On Sun, Nov 28, 2010 at 8:37 AM, Mark Thomas ma...@apache.org wrote: On 27/11/2010 21:01, Phil Steitz wrote: With this change to createRandom it is not clear to me what the value of the reseeding is when the SecureRandom is not user-supplied. Maybe not a huge amount. It would speed up initialization in the default case if the reseeding was only done for user-defined generators. Alternatively, you could remove it altogether and doc the fact that user-supplied classes are expected to be self-seeding. That makes sense but my focus right now isn't on performance at initialisation but performance of session ID generation. I want to get to the bottom of why SecureRandom on OSX was behaving as if it was synchronized internally even though I didn't see any blocking in YourKit. More importantly, does it behave the same way on Linux? More testing is required. OK, sorry for the noise. I may be wrong, but I think the default on Linux at least used to be NativePRNG. Looking at the source for NativePRNG (e.g., [1]), it appears that it mixes entropy bytes from /dev/urandom on each call to engineNextBytes - not just at initialization, which could cause periodic waits on /dev/urandom. See [2] for more info. [1] h*ttp://s.apache.org/5KC http://s.apache.org/5KC* [2] http://s.apache.org/SRg Phil
DO NOT REPLY [Bug 50358] New: Embedded.stopInternal sets state to STARTING, should be STOPPING
https://issues.apache.org/bugzilla/show_bug.cgi?id=50358 Summary: Embedded.stopInternal sets state to STARTING, should be STOPPING Product: Tomcat 7 Version: 7.0.4 Platform: PC OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: Catalina AssignedTo: dev@tomcat.apache.org ReportedBy: martin.grot...@googlemail.com Embedded.stopInternal invokes setState(LifecycleState.STARTING), this should be changed to setState(LifecycleState.STOPPING). Setting LifecycleState.STARTING during stopInternal leads to a LifecycleException when the Embedded is shut down: LifecycleException: An invalid Lifecycle transition was attempted ([after_stop]) for component [StandardService[null]] in state [STARTING] at org.apache.catalina.util.LifecycleBase.invalidTransition(LifecycleBase.java:321) at org.apache.catalina.util.LifecycleBase.stop(LifecycleBase.java:226) at de.javakaffee.web.msm.MemcachedSessionManagerIntegrationTest.tearDown(MemcachedSessionManagerIntegrationTest.java:112) This failure leads to failing tests in my case. I'm using the (deprecated) Embedded for integration testing the memcached-session-manager (http://code.google.com/p/memcached-session-manager/). I'm just working on a tomcat7 branch, which shall diverge as little as possible from the master/trunk, therefore I'm still using Embedded instead of the newly introduced Tomcat. -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
DO NOT REPLY [Bug 50351] javax.naming.NamingException: No set method found for property: singleton
https://issues.apache.org/bugzilla/show_bug.cgi?id=50351 --- Comment #2 from Flávio Henrique serv...@ig.com.br 2010-11-28 19:16:33 EST --- I downloaded again apache-tomcat-7.0.5-windows-x86.zip from http://people.apache.org/~markt/dev/tomcat-7/v7.0.5/bin/ and got the same problem. When you say update version you mean build from the trunk? I have never compile from the trunk yet, but I can trie. Thanks for your answer Flavio -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
DO NOT REPLY [Bug 50351] javax.naming.NamingException: No set method found for property: singleton
https://issues.apache.org/bugzilla/show_bug.cgi?id=50351 --- Comment #3 from Flávio Henrique serv...@ig.com.br 2010-11-28 19:20:04 EST --- Sorry, I am lazzy, now I undestood: you update the version from trunk to 7.0.5! Sorry, you can ignore my last message. -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
DO NOT REPLY [Bug 50360] New: Server socket still bound after Embedded.stop is invoked
https://issues.apache.org/bugzilla/show_bug.cgi?id=50360
Summary: Server socket still bound after Embedded.stop is
invoked
Product: Tomcat 7
Version: 7.0.4
Platform: PC
OS/Version: Linux
Status: NEW
Severity: normal
Priority: P2
Component: Catalina
AssignedTo: dev@tomcat.apache.org
ReportedBy: martin.grot...@googlemail.com
After stopping an Embedded tomcat the server socket is still bound (in state
LISTEN).
This test case fails:
import java.io.File;
import java.io.IOException;
import java.net.MalformedURLException;
import java.net.ServerSocket;
import java.net.UnknownHostException;
import org.apache.catalina.Context;
import org.apache.catalina.Engine;
import org.apache.catalina.Host;
import org.apache.catalina.LifecycleException;
import org.apache.catalina.LifecycleState;
import org.apache.catalina.connector.Connector;
import org.apache.catalina.session.StandardManager;
import org.apache.catalina.startup.Embedded;
import org.testng.Assert;
import org.testng.annotations.Test;
@SuppressWarnings( deprecation )
public class TestEmbeddedStop {
@Test
public void testShutdown() throws Exception {
final int port = 1;
final Embedded tomcat1 = createCatalina( port );
tomcat1.start();
tomcat1.stop();
try {
new ServerSocket( port );
} catch ( final IOException e ) {
Assert.fail( Could not open new server socket on port + port, e
);
}
}
public static Embedded createCatalina( final int port ) throws
MalformedURLException,
UnknownHostException, LifecycleException {
final Embedded catalina = new Embedded() {
@Override
// Workaround for #50358 - Embedded.stopInternal sets state to
STARTING, should be STOPPING
protected void stopInternal() throws LifecycleException {
super.stopInternal();
setState(LifecycleState.STOPPING);
}
};
final Engine engine = catalina.createEngine();
engine.setName( engine- + port );
engine.setDefaultHost( localhost );
final String docBase = System.getProperty( java.io.tmpdir );
final Host host = catalina.createHost( localhost, docBase );
engine.addChild( host );
final Context context = catalina.createContext( , webapp );
host.addChild( context );
new File( docBase, webapp ).mkdirs();
context.setManager( new StandardManager() );
catalina.addEngine( engine );
engine.setService( catalina ); // needed to prevent NPE in
ApplicationContext.populateSessionTrackingModes
final Connector connector = catalina.createConnector( localhost,
port, false );
catalina.addConnector( connector );
return catalina;
}
}
When org.apache.catalina.connector.Connector.stopInternal is changed and sets
the state to LifecycleState.MUST_DESTROY at the end this works as expected: the
server socket is closed and free for further use.
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
DO NOT REPLY [Bug 50360] Server socket still bound after Embedded.stop is invoked
https://issues.apache.org/bugzilla/show_bug.cgi?id=50360 --- Comment #1 from Martin Grotzke martin.grot...@googlemail.com 2010-11-28 20:20:10 EST --- Created an attachment (id=26352) -- (https://issues.apache.org/bugzilla/attachment.cgi?id=26352) Add setState(LifecycleState.MUST_DESTROY) to Connector.stopInternal (based on 7.0.4) -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
DO NOT REPLY [Bug 50342] Exception on the Host request-header field included colon(':')
https://issues.apache.org/bugzilla/show_bug.cgi?id=50342 --- Comment #2 from Kim Yong Hwan kni...@nhn.com 2010-11-28 21:18:52 EST --- Thank you! I got confused about host field, I understand what you said. -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
DO NOT REPLY [Bug 50342] Exception on the Host request-header field included colon(':')
https://issues.apache.org/bugzilla/show_bug.cgi?id=50342 --- Comment #3 from Kim Yong Hwan kni...@nhn.com 2010-11-28 21:19:59 EST --- Thank you! I got confused about Host field of HTTP 1.1. I understand what you mentioned. -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
