DO NOT REPLY [Bug 51056] New: Disable / drop support for SSLv2
https://issues.apache.org/bugzilla/show_bug.cgi?id=51056 Summary: Disable / drop support for SSLv2 Product: Tomcat Native Version: 1.1.20 Platform: PC OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: Library AssignedTo: dev@tomcat.apache.org ReportedBy: draz...@drazzib.com Hi, SSL 2.0 support got removed from many Debian GNU/Linux (and many others linux distro) and SSL 2.0 is disabled by default in Internet Explorer 7, Mozilla Firefox 3, Opera and Safari. It's use has been deprecated, because of weaknesses in the security of the protocol. For exemple, http://www.openssl.org/news/secadv_20051011.txt I propose to simply drop any support for SSLv2 in Tomcat Native lib with the attached patch. -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
DO NOT REPLY [Bug 51056] Disable / drop support for SSLv2
https://issues.apache.org/bugzilla/show_bug.cgi?id=51056 --- Comment #1 from drazzib draz...@drazzib.com 2011-04-13 14:13:28 EDT --- Created an attachment (id=26883) -- (https://issues.apache.org/bugzilla/attachment.cgi?id=26883) Drop SSLv2 support. -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
DO NOT REPLY [Bug 48662] context.xml expansion on deployment improvements
https://issues.apache.org/bugzilla/show_bug.cgi?id=48662 --- Comment #3 from Tim Astle timothy.as...@caris.com 2011-04-13 14:22:07 EDT --- What was the reason behind this change? Is there a security reason or something else? I would have assumed the default value for copyXML would have been true and not false to have people moving from Tomcat 6 to 7 have their systems continue to function the same way. I read the details about this change and there isn't any back story. http://tomcat.apache.org/tomcat-7.0-doc/config/host.html http://tomcat.apache.org/migration.html#6.0.x_to_7.0.x -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
DO NOT REPLY [Bug 51058] New: AsyncContext.setTimeout() doesn't work as described for Async requests
https://issues.apache.org/bugzilla/show_bug.cgi?id=51058 Summary: AsyncContext.setTimeout() doesn't work as described for Async requests Product: Tomcat 7 Version: 7.0.11 Platform: PC OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: Servlet JSP API AssignedTo: dev@tomcat.apache.org ReportedBy: ch...@blaze.io Created an attachment (id=26884) -- (https://issues.apache.org/bugzilla/attachment.cgi?id=26884) Suggested patch The Javadoc for javax.servlet.AsyncContext.setTimeout() and javax.servlet.AsyncContext.getTimeout() states that: A timeout value of zero or less indicates no timeout. However, this doesn't seem to be the case. A timeout value of zero or less will result in an immediate timeout. Looking through the code, I think the timeout is enforced in org.apache.tomcat.util.net.AprEndpoint.AsyncTimeout.run() or org.apache.tomcat.util.net.JIoEndpoint.AsyncTimeout.run(). I've attached a patch which changes the timeout logic. I believe org.apache.tomcat.util.net.NioEndpoint.timeout() also needs a change, but that one's not as clear to me. -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
DO NOT REPLY [Bug 51058] AsyncContext.setTimeout() doesn't work as described for Async requests
https://issues.apache.org/bugzilla/show_bug.cgi?id=51058 Chris ch...@blaze.io changed: What|Removed |Added Attachment #26884|0 |1 is patch|| -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
svn commit: r1091927 - /tomcat/trunk/java/org/apache/catalina/connector/CoyoteAdapter.java
Author: markt
Date: Wed Apr 13 21:46:29 2011
New Revision: 1091927
URL: http://svn.apache.org/viewvc?rev=1091927view=rev
Log:
Fix comment typo
Modified:
tomcat/trunk/java/org/apache/catalina/connector/CoyoteAdapter.java
Modified: tomcat/trunk/java/org/apache/catalina/connector/CoyoteAdapter.java
URL:
http://svn.apache.org/viewvc/tomcat/trunk/java/org/apache/catalina/connector/CoyoteAdapter.java?rev=1091927r1=1091926r2=1091927view=diff
==
--- tomcat/trunk/java/org/apache/catalina/connector/CoyoteAdapter.java
(original)
+++ tomcat/trunk/java/org/apache/catalina/connector/CoyoteAdapter.java Wed Apr
13 21:46:29 2011
@@ -271,7 +271,7 @@ public class CoyoteAdapter implements Ad
if (!request.isAsync() !comet) {
// Error or timeout - need to tell listeners the request is
over
// Have to test this first since state may change while in this
-// method and this is only required if entering this methos in
+// method and this is only required if entering this method in
// this state
Context ctxt = (Context) request.getMappingData().context;
if (ctxt != null) {
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
[GUMP@vmgump]: Project tomcat-trunk-validate (in module tomcat-trunk) failed
To whom it may engage... This is an automated request, but not an unsolicited one. For more information please visit http://gump.apache.org/nagged.html, and/or contact the folk at gene...@gump.apache.org. Project tomcat-trunk-validate has an issue affecting its community integration. This issue affects 1 projects, and has been outstanding for 23 runs. The current state of this project is 'Failed', with reason 'Build Failed'. For reference only, the following projects are affected by this: - tomcat-trunk-validate : Tomcat 7.x, a web server implementing Java Servlet 3.0, ... Full details are available at: http://vmgump.apache.org/gump/public/tomcat-trunk/tomcat-trunk-validate/index.html That said, some information snippets are provided here. The following annotations (debug/informational/warning/error messages) were provided: -DEBUG- Dependency on checkstyle exists, no need to add for property checkstyle.jar. -INFO- Failed with reason build failed The following work was performed: http://vmgump.apache.org/gump/public/tomcat-trunk/tomcat-trunk-validate/gump_work/build_tomcat-trunk_tomcat-trunk-validate.html Work Name: build_tomcat-trunk_tomcat-trunk-validate (Type: Build) Work ended in a state of : Failed Elapsed: 2 secs Command Line: /usr/lib/jvm/java-6-openjdk/bin/java -Djava.awt.headless=true -Dbuild.sysclasspath=only org.apache.tools.ant.Main -Dgump.merge=/srv/gump/public/gump/work/merge.xml -Dcheckstyle.jar=/srv/gump/public/workspace/checkstyle/target/checkstyle-5.3-SNAPSHOT.jar -Dexecute.validate=true validate [Working Directory: /srv/gump/public/workspace/tomcat-trunk] CLASSPATH: /usr/lib/jvm/java-6-openjdk/lib/tools.jar:/srv/gump/public/workspace/ant/dist/lib/ant.jar:/srv/gump/public/workspace/ant/dist/lib/ant-launcher.jar:/srv/gump/public/workspace/ant/dist/lib/ant-jmf.jar:/srv/gump/public/workspace/ant/dist/lib/ant-junit.jar:/srv/gump/public/workspace/ant/dist/lib/ant-swing.jar:/srv/gump/public/workspace/ant/dist/lib/ant-apache-resolver.jar:/srv/gump/public/workspace/ant/dist/lib/ant-apache-xalan2.jar:/srv/gump/packages/junit3.8.1/junit.jar:/srv/gump/public/workspace/xml-commons/java/build/resolver.jar:/srv/gump/public/workspace/checkstyle/target/checkstyle-5.3-SNAPSHOT.jar:/srv/gump/public/workspace/apache-commons/beanutils/dist/commons-beanutils-14042011.jar:/srv/gump/public/workspace/apache-commons/cli/target/commons-cli-14042011.jar:/srv/gump/public/workspace/apache-commons/validator/dist/commons-validator-14042011.jar:/srv/gump/public/workspace/junit/dist/junit-14042011.jar:/srv/gump/public/workspace/junit/dist/junit-dep-14042011.ja r:/srv/gump/public/workspace/google-guava/build/dist/guava-14042011/guava-14042011.jar:/srv/gump/public/workspace/apache-commons/logging/target/commons-logging-14042011.jar:/srv/gump/public/workspace/apache-commons/logging/target/commons-logging-api-14042011.jar:/srv/gump/packages/javamail-1.4/mail.jar:/srv/gump/packages/javamail-1.4/lib/mailapi.jar:/srv/gump/packages/jaf-1.1ea/activation.jar - at java.security.AccessController.doPrivileged(Native Method) at java.beans.Introspector.getPublicDeclaredMethods(Introspector.java:1322) at java.beans.Introspector.getTargetMethodInfo(Introspector.java:1188) at java.beans.Introspector.getBeanInfo(Introspector.java:423) at java.beans.Introspector.getBeanInfo(Introspector.java:189) at java.beans.Introspector.getBeanInfo(Introspector.java:250) at java.beans.Introspector.init(Introspector.java:404) at java.beans.Introspector.getBeanInfo(Introspector.java:189) at java.beans.Introspector.getBeanInfo(Introspector.java:250) at java.beans.Introspector.init(Introspector.java:404) at java.beans.Introspector.getBeanInfo(Introspector.java:189) at java.beans.Introspector.getBeanInfo(Introspector.java:250) at java.beans.Introspector.init(Introspector.java:404) at java.beans.Introspector.getBeanInfo(Introspector.java:189) at org.apache.commons.beanutils.PropertyUtilsBean.getPropertyDescriptors(PropertyUtilsBean.java:980) at org.apache.commons.beanutils.PropertyUtilsBean.getPropertyDescriptors(PropertyUtilsBean.java:1084) at org.apache.commons.beanutils.PropertyUtilsBean.getPropertyDescriptor(PropertyUtilsBean.java:912) at org.apache.commons.beanutils.BeanUtilsBean.copyProperty(BeanUtilsBean.java:392) at com.puppycrawl.tools.checkstyle.api.AutomaticBean.contextualize(AutomaticBean.java:229) at com.puppycrawl.tools.checkstyle.Checker.setupChild(Checker.java:156) at com.puppycrawl.tools.checkstyle.api.AutomaticBean.configure(AutomaticBean.java:207) at com.puppycrawl.tools.checkstyle.CheckStyleTask.createChecker(CheckStyleTask.java:374) at com.puppycrawl.tools.checkstyle.CheckStyleTask.realExecute(CheckStyleTask.java:300) at
