Bug report for Tomcat 7 [2020/02/02]

2020-02-01 Thread bugzilla
+---+
| Bugzilla Bug ID   |
| +-+
| | Status: UNC=Unconfirmed NEW=New ASS=Assigned|
| | OPN=ReopenedVER=Verified(Skipped Closed/Resolved)   |
| |   +-+
| |   | Severity: BLK=Blocker CRI=Critical  REG=Regression  MAJ=Major   |
| |   |   MIN=Minor   NOR=NormalENH=Enhancement TRV=Trivial |
| |   |   +-+
| |   |   | Date Posted |
| |   |   |  +--+
| |   |   |  | Description  |
| |   |   |  |  |
|50944|Ver|Blk|2011-03-18|JSF: java.lang.NullPointerException at com.sun.fac|
|55470|New|Enh|2013-08-23|Help users for ClassNotFoundExceptions during star|
|55477|New|Enh|2013-08-23|Add a solution to map a realm name to a security r|
|56148|New|Enh|2014-02-17|support (multiple) ocsp stapling  |
|56181|New|Enh|2014-02-23|RemoteIpValve & RemoteIpFilter: HttpServletRequest|
|56300|New|Enh|2014-03-22|[Tribes] No useful examples, lack of documentation|
|56438|New|Enh|2014-04-21|If jar scan does not find context config or TLD co|
|56614|New|Enh|2014-06-12|Add a switch to ignore annotations detection on ta|
|56787|New|Enh|2014-07-29|Simplified jndi name parsing  |
|57367|New|Enh|2014-12-18|If JAR scan experiences a stack overflow, give the|
|57827|New|Enh|2015-04-17|Enable adding/removing of members via jmx in a sta|
|57872|New|Enh|2015-04-29|Do not auto-switch session cookie to version=1 due|
|57892|New|Enh|2015-05-05|Log once a warning if a symbolic link is ignored (|
|60597|New|Enh|2017-01-17|Add ability to set cipher suites for websocket cli|
|63167|New|Enh|2019-02-12|Network Requirements To Resolve No Members Active |
|63993|Inf|Nor|2019-12-08|Fatal error EXCEPTION_ACCESS_VIOLATION are thrown |
+-+---+---+--+--+
| Total   16 bugs   |
+---+

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Bug report for Tomcat 9 [2020/02/02]

2020-02-01 Thread bugzilla
+---+
| Bugzilla Bug ID   |
| +-+
| | Status: UNC=Unconfirmed NEW=New ASS=Assigned|
| | OPN=ReopenedVER=Verified(Skipped Closed/Resolved)   |
| |   +-+
| |   | Severity: BLK=Blocker CRI=Critical  REG=Regression  MAJ=Major   |
| |   |   MIN=Minor   NOR=NormalENH=Enhancement TRV=Trivial |
| |   |   +-+
| |   |   | Date Posted |
| |   |   |  +--+
| |   |   |  | Description  |
| |   |   |  |  |
|57505|New|Enh|2015-01-27|Add integration tests for JspC|
|57661|New|Enh|2015-03-04|Delay sending of 100 continue response until appli|
|58242|New|Enh|2015-08-13|Scanning jars in classpath to get annotations in p|
|58530|New|Enh|2015-10-23|Proposal for new Manager HTML GUI |
|58548|Inf|Enh|2015-10-26|support certifcate transparency   |
|58859|New|Enh|2016-01-14|Allow to limit charsets / encodings supported by T|
|59203|New|Enh|2016-03-21|Try to call Thread.interrupt before calling Thread|
|59344|Ver|Enh|2016-04-18|PEM file support for JSSE |
|59750|New|Enh|2016-06-24|Amend "authenticate" method with context by means |
|60997|New|Enh|2017-04-17|Enhance SemaphoreValve to support denied status an|
|61971|New|Enh|2018-01-06|documentation for using tomcat with systemd   |
|62048|New|Enh|2018-01-25|Missing logout function in Manager and Host-Manage|
|62072|New|Enh|2018-02-01|Add support for request compression   |
|62312|New|Enh|2018-04-18|Add Proxy Authentication support to websocket clie|
|62405|New|Enh|2018-05-23|Add Rereadable Request Filter |
|62488|New|Enh|2018-06-25|Obtain dependencies from Maven Central where possi|
|62611|Inf|Enh|2018-08-09|Compress log files after rotation |
|62695|Inf|Nor|2018-09-07|Provide sha512 checksums for Tomcat releases publi|
|62723|New|Enh|2018-09-14|Clarify "channelSendOptions" value in cluster docu|
|62773|New|Enh|2018-09-28|Change DeltaManager to handle session deserializat|
|62814|New|Enh|2018-10-10|Use readable names for cluster channel/map options|
|62843|New|Enh|2018-10-22|Tomcat Russian localization   |
|62920|New|Enh|2018-11-17|Maven Plugin For Tomcat 9.0.x |
|62964|Inf|Enh|2018-11-29|Add RFC7807 conformant Problem Details for HTTP st|
|63023|New|Enh|2018-12-20|Provide a way to load SecurityProviders into the s|
|63049|New|Enh|2018-12-31|Add support in system properties override from com|
|63237|New|Enh|2019-03-06|Consider processing mbeans-descriptors.xml at comp|
|63362|New|Enh|2019-04-18|GlobalRequestProcessor statistics in MBean does no|
|63389|New|Enh|2019-04-27|Enable Servlet Warmup for Containerization|
|63493|New|Enh|2019-06-10|enhancement - add JMX counters to monitor authenti|
|63505|New|Enh|2019-06-14|enhancement - support of stored procedures for Dat|
|63545|New|Enh|2019-07-06|enhancement - add a new pattern attribute for logg|
|63943|Opn|Enh|2019-11-20|Add possibility to overwrite remote port with info|
|63983|Ver|Cri|2019-12-03|Jasper builds-up open files until garbage collecti|
|64061|Inf|Nor|2020-01-08|sendMessageBlock throws NPE and it results in Ille|
|64080|New|Enh|2020-01-16|Graceful shutdown does not occur for connected cli|
|64110|New|Enh|2020-02-01|Record TLS protocol in access log for connections |
+-+---+---+--+--+
| Total   37 bugs   |
+---+

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Bug report for Tomcat Modules [2020/02/02]

2020-02-01 Thread bugzilla
+---+
| Bugzilla Bug ID   |
| +-+
| | Status: UNC=Unconfirmed NEW=New ASS=Assigned|
| | OPN=ReopenedVER=Verified(Skipped Closed/Resolved)   |
| |   +-+
| |   | Severity: BLK=Blocker CRI=Critical  REG=Regression  MAJ=Major   |
| |   |   MIN=Minor   NOR=NormalENH=Enhancement TRV=Trivial |
| |   |   +-+
| |   |   | Date Posted |
| |   |   |  +--+
| |   |   |  | Description  |
| |   |   |  |  |
|50571|Inf|Nor|2011-01-11|Tomcat 7 JDBC connection pool exception enhancemen|
|51595|Inf|Nor|2011-08-01|org.apache.tomcat.jdbc.pool.jmx.ConnectionPool sho|
|51879|Inf|Enh|2011-09-22|Improve access to Native Connection Methods   |
|52024|Inf|Enh|2011-10-13|Custom interceptor to support automatic failover o|
|53199|Inf|Enh|2012-05-07|Refactor ConnectionPool to use ScheduledExecutorSe|
|54437|New|Enh|2013-01-16|Update PoolProperties javadoc for ConnectState int|
|54929|Inf|Nor|2013-05-05|jdbc-pool cannot be used with Java 1.5, "java.lang|
|55078|New|Nor|2013-06-07|Configuring a DataSource Resource with dataSourceJ|
|55662|New|Enh|2013-10-17|Add a way to set an instance of java.sql.Driver di|
|56046|New|Enh|2014-01-21|org.apache.tomcat.jdbc.pool.XADataSource InitSQL p|
|56088|New|Maj|2014-01-29|AbstractQueryReport$StatementProxy throws exceptio|
|56310|Inf|Maj|2014-03-25|PooledConnection and XAConnection not handled corr|
|56586|New|Nor|2014-06-02|initSQL should be committed if defaultAutoCommit =|
|56775|New|Nor|2014-07-28|PoolCleanerTime schedule issue|
|56779|New|Nor|2014-07-28|Allow multiple connection initialization statement|
|56790|New|Nor|2014-07-29|Resizing pool.maxActive to a higher value at runti|
|56798|New|Nor|2014-07-31|Idle eviction strategy could perform better (and i|
|56804|New|Nor|2014-08-02|Use a default validationQueryTimeout other than "f|
|56805|New|Nor|2014-08-02|datasource.getConnection() may be unnecessarily bl|
|56837|New|Nor|2014-08-11|if validationQuery have error with timeBetweenEvic|
|56970|New|Nor|2014-09-11|MaxActive vs. MaxTotal for commons-dbcp and tomcat|
|57460|New|Nor|2015-01-19|[DB2]Connection broken after few hours but not rem|
|57729|New|Enh|2015-03-20|Add QueryExecutionReportInterceptor to log query e|
|58489|Opn|Maj|2015-10-08|QueryStatsComparator throws IllegalArgumentExcepti|
|59077|New|Nor|2016-02-26|DataSourceFactory creates a neutered data source  |
|59569|New|Nor|2016-05-18|isWrapperFor/unwrap implementations incorrect |
|59879|New|Nor|2016-07-18|StatementCache interceptor returns ResultSet objec|
|60195|New|Nor|2016-10-02|No javadoc in Maven Central   |
|60522|New|Nor|2016-12-27|An option for setting if the transaction should be|
|60524|Inf|Nor|2016-12-28|NPE in SlowQueryReport in tomcat-jdbc-7.0.68  |
|60645|New|Nor|2017-01-25|StatementFinalizer is not thread-safe |
|61032|New|Nor|2017-04-24|min pool size is not being respected  |
|61103|New|Nor|2017-05-18|StatementCache potentially caching non-functional |
|61302|New|Enh|2017-07-15|Refactoring of DataSourceProxy|
|61303|New|Enh|2017-07-15|Refactoring of ConnectionPool |
|62432|New|Nor|2018-06-06|Memory Leak in Statement Finalizer?   |
|62598|New|Enh|2018-08-04|support pool with multiple JDBC data sources  |
|62910|Inf|Nor|2018-11-15|tomcat-jdbc global pool transaction problem   |
|63612|Inf|Cri|2019-07-26|PooledConnection#connectUsingDriver, Thread.curren|
|63705|New|Nor|2019-08-29|The tomcat pool doesn't register all connection th|
|64083|New|Nor|2020-01-17|JDBC pool keeps closed connection as available|
|64107|New|Maj|2020-01-30|PreparedStatements correctly closed are not return|
+-+---+---+--+--+
| Total   42 bugs   |
+---+

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Bug report for Tomcat Native [2020/02/02]

2020-02-01 Thread bugzilla
+---+
| Bugzilla Bug ID   |
| +-+
| | Status: UNC=Unconfirmed NEW=New ASS=Assigned|
| | OPN=ReopenedVER=Verified(Skipped Closed/Resolved)   |
| |   +-+
| |   | Severity: BLK=Blocker CRI=Critical  REG=Regression  MAJ=Major   |
| |   |   MIN=Minor   NOR=NormalENH=Enhancement TRV=Trivial |
| |   |   +-+
| |   |   | Date Posted |
| |   |   |  +--+
| |   |   |  | Description  |
| |   |   |  |  |
|53940|New|Enh|2012-09-27|Added support for new CRL loading after expiration|
|62626|New|Nor|2018-08-15|Tomcat 9.0.10 APR/Native crashes  |
|62911|New|Enh|2018-11-15|Add support for proxying ocsp  requests via ProxyH|
|63199|Inf|Nor|2019-02-22|sslsocket handshake JVM crash |
|63405|New|Nor|2019-05-06|Tomcat 7.0.91.0 EXCEPTION_ACCESS_VIOLATION - Probl|
|63671|New|Nor|2019-08-19|libtcnative does not compile with OpenSSL < 1.1.0 |
|63701|Inf|Maj|2019-08-27|SSL initialize hangs with OpenSSL 1.1.1   |
+-+---+---+--+--+
| Total7 bugs   |
+---+

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Bug report for Taglibs [2020/02/02]

2020-02-01 Thread bugzilla
+---+
| Bugzilla Bug ID   |
| +-+
| | Status: UNC=Unconfirmed NEW=New ASS=Assigned|
| | OPN=ReopenedVER=Verified(Skipped Closed/Resolved)   |
| |   +-+
| |   | Severity: BLK=Blocker CRI=Critical  REG=Regression  MAJ=Major   |
| |   |   MIN=Minor   NOR=NormalENH=Enhancement TRV=Trivial |
| |   |   +-+
| |   |   | Date Posted |
| |   |   |  +--+
| |   |   |  | Description  |
| |   |   |  |  |
|38193|Ass|Enh|2006-01-09|[RDC] BuiltIn Grammar support for Field   |
|38600|Ass|Enh|2006-02-10|[RDC] Enable RDCs to be used in X+V markup (X+RDC)|
|42413|New|Enh|2007-05-14|[PATCH] Log Taglib enhancements   |
|46052|New|Nor|2008-10-21|SetLocaleSupport is slow to initialize when many l|
|48333|New|Enh|2009-12-02|TLD generator |
|57548|New|Min|2015-02-08|Auto-generate the value for org.apache.taglibs.sta|
|57684|New|Min|2015-03-10|Version info should be taken from project version |
|59359|New|Enh|2016-04-20|(Task) Extend validity period for signing KEY - be|
|59668|New|Nor|2016-06-06|x:forEach retains the incorrect scope when used in|
|61875|New|Nor|2017-12-08|Investigate whether Xalan can be removed  |
+-+---+---+--+--+
| Total   10 bugs   |
+---+

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Bug report for Tomcat 8 [2020/02/02]

2020-02-01 Thread bugzilla
+---+
| Bugzilla Bug ID   |
| +-+
| | Status: UNC=Unconfirmed NEW=New ASS=Assigned|
| | OPN=ReopenedVER=Verified(Skipped Closed/Resolved)   |
| |   +-+
| |   | Severity: BLK=Blocker CRI=Critical  REG=Regression  MAJ=Major   |
| |   |   MIN=Minor   NOR=NormalENH=Enhancement TRV=Trivial |
| |   |   +-+
| |   |   | Date Posted |
| |   |   |  +--+
| |   |   |  | Description  |
| |   |   |  |  |
|55243|New|Enh|2013-07-11|Add special search string for nested roles|
|55383|New|Enh|2013-08-07|Improve markup and design of Tomcat's HTML pages  |
|9|New|Enh|2013-09-14|UserDatabaseRealm enhacement: may use local JNDI  |
|55675|New|Enh|2013-10-18|Checking and handling invalid configuration option|
|55788|New|Enh|2013-11-16|TagPlugins should key on tag QName rather than imp|
|56166|New|Enh|2014-02-20|Suggestions for exception handling (avoid potentia|
|56398|New|Enh|2014-04-11|Support Arquillian-based unit testing |
|56399|New|Enh|2014-04-11|Re-factor request/response recycling so Coyote and|
|56402|New|Enh|2014-04-11|Add support for HTTP Upgrade to AJP components|
|56448|New|Enh|2014-04-23|Implement a robust solution for client initiated S|
|56522|Opn|Enh|2014-05-14|jasper-el 8 does not comply to EL Spec 3.0 regardi|
|56546|New|Enh|2014-05-19|Improve thread trace logging in WebappClassLoader.|
|56713|New|Enh|2014-07-12|Limit time that incoming request waits while webap|
|56890|Inf|Maj|2014-08-26|getRealPath returns null  |
|56966|New|Enh|2014-09-11|AccessLogValve's elapsed time has 15ms precision o|
|57130|New|Enh|2014-10-22|Allow digest.sh to accept password from a file or |
|57421|New|Enh|2015-01-07|Farming default directories   |
|57486|New|Enh|2015-01-23|Improve reuse of ProtectedFunctionMapper instances|
|57701|New|Enh|2015-03-13|Implement "[Redeploy]" button for a web applicatio|
|57830|New|Enh|2015-04-18|Add support for ProxyProtocol |
|58052|Opn|Enh|2015-06-19|RewriteValve: Implement additional RewriteRule dir|
|58072|New|Enh|2015-06-23|ECDH curve selection  |
|58837|New|Enh|2016-01-12|support "X-Content-Security-Policy" a.k.a as "CSP"|
|58935|Opn|Enh|2016-01-29|Re-deploy from war without deleting context   |
|59232|New|Enh|2016-03-24|Make the context name of an app available via JNDI|
|59423|New|Enh|2016-05-03|amend "No LoginModules configured for ..." with hi|
|59758|New|Enh|2016-06-27|Add http proxy username-password credentials suppo|
|60281|Ver|Nor|2016-10-20|Pathname of uploaded WAR file should not be contai|
|60721|Ver|Nor|2017-02-10|Unable to find key spec if more applications use b|
|60781|New|Nor|2017-02-27|Access Log Valve does not escape the same as mod_l|
|60849|New|Enh|2017-03-13|Tomcat NIO Connector not able to handle SSL renego|
|61668|Ver|Min|2017-10-26|Possible NullPointerException in org.apache.coyote|
|61877|New|Enh|2017-12-08|use web.xml from CATALINA_HOME by default |
|61917|New|Enh|2017-12-19|AddDefaultCharsetFilter only supports text/* respo|
|62150|New|Enh|2018-03-01|Behavior of relative paths with RequestDispatcher |
|62214|New|Enh|2018-03-22|The "userSubtree=true" and "roleSubtree=true" in J|
|62245|New|Enh|2018-04-02|[Documentation] Mention contextXsltFile in Default|
|62912|New|Enh|2018-11-15|Tomcat adds a space character in the Content-Type |
|63080|New|Enh|2019-01-16|Support rfc7239 Forwarded header  |
|63195|Inf|Enh|2019-02-21|Add easy way to test RemoteIpValve works properly |
|63286|New|Enh|2019-03-25|Inconsistencies between AccessLogValve and mod_log|
|63802|Inf|Cri|2019-10-04|epoll spin detection is missing   |
|63815|Inf|Nor|2019-10-08|Expansion of JAVA_OPTS in catalina.sh containing '|
|64082|Inf|Nor|2020-01-17|Nio2Endpoint for async request doesn't clear Outpu|
+-+---+---+--+--+
| Total   44 bugs   |
+---+

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Bug report for Tomcat Connectors [2020/02/02]

2020-02-01 Thread bugzilla
+---+
| Bugzilla Bug ID   |
| +-+
| | Status: UNC=Unconfirmed NEW=New ASS=Assigned|
| | OPN=ReopenedVER=Verified(Skipped Closed/Resolved)   |
| |   +-+
| |   | Severity: BLK=Blocker CRI=Critical  REG=Regression  MAJ=Major   |
| |   |   MIN=Minor   NOR=NormalENH=Enhancement TRV=Trivial |
| |   |   +-+
| |   |   | Date Posted |
| |   |   |  +--+
| |   |   |  | Description  |
| |   |   |  |  |
|46767|New|Enh|2009-02-25|mod_jk to send DECLINED in case no fail-over tomca|
|47327|New|Enh|2009-06-07|Return tomcat authenticated user back to mod_jk (A|
|47750|New|Maj|2009-08-27|ISAPI: Loss of worker settings when changing via j|
|48830|New|Nor|2010-03-01|IIS shutdown blocked in endpoint service when serv|
|49822|New|Enh|2010-08-25|Add hash lb worker method |
|49903|New|Enh|2010-09-09|Make workers file reloadable  |
|52483|New|Enh|2012-01-18|Print JkOptions's options in log file and jkstatus|
|54621|New|Enh|2013-02-28|[PATCH] custom mod_jk availability checks |
|56489|New|Enh|2014-05-05|Include a directory for configuration files   |
|56576|New|Enh|2014-05-29|Websocket support |
|57402|New|Enh|2014-12-30|Provide correlation ID between mod_jk log and acce|
|57403|New|Enh|2014-12-30|Persist configuration changes made via status work|
|57407|New|Enh|2014-12-31|Make session_cookie, session_path and session_cook|
|57790|New|Enh|2015-04-03|Check worker names for typos  |
|61476|New|Enh|2017-09-01|Allow reset of an individual worker stat value|
|61621|New|Enh|2017-10-15|Content-Type is forced to lowercase when it goes t|
|62093|New|Enh|2018-02-09|Allow use_server_errors to apply to specific statu|
|63808|Opn|Enh|2019-10-05|the fact that JkMount makes other directives ineff|
|64051|New|Nor|2020-01-05|mod_jk set_session_cookie not sending new cookie a|
+-+---+---+--+--+
| Total   19 bugs   |
+---+

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Re: [Bug 64106] Attributes marked as un-used are being used in Tomcat dbcp implementation

2020-02-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

All,

On 2/1/20 12:49 PM, bugzi...@apache.org wrote:
> https://bz.apache.org/bugzilla/show_bug.cgi?id=64106
> 
> --- Comment #7 from Christopher Schultz
>  --- If you are looking for some
> specific information, please post to the users' mailing list with a
> question. Based on what you've said so far, are you just asking
> whether prepared statements are pooled? (Please reply/post to the
> list if this is your question.)

FTR, I think this is the answer to the OP's question:

https://tomcat.apache.org/tomcat-9.0-doc/jdbc-pool.html#org.apache.tomca
t.jdbc.pool.interceptor.StatementCache

- -chris
-BEGIN PGP SIGNATURE-
Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/

iQIzBAEBCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAl41u2IACgkQHPApP6U8
pFjZxQ//Uk1F890Sx6KX+YG8Da/BAwL8e7R6urdXQnDQ8kZE7V8u0cmq8KK9LMrE
DDPKug5aZc4a1OiOt2HpQoVolj9SmEZgTjkPSjQOWLWje0DHaJYyzc4oi73UmG/Y
0qtx2XUzAw9ZzepEXCl5ADXVgS6x7DwuqvC9FoARGcQb9X+w3ZG7u5UaRZTzgu3M
Eg9yNycu5eS/wPIS45SrSuwONMdDcnS7AldQ/wu4QQnXEYgNbE+WA6/t5hpnQRjs
2OUwF8HQrfq8VuTnsiOKqaU29wxQJGwyiwR5lIzbsEs6cDy8IgCHm6myOC7W+JJ9
n6kkN/JjgqXl354YN/Uui9jSqgypZXgDtptDDVPq5IjVjmyX1UNSXyZJog3GFI8e
aDYI14aujEUnqC8ET2Oc5M/zPL42JWeBPwNirlUzKXh0agfIqTcED03gXN4EBxQC
kTTQUdoX5er8Sc0SDyfGKveFs2tu7FktJwgJT3ofGvyPEg8ICIK6C5hNSfEBETcL
Odl+K8hHnZLi/x4k3pQXgMeklzWstS1A5hdw0sYArH/wjiKwzKi/Rk63C0is/uYQ
gl24x1WUqotlOXAE/fS4Gr4gF+mFtlvqh9iwToz0362a6GxmhwLLzRgLYkdjxoEF
iS5Pw14runuZjRGDyR93HX2ShhD9TfjvYBrG40HVFNs7GhikO/A=
=Lj/p
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Re: [PROPOSAL] Tomcat 10: rename language bundles

2020-02-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Michael,

On 2/1/20 8:31 AM, Michael Osipov wrote:
> Am 2020-01-30 um 18:41 schrieb Konstantin Kolinko:
>> ср, 29 янв. 2020 г. в 00:08, Michael Osipov
>> :
>>> 
>>> Folks,
>>> 
>>> I recently worked on some localization issues and noticed that,
>>> in my opinion, these JARs are incorrectly named:
>>> 
 tomcat-i18n-cs.jar tomcat-i18n-de.jar tomcat-i18n-es.jar 
 tomcat-i18n-fr.jar tomcat-i18n-ja.jar tomcat-i18n-ko.jar 
 tomcat-i18n-pt-BR.jar tomcat-i18n-ru.jar 
 tomcat-i18n-zh-CN.jar
>>> 
>>> Most people confuse I18N with L10N -- but they are distinct.
>>> According to Mozilla [1] Tomcat is internationalized and
>>> provides localization with those bundles. As far as I
>>> understand that, they should be
>>> 
>>> either tomcat-l10n-.jar or tomcat-nls-.jar
>>> 
>>> [...]
>>> 
>>> Comments?
>> 
>> 1. Overall, I am not convinced.
>> 
>> I think that for an average foreigner a discussion about what
>> term is better makes little sense. I know people for whom those
>> words are hard to pronounce and are a little obscure.
>> 
>> Does changing one "obscure" word with another makes life easier?
>> How? Does it help to reach some wider audience?
>> 
>> I think that it would be better to keep it simple (KISS) and
>> continue using the existing historic naming pattern.
>> 
>> I am really proud of 20+ years of history of our project. If
>> there are some things there that are not proper [American]
>> English, it just means that there are different people involved
>> with the project, and it is a good sign.
>> 
>> (Being too strict about language is a barrier that may reject
>> people.)
> 
> For those who don't know both, they don't care. For those who know
> care to make it right/consistent. I see no downsides to make it
> right.
> 
> This has nothing to do with American, British, You Name It English.
> It is simply about consistent naming.
> 
>> 2. In multi-module projects built with Apache Maven, one widely
>> used naming convention is to name artifacts produced by the
>> nested modules as -.
>> 
>> E.g., a discussion: 
>> https://stackoverflow.com/questions/9435460/maven-naming-conventions-
for-hierarchical-multiple-module-projects
>>
>>
>>
>> 
I mean that the current artifact names of "tomcat-i18n-" can
>> be interpreted as module "" in a parent project
>> "tomcat-i18n". It means that those artifacts are part of
>> internationalization effort in Tomcat.
> 
> I don't see how this is related?! Nor did I bring up to do any
> migration to Maven or its naming scheme.

Tomcat produces Maven artifacts, even if we don't use a Maven-based
build. I think Konstantin is talking about the artifact names. Mark
also brought this up previously. If we change them, we need to offer
an obvious "upgrade" path. AIUI, these days, Maven doesn't do
latest-dependency resolution but instead requires specific versions to
be referenced. I think that frees us from introducing an incompatible
name-change because every version itself is practically-incompatible
with all previous versions from a dependency-resolution standpoint.
I'd appreciate some clarity from those who understand Maven better than
I.

- -chris
-BEGIN PGP SIGNATURE-
Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/
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=NQzC
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 64106] Attributes marked as un-used are being used in Tomcat dbcp implementation

2020-02-01 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64106

--- Comment #7 from Christopher Schultz  ---
If you are looking for some specific information, please post to the users'
mailing list with a question. Based on what you've said so far, are you just
asking whether prepared statements are pooled? (Please reply/post to the list
if this is your question.)

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Re: Tomcat-9.0.x: How is a task assigned to a developer?

2020-02-01 Thread Paul Muriel Biya-Bi

Thanks so much Christopher!
I will follow your recommendations.

On 2/1/20 11:49 AM, Christopher Schultz wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Paul,

On 1/31/20 9:36 PM, Paul Muriel Biya-Bi wrote:

I am new here and would like to bring my contribution to the
Tomcat-9.0.x project as a developer. I cloned the project from
GitHub, followed the instructions and had Tomcat up and running on
my local machine. Please, could anyone let me know how tasks are
assigned to developers? Do I have to browse ASF Bugzilla to pick a
bug and fix it, or is there someone in charge of assigning bugs?

Thanks for your interest!

If you are going to work on a BZ issue, just make a note in the
comments and get started. Feel free to ask on the dev@ list for any
help you need with anything.

All discussions should remain public, on the mailing list.

- -chris
-BEGIN PGP SIGNATURE-
Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/
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=ATvo
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Re: Tomcat-9.0.x: How is a task assigned to a developer?

2020-02-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Paul,

On 1/31/20 9:36 PM, Paul Muriel Biya-Bi wrote:
> I am new here and would like to bring my contribution to the 
> Tomcat-9.0.x project as a developer. I cloned the project from
> GitHub, followed the instructions and had Tomcat up and running on
> my local machine. Please, could anyone let me know how tasks are
> assigned to developers? Do I have to browse ASF Bugzilla to pick a
> bug and fix it, or is there someone in charge of assigning bugs?

Thanks for your interest!

If you are going to work on a BZ issue, just make a note in the
comments and get started. Feel free to ask on the dev@ list for any
help you need with anything.

All discussions should remain public, on the mailing list.

- -chris
-BEGIN PGP SIGNATURE-
Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/
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=ATvo
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 64110] New: Record TLS protocol in access log for connections with a failed TLS handshake

2020-02-01 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64110

Bug ID: 64110
   Summary: Record TLS protocol in access log for connections with
a failed TLS handshake
   Product: Tomcat 9
   Version: unspecified
  Hardware: PC
OS: Mac OS X 10.1
Status: NEW
  Severity: enhancement
  Priority: P2
 Component: Connectors
  Assignee: dev@tomcat.apache.org
  Reporter: ch...@christopherschultz.net
  Target Milestone: -

For reference:
https://lists.apache.org/thread.html/r7d872a09a56b539545a226813761ee3c0dcdf75787449dd8551f2f07%40%3Cusers.tomcat.apache.org%3E

When a TLS connection is attempted and failed, Tomcat will record an access log
where the protocol is "-" and the cipher suite is "-" (if specified in the log
string, of course).

In the event of a TLS handshake failure (e.g. no shared cipher suites, protocol
not supported/configured/allowed, insufficient client-cert trust, etc.), the
TLS protocol itself -- as advertised by the client -- should be a known value,
and should be available to the access log instead of "-".

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Re: [DISCUSS] Mapping internal roles to external ones (web.xml and API)

2020-02-01 Thread Michael Osipov

Am 2020-01-28 um 22:56 schrieb Mark Thomas:

On 28/01/2020 21:50, Christopher Schultz wrote:

Michael,

On 1/28/20 3:51 PM, Michael Osipov wrote:

Am 2020-01-25 um 12:13 schrieb Mark Thomas:

On 23/01/2020 10:29, Michael Osipov wrote:




Design questions: * Shall this remain a listener or do we want
to introduce a new interface for that? If yes, how should it
look like?


Given the use cases (could apply at various levels) a
LifecycleListener looks like a reasonable design choice to me.

I don't see the need for an additional interface (although I
could be persuaded if someone else makes an argument for one)


* Where can this element be placed? Only in context.xml? Also
in server.xml? If yes, at which level are contexts available to
be modified? Can this be placed in server.xml at all?


LifecycleListener can be placed on most elements so it gives
plenty of flexibility.


If it remains as a listener, I would be willing to donate my
listener to the Tomcat codebase and add support for file:// or
other stuff required.


Fantastic. Thank you. Take a look at the ConfigFileLoader. All
Tomcat config should be loaded through that.


 From my understanding, the mapping source can be arbitrary:
inline, database, file, etc.


Agreed.



Great, I will pick this up next month and have a look how the
ConfigFileLoader works. I hope I can cover at least all current
cases.



I wonder now which of the components implementing Container should
be subject to this listener?



Engine, Host, Context? Context is trivial, but the rest? They
start before the contexts, I cannot simply say Host#findChildren()
at CONFIGURE_START_EVENT. It does not make sense logically.



At the moment the Context seems to be the only viable place unless
the mappings are held in memory unless all contexts load and query
them. This would require to change the Container interface.



Comments?


I think this only makes sense at the  level because the
security-roles are all defined at the context-level as well. They may
be shared across a bunch of applications, but that's just a coincidence.

Mapping this across multiple s won't be a huge burden, given
the other options.

Another option might be to allow a LifecycleListener to attach some
information to a  (not sure where that might be) and then you
can have /another/ LifecycleListener attached to the . The
global one defines the mapping but doesn't actually take any action.
The -attached LifecycleListener then looks-up the tree to
parent components looking for the mappings, and applies them as the
context is being deployed.

Seems more work than necessary, though. Just have admins bless each
 and be done with it.


You can add something to a host and then have it do something every time
a child (i.e. Context) is added. Looking at the code for MapperListener
might give you some ideas of the sort of thing you can do.


This is basically what I have assumed to be done. I will go with the 
simplest approach first: context-only.


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Re: [PROPOSAL] Tomcat 10: rename language bundles

2020-02-01 Thread Michael Osipov

Am 2020-01-30 um 18:41 schrieb Konstantin Kolinko:

ср, 29 янв. 2020 г. в 00:08, Michael Osipov :


Folks,

I recently worked on some localization issues and noticed that, in my
opinion, these JARs are incorrectly named:


tomcat-i18n-cs.jar
tomcat-i18n-de.jar
tomcat-i18n-es.jar
tomcat-i18n-fr.jar
tomcat-i18n-ja.jar
tomcat-i18n-ko.jar
tomcat-i18n-pt-BR.jar
tomcat-i18n-ru.jar
tomcat-i18n-zh-CN.jar


Most people confuse I18N with L10N -- but they are distinct. According
to Mozilla [1] Tomcat is internationalized and provides localization
with those bundles. As far as I understand that, they should be

either tomcat-l10n-.jar or tomcat-nls-.jar

[...]

Comments?


1. Overall, I am not convinced.

I think that for an average foreigner a discussion about what term is
better makes little sense. I know people for whom those words are hard
to pronounce and are a little obscure.

Does changing one "obscure" word with another makes life easier? How?
Does it help to reach some wider audience?

I think that it would be better to keep it simple (KISS) and continue
using the existing historic naming pattern.

I am really proud of 20+ years of history of our project. If there are
some things there that are not proper [American] English, it just
means that there are different people involved with the project, and
it is a good sign.

(Being too strict about language is a barrier that may reject people.)


For those who don't know both, they don't care. For those who know care 
to make it right/consistent. I see no downsides to make it right.


This has nothing to do with American, British, You Name It English. It 
is simply about consistent naming.



2. In multi-module projects built with Apache Maven, one widely used
naming convention is to name artifacts produced by the nested modules
as -.

E.g., a discussion:
https://stackoverflow.com/questions/9435460/maven-naming-conventions-for-hierarchical-multiple-module-projects

I mean that the current artifact names of "tomcat-i18n-" can
be interpreted as module "" in a parent project "tomcat-i18n".
It means that those artifacts are part of internationalization effort
in Tomcat.


I don't see how this is related?! Nor did I bring up to do any migration 
to Maven or its naming scheme.



3. Overall, my vote for this proposal is -0.5.

It is not a veto, but I do not like it.


So you generally do not object, but don't see a need for?

M


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 64106] Attributes marked as un-used are being used in Tomcat dbcp implementation

2020-02-01 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64106

--- Comment #6 from tarun.ka...@snapon.com ---
Thank You Chris for pointing me to the commons-dbcp.

I was curious about the documentation of tomcat-dbcp. Since there are quite a
bit of changes in tomcat-dbcp vs commons-dbcp. I was hoping to find
documentation which is relevant to tomcat-dbcp and not the one it was copied
from.

Anyways, It makes me believe none exists for tomcat-dbcp specifically.

Thanks Again.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org