BugRat Report #418 has been filed.

2000-11-21 Thread BugRat Mail System

Bug report #418 has just been filed.

You can view the report at the following URL:

   http://znutar.cortexity.com/BugRatViewer/ShowReport/418

REPORT #418 Details.

Project: Jasper
Category: Bug Report
SubCategory: New Bug Report
Class: swbug
State: received
Priority: high
Severity: critical
Confidence: public
Environment: 
   Release: version released with TomCat3.2beta7 and 8
   JVM Release: 1.2.2
   Operating System: nt
   OS Release: 4
   Platform: Intel P3

Synopsis: 
Problem with include directive

Description:
%@ include file="../../library.jsp"   %

gives the following error message

'Bad file argument to include'

when compiled from the command line but NOT when served as a JSP page under 
TomCat3.2beta7.

The command line used to compile the JSP page is given in the 'How to Reproduce'.

Title: 
BugRat Report #
418





BugRat Report #
418




Project:
Jasper


Release:
version released with TomCat3.2beta7 and 8




Category:
Bug Report


SubCategory:
New Bug Report




Class:
swbug


State:
received




Priority:
high


Severity:
critical




Confidence:
public





Submitter:
Christopher Kirk ([EMAIL PROTECTED])

Date Submitted:
Nov 21 2000, 03:41:38 CST

Responsible:
Z_Tomcat Alias ([EMAIL PROTECTED])


Synopsis:

Problem with include directive


 Environment: (jvm, os, osrel, platform)

1.2.2, nt, 4, Intel P3



Additional Environment Description:





Report Description:

<%@ include file="../../library.jsp"   %>

gives the following error message

'Bad file argument to include'

when compiled from the command line but NOT when served as a JSP page under TomCat3.2beta7.

The command line used to compile the JSP page is given in the 'How to Reproduce'.



How To Reproduce:

null



Workaround:

null



View this report online...






RE: [ANNOUNCEMENT] Tomcat 3.2 Beta 8

2000-11-21 Thread GOMEZ Henri

Hi,

While building my RPM I notice that in server.xml in the SSL session
the secure parameter is still missing :

Normal or te be commited ?

-

--- jakarta-tomcat/src/etc/server.xml.orig  Thu Oct 12 10:04:48 2000
+++ jakarta-tomcat/src/etc/server.xml   Thu Oct 12 12:27:48 2000
@@ -235,6 +235,8 @@
 value="8443"/
 Parameter name="socketFactory" 
 value="org.apache.tomcat.net.SSLSocketFactory" /
+   Parameter name="secure"
+   value="true" /
 /Connector
 --
 
-

"La maîtrise des autres n'est que la force. La maîtrise de vous-même est le
véritable pouvoir" 
-- Lao Tzu 



Re: [ANNOUNCEMENT] Tomcat 3.2 Beta 8

2000-11-21 Thread Dave Oxley

What are the bugs with ajp13. I could do with this being stable. I will take 
a look at them but no guarantees 'cos I don't know much about writing Apache 
modules.

Dave.
[EMAIL PROTECTED]


From: "Craig R. McClanahan" [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
CC: [EMAIL PROTECTED], [EMAIL PROTECTED],
[EMAIL PROTECTED]
Subject: [ANNOUNCEMENT] Tomcat 3.2 Beta 8
Date: Mon, 20 Nov 2000 19:51:39 -0800

Thanks to everyone for the bug reports (and patches)!  You can now download
"beta 8" of the Tomcat 3.2 servlet container from:

 http://jakarta.apache.org/builds/tomcat/release/v3.2-beta-8

Relative to "beta 7", a number of critical bugs have been fixed, and 
several
configuration options available under Tomcat 3.1 have been restored 
(although
they are done in "conf/server.xml" rather than "conf/web.xml").

Please download this release and check it out.  If we've squashed all the
critical bugs, we can proceed to a final release!  Non-critical bugs will 
be
noted in the release notes and can be fixed in a later maintenance cycle.

NOTE:  No changes were made in any of the native code modules since version
"beta 7".  There are a number of outstanding bug reports against MOD_JK and
AJP13 that will remain open in the final release unless someone volunteers 
to
find and fix them.

Craig McClanahan



_
Get more from the Web.  FREE MSN Explorer download : http://explorer.msn.com




BugRat Report #421 has been filed.

2000-11-21 Thread BugRat Mail System

Bug report #421 has just been filed.

You can view the report at the following URL:

   http://znutar.cortexity.com/BugRatViewer/ShowReport/421

REPORT #421 Details.

Project: Tomcat
Category: Bug Report
SubCategory: New Bug Report
Class: swbug
State: received
Priority: high
Severity: critical
Confidence: public
Environment: 
   Release: 3.2 beta 8
   JVM Release: 1.3
   Operating System: Windows NT
   OS Release: 4.0 SP6
   Platform: Sun

Synopsis: 
HttpServletResponse.flushBuffer() doesn't work

Description:
Method flushBuffer() from the class HttpServletResponse doesn't do what it should do : 
flush the buffered Content to the client browser.

Title: 
BugRat Report #
421





BugRat Report #
421




Project:
Tomcat


Release:
3.2 beta 8




Category:
Bug Report


SubCategory:
New Bug Report




Class:
swbug


State:
received




Priority:
high


Severity:
critical




Confidence:
public





Submitter:
Manfred Schäfer ([EMAIL PROTECTED])

Date Submitted:
Nov 21 2000, 09:32:54 CST

Responsible:
Z_Tomcat Alias ([EMAIL PROTECTED])


Synopsis:

HttpServletResponse.flushBuffer() doesn't work


 Environment: (jvm, os, osrel, platform)

1.3, Windows NT, 4.0 SP6, Sun



Additional Environment Description:





Report Description:

Method flushBuffer() from the class HttpServletResponse doesn't do what it should do : flush the buffered Content to the client browser.



How To Reproduce:

null



View this report online...






BugRat Report #293 was closed (apparently by: Danno Ferrin)

2000-11-21 Thread BugRat Mail System

Report #293 was closed by Person #0

   Synopsis: JSPC interprets the second %@ include .. % of the same file as recursive

 (logged in as: Danno Ferrin)



BugRat Report #246 was closed (apparently by: Danno Ferrin)

2000-11-21 Thread BugRat Mail System

Report #246 was closed by Person #0

   Synopsis: Call to javax.servlet.jsp.tagext.TagAttributeInfo constructor from 
org.apache.jasper.compiler.TagLibraryInfoImpl.createAttribute method is incorrect 
(does not match signature from the 2.2 servlet api).  Jasper source includes a correct 
all to this constru

 (logged in as: Danno Ferrin)



BugRat Report #240 was closed (apparently by: Danno Ferrin)

2000-11-21 Thread BugRat Mail System

Report #240 was closed by Person #0

   Synopsis: RTExp Tags are evaluated out of order

 (logged in as: Danno Ferrin)



Re: Problem with context initialization ?

2000-11-21 Thread Arieh Markel


 Mailing-List: contact [EMAIL PROTECTED]; run by ezmlm
 list-help: mailto:[EMAIL PROTECTED]
 list-unsubscribe: mailto:[EMAIL PROTECTED]
 list-post: mailto:[EMAIL PROTECTED]
 Delivered-To: mailing list [EMAIL PROTECTED]
 From: [EMAIL PROTECTED]
 X-Sender: costin@costin
 To: [EMAIL PROTECTED], Arieh Markel [EMAIL PROTECTED]
 Subject: Re: Problem with context initialization ?
 X-Spam-Rating: locus.apache.org 1.6.2 0/1000/N
 
 Hi Arieh,
 
 I know about this problem, and 3.3 is going to fix this ( and other
 similar problems ) by defining a startup order and changing the code 
 to implement it.
 
 I don't know any simple fix for 3.2, there is a lot of code that has to be
 changed.

Luckily, as you can see from the stack trace, the exception is caused
inside of a base class that we have defined (CMCServlet), when trying to access
a static method in another class that we have defined (ServerUtils).

I believe I should be able to catch the NoClassDefFoundError at the
appropriate time.

I am trying to find out what are the actions that I may take to correct
the problem when catching the error.

In essence, what in the API is there to perhaps force a reload/re-init
of the Context that is giving me the problem.

Any ideas ?

Arieh

 
 Costin 
 
 On Mon, 20 Nov 2000, Arieh Markel wrote:
 
  We are running into the following problem:
  
  . we start Tomcat in an embedded manner:
  
  use a server.xml that only includes interceptors and connectors
  
  create contexts programmatically
  
  initialize the context manager
  
  
  I am observing the following behavior:
  
the tomcat is making the ports available before the context finished
being initialized.

On trying to access the application at that time, we get the following  
  
  java.lang.NoClassDefFoundError: com/sun/esm/web/server/ServerUtils
  at com.sun.esm.web.servlet.CMCServlet.service(CMCServlet.java:354)
  at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
  at 
  org.apache.tomcat.core.ServletWrapper.doService(ServletWrapper.java:387)
  at org.apache.tomcat.core.Handler.service(Handler.java:263)
  at 
  org.apache.tomcat.core.ServletWrapper.service(ServletWrapper.java:371)
  at 
  
org.apache.tomcat.core.ContextManager.internalService(ContextManager.java:787)
  at 
  org.apache.tomcat.core.ContextManager.service(ContextManager.java:733)
  at 
  
org.apache.tomcat.service.http.HttpConnectionHandler.processConnection(HttpConne
  ctionHandler.java:210)
  at org.apache.tomcat.service.TcpWorkerThread.runIt(Compiled Code)
  at org.apache.tomcat.util.ThreadPool$ControlRunnable.run(Compiled 
Code)
  at java.lang.Thread.run(Compiled Code)
  
   
From that moment on, we are never able to access the webserver, getting
the same message again and again.

  -
  
  It appears that there is a race condition on the ContextManager.start()
  method.
  
  I instrumented my context manager startup to print when the return
  from ContextManager.start occurs.
  
  I try to access my initial page (which is actually a servlet)
  repeatedly from a browser trying to catch the point in time where
  the connector is made available by the contexts are not.
  
  When I manage to access the port on the connector
  the result is the above exception.
  
  Does anybody else see something similar ?
  
  -
  
  Arieh   
  --
   Arieh Markel   Sun Microsystems Inc.
   Network Storage500 Eldorado Blvd. MS UBRM11-194
   e-mail: [EMAIL PROTECTED]   Broomfield, CO 80021
   Let's go Panthers  Phone: (303) 272-8547 x78547
   (e-mail me with subject SEND PUBLIC KEY to get public key)
  

--
 Arieh Markel   Sun Microsystems Inc.
 Network Storage500 Eldorado Blvd. MS UBRM11-194
 e-mail: [EMAIL PROTECTED]   Broomfield, CO 80021
 Let's go Panthers  Phone: (303) 272-8547 x78547
 (e-mail me with subject SEND PUBLIC KEY to get public key)




Re: [ANNOUNCEMENT] Tomcat 3.2 Beta 8

2000-11-21 Thread Craig R. McClanahan

GOMEZ Henri wrote:

 Hi,

 While building my RPM I notice that in server.xml in the SSL session
 the secure parameter is still missing :

 Normal or te be commited ?


I did not know about this one.  Go ahead and commit it, so we get it right in
the final release.

Craig



 -

 --- jakarta-tomcat/src/etc/server.xml.orig  Thu Oct 12 10:04:48 2000
 +++ jakarta-tomcat/src/etc/server.xml   Thu Oct 12 12:27:48 2000
 @@ -235,6 +235,8 @@
  value="8443"/
  Parameter name="socketFactory"
  value="org.apache.tomcat.net.SSLSocketFactory" /
 +   Parameter name="secure"
 +   value="true" /
  /Connector
  --

 -

 "La maîtrise des autres n'est que la force. La maîtrise de vous-même est le
 véritable pouvoir"
 -- Lao Tzu




BugRat Report #423 has been filed.

2000-11-21 Thread BugRat Mail System

Bug report #423 has just been filed.

You can view the report at the following URL:

   http://znutar.cortexity.com/BugRatViewer/ShowReport/423

REPORT #423 Details.

Project: Tomcat
Category: Bug Report
SubCategory: New Bug Report
Class: swbug
State: received
Priority: high
Severity: critical
Confidence: public
Environment: 
   Release: Tomcat 4.0 milestone 4 
   JVM Release: Sun 1.2.2
   Operating System: windows
   OS Release: 98/NT
   Platform: INTEL

Synopsis: 
JIT Relocaction Error While Tomcat Starts

Description:
When I start TOMCAT ..
I get a JIT error (very often..)..
 
Apache Tomcat/4.0-dev
A nonfatal internal JIT (3.00.078(x)) error 'Relocation error: NULL relocation t
arget' has occurred in :
  'org/apache/crimson/parser/Parser2.maybeComment (Z)Z': Interpreting method.
 
 

Title: 
BugRat Report #
423





BugRat Report #
423




Project:
Tomcat


Release:
Tomcat 4.0 milestone 4 




Category:
Bug Report


SubCategory:
New Bug Report




Class:
swbug


State:
received




Priority:
high


Severity:
critical




Confidence:
public





Submitter:
Kris Vidhya Sagar ([EMAIL PROTECTED])

Date Submitted:
Nov 21 2000, 02:29:43 CST

Responsible:
Z_Tomcat Alias ([EMAIL PROTECTED])


Synopsis:

JIT Relocaction Error While Tomcat Starts


 Environment: (jvm, os, osrel, platform)

Sun 1.2.2, windows, 98/NT, INTEL



Additional Environment Description:





Report Description:

When I start TOMCAT ..
I get a JIT error (very often..)..
 
Apache Tomcat/4.0-dev
A nonfatal internal JIT (3.00.078(x)) error 'Relocation error: NULL relocation t
arget' has occurred in :
  'org/apache/crimson/parser/Parser2.maybeComment (Z)Z': Interpreting method.
 
 



View this report online...






cvs commit: jakarta-tomcat/src/share/org/apache/tomcat/util/threads TimeStamp.java

2000-11-21 Thread costin

costin  00/11/21 16:10:00

  Modified:src/share/org/apache/tomcat/modules/session SessionId.java
SimpleSessionStore.java
   src/share/org/apache/tomcat/session ServerSession.java
ServerSessionManager.java
   src/share/org/apache/tomcat/util/threads TimeStamp.java
  Log:
  Merged fixes from 3.2 - thanks pfrieden, hans, shai, craig.
  
  - fix for "load balancing"
  - check the session id, multiple cookies ( this will be enhanced as the
  session code is cleaned up/refactored )
  - "no cookies" option
  
  Submitted by: [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED]
  
  Revision  ChangesPath
  1.2   +77 -46
jakarta-tomcat/src/share/org/apache/tomcat/modules/session/SessionId.java
  
  Index: SessionId.java
  ===
  RCS file: 
/home/cvs/jakarta-tomcat/src/share/org/apache/tomcat/modules/session/SessionId.java,v
  retrieving revision 1.1
  retrieving revision 1.2
  diff -u -r1.1 -r1.2
  --- SessionId.java2000/11/21 00:31:12 1.1
  +++ SessionId.java2000/11/22 00:09:59 1.2
  @@ -62,6 +62,8 @@
   import org.apache.tomcat.core.*;
   import org.apache.tomcat.util.*;
   import org.apache.tomcat.helper.*;
  +import org.apache.tomcat.session.ServerSessionManager;
  +import org.apache.tomcat.session.ServerSession;
   import java.io.*;
   import java.net.*;
   import java.util.*;
  @@ -80,15 +82,20 @@
*
* This implementation only handles Cookies and URL rewriting sessions,
* please extend or add new interceptors for other methods.
  - *
  + * 
  + * You can set this interceptor to not use cookies, but only rewriting.
*
  + * @author [EMAIL PROTECTED]
  + * @author Shai Fultheim [[EMAIL PROTECTED]]
*/
   public class SessionId extends  BaseInterceptor
   {
  -
  +private int manager_note;
  +
   // GS, separates the session id from the jvm route
   static final char SESSIONID_ROUTE_SEP = '.';
   ContextManager cm;
  +boolean noCookies=false;
   
   public SessionId() {
   }
  @@ -97,6 +104,17 @@
this.cm=cm;
   }
   
  +public void setNoCookies(boolean noCookies) {
  +this.noCookies = noCookies;
  +}
  +
  +public void engineInit( ContextManager cm ) throws TomcatException {
  + // set-up a per/container note for StandardManager
  + // the standard manager is used to verify the session ID.
  + manager_note = cm.getNoteId( ContextManager.CONTAINER_NOTE,
  +  "tomcat.standardManager");
  +}
  +
   /** Extract the session id from the request.
* SessionInterceptor will have to be called _before_ mapper,
* to avoid coding session stuff inside the mapper.
  @@ -119,8 +137,8 @@

if ((foundAt=uri.indexOf(sig))!=-1){
sessionId=uri.substring(foundAt+sig.length());
  - // I hope the optimizer does it's job:-)
  - sessionId = fixSessionId( request, sessionId );
  + // FIX [EMAIL PROTECTED]: reloading 
  + //  sessionId = fixSessionId( request, sessionId );

// rewrite URL, do I need to do anything more?
request.requestURI().setString(uri.substring(0, foundAt));
  @@ -138,9 +156,16 @@
*/
   public int requestMap(Request request ) {
String sessionId = null;
  + Context ctx=request.getContext();
  + if( ctx==null ) {
  + log( "Configuration error in StandardSessionInterceptor " +
  +  " - no context " + request );
  + return 0;
  + }
  +
   
int count=request.getCookieCount();
  - 
  +
// Give priority to cookies. I don't know if that's part
// of the spec - XXX
for( int i=0; icount; i++ ) {
  @@ -148,54 +173,55 @@

if (cookie.getName().equals("JSESSIONID")) {
sessionId = cookie.getValue().toString();
  - sessionId = fixSessionId( request, sessionId );
  -
  - // XXX what if we have multiple session cookies ?
  - // right now only the first is used
  - request.setRequestedSessionId( sessionId );
  - request.setSessionIdSource( Request.SESSIONID_FROM_COOKIE);
  - break;
  + if (debug  0) log("Found session id cookie " +
  +sessionId);
  + // 3.2 - load balancing fix
  + // sessionId = fixSessionId( request, sessionId );
  + // 3.2 - PF ( [EMAIL PROTECTED] ): check the session id from
  + // cookies for validity
  +
  + ServerSessionManager sM = getManager( ctx );
  + ServerSession sess = sM.findSession(sessionId);
  + if (sess != null) {
  + request.setRequestedSessionId( sessionId );
  + request.setSessionIdSource(Request.SESSIONID_FROM_COOKIE 

cvs commit: jakarta-tomcat-4.0/catalina/src/share/org/apache/catalina/connector/http SocketInputStream.java

2000-11-21 Thread remm

remm00/11/21 18:28:20

  Modified:catalina/src/share/org/apache/catalina/connector/http
SocketInputStream.java
  Log:
  - Avoid throwing an ArrayOutOfBoundException when the client disconnects
before starting a new request.
  
  Revision  ChangesPath
  1.3   +9 -4  
jakarta-tomcat-4.0/catalina/src/share/org/apache/catalina/connector/http/SocketInputStream.java
  
  Index: SocketInputStream.java
  ===
  RCS file: 
/home/cvs/jakarta-tomcat-4.0/catalina/src/share/org/apache/catalina/connector/http/SocketInputStream.java,v
  retrieving revision 1.2
  retrieving revision 1.3
  diff -u -r1.2 -r1.3
  --- SocketInputStream.java2000/11/17 07:25:36 1.2
  +++ SocketInputStream.java2000/11/22 02:28:19 1.3
  @@ -1,7 +1,7 @@
   /*
  - * $Header: 
/home/cvs/jakarta-tomcat-4.0/catalina/src/share/org/apache/catalina/connector/http/SocketInputStream.java,v
 1.2 2000/11/17 07:25:36 remm Exp $
  - * $Revision: 1.2 $
  - * $Date: 2000/11/17 07:25:36 $
  + * $Header: 
/home/cvs/jakarta-tomcat-4.0/catalina/src/share/org/apache/catalina/connector/http/SocketInputStream.java,v
 1.3 2000/11/22 02:28:19 remm Exp $
  + * $Revision: 1.3 $
  + * $Date: 2000/11/22 02:28:19 $
*
* 
* 
  @@ -67,6 +67,7 @@
   import java.io.IOException;
   import java.io.BufferedInputStream;
   import java.io.InputStream;
  +import java.io.EOFException;
   import org.apache.catalina.util.StringManager;
   
   /**
  @@ -166,6 +167,9 @@
   while ((chr = read()) == CR) { // Skipping CR
   read(); // Skipping LF
   }
  +if (chr == -1)
  +throw new EOFException
  +(sm.getString("requestStream.readline.error"));
   if (chr != CR) {
   pos--;
   }
  @@ -457,7 +461,8 @@
   eol = true;
   } else {
   // FIXME : Check if binary conversion is working fine
  -header.value[readCount] = (char) (buf[pos]  0xff);
  +int ch = buf[pos]  0xff;
  +header.value[readCount] = (char) ch;
   readCount++;
   }
   pos++;
  
  
  



cvs commit: jakarta-tomcat README

2000-11-21 Thread craigmcc

craigmcc00/11/21 18:52:14

  Modified:.Tag: tomcat_32 README
  Log:
  Document the requirement for the JSSE classes to build Tomcat 3.2, and to run
  it if you are using the SSL connector.
  
  Submitted by: Rick Mann [EMAIL PROTECTED]
  
  Revision  ChangesPath
  No   revision
  
  
  No   revision
  
  
  1.9.2.2   +8 -0  jakarta-tomcat/README
  
  Index: README
  ===
  RCS file: /home/cvs/jakarta-tomcat/README,v
  retrieving revision 1.9.2.1
  retrieving revision 1.9.2.2
  diff -u -r1.9.2.1 -r1.9.2.2
  --- README2000/11/12 01:22:20 1.9.2.1
  +++ README2000/11/22 02:52:13 1.9.2.2
  @@ -25,6 +25,14 @@
 "jaxp.jar" and "parser.jar" files are on your class path.  (NOTE:  In the
 future it will be possible to use any JAXP-compliant parser).
   
  +* Download and install a version of the Java Secure Sockets Extension (JSSE)
  +  classes appropriate for your jurisdiction, and add the included JAR files
  +  on your classpath.  If you intend to use Tomcat's support for SSL connections
  +  in stand-alone mode, these classes will also need to be on the classpath
  +  when you start Tomcat.  Get version 1.0.2 or later of JSSE from:
  +
  + http://java.sun.com/products/jsse
  +
   * Download and install the Ant distribution (subproject "jakarta-ant") into
 a directory named "$JAKARTA_HOME/jakarta-ant".  If you have downloaded the
 source distribution, you will need to build the executable version by
  
  
  



Re: Where Can I Find ajp13 Documentation?

2000-11-21 Thread Craig R. McClanahan

Dan Milstein wrote:

 Does anyone know where can I find documentation on the ajp13 communication protocol? 
 I'm looking for documentation about how the packets are laid out, what messages the 
server can send the servlet engine, etc.  I am *not* looking for documentation on how 
to write config files for mod_jk.


AFAIK there is no such documentation -- that's one of the major things that makes it 
hard to do bug fixes on this code.


 Thanks,
 -Dan Milstein
 --

 Dan Milstein // [EMAIL PROTECTED]

Craig





Re: [TC4] multiple certificates

2000-11-21 Thread Craig R. McClanahan

Warner Onstine wrote:

 Hi all,
 It's been a while since I looked at the SSL stuff and I just received a
 request which I'm not sure how it would be handled in TC4.  Would it be
 possible to handle multiple certificates for SSL per servlet?  If this needs
 further clarification let me know.


I guess I don't quite get what you are after.

Are you talking about a certificate chain that authenticates an individual
user?  If so, that is already supported -- the request attribute that you get is
an array of certificate objects, with the first one being the certificate of the
client principal, and the subsequent ones being the certificates of the
certificate authorities vouching for the previous certificate in the chain.

If that's not what you are after, could you please explain further?


 -warner

Craig





Re: [TC4] multiple certificates

2000-11-21 Thread Warner Onstine


- Original Message -
From: "Craig R. McClanahan" [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, November 21, 2000 7:43 PM
Subject: Re: [TC4] multiple certificates


 Warner Onstine wrote:

  Hi all,
  It's been a while since I looked at the SSL stuff and I just received a
  request which I'm not sure how it would be handled in TC4.  Would it be
  possible to handle multiple certificates for SSL per servlet?  If this
needs
  further clarification let me know.
 

 I guess I don't quite get what you are after.

 Are you talking about a certificate chain that authenticates an individual
 user?  If so, that is already supported -- the request attribute that you
get is
 an array of certificate objects, with the first one being the certificate
of the
 client principal, and the subsequent ones being the certificates of the
 certificate authorities vouching for the previous certificate in the
chain.

Sure, what we're working with is possibly using different server
certificates for different servlets, is this at all possible? From what I
can tell right now, no.

Basically what I see right now is if we turn on ssl support it uses the
certificate that you specify for each connection from the
SSLServerSocketFactory.  The only way I can see doing this is to specify a
different port for different certificates, correct?

 If that's not what you are after, could you please explain further?


 Craig

Thanks,
-warner




Re: [TC4] multiple certificates

2000-11-21 Thread Aaron Knauf

I believe that the different port idea is correct (for any web server - not just tomcat). 

Another point to consider is that if tomcat is used in conjunction with a web server (such as apache or IIS), the web server does all of the SSL stuff for the communication with the browser, so you are stuck with web server limitations that are out of tomcat's control.




Aaron Knauf
Systems Integrator
Genie Systems Ltd
Auckland, New Zealand
Ph. +64-9-573 3310 x812
email: [EMAIL PROTECTED]
http://www.geniesystems.com







Warner Onstine [EMAIL PROTECTED]
22/11/2000 18:36
Please respond to tomcat-dev


To:[EMAIL PROTECTED]
cc:
Subject:Re: [TC4] multiple certificates



- Original Message -
From: Craig R. McClanahan [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, November 21, 2000 7:43 PM
Subject: Re: [TC4] multiple certificates


 Warner Onstine wrote:

  Hi all,
  It's been a while since I looked at the SSL stuff and I just received a
  request which I'm not sure how it would be handled in TC4. Would it be
  possible to handle multiple certificates for SSL per servlet? If this
needs
  further clarification let me know.
 

 I guess I don't quite get what you are after.

 Are you talking about a certificate chain that authenticates an individual
 user? If so, that is already supported -- the request attribute that you
get is
 an array of certificate objects, with the first one being the certificate
of the
 client principal, and the subsequent ones being the certificates of the
 certificate authorities vouching for the previous certificate in the
chain.

Sure, what we're working with is possibly using different server
certificates for different servlets, is this at all possible? From what I
can tell right now, no.

Basically what I see right now is if we turn on ssl support it uses the
certificate that you specify for each connection from the
SSLServerSocketFactory. The only way I can see doing this is to specify a
different port for different certificates, correct?

 If that's not what you are after, could you please explain further?


 Craig

Thanks,
-warner




RE: [ANNOUNCEMENT] Tomcat 3.2 Beta 8

2000-11-21 Thread GOMEZ Henri

Forget what I say, i was looking at invalid source

RPM will be out by 18 CET...

"La maîtrise des autres n'est que la force. La maîtrise de vous-même est le
véritable pouvoir" 
-- Lao Tzu 
 

-Original Message-
From: GOMEZ Henri [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, November 21, 2000 1:21 PM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: RE: [ANNOUNCEMENT] Tomcat 3.2 Beta 8


The reported name is incorrect, I'll fix that in CVS but too late...

--- 
jakarta-tomcat/src/share/org/apache/tomcat/core/Constants.ja
va.origTue
Nov 21 13:22:32 2000
+++ 
jakarta-tomcat/src/share/org/apache/tomcat/core/Constants.java Tue
Nov 21 13:22:46 2000
@@ -67,7 +67,7 @@
 
 public class Constants {
 public static final String TOMCAT_NAME = "Tomcat Web Server";
-public static final String TOMCAT_VERSION = "3.2 beta 6";
+public static final String TOMCAT_VERSION = "3.2 beta 8";
 
 public static final String JSP_NAME = "JSP";
 public static final String JSP_VERSION = "1.1";


"La maîtrise des autres n'est que la force. La maîtrise de 
vous-même est le
véritable pouvoir" 
-- Lao Tzu 




[ANNOUNCEMENT] Tomcat 3.2 Beta 8 RPM available

2000-11-21 Thread GOMEZ Henri

At usual place :

http://rpmized.free.fr/ 

---

Since I didn't have more room at free.fr, the RPM (data) are
were moved to ftp://ftp.falsehope.com/home/gomez/

And ftp.falsehope.com is indexed by rpmfind.net ;-)

"La maîtrise des autres n'est que la force. La maîtrise de vous-même est le
véritable pouvoir" 
-- Lao Tzu 
 



RE: [ANNOUNCEMENT] Tomcat 3.2 Beta 8

2000-11-21 Thread GOMEZ Henri

The reported name is incorrect, I'll fix that in CVS but too late...

--- jakarta-tomcat/src/share/org/apache/tomcat/core/Constants.java.orig Tue
Nov 21 13:22:32 2000
+++ jakarta-tomcat/src/share/org/apache/tomcat/core/Constants.java  Tue
Nov 21 13:22:46 2000
@@ -67,7 +67,7 @@
 
 public class Constants {
 public static final String TOMCAT_NAME = "Tomcat Web Server";
-public static final String TOMCAT_VERSION = "3.2 beta 6";
+public static final String TOMCAT_VERSION = "3.2 beta 8";
 
 public static final String JSP_NAME = "JSP";
 public static final String JSP_VERSION = "1.1";


"La maîtrise des autres n'est que la force. La maîtrise de vous-même est le
véritable pouvoir" 
-- Lao Tzu