RE: using SSL on standalone Tomcat - Urgent !
Craig, Can you send me a piece of example of the configuration ? I can't see what I'm doing wrong. I've already tested both suggestions and I didn't get that message back in any case. Thanks, Wellington -Original Message- From: Craig R. McClanahan [mailto:[EMAIL PROTECTED]] Sent: 16 November 2000 19:06 To: [EMAIL PROTECTED] Subject:Re: using SSL on standalone Tomcat - Urgent ! Kurt Bernhard Pruenner wrote: "Lacerda, Wellington (AFIS)" wrote: web-app security-constraint web-resource-collection web-resource-namea/web-resource-name url-pattern/wlss1/*/url-pattern Change this to "/*". The url-pattern setting is relative to your context, not to the server root. AFAIK, the spec says to use "/" instead of "/*" - give that a try, I'd say. In a security constraint, a "/" pattern would only match the "welcome" page for an application, not any of its contents. If you want to protect the entire application, you need to use "/*". If configured properly, I know this works because I've tested it (3.2b7) -- you get an error message back that says "SSL is required for this context". -- Kurt Pruenner - Haendelstrasse 17, 4020 Linz, Austria | Briareos at Olymp BBS: http://www.mp3.com/Leak http://www.ssw.uni-linz.ac.at | ssh [EMAIL PROTECTED] ...It might be written "Mindfuck", but it's spelt "L-A-I-N"... np: Kendall Jackman - Weightless (ambient.01@hyperreal comp.) Craig McClanahan
HTTP PUT
Hi! Does Tomcat support HTTP PUT? How? Arne
RE: monitoring memory in Tomcat
Hi, 1) How can I encourage or unfetter Tomcat so that it will allocate itself more memory for my Java process (what is the restriction and where is it handled). You can increase the heap size of the VM running tomcat. This can be done by adding the appropriated command line option to java.exe e.g. -mx96m in the bin/tomcat script. Don't know if there is a better way. This will of course not fix your problem if you have a true mem leak although. Bye Chistian -- Christian Mallwitz INTERSHOP Communications Germany Senior Software Engineerphone: +49 3641 894 334
RE: Multiple Tomcats with SSL?
I don't think you can do that with Tomcat 3.1 (running standalone it doesn't support SSL and I haven't tried connecting it to an SSL Apache). So I think your best bet would be to get Tomcat 3.2b7. I know... it's still beta but everyone around here seem to be saying that it's much better than even the release of 3.1 (apart from the fact that 3.1 doesn't support SSL on the standalone). If you decide to use 3.2 you have to configure your server.xml so that you add connectors for each port. Each connector tag needs to look something like this: Connector className="org.apache.tomcat.service.PoolTcpConnector" Parameter name="handler" value="org.apache.tomcat.service.http.HttpConnectionHandler"/ Parameter name="port" value="443"/ Parameter name="socketFactory" value="org.apache.tomcat.net.SSLSocketFactory" / Parameter name="secure" value="true"/ Parameter name="clientAuth" value="false"/ Parameter name="keystore" value="C:/Documents and Settings/stefanf/.keystore" / Parameter name="keypass" value="mypassword" / /Connector There are a few things to keep in mind if you do this: 1) You have to build Tomcat from source and make sure you have all JSSE jars in your classpath. The binary version is built on a setup that does not have JSSE (nobody seems to know why...) 2) Before you build the source version of Tomcat you need to change your java.security file. 3) You need to generate a keystore which keeps your server certificate under the alias Tomcat. These information can be found in the server.xml document. Just check it out if you need more info. Regards, Stefan -Original Message- From: Terence Ang [mailto:[EMAIL PROTECTED]] Sent: 17. nóvember 2000 01:53 To: [EMAIL PROTECTED] Subject: Multiple Tomcats with SSL? Dear All, Could anyone suggest whether there is a way to allow multiple instance of tomcats with SSL so that the developer could develop under different ports with SSL enabled? e.g. http://develop.someserver.com:8001 http://develop.someserver.com:8002 http://develop.someserver.com:8003 We are using a. RedHat 6.2 b. Tomcat 3.1 (Running standalone currently) c. Apache 1.3.12/ModSSL 2.6.6/OpenSSL 0.9.5a (Installed but not enabled) Thanks!
Re: servlets problem is still there
Hi, I've got the same problem as yours. So if you get the solution can you teach me how to make it work. Many thanks in advance. Thanks, Miki - Original Message - From: Rasika To: [EMAIL PROTECTED] Sent: Tuesday, November 14, 2000 2:41 PM Subject: servlets problem is still there Hello,I have installed TOMCAT with Apache. I followed your user guide and then tomcat faqs to install tomcat.Now I am able to run .jsp files using both tomcat as well as Apache. I can also run sample servlet provided alongwith examples. But I cannot run my own servlet.I have stored itin webapps/root/web-inf/classes directory. I still don't understand which files need to be configured in order to run my servlets?I have added following block to web.xml fileservlet servlet-namehi/servlet-name servlet-classhi/servlet-class /servlet servlet-mapping servlet-namehi/servlet-name url-pattern/hi/url-pattern /servlet-mapping where "hi" is the name of my servlet file. But when I try to run it through browser giving command http://localhost:8040//hi where 8040 is apache port(which I have changed ) it gives me 404 error.Can you please help me in configuring files so as to run my own servlets?Thanks,Rasikaj
tomcat virtual hosts configuration
Hi everybody, I'm on my way to configuring Tomcat on a RedHat7-Apache1.3.14 machine. I've got 2 Apache Virtual hosts and my httpd.conf file seems like the following: - User bla Group bla ServerRoot /bla Listen 1.2.3.4:80 Listen 1.2.3.5:80 DirectoryIndex index.html index.htm index.jsp VirtualHost 1.2.3.4:80 ServerName www.pippo.com ServerAdmin [EMAIL PROTECTED] DocumentRoot /pippo/htdocs TransferLog /pippo/logs/access_log ErrorLog /pippo/logs/error_log /VirtualHost VirtualHost 1.2.3.5:80 ServerName www.pluto.com ServerAdmin [EMAIL PROTECTED] DocumentRoot /pluto/htdocs TransferLog /pluto/logs/access_log ErrorLog /pluto/logs/error_log /VirtualHost I'd like to hace Tomcat configured like that: Apache should redirect all and only the .jsp and .class requests to Tomcat. Tomcat should have 2 virtual host (is it necessary?) and a structure per application like the following (does it make sense?): +--- virtualhosthome (root application) +--- WEB-INF +--- classes +--- lib +--- htdocs (containing html, jsp, gif...) +--- app1 (containing html, jsp, gif...) +--- WEB-INF (for app1) +--- virtualhost2home (root application) Does it make sense? How can I write my tomcat.conf and server.xml in order to do that? Do I have to touch my mime.types? Thanks for any help Michele
more mod_jserv.so goodness
I have a problem getting apache + tomcat to work.. I've tried using mod_jserv.so from the binary build but then my apache won't start reporting error: Loaded DSO libexec/mod_jserv.so uses plain Apa che 1.3 API, this module might crash under EAPI! (please recompile it with -DEAPI) So I've downloaded 3.1 source, got into the src/native/apache/jserv dir and tried compiling mod_jserv, however it exits with an ambigous error apxs:Break: Command failed with rc=16711680 last thing it tried was: -o autochange.so mod_jserv.o jserv_wrapper_win.o jserv_wrapper_unix.o jserv_wrapper.o jserv_watchdog.o jserv_utils.o jserv_status.o jserv_protocols.o jserv_mmap.o jserv_image.o jserv_balance.o jserv_ajpv12.o jserv_ajpv11.o autochange.o -o mod_jserv.so I've used the build command apxs -c *.c -o mod_jserv.so Is there an easy way to do this? Or a way to get mod_jk for Tomcat 3.1 ? I don't care which I just want to get it running. :( thanks, Dan
JSP and automatic session id URL rewriting
Hi, Is it possible to - force all JSP generated URLS to include a session id without having to wrap them in encodeURL() - disable generatation of session cookies Thanks for your help Christian -- Christian Mallwitz INTERSHOP Communications Germany Senior Software Engineerphone: +49 3641 894 334
redirection
Hi, What's the best way to redirect a web page content (String) into a jsp file? I suppose I could use the getAttribute way include the result in a jsp squeleton but isn't there any better way to do that? Thanx, --mike nb: sorry for the off-topic ;-(
RE: jsdk2.0
Title: jsdk2.0 It's at: http://www.javasoft.com/products/servlet/archive.html Jay -Original Message-From: Borgenstrand, Magnus [mailto:[EMAIL PROTECTED]]Sent: Friday, November 17, 2000 6:22 AMTo: '[EMAIL PROTECTED]'Subject: jsdk2.0 Hi From where can I get JSDK2.0??? I have found JSDK2.1 but this one doesn't contain jsdk.jar, it only contains runner.jar and servlet.jar. This causes a problem when I try to install Apache JServ 1.1.2 as it want's to know where jsdk.jar is. I have been to sun homepage but I can only find 2.1 Thanks Magnus
AW: JSP and automatic session id URL rewriting
Even if it is possible, but I wouldn't do it. You would have to parse your output after it is generated and before you really send it to the requesting client. The parsing has to be quite flexible to recognise links to external site as it is not a good practice to include the session id in links to external sites. (That would open the door to steal the session). There are several ways to code URL's in a way that it is hard to say which site will be the target. Just two examples: 1: base href="some.server.domain"a href="/some/image.gif"/a 2: script someServer = 'someServer'; someFunction() { return someServer + '/some/image.gif'; } /script a href="javasript:someFunction()" So this leads to quite some effort in development (or organisation, if you try to come around this by enforcing apropriate policies four your web developers) and performance penalty. And I bet: you will never be shure if there isn't a whole anywhere. -Ursprüngliche Nachricht- Von: Christian Mallwitz [mailto:[EMAIL PROTECTED]] Gesendet: Freitag, 17. November 2000 13:34 An: '[EMAIL PROTECTED]' Betreff: JSP and automatic session id URL rewriting Is it possible to - force all JSP generated URLS to include a session id without having to wrap them in encodeURL() - disable generatation of session cookies
Re: mod_jserv.so problem
I believe the two files uncompress into two different directories when unpacked. Even if you expand them to the same tree, there should not be any conflicts. -- Michael J. Suzio Lead Software Engineer -- ISS Southfield [EMAIL PROTECTED]
Re: System properties
On Friday 17 November 2000 14:27, you wrote: Hi, I was wondering if it is possible to pass properties to Tomcat. I have some classes which read various system properties in their static initializers, and this works fine when using these classes on the command line using "java -Dproperty=value". However I am not sure how to pass these properties into tomcat when I start it. Is there something in one of the XML files? yes, you can do it, by supplying it in TOMCAT_OPTS when invoking Tomcat. However, it's ugly and results in non-portable web applications (you need to set the properties on whatever servlet container is being used, and restart it, and some may not allow you to set such things). It would be *better* to put the properties you want into some config file specific to your web application, in WEB-INF, to be loaded through ServletContext.getResource(), or as servlet init parameters. Static initialisers? Ugh. Specify instead that your servlets are to be initialised and get the data then. Self-containment is the watchword for web applications. -- Rachel
Re: HTTP PUT
[EMAIL PROTECTED] wrote: Does Tomcat support HTTP PUT? Yes. How? The same way all Servlet containers support HTTP PUT. Try reading a book on Servlet programming. I recommed Jason Hunter's "Java Servlet Programming" from O'Reilly. -- Charles
RE: System properties
Rachel, Thanks for that, about the static initializers... The classes that use them are not servlets, merely utility classes are used in the web application and also elsewhere. For instance, a class, or series of classes that deal with database connection pooling, could conceiveably have a configuration file to let them know what pools to set up, min and max connections, where the server is, what the driver class is, etc. And these classes are useful in other apps, not only in web applications. Now of course you can hard code into the class, the file to load, but this is ugly, it is nicer to say "java -Ddb.properties=/home/stuart/db.properties". As the classes are not servlets, servletContext.getResource() is not really an option. I could not find anything about TOMCAT_OPTS on the web site, persumably this is an environment variable, what format do you put system properties in, is it like TOMCAT_OPTS="db.properties=/home/stuart/db.properties:myproperty=anotherprop ertyvalue:.."? Thanks for your help, Stuart -Original Message- From: Rachel Greenham [mailto:[EMAIL PROTECTED]] Sent: 17 November 2000 15:21 To: [EMAIL PROTECTED] Subject: Re: System properties On Friday 17 November 2000 14:27, you wrote: Hi, I was wondering if it is possible to pass properties to Tomcat. I have some classes which read various system properties in their static initializers, and this works fine when using these classes on the command line using "java -Dproperty=value". However I am not sure how to pass these properties into tomcat when I start it. Is there something in one of the XML files? yes, you can do it, by supplying it in TOMCAT_OPTS when invoking Tomcat. However, it's ugly and results in non-portable web applications (you need to set the properties on whatever servlet container is being used, and restart it, and some may not allow you to set such things). It would be *better* to put the properties you want into some config file specific to your web application, in WEB-INF, to be loaded through ServletContext.getResource(), or as servlet init parameters. Static initialisers? Ugh. Specify instead that your servlets are to be initialised and get the data then. Self-containment is the watchword for web applications. -- Rachel
install problem - where is mod_jserv
I've downloaded tomcat. I've got to the bit in the install guide about mod_jserv. Instructions say to find it in jakarta-tomcat/src/native/apache/jserv Did I do something silly? I can't find that directory in either v4, v3.2 or v3.1 downloads! Steve Elliott
Tomcat + JNI
Hi, I have just installed Apache1.3.14 + modssl + tomcat 3.2b5 on Solaris 2.6 and am trying to call a native method from my servlet (this worked fine under JavaWebServer2.0). The shared library is definitely being loaded (ie no exception is thrown when I tried to load it separately, the lib is on the LD_LIBRARY_PATH etc) but "UnsatisfiedLinkError" is still being thrown indicating the implementation of the native method is not found. I havent done anything special to tomcat for JNI, I was a bit baffled by the purpose jni_server.xml and jni_workers.properties files! I only need to call a C program from within a class called by the servlet, don't need to call java methods from the native code. Has anyone come across anything like this? Many thanks, Mike.
Re: install problem - where is mod_jserv
This is a FAQ. You must download the *src* package to get these classes! Just download the binary, use that to install tomcat, then download the src package and get the jserv or jk adapters from there... On a side note, I installed JRun yesterday to benchmark some things against Tomcat (I need to justify the decision to go with Tomcat, so I needed something to measure against). One cool thing is does is that the interfacing to Apache is done via a shipped servlet with JRun that you run within the JRun server, give it some parameters, and then it compiles a new module for Apache and loads it in! I was amazed, it actually worked and didn't get anything wrong... Be slick to be able to match that ability, and it would end questions like this ;-) -- Michael J. Suzio Lead Software Engineer -- ISS Southfield [EMAIL PROTECTED]
Re: NoClassDefFoundError in Tomcat installation
Hi: I got similar error while trying to execute build.bat file to compile my servlets. I have solved is by making sure that the following are in the CLASSPATH. jdk's tools.jar -- (needed if you running ant) jaxp.jar -- (needed if you are running ant) parser.jar -- server.jar -- servlet.jar Trust this helps. Cheers, Rk From: "Gregor v. Bochmann" [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: NoClassDefFoundError in Tomcat installation Date: Fri, 17 Nov 2000 10:45:56 -0500 I have just installed the tomcat system under Windows NT and want to serve some jsp pages. When the first jsp page is executed, I get the NoClassDefFoundError message (the error message is given below). Does somebody have an idea what is wrong ? Can somebody tell me how to obtain a more detailed error log ? I got the error message below by executing the /examples/jsp/sessions/carts.html page in the examples provided with the tomcat system and then by clicking on the ADD button. Thanks for any help Gregor v. Bochmann -- Unhandled error! You might want to consider having an error page to report such errors more gracefully java.lang.NoClassDefFoundError: sun/tools/javac/Main at org.apache.jasper.compiler.SunJavaCompiler.compile(SunJavaCompiler.java:128) at org.apache.jasper.compiler.Compiler.compile(Compiler.java:238) at org.apache.jasper.runtime.JspServlet.loadJSP(JspServlet.java:413) at org.apache.jasper.runtime.JspServlet$JspServletWrapper.loadIfNecessary(JspSe rvlet.java:149) at org.apache.jasper.runtime.JspServlet$JspServletWrapper.service(JspServlet.ja va:161) at org.apache.jasper.runtime.JspServlet.serviceJspFile(JspServlet.java:261) at org.apache.jasper.runtime.JspServlet.service(JspServlet.java:369) at javax.servlet.http.HttpServlet.service(HttpServlet.java:853) at org.apache.tomcat.core.ServletWrapper.handleRequest(ServletWrapper.java:503) at org.apache.tomcat.core.ContextManager.service(ContextManager.java:559) at org.apache.tomcat.service.http.HttpConnectionHandler.processConnection(HttpC onnectionHandler.java:160) at org.apache.tomcat.service.TcpConnectionThread.run(SimpleTcpEndpoint.java:338) at java.lang.Thread.run(Unknown Source) Gregor v. Bochmann Tel (613) 562-5800 ext. 6205, Fax 562-5175 School of Information Technology Engineering, University of Ottawa 161 Louis Pasteur(CBY A617),PO.Box 450,Stn A,Ottawa,Ont,K1N 6N5,Canada email:[EMAIL PROTECTED] http://www.site.uottawa.ca/~bochmann _ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. Share information about yourself, create your own public profile at http://profiles.msn.com.
RE: System properties
OK marvellous, I get all that, TOMCAT_OPTS is not my first choice if it is just basically the command line. On the subject of using a startup servlet to do the work of reading the info and passing it on to the utility classes that need it, this is an option, but would mean writing a servlet for to do this, and also, anywhere else I use the utility classes, they would need to be 'initialised' in the same way by some other class in the other application. This would of course have to happen before the class is used, and I had thought that is should be possible to encapsulate all the details of the connection pooling in one place, including the actions of reading the system properties file. Yeah, all the stuff is in process, no separate database access server. From the looks of things, it is just the way it is, although I was hoping the there would be some way to put stuff in the web.xml file, maybe in the servlet tag like: system-property namemyproperty/name value42/value /system-property Anyone think this is a good idea, or am I talking rubbish? Stu PS. static, bad? It is useful! Singletons (you mentioned), cleanly handling exceptions in constructors, general things you want to share between instances, object caches, etc. -Original Message- From: Rachel Greenham [mailto:[EMAIL PROTECTED]] Sent: 17 November 2000 16:18 To: [EMAIL PROTECTED] Subject: Re: System properties On Friday 17 November 2000 15:46, you wrote: Rachel, Thanks for that, about the static initializers... The classes that use them are not servlets, merely utility classes are used in the web application and also elsewhere. For instance, a class, or series of classes that deal with database connection pooling, could conceiveably have a configuration file to let them know what pools to set up, min and max connections, where the server is, what the driver class is, etc. And these classes are useful in other apps, not only in web applications. Now of course you can hard code into the class, the file to load, but this is ugly, it is nicer to say "java -Ddb.properties=/home/stuart/db.properties". As the classes are not servlets, servletContext.getResource() is not really an option. Yes it is. Your startup servlet reads these parameters, parses that data, and then invokes your utility classes with that initialisation data. consider "static" harmful. :-) I only ever use it to define constants, like database field names or whatnot, or to hold the instance of a single-instance class. Basically, if your database accesses are going on in the same *process* as your servlets, ie: you have some generic headless data-access javabeans that do the work and you want to call them from your servlets, you should still have a servlet that's initialised on startup of the web application, and *that* initialises your data-access beans. That way you can also catch the web application being shut down and cleanly close down your data-access classes too. If your data-access is happening in another process from your servlets, and communicating over network sockets, eg: using RMI or XML/SOAP type thing, then you initialise that task in any way you see fit - the servlet engine just talks to it when it wants to. If you're doing this, you may well want to look seriously at EJB. I could not find anything about TOMCAT_OPTS on the web site, persumably this is an environment variable, what format do you put system properties in, is it like TOMCAT_OPTS="db.properties=/home/stuart/db.properties:myproperty=anotherpro p ertyvalue:.."? Not quite. TOMCAT_OPTS is just given to the java command line used to invoke Tomcat, so it's in that format, ie: "-Ddb.properties=value" etc. -- Rachel
ROOT-Servlets not found
Hello, this is the problem I have: I'm using Tomcat with Apache. All my static-files I put into the path TOMCAT_HOME\webapps\ROOT. The Servlets into this web-inf\classes. The static files should be served by apache. Into the httpd.conf I wrote: ... DocumentRoot "C:/programme/apachgroup/jakarta-tomcat/weapps/ROOT" ... Include ...\mytomcat-apache.conf the mytomcat-apache.conf: ... Location /WEB-INF/ AllowOverride None deny from all /Location LocationMatch /*.jsp SetHandler jserv-servlet /LocationMatch ApJServMount /servlets /ROOT the servlet.xml: ... Context path="" docBase="webapps/ROOT" debug="0" reloadable="true" /Context ... When I'm trying to invoke Servlets in the example-webapp everything works fine. Also the serving of the static-files are working properly, but the servlets I want to open by eg. http://localhost/servlets/IsItWorking a 404-error is coming up. What am I doing wrong? Thanks for every help Maik
How do I turn off generation of Directory Indexes?
Is there a way in tomcat to turn off the automated generation of directory indexes? I removed the "Indexes" option from my directory entries in web.xml but this seems to have no effect. -- David Chazin
Session handling
Hello again just trying to make sure that I get the most acurate response ... hence the repost :-) I would need to find out if Tomcat 3.1 have any known bugs in session management area. The problem we are facing at the moment is that our application is some times presenting information belonging to other customers that we suspect are concurently using the application. The customer data is being stored on an Oracle 8.1.6 server and the whole system is running on Solaris 2.7. Thanks for your time Drasko __ Do You Yahoo!? Yahoo! Calendar - Get organized for the holidays! http://calendar.yahoo.com/
Install apache1.3.12 tomcat3.1 cocoon1.7 and php4.0.1pl2
I have tried to install apache1.3.12, tomcat3.1, cocoon1.7 and php4.0.1pl2 in a Solaris2.8. Those who have tried to install cocoon in Solaris must know that it's not easy at all, but at last guided by the install.case.solaris in the docs/ directory of cocoon1.8 I made it.What I can't make work is php with apache and cocoon.(When I do not include the tomcat-apache-cocoon.conf in the httpd.conf, php works fine but when I include it apache doesn't seem to understand with the .php file).PLEASE HELP ME!!
installing apache1.3.12,tomcat3.1,cocoon1.7 and php4.0.1pl2
I have tried to install apache1.3.12, tomcat3.1, cocoon1.7 and php4.0.1pl2 in a Solaris2.8.Those who have tried to install cocoon in Solaris must know that it's not easy at all, but at last guided by the install.case.solaris in the docs/ directory of cocoon1.8 I made it.What I can't make work is php with apache and cocoon.(When I do not include the tomcat-apache-cocoon.conf in the httpd.conf, php works fine but when I include it apache doesn't seem to understand what to do with the.php files).PLEASE HELP ME!!
RE: System properties
John Thanks for that, will look into further and let you know. Stuart -Original Message- From: John Ellis [mailto:[EMAIL PROTECTED]] Sent: 17 November 2000 17:44 To: [EMAIL PROTECTED] Subject: Re: System properties According to the dtd: http://java.sun.com/j2ee/dtds/web-app_2.2.dtd There is an "env-entry" tag that has name-value pairs like you mentioned. The version of tomcat that I am using (3.1) did not seem to being doing anything with this entry. It does seem like it would be the perfect place for exactly what you are talking about. Does anyone know what this entry is (the dtd description did not specifically say how to get these values back -- I am assuming System.getProperties())? Does anyone know if more current version of tomcat support it? Will future versions? John Stuart Farnan wrote: OK marvellous, I get all that, TOMCAT_OPTS is not my first choice if it is just basically the command line. On the subject of using a startup servlet to do the work of reading the info and passing it on to the utility classes that need it, this is an option, but would mean writing a servlet for to do this, and also, anywhere else I use the utility classes, they would need to be 'initialised' in the same way by some other class in the other application. This would of course have to happen before the class is used, and I had thought that is should be possible to encapsulate all the details of the connection pooling in one place, including the actions of reading the system properties file. Yeah, all the stuff is in process, no separate database access server. From the looks of things, it is just the way it is, although I was hoping the there would be some way to put stuff in the web.xml file, maybe in the servlet tag like: system-property namemyproperty/name value42/value /system-property Anyone think this is a good idea, or am I talking rubbish? Stu PS. static, bad? It is useful! Singletons (you mentioned), cleanly handling exceptions in constructors, general things you want to share between instances, object caches, etc. -Original Message- From: Rachel Greenham [mailto:[EMAIL PROTECTED]] Sent: 17 November 2000 16:18 To: [EMAIL PROTECTED] Subject: Re: System properties On Friday 17 November 2000 15:46, you wrote: Rachel, Thanks for that, about the static initializers... The classes that use them are not servlets, merely utility classes are used in the web application and also elsewhere. For instance, a class, or series of classes that deal with database connection pooling, could conceiveably have a configuration file to let them know what pools to set up, min and max connections, where the server is, what the driver class is, etc. And these classes are useful in other apps, not only in web applications. Now of course you can hard code into the class, the file to load, but this is ugly, it is nicer to say "java -Ddb.properties=/home/stuart/db.properties". As the classes are not servlets, servletContext.getResource() is not really an option. Yes it is. Your startup servlet reads these parameters, parses that data, and then invokes your utility classes with that initialisation data. consider "static" harmful. :-) I only ever use it to define constants, like database field names or whatnot, or to hold the instance of a single-instance class. Basically, if your database accesses are going on in the same *process* as your servlets, ie: you have some generic headless data-access javabeans that do the work and you want to call them from your servlets, you should still have a servlet that's initialised on startup of the web application, and *that* initialises your data-access beans. That way you can also catch the web application being shut down and cleanly close down your data-access classes too. If your data-access is happening in another process from your servlets, and communicating over network sockets, eg: using RMI or XML/SOAP type thing, then you initialise that task in any way you see fit - the servlet engine just talks to it when it wants to. If you're doing this, you may well want to look seriously at EJB. I could not find anything about TOMCAT_OPTS on the web site, persumably this is an environment variable, what format do you put system properties in, is it like TOMCAT_OPTS="db.properties=/home/stuart/db.properties:myproperty=anotherpro p ertyvalue:.."? Not quite. TOMCAT_OPTS is just given to the java command line used to invoke Tomcat, so it's in that format, ie: "-Ddb.properties=value" etc. -- Rachel
Install apache. tomcat, cocoon, php
Ihave tried to install apache1.3.12, tomcat3.1, cocoon1.7 and php4.0.1pl2 in a Solaris2.8. Those who have tried to install cocoon in Solaris must know that it's not easy at all, but at last guided by the install.case.solaris in the docs/ directory of cocoon1.8 I made it.What I can't make work is php with apache and cocoon.(When I do not include the tomcat-apache-cocoon.conf in the httpd.conf, php works fine but when I include it apache doesn't seem to understand what to do with the .php file).PLEASE HELP ME!!
Re: System properties
John Ellis wrote: According to the dtd: http://java.sun.com/j2ee/dtds/web-app_2.2.dtd There is an "env-entry" tag that has name-value pairs like you mentioned. The version of tomcat that I am using (3.1) did not seem to being doing anything with this entry. It does seem like it would be the perfect place for exactly what you are talking about. The env-entry, resource-ref, and ejb-ref values in the deployment descriptor are for use when you are running a servlet container inside a J2EE server. Tomcat doesn't support them when running standalone. A good way to introduce application-wide initialization parameters, though, is to use the context-param element. Values you enter here can be retrieved from any servlet or JSP page in the web app like this: String value = getServletContext().getInitParameter("name"); Does anyone know what this entry is (the dtd description did not specifically say how to get these values back -- I am assuming System.getProperties())? Does anyone know if more current version of tomcat support it? Will future versions? You would not really want to use system properties for this in the first place. What would you do if you're running two different web apps in the same servlet container, and they both needed a property named "abc"? John Craig McClanahan
Tomcat not receiving POST requests with IIS
Hi, I've followed the "Tomcat IIS HowTo" to make Tomcat collaborate with IIS. Everything went fine when I send GET requests. When the request are POST the servlet doesn't get the parameters. In order to test this I created a simple servlet that prints a parameter I sent. When I call the servlet through IIS the POST returns nulls instead of the value I sent. Any ideas? Thanks Guibert import java.io.*;import java.util.*;import java.text.*;import java.sql.*;import javax.servlet.*;import javax.servlet.http.*; public class Test extends HttpServlet implements SingleThreadModel { private static Properties props = new Properties(); private static Connection con = null; public void doGet (HttpServletRequest request,HttpServletResponse response) throws ServletException, IOException { response.setContentType("text/html"); PrintWriter out = response.getWriter(); out.println(request.getParameter("nombre")); out.close(); } public void doPost (HttpServletRequest request,HttpServletResponse response) throws ServletException, IOException { response.setContentType("text/html"); PrintWriter out = response.getWriter(); out.println(request.getParameter("nombre")); out.close(); }}
RE: headers, cookies, redirect
Title: RE: headers, cookies, redirect Flip it around, try % response.sendRedirect(bar.jsp); response.addCookie(new Cookie(baz,quux)); % it seems like sendRedirect resets the HTTP headers. -Original Message- From: Michael McCormick [mailto:[EMAIL PROTECTED]] Sent: Friday, November 17, 2000 12:08 PM To: [EMAIL PROTECTED] Subject: headers, cookies, redirect Summary: my headers and/or cookies aren't sent with the response when I send a redirect. Suppose I have a .jsp page foo.jsp: % response.addCookie(new Cookie(baz,quux)); response.sendRedirect(bar.jsp); % The response from foo.jsp (which is a 302) does _not_ contain a Set-Cookie header with the contents baz=quux. If I comment out the redirect line, the response (a 200) _does_ contain the appropriate header. Is there some special trick to adding headers to a redirect? Am I missing something obvious? Configuration: Apache 1.39 Tomcat 3.1 Blackdown Java 1.2.2 LinuxPPC 2.2.15 In a related question, how does one turn off the session id cookie that always gets sent. I notice Tomcat has no problems sending _that_ with a redirect. Thanks for any help, Mike
re: headers, cookies, redirect
I'm not particularly grounded in web development, so this may not be specific to Tomcat. I'm hoping someone can explain how this works. I can get cookies sent back to the browser when performing a redirect if I set them _after_ I issue the redirect. That is, if I write: % response.sendRedirect("bar.jsp"); response.addCookie(new Cookie("baz","quux")); % Can someone please explain (or point to a resource) why a cookie doesn't "stick" unless I set it after I specify the redirect? Thanks in advance, Mike
RE: headers, cookies, redirect
Thanks, I figured it out by blind luck just a few minutes earlier. Any idea why? On 2000.11.17, government thugs made [EMAIL PROTECTED] write: Flip it around, try % response.sendRedirect("bar.jsp"); response.addCookie(new Cookie("baz","quux")); % it seems like sendRedirect resets the HTTP headers.
Can't remove Tomcat 3.1 NT Service
Title: Can't remove Tomcat 3.1 NT Service Hello everyone, I added Tomcat 3.1 as a service (supposedly sucessfully, but it wouldn't serv servlets) and then removed it (supposedly sucessfully also). Now whenever I try to start Tomcat via the startup.bat file in the bin dir, it tells me I have to remove the service. There is no service in the services control panel, and there is no registry key in the services group that I can find. Can someone please tell me how to get rid of this problem short of a reinstall of WIN2k Server? Thanks in advance for your help!
Re: headers, cookies, redirect
Michael McCormick wrote: I'm not particularly grounded in web development, so this may not be specific to Tomcat. I'm hoping someone can explain how this works. I can get cookies sent back to the browser when performing a redirect if I set them _after_ I issue the redirect. That is, if I write: % response.sendRedirect("bar.jsp"); response.addCookie(new Cookie("baz","quux")); % This should not work, because you're not allowed to modify the HTTP headers after calling sendRedirect(). The fact that this works, and that the opposite order (which is the correct one) fails are bugs in Tomcat 3.1. You should really really really be using 3.2 or later. Can someone please explain (or point to a resource) why a cookie doesn't "stick" unless I set it after I specify the redirect? Thanks in advance, Mike Craig McClanahan
Tomcat ServerSocket Dies
Hi, We are running some heavy load testing using Tomcat 3.1, JDK 1.2.1.04 on Solaris with Apache and Jserv. As our tests ramp up, we invariably get the error below. We have changed our file descriptors from 64 to 256, but this did not appear to change the results. Per below, we are using PoolTcpConnector connector or 500 max connection, and 200 100 max/min spare threads respectively. Any ideas what the 'too many open files' really indicates? Thanks for you help! System.out -- 500 200 100 Starting tcp endpoint on 8007 with org.apache.tomcat.service.connector.Ajp12ConnectionHandler ... java.net.SocketException: Too many open files at java.net.PlainSocketImpl.socketAccept(Native Method) at java.net.PlainSocketImpl.socketAccept(Compiled Code) at java.net.PlainSocketImpl.accept(Compiled Code) at java.net.ServerSocket.implAccept(Compiled Code) at java.net.ServerSocket.accept(Compiled Code) at org.apache.tomcat.service.PoolTcpEndpoint.acceptSocket(Compiled Code) at org.apache.tomcat.service.TcpWorkerThread.run(Compiled Code) at org.apache.tomcat.util.ThreadPool$ControlRunnable.run(Compiled Code) at java.lang.Thread.run(Compiled Code) Endpoint ServerSocket[addr=0.0.0.0/0.0.0.0,port=0,localport=8007] shutdown due to exception: java.net.SocketException: Too many open files --- Steve McIntyre Email: [EMAIL PROTECTED] Tickets.com - "Official Ticketing Supplier to the 2002 Olympic Winter Games"
Log File Sizes and Growth
I read through all the documentation pages more than once but couldn't find any comments about how log files are managed. For example, if there are any size limits on the TomCat log files (i.e., jasper.log, servlet.log, etc.); or, if there are limits, whether or not Tomcat will create a series of related log files, and so on and so on. If this is documented somewhere, where can I find it? If not, I will appreciate any info you might have. As far as I know, TomCat does not have file-size limits, but that's my guess. Thank you in advance! - Julia Walker
Re: Log File Sizes and Growth
"Julia (Hyunjoo) Walker" wrote: I read through all the documentation pages more than once but couldn't find any comments about how log files are managed. For example, if there are any size limits on the TomCat log files (i.e., jasper.log, servlet.log, etc.); or, if there are limits, whether or not Tomcat will create a series of related log files, and so on and so on. If this is documented somewhere, where can I find it? If not, I will appreciate any info you might have. As far as I know, TomCat does not have file-size limits, but that's my guess. Thank you in advance! You are correct on your guess ... Tomcat has no built-in limits on how big the log files will get. However, you have indirect control over this by what kinds of debugging detail you request in your logger configurations in server.xml. For Tomcat 3.x, all of the loggers simply append to the configured filenames, so you have to periodically shut down and restart Tomcat to replace the old logs with new empty ones. In Tomcat 4.0, all of the standard loggers include the current date in their filenames for you, and switch automatically on the first entry to that log file after each midnight. - Julia Walker Craig McClanahan
Re: Log File Sizes and Growth
"Craig R. McClanahan" wrote: You are correct on your guess ... Tomcat has no built-in limits on how big the log files will get. However, you have indirect control over this by what kinds of debugging detail you request in your logger configurations in server.xml. For Tomcat 3.x, all of the loggers simply append to the configured filenames, so you have to periodically shut down and restart Tomcat to replace the old logs with new empty ones. In Tomcat 4.0, all of the standard loggers include the current date in their filenames for you, and switch automatically on the first entry to that log file after each midnight. Craig McClanahan Hi, Craig. Thank you for providing me with the logging info. I had similar thoughts about changing the verbosity level for logging, but I didn't know about Tomcat 4.0's logging capability. This is exactly what I needed to know. Thank you for your quick response! - Julia Walker
precompiling jsps
Using Tomcat, is there a way like in RESIN, to precompile all jsps ? Regards, Stephane
Re: Servlet invoker woes - servlet-mapping /servlets/* to invoker fails on 3.2
As of Tomcat 3.2-b8 (to be created on Monday), you will be able to set a parameter in the server.xml file to override the prefix used by the invoker servlet. There is an entry that looks like this: RequestInterceptor className="org.apache.tomcat.request.InvokerInterceptor" debug="0" prefix="/servlet/" / and you can change the prefix attribute to "/servlets/" for your particular case. In Tomcat 4.0, the ability to configure global defaults in the "conf/web.xml" file is restored to the way it worked in Tomcat 3.1 -- it is much more intuitive for things like this. Craig McClanahan Rachel Greenham wrote: As subject: Our website uses a large number of servlets reference through URLs of the form /servlets/fully-qualified-class-name. We got this to work on Tomcat 3.1 by putting in a servlet-mapping tag in the webapp's WEB-INF file thus: servlet-mapping !-- Set up a mapping to allow any URL where the path starts "/servlets/" to be invoked as a servlet. This saves us having to give all our servlets aliases and rewriting all the jphtml scripts to match! -- servlet-name invoker /servlet-name url-pattern /servlets/* /url-pattern /servlet-mapping However, this doesn't work in Tomcat 3.2 beta 7. Instead I have had to alter the RequestInterceptor line for the invoker in $TOMCAT_HOME/conf/server.xml thus, so I can get the site working today at least: RequestInterceptor className="org.apache.tomcat.request.InvokerInterceptor" debug="0" prefix="/servlets/" / Furthermore, I *had* to take out the servlet-mapping tag in the web.xml file as well or it still wouldn't work, which means I can't use the same web.xml across both versions, which creates administration headaches. Also, this way, there's no longer a request interceptor for /servlet/* which means, for example, the URLs to the servlets in the "examples" webapp no longer work. In other words, this configuration change is global to the servlet container, and can break other web applications running on it. Also, I don't know if it's guaranteed even to work on other servlet containers. My question is: What is the *right* thing to do here, for maximum compatibility? Is the use of actual servlet class names in URLs now supposed to be deprecated and not-to-be relied upon? Should we be using servlet aliases consistently now? In which case we do after all need to go through all our HTML files and other scripts changing URLs to use servlet aliases for all our servlets. Personally I suspect this is the right way, and the end result would be a cleaner webapp, but the person who tells our web designers to do the changes is not going to be popular! OR... Is the current Tomcat 3.2 beta 7 behaviour wrong? OR... Is there a more definitive way of doing this servlet mapping? I thought the servlet-mapping tag in WEB-INF/web.xml was unproblematic myself. -- Rachel
Re: Sessions don't work without cookies since 3.2beta6
"Stubenrauch,Andreas" wrote: Hi Folks any comments are welcome: If Cookies are turned off in a browser the session-management by url-rewriting does not work. This bug was introduced by 3.2 beta6 and is still around in beta7 Just turn cookies off and try any of the session-examples in the tomcat-distribution This bug has been fixed, and the fix will appear in 3.2-b8 (which should become available Monday night). Regards, Andreas Craig McClanahan
Requesting / hangs Tomcat with no static interceptor?
I'm using Tomcat 3.2b7 (also happens under 3.2b6) and I'm trying to run a slightly cut-down version. In particular, I don't want to serve any static files, show any directories etc. I thought that to do this, I could remove the line: RequestInterceptor className="org.apache.tomcat.request.StaticInterceptor" / from server.xml. Unfortunately, this seems to mean that a request for / on the server sends Tomcat into a tight loop (Java takes up 99% of my CPU). Any ideas? Is removing the StaticInterceptor just a really bad idea? Win2K, JDK1.3 btw. Jon
Re: Requesting / hangs Tomcat with no static interceptor?
Jon Skeet wrote: I'm using Tomcat 3.2b7 (also happens under 3.2b6) and I'm trying to run a slightly cut-down version. In particular, I don't want to serve any static files, show any directories etc. I thought that to do this, I could remove the line: RequestInterceptor className="org.apache.tomcat.request.StaticInterceptor" / from server.xml. Unfortunately, this seems to mean that a request for / on the server sends Tomcat into a tight loop (Java takes up 99% of my CPU). Any ideas? Is removing the StaticInterceptor just a really bad idea? Win2K, JDK1.3 btw. The static interceptor also interprets requests for welcome files (which is what you really want to have happen when you ask for URL "/"), so removing it is probably not a good idea :-). In 3.2b7 there is a configuration option on the static interceptor to disable directory listings. The default entry looks like this: RequestInterceptor className="org.apache.tomcat.request.StaticInterceptor" debug="0" suppress="false" / Change the suppress attribute to true, and Tomcat will return an error instead of a directory listing when no welcome file is present. Jon Craig McClanahan
enquiry about Apache-Tomcat
Hi, I am facing problems in Installig Tomcat 1. i have windows95 so in setting up environment variables instead of saying "apache group\jakarta-tomcat\bin" i used "apache~1\jakart~3\bin" so will that aeefect .bat file execution 2. Trying with either of above option in first case : on saying "tomcat run it echo "--- C:\Program Files\apache group\jakarta-tomcat\bintomcat run Using classpath: C:\Progra~1\apache~1\jakart~3\classes; C:\Progra~1\apache~1\jakart~3\lib\webserver.jar; C:\Progra~1\apache~1\jakart~3\lib\jasper.jar; C:\Progra~1\apache~1\jakart~3\lib\xml.jar; C:\Progra~1\apache~1\jakart~3\lib\servlet.jar;C:\JDK1_3\lib\tools.jar Exception in thread "main" java.lang.NoClassDefFoundError: org/apache/tomcat/startup/Tomcat " in second case" it says out of environment space. which is not solving even on setting properties--memory--internal environment--4096. I would appreciate your help in the above problem Thank you Rinku Srivastava [EMAIL PROTECTED] _ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. Share information about yourself, create your own public profile at http://profiles.msn.com.
Re: precompiling jsps
Check out the jspc.bat file shipped with Tomcat. --- Stéphane_Laurière [EMAIL PROTECTED] wrote: Using Tomcat, is there a way like in RESIN, to precompile all jsps ? Regards, Stephane = Wyn Easton [EMAIL PROTECTED] __ Do You Yahoo!? Yahoo! Calendar - Get organized for the holidays! http://calendar.yahoo.com/
Re: using SSL on standalone Tomcat - Urgent !
"Lacerda, Wellington (AFIS)" wrote: Craig, Can you send me a piece of example of the configuration ? I can't see what I'm doing wrong. I've already tested both suggestions and I didn't get that message back in any case. Thanks, Wellington Attached is the simplest web-app I can create that illustrates this thing working correctly. Put "secure-only.war" in your webapps directory, restart Tomcat, and try: http://localhost:8080/secure-only You should get a message stating "SSL required to access this page". I tested this with the most recent code from CVS, but I do not believe anything has changed (that would affect this) since beta 7. Craig PS: It also works if you change the transport guarantee from CONFIDENTIAL to INTEGRAL. secure-only.war
Antigen found CorruptedCompressedFile virus
Antigen virus protection for Exchange found secure-only.war infected with CorruptedCompressedFile virus. The file is currently Deleted. The message, "Re: using SSL on standalone Tomcat - Urgent !", was sent from Craig R. McClanahan and was discovered in IMC Queues\Inbound located at Genelco.
Re: Antigen found CorruptedCompressedFile virus
ANTIGEN_NAVMAILS01 wrote: Antigen virus protection for Exchange found secure-only.war infected with CorruptedCompressedFile virus. The file is currently Deleted. The message, "Re: using SSL on standalone Tomcat - Urgent !", was sent from Craig R. McClanahan and was discovered in IMC Queues\Inbound located at Genelco. Looks like "Antigen for Exchange" needs to update their signature files to correctly recognize Java JAR files. Craig McClanahan
Re: Performance testing anyone?
On Wed, Nov 15, 2000 at 11:17:06AM -0600, Mike La Budde wrote: How are people doing performance testing? What tools are out there to aid in this process? Dear Mike, We're using e-Test Suite from RSW, http://www.rswsoftware.com/products/etest-suite_index.shtml It's been useful so far, with fairly simple scenarios, in simulating load. I like the ip spoofing feature in particular (you put ip aliases on the box it runs on, and it makes HTTP connections from all those ip addresses). Yours Sincerely, Aleksey
[Basic] JSP help!
1. How do you "redirect" a page? I have code that if string == a then forward to page 1 else forward to page 2 Unlike ASP, the forward tag just sort of INCLUDES the file! The file name in the browser is the same..not that of the file that I am forwarding to! What is the command to really REDIRECT the page by changing the URL of the current browser window? 2. How can I get the current path of the script? I mean something like REQUEST.SERVERVARIABLES("SCRIPT_NAME") or REQUEST.SERVERVARIABLES("PATH_INFO") 3. I need to know some string manipulation functions like substr etc...most JSP books assume you know Java, where can I find a good beginner's reference to all these functions? I would really appreciate if someone can help! Thanks! Winniw
RE: [Basic] JSP help!
1. In a jsp you can use response.sendRedirect("URL") to send the browser an instruction to open another page. Forward does like you say - totally a server thing. 2. I believe it is request.getContextPath 3. Go to the Java site (www.javasoft.com) and go to their tutorial or search on google for Java Tutorial and you will find a wealth of tutorial info. -Original Message- From: Winnie Cheung [mailto:[EMAIL PROTECTED]] Sent: Saturday, November 18, 2000 12:18 AM To: [EMAIL PROTECTED] Subject: [Basic] JSP help! 1. How do you "redirect" a page? I have code that if string == a then forward to page 1 else forward to page 2 Unlike ASP, the forward tag just sort of INCLUDES the file! The file name in the browser is the same..not that of the file that I am forwarding to! What is the command to really REDIRECT the page by changing the URL of the current browser window? 2. How can I get the current path of the script? I mean something like REQUEST.SERVERVARIABLES("SCRIPT_NAME") or REQUEST.SERVERVARIABLES("PATH_INFO") 3. I need to know some string manipulation functions like substr etc...most JSP books assume you know Java, where can I find a good beginner's reference to all these functions? I would really appreciate if someone can help! Thanks! Winniw
can't get tomcat to compile...servlets.
hi, i'm new to servlets and tomcat. i've installed tomcat with apache 1.3.12. it serves servlets and jsp's but it does not compile them. i have to precompile them everytime i make changes. i'm using jdk1.2.2 for linux (redhat 6.2). where do i have to specify the compiler path. i have set the environment vars. TOMCAT_HOME and JAVA_HOME. thanks. parvez
RE: can't get tomcat to compile...servlets.
Not positive, but this may be that you did not specify tools.jar on your command line. I beleive I saw sometime a long time ago on this list that this was required to compile anything in-process. You probably will need to update the startup script to get it correctly (since it didn't get it itself). If this doesn't work, I have no more clues. Regards, Paul -Original Message- From: Parvez Rishi [mailto:[EMAIL PROTECTED]] Sent: Saturday, November 18, 2000 12:35 AM To: [EMAIL PROTECTED] Subject: can't get tomcat to compile...servlets. hi, i'm new to servlets and tomcat. i've installed tomcat with apache 1.3.12. it serves servlets and jsp's but it does not compile them. i have to precompile them everytime i make changes. i'm using jdk1.2.2 for linux (redhat 6.2). where do i have to specify the compiler path. i have set the environment vars. TOMCAT_HOME and JAVA_HOME. thanks. parvez
File manipulation code sample?
Hello, I would appreciate if someone could pass me a sample code for opening files and manipulating strings? Thanks a lot, Winnie
Problem with startup
I get this out put when I run "tomcat run" from the dos promt - "org\apache\tomcat\service\http\HttpConnectionHandle java.lang.ClassnotFound Exception. I am running Windows 95 with JDK1.2 (defined java_home tomcat_home directories) Please answer my query at [EMAIL PROTECTED] Thanx, Devendra Gera
Splitting a string?
Hi, how can I split a string in JSP using Tomcat? Is there a split function? Thanks!
JSP -- getting multiple list values?
Hello, When I use get.Parameter with a LIST (SELECT) in my form, it only collects the first item selected! Is there a reason to this why? Thanks
Re: can't get tomcat to compile...servlets.
thanks Paul. yes, i have the tools.jar in the tomcat.sh rightly pointed. but still cant get it to compile. parvez And Then CPC Livelink Admin wrote . Not positive, but this may be that you did not specify tools.jar on your command line. I beleive I saw sometime a long time ago on this list that this was required to compile anything in-process. You probably will need to update the startup script to get it correctly (since it didn't get it itself). If this doesn't work, I have no more clues. Regards, Paul -Original Message- From: Parvez Rishi [mailto:[EMAIL PROTECTED]] Sent: Saturday, November 18, 2000 12:35 AM To: [EMAIL PROTECTED] Subject: can't get tomcat to compile...servlets. hi, i'm new to servlets and tomcat. i've installed tomcat with apache 1.3.12. it serves servlets and jsp's but it does not compile them. i have to precompile them everytime i make changes. i'm using jdk1.2.2 for linux (redhat 6.2). where do i have to specify the compiler path. i have set the environment vars. TOMCAT_HOME and JAVA_HOME. thanks. parvez
IIS and client certificates
I am using Tomcat 3.2 beta7 with an IIS web server. My servlet needs the client certificate. I have configured the redirector, and in my servlet I can see the following request attributes: HTTPS_SERVER_SUBJECT HTTPS_SERVER_ISSUER CERT_ISSUER HTTPS_KEYSIZE HTTPS_SECRETKEYSIZE CERT_SERIALNUMBER CERT_COOKIE CERT_SUBJECT CERT_FLAGS How can I get the actual certificate? When I redirect from Apache to Tomcat, using AJP13, I get a request attribute containing the X509 certificate. I need the same functionality from IIS. Does it exist? (I'm willing to modify the redirector, if anyone knows how to actually get the certificate from IIS.) Many thanks, Barbara Nelson.