huge "info" messages about mod_jk

2011-02-14 Thread Yu Kikuchi
Hello All.

My Environment:
 RHEL 5.3
 Apache 2.2.11
 mod_jk 1.2.30
 JBoss 5.0.0 GA

I have changed the configuration from using mod_proxy_ajp to mod_jk.
When I restarted Apache, huge "info" messages were put out to the mod_jk's log 
like following (over 200 lines!)

"mod_jk.log"
[Tue Feb 08 21:03:22.392 2011] [7464:47961817146464] [info] 
ajp_send_request::jk_ajp_common.c (1574): (node1) all
endpoints are disconnected, detected by connect check (1), cping (0), send (0)

Now still these messages are output about 10 lines per a day.

It seems that mod_jk checks whether the connection is opened or not before 
sending the request to Tomcat,
and if the connection is closed, the info message will be output and retry to 
connect.

Why such huge messages would be output?
I think mod_jk could have a keep-alive connection, so I wonder why such kinds 
of message appears frequently...
Does anyone have any infomation?

"workers.properties"
worker.list=node1
worker.node1.type=ajp13
worker.node1.host=xxx.xxx.48.130
worker.node1.port=8009

Best regards,


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Tomcat 5.5.23 with SSL

2011-02-14 Thread Crypto Sal

Hi Alexander,

As Mark has previously mentioned, there's no entry type of 
'privateKeyEntry' which is *required* for the certificate to work. I 
suspect what has happened is that you might not have been in the 
directory with your keystore file or you did not specify the right 
keystore as keytool is a little sneaky in this regard. If the keystore 
doesn't exist in the location that is specified, it will create it for 
you, but it will of course be missing the Private Key. I see this happen 
all too often. See if you have another 'keystore.kdb' file on your 
system and then try installing your certificate into it.


--Crypto.Sal




On 02/14/2011 12:52 PM, Mark Thomas wrote:

On 14/02/2011 15:45, Alexander Mills wrote:

For reference,

keytool -list -keystore keystore.kdb
[root@localhost tomcat5]# keytool -list -keystore keystore.kdb
Enter keystore password:

Keystore type: JKS
Keystore provider: SUN

Your keystore contains 1 entry

tomcat, Feb 14, 2011, trustedCertEntry,
Certificate fingerprint (MD5):
FC:XX:XX:87:74:CF:29:7A:F1:XX:9B:6E:18:32:7E:XX


That is just a certificate - there is no key so that is never going to work.

Mark



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org





-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Issues with Tomcat 6.0 & Renewing SSL cert using keytool

2011-02-14 Thread Crypto Sal

Hi Sean,

Have you tried to specify just "TLS" or "SSL" for the sslProtocol? You 
presently have this set at "TLSv1", which I do not believe is valid.


http://tomcat.apache.org/tomcat-6.0-doc/config/http.html

--Sal


On 02/14/2011 02:46 PM, Sean Killeen wrote:

It doesn't -- it tells me that a certificate already exists with that alias,
and the import fails.

--
Sean


On Mon, Feb 14, 2011 at 12:54 PM, Mark Thomas  wrote:


On 14/02/2011 14:03, Sean Killeen wrote:

The next step seems to throw tomcat off. I believe I need to replace the
"tomcat" alias certificate. Barring a replace function in keytool (which

I

don't think exists, though I could be wrong), I think this means I have

to

delete the old "tomcat" certificate and replace it with the new one.

That will delete the key. I'm fairly sure you can just import the new
certificate and it will replace old one.

Mark



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org






-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Replicate session-object after values in object has been changed

2011-02-14 Thread Martin Grotzke

memcached-session-manager detects session modification as you describe it.
It's a custom session manager that keeps sessions (additionally) in
memcached:
http:// code.google.com/p/memcached-session-manager

Cheers,
Martin



Thomas Andraschko wrote:
> 
> Thanks for your answer.
> Yep that works but it isn't really nice if you are working with managed
> beans from JSF or other DI containers.
> Does other Servlet containers support this kind of replication or is it
> really the only way to put/remove the object to/from the session map?
> It is possible to develop a valve or interceptor to check specified
> entries in the session map and replicate them again? (sorry, i don't know
> the architecture very well)
> 
> 
> --- Mark Thomas  schrieb am Mo, 14.2.2011:
> 
>> Von: Mark Thomas 
>> Betreff: Re: Replicate session-object after values in object has been
>> changed
>> An: "Tomcat Users List" 
>> Datum: Montag, 14. Februar, 2011 19:09 Uhr
>> On 14/02/2011 15:57, Thomas
>> Andraschko wrote:
>> > Is it possible that Tomcat will automatically check
>> the SessionMap entries after each request if any value in a
>> entry has been changed? 
>> No.
>> 
>> Tomcat adding or removing an object from the session will
>> trigger
>> replication. Modifying the object directly will not trigger
>> replication.
>> 
>> You can try re-adding the object to the session. That
>> should trigger
>> replication.
>> 
>> Mark
>> 
>> 
>> 
>> -
>> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>> For additional commands, e-mail: users-h...@tomcat.apache.org
>> 
>> 
> 
> 
> 
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
> 
> 
> 

-- 
View this message in context: 
http://old.nabble.com/Replicate-session-object-after-values-in-object-has-been-changed-tp30923039p30927143.html
Sent from the Tomcat - User mailing list archive at Nabble.com.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Tomcat 7.0.8 maven repository

2011-02-14 Thread George Vagenas
Thanks Mark

On Sun, Feb 13, 2011 at 12:32 PM, George Vagenas  wrote:

> Hi guys,
>
> I am trying to locate the tomcat 7.0.8 artifacts with no success. I tried
> http://repo2.maven.org/maven2/org/apache/tomcat/ but no luck there.
>
> Can you please shed some light here?
>
> Regards
>
> --
> George Vagenas
>
>


-- 
George Vagenas


Re: Issues with Tomcat 6.0 & Renewing SSL cert using keytool

2011-02-14 Thread Sean Killeen
It doesn't -- it tells me that a certificate already exists with that alias,
and the import fails.

--
Sean


On Mon, Feb 14, 2011 at 12:54 PM, Mark Thomas  wrote:

> On 14/02/2011 14:03, Sean Killeen wrote:
> > The next step seems to throw tomcat off. I believe I need to replace the
> > "tomcat" alias certificate. Barring a replace function in keytool (which
> I
> > don't think exists, though I could be wrong), I think this means I have
> to
> > delete the old "tomcat" certificate and replace it with the new one.
>
> That will delete the key. I'm fairly sure you can just import the new
> certificate and it will replace old one.
>
> Mark
>
>
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
>


Re: Replicate session-object after values in object has been changed

2011-02-14 Thread Thomas Andraschko
Thanks for your answer.
Yep that works but it isn't really nice if you are working with managed beans 
from JSF or other DI containers.
Does other Servlet containers support this kind of replication or is it really 
the only way to put/remove the object to/from the session map?
It is possible to develop a valve or interceptor to check specified entries in 
the session map and replicate them again? (sorry, i don't know the architecture 
very well)


--- Mark Thomas  schrieb am Mo, 14.2.2011:

> Von: Mark Thomas 
> Betreff: Re: Replicate session-object after values in object has been changed
> An: "Tomcat Users List" 
> Datum: Montag, 14. Februar, 2011 19:09 Uhr
> On 14/02/2011 15:57, Thomas
> Andraschko wrote:
> > Is it possible that Tomcat will automatically check
> the SessionMap entries after each request if any value in a
> entry has been changed? 
> No.
> 
> Tomcat adding or removing an object from the session will
> trigger
> replication. Modifying the object directly will not trigger
> replication.
> 
> You can try re-adding the object to the session. That
> should trigger
> replication.
> 
> Mark
> 
> 
> 
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
> 
> 



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Some useful information which some of you may find of use

2011-02-14 Thread Reinwald Warapen
We are in the process of migration our servers from Resin Pro to Tomcat 
6.0.32.Have documented some changes/issues/information which may be of 
use to some of you. So thought of sharing it with you all


http://www.reinwaldwarapen.com/2011/02/how-hell-did-that-value-come-in-cookie.html

http://www.reinwaldwarapen.com/2011/01/turned-on-jasper-validation-in-intellij.html

http://www.reinwaldwarapen.com/2011/01/storing-and-sharing-sessions-among.html

http://www.reinwaldwarapen.com/2011/01/sticky-sessions-or-non-sticky-sessions.html


Thanks

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Replicate session-object after values in object has been changed

2011-02-14 Thread Mark Thomas
On 14/02/2011 15:57, Thomas Andraschko wrote:
> Is it possible that Tomcat will automatically check the SessionMap entries 
> after each request if any value in a entry has been changed? 
No.

Tomcat adding or removing an object from the session will trigger
replication. Modifying the object directly will not trigger replication.

You can try re-adding the object to the session. That should trigger
replication.

Mark



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



RE: Tomcat 5.5.23 with SSL

2011-02-14 Thread Shaun Farrugia
I believe this information might help - apologies if this was tried already

http://tomcat.apache.org/tomcat-5.5-doc/ssl-howto.html#Configuration


-Original Message-
From: Mark Thomas [mailto:ma...@apache.org] 
Sent: Monday, February 14, 2011 12:52 PM
To: Tomcat Users List
Subject: Re: Tomcat 5.5.23 with SSL

On 14/02/2011 15:45, Alexander Mills wrote:
> For reference,
> 
> keytool -list -keystore keystore.kdb
> [root@localhost tomcat5]# keytool -list -keystore keystore.kdb Enter 
> keystore password:
> 
> Keystore type: JKS
> Keystore provider: SUN
> 
> Your keystore contains 1 entry
> 
> tomcat, Feb 14, 2011, trustedCertEntry, Certificate fingerprint (MD5):
> FC:XX:XX:87:74:CF:29:7A:F1:XX:9B:6E:18:32:7E:XX


That is just a certificate - there is no key so that is never going to work.

Mark



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Issues with Tomcat 6.0 & Renewing SSL cert using keytool

2011-02-14 Thread Mark Thomas
On 14/02/2011 14:03, Sean Killeen wrote:
> The next step seems to throw tomcat off. I believe I need to replace the
> "tomcat" alias certificate. Barring a replace function in keytool (which I
> don't think exists, though I could be wrong), I think this means I have to
> delete the old "tomcat" certificate and replace it with the new one.

That will delete the key. I'm fairly sure you can just import the new
certificate and it will replace old one.

Mark



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Tomcat 5.5.23 with SSL

2011-02-14 Thread Mark Thomas
On 14/02/2011 15:45, Alexander Mills wrote:
> For reference,
> 
> keytool -list -keystore keystore.kdb
> [root@localhost tomcat5]# keytool -list -keystore keystore.kdb
> Enter keystore password:
> 
> Keystore type: JKS
> Keystore provider: SUN
> 
> Your keystore contains 1 entry
> 
> tomcat, Feb 14, 2011, trustedCertEntry,
> Certificate fingerprint (MD5):
> FC:XX:XX:87:74:CF:29:7A:F1:XX:9B:6E:18:32:7E:XX


That is just a certificate - there is no key so that is never going to work.

Mark



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Tomcat 7.0.8 maven repository

2011-02-14 Thread Mark Thomas
On 14/02/2011 17:31, Martin Vaněk wrote:
> Hi,
> I missing 7.0.8 too...
> And what repo is hosting org.eclipse.jdt.core.compiler:ecj:3.6 used in
> tomcat-jasper? Last version in central is 3.5.1

https://issues.apache.org/bugzilla/show_bug.cgi?id=50604

Mark



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Tomcat 5.5.28 Servlet Spec 2.3 - When does Tomcat actually service requests?

2011-02-14 Thread Konstantin Kolinko
The webapp won't service the requests, because it is "unavailable",
until setAvailable(true) is called at the end of its start().

Connectors are start()'ed after the Engine, and thus after all the webapps.

2011/2/14 Shaun Farrugia :
> I'm not asking if they will or will not be loaded.  I am wondering if http 
> requests to a JSP page are blocked before the servlets are loaded.
>
>
>
> -Original Message-
> From: Konstantin Kolinko [mailto:knst.koli...@gmail.com]
> Sent: Monday, February 14, 2011 12:14 PM
> To: Tomcat Users List
> Subject: Re: Tomcat 5.5.28 Servlet Spec 2.3 - When does Tomcat actually 
> service requests?
>
> 2011/2/14 Shaun Farrugia :
>>  I would think the same but I'm wondering that Tomcat is doing.  Would it 
>> allow http requests to a JSP to be serviced before ALL of the servlets 
>> marked as load-on-startup are loaded?
>>
>
> They will be loaded, but any failure will just mark this specific servlet as 
> unavailable and not webapp as a whole.
>
> See loadOnStartup(..) and setAvailable(true) calls in StandardContext#start()
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
>

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Tomcat 7.0.8 maven repository

2011-02-14 Thread Martin Vaněk

Hi,
I missing 7.0.8 too...
And what repo is hosting org.eclipse.jdt.core.compiler:ecj:3.6 used in 
tomcat-jasper? Last version in central is 3.5.1


Martin

On 13.2.2011 11:32, George Vagenas wrote:

Hi guys,

I am trying to locate the tomcat 7.0.8 artifacts with no success. I tried
http://repo2.maven.org/maven2/org/apache/tomcat/ but no luck there.

Can you please shed some light here?

Regards



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



RE: Tomcat 5.5.28 Servlet Spec 2.3 - When does Tomcat actually service requests?

2011-02-14 Thread Shaun Farrugia
I'm not asking if they will or will not be loaded.  I am wondering if http 
requests to a JSP page are blocked before the servlets are loaded.



-Original Message-
From: Konstantin Kolinko [mailto:knst.koli...@gmail.com] 
Sent: Monday, February 14, 2011 12:14 PM
To: Tomcat Users List
Subject: Re: Tomcat 5.5.28 Servlet Spec 2.3 - When does Tomcat actually service 
requests?

2011/2/14 Shaun Farrugia :
>  I would think the same but I'm wondering that Tomcat is doing.  Would it 
> allow http requests to a JSP to be serviced before ALL of the servlets marked 
> as load-on-startup are loaded?
>

They will be loaded, but any failure will just mark this specific servlet as 
unavailable and not webapp as a whole.

See loadOnStartup(..) and setAvailable(true) calls in StandardContext#start()

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Tomcat 5.5.28 Servlet Spec 2.3 - When does Tomcat actually service requests?

2011-02-14 Thread Konstantin Kolinko
2011/2/14 Shaun Farrugia :
>  I would think the same but I'm wondering that Tomcat is doing.  Would it 
> allow http requests to a JSP to be serviced before ALL of the servlets marked 
> as load-on-startup are loaded?
>

They will be loaded, but any failure will just mark this specific
servlet as unavailable and not webapp as a whole.

See loadOnStartup(..) and setAvailable(true) calls in StandardContext#start()

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Replicate session-object after values in object has been changed

2011-02-14 Thread Thomas Andraschko
Hi,

i have a simple Tomcat (7.0.8) cluster 
(org.apache.catalina.ha.tcp.SimpleTcpCluster without other options) with a 
simple Myfaces2.0.3 App for testing purpose.

If JSF creates a SessionBean or i manually put an object to the SessionMap, 
Tomcat replicates this bean/object to all nodes.
The problem is, if i change any value in this objects, Tomcat does not 
replicate the changed objects.

Is it possible that Tomcat will automatically check the SessionMap entries 
after each request if any value in a entry has been changed? 

Best regards
Thomas




-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Tomcat 5.5.23 with SSL

2011-02-14 Thread Alexander Mills

For reference,

keytool -list -keystore keystore.kdb
[root@localhost tomcat5]# keytool -list -keystore keystore.kdb
Enter keystore password:

Keystore type: JKS
Keystore provider: SUN

Your keystore contains 1 entry

tomcat, Feb 14, 2011, trustedCertEntry,
Certificate fingerprint (MD5): FC:XX:XX:87:74:CF:29:7A:F1:XX:9B:6E: 
18:32:7E:XX




On 14 Feb 2011, at 15:38, Shaun Farrugia wrote:

Is the keystore file available to be read/executed by the user  
running tomcat?



-Original Message-
From: Alexander Mills [mailto:alexander.mi...@psycle.com]
Sent: Monday, February 14, 2011 8:04 AM
To: users@tomcat.apache.org
Subject: Tomcat 5.5.23 with SSL

Hi

I'm having issues with using a signed SSL certificate from  
thawte.com with tomcat 5.5.23.


My server.xml contains the following:




/var/log/tomcat5/catalina.out reports the following:

LifecycleException:  service.getName(): "Catalina";  Protocol  
handler start failed: java.io.IOException: Alias name tomcat does  
not identify a key entry


Regardless of what alias name I add to the keystore and modify in my  
server.xml, I always get this error.


Does anyone have a suggestion as to why this happens?

Regards

Alexander Mills


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org




-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Tomcat 5.5.23 with SSL

2011-02-14 Thread Alexander Mills

Yes,
-rwxr-xr-x  1 tomcat tomcat 1098 Feb 14 12:32 keystore.kdb

On 14 Feb 2011, at 15:38, Shaun Farrugia wrote:

Is the keystore file available to be read/executed by the user  
running tomcat?



-Original Message-
From: Alexander Mills [mailto:alexander.mi...@psycle.com]
Sent: Monday, February 14, 2011 8:04 AM
To: users@tomcat.apache.org
Subject: Tomcat 5.5.23 with SSL

Hi

I'm having issues with using a signed SSL certificate from  
thawte.com with tomcat 5.5.23.


My server.xml contains the following:




/var/log/tomcat5/catalina.out reports the following:

LifecycleException:  service.getName(): "Catalina";  Protocol  
handler start failed: java.io.IOException: Alias name tomcat does  
not identify a key entry


Regardless of what alias name I add to the keystore and modify in my  
server.xml, I always get this error.


Does anyone have a suggestion as to why this happens?

Regards

Alexander Mills


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org




-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



RE: Tomcat 5.5.23 with SSL

2011-02-14 Thread Shaun Farrugia
Is the keystore file available to be read/executed by the user running tomcat?


-Original Message-
From: Alexander Mills [mailto:alexander.mi...@psycle.com] 
Sent: Monday, February 14, 2011 8:04 AM
To: users@tomcat.apache.org
Subject: Tomcat 5.5.23 with SSL

Hi

I'm having issues with using a signed SSL certificate from thawte.com with 
tomcat 5.5.23.

My server.xml contains the following:

 


/var/log/tomcat5/catalina.out reports the following:

LifecycleException:  service.getName(): "Catalina";  Protocol handler start 
failed: java.io.IOException: Alias name tomcat does not identify a key entry

Regardless of what alias name I add to the keystore and modify in my 
server.xml, I always get this error.

Does anyone have a suggestion as to why this happens?

Regards

Alexander Mills


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



RE: Tomcat 5.5.28 Servlet Spec 2.3 - When does Tomcat actually service requests?

2011-02-14 Thread Shaun Farrugia
 I would think the same but I'm wondering that Tomcat is doing.  Would it allow 
http requests to a JSP to be serviced before ALL of the servlets marked as 
load-on-startup are loaded?

-Original Message-
From: Mark Thomas [mailto:ma...@apache.org] 
Sent: Saturday, February 12, 2011 1:04 PM
To: Tomcat Users List
Subject: Re: Tomcat 5.5.28 Servlet Spec 2.3 - When does Tomcat actually service 
requests?

On 11/02/2011 22:10, Shaun Farrugia wrote:
> I know that per the Servlet Spec 2.3 that Tomcat will start up the Listeners 
> first and then start up any servlets.  However, I am unsure (the spec is 
> ambigious) on when the Servlet container is supposed to start servicing 
> incoming requests.
> 
> I have a Servlet that has a load-on-startup  setting of 2 and this 
> initializes some application settings.  Granted, the best avenue for this is 
> a Listener  I'm wondering if Tomcat will service HTTP requests before or 
> after the any load-on-startup Servlets are loaded.  Specically Tomcat 5.5.28 
> to 5.5.31.

Logically, load-on-startup servlets have to be loaded before requests can be 
serviced.

Mark



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Issues with Tomcat 6.0 & Renewing SSL cert using keytool

2011-02-14 Thread Sean Killeen
Hi all,

I'm hoping someone has run into this problem before.

I'm using VeriSign certs and have imported a certificate correctly before
using keytool. However, the certificate we were using expired, and we
obtained a replacement.

Importing the replacement appears to be more difficult.

Verisign's intermediate CA appears to be different than before, and now uses
a primary and secondary. So initially I had one intermediate CA and one
tomcat certificate.

I then imported the two new CAs (alias "intermediatecaprimary" and
"intermediatecasecondary") -- this worked without error.

The next step seems to throw tomcat off. I believe I need to replace the
"tomcat" alias certificate. Barring a replace function in keytool (which I
don't think exists, though I could be wrong), I think this means I have to
delete the old "tomcat" certificate and replace it with the new one.

Doing this (using the command "keytool -delete -alias tomcat -keystore
.keystore" and then "keytool -import -alias tomcat -keyalg RSA -keystore
.keystore -file D:\keystore\Certificates\tomcat.cer") appears to complete
without error.

However, the next time I start Tomcat (running as a service), the CPU &
memory spin upward until the machine is barely accessible. Tomcat doesn't
start up.

In the Tomcat log file the following can be seen:

*Feb 14, 2011 8:45:07 AM org.apache.tomcat.util.net.JIoEndpoint$Acceptor run
*
*SEVERE: Socket accept failed*
*java.net.SocketException: SSL handshake errorjavax.net.ssl.SSLException: No
available certificate or key corresponds to the SSL cipher suites which are
enabled.*
* at
org.apache.tomcat.util.net.jsse.JSSESocketFactory.acceptSocket(JSSESocketFactory.java:149)
*
* at
org.apache.tomcat.util.net.JIoEndpoint$Acceptor.run(JIoEndpoint.java:309)*
* at java.lang.Thread.run(Thread.java:619)*

I'm sure this is just a mistake I'm making somewhere either in keytool or my
Tomcat setup, but it's worked fine until trying to use this replacement
cert.

One possibility: Do I need to specify a keylength when specifying the
keyalg, or is there a default?

My Tomcat connector is as follows (password redacted):

* *

Thanks in advance for any help you can give!
--
Sean


Tomcat 5.5.23 with SSL

2011-02-14 Thread Alexander Mills

Hi

I'm having issues with using a signed SSL certificate from thawte.com  
with tomcat 5.5.23.


My server.xml contains the following:




/var/log/tomcat5/catalina.out reports the following:

LifecycleException:  service.getName(): "Catalina";  Protocol handler  
start failed: java.io.IOException: Alias name tomcat does not identify  
a key entry


Regardless of what alias name I add to the keystore and modify in my  
server.xml, I always get this error.


Does anyone have a suggestion as to why this happens?

Regards

Alexander Mills


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: IIS6 not forwarding requests to Tomcat 5.5

2011-02-14 Thread Sebastian Szuber
Unfortunately this doesn't work too.

-- Registry:
[HKEY_LOCAL_MACHINE\SOFTWARE\Apache Software Foundation\Jakarta Isapi
Redirector\1.0]
"extension_uri"="/jakarta/isapi_redirect.dll"
"log_file"="E:\\tomcat-connector\\isapi.log"
"log_level"="debug"
"worker_file"="E:\\tomcat-connector\\workers.properties"
"worker_mount_file"="E:\\tomcat-connector\\uriworkermap.properties"

-- workers.properties
# Define 1 worker
worker.list=worker2,jkstatus
# Set properties for worker2 (ajp13)
worker.worker2.type=ajp13
worker.worker2.host=159.30.79.212
worker.worker2.port=8009
worker.worker2.lbfactor=1
worker.worker2.connection_pool_timeout=600
worker.worker2.socket_keepalive=1
worker.worker2.socket_timeout=60
# Define a 'jkstatus' worker using status
worker.jkstatus.type=status

-- uriworkermap.properties
/analytics/*=worker2
/jkmanager/*=jkstatus

isapi.log when calling http://localhost/jkmanager/ (IIS return 404 status)
[Mon Feb 14 12:46:39.060 2011] [7852:740] [debug]
jk_set_time_fmt::jk_util.c (459): Pre-processed log time stamp format
is '[%a %b %d %H:%M:%S.000 %Y] '
[Mon Feb 14 12:46:39.060 2011] [7852:740] [info]
init_jk::jk_isapi_plugin.c (2562): Starting
Jakarta/ISAPI/isapi_redirector/1.2.31 (1026297)

[Mon Feb 14 12:46:39.060 2011] [7852:740] [debug]
init_jk::jk_isapi_plugin.c (2580): Detected IIS version 6.0

[Mon Feb 14 12:46:39.075 2011] [7852:740] [debug]
init_jk::jk_isapi_plugin.c (2585): Using registry.

[Mon Feb 14 12:46:39.075 2011] [7852:740] [debug]
init_jk::jk_isapi_plugin.c (2588): Using log file
E:\tomcat-connector\isapi.log.

[Mon Feb 14 12:46:39.075 2011] [7852:740] [debug]
init_jk::jk_isapi_plugin.c (2589): Using log level 1.

[Mon Feb 14 12:46:39.075 2011] [7852:740] [debug]
init_jk::jk_isapi_plugin.c (2590): Using log rotation time 0 seconds.

[Mon Feb 14 12:46:39.075 2011] [7852:740] [debug]
init_jk::jk_isapi_plugin.c (2591): Using log file size 0 bytes.

[Mon Feb 14 12:46:39.091 2011] [7852:740] [debug]
init_jk::jk_isapi_plugin.c (2593): Using extension uri
/jakarta/isapi_redirect.dll.

[Mon Feb 14 12:46:39.091 2011] [7852:740] [debug]
init_jk::jk_isapi_plugin.c (2594): Using worker file
E:\tomcat-connector\workers.properties.

[Mon Feb 14 12:46:39.091 2011] [7852:740] [debug]
init_jk::jk_isapi_plugin.c (2595): Using worker mount file
E:\tomcat-connector\uriworkermap.properties.

[Mon Feb 14 12:46:39.091 2011] [7852:740] [debug]
init_jk::jk_isapi_plugin.c (2597): Using rewrite rule file .

[Mon Feb 14 12:46:39.107 2011] [7852:740] [debug]
init_jk::jk_isapi_plugin.c (2599): Using uri select 3.

[Mon Feb 14 12:46:39.107 2011] [7852:740] [debug]
init_jk::jk_isapi_plugin.c (2600): Using no chunked encoding.

[Mon Feb 14 12:46:39.107 2011] [7852:740] [debug]
init_jk::jk_isapi_plugin.c (2602): Using notification event
SF_NOTIFY_AUTH_COMPLETE (0x0400)

[Mon Feb 14 12:46:39.107 2011] [7852:740] [debug]
init_jk::jk_isapi_plugin.c (2612): Using uri header
TOMCATURI6A6B:.

[Mon Feb 14 12:46:39.107 2011] [7852:740] [debug]
init_jk::jk_isapi_plugin.c (2613): Using query header
TOMCATQUERY6A6B:.

[Mon Feb 14 12:46:39.107 2011] [7852:740] [debug]
init_jk::jk_isapi_plugin.c (2614): Using worker header
TOMCATWORKER6A6B:.

[Mon Feb 14 12:46:39.107 2011] [7852:740] [debug]
init_jk::jk_isapi_plugin.c (2615): Using worker index
TOMCATWORKERIDX6A6B:.

[Mon Feb 14 12:46:39.122 2011] [7852:740] [debug]
init_jk::jk_isapi_plugin.c (2616): Using translate header
TOMCATTRANSLATE6A6B:.

[Mon Feb 14 12:46:39.122 2011] [7852:740] [debug]
init_jk::jk_isapi_plugin.c (2617): Using a default of 250 connections
per pool.

[Mon Feb 14 12:46:39.138 2011] [7852:740] [debug]
jk_map_read_property::jk_map.c (491): Adding property '/analytics/*'
with value 'worker2' to map.

[Mon Feb 14 12:46:39.138 2011] [7852:740] [debug]
jk_map_read_property::jk_map.c (491): Adding property '/jkmanager/*'
with value 'jkstatus' to map.

[Mon Feb 14 12:46:39.153 2011] [7852:740] [debug]
uri_worker_map_load::jk_uri_worker_map.c (1102): Loading urimaps from
E:\tomcat-connector\uriworkermap.properties with reload check interval
60 seconds

[Mon Feb 14 12:46:39.153 2011] [7852:740] [debug]
uri_worker_map_add::jk_uri_worker_map.c (720): wildchar rule
'/analytics/*=worker2' source 'uriworkermap' was added

[Mon Feb 14 12:46:39.153 2011] [7852:740] [debug]
uri_worker_map_add::jk_uri_worker_map.c (720): wildchar rule
'/jkmanager/*=jkstatus' source 'uriworkermap' was added

[Mon Feb 14 12:46:39.153 2011] [7852:740] [debug]
uri_worker_map_dump::jk_uri_worker_map.c (171): uri map dump after
file load: index=0 file='E:\tomcat-connector\uriworkermap.properties'
reject_unsafe=0 reload=60 modified=1297424775 checked=1297687599

[Mon Feb 14 12:46:39.153 2011] [7852:740] [debug]
uri_worker_map_dump::jk_uri_worker_map.c (176): generation 0: size=0
nosize=0 capacity=0

[Mon Feb 14 12:46:39.169 2011] [7852:740] [debug]
uri_worker_map_dump::jk_uri_worker_map.c (176): generation 1: size=2
nosize=0 capacity=4

[Mon Feb 14 12:46:39.169 2011] [7852:740]

Re: Performance Tuning Tomcat 7...

2011-02-14 Thread Tony Anecito
All I am showing is a very long chain of method calls for Jersey that seem to 
compose most of the overall time.

I suspect that the tests Mark was talking about where he got 50k requests did 
not have anything like what I am seeing.
Just shows Jersey is not capable of high throughput.

-Tony



- Original Message 
From: Pid 
To: Tomcat Users List 
Sent: Mon, February 14, 2011 3:39:04 AM
Subject: Re: Performance Tuning Tomcat 7...

On 2/13/11 8:15 PM, Tony Anecito wrote:
> Hi Mark,
> 
> Here is the link to the screenshot I tried to send as an attachement.
> 
> http://www.myuniportal.com/tomcatjerseyservletprofile.jpg

What are we looking for here?

I don't know if there's any optimisation possible in the
SocketProcessor.run() method in Tomcat.


If I were to consider what Jersey is doing, I'd look at why there's an
expensive ContainerResponse.write() call (costing 0.6ms) while it still
seems to be processing the request.


p

> - Original Message 
> From: Mark Thomas 
> To: Tomcat Users List 
> Sent: Sun, February 13, 2011 2:54:53 AM
> Subject: Re: Performance Tuning Tomcat 7...
> 
> On 13/02/2011 04:33, Tony Anecito wrote:
>> Thanks Pid.
>>
>> Odd though I did a GET with no attachments.
>> I do return a complex object but that is only the response not the request.
> 
> Pid meant that the mailing list strips attachments. We can't see the
> Visual VM output you are referring to.
> 
> Mark
> 
> 
>>
>> -Tony
>>
>>
>>
>> - Original Message 
>> From: Pid 
>> To: Tomcat Users List 
>> Sent: Sat, February 12, 2011 5:04:41 PM
>> Subject: Re: Performance Tuning Tomcat 7...
>>
>> On 2/12/11 10:23 PM, Tony Anecito wrote:
>>> I attached the screenshot of visualvm showing what I mean.
>>
>> The list strips attachments...
>>
>>
>> p


  

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Performance Tuning Tomcat 7...

2011-02-14 Thread Pid
On 2/13/11 8:15 PM, Tony Anecito wrote:
> Hi Mark,
> 
> Here is the link to the screenshot I tried to send as an attachement.
> 
> http://www.myuniportal.com/tomcatjerseyservletprofile.jpg

What are we looking for here?

I don't know if there's any optimisation possible in the
SocketProcessor.run() method in Tomcat.


If I were to consider what Jersey is doing, I'd look at why there's an
expensive ContainerResponse.write() call (costing 0.6ms) while it still
seems to be processing the request.


p

> - Original Message 
> From: Mark Thomas 
> To: Tomcat Users List 
> Sent: Sun, February 13, 2011 2:54:53 AM
> Subject: Re: Performance Tuning Tomcat 7...
> 
> On 13/02/2011 04:33, Tony Anecito wrote:
>> Thanks Pid.
>>
>> Odd though I did a GET with no attachments.
>> I do return a complex object but that is only the response not the request.
> 
> Pid meant that the mailing list strips attachments. We can't see the
> Visual VM output you are referring to.
> 
> Mark
> 
> 
>>
>> -Tony
>>
>>
>>
>> - Original Message 
>> From: Pid 
>> To: Tomcat Users List 
>> Sent: Sat, February 12, 2011 5:04:41 PM
>> Subject: Re: Performance Tuning Tomcat 7...
>>
>> On 2/12/11 10:23 PM, Tony Anecito wrote:
>>> I attached the screenshot of visualvm showing what I mean.
>>
>> The list strips attachments...
>>
>>
>> p




signature.asc
Description: OpenPGP digital signature


Re: Tomcat 6.0.29 problem

2011-02-14 Thread Mark Thomas
On 14/02/2011 07:47, Bilal Ashraf wrote:
> 
> Hi,
> 
> - I have written a servlet that reads the request from the client, process
> the request, produce the  
>   response and then write the response to
>   the client. 
> - I have deployed the servlet on tomcat 6.0.29.
> - I sent 10 batches of 100 requests each to the servlet, all the requests
> entertained successfully.
> 
> The problem is, tomcat 6.0.29 does not relase the memory of requests and
> responses even though i forcefully call the garbage collector from the
> profiler. When looked using the profiler, there were large byte arrays held
> by tomcat 6.0.29 code. In these byte arrays, there were request and
> responses that were read from client and sent in response. The memory of
> these request and response did not release even though i left the system
> running for 2-3 days.

This is by design. The buffers are re-cycled and re-used rather than
thrown away are re-created to a) reduce GC, b) reduce delays.

Mark



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: How to show the timestamp of listed file according to the user timezone?

2011-02-14 Thread Mark Thomas
On 14/02/2011 05:38, jie tang wrote:
> I place a directory in Tomcat webapps directory. I want to Tomcat list files
> under the directory.
> When I browse the file list in my browser, the file list looks like the
> following
> 
>2011-02-12_r5384_1669/   Sat, 12 Feb 2011 09:40:44 GMT
> 
> But what I need is
>2011-02-12_r5384_1669/   Sat, 12 Feb 2011 17:40:44 GMT + 08
> 
> When I type the command "date",it shows
>Mon Feb 14 13:33:45 CST 2011
> And I added the following statement to catalina.sh
>-Duser.timezone=GMT+08 \
> 
> So what should I do to get what I need?

You'll need to modify/extend the DefaultServlet to check the user's
Locale and determine the timezone from that.

Mark



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Thread Dump Analysis

2011-02-14 Thread Luca Gervasi
Hello,

tomcat 6.0.26
jvm 1.5.0_16

i'm trying to tune tomcat, avoiding some timeout i think come from the
database.

Where can i find info about thread analysis? I'm using Visual VM to see
the thread status, but so far i know:

1) TP-Processor[x] are the request handling threads
2) RMI and JMX are related to the remote JMX i'm using

All the other threads are unknown to me.

Moreover, what thread should i look at, looking for database wait?
TP-Processor?

Thanks in andvance.

See Ya

Luca

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org