svn commit: r836113 - in /tomcat/trunk: java/org/apache/tomcat/util/http/ test/org/apache/tomcat/util/http/ webapps/docs/config/

2009-11-13 Thread markt
Author: markt Date: Sat Nov 14 03:47:48 2009 New Revision: 836113 URL: http://svn.apache.org/viewvc?rev=836113&view=rev Log: More cookie refactoring - new support class for common elements of parsing and writing - better consistency between parsing and writing - remove unused code - reduce vis

svn commit: r836103 - /tomcat/trunk/java/org/apache/tomcat/util/buf/MessageBytes.java

2009-11-13 Thread markt
Author: markt Date: Sat Nov 14 02:48:51 2009 New Revision: 836103 URL: http://svn.apache.org/viewvc?rev=836103&view=rev Log: Correct comment Modified: tomcat/trunk/java/org/apache/tomcat/util/buf/MessageBytes.java Modified: tomcat/trunk/java/org/apache/tomcat/util/buf/MessageBytes.java URL:

svn commit: r836102 - in /tomcat/trunk/java/org/apache: catalina/startup/ContextConfig.java jasper/compiler/TldLocationsCache.java

2009-11-13 Thread markt
Author: markt Date: Sat Nov 14 02:48:19 2009 New Revision: 836102 URL: http://svn.apache.org/viewvc?rev=836102&view=rev Log: Add TODOs as per discussion on dev list Modified: tomcat/trunk/java/org/apache/catalina/startup/ContextConfig.java tomcat/trunk/java/org/apache/jasper/compiler/TldL

Re: svn commit: r835886 - in /tomcat/trunk/java/org/apache: catalina/startup/ContextConfig.java jasper/compiler/TldLocationsCache.java

2009-11-13 Thread Mark Thomas
Filip Hanik - Dev Lists wrote: > this would be better if it was read from a file that one can simply add > on stuff. > ie, better to be configurable, not hardcoded Fair point. I'll add a TODO so it doesn't get forgotten. Mark > > Filip > > > On 11/13/2009 08:48 AM, ma...@apache.org wrote: >>

Re: svn commit: r835886 - in /tomcat/trunk/java/org/apache: catalina/startup/ContextConfig.java jasper/compiler/TldLocationsCache.java

2009-11-13 Thread Filip Hanik - Dev Lists
this would be better if it was read from a file that one can simply add on stuff. ie, better to be configurable, not hardcoded Filip On 11/13/2009 08:48 AM, ma...@apache.org wrote: Author: markt Date: Fri Nov 13 15:48:41 2009 New Revision: 835886 URL: http://svn.apache.org/viewvc?rev=835886&

svn commit: r836059 - /tomcat/tc6.0.x/trunk/STATUS.txt

2009-11-13 Thread kkolinko
Author: kkolinko Date: Fri Nov 13 23:30:04 2009 New Revision: 836059 URL: http://svn.apache.org/viewvc?rev=836059&view=rev Log: vote and proposals Modified: tomcat/tc6.0.x/trunk/STATUS.txt Modified: tomcat/tc6.0.x/trunk/STATUS.txt URL: http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/STATU

svn commit: r836045 - /tomcat/trunk/res/config.ini

2009-11-13 Thread kkolinko
Author: kkolinko Date: Fri Nov 13 22:49:09 2009 New Revision: 836045 URL: http://svn.apache.org/viewvc?rev=836045&view=rev Log: Do not offer default value for Tomcat administrator login Also change/indent some labels Modified: tomcat/trunk/res/config.ini Modified: tomcat/trunk/res/config.ini

svn commit: r836036 - /tomcat/trunk/res/tomcat.nsi

2009-11-13 Thread kkolinko
Author: kkolinko Date: Fri Nov 13 22:35:49 2009 New Revision: 836036 URL: http://svn.apache.org/viewvc?rev=836036&view=rev Log: 1. Correct some computations in "configure" Function: a) Always set initial value for $R5 b) $R4 and $R0 have to be consistent when Silent mode is used 2. Correct some me

Re: [SECURITY] CVE-2009-3555 SSL Man-In-The-Middle attack

2009-11-13 Thread Filip Hanik - Dev Lists
On 11/09/2009 09:43 AM, Mark Thomas wrote: BIO& NIO connectors using JSSE These connectors are vulnerable when renegotiation is triggered by the client or the server. This is incorrect. NIO doesn't do renegotiation. Instead it sees invalid data and times out. -

svn commit: r836028 - in /tomcat/trunk/modules/jdbc-pool: java/org/apache/tomcat/jdbc/pool/JdbcInterceptor.java java/org/apache/tomcat/jdbc/pool/ProxyConnection.java test/org/apache/tomcat/jdbc/test/T

2009-11-13 Thread fhanik
Author: fhanik Date: Fri Nov 13 22:22:50 2009 New Revision: 836028 URL: http://svn.apache.org/viewvc?rev=836028&view=rev Log: Add suspect test and also allow connections to be unwrapped Added: tomcat/trunk/modules/jdbc-pool/test/org/apache/tomcat/jdbc/test/TestSuspectTimeout.java (with pr

svn commit: r836011 - in /tomcat/trunk/modules/jdbc-pool: ./ doc/ java/org/apache/tomcat/jdbc/pool/ java/org/apache/tomcat/jdbc/pool/interceptor/ java/org/apache/tomcat/jdbc/pool/jmx/

2009-11-13 Thread fhanik
Author: fhanik Date: Fri Nov 13 21:53:13 2009 New Revision: 836011 URL: http://svn.apache.org/viewvc?rev=836011&view=rev Log: Implement suspectTimeout to allow JMX notifications and log events to take place if a connection is checked out for too long. But don't abandon/close the connection. Mod

svn commit: r835974 - in /tomcat/trunk/modules/jdbc-pool: doc/jdbc-pool.xml java/org/apache/tomcat/jdbc/pool/JdbcInterceptor.java java/org/apache/tomcat/jdbc/pool/PoolProperties.java

2009-11-13 Thread fhanik
Author: fhanik Date: Fri Nov 13 20:12:32 2009 New Revision: 835974 URL: http://svn.apache.org/viewvc?rev=835974&view=rev Log: Use a safe default of the useEquals, works on any VM. Modified: tomcat/trunk/modules/jdbc-pool/doc/jdbc-pool.xml tomcat/trunk/modules/jdbc-pool/java/org/apache/to

DO NOT REPLY [Bug 48193] JSP Data truncated

2009-11-13 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=48193 Mark Thomas changed: What|Removed |Added Status|NEW |RESOLVED Resolution|

DO NOT REPLY [Bug 48193] New: JSP Data truncated

2009-11-13 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=48193 Summary: JSP Data truncated Product: Tomcat 6 Version: 6.0.20 Platform: PC OS/Version: Windows Vista Status: NEW Severity: major Priority: P2 Compone

Re: SPNEGO/NEGOTIATE implementation for Apache Geronimo

2009-11-13 Thread Costin Manolache
On Fri, Nov 13, 2009 at 6:44 AM, Mark Thomas wrote: > Ashish Jain wrote: > > > 4) Does this require code changes to BasicAuthenticator > FormAuthenticator, > > AuthenticatorBase of tomcat. > > Basic and form - no. Base - maybe. > > > Please provide your comment and suggestions. > > My instinct (t

svn commit: r835886 - in /tomcat/trunk/java/org/apache: catalina/startup/ContextConfig.java jasper/compiler/TldLocationsCache.java

2009-11-13 Thread markt
Author: markt Date: Fri Nov 13 15:48:41 2009 New Revision: 835886 URL: http://svn.apache.org/viewvc?rev=835886&view=rev Log: Add Apple J2SE runtime jars to those we skip when scanning for TLDs and web fragments Modified: tomcat/trunk/java/org/apache/catalina/startup/ContextConfig.java to

[Tomcat Wiki] Update of "FAQ/CharacterEncoding" by Chri stopherSchultz

2009-11-13 Thread Apache Wiki
Dear Wiki user, You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change notification. The "FAQ/CharacterEncoding" page has been changed by ChristopherSchultz. http://wiki.apache.org/tomcat/FAQ/CharacterEncoding?action=diff&rev1=9&rev2=10 -

DO NOT REPLY [Bug 47510] sessionId is not generated when switch between clusters

2009-11-13 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=47510 Barry changed: What|Removed |Added CC||bmo...@systemax.com -- Configure bugmail:

DO NOT REPLY [Bug 47510] sessionId is not generated when switch between clusters

2009-11-13 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=47510 Barry changed: What|Removed |Added Status|RESOLVED|REOPENED Resolution|INVALID

Re: SPNEGO/NEGOTIATE implementation for Apache Geronimo

2009-11-13 Thread Mark Thomas
Ashish Jain wrote: > 4) Does this require code changes to BasicAuthenticator FormAuthenticator, > AuthenticatorBase of tomcat. Basic and form - no. Base - maybe. > Please provide your comment and suggestions. My instinct (that may be wrong) is that you'll need a new authenticator. If you get th

Re: Cookie issues

2009-11-13 Thread Mark Thomas
Remy Maucherat wrote: > On Thu, 2009-11-12 at 16:03 -0500, Mark Thomas wrote: >> I've done some more digging and I think I have found what was causing this. >> I'll >> have a fix for trunk shortly and (after some testing) I'll re-propose. > > No, what I meant is that, if you want to go the strict

svn commit: r835854 - /tomcat/tc6.0.x/trunk/res/tomcat.nsi

2009-11-13 Thread kkolinko
Author: kkolinko Date: Fri Nov 13 14:05:07 2009 New Revision: 835854 URL: http://svn.apache.org/viewvc?rev=835854&view=rev Log: Update copyright year Modified: tomcat/tc6.0.x/trunk/res/tomcat.nsi Modified: tomcat/tc6.0.x/trunk/res/tomcat.nsi URL: http://svn.apache.org/viewvc/tomcat/tc6.0.x/

DO NOT REPLY [Bug 48191] Problem with mod_jk 1.2.28 - Can not render up the page on browser after a long wait

2009-11-13 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=48191 --- Comment #2 from Rainer Jung 2009-11-13 03:27:09 UTC --- This looks like mod_jk received the full response from the backend and could successfully send it to the client. Unfortunately the problem you originally reported on the users li

DO NOT REPLY [Bug 48191] Problem with mod_jk 1.2.28 - Can not render up the page on browser after a long wait

2009-11-13 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=48191 Rainer Jung changed: What|Removed |Added Component|Other Modules |mod_jk Version|2.0.52

DO NOT REPLY [Bug 48158] warn that "per directory client certificate authentication" is harmful

2009-11-13 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=48158 --- Comment #6 from Ralf Hauser 2009-11-13 01:40:04 UTC --- see also Bug 48192 -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for

DO NOT REPLY [Bug 48192] New: Allow to specify the SSLSocket class in connector tag of server.xml

2009-11-13 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=48192 Summary: Allow to specify the SSLSocket class in connector tag of server.xml Product: Tomcat 6 Version: unspecified Platform: All OS/Version: All Status: NEW

SPNEGO/NEGOTIATE implementation for Apache Geronimo

2009-11-13 Thread Ashish Jain
Hi All, I am working on an implementation for SPENGO/NEGOTIATE implementation for geronimo. I have done some research on this and have come to the following conclusion to develop one implementation for geronimo. 1) Browser access a secured resource 2) Our custom authenticator will respond with 4

Re: Problem with mod_jk 1.2.28 - Can not render up the page on browser after a long wait

2009-11-13 Thread thomas2004
Sorry, I thought here is the bug report. You can delete my post. Rainer Jung-3 wrote: > > Thomas, > > please do not cross-post. The discussion is pretty well going on on your > post on the users list. See the latest answers you got on your posted > test case and logs, which show that for t