[tomcat] branch 7.0.x updated: Update Tomcat 7.0.99 release date

2019-12-17 Thread violetagg
This is an automated email from the ASF dual-hosted git repository. violetagg pushed a commit to branch 7.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/7.0.x by this push: new 37c548f Update Tomcat 7.0.99 release date

[Bug 64008] Tomcat ignores default web.xml and falls back to hard-coded defaults

2019-12-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64008 --- Comment #4 from emergency.sho...@gmail.com --- (In reply to Mark Thomas from comment #2) > The class level Javadoc does document that the various addWebapp methods > configure the Default Servlet, JSP servlet etc. The LifecycleListener in >

[tomcat] 01/02: Add a few things to the Tomcat 10 list since it is approaching fast

2019-12-17 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 20f18f991ecc675abad83494fda94bae30cc8f9a Author: Mark Thomas AuthorDate: Mon Dec 16 20:55:03 2019 + Add a few

[tomcat] 02/02: Fix https://bz.apache.org/bugzilla/show_bug.cgi?id=64008

2019-12-17 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 84b9d1a7d516027e6734a0277fc567cf61f57e72 Author: Mark Thomas AuthorDate: Tue Dec 17 11:20:53 2019 + Fix

[tomcat] branch master updated (8eced7a -> 84b9d1a)

2019-12-17 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a change to branch master in repository https://gitbox.apache.org/repos/asf/tomcat.git. from 8eced7a Remove useless lock new 20f18f9 Add a few things to the Tomcat 10 list since it is approaching fast

[Bug 64011] New: JNDIRealm no longer authenticates to LDAP

2019-12-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64011 Bug ID: 64011 Summary: JNDIRealm no longer authenticates to LDAP Product: Tomcat 8 Version: 8.5.50 Hardware: PC Status: NEW Severity: normal Priority: P2

[Bug 64007] a deadlock with Poller run and cancelledKey

2019-12-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64007 --- Comment #2 from echo --- but, in my opinion. just the NioEndpoint$Poller.cancelledKey and NioEndpoint$Poller.run may cause the deadlock. Poller.run finally call AbstractSelector.cancel and Poller.cancelledKey finally call

[tomcat] branch master updated: 64007: Cancel selection key before wrapper close

2019-12-17 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/master by this push: new 9b1a8b6 64007: Cancel selection key before

[Bug 64007] a deadlock with Poller run and cancelledKey

2019-12-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64007 Remy Maucherat changed: What|Removed |Added Status|NEW |NEEDINFO --- Comment #1 from Remy

svn commit: r37259 - /dev/tomcat/tomcat-7/v7.0.99/ /release/tomcat/tomcat-7/v7.0.99/

2019-12-17 Thread violetagg
Author: violetagg Date: Tue Dec 17 08:24:05 2019 New Revision: 37259 Log: Release Tomcat 7.0.99 Added: release/tomcat/tomcat-7/v7.0.99/ - copied from r37258, dev/tomcat/tomcat-7/v7.0.99/ Removed: dev/tomcat/tomcat-7/v7.0.99/

[Bug 64008] Tomcat ignores default web.xml and falls back to hard-coded defaults

2019-12-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64008 --- Comment #1 from Remy Maucherat --- *** Bug 64009 has been marked as a duplicate of this bug. *** -- You are receiving this mail because: You are the assignee for the bug.

[Bug 64009] Embedded Tomcat has insecure default by activating JspServlet without opt-in

2019-12-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64009 Remy Maucherat changed: What|Removed |Added Status|NEW |RESOLVED Resolution|---

[Bug 64009] Embedded Tomcat has insecure default by activating JspServlet without opt-in

2019-12-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64009 --- Comment #2 from emergency.sho...@gmail.com --- I don't think that this is a duplicate of 64008. This issue is about insecure defaults. 64008 is about how difficult (if not impossible) it is to prevent from having these insecure defaults

[Bug 64008] Tomcat ignores default web.xml and falls back to hard-coded defaults

2019-12-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64008 --- Comment #3 from emergency.sho...@gmail.com --- https://bz.apache.org/bugzilla/show_bug.cgi?id=62755 seems to be a related issue. It seems that the provided fix did not make it into the Tomcat codebase. -- You are receiving this mail

[Bug 64009] Embedded Tomcat has insecure default by activating JspServlet without opt-in

2019-12-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64009 --- Comment #3 from Remy Maucherat --- Please use the appropriate mailing list for discussion: security for security related discussions, user for details and investigation on how to use Tomcat. -- You are receiving this mail because: You

Nexus: Promotion Completed

2019-12-17 Thread Nexus Repository Manager
Message from: https://repository.apache.orgDeployer properties:"userAgent" = "maven-artifact/2.2.1 (Java 1.7.0_80; Windows 8.1 6.3)""userId" = "violetagg""ip" = "78.83.99.114"Details:The following artifacts have been promoted to the "Releases" [id=releases]

Re: [RESULT][VOTE] Release Apache Tomcat 7.0.99

2019-12-17 Thread Violeta Georgieva
На ср, 11.12.2019 г. в 15:51 Violeta Georgieva написа: > > The proposed Apache Tomcat 7.0.99 release is now available for voting. > > It can be obtained from: > https://dist.apache.org/repos/dist/dev/tomcat/tomcat-7/v7.0.99/ > The Maven staging repo is: >

[Bug 64009] New: Embedded Tomcat has insecure default by activating JspServlet without opt-in

2019-12-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64009 Bug ID: 64009 Summary: Embedded Tomcat has insecure default by activating JspServlet without opt-in Product: Tomcat 8 Version: 8.5.50 Hardware: PC OS:

[Bug 64008] Tomcat ignores default web.xml and falls back to hard-coded defaults

2019-12-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64008 --- Comment #2 from Mark Thomas --- The class level Javadoc does document that the various addWebapp methods configure the Default Servlet, JSP servlet etc. The LifecycleListener in #addWebapp(Host, String, String, LifecycleListener) is

[tomcat] branch master updated: Remove useless lock

2019-12-17 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/master by this push: new 8eced7a Remove useless lock 8eced7a is described

[Bug 64008] New: Tomcat ignores default web.xml and falls back to hard-coded defaults

2019-12-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64008 Bug ID: 64008 Summary: Tomcat ignores default web.xml and falls back to hard-coded defaults Product: Tomcat 8 Version: 8.5.50 Hardware: PC OS: Windows NT

[Bug 64011] JNDIRealm no longer authenticates to LDAP

2019-12-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64011 Michael Osipov changed: What|Removed |Added OS||All --- Comment #1 from Michael

[Bug 64011] JNDIRealm no longer authenticates to LDAP

2019-12-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64011 Michael Osipov changed: What|Removed |Added CC||micha...@apache.org -- You are

[Bug 64007] a deadlock with Poller run and cancelledKey

2019-12-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64007 --- Comment #3 from Remy Maucherat --- Ok, so then cancelledKey should cancel the key first, and this would resolve the "problem" as the channel close locks everything before cancelling that key itself. This is what was done like that in 8.5

[Bug 64011] JNDIRealm no longer authenticates to LDAP

2019-12-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64011 --- Comment #2 from Mike Lothian --- I got the info from here: https://tomcat.apache.org/tomcat-8.5-doc/config/realm.html spnegoDelegationQop This attribute should be a comma-separated list of values selected from auth-conf, auth-int and

Re: Proposed plan for Tomcat 10

2019-12-17 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 12/16/19 11:45, Rémy Maucherat wrote: > On Mon, Dec 16, 2019 at 5:38 PM Mark Thomas > wrote: > > On 16/12/2019 15:37, Rémy Maucherat wrote: > > > >> Do you plan to create the 9.10 branch at the same time ? If you

Re: Proposed plan for Tomcat 10

2019-12-17 Thread Mark Thomas
On 17/12/2019 18:12, Christopher Schultz wrote: > How about end-users? I could imagine this tool being useful to migrate > an *application* from Tomcat [789].x to Tomcat 10 (or 9.10). I'm expecting end-users to be the primary users of this tool. A little further down the road I can see us

[tomcat] branch 8.5.x updated: Fix https://bz.apache.org/bugzilla/show_bug.cgi?id=64008

2019-12-17 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new 9babe92 Fix

[tomcat] branch master updated: Trivial code formatting

2019-12-17 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/master by this push: new 65bf0db Trivial code formatting 65bf0db is

[Bug 64005] NullPointerException in Tomcat 8.5.50 from java.util.zip.ZipFile.getEntry

2019-12-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64005 Mark Thomas changed: What|Removed |Added Status|NEW |RESOLVED Resolution|---

[tomcat] branch 8.5.x updated: Fix https://bz.apache.org/bugzilla/show_bug.cgi?id=64005 avoid NPE

2019-12-17 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new 60ee3d6 Fix

[Bug 64013] New: build.xml "release" target fails due to JavaDoc warnings

2019-12-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64013 Bug ID: 64013 Summary: build.xml "release" target fails due to JavaDoc warnings Product: Tomcat 8 Version: 8.5.50 Hardware: PC Status: NEW

Re: Proposed plan for Tomcat 10

2019-12-17 Thread Rémy Maucherat
On Tue, Dec 17, 2019 at 7:12 PM Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > > > On 12/16/19 11:45, Rémy Maucherat wrote: > > On Mon, Dec 16, 2019 at 5:38 PM Mark Thomas > > wrote: > > > > On

Re: [tomcat] branch master updated: Refactor JMX remote RMI registry creation

2019-12-17 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Rémy, On 11/14/19 07:39, r...@apache.org wrote: > This is an automated email from the ASF dual-hosted git > repository. > > remm pushed a commit to branch master in repository > https://gitbox.apache.org/repos/asf/tomcat.git > > > The following

[Bug 64005] NullPointerException in Tomcat 8.5.50 from java.util.zip.ZipFile.getEntry

2019-12-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64005 Mark Thomas changed: What|Removed |Added Status|NEEDINFO|NEW --- Comment #6 from Mark Thomas

Re: [tomcat] branch master updated: Refactor JMX remote RMI registry creation

2019-12-17 Thread Mark Thomas
On 17/12/2019 21:10, Christopher Schultz wrote: > Rémy, > > On 11/14/19 07:39, r...@apache.org wrote: >> This is an automated email from the ASF dual-hosted git >> repository. > >> remm pushed a commit to branch master in repository >> https://gitbox.apache.org/repos/asf/tomcat.git > > >> The

[tomcat] branch 7.0.x updated: Fix https://bz.apache.org/bugzilla/show_bug.cgi?id=64008

2019-12-17 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 7.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/7.0.x by this push: new 0350885 Fix

[Bug 64008] Tomcat ignores default web.xml and falls back to hard-coded defaults

2019-12-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64008 Mark Thomas changed: What|Removed |Added Resolution|--- |FIXED Status|NEW

[tomcat] branch master updated: Fix https://bz.apache.org/bugzilla/show_bug.cgi?id=64005 avoid NPE

2019-12-17 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/master by this push: new 2f51425 Fix

[tomcat] branch master updated: Trivial line spacing changes to align with 8.5.x / 7.0.x

2019-12-17 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/master by this push: new c175df1 Trivial line spacing changes to align

[Bug 64013] build.xml "release" target fails due to JavaDoc warnings

2019-12-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64013 Mark Thomas changed: What|Removed |Added Status|NEW |RESOLVED Resolution|---

[Bug 64013] build.xml "release" target fails due to JavaDoc warnings

2019-12-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64013 Mark Thomas changed: What|Removed |Added OS||All --- Comment #1 from Mark Thomas

Re: [tomcat] branch master updated: Refactor JMX remote RMI registry creation

2019-12-17 Thread Rémy Maucherat
On Tue, Dec 17, 2019 at 10:10 PM Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Rémy, > > On 11/14/19 07:39, r...@apache.org wrote: > > This is an automated email from the ASF dual-hosted git > > repository. > > > > remm pushed a

[tomcat] branch 8.5.x updated: Fix https://bz.apache.org/bugzilla/show_bug.cgi?id=64013 Javadoc Java 8+

2019-12-17 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new 8afad4d Fix

[tomcat] branch 7.0.x updated: Align with 8.5.x/9.0.x Javadoc fixes and formatting

2019-12-17 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 7.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/7.0.x by this push: new ed2626a Align with 8.5.x/9.0.x Javadoc fixes and

[Bug 64013] build.xml "release" target fails due to JavaDoc warnings

2019-12-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64013 --- Comment #2 from George Stanchev --- Yeah I forgot to mention that I used Java 8u232 for the build. The fix is trivial of course. I added the javadoc elements below and it finished building /** * @deprecated This will be removed in

Re: Broken links on the website

2019-12-17 Thread Igal Sapir
Scratch that. I don't know why Google is indexing the wrong page. The actual Download page [2] was a bit slow but renders properly. Sorry about that. Perhaps we can remove the wrong page or add a meta tag with a canonical tag [3], e.g. https://tomcat.apache.org/download-90.cgi; /> Igal [2]

Broken links on the website

2019-12-17 Thread Igal Sapir
Something went wrong on the website. Specifically, the Download page for 9.0 [1] shows attributes that should be evaluated, e.g. [define v]9.0.30[end]. That also breaks the download links which do not evaluate the version number properly. I can look into it tomorrow, but if someone more