Re: Changing the name of the default branch in our git repos

2020-06-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 6/16/20 04:02, Mark Thomas wrote: > All, > > You may have seen the recent discussions both inside and outside > the ASF about the user of "master" as the name of the default git > branch. If you haven't, the short version is that the name

[Bug 64540] New: switch from bndwrap task to bnd task

2020-06-19 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64540 Bug ID: 64540 Summary: switch from bndwrap task to bnd task Product: Tomcat 10 Version: unspecified Hardware: All OS: All Status: NEW Severity: normal

Re: Implementing TNO (Trust No One) for Session Stores

2020-06-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 6/9/20 08:13, Mark Thomas wrote: > On 08/06/2020 22:29, Christopher Schultz wrote: >> I think that's enough for now. So the questions are: >> >> 1. Does anyone really want Tomcat to be worried about this stuff? >> I know the answer is

Re: Implementing TNO (Trust No One) for Session Stores

2020-06-19 Thread Mark Thomas
On 19/06/2020 14:38, Christopher Schultz wrote: > Mark, > > On 6/9/20 08:13, Mark Thomas wrote: >> On 08/06/2020 22:29, Christopher Schultz wrote: >>> I think that's enough for now. So the questions are: >>> >>> 1. Does anyone really want Tomcat to be worried about this stuff? >>> I know the

Re: New home for EncryptInterceptor.BaseEncryptionManager and friends

2020-06-19 Thread Mark Thomas
On 19/06/2020 15:02, Christopher Schultz wrote: > All, > > I'd like to refactor a bit and move BaseEncryptionManager and > associated code out of the EncryptInterceptor class. Where would be a > good place to put it? > > Some potential candidates: > > org/apache/catalina/util >

[GitHub] [tomcat] rotty3000 commented on pull request #303: Fix BZ 64532 - update to bnd 5.1.1

2020-06-19 Thread GitBox
rotty3000 commented on pull request #303: URL: https://github.com/apache/tomcat/pull/303#issuecomment-646637527 @markt-asf did I miss any other changes you wanted to see? This is an automated message from the Apache Git

New home for EncryptInterceptor.BaseEncryptionManager and friends

2020-06-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, I'd like to refactor a bit and move BaseEncryptionManager and associated code out of the EncryptInterceptor class. Where would be a good place to put it? Some potential candidates: org/apache/catalina/util org/apache/catalina/security

[Bug 64540] switch from bndwrap task to bnd task

2020-06-19 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64540 --- Comment #1 from rotty3000 --- While making this change we also have to do an initial pass over the metadata to make sure it's all still minimally correct. -- You are receiving this mail because: You are the assignee for the bug.

Re: Changing the name of the default branch in our git repos

2020-06-19 Thread Emmanuel Bourg
Le 16/06/2020 à 10:02, Mark Thomas a écrit : > Thoughts? I'd prefer the status-quo and keep "master", I've always understood this as the 'master record' (I know it might be historically wrong) and I haven't seen evidences it has ever offended or deterred anyone from contributing. If there is a

[Bug 64541] New: Parsing of mbeans-descriptor.xml files throw errors on server startup

2020-06-19 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64541 Bug ID: 64541 Summary: Parsing of mbeans-descriptor.xml files throw errors on server startup Product: Tomcat 7 Version: 7.0.104 Hardware: PC OS: Linux

[CONF] Apache Tomcat > Servlet TCK 5.0

2020-06-19 Thread Mark Thomas (Confluence)
Title: Message Title There's 1 new edit on this page   Servlet TCK 5.0 Mark Thomas edited this page Here's what changed:

[Bug 64541] Parsing of mbeans-descriptor.xml files throw errors on server startup

2020-06-19 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64541 --- Comment #1 from Christopher Schultz --- Interesting. How are you setting the limit for the JAXP entity expansion... via the system property "jdk.xml.entityExpansionLimit"? What's the security justification for the setting of "1" and not,