svn commit: r1585654 - /tomcat/jk/trunk/native/common/jk_connect.c

2014-04-08 Thread mturk
Author: mturk
Date: Tue Apr  8 07:31:31 2014
New Revision: 1585654

URL: http://svn.apache.org/r1585654
Log:
Be more specific with getaddrinfo call

Modified:
tomcat/jk/trunk/native/common/jk_connect.c

Modified: tomcat/jk/trunk/native/common/jk_connect.c
URL: 
http://svn.apache.org/viewvc/tomcat/jk/trunk/native/common/jk_connect.c?rev=1585654r1=1585653r2=1585654view=diff
==
--- tomcat/jk/trunk/native/common/jk_connect.c (original)
+++ tomcat/jk/trunk/native/common/jk_connect.c Tue Apr  8 07:31:31 2014
@@ -433,6 +433,7 @@ int jk_resolve(const char *host, int por
 
 memset(hints, 0, sizeof(hints));
 hints.ai_socktype = SOCK_STREAM;
+hints.ai_protocol = IPPROTO_TCP;
 #if JK_HAVE_IPV6
 if (prefer_ipv6)
 hints.ai_family = JK_INET6;



-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 56363] New: OpenSSL security advisory - Heartbleed bug

2014-04-08 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=56363

Bug ID: 56363
   Summary: OpenSSL security advisory - Heartbleed bug
   Product: Tomcat Native
   Version: 1.1.29
  Hardware: All
OS: All
Status: NEW
  Severity: critical
  Priority: P2
 Component: Library
  Assignee: dev@tomcat.apache.org
  Reporter: m...@normi.net

The binary builds of Tomcat Native 1.1.24 - 1.1.29 have been compiled with an
OpenSSL version vulnerable to Heartbleed, and are thus probably vulnerable. See
http://www.openssl.org/news/secadv_20140407.txt and http://heartbleed.com/

A new build using OpenSSL 1.0.1g would be very much appreciated.

-- 
You are receiving this mail because:
You are the assignee for the bug.

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



svn commit: r1585657 - /tomcat/jk/trunk/native/common/jk_connect.c

2014-04-08 Thread mturk
Author: mturk
Date: Tue Apr  8 07:52:56 2014
New Revision: 1585657

URL: http://svn.apache.org/r1585657
Log:
Use port when calling getaddrinfo and skip bogus addresses

Modified:
tomcat/jk/trunk/native/common/jk_connect.c

Modified: tomcat/jk/trunk/native/common/jk_connect.c
URL: 
http://svn.apache.org/viewvc/tomcat/jk/trunk/native/common/jk_connect.c?rev=1585657r1=1585656r2=1585657view=diff
==
--- tomcat/jk/trunk/native/common/jk_connect.c (original)
+++ tomcat/jk/trunk/native/common/jk_connect.c Tue Apr  8 07:52:56 2014
@@ -430,6 +430,8 @@ int jk_resolve(const char *host, int por
  */
 struct addrinfo hints, *ai_list, *ai = NULL;
 int error;
+char  pbuf[12];
+char *pbufptr = NULL;
 
 memset(hints, 0, sizeof(hints));
 hints.ai_socktype = SOCK_STREAM;
@@ -440,7 +442,11 @@ int jk_resolve(const char *host, int por
 else
 #endif
 hints.ai_family = JK_INET;
-error = getaddrinfo(host, NULL, hints, ai_list);
+if (port  0) {
+snprintf(pbuf, port, sizeof(pbuf));
+pbufptr = pbuf;
+}
+error = getaddrinfo(host, pbufptr, hints, ai_list);
 #if JK_HAVE_IPV6
 /* XXX:
  * Is the check for EAI_FAMILY/WSAEAFNOSUPPORT correct
@@ -461,12 +467,13 @@ int jk_resolve(const char *host, int por
 ai = ai_list;
 while (ai) {
 if (ai-ai_family == AF_INET6) {
-family = JK_INET6;
-break;
-}
-else {
-ai = ai-ai_next;
+/* ignore elements without required address info */
+if((ai-ai_addr != NULL)  (ai-ai_addrlen  0)) {

+family = JK_INET6;
+break;
+}
 }
+ai = ai-ai_next;
 }
 }
 #endif
@@ -474,12 +481,13 @@ int jk_resolve(const char *host, int por
 ai = ai_list;
 while (ai) {
 if (ai-ai_family == AF_INET) {
-family = JK_INET;
-break;
-}
-else {
-ai = ai-ai_next;
+/* ignore elements without required address info */
+if((ai-ai_addr != NULL)  (ai-ai_addrlen  0)) {

+family = JK_INET;
+break;
+}
 }
+ai = ai-ai_next;
 }
 }
 if (ai == NULL) {



-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Tagging JK 1.2.40

2014-04-08 Thread Mladen Turk

Hi,

I plan to tag JK 1.2.40 pretty soon (probably end of this week)
We have few bugs in the latest release which requires a new version.


Regards
--
^TM

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



JDK 9 build 06 is available on java.net

2014-04-08 Thread Rory O'Donnell Oracle, Dublin Ireland

Hi Mladen,

JDK 9 Build 06 Early Access Build is now available for download 
https://jdk9.java.net/download  test.


Rgds, Rory

--
Rgds,Rory O'Donnell
Quality Engineering Manager
Oracle EMEA , Dublin, Ireland



Java 8 compatibility for Tomcat 7

2014-04-08 Thread Emmanuel Bourg
Hi all,

Tomcat 7 fails to compile with Java 8. Would it be possible to backport
r1222329 [1] which fixed this issue for Tomcat 8 please?

This is an issue in Debian where Tomcat is built from the sources, we
would like to switch to Java 8 as the default JDK but several packages
still fail to build. This may also be an issue for Fedora, they plan to
switch to Java 8 and remove Java 7 this fall.

Thank you,

Emmanuel Bourg

[1] https://svn.apache.org/r1222329

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 56352] tomcat-connectors-1.2.39-windows-x86_64-iis does not resolve workers DNS names

2014-04-08 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=56352

--- Comment #4 from Konstantin Kolinko knst.koli...@gmail.com ---
(In reply to Mladen Turk from comment #2)
 The patch does nothing. JK_INET6 is defined as AF_INET6

OK. Good to know. I am just saying that it looks odd.

 The only thing that can be is the location of freeaddrinfo(ai_list);
 It's a clear bug.

Thank you for fixing.

(In reply to Mladen Turk from comment #3)
 The reason is probably in the missing
 127.0.0.1 localhost
 entry in the host file. Since the resolve code is now a copy from APR, the
 same behaviour exists with HTTPD for example.

If it fails to resolve the host name, I would expect some different behaviour
rather than an attempt to connect to 0.0.0.0.

(Just for a record: Apparently, adding such entry did not help
http://markmail.org/message/pgzhzuwozcvxzab7

-- 
You are receiving this mail because:
You are the assignee for the bug.

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Re: JDK 9 build 06 is available on java.net

2014-04-08 Thread Mark Thomas
On 08/04/2014 02:25, Rory O'Donnell Oracle, Dublin Ireland wrote:
 Hi Mladen,
 
 JDK 9 Build 06 Early Access Build is now available for download
 https://jdk9.java.net/download  test.
 
 Rgds, Rory
 

Rory,

Java 8 (and I am guessing Java 9) still has issues with UTF-8 decoding.

For the latest status, see the Tomcat 8 unit tests for Java 8 decoding
[1]. If you look at the change history you'll see how things improved
between Java 7 and Java 8. It should be obvious what the problems are
from that unit test but ask of the Tomcat dev list if things aren't clear.


Mark


[1]
http://svn.apache.org/viewvc/tomcat/trunk/test/org/apache/tomcat/util/buf/TestUtf8.java?view=annotate


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Re: Tagging JK 1.2.40

2014-04-08 Thread Konstantin Kolinko
2014-04-08 11:56 GMT+04:00 Mladen Turk mt...@apache.org:
 Hi,

 I plan to tag JK 1.2.40 pretty soon (probably end of this week)
 We have few bugs in the latest release which requires a new version.

+1

There is also a need for a tc-native build, due to security issue in OpenSSL
https://issues.apache.org/bugzilla/show_bug.cgi?id=56363

I cannot test this now, but from reading the FAQ at
http://heartbleed.com/  there are good chances that the current build
of TC-Native (and included with windows versions of TC8, TC7 etc) is
vulnerable.

There should be no need for this TLS extension protocol, but
apparently it is enabled by default.

A test tool:
https://github.com/FiloSottile/Heartbleed

A discussion of this security issue:
http://security.stackexchange.com/questions/55076/what-should-one-do-about-the-heartbleed-openssl-exploit

Best regards,
Konstantin Kolinko

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Re: Java 8 compatibility for Tomcat 7

2014-04-08 Thread Mark Thomas
On 08/04/2014 02:42, Emmanuel Bourg wrote:
 Hi all,
 
 Tomcat 7 fails to compile with Java 8. Would it be possible to backport
 r1222329 [1] which fixed this issue for Tomcat 8 please?

I haven't looked at this with Java 8 yet but it strikes me as odd that
that particular patch fixes a Java 8 issue.

It is unlikely that that fix would be backported as it is a fairly large
API change. I'm not sure how public that API is considered to be.

 This is an issue in Debian where Tomcat is built from the sources, we
 would like to switch to Java 8 as the default JDK but several packages
 still fail to build. This may also be an issue for Fedora, they plan to
 switch to Java 8 and remove Java 7 this fall.

Can you provide the details of the failure. That might help ID a solution.

Mark

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 56365] New: Simplify use of Mapper in StandardJarScanner

2014-04-08 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=56365

Bug ID: 56365
   Summary: Simplify use of Mapper in StandardJarScanner
   Product: Tomcat 7
   Version: 7.0.53
  Hardware: PC
Status: NEW
  Severity: enhancement
  Priority: P2
 Component: Catalina
  Assignee: dev@tomcat.apache.org
  Reporter: knst.koli...@gmail.com

Looking at the code that performs jar names filtering in StandardJarScanner in
8.0.5, 7.0.53.

This is in view of
a) backporting it to Tomcat 6 to get rid of ecj-xxx.jar names in the lists of
ignored files there,
b) documenting what filename patterns are supported here.

Essentially, the code calls Matcher.matchPath(toSkip, jarName) (see
StandardJarScanFilter#check() in 8.0.5) where jarName is just a file name.

This is an overkill. The matchPath() method is designed to work with Ant-style
patterns matching against file paths. This method handles file names hierarchy
(directory names and ** directory name pattern).  The actual matching of the
names is performed by Matcher.match(String pattern, String str, boolean
caseSensitive), which is a rather more simple API.

Thus the proposal is to get rid of Matcher.matchPath() and call Matcher.match()
directly. This allows to remove a lot of unneeded code.

For documentation, the file name patterns supported by Matcher.match()
according to its javadoc are as follows:
 * The pattern may contain two special characters:br
 * '*' means zero or more charactersbr
 * '?' means one and only one character

-- 
You are receiving this mail because:
You are the assignee for the bug.

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Re: JDK 9 build 06 is available on java.net

2014-04-08 Thread Henri Gomez
OpenJDK 8 and 9 have also their continuous build via Obuildfactory (
https://github.com/hgomez/obuildfactory) and hosted in Bintray for many
Linux flavor ie :

* http://dl.bintray.com/hgomez/obuildfactory-fedora18-x86-64/
* http://dl.bintray.com/hgomez/obuildfactory-opensuse122-i386/
* http://dl.bintray.com/hgomez/obuildfactory-centos6-i386/

:)



2014-04-08 13:49 GMT+02:00 Mark Thomas ma...@apache.org:

 On 08/04/2014 02:25, Rory O'Donnell Oracle, Dublin Ireland wrote:
  Hi Mladen,
 
  JDK 9 Build 06 Early Access Build is now available for download
  https://jdk9.java.net/download  test.
 
  Rgds, Rory
 

 Rory,

 Java 8 (and I am guessing Java 9) still has issues with UTF-8 decoding.

 For the latest status, see the Tomcat 8 unit tests for Java 8 decoding
 [1]. If you look at the change history you'll see how things improved
 between Java 7 and Java 8. It should be obvious what the problems are
 from that unit test but ask of the Tomcat dev list if things aren't clear.


 Mark


 [1]

 http://svn.apache.org/viewvc/tomcat/trunk/test/org/apache/tomcat/util/buf/TestUtf8.java?view=annotate


 -
 To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: dev-h...@tomcat.apache.org




Re: Java 8 compatibility for Tomcat 7

2014-04-08 Thread Emmanuel Bourg
Le 08/04/2014 14:03, Mark Thomas a écrit :

 Can you provide the details of the failure. That might help ID a solution.

Thank you, here is the build log on Debian:

http://87.98.165.193/debian/openjdk8-rebuild/logs-failed-jdk8/tomcat7_7.0.52-1_unstable_jdk8.log

[javac]
/«PKGBUILDDIR»/java/org/apache/catalina/tribes/tipis/AbstractReplicatedMap.java:1107:
error: keySet() in AbstractReplicatedMap cannot override keySet() in
ConcurrentHashMap
[javac] public SetObject keySet() {
[javac]^
[javac]   return type SetObject is not compatible with KeySetView
[javac]   where K,V are type-variables:
[javac] K extends Object declared in class ConcurrentHashMap
[javac] V extends Object declared in class ConcurrentHashMap


This issue is caused by the addition of a keySet() method to
ConcurrentHashMap in Java 8 with a return type incompatible with the
keySet() method in AbstractReplicatedMap.

In r1222329 AbstractReplicatedMap was changed to no longer inherit
ConcurrentHashMap and implement directly the Map interface. This had the
side effect of fixing this Java 8 issue for Tomcat 8.

Emmanuel Bourg


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



svn commit: r1585713 - in /tomcat/trunk: java/org/apache/tomcat/util/file/ java/org/apache/tomcat/util/scan/ webapps/docs/

2014-04-08 Thread kkolinko
Author: kkolinko
Date: Tue Apr  8 12:55:54 2014
New Revision: 1585713

URL: http://svn.apache.org/r1585713
Log:
Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=56365
Simplify file name matching code in StandardJarScanFilter.

Removed:
tomcat/trunk/java/org/apache/tomcat/util/file/Constants.java
tomcat/trunk/java/org/apache/tomcat/util/file/LocalStrings.properties
Modified:
tomcat/trunk/java/org/apache/tomcat/util/file/Matcher.java
tomcat/trunk/java/org/apache/tomcat/util/scan/StandardJarScanFilter.java
tomcat/trunk/webapps/docs/changelog.xml

Modified: tomcat/trunk/java/org/apache/tomcat/util/file/Matcher.java
URL: 
http://svn.apache.org/viewvc/tomcat/trunk/java/org/apache/tomcat/util/file/Matcher.java?rev=1585713r1=1585712r2=1585713view=diff
==
--- tomcat/trunk/java/org/apache/tomcat/util/file/Matcher.java (original)
+++ tomcat/trunk/java/org/apache/tomcat/util/file/Matcher.java Tue Apr  8 
12:55:54 2014
@@ -18,14 +18,8 @@
 
 package org.apache.tomcat.util.file;
 
-import java.io.File;
-import java.util.Locale;
 import java.util.Set;
 
-import org.apache.juli.logging.Log;
-import org.apache.juli.logging.LogFactory;
-import org.apache.tomcat.util.res.StringManager;
-
 /**
  * pThis is a utility class to match file globs.
  * The class has been derived from
@@ -36,44 +30,23 @@ import org.apache.tomcat.util.res.String
 public final class Matcher {
 
 /**
- * The pattern that matches an arbitrary number of directories.
- */
-public static final String DEEP_TREE_MATCH = **;
-
-private static final String OS_NAME =
-System.getProperty(os.name).toLowerCase(Locale.ENGLISH);
-private static final String PATH_SEP =
-System.getProperty(path.separator);
-private static final boolean ON_NETWARE = isNetware();
-private static final boolean ON_DOS = isDos();
-
-/**
- * The string resources for this package.
- */
-private static final StringManager sm =
-StringManager.getManager(Constants.Package);
-
-private static final Log log = LogFactory.getLog(Matcher.class);
-
-/**
- * Tests whether or not a given path matches any pattern in the given set.
+ * Tests whether or not a given file name matches any file name pattern in
+ * the given set. The match is performed case-sensitively.
  *
- * If you need to call this method multiple times with the same
- * pattern you should rather pre parse the pattern using 
tokenizePathAsArray.
- *
- * @see #tokenizePathAsArray
+ * @see #match(String, String, boolean)
  *
  * @param patternSet The pattern set to match against. Must not be
  *codenull/code.
- * @param str The path to match, as a String. Must not be
- *codenull/code.
- *
- * @return codetrue/code if any pattern in the set matches against the 
string,
- * or codefalse/code otherwise.
- */
-public static boolean matchPath(SetString[] patternSet, String str) {
-for (String[] patternTokens: patternSet) {
-if (matchPath(patternTokens, tokenizePathAsArray(str), true)) {
+ * @param str The file name to match, as a String. Must not be
+ *codenull/code. It must be just a file name, without
+ *a path.
+ *
+ * @return codetrue/code if any pattern in the set matches against the
+ * file name, or codefalse/code otherwise.
+ */
+public static boolean matchName(SetString patternSet, String fileName) {
+for (String pattern: patternSet) {
+if (match(pattern, fileName, true)) {
 return true;
 }
 }
@@ -81,177 +54,6 @@ public final class Matcher {
 }
 
 /**
- * Tests whether or not a given path matches a given pattern.
- *
- * If you need to call this method multiple times with the same
- * pattern you should rather pre parse the pattern using 
tokenizePathAsArray.
- *
- * @see #tokenizePathAsArray
- *
- * @param pattern The pattern to match against. Must not be
- *codenull/code.
- * @param str The path to match, as a String. Must not be
- *codenull/code.
- *
- * @return codetrue/code if the pattern matches against the string,
- * or codefalse/code otherwise.
- */
-public static boolean matchPath(String pattern, String str) {
-String[] patDirs = tokenizePathAsArray(pattern);
-return matchPath(patDirs, tokenizePathAsArray(str), true);
-}
-
-/**
- * Tests whether or not a given path matches a given pattern.
- *
- * If you need to call this method multiple times with the same
- * pattern you should rather pre parse the pattern using 
tokenizePathAsArray.
- *
- * @see #tokenizePathAsArray
- *
- * @param pattern The pattern to match 

svn commit: r1585715 - /tomcat/trunk/webapps/docs/changelog.xml

2014-04-08 Thread kkolinko
Author: kkolinko
Date: Tue Apr  8 13:00:58 2014
New Revision: 1585715

URL: http://svn.apache.org/r1585715
Log:
Correct a typo

Modified:
tomcat/trunk/webapps/docs/changelog.xml

Modified: tomcat/trunk/webapps/docs/changelog.xml
URL: 
http://svn.apache.org/viewvc/tomcat/trunk/webapps/docs/changelog.xml?rev=1585715r1=1585714r2=1585715view=diff
==
--- tomcat/trunk/webapps/docs/changelog.xml (original)
+++ tomcat/trunk/webapps/docs/changelog.xml Tue Apr  8 13:00:58 2014
@@ -80,8 +80,8 @@
 that session. (markt)
   /fix
   scode
-bug56365/bug: Simplify filename pattern matching code in
-scodeStandardJarScanner/scode. (kkolinko)
+bug56365/bug: Simplify file name pattern matching code in
+codeStandardJarScanner/code. (kkolinko)
   /scode
 /changelog
   /subsection



-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 56366] New: Use case-insensitive matching in StandardJarScanner

2014-04-08 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=56366

Bug ID: 56366
   Summary: Use case-insensitive matching in StandardJarScanner
   Product: Tomcat 8
   Version: 8.0.5
  Hardware: PC
Status: NEW
  Severity: normal
  Priority: P2
 Component: Catalina
  Assignee: dev@tomcat.apache.org
  Reporter: knst.koli...@gmail.com

From code review while working on bug 56365, the JAR scanning feature uses
case-sensitive name checks in a number of places:

a) in path.endsWith(Constants.JAR_EXT) check in StandardJarScanner#scan(..)
b) when matching file names in o.a.t.util.file.Matcher

I think it would be better to perform such checks case-insensitively.

(Does this affect QSYS.LIB on AS/400 ?)

-- 
You are receiving this mail because:
You are the assignee for the bug.

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 56369] New: BaseModelMBean does not clean-up attributeBroadcaster in removeNotificationListener()

2014-04-08 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=56369

Bug ID: 56369
   Summary: BaseModelMBean does not clean-up attributeBroadcaster
in removeNotificationListener()
   Product: Tomcat 7
   Version: unspecified
  Hardware: All
OS: All
Status: NEW
  Severity: normal
  Priority: P2
 Component: Catalina
  Assignee: dev@tomcat.apache.org
  Reporter: lor...@bitronix.be

BaseModelMBean.addNotificationListener() registers the listener on
attributeBroadcaster, while BaseModelMBean.removeNotificationListener() fails
to clean that up.

The end result is a memory leak that is very apparent when you embed directly
in your WAR file jmxremote_optional.jar as the
com.sun.jmx.remote.opt.internal.ArrayNotificationBuffer$BufferListener'
classloader cannot be garbage collected which end up depleting the perm gen
merely after a few redeploys.

-- 
You are receiving this mail because:
You are the assignee for the bug.

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 56370] New: tomcat-users.xml contains legacy roles

2014-04-08 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=56370

Bug ID: 56370
   Summary: tomcat-users.xml contains legacy roles
   Product: Tomcat 7
   Version: unspecified
  Hardware: PC
Status: NEW
  Severity: normal
  Priority: P2
 Component: Catalina
  Assignee: dev@tomcat.apache.org
  Reporter: martin.spa...@gmail.com

The configuration file .\conf\tomcat-users.xml contains the follow comment
which includes a number of legacy usernames and roles.

!--
  role rolename=tomcat/
  role rolename=role1/
  user username=tomcat password=tomcat roles=tomcat/
  user username=both password=tomcat roles=tomcat,role1/
  user username=role1 password=tomcat roles=role1/
--

The 401 Unauthorized error page .\webapps\manager\WEB-INF\jsp\401.jsp contains
a number of new roles.

I propose the examples placed in .\conf\tomcat-users.xml should reflect these
new roles, e.g. 

  !-- manager-gui - allows access to the HTML GUI and the status pages --
  !-- manager-script - allows access to the text interface and the status
pages --
  !-- manager-jmx - allows access to the JMX proxy and the status pages --
  !-- manager-status - allows access to the status pages only --

!--
  role rolename=manager-gui/
  role rolename=manager-script/
  role rolename=manager-jmx/
  role rolename=manager-status/

  user username=manager-gui password=* roles=manager-gui/
  user username=manager-script password=* roles=manager-script/
  user username=manager-jmx password=* roles=manager-jmx/
  user username=manager-status password=* roles=manager-status/

--

-- 
You are receiving this mail because:
You are the assignee for the bug.

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



svn commit: r1585779 - /tomcat/trunk/java/org/apache/tomcat/util/file/Matcher.java

2014-04-08 Thread markt
Author: markt
Date: Tue Apr  8 16:42:44 2014
New Revision: 1585779

URL: http://svn.apache.org/r1585779
Log:
Fix Javadoc warning

Modified:
tomcat/trunk/java/org/apache/tomcat/util/file/Matcher.java

Modified: tomcat/trunk/java/org/apache/tomcat/util/file/Matcher.java
URL: 
http://svn.apache.org/viewvc/tomcat/trunk/java/org/apache/tomcat/util/file/Matcher.java?rev=1585779r1=1585778r2=1585779view=diff
==
--- tomcat/trunk/java/org/apache/tomcat/util/file/Matcher.java (original)
+++ tomcat/trunk/java/org/apache/tomcat/util/file/Matcher.java Tue Apr  8 
16:42:44 2014
@@ -37,7 +37,7 @@ public final class Matcher {
  *
  * @param patternSet The pattern set to match against. Must not be
  *codenull/code.
- * @param str The file name to match, as a String. Must not be
+ * @param fileName The file name to match, as a String. Must not be
  *codenull/code. It must be just a file name, without
  *a path.
  *



-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 56370] tomcat-users.xml contains legacy roles

2014-04-08 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=56370

Mark Thomas ma...@apache.org changed:

   What|Removed |Added

 Status|NEW |RESOLVED
 Resolution|--- |INVALID
 OS||All

--- Comment #1 from Mark Thomas ma...@apache.org ---
The commented out roles in tomcat-users.xml are not legacy. They are there to
support the examples web application.

The roles for the manager application are explicitly not assigned ot any users
in tomcat-users.xml, even in commented out form, to avoid any possibility of a
known user with a default password being used for an administrative interface.

-- 
You are receiving this mail because:
You are the assignee for the bug.

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Re: Java 8 compatibility for Tomcat 7

2014-04-08 Thread Mark Thomas
On 08/04/2014 06:32, Emmanuel Bourg wrote:
 Le 08/04/2014 14:03, Mark Thomas a écrit :
 
 Can you provide the details of the failure. That might help ID a solution.
 
 Thank you, here is the build log on Debian:
 
 http://87.98.165.193/debian/openjdk8-rebuild/logs-failed-jdk8/tomcat7_7.0.52-1_unstable_jdk8.log
 
 [javac]
 /«PKGBUILDDIR»/java/org/apache/catalina/tribes/tipis/AbstractReplicatedMap.java:1107:
 error: keySet() in AbstractReplicatedMap cannot override keySet() in
 ConcurrentHashMap
 [javac] public SetObject keySet() {
 [javac]^
 [javac]   return type SetObject is not compatible with KeySetView
 [javac]   where K,V are type-variables:
 [javac] K extends Object declared in class ConcurrentHashMap
 [javac] V extends Object declared in class ConcurrentHashMap
 
 
 This issue is caused by the addition of a keySet() method to
 ConcurrentHashMap in Java 8 with a return type incompatible with the
 keySet() method in AbstractReplicatedMap.
 
 In r1222329 AbstractReplicatedMap was changed to no longer inherit
 ConcurrentHashMap and implement directly the Map interface. This had the
 side effect of fixing this Java 8 issue for Tomcat 8.

That looks like something we are going to need to fix but any fix is
going to have to change the API. On that basis, back-porting r1222329 is
probably the best option.

Any objections to back-porting this fix to 7.0.x?

Mark


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



svn commit: r1585787 - /tomcat/tc6.0.x/trunk/STATUS.txt

2014-04-08 Thread schultz
Author: schultz
Date: Tue Apr  8 17:27:19 2014
New Revision: 1585787

URL: http://svn.apache.org/r1585787
Log:
Changed vote given discussion.

Modified:
tomcat/tc6.0.x/trunk/STATUS.txt

Modified: tomcat/tc6.0.x/trunk/STATUS.txt
URL: 
http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/STATUS.txt?rev=1585787r1=1585786r2=1585787view=diff
==
--- tomcat/tc6.0.x/trunk/STATUS.txt (original)
+++ tomcat/tc6.0.x/trunk/STATUS.txt Tue Apr  8 17:27:19 2014
@@ -53,6 +53,10 @@ PATCHES PROPOSED TO BACKPORT:
  if (debug  10) {
  log(e.getMessage(), e);
  }
+
+  schultz: I'm +1 if there's a debug message. I would prefer a WARN or
+   something like that for an allegedly impossible situation, but
+   I'll settle for debug ;)
   -1:
 
 * Fix http://issues.apache.org/bugzilla/show_bug.cgi?id=56283



-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 56370] tomcat-users.xml contains legacy roles

2014-04-08 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=56370

Sebb s...@apache.org changed:

   What|Removed |Added

 Status|RESOLVED|REOPENED
 Resolution|INVALID |---

--- Comment #2 from Sebb s...@apache.org ---
How about adding a comment to the file to explain that these entries are
intended for use with the examples web app?

Also, it would help if there was at least a pointer to the documentation for
the new manager roles.

I agree that default entries should not be provided, but it would help if the
role names were at least documented, for example by including the first part of
the OP's suggestion, i.e.

  !-- manager-gui - allows access to the HTML GUI and the status pages --
  !-- manager-script - allows access to the text interface and the status
pages --
  !-- manager-jmx - allows access to the JMX proxy and the status pages --
  !-- manager-status - allows access to the status pages only --

-- 
You are receiving this mail because:
You are the assignee for the bug.

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[jira] [Created] (MTOMCAT-266) The fork attribute crashes Tomcat on startup

2014-04-08 Thread M. R. (JIRA)
M. R. created MTOMCAT-266:
-

 Summary: The fork attribute crashes Tomcat on startup
 Key: MTOMCAT-266
 URL: https://issues.apache.org/jira/browse/MTOMCAT-266
 Project: Apache Tomcat Maven Plugin
  Issue Type: Bug
  Components: tomcat7
Affects Versions: 2.2
 Environment: Windows 8.1, Java 1.7.0_51 and Maven 3.2.1
Reporter: M. R.
Assignee: Olivier Lamy (*$^¨%`£)
Priority: Minor


The plugin works perfectly running Tomcat with my project web application.
I do mvn tomcat7:run and the server is started, the webapp is deployed and I 
can browse to it.

If I add the fork / attribute, though, the server crashes.

Here's (a portion of) my pom:

plugin
groupIdorg.apache.tomcat.maven/groupId
artifactIdtomcat7-maven-plugin/artifactId
version2.2/version

configuration
addresslocalhost/address
port8080/port
path//path
uriEncodingUTF-8/uriEncoding
/configuration
/plugin

(I'll add the stacktrace later)



--
This message was sent by Atlassian JIRA
(v6.2#6252)

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[jira] [Updated] (MTOMCAT-266) The fork attribute crashes Tomcat on startup

2014-04-08 Thread M. R. (JIRA)

 [ 
https://issues.apache.org/jira/browse/MTOMCAT-266?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

M. R. updated MTOMCAT-266:
--

Attachment: tomcat-plugin-crash.txt

 The fork attribute crashes Tomcat on startup
 --

 Key: MTOMCAT-266
 URL: https://issues.apache.org/jira/browse/MTOMCAT-266
 Project: Apache Tomcat Maven Plugin
  Issue Type: Bug
  Components: tomcat7
Affects Versions: 2.2
 Environment: Windows 8.1, Java 1.7.0_51 and Maven 3.2.1
Reporter: M. R.
Assignee: Olivier Lamy (*$^¨%`£)
Priority: Minor
 Attachments: tomcat-plugin-crash.txt


 The plugin works perfectly running Tomcat with my project web application.
 I do mvn tomcat7:run and the server is started, the webapp is deployed and 
 I can browse to it.
 If I add the fork / attribute, though, the server crashes.
 Here's (a portion of) my pom:
 plugin
 groupIdorg.apache.tomcat.maven/groupId
 artifactIdtomcat7-maven-plugin/artifactId
 version2.2/version
 configuration
 addresslocalhost/address
 port8080/port
 path//path
 uriEncodingUTF-8/uriEncoding
 /configuration
 /plugin
 (I'll add the stacktrace later)



--
This message was sent by Atlassian JIRA
(v6.2#6252)

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 55915] Add ECDHE support to tcnative-1.dll

2014-04-08 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=55915

jeffrey.jan...@polydyne.com changed:

   What|Removed |Added

Summary|Add EECDH support to|Add ECDHE support to
   |tcnative-1.dll  |tcnative-1.dll

-- 
You are receiving this mail because:
You are the assignee for the bug.

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 56370] tomcat-users.xml contains legacy roles

2014-04-08 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=56370

Mark Thomas ma...@apache.org changed:

   What|Removed |Added

 Status|REOPENED|RESOLVED
 Resolution|--- |INVALID

--- Comment #3 from Mark Thomas ma...@apache.org ---
The required roles are already documented in multiple places. I see no need to
replcate that information in this file.

-- 
You are receiving this mail because:
You are the assignee for the bug.

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 55915] Add ECDHE support to tcnative-1.dll

2014-04-08 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=55915

--- Comment #2 from jeffrey.jan...@polydyne.com ---
I just wanted to an importance stress to this bug.
At this time, support for ECDHE is the only way to get Forward Secrecy support
with Internet Explorer browsers. Firefox, Chrome, and Safari (and others) will
at least do regular DHE ciphers if available.

-- 
You are receiving this mail because:
You are the assignee for the bug.

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



svn commit: r1585853 - in /tomcat/tc6.0.x/trunk: STATUS.txt conf/web.xml java/org/apache/catalina/servlets/DefaultServlet.java java/org/apache/catalina/servlets/LocalStrings.properties webapps/docs/ch

2014-04-08 Thread markt
Author: markt
Date: Tue Apr  8 22:19:46 2014
New Revision: 1585853

URL: http://svn.apache.org/r1585853
Log:
Redefine the globalXsltFile initialisation parameter of the DefaultServlet as 
relative to CATALINA_BASE/conf or CATALINA_HOME/conf.
Prevent user supplied XSLTs used by the DefaultServlet from defining external 
entities.

Modified:
tomcat/tc6.0.x/trunk/STATUS.txt
tomcat/tc6.0.x/trunk/conf/web.xml
tomcat/tc6.0.x/trunk/java/org/apache/catalina/servlets/DefaultServlet.java

tomcat/tc6.0.x/trunk/java/org/apache/catalina/servlets/LocalStrings.properties
tomcat/tc6.0.x/trunk/webapps/docs/changelog.xml
tomcat/tc6.0.x/trunk/webapps/docs/default-servlet.xml

Modified: tomcat/tc6.0.x/trunk/STATUS.txt
URL: 
http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/STATUS.txt?rev=1585853r1=1585852r2=1585853view=diff
==
--- tomcat/tc6.0.x/trunk/STATUS.txt (original)
+++ tomcat/tc6.0.x/trunk/STATUS.txt Tue Apr  8 22:19:46 2014
@@ -28,37 +28,6 @@ None
 PATCHES PROPOSED TO BACKPORT:
   [ New proposals should be added at the end of the list ]
 
-* Redefine the codeglobalXsltFile/code initialisation parameter of the
-  DefaultServlet as relative to CATALINA_BASE/conf or CATALINA_HOME/conf.
-  Prevent user supplied XSLTs used by the DefaultServlet from defining external
-  entities.
-  
http://people.apache.org/~markt/patches/2014-03-17-globalXsltFile-tc6-v1.patch
-  +1: markt, kkolinko, remm
-  -1: schultz: The idea of the patch is fine: I'm actually +1.
-   I have some small nits:
-   2. Two instances of swallowing IOException
-   when closing File streams. We should at least log a warning.
-   The case of InputStream vs OutputStream is not relevant:
-   a stream left open should be logged. Honestly, it will
-   pretty much never happen, but that's no excuse not to log
-   a potential problem.
-  kkolinko:
-Re 2.:
-  Those are input streams that are read, not written. Nothing
-  should really happen when those are closed.
-  remm: no need to add i18n for something that will not happen
-  markt: Not logging exceptions on close is consistent with the code prior
- to this patch. While I'm not convinced of the need, I'm happy to
- replace each of those two // Ignore lines with these three lines:
- if (debug  10) {
- log(e.getMessage(), e);
- }
-
-  schultz: I'm +1 if there's a debug message. I would prefer a WARN or
-   something like that for an allegedly impossible situation, but
-   I'll settle for debug ;)
-  -1:
-
 * Fix http://issues.apache.org/bugzilla/show_bug.cgi?id=56283
   Add Java 8 support to Jasper's default configuration
   http://people.apache.org/~markt/patches/2014-03-19-Jasper-Java8-tc6-v1.patch

Modified: tomcat/tc6.0.x/trunk/conf/web.xml
URL: 
http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/conf/web.xml?rev=1585853r1=1585852r2=1585853view=diff
==
--- tomcat/tc6.0.x/trunk/conf/web.xml (original)
+++ tomcat/tc6.0.x/trunk/conf/web.xml Tue Apr  8 22:19:46 2014
@@ -87,10 +87,12 @@
   !--   globalXsltFile[null]   --
   !--  --
   !--   globalXsltFile  Site wide configuration version of --
-  !--   localXsltFile This argument is expected--
-  !--   to be a physical file. [null]  --
-  !--  --
-  !--  --
+  !--   localXsltFile. This argument must either be an --
+  !--   absolute or relative (to either--
+  !--   $CATALINA_BASE/conf or $CATALINA_HOME/conf)--
+  !--   path that points to a location below either--
+  !--   $CATALINA_BASE/conf (checked first) or --
+  !--   $CATALINA_HOME/conf (checked second).[null]--
 
 servlet
 servlet-namedefault/servlet-name

Modified: 
tomcat/tc6.0.x/trunk/java/org/apache/catalina/servlets/DefaultServlet.java
URL: 
http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/java/org/apache/catalina/servlets/DefaultServlet.java?rev=1585853r1=1585852r2=1585853view=diff
==
--- tomcat/tc6.0.x/trunk/java/org/apache/catalina/servlets/DefaultServlet.java 
(original)
+++ tomcat/tc6.0.x/trunk/java/org/apache/catalina/servlets/DefaultServlet.java 
Tue Apr  8 22:19:46 2014
@@ -14,8 +14,6 @@
  * See the License for the specific language governing 

svn commit: r1585855 - /tomcat/tc6.0.x/trunk/STATUS.txt

2014-04-08 Thread markt
Author: markt
Date: Tue Apr  8 22:22:21 2014
New Revision: 1585855

URL: http://svn.apache.org/r1585855
Log:
Update Java 8 support proposal

Modified:
tomcat/tc6.0.x/trunk/STATUS.txt

Modified: tomcat/tc6.0.x/trunk/STATUS.txt
URL: 
http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/STATUS.txt?rev=1585855r1=1585854r2=1585855view=diff
==
--- tomcat/tc6.0.x/trunk/STATUS.txt (original)
+++ tomcat/tc6.0.x/trunk/STATUS.txt Tue Apr  8 22:22:21 2014
@@ -29,21 +29,14 @@ PATCHES PROPOSED TO BACKPORT:
   [ New proposals should be added at the end of the list ]
 
 * Fix http://issues.apache.org/bugzilla/show_bug.cgi?id=56283
-  Add Java 8 support to Jasper's default configuration
-  http://people.apache.org/~markt/patches/2014-03-19-Jasper-Java8-tc6-v1.patch
-  
http://people.apache.org/~markt/patches/2014-03-23-Jasper-Java8-tc6-part2-v1.patch
-  +1: markt, remm
-  +1: kkolinko:
-   - See r1557990. There are noTldJars lists in TldConfig, 
TldLocationsCache
- that have to be updated. Maybe add support for ecj-*.jar pattern
- there? (If not, then just add 4.3.2 and P20140317-1600 versions).
-
-   - Technically CompilerOptions.VERSION_1_8 is a String constant 1.8,
- so it will be inlined at compile time. At runtime Jasper will be
- compatible with any earlier versions of ecj 4.3.x.
- Thus I am OK with this change.
-  markt: Additional patch added
-  kkolinko: Thank you. Changing the vote to +1.
+  Add support for running Tomcat 6 with ecj-P20140317-1600.jar (as drop-in
+  replacement for ecj-4.3.1.jar). Add support for value 1.8 for the
+  compilerSourceVM and compilerTargetVM options.
+  Note that, per previous comments, ecj-P20140317-1600.jar can only be used 
when
+  running with Java 6 or later. The 1.8 options make sense only when running
+  with Java 8 (or later).
+  https://issues.apache.org/bugzilla/attachment.cgi?id=31476action=diff
+  +1: markt
   -1:
 
 * Add a work around for validating XML documents (often TLDs) that use



-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



svn commit: r1585856 - /tomcat/tc6.0.x/trunk/STATUS.txt

2014-04-08 Thread markt
Author: markt
Date: Tue Apr  8 22:25:41 2014
New Revision: 1585856

URL: http://svn.apache.org/r1585856
Log:
Vote

Modified:
tomcat/tc6.0.x/trunk/STATUS.txt

Modified: tomcat/tc6.0.x/trunk/STATUS.txt
URL: 
http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/STATUS.txt?rev=1585856r1=1585855r2=1585856view=diff
==
--- tomcat/tc6.0.x/trunk/STATUS.txt (original)
+++ tomcat/tc6.0.x/trunk/STATUS.txt Tue Apr  8 22:25:41 2014
@@ -44,7 +44,7 @@ PATCHES PROPOSED TO BACKPORT:
   are based.
   (Backport of r1579931)
   
https://people.apache.org/~kkolinko/patches/2014-04-05_tc6_LocalResolver_nameOnly.patch
-  +1: kkolinko
+  +1: kkolinko, markt
   -1:
 
 



-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 55943] Provide a way prevent looking at the System classloader before the webapp classloaders

2014-04-08 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=55943

hifisoftw...@gmail.com changed:

   What|Removed |Added

 Status|RESOLVED|REOPENED
 Resolution|FIXED   |---

--- Comment #9 from hifisoftw...@gmail.com ---
This change breaks previous behaviour. We have an app that sets some static
variable values and then launches embedded tomcat. Embeded tomcat has a war
file that inspects values of these static variables. This no longer seems to
work.

We want to use a newer version of tomcat in order to close any security issues.
Is there is any way to add a flag to be able to revert to the old behaviour?

-- 
You are receiving this mail because:
You are the assignee for the bug.

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 56363] OpenSSL security advisory - Heartbleed bug

2014-04-08 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=56363

Neven Cvetkovic neven.cvetko...@gmail.com changed:

   What|Removed |Added

 CC||neven.cvetko...@gmail.com

-- 
You are receiving this mail because:
You are the assignee for the bug.

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



CVE-2014-0160

2014-04-08 Thread Andrew Carr
http://www.openssl.org/news/secadv_20140407.txt

Hi Tomcat Devs,

I have been on the dev list for a few years, and a tomcat developer longer
than that.  While I haven't contributed yet, I was curious if this cve
needs a contribution.  As far as I can tell, if you recompile your native
libs with the unaffected version of SSL, you will not be vulnerable to this
CVE.

Is that assumption correct or does there need to be a change to tcnative?

-- 
With Regards,
Andrew Carr

e. andrewlanec...@gmail.com
w. andrew.c...@openlogic.com
h. 4235255668
c. 4239489852
a. 101 Francis Drive, Greeneville, TN, 37743


svn commit: r1585865 - /tomcat/tc6.0.x/trunk/STATUS.txt

2014-04-08 Thread schultz
Author: schultz
Date: Tue Apr  8 23:54:35 2014
New Revision: 1585865

URL: http://svn.apache.org/r1585865
Log:
Votes

Modified:
tomcat/tc6.0.x/trunk/STATUS.txt

Modified: tomcat/tc6.0.x/trunk/STATUS.txt
URL: 
http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/STATUS.txt?rev=1585865r1=1585864r2=1585865view=diff
==
--- tomcat/tc6.0.x/trunk/STATUS.txt (original)
+++ tomcat/tc6.0.x/trunk/STATUS.txt Tue Apr  8 23:54:35 2014
@@ -36,7 +36,7 @@ PATCHES PROPOSED TO BACKPORT:
   running with Java 6 or later. The 1.8 options make sense only when running
   with Java 8 (or later).
   https://issues.apache.org/bugzilla/attachment.cgi?id=31476action=diff
-  +1: markt
+  +1: markt, schultz
   -1:
 
 * Add a work around for validating XML documents (often TLDs) that use
@@ -44,7 +44,7 @@ PATCHES PROPOSED TO BACKPORT:
   are based.
   (Backport of r1579931)
   
https://people.apache.org/~kkolinko/patches/2014-04-05_tc6_LocalResolver_nameOnly.patch
-  +1: kkolinko, markt
+  +1: kkolinko, markt, schultz
   -1:
 
 



-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Tomcat Wiki] Update of summit-na-2014 by JeanFredericClere

2014-04-08 Thread Apache Wiki
Dear Wiki user,

You have subscribed to a wiki page or wiki category on Tomcat Wiki for change 
notification.

The summit-na-2014 page has been changed by JeanFredericClere:
https://wiki.apache.org/tomcat/summit-na-2014?action=diffrev1=8rev2=9

   to provide a OpenSSL provider for tomcat (something to have in tc-native)
   * Change the way Apache Commons DBCP 2 and Pool 2 are consumed (svn copy and 
then merge subsequent changes)
   * Add support for JSR196 JASPIC
+  * mavenization of build
+  * Arquillian tests
   * Please add your topics here...
  

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 55943] Provide a way prevent looking at the System classloader before the webapp classloaders

2014-04-08 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=55943

Mark Thomas ma...@apache.org changed:

   What|Removed |Added

 Status|REOPENED|RESOLVED
 Resolution|--- |FIXED

--- Comment #10 from Mark Thomas ma...@apache.org ---
This configurable. See this thread for details:
http://markmail.org/thread/mid36pgk7nckp2rr

-- 
You are receiving this mail because:
You are the assignee for the bug.

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Tomcat Wiki] Update of summit-na-2014 by ChristopherSchultz

2014-04-08 Thread Apache Wiki
Dear Wiki user,

You have subscribed to a wiki page or wiki category on Tomcat Wiki for change 
notification.

The summit-na-2014 page has been changed by ChristopherSchultz:
https://wiki.apache.org/tomcat/summit-na-2014?action=diffrev1=9rev2=10

   * Add support for JSR196 JASPIC
   * mavenization of build
   * Arquillian tests
+  * Additions to authentication/realm API to improve extension capabilities 
(e.g. support bcrypt, pbkdf2, etc.)
   * Please add your topics here...
  

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[GUMP@vmgump]: Project tomcat-trunk-test-nio2 (in module tomcat-trunk) failed

2014-04-08 Thread Bill Barker
To whom it may engage...

This is an automated request, but not an unsolicited one. For 
more information please visit http://gump.apache.org/nagged.html, 
and/or contact the folk at gene...@gump.apache.org.

Project tomcat-trunk-test-nio2 has an issue affecting its community integration.
This issue affects 1 projects,
 and has been outstanding for 25 runs.
The current state of this project is 'Failed', with reason 'Build Failed'.
For reference only, the following projects are affected by this:
- tomcat-trunk-test-nio2 :  Tomcat 8.x, a web server implementing the Java 
Servlet 3.1,
...


Full details are available at:

http://vmgump.apache.org/gump/public/tomcat-trunk/tomcat-trunk-test-nio2/index.html

That said, some information snippets are provided here.

The following annotations (debug/informational/warning/error messages) were 
provided:
 -DEBUG- Dependency on commons-daemon exists, no need to add for property 
commons-daemon.native.src.tgz.
 -DEBUG- Dependency on commons-daemon exists, no need to add for property 
tomcat-native.tar.gz.
 -DEBUG- Dependency on tomcat-trunk exists, no need to add for property 
tomcat-dbcp.home.
 -INFO- Failed with reason build failed
 -INFO- Project Reports in: 
/srv/gump/public/workspace/tomcat-trunk/output/build/logs



The following work was performed:
http://vmgump.apache.org/gump/public/tomcat-trunk/tomcat-trunk-test-nio2/gump_work/build_tomcat-trunk_tomcat-trunk-test-nio2.html
Work Name: build_tomcat-trunk_tomcat-trunk-test-nio2 (Type: Build)
Work ended in a state of : Failed
Elapsed: 11 mins 12 secs
Command Line: /usr/lib/jvm/java-7-oracle/bin/java -Djava.awt.headless=true 
-Dbuild.sysclasspath=only org.apache.tools.ant.Main 
-Dgump.merge=/srv/gump/public/gump/work/merge.xml 
-Djunit.jar=/srv/gump/public/workspace/junit/target/junit-4.12-SNAPSHOT.jar 
-Dobjenesis.jar=/srv/gump/public/workspace/objenesis/main/target/objenesis-2.2-SNAPSHOT.jar
 
-Dtomcat-native.tar.gz=/srv/gump/public/workspace/apache-commons/daemon/dist/bin/commons-daemon-20140409-native-src.tar.gz
 -Dexamples.sources.skip=true 
-Dtomcat-dbcp.home=/srv/gump/public/workspace/tomcat-trunk/tomcat-deps 
-Djdt.jar=/srv/gump/packages/eclipse/plugins/P20140317-1600/ecj-P20140317-1600.jar
 
-Dcommons-daemon.jar=/srv/gump/public/workspace/apache-commons/daemon/dist/commons-daemon-20140409.jar
 
-Dcommons-daemon.native.src.tgz=/srv/gump/public/workspace/apache-commons/daemon/dist/bin/commons-daemon-20140409-native-src.tar.gz
 -Dexecute.test.nio=false -Dtest.accesslog=true 
-Dcommons-pool.home=/srv/gump/public/workspace/apache-com
 mons/pool -Dcommons-dbcp.home=/srv/gump/public/workspace/apache-commons/dbcp 
-Dexecute.test.nio2=true -Dexecute.test.bio=false 
-Deasymock.jar=/srv/gump/public/workspace/easymock/easymock/target/easymock-3.3-SNAPSHOT.jar
 
-Dhamcrest.jar=/srv/gump/public/workspace/hamcrest/hamcrest-java/build/hamcrest-core-20140409.jar
 -Dcglib.jar=/srv/gump/packages/cglib/cglib-nodep-2.2.jar test 
[Working Directory: /srv/gump/public/workspace/tomcat-trunk]
CLASSPATH: 
/usr/lib/jvm/java-7-oracle/lib/tools.jar:/srv/gump/public/workspace/tomcat-trunk/output/build/webapps/examples/WEB-INF/classes:/srv/gump/public/workspace/tomcat-trunk/output/testclasses:/srv/gump/public/workspace/ant/dist/lib/ant.jar:/srv/gump/public/workspace/ant/dist/lib/ant-launcher.jar:/srv/gump/public/workspace/ant/dist/lib/ant-jmf.jar:/srv/gump/public/workspace/ant/dist/lib/ant-junit.jar:/srv/gump/public/workspace/ant/dist/lib/ant-junit4.jar:/srv/gump/public/workspace/ant/dist/lib/ant-swing.jar:/srv/gump/public/workspace/ant/dist/lib/ant-apache-resolver.jar:/srv/gump/public/workspace/ant/dist/lib/ant-apache-xalan2.jar:/srv/gump/public/workspace/xml-commons/java/build/resolver.jar:/srv/gump/public/workspace/tomcat-trunk/output/build/bin/bootstrap.jar:/srv/gump/public/workspace/tomcat-trunk/output/build/bin/tomcat-juli.jar:/srv/gump/public/workspace/tomcat-trunk/output/build/lib/annotations-api.jar:/srv/gump/public/workspace/tomcat-trunk/output/build/lib/servle