[Bug 57129] Regression. Load WEB-INF/lib jarfiles in alphabetical order

https://issues.apache.org/bugzilla/show_bug.cgi?id=57129 --- Comment #1 from Jörgen Persson --- Created attachment 32134 --> https://issues.apache.org/bugzilla/attachment.cgi?id=32134&action=edit Adds Arrays.sort(...) in the two identified methods -- You are receiving this mail because: You a

[Bug 57129] New: Regression. Load WEB-INF/lib jarfiles in alphabetical order

https://issues.apache.org/bugzilla/show_bug.cgi?id=57129 Bug ID: 57129 Summary: Regression. Load WEB-INF/lib jarfiles in alphabetical order Product: Tomcat 8 Version: trunk Hardware: PC OS: Linux

[GUMP@vmgump]: Project tomcat-trunk-validate (in module tomcat-trunk) failed

To whom it may engage... This is an automated request, but not an unsolicited one. For more information please visit http://gump.apache.org/nagged.html, and/or contact the folk at gene...@gump.apache.org. Project tomcat-trunk-validate has an issue affecting its community integration. Th

svn commit: r1633500 - in /tomcat/trunk: build.xml webapps/docs/changelog.xml

Author: kkolinko Date: Wed Oct 22 00:40:56 2014 New Revision: 1633500 URL: http://svn.apache.org/r1633500 Log: Suppress timestamp comment in generated Javadoc. Such as Those comments result in one changed line per each HTML file, which makes the diff between different versions of documentation u

svn commit: r1633489 - in /tomcat/tc7.0.x/trunk: ./ webapps/docs/changelog.xml webapps/examples/WEB-INF/web.xml webapps/examples/jsp/chat/ webapps/examples/jsp/index.html webapps/examples/servlets/cha

Author: kkolinko Date: Tue Oct 21 23:55:32 2014 New Revision: 1633489 URL: http://svn.apache.org/r1633489 Log: Move Async and Comet examples from JSP examples page to Servlets examples page, like it have already been done in Tomcat 8. Merged r1518578, r1518581, r1518589 from tomcat/trunk. Added:

Re: [VOTE] Release Apache Tomcat Native 1.1.32

Mark, On 10/21/14 6:11 PM, Mark Thomas wrote: > On 21/10/2014 10:05, Mark Thomas wrote: >> Version 1.1.32 includes the following changes: >> - Add support for TLS v1.1 and TLS v1.2 >> - Windows binaries built with APR 1.5.1 and OpenSSL 1.0.1j >> >> The proposed release artefacts can be found at [1

svn commit: r1633484 - in /tomcat/tc7.0.x/trunk: ./ build.xml webapps/docs/changelog.xml

Author: kkolinko Date: Tue Oct 21 23:25:17 2014 New Revision: 1633484 URL: http://svn.apache.org/r1633484 Log: Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=57079 When Eclipse Compiler JAR is updated, make sure to delete its old version from Tomcat lib directory. It is backport of r1606

[Bug 57079] Use Tomcat version number in jdbc-pool manifest when building it as part of Tomcat

https://issues.apache.org/bugzilla/show_bug.cgi?id=57079 --- Comment #2 from Konstantin Kolinko --- Backported to Tomcat 7 in r1633478 and will be in 7.0.57 onwards. -- You are receiving this mail because: You are the assignee for the bug. --

svn commit: r1633478 - in /tomcat/tc7.0.x/trunk: ./ build.xml webapps/docs/changelog.xml

Author: kkolinko Date: Tue Oct 21 22:51:35 2014 New Revision: 1633478 URL: http://svn.apache.org/r1633478 Log: Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=57079 Use Tomcat version number for jdbc-pool module when building and shipping the module as part of Tomcat. It is backport of r1

Re: [VOTE] Release Apache Tomcat Native 1.1.32

On 21/10/2014 10:05, Mark Thomas wrote: > Version 1.1.32 includes the following changes: > - Add support for TLS v1.1 and TLS v1.2 > - Windows binaries built with APR 1.5.1 and OpenSSL 1.0.1j > > The proposed release artefacts can be found at [1], > and the build was done using tag [2]. > > Since

[Bug 53952] Add support for TLS 1.1 and 1.2

https://issues.apache.org/bugzilla/show_bug.cgi?id=53952 --- Comment #45 from Mark Woon --- In reply to comment #43: yes. I also agree with comment #33 - SSLv2 and SSLv3 should just be removed from the options. So glad to see that this is moving forward. -- You are receiving this mail because

svn commit: r1633474 - in /tomcat/site/trunk: docs/ xdocs/

Author: kkolinko Date: Tue Oct 21 21:58:26 2014 New Revision: 1633474 URL: http://svn.apache.org/r1633474 Log: Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=57103 Add verify link to other download pages and use HTTPS for it. (Followup to r1633457) Modified: tomcat/site/trunk/docs/do

svn commit: r1633457 - in /tomcat/site/trunk: docs/download-60.html docs/download-70.html docs/download-80.html xdocs/download-60.xml xdocs/download-70.xml xdocs/download-80.xml

Author: markt Date: Tue Oct 21 20:43:00 2014 New Revision: 1633457 URL: http://svn.apache.org/r1633457 Log: Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=57103. Add verification link Modified: tomcat/site/trunk/docs/download-60.html tomcat/site/trunk/docs/download-70.html to

[Bug 57103] Download page should provide details on how to verify the downloads

https://issues.apache.org/bugzilla/show_bug.cgi?id=57103 Mark Thomas changed: What|Removed |Added Status|NEW |RESOLVED Resolution|---

[Bug 57105] under in web.xml only accept integer which doesn't follow spec and cause jsp compile fail

https://issues.apache.org/bugzilla/show_bug.cgi?id=57105 Mark Thomas changed: What|Removed |Added Status|NEW |RESOLVED Resolution|---

svn commit: r1633452 - in /tomcat/tc7.0.x/trunk: ./ java/org/apache/catalina/deploy/JspPropertyGroup.java webapps/docs/changelog.xml

Author: markt Date: Tue Oct 21 20:33:51 2014 New Revision: 1633452 URL: http://svn.apache.org/r1633452 Log: Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=57105 When parsing web.xml do not limit the buffer element of the jsp-property-group element to integer values as the allowed values a

svn commit: r1633448 - /tomcat/trunk/java/org/apache/tomcat/util/descriptor/web/JspPropertyGroupDescriptorImpl.java

Author: markt Date: Tue Oct 21 20:21:46 2014 New Revision: 1633448 URL: http://svn.apache.org/r1633448 Log: Simplify. These values are already Strings. Modified: tomcat/trunk/java/org/apache/tomcat/util/descriptor/web/JspPropertyGroupDescriptorImpl.java Modified: tomcat/trunk/java/org/apac

svn commit: r1633447 - in /tomcat/trunk: java/org/apache/tomcat/util/descriptor/web/JspPropertyGroup.java webapps/docs/changelog.xml

Author: markt Date: Tue Oct 21 20:21:08 2014 New Revision: 1633447 URL: http://svn.apache.org/r1633447 Log: Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=57105 When parsing web.xml do not limit the buffer element of the jsp-property-group element to integer values as the allowed values a

[Bug 53952] Add support for TLS 1.1 and 1.2

https://issues.apache.org/bugzilla/show_bug.cgi?id=53952 --- Comment #44 from Christopher Schultz --- (In reply to Ralf Hauser from comment #43) > I guess comment 30 ff. refers to > https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566 ? Yes. Patches are available for all supported ver

[Bug 57113] ImportHandler not returning class properly from resolveClass()

https://issues.apache.org/bugzilla/show_bug.cgi?id=57113 Mark Thomas changed: What|Removed |Added Status|NEW |RESOLVED Resolution|---

svn commit: r1633440 - in /tomcat/trunk: java/javax/el/ImportHandler.java test/javax/el/TestImportHandler.java webapps/docs/changelog.xml

Author: markt Date: Tue Oct 21 19:26:01 2014 New Revision: 1633440 URL: http://svn.apache.org/r1633440 Log: Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=57113 Fix broken package imports in Expression Language when more than one package was imported and the desired class was not in the l

Re: Testing server SSL/TLS protocol and cipher support

Konstantin, On 10/21/14 2:18 PM, Konstantin Kolinko wrote: > 2014-10-21 21:55 GMT+04:00 Christopher Schultz : >> All, >> >> As part of my testing for the recent changes to Tomcat and tcnative, I >> wanted to use something like "sslscan", but that tool does not support >> anything above TLSv1. >> >

Re: Testing server SSL/TLS protocol and cipher support

2014-10-21 21:55 GMT+04:00 Christopher Schultz : > All, > > As part of my testing for the recent changes to Tomcat and tcnative, I > wanted to use something like "sslscan", but that tool does not support > anything above TLSv1. > > One can use OpenSSL s_client but that's fairly tedious. Here is a

[Bug 57123] Update to Eclipse ECJ 4.4.1

https://issues.apache.org/bugzilla/show_bug.cgi?id=57123 Konstantin Kolinko changed: What|Removed |Added OS||All --- Comment #2 from Konst

Testing server SSL/TLS protocol and cipher support

All, As part of my testing for the recent changes to Tomcat and tcnative, I wanted to use something like "sslscan", but that tool does not support anything above TLSv1. One can use OpenSSL s_client but that's fairly tedious. I took the opportunity to write a Java client that mimics the important

[Bug 57123] Update to Eclipse ECJ 4.4.1

https://issues.apache.org/bugzilla/show_bug.cgi?id=57123 --- Comment #1 from Konstantin Kolinko --- Created attachment 32133 --> https://issues.apache.org/bugzilla/attachment.cgi?id=32133&action=edit 2014-10-21_tc8_57123_ecj441.patch Patch to update Tomcat 8 (trunk) to ECJ 4.4.1 -- You are r

[Bug 57123] New: Update to Eclipse ECJ 4.4.1

https://issues.apache.org/bugzilla/show_bug.cgi?id=57123 Bug ID: 57123 Summary: Update to Eclipse ECJ 4.4.1 Product: Tomcat 8 Version: 8.0.14 Hardware: PC Status: NEW Severity: enhancement Priority: P2

[GUMP@vmgump]: Project tomcat-trunk-test-apr (in module tomcat-trunk) failed

it-4.12-SNAPSHOT.jar -Dobjenesis.jar=/srv/gump/public/workspace/objenesis/main/target/objenesis-2.2-SNAPSHOT.jar -Dtest.reports=output/logs-APR -Dtomcat-native.tar.gz=/srv/gump/public/workspace/apache-commons/daemon/dist/bin/commons-daemon-20141021-native-src.tar.gz -Dexamples.sources.skip=true

svn commit: r1633393 - /tomcat/tc6.0.x/trunk/STATUS.txt

Author: schultz Date: Tue Oct 21 15:12:27 2014 New Revision: 1633393 URL: http://svn.apache.org/r1633393 Log: Revise vote Modified: tomcat/tc6.0.x/trunk/STATUS.txt Modified: tomcat/tc6.0.x/trunk/STATUS.txt URL: http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/STATUS.txt?rev=1633393&r1=1633

Re: [VOTE] Release Apache Tomcat Native 1.1.32

All, On 10/21/14 5:05 AM, Mark Thomas wrote: > Version 1.1.32 includes the following changes: > - Add support for TLS v1.1 and TLS v1.2 > - Windows binaries built with APR 1.5.1 and OpenSSL 1.0.1j > > The proposed release artefacts can be found at [1], > and the build was done using tag [2]. > >

Re: [VOTE] Release Apache Tomcat Native 1.1.32

All, On 10/21/14 5:05 AM, Mark Thomas wrote: > Version 1.1.32 includes the following changes: > - Add support for TLS v1.1 and TLS v1.2 > - Windows binaries built with APR 1.5.1 and OpenSSL 1.0.1j > > The proposed release artifacts can be found at [1], > and the build was done using tag [2]. > >

[Bug 57116] Bio connector: Do not fallback to default protocol list if "sslEnabledProtocols" has no matches

https://issues.apache.org/bugzilla/show_bug.cgi?id=57116 --- Comment #2 from Mark Thomas --- Updated patch proposed for 6.0.x to address this. -- You are receiving this mail because: You are the assignee for the bug. - To unsu

svn commit: r1633386 - /tomcat/tc6.0.x/trunk/STATUS.txt

Author: markt Date: Tue Oct 21 14:20:49 2014 New Revision: 1633386 URL: http://svn.apache.org/r1633386 Log: Update proposal Modified: tomcat/tc6.0.x/trunk/STATUS.txt Modified: tomcat/tc6.0.x/trunk/STATUS.txt URL: http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/STATUS.txt?rev=1633386&r1=16

[Bug 57122] class loading during remote deployment not working (NoClassDefFoundError)

https://issues.apache.org/bugzilla/show_bug.cgi?id=57122 --- Comment #7 from michael.baul...@knipp.de --- Yes, sorry, didn't see you question about the location of the classes. They are located in the WEB-INF/lib folder. -- You are receiving this mail because: You are the assignee for the bug.

svn commit: r1633370 - in /tomcat/tc7.0.x/trunk: ./ java/org/apache/tomcat/util/net/jsse/JSSESocketFactory.java java/org/apache/tomcat/util/net/jsse/res/LocalStrings.properties

Author: markt Date: Tue Oct 21 13:08:28 2014 New Revision: 1633370 URL: http://svn.apache.org/r1633370 Log: Add some debug logging for excluded protocols Modified: tomcat/tc7.0.x/trunk/ (props changed) tomcat/tc7.0.x/trunk/java/org/apache/tomcat/util/net/jsse/JSSESocketFactory.java

svn commit: r1633369 - in /tomcat/trunk/java/org/apache/tomcat/util/net/jsse: JSSESocketFactory.java res/LocalStrings.properties

Author: markt Date: Tue Oct 21 13:07:55 2014 New Revision: 1633369 URL: http://svn.apache.org/r1633369 Log: Add some debug logging for excluded protocols Modified: tomcat/trunk/java/org/apache/tomcat/util/net/jsse/JSSESocketFactory.java tomcat/trunk/java/org/apache/tomcat/util/net/jsse/r

svn commit: r1633365 - in /tomcat/tc7.0.x/trunk: ./ webapps/docs/changelog.xml

Author: kkolinko Date: Tue Oct 21 12:59:35 2014 New Revision: 1633365 URL: http://svn.apache.org/r1633365 Log: Update changelog for BZ 47919 per r1630407 It logs not just key env vars, but all of them, and logs command line arguments. I am emphasizing CATALINA_OPTS, JAVA_OPTS, as that may be a sec

Re: [VOTE] Release Apache Tomcat Native 1.1.32

2014-10-21 13:05 GMT+04:00 Mark Thomas : > Version 1.1.32 includes the following changes: > - Add support for TLS v1.1 and TLS v1.2 > - Windows binaries built with APR 1.5.1 and OpenSSL 1.0.1j > > The proposed release artefacts can be found at [1], > and the build was done using tag [2]. > > Since

[Bug 57122] class loading during remote deployment not working (NoClassDefFoundError)

https://issues.apache.org/bugzilla/show_bug.cgi?id=57122 --- Comment #6 from Mark Thomas --- Looks like the classes are located in the web application. I was just about to mark this as a duplicate as well but Konstantin beat me to it. -- You are receiving this mail because: You are the assignee

[Bug 56321] ServletContextListener.contextDestroyed not completely executed when updating war

https://issues.apache.org/bugzilla/show_bug.cgi?id=56321 Konstantin Kolinko changed: What|Removed |Added CC||michael.baul...@knipp.de ---

[Bug 57122] class loading during remote deployment not working (NoClassDefFoundError)

https://issues.apache.org/bugzilla/show_bug.cgi?id=57122 Konstantin Kolinko changed: What|Removed |Added Status|NEW |RESOLVED Resolution|-

[Bug 57122] class loading during remote deployment not working (NoClassDefFoundError)

https://issues.apache.org/bugzilla/show_bug.cgi?id=57122 --- Comment #4 from Mark Thomas --- (In reply to michael.bauland from comment #3) > Thanks for the quick response. > 1. I have attached the full stack trace. There have been no preceding errors > in > the log, as you can see. > > 2. No,

[Bug 57118] Throw EncodeException from RemoteEndpoint.Basic.sendObject()

https://issues.apache.org/bugzilla/show_bug.cgi?id=57118 Mark Thomas changed: What|Removed |Added Status|NEW |RESOLVED Resolution|---

svn commit: r1633359 - in /tomcat/tc7.0.x/trunk: ./ java/org/apache/tomcat/websocket/WsRemoteEndpointImplBase.java test/org/apache/tomcat/websocket/pojo/TestEncodingDecoding.java webapps/docs/changelo

Author: markt Date: Tue Oct 21 12:36:06 2014 New Revision: 1633359 URL: http://svn.apache.org/r1633359 Log: Ensure that that an EncodeException is thrown by RemoteEndpoint.Basic.sendObject(Object) rather than an IOException when no suitable Encoder is configured for the given Object. Modified

[Bug 57122] class loading during remote deployment not working (NoClassDefFoundError)

https://issues.apache.org/bugzilla/show_bug.cgi?id=57122 --- Comment #3 from michael.baul...@knipp.de --- Thanks for the quick response. 1. I have attached the full stack trace. There have been no preceding errors in the log, as you can see. 2. No, we do not use jBoss (just richfaces) and have

[Bug 57122] class loading during remote deployment not working (NoClassDefFoundError)

https://issues.apache.org/bugzilla/show_bug.cgi?id=57122 --- Comment #2 from michael.baul...@knipp.de --- Created attachment 32132 --> https://issues.apache.org/bugzilla/attachment.cgi?id=32132&action=edit error log -- You are receiving this mail because: You are the assignee for the bug. ---

[Bug 57122] class loading during remote deployment not working (NoClassDefFoundError)

https://issues.apache.org/bugzilla/show_bug.cgi?id=57122 --- Comment #1 from Konstantin Kolinko --- (In reply to michael.bauland from comment #0) > > SEVERE: Exception sending context destroyed event to listener instance of > class x.y.z.InitListener > java.lang.NoClassDefFoundError: > org/jboss

[Bug 57122] New: class loading during remote deployment not working (NoClassDefFoundError)

https://issues.apache.org/bugzilla/show_bug.cgi?id=57122 Bug ID: 57122 Summary: class loading during remote deployment not working (NoClassDefFoundError) Product: Tomcat 7 Version: 7.0.53 Hardware: PC OS: Li

Early Access builds for JDK 9 b35 and JDK 8u40 b10 are available on java.net

Hi Mladen/Mark, Early Access build for JDK 9 b35 is available on java.net, summary of changes are listed here Early Access build for JDK 8u40 b10 is available on j

svn commit: r1633346 - /tomcat/trunk/webapps/docs/changelog.xml

Author: kkolinko Date: Tue Oct 21 11:35:35 2014 New Revision: 1633346 URL: http://svn.apache.org/r1633346 Log: Update changelog for BZ 47919 per r1630407 It logs not just key env vars, but all of them, and logs command line arguments. I am emphasizing CATALINA_OPTS, JAVA_OPTS, as that may be a sec

svn commit: r1633342 - in /tomcat/trunk: java/org/apache/tomcat/websocket/WsRemoteEndpointImplBase.java test/org/apache/tomcat/websocket/pojo/TestEncodingDecoding.java webapps/docs/changelog.xml

Author: markt Date: Tue Oct 21 11:16:17 2014 New Revision: 1633342 URL: http://svn.apache.org/r1633342 Log: Ensure that that an EncodeException is thrown by RemoteEndpoint.Basic.sendObject(Object) rather than an IOException when no suitable Encoder is configured for the given Object. Modified

Re: [VOTE] Release Apache Tomcat Native 1.1.32

On 21/10/2014 10:05, Mark Thomas wrote: > Version 1.1.32 includes the following changes: > - Add support for TLS v1.1 and TLS v1.2 > - Windows binaries built with APR 1.5.1 and OpenSSL 1.0.1j > > The proposed release artefacts can be found at [1], > and the build was done using tag [2]. > > Since

[VOTE] Release Apache Tomcat Native 1.1.32

Version 1.1.32 includes the following changes: - Add support for TLS v1.1 and TLS v1.2 - Windows binaries built with APR 1.5.1 and OpenSSL 1.0.1j The proposed release artefacts can be found at [1], and the build was done using tag [2]. Since this release is primarily to address security issues, I

svn commit: r6809 - in /dev/tomcat/tomcat-connectors/native/1.1.32: ./ binaries/ source/

Author: markt Date: Tue Oct 21 08:57:53 2014 New Revision: 6809 Log: Upload Tomcat native 1.1.32 for voting Added: dev/tomcat/tomcat-connectors/native/1.1.32/ dev/tomcat/tomcat-connectors/native/1.1.32/binaries/ dev/tomcat/tomcat-connectors/native/1.1.32/binaries/tomcat-native-1.1.32

[Bug 53952] Add support for TLS 1.1 and 1.2

https://issues.apache.org/bugzilla/show_bug.cgi?id=53952 --- Comment #43 from Ralf Hauser --- I guess comment 30 ff. refers to https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566 ? -- You are receiving this mail because: You are the assignee for the bug.

[Bug 56780] IBM Java: server.startup gives error "java.lang.IllegalArgumentException: Only TLS1.2 protocol can be enabl ed in SP800_131 strict mode"

https://issues.apache.org/bugzilla/show_bug.cgi?id=56780 --- Comment #6 from Hariharan, R --- @Mark Thomas: I am able to see the bug fix in 7.0.56. @Karl Freburger: Can you mail a 64-bit IBM JRE for Windows to cloakcaval...@gmail.com? -- You are receiving this mail because: You are the assign