Tomcat ArrayIndexOutOfBoundsException in SocketBufferHandler

2018-02-01 Thread 鄢锦涛
Hello all, My environment : tomcat version is 8.5.23 (default configuration), JDK is 1.8.0_121 and Linux version is centos 3.10.0-327.el7.x86_64 With this environment, working under stress with http POST calls, After about 80 to 100 virtual users into the test we started seeing broken

Re: Mutual SSL client certificate validation(Key Usage and Extended Key Usage) in tomcat server

2018-02-01 Thread Indunil Rathnayake
Hi Chris, On 1 February 2018 at 20:25, Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Indunil, > > On 2/1/18 7:29 AM, Indunil Rathnayake wrote: > > I have configured a tomcat connector for handling requests for a > > particular

[Bug 62072] Add support for request compression

2018-02-01 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62072 Andy Wilkinson changed: What|Removed |Added CC|

[Bug 62072] New: Add support for request compression

2018-02-01 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62072 Bug ID: 62072 Summary: Add support for request compression Product: Tomcat 9 Version: unspecified Hardware: PC OS: Linux Status: NEW Severity:

Fix the public interfaces for Tomcat 9 in the release notes

2018-02-01 Thread Violeta Georgieva
Hi, As Tomcat 9 is now stable I think we can fix the public API here http://tomcat.apache.org/tomcat-9.0-doc/RELEASE-NOTES.txt Wdyt? Violeta

Re: Mutual SSL client certificate validation(Key Usage and Extended Key Usage) in tomcat server

2018-02-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Indunil, On 2/1/18 7:29 AM, Indunil Rathnayake wrote: > I have configured a tomcat connector for handling requests for a > particular servlet and have configured a trust store for the > connector. Anyone knows whether tomcat handles validation of

[Bug 62070] RemoteIPValve sets remote address to request object even X-Forwarded-For is tampered to refer localhost

2018-02-01 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62070 Mark Thomas changed: What|Removed |Added Status|NEW |RESOLVED

[Bug 62070] New: RemoteIPValve sets remote address to request object even X-Forwarded-For is tampered to refer localhost

2018-02-01 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62070 Bug ID: 62070 Summary: RemoteIPValve sets remote address to request object even X-Forwarded-For is tampered to refer localhost Product: Tomcat 7 Version: 7.0.82

Mutual SSL client certificate validation(Key Usage and Extended Key Usage) in tomcat server

2018-02-01 Thread Indunil Rathnayake
Hi, I have configured a tomcat connector for handling requests for a particular servlet and have configured a trust store for the connector. Anyone knows whether tomcat handles validation of "Key Usage" and "Extended Key Usage" extensions in client certificates? And how it's handled through

buildbot success in on tomcat-trunk

2018-02-01 Thread buildbot
The Buildbot has detected a restored build on builder tomcat-trunk while building . Full details are available at: https://ci.apache.org/builders/tomcat-trunk/builds/3015 Buildbot URL: https://ci.apache.org/ Buildslave for this Build: silvanus_ubuntu Build Reason: The AnyBranchScheduler

[Bug 62053] NullPointerException in Http2AsyncUpgradeHandler with Server Push

2018-02-01 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62053 Remy Maucherat changed: What|Removed |Added Status|NEW |RESOLVED

svn commit: r1822867 - in /tomcat/trunk: java/org/apache/coyote/http2/Http2AsyncUpgradeHandler.java webapps/docs/changelog.xml

2018-02-01 Thread remm
Author: remm Date: Thu Feb 1 11:17:17 2018 New Revision: 1822867 URL: http://svn.apache.org/viewvc?rev=1822867=rev Log: 62053: Fix NPE when writing push headers with HTTP/2 NIO2. Patch submitted by Holger Sunke. Modified:

[Bug 62053] NullPointerException in Http2AsyncUpgradeHandler with Server Push

2018-02-01 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62053 --- Comment #2 from holger.su...@bodo-peters.de --- It seemes to be triggered by a flaw in web application layer. Google Chrome keeps closing the SSL connection due to Server Push protocol violations.

[Bug 62069] NullPointerException when finishing response under the Linux

2018-02-01 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62069 Mark Thomas changed: What|Removed |Added Resolution|--- |INVALID

[Bug 62069] New: NullPointerException when finishing response under the Linux

2018-02-01 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62069 Bug ID: 62069 Summary: NullPointerException when finishing response under the Linux Product: Tomcat 8 Version: 8.5.15 Hardware: PC OS: Linux

buildbot failure in on tomcat-trunk

2018-02-01 Thread buildbot
The Buildbot has detected a new failure on builder tomcat-trunk while building . Full details are available at: https://ci.apache.org/builders/tomcat-trunk/builds/3014 Buildbot URL: https://ci.apache.org/ Buildslave for this Build: silvanus_ubuntu Build Reason: The AnyBranchScheduler

svn commit: r1822861 - in /tomcat/tc8.5.x/trunk: modules/jdbc-pool/src/main/java/org/apache/tomcat/jdbc/pool/interceptor/ webapps/docs/

2018-02-01 Thread kfujino
Author: kfujino Date: Thu Feb 1 08:49:14 2018 New Revision: 1822861 URL: http://svn.apache.org/viewvc?rev=1822861=rev Log: Add MBean for ResetAbandonedTimer. Added: tomcat/tc8.5.x/trunk/modules/jdbc-pool/src/main/java/org/apache/tomcat/jdbc/pool/interceptor/ResetAbandonedTimerMBean.java

svn commit: r1822860 - in /tomcat/trunk: modules/jdbc-pool/src/main/java/org/apache/tomcat/jdbc/pool/interceptor/ webapps/docs/

2018-02-01 Thread kfujino
Author: kfujino Date: Thu Feb 1 08:47:18 2018 New Revision: 1822860 URL: http://svn.apache.org/viewvc?rev=1822860=rev Log: Add MBean for ResetAbandonedTimer. Added: tomcat/trunk/modules/jdbc-pool/src/main/java/org/apache/tomcat/jdbc/pool/interceptor/ResetAbandonedTimerMBean.java (with

svn commit: r1822859 - /tomcat/trunk/modules/jdbc-pool/src/main/java/org/apache/tomcat/jdbc/pool/interceptor/ResetAbandonedTimer.java

2018-02-01 Thread kfujino
Author: kfujino Date: Thu Feb 1 08:40:38 2018 New Revision: 1822859 URL: http://svn.apache.org/viewvc?rev=1822859=rev Log: Simplify the code. Not need to search the JdbcInterceptor chain to get PooledConnection. Modified: