[Bug 64355] Web application and Login page Is very slow and Login page to load is taking 5 minitues in Tomcat 9.0.34

2020-04-19 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64355

Anantharao  changed:

   What|Removed |Added

 Resolution|INVALID |---
 Status|RESOLVED|REOPENED

--- Comment #2 from Anantharao  ---
(In reply to Mark Thomas from comment #1)
> Bugzilla is not a support forum. There is a range of tools and techniques
> that can be used to tack down the root cause of a performance issue
> including thread dumps and profilers. The users mailing list is the place to
> seek help with this issue.


The issue is not with Application for sure. because when we downgrade tomcat
its working perfectly fine. only when upgrade to this version the problem with
common daemon jar internal referenced classes are loading 5 or more minitues.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[tomcat-jakartaee-migration] 02/02: Test the migration of signed jar files

2020-04-19 Thread ebourg
This is an automated email from the ASF dual-hosted git repository.

ebourg pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/tomcat-jakartaee-migration.git

commit f23a64982f793ebe43665466cf780f57979e63d4
Author: Emmanuel Bourg 
AuthorDate: Mon Apr 20 02:02:55 2020 +0200

Test the migration of signed jar files
---
 pom.xml|  15 +++
 .../org/apache/tomcat/jakartaee/MigrationTest.java |  29 +
 src/test/resources/keystore.p12| Bin 0 -> 3848 bytes
 3 files changed, 44 insertions(+)

diff --git a/pom.xml b/pom.xml
index b66f833..3ddfc68 100644
--- a/pom.xml
+++ b/pom.xml
@@ -136,6 +136,21 @@
 
   
 
+
+
+  
+
+
+  
+  
+
+
+  
+  
+
+
+  
+
   
 
   
diff --git a/src/test/java/org/apache/tomcat/jakartaee/MigrationTest.java 
b/src/test/java/org/apache/tomcat/jakartaee/MigrationTest.java
index 9ba59b0..418b57f 100644
--- a/src/test/java/org/apache/tomcat/jakartaee/MigrationTest.java
+++ b/src/test/java/org/apache/tomcat/jakartaee/MigrationTest.java
@@ -163,4 +163,33 @@ public class MigrationTest {
 assertNotEquals("Implementation-Version manifest attribute not 
changed", "1.2.3", implementationVersion);
 assertTrue("Implementation-Version manifest attribute doesn't match 
the expected pattern", 
implementationVersion.matches("1\\.2\\.3-migrated-[\\d\\.]+.*"));
 }
+
+@Test
+public void testMigrateSignedJarFileRSA() throws Exception {
+testMigrateSignedJarFile("rsa");
+}
+
+@Test
+public void testMigrateSignedJarFileDSA() throws Exception {
+testMigrateSignedJarFile("dsa");
+}
+
+@Test
+public void testMigrateSignedJarFileEC() throws Exception {
+testMigrateSignedJarFile("ec");
+}
+
+private void testMigrateSignedJarFile(String algorithm) throws Exception {
+File jarFile = new File("target/test-classes/hellocgi-signed-" + 
algorithm + ".jar");
+
+Migration migration = new Migration();
+migration.setSource(jarFile);
+migration.setDestination(jarFile);
+migration.execute();
+
+JarFile jar = new JarFile(jarFile);
+assertNull("Digest not removed from the manifest", 
jar.getManifest().getAttributes("org/apache/tomcat/jakartaee/HelloCGI.class"));
+assertNull("Signature key not removed", jar.getEntry("META-INF/" + 
algorithm.toUpperCase() + "." + algorithm.toUpperCase()));
+assertNull("Signed manifest not removed", jar.getEntry("META-INF/" + 
algorithm.toUpperCase() + ".SF"));
+}
 }
diff --git a/src/test/resources/keystore.p12 b/src/test/resources/keystore.p12
new file mode 100644
index 000..6f1cf7a
Binary files /dev/null and b/src/test/resources/keystore.p12 differ


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[tomcat-jakartaee-migration] branch master updated (9cc4b6f -> f23a649)

2020-04-19 Thread ebourg
This is an automated email from the ASF dual-hosted git repository.

ebourg pushed a change to branch master
in repository 
https://gitbox.apache.org/repos/asf/tomcat-jakartaee-migration.git.


from 9cc4b6f  Remove unused methods in StringManager
 new 1738963  Remove the EC signature files
 new f23a649  Test the migration of signed jar files

The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.


Summary of changes:
 pom.xml|  15 +++
 .../org/apache/tomcat/jakartaee/Migration.java |   2 +-
 .../org/apache/tomcat/jakartaee/MigrationTest.java |  29 +
 src/test/resources/keystore.p12| Bin 0 -> 3848 bytes
 4 files changed, 45 insertions(+), 1 deletion(-)
 create mode 100644 src/test/resources/keystore.p12


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[tomcat-jakartaee-migration] 01/02: Remove the EC signature files

2020-04-19 Thread ebourg
This is an automated email from the ASF dual-hosted git repository.

ebourg pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/tomcat-jakartaee-migration.git

commit 17389639f1f1236691f058d42f6e0b6d9b832894
Author: Emmanuel Bourg 
AuthorDate: Mon Apr 20 01:55:48 2020 +0200

Remove the EC signature files
---
 src/main/java/org/apache/tomcat/jakartaee/Migration.java | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/main/java/org/apache/tomcat/jakartaee/Migration.java 
b/src/main/java/org/apache/tomcat/jakartaee/Migration.java
index a880e63..b297747 100644
--- a/src/main/java/org/apache/tomcat/jakartaee/Migration.java
+++ b/src/main/java/org/apache/tomcat/jakartaee/Migration.java
@@ -205,7 +205,7 @@ public class Migration {
 
 private boolean isSignatureFile(String sourceName) {
 return sourceName.startsWith("META-INF/")
-&& (sourceName.endsWith(".SF") || sourceName.endsWith(".RSA") 
|| sourceName.endsWith(".DSA"));
+&& (sourceName.endsWith(".SF") || sourceName.endsWith(".RSA") 
|| sourceName.endsWith(".DSA") || sourceName.endsWith(".EC"));
 }
 
 


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Re: Connection close for POST after successful expectation and status 302

2020-04-19 Thread Rainer Jung

Hi Michael,

Am 19.04.2020 um 17:11 schrieb Michael Osipov:

Am 2020-04-19 um 14:40 schrieb Rainer Jung:
I observed this when using Apache mod_proxy_http and 
mod_proxy_balancer with ping=5000, which wil add the expectation to 
any POST request. I wanted to tune Apache/Tomcat communication to use 
connections very long in order to reduce TLS handshakes during the 
servers. It turned out, that because the application always does 
redirect-after-POST and due to the above described TC behavior, the 
effective reuse for the connections was very small.


Regardless of the problem itself. Why does the module modify the 
request? Isn't the ping supposed to work via HEAD with expect: 
100-continue at most?


Not that I am aware of. AFAIK the expectation is only allowed for 
requests with bodies.


That's what I see when applying patches to 
mod_proxy_http recently.


That would be a surpsise to me, especially after checking trunk and 2.4 
now again. Any code citation? Note I am talking about mod_proxy_http 
ping, not the AJP one and not the H2 one.



Some clients don't even handle the expect header, like browsers.


Not a question of clients here. They do not have to support it for the 
reverse proxy ping feature. It only changes communication between proxy 
and back end, the client will not see a difference.


But that all is not really related to my original question. Why is TC 
closing the connection after a successful expectation handling and fully 
reading the request body when the application returns a non-2xx response 
(eg. a 3xx)?


Regards,

Rainer

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Re: Connection close for POST after successful expectation and status 302

2020-04-19 Thread Michael Osipov

Am 2020-04-19 um 14:40 schrieb Rainer Jung:
I observed this when using Apache mod_proxy_http and mod_proxy_balancer 
with ping=5000, which wil add the expectation to any POST request. I 
wanted to tune Apache/Tomcat communication to use connections very long 
in order to reduce TLS handshakes during the servers. It turned out, 
that because the application always does redirect-after-POST and due to 
the above described TC behavior, the effective reuse for the connections 
was very small.


Regardless of the problem itself. Why does the module modify the 
request? Isn't the ping supposed to work via HEAD with expect: 
100-continue at most? That's what I see when applying patches to 
mod_proxy_http recently.

Some clients don't even handle the expect header, like browsers.

M

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Re: Connection close for POST after successful expectation and status 302

2020-04-19 Thread Rainer Jung
It might be too simplistic, but the following at least stops the 
connection close (but I don't know, whether it also prevents it in cases 
where it should still be done):


diff --git a/java/org/apache/coyote/http11/Http11Processor.java 
b/java/org/apache/coyote/http11/Http11Processor.java

index aa1569cfdc..f38993b04d 100644
--- a/java/org/apache/coyote/http11/Http11Processor.java
+++ b/java/org/apache/coyote/http11/Http11Processor.java
@@ -513,7 +513,7 @@ public class Http11Processor extends AbstractProcessor {


 private void checkExpectationAndResponseStatus() {
-if (request.hasExpectation() &&
+if (request.hasExpectation() && !isRequestBodyFullyRead() &&
 (response.getStatus() < 200 || response.getStatus() > 
299)) {

 // Client sent Expect: 100-continue but received a
 // non-2xx final response. Disable keep-alive (if enabled)

Regards,

Rainer

Am 19.04.2020 um 14:50 schrieb Rainer Jung:

Communication trace for the sake of completenes:

1) Request

POST /sid/D1_13.html HTTP/1.1
Host: z-web-01.some.domain:8143
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:75.0) 
Gecko/20100101 Firefox/75.0
Accept: 
text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8

Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://z-web-01.some.domain:8143
Referer: https://z-web-01.some.domain:8143/sid/D1_13.html
Cookie: JSESSIONID=oLPPJ60ADM3Bu9Fc7AgQuDuphGVM9Vxe.app1; 
ssogrp1-ics50=/Hqk7x4s+/A

Upgrade-Insecure-Requests: 1
Expect: 100-Continue
X-Forwarded-For: 123.234.234.123
X-Forwarded-Host: z-web-01.some.domain:8143
X-Forwarded-Server: myapp.some.domain
Content-Length: 165
Connection: Keep-Alive

2) 100 Response

HTTP/1.1 100

3) Request Body

form=form%3AD1_13%3Aqsc%3Ard%3AdropDown=ao1%3AbtPanel%3Abackward%3AbackwardBt=Zur%C3%BCck=-195310794275919%3A-7969732459277369777 



4) Response with status 302 and closing conection

HTTP/1.1 302
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
x-myapp-session-id: oLPPJ60ADM3Bu9Fc7AgQuDuphGVM9Vxe.app1
Location: /sid/A_25.html
Content-Length: 0
Date: Sun, 19 Apr 2020 11:03:06 GMT
Connection: close

Regards,

Rainer

Am 19.04.2020 um 14:40 schrieb Rainer Jung:

Hi there,

I noticed today TC behavior in TC 9 HEAD (but probably not specific to 
it), that a POST with "Expect: 100-Continue" first gets a correct 
status 100 response from TC. Then the client (an Apache reverse proxy) 
send the request body and the application correctly processes it and 
finally sends back a 302 redirect as expected for that application.


But code in java/org/apache/coyote/http11/Http11Processor.java now set 
keepalive to false which will close the connection. The code in 
question is in checkExpectationAndResponseStatus() and gets called 
from prepareResponse() and endRequest().


I understand, that when no 100 response is send or the Redirect 
happens before the body was completely read, a connection close is 
correct. But why should we close the connection after a complete 
successful processing of the request/response?


I observed this when using Apache mod_proxy_http and 
mod_proxy_balancer with ping=5000, which wil add the expectation to 
any POST request. I wanted to tune Apache/Tomcat communication to use 
connections very long in order to reduce TLS handshakes during the 
servers. It turned out, that because the application always does 
redirect-after-POST and due to the above described TC behavior, the 
effective reuse for the connections was very small.


Any opinion on whether this behavior is correct?

Thanks and regards,

Rainer


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Re: Connection close for POST after successful expectation and status 302

2020-04-19 Thread Rainer Jung

Communication trace for the sake of completenes:

1) Request

POST /sid/D1_13.html HTTP/1.1
Host: z-web-01.some.domain:8143
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:75.0) 
Gecko/20100101 Firefox/75.0
Accept: 
text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8

Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://z-web-01.some.domain:8143
Referer: https://z-web-01.some.domain:8143/sid/D1_13.html
Cookie: JSESSIONID=oLPPJ60ADM3Bu9Fc7AgQuDuphGVM9Vxe.app1; 
ssogrp1-ics50=/Hqk7x4s+/A

Upgrade-Insecure-Requests: 1
Expect: 100-Continue
X-Forwarded-For: 123.234.234.123
X-Forwarded-Host: z-web-01.some.domain:8143
X-Forwarded-Server: myapp.some.domain
Content-Length: 165
Connection: Keep-Alive

2) 100 Response

HTTP/1.1 100

3) Request Body

form=form%3AD1_13%3Aqsc%3Ard%3AdropDown=ao1%3AbtPanel%3Abackward%3AbackwardBt=Zur%C3%BCck=-195310794275919%3A-7969732459277369777

4) Response with status 302 and closing conection

HTTP/1.1 302
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
x-myapp-session-id: oLPPJ60ADM3Bu9Fc7AgQuDuphGVM9Vxe.app1
Location: /sid/A_25.html
Content-Length: 0
Date: Sun, 19 Apr 2020 11:03:06 GMT
Connection: close

Regards,

Rainer

Am 19.04.2020 um 14:40 schrieb Rainer Jung:

Hi there,

I noticed today TC behavior in TC 9 HEAD (but probably not specific to 
it), that a POST with "Expect: 100-Continue" first gets a correct status 
100 response from TC. Then the client (an Apache reverse proxy) send the 
request body and the application correctly processes it and finally 
sends back a 302 redirect as expected for that application.


But code in java/org/apache/coyote/http11/Http11Processor.java now set 
keepalive to false which will close the connection. The code in question 
is in checkExpectationAndResponseStatus() and gets called from 
prepareResponse() and endRequest().


I understand, that when no 100 response is send or the Redirect happens 
before the body was completely read, a connection close is correct. But 
why should we close the connection after a complete successful 
processing of the request/response?


I observed this when using Apache mod_proxy_http and mod_proxy_balancer 
with ping=5000, which wil add the expectation to any POST request. I 
wanted to tune Apache/Tomcat communication to use connections very long 
in order to reduce TLS handshakes during the servers. It turned out, 
that because the application always does redirect-after-POST and due to 
the above described TC behavior, the effective reuse for the connections 
was very small.


Any opinion on whether this behavior is correct?

Thanks and regards,

Rainer


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Connection close for POST after successful expectation and status 302

2020-04-19 Thread Rainer Jung

Hi there,

I noticed today TC behavior in TC 9 HEAD (but probably not specific to 
it), that a POST with "Expect: 100-Continue" first gets a correct status 
100 response from TC. Then the client (an Apache reverse proxy) send the 
request body and the application correctly processes it and finally 
sends back a 302 redirect as expected for that application.


But code in java/org/apache/coyote/http11/Http11Processor.java now set 
keepalive to false which will close the connection. The code in question 
is in checkExpectationAndResponseStatus() and gets called from 
prepareResponse() and endRequest().


I understand, that when no 100 response is send or the Redirect happens 
before the body was completely read, a connection close is correct. But 
why should we close the connection after a complete successful 
processing of the request/response?


I observed this when using Apache mod_proxy_http and mod_proxy_balancer 
with ping=5000, which wil add the expectation to any POST request. I 
wanted to tune Apache/Tomcat communication to use connections very long 
in order to reduce TLS handshakes during the servers. It turned out, 
that because the application always does redirect-after-POST and due to 
the above described TC behavior, the effective reuse for the connections 
was very small.


Any opinion on whether this behavior is correct?

Thanks and regards,

Rainer

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[GitHub] [tomcat] pzygielo commented on a change in pull request #275: BZ 59203 - interrupt tomcat threads instead of stopping

2020-04-19 Thread GitBox
pzygielo commented on a change in pull request #275: BZ 59203 - interrupt 
tomcat threads instead of stopping
URL: https://github.com/apache/tomcat/pull/275#discussion_r410846802
 
 

 ##
 File path: java/org/apache/catalina/loader/WebappClassLoaderBase.java
 ##
 @@ -1813,35 +1813,40 @@ private void clearReferencesThreads() {
 // stopped and check them at the end of the method.
 executorThreadsToStop.add(thread);
 } else {
-thread.interrupt();
+clearThread(thread);
 }
 }
 }
 }
 
-// If thread stopping is enabled, executor threads should have been
-// stopped above when the executor was shut down but that depends on 
the
-// thread correctly handling the interrupt. Give all the executor
-// threads a few seconds shutdown and if they are still running
-// Give threads up to 2 seconds to shutdown
-int count = 0;
+// clear executor threads
 for (Thread t : executorThreadsToStop) {
-while (t.isAlive() && count < 100) {
-try {
-Thread.sleep(20);
-} catch (InterruptedException e) {
-// Quit the while loop
-break;
-}
-count++;
-}
-if (t.isAlive()) {
-// This method is deprecated and for good reason. This is
-// very risky code but is the only option at this point.
-// A *very* good reason for apps to do this clean-up
-// themselves.
-t.stop();
-}
+clearThread(t);
+}
+}
+
+private void clearThread(Thread t) {
+int count = 0;
+if (!t.isInterrupted()) {
+t.interrupt();
+}
+
+// Give threads up to 2 seconds to shutdown
+while (t.isAlive() && count < 100) {
+try {
+Thread.sleep(20);
+} catch (InterruptedException e) {
+// Quit the while loop
 
 Review comment:
   https://rules.sonarsource.com/java/RSPEC-2142


This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


With regards,
Apache Git Services

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Bug report for Tomcat 9 [2020/04/19]

2020-04-19 Thread bugzilla
+---+
| Bugzilla Bug ID   |
| +-+
| | Status: UNC=Unconfirmed NEW=New ASS=Assigned|
| | OPN=ReopenedVER=Verified(Skipped Closed/Resolved)   |
| |   +-+
| |   | Severity: BLK=Blocker CRI=Critical  REG=Regression  MAJ=Major   |
| |   |   MIN=Minor   NOR=NormalENH=Enhancement TRV=Trivial |
| |   |   +-+
| |   |   | Date Posted |
| |   |   |  +--+
| |   |   |  | Description  |
| |   |   |  |  |
|57505|New|Enh|2015-01-27|Add integration tests for JspC|
|57661|New|Enh|2015-03-04|Delay sending of 100 continue response until appli|
|58242|New|Enh|2015-08-13|Scanning jars in classpath to get annotations in p|
|58530|New|Enh|2015-10-23|Proposal for new Manager HTML GUI |
|58548|Inf|Enh|2015-10-26|support certifcate transparency   |
|58859|New|Enh|2016-01-14|Allow to limit charsets / encodings supported by T|
|59203|New|Enh|2016-03-21|Try to call Thread.interrupt before calling Thread|
|59344|Ver|Enh|2016-04-18|PEM file support for JSSE |
|59750|New|Enh|2016-06-24|Amend "authenticate" method with context by means |
|60997|New|Enh|2017-04-17|Enhance SemaphoreValve to support denied status an|
|61971|New|Enh|2018-01-06|documentation for using tomcat with systemd   |
|62048|New|Enh|2018-01-25|Missing logout function in Manager and Host-Manage|
|62072|New|Enh|2018-02-01|Add support for request compression   |
|62312|New|Enh|2018-04-18|Add Proxy Authentication support to websocket clie|
|62405|New|Enh|2018-05-23|Add Rereadable Request Filter |
|62488|New|Enh|2018-06-25|Obtain dependencies from Maven Central where possi|
|62611|Inf|Enh|2018-08-09|Compress log files after rotation |
|62695|Inf|Nor|2018-09-07|Provide sha512 checksums for Tomcat releases publi|
|62723|New|Enh|2018-09-14|Clarify "channelSendOptions" value in cluster docu|
|62773|New|Enh|2018-09-28|Change DeltaManager to handle session deserializat|
|62814|New|Enh|2018-10-10|Use readable names for cluster channel/map options|
|62843|New|Enh|2018-10-22|Tomcat Russian localization   |
|62964|Inf|Enh|2018-11-29|Add RFC7807 conformant Problem Details for HTTP st|
|63023|New|Enh|2018-12-20|Provide a way to load SecurityProviders into the s|
|63049|New|Enh|2018-12-31|Add support in system properties override from com|
|63237|New|Enh|2019-03-06|Consider processing mbeans-descriptors.xml at comp|
|63362|New|Enh|2019-04-18|GlobalRequestProcessor statistics in MBean does no|
|63389|New|Enh|2019-04-27|Enable Servlet Warmup for Containerization|
|63493|New|Enh|2019-06-10|enhancement - add JMX counters to monitor authenti|
|63505|New|Enh|2019-06-14|enhancement - support of stored procedures for Dat|
|63545|New|Enh|2019-07-06|enhancement - add a new pattern attribute for logg|
|63943|Opn|Enh|2019-11-20|Add possibility to overwrite remote port with info|
|63983|Ver|Cri|2019-12-03|Jasper builds-up open files until garbage collecti|
|64080|New|Enh|2020-01-16|Graceful shutdown does not occur for connected cli|
|64110|New|Enh|2020-02-01|Record TLS protocol in access log for connections |
|64144|New|Enh|2020-02-14|Add an option for rejecting requests that have bot|
|64230|New|Enh|2020-03-15|Allow to configure session manager to skip expirin|
|64309|New|Enh|2020-04-05|Improve repository regular expression performance |
|64366|New|Nor|2020-04-18|[sse] NPE while closing async http/2 connector|
+-+---+---+--+--+
| Total   39 bugs   |
+---+

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Bug report for Tomcat 8 [2020/04/19]

2020-04-19 Thread bugzilla
+---+
| Bugzilla Bug ID   |
| +-+
| | Status: UNC=Unconfirmed NEW=New ASS=Assigned|
| | OPN=ReopenedVER=Verified(Skipped Closed/Resolved)   |
| |   +-+
| |   | Severity: BLK=Blocker CRI=Critical  REG=Regression  MAJ=Major   |
| |   |   MIN=Minor   NOR=NormalENH=Enhancement TRV=Trivial |
| |   |   +-+
| |   |   | Date Posted |
| |   |   |  +--+
| |   |   |  | Description  |
| |   |   |  |  |
|55243|New|Enh|2013-07-11|Add special search string for nested roles|
|55383|New|Enh|2013-08-07|Improve markup and design of Tomcat's HTML pages  |
|9|New|Enh|2013-09-14|UserDatabaseRealm enhacement: may use local JNDI  |
|55675|New|Enh|2013-10-18|Checking and handling invalid configuration option|
|55788|New|Enh|2013-11-16|TagPlugins should key on tag QName rather than imp|
|56166|New|Enh|2014-02-20|Suggestions for exception handling (avoid potentia|
|56398|New|Enh|2014-04-11|Support Arquillian-based unit testing |
|56399|New|Enh|2014-04-11|Re-factor request/response recycling so Coyote and|
|56402|New|Enh|2014-04-11|Add support for HTTP Upgrade to AJP components|
|56448|New|Enh|2014-04-23|Implement a robust solution for client initiated S|
|56522|Opn|Enh|2014-05-14|jasper-el 8 does not comply to EL Spec 3.0 regardi|
|56546|New|Enh|2014-05-19|Improve thread trace logging in WebappClassLoader.|
|56713|New|Enh|2014-07-12|Limit time that incoming request waits while webap|
|56890|Inf|Maj|2014-08-26|getRealPath returns null  |
|57130|New|Enh|2014-10-22|Allow digest.sh to accept password from a file or |
|57421|New|Enh|2015-01-07|Farming default directories   |
|57486|New|Enh|2015-01-23|Improve reuse of ProtectedFunctionMapper instances|
|57701|New|Enh|2015-03-13|Implement "[Redeploy]" button for a web applicatio|
|57830|New|Enh|2015-04-18|Add support for ProxyProtocol |
|58052|Opn|Enh|2015-06-19|RewriteValve: Implement additional RewriteRule dir|
|58072|New|Enh|2015-06-23|ECDH curve selection  |
|58837|New|Enh|2016-01-12|support "X-Content-Security-Policy" a.k.a as "CSP"|
|58935|Opn|Enh|2016-01-29|Re-deploy from war without deleting context   |
|59232|New|Enh|2016-03-24|Make the context name of an app available via JNDI|
|59423|New|Enh|2016-05-03|amend "No LoginModules configured for ..." with hi|
|59758|New|Enh|2016-06-27|Add http proxy username-password credentials suppo|
|60281|Ver|Nor|2016-10-20|Pathname of uploaded WAR file should not be contai|
|60721|Ver|Nor|2017-02-10|Unable to find key spec if more applications use b|
|60781|New|Nor|2017-02-27|Access Log Valve does not escape the same as mod_l|
|60849|New|Enh|2017-03-13|Tomcat NIO Connector not able to handle SSL renego|
|61668|Ver|Min|2017-10-26|Possible NullPointerException in org.apache.coyote|
|61877|New|Enh|2017-12-08|use web.xml from CATALINA_HOME by default |
|61917|New|Enh|2017-12-19|AddDefaultCharsetFilter only supports text/* respo|
|62150|New|Enh|2018-03-01|Behavior of relative paths with RequestDispatcher |
|62214|New|Enh|2018-03-22|The "userSubtree=true" and "roleSubtree=true" in J|
|62245|New|Enh|2018-04-02|[Documentation] Mention contextXsltFile in Default|
|63080|New|Enh|2019-01-16|Support rfc7239 Forwarded header  |
|63195|Inf|Enh|2019-02-21|Add easy way to test RemoteIpValve works properly |
|63802|Inf|Cri|2019-10-04|epoll spin detection is missing   |
|63815|Inf|Nor|2019-10-08|Expansion of JAVA_OPTS in catalina.sh containing '|
|64312|Opn|Nor|2020-04-06|Many memberDisappeared messages are logged on all |
|64335|New|Nor|2020-04-10|org.apache.catalina.realm.TestJNDIRealm debug fail|
+-+---+---+--+--+
| Total   42 bugs   |
+---+

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Bug report for Tomcat Native [2020/04/19]

2020-04-19 Thread bugzilla
+---+
| Bugzilla Bug ID   |
| +-+
| | Status: UNC=Unconfirmed NEW=New ASS=Assigned|
| | OPN=ReopenedVER=Verified(Skipped Closed/Resolved)   |
| |   +-+
| |   | Severity: BLK=Blocker CRI=Critical  REG=Regression  MAJ=Major   |
| |   |   MIN=Minor   NOR=NormalENH=Enhancement TRV=Trivial |
| |   |   +-+
| |   |   | Date Posted |
| |   |   |  +--+
| |   |   |  | Description  |
| |   |   |  |  |
|53940|New|Enh|2012-09-27|Added support for new CRL loading after expiration|
|62626|Inf|Nor|2018-08-15|Tomcat 9.0.10 APR/Native crashes  |
|62911|New|Enh|2018-11-15|Add support for proxying ocsp  requests via ProxyH|
|63199|Inf|Nor|2019-02-22|sslsocket handshake JVM crash |
|63405|Inf|Nor|2019-05-06|Tomcat 7.0.91.0 EXCEPTION_ACCESS_VIOLATION - Probl|
|63701|New|Maj|2019-08-27|SSL initialize hangs with OpenSSL 1.1.1   |
|64316|New|Nor|2020-04-06|Duplicate code for obtaining native current thread|
+-+---+---+--+--+
| Total7 bugs   |
+---+

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Bug report for Tomcat Connectors [2020/04/19]

2020-04-19 Thread bugzilla
+---+
| Bugzilla Bug ID   |
| +-+
| | Status: UNC=Unconfirmed NEW=New ASS=Assigned|
| | OPN=ReopenedVER=Verified(Skipped Closed/Resolved)   |
| |   +-+
| |   | Severity: BLK=Blocker CRI=Critical  REG=Regression  MAJ=Major   |
| |   |   MIN=Minor   NOR=NormalENH=Enhancement TRV=Trivial |
| |   |   +-+
| |   |   | Date Posted |
| |   |   |  +--+
| |   |   |  | Description  |
| |   |   |  |  |
|46767|New|Enh|2009-02-25|mod_jk to send DECLINED in case no fail-over tomca|
|47327|New|Enh|2009-06-07|Return tomcat authenticated user back to mod_jk (A|
|47750|New|Maj|2009-08-27|ISAPI: Loss of worker settings when changing via j|
|48830|New|Nor|2010-03-01|IIS shutdown blocked in endpoint service when serv|
|49822|New|Enh|2010-08-25|Add hash lb worker method |
|49903|New|Enh|2010-09-09|Make workers file reloadable  |
|52483|New|Enh|2012-01-18|Print JkOptions's options in log file and jkstatus|
|54621|New|Enh|2013-02-28|[PATCH] custom mod_jk availability checks |
|56489|New|Enh|2014-05-05|Include a directory for configuration files   |
|56576|New|Enh|2014-05-29|Websocket support |
|57402|New|Enh|2014-12-30|Provide correlation ID between mod_jk log and acce|
|57403|New|Enh|2014-12-30|Persist configuration changes made via status work|
|57407|New|Enh|2014-12-31|Make session_cookie, session_path and session_cook|
|57790|New|Enh|2015-04-03|Check worker names for typos  |
|61476|New|Enh|2017-09-01|Allow reset of an individual worker stat value|
|61621|New|Enh|2017-10-15|Content-Type is forced to lowercase when it goes t|
|62093|New|Enh|2018-02-09|Allow use_server_errors to apply to specific statu|
|63808|Opn|Enh|2019-10-05|the fact that JkMount makes other directives ineff|
+-+---+---+--+--+
| Total   18 bugs   |
+---+

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Bug report for Taglibs [2020/04/19]

2020-04-19 Thread bugzilla
+---+
| Bugzilla Bug ID   |
| +-+
| | Status: UNC=Unconfirmed NEW=New ASS=Assigned|
| | OPN=ReopenedVER=Verified(Skipped Closed/Resolved)   |
| |   +-+
| |   | Severity: BLK=Blocker CRI=Critical  REG=Regression  MAJ=Major   |
| |   |   MIN=Minor   NOR=NormalENH=Enhancement TRV=Trivial |
| |   |   +-+
| |   |   | Date Posted |
| |   |   |  +--+
| |   |   |  | Description  |
| |   |   |  |  |
|38193|Ass|Enh|2006-01-09|[RDC] BuiltIn Grammar support for Field   |
|38600|Ass|Enh|2006-02-10|[RDC] Enable RDCs to be used in X+V markup (X+RDC)|
|42413|New|Enh|2007-05-14|[PATCH] Log Taglib enhancements   |
|46052|New|Nor|2008-10-21|SetLocaleSupport is slow to initialize when many l|
|48333|New|Enh|2009-12-02|TLD generator |
|57548|New|Min|2015-02-08|Auto-generate the value for org.apache.taglibs.sta|
|57684|New|Min|2015-03-10|Version info should be taken from project version |
|59359|New|Enh|2016-04-20|(Task) Extend validity period for signing KEY - be|
|59668|New|Nor|2016-06-06|x:forEach retains the incorrect scope when used in|
|61875|New|Nor|2017-12-08|Investigate whether Xalan can be removed  |
+-+---+---+--+--+
| Total   10 bugs   |
+---+

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Bug report for Tomcat Modules [2020/04/19]

2020-04-19 Thread bugzilla
+---+
| Bugzilla Bug ID   |
| +-+
| | Status: UNC=Unconfirmed NEW=New ASS=Assigned|
| | OPN=ReopenedVER=Verified(Skipped Closed/Resolved)   |
| |   +-+
| |   | Severity: BLK=Blocker CRI=Critical  REG=Regression  MAJ=Major   |
| |   |   MIN=Minor   NOR=NormalENH=Enhancement TRV=Trivial |
| |   |   +-+
| |   |   | Date Posted |
| |   |   |  +--+
| |   |   |  | Description  |
| |   |   |  |  |
|50571|Inf|Nor|2011-01-11|Tomcat 7 JDBC connection pool exception enhancemen|
|51595|Inf|Nor|2011-08-01|org.apache.tomcat.jdbc.pool.jmx.ConnectionPool sho|
|51879|Inf|Enh|2011-09-22|Improve access to Native Connection Methods   |
|52024|Inf|Enh|2011-10-13|Custom interceptor to support automatic failover o|
|53199|Inf|Enh|2012-05-07|Refactor ConnectionPool to use ScheduledExecutorSe|
|54437|New|Enh|2013-01-16|Update PoolProperties javadoc for ConnectState int|
|54929|Inf|Nor|2013-05-05|jdbc-pool cannot be used with Java 1.5, "java.lang|
|55078|New|Nor|2013-06-07|Configuring a DataSource Resource with dataSourceJ|
|55662|New|Enh|2013-10-17|Add a way to set an instance of java.sql.Driver di|
|56046|New|Enh|2014-01-21|org.apache.tomcat.jdbc.pool.XADataSource InitSQL p|
|56088|New|Maj|2014-01-29|AbstractQueryReport$StatementProxy throws exceptio|
|56310|Inf|Maj|2014-03-25|PooledConnection and XAConnection not handled corr|
|56586|New|Nor|2014-06-02|initSQL should be committed if defaultAutoCommit =|
|56775|New|Nor|2014-07-28|PoolCleanerTime schedule issue|
|56779|New|Nor|2014-07-28|Allow multiple connection initialization statement|
|56790|New|Nor|2014-07-29|Resizing pool.maxActive to a higher value at runti|
|56798|New|Nor|2014-07-31|Idle eviction strategy could perform better (and i|
|56804|New|Nor|2014-08-02|Use a default validationQueryTimeout other than "f|
|56805|New|Nor|2014-08-02|datasource.getConnection() may be unnecessarily bl|
|56837|New|Nor|2014-08-11|if validationQuery have error with timeBetweenEvic|
|56970|New|Nor|2014-09-11|MaxActive vs. MaxTotal for commons-dbcp and tomcat|
|57460|New|Nor|2015-01-19|[DB2]Connection broken after few hours but not rem|
|57729|New|Enh|2015-03-20|Add QueryExecutionReportInterceptor to log query e|
|58489|Opn|Maj|2015-10-08|QueryStatsComparator throws IllegalArgumentExcepti|
|59077|New|Nor|2016-02-26|DataSourceFactory creates a neutered data source  |
|59569|New|Nor|2016-05-18|isWrapperFor/unwrap implementations incorrect |
|59879|New|Nor|2016-07-18|StatementCache interceptor returns ResultSet objec|
|60195|New|Nor|2016-10-02|No javadoc in Maven Central   |
|60522|New|Nor|2016-12-27|An option for setting if the transaction should be|
|60524|Inf|Nor|2016-12-28|NPE in SlowQueryReport in tomcat-jdbc-7.0.68  |
|60645|New|Nor|2017-01-25|StatementFinalizer is not thread-safe |
|61032|New|Nor|2017-04-24|min pool size is not being respected  |
|61103|New|Nor|2017-05-18|StatementCache potentially caching non-functional |
|61302|New|Enh|2017-07-15|Refactoring of DataSourceProxy|
|61303|New|Enh|2017-07-15|Refactoring of ConnectionPool |
|62432|New|Nor|2018-06-06|Memory Leak in Statement Finalizer?   |
|62598|New|Enh|2018-08-04|support pool with multiple JDBC data sources  |
|62910|Inf|Nor|2018-11-15|tomcat-jdbc global pool transaction problem   |
|63612|Inf|Cri|2019-07-26|PooledConnection#connectUsingDriver, Thread.curren|
|63705|New|Nor|2019-08-29|The tomcat pool doesn't register all connection th|
|64083|New|Nor|2020-01-17|JDBC pool keeps closed connection as available|
|64107|New|Maj|2020-01-30|PreparedStatements correctly closed are not return|
|64231|New|Nor|2020-03-16|Tomcat jdbc pool behaviour|
+-+---+---+--+--+
| Total   43 bugs   |
+---+

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Bug report for Tomcat 7 [2020/04/19]

2020-04-19 Thread bugzilla
+---+
| Bugzilla Bug ID   |
| +-+
| | Status: UNC=Unconfirmed NEW=New ASS=Assigned|
| | OPN=ReopenedVER=Verified(Skipped Closed/Resolved)   |
| |   +-+
| |   | Severity: BLK=Blocker CRI=Critical  REG=Regression  MAJ=Major   |
| |   |   MIN=Minor   NOR=NormalENH=Enhancement TRV=Trivial |
| |   |   +-+
| |   |   | Date Posted |
| |   |   |  +--+
| |   |   |  | Description  |
| |   |   |  |  |
|50944|Ver|Blk|2011-03-18|JSF: java.lang.NullPointerException at com.sun.fac|
|55470|New|Enh|2013-08-23|Help users for ClassNotFoundExceptions during star|
|55477|New|Enh|2013-08-23|Add a solution to map a realm name to a security r|
|56148|New|Enh|2014-02-17|support (multiple) ocsp stapling  |
|56181|New|Enh|2014-02-23|RemoteIpValve & RemoteIpFilter: HttpServletRequest|
|56300|New|Enh|2014-03-22|[Tribes] No useful examples, lack of documentation|
|56438|New|Enh|2014-04-21|If jar scan does not find context config or TLD co|
|56614|New|Enh|2014-06-12|Add a switch to ignore annotations detection on ta|
|56787|New|Enh|2014-07-29|Simplified jndi name parsing  |
|57367|New|Enh|2014-12-18|If JAR scan experiences a stack overflow, give the|
|57827|New|Enh|2015-04-17|Enable adding/removing of members via jmx in a sta|
|57872|New|Enh|2015-04-29|Do not auto-switch session cookie to version=1 due|
|57892|New|Enh|2015-05-05|Log once a warning if a symbolic link is ignored (|
|60597|New|Enh|2017-01-17|Add ability to set cipher suites for websocket cli|
|63167|New|Enh|2019-02-12|Network Requirements To Resolve No Members Active |
|64155|Inf|Nor|2020-02-18|Tomcat 7 Performance: acceptor thread bottleneck a|
|64157|Inf|Nor|2020-02-18|Tomcat 7 performance: enable tomcat to pre-start p|
+-+---+---+--+--+
| Total   17 bugs   |
+---+

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org