Re: First impressions from OpenSSL 3.0.0 and TC 10.0.0-M7 plus tcnative 1.2.24

2020-08-03 Thread Rainer Jung
3.0.0 once it gets a GA release with only very little effort, hopefully with out code as-is. Best regards, Rainer Am 03.08.2020 um 18:26 schrieb Christopher Schultz: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Rainer, On 8/3/20 07:03, Rainer Jung wrote: Hi Chris, hi all, I ran build

First impressions from OpenSSL 3.0.0 and TC 10.0.0-M7 plus tcnative 1.2.24

2020-08-03 Thread Rainer Jung
condition) during shutdown. Seems not to be strictly reproducible. So far this means OpenSSL 3.0.0 looks good :) Regards, Rainer Am 01.08.2020 um 19:12 schrieb Christopher Schultz: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Rainer, On 8/1/20 11:44, Rainer Jung wrote: Sorry, wrong dev

Re: First impressions from OpenSSL 3.0.0 and httpd 2.4.45

2020-08-01 Thread Rainer Jung
Sorry, wrong dev list. Am 01.08.2020 um 12:07 schrieb Rainer Jung: Hi there, during release testing for 2.4.45 I also built and tested using OpenSSL 3.0.0alpha5 on the server. Overall first results are pretty good: - a few deprecation warnings during compilation: modules/ssl

First impressions from OpenSSL 3.0.0 and httpd 2.4.45

2020-08-01 Thread Rainer Jung
Hi there, during release testing for 2.4.45 I also built and tested using OpenSSL 3.0.0alpha5 on the server. Overall first results are pretty good: - a few deprecation warnings during compilation: modules/ssl/ssl_engine_config.c:610:5: warning: 'ENGINE_by_id' is deprecated

Re: [VOTE] Release Apache Tomcat 7.0.104

2020-05-08 Thread Rainer Jung
It seems commons-logging 1.1.3 is no longer part of the mirrors (only in the archive). I had to use commons-logging.version=1.2 commons-logging-src.checksum.value=ce977548f1cbf46918e93cd38ac35163|0a134d01e9aeb09b33f4c7450fb41abb7bed9db6 instead of commons-logging.version=1.1.3

Re: [tomcat] branch master updated: Improve the handling of requests that use an expectation.

2020-04-23 Thread Rainer Jung
Thanks for that. Rainer - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org

Re: Connection close for POST after successful expectation and status 302

2020-04-20 Thread Rainer Jung
Hi Mark, hi all, Am 20.04.2020 um 11:15 schrieb Mark Thomas: On 19/04/2020 14:04, Rainer Jung wrote: It might be too simplistic, but the following at least stops the connection close (but I don't know, whether it also prevents it in cases where it should still be done): diff --git a/java/org

Re: Connection close for POST after successful expectation and status 302

2020-04-19 Thread Rainer Jung
Hi Michael, Am 19.04.2020 um 17:11 schrieb Michael Osipov: Am 2020-04-19 um 14:40 schrieb Rainer Jung: I observed this when using Apache mod_proxy_http and mod_proxy_balancer with ping=5000, which wil add the expectation to any POST request. I wanted to tune Apache/Tomcat communication to use

Re: Connection close for POST after successful expectation and status 302

2020-04-19 Thread Rainer Jung
l response. Disable keep-alive (if enabled) Regards, Rainer Am 19.04.2020 um 14:50 schrieb Rainer Jung: Communication trace for the sake of completenes: 1) Request POST /sid/D1_13.html HTTP/1.1 Host: z-web-01.some.domain:8143 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:75.0) Gecko/20100

Re: Connection close for POST after successful expectation and status 302

2020-04-19 Thread Rainer Jung
: oLPPJ60ADM3Bu9Fc7AgQuDuphGVM9Vxe.app1 Location: /sid/A_25.html Content-Length: 0 Date: Sun, 19 Apr 2020 11:03:06 GMT Connection: close Regards, Rainer Am 19.04.2020 um 14:40 schrieb Rainer Jung: Hi there, I noticed today TC behavior in TC 9 HEAD (but probably not specific to it), that a POST with "Expect: 100-Continue&q

Connection close for POST after successful expectation and status 302

2020-04-19 Thread Rainer Jung
Hi there, I noticed today TC behavior in TC 9 HEAD (but probably not specific to it), that a POST with "Expect: 100-Continue" first gets a correct status 100 response from TC. Then the client (an Apache reverse proxy) send the request body and the application correctly processes it and

Re: [tomcat-native] Installation structure

2020-03-10 Thread Rainer Jung
Am 10.03.2020 um 10:04 schrieb Michael Osipov: Chris, Am 2020-03-09 um 22:22 schrieb Christopher Schultz: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Michael, On 3/9/20 10:20, Michael Osipov wrote: Folks, I have been recently reviewing some downstream changes in tomcat-native. Can

Re: [VOTE] Release Apache Tomcat Connectors (JK) 1.2.48

2020-03-03 Thread Rainer Jung
Am 20.02.2020 um 17:55 schrieb Mark Thomas: Tag: https://gitbox.apache.org/repos/asf?p=tomcat-connectors.git;a=commit;h=90b294ce8260ab2585dcb4071ede5d53e51fa354 Source: https://gitbox.apache.org/repos/asf?p=tomcat-connectors.git;a=summary Dist:

Re: Possible optimization for class loading?

2019-11-17 Thread Rainer Jung
Am 17.11.2019 um 17:21 schrieb Konstantin Kolinko: вс, 17 нояб. 2019 г. в 18:40, Rainer Jung : I noticed a slowness during Webapp startup on the Winows platform. Investigation showed, that about three seconds of the webapp startup time - roughly 1/3 of the total time - was due

Possible optimization for class loading?

2019-11-17 Thread Rainer Jung
I noticed a slowness during Webapp startup on the Winows platform. Investigation showed, that about three seconds of the webapp startup time - roughly 1/3 of the total time - was due to File.getCanonicalPath(). That call seems to be especially expensive on Windows, because it iterates over

Re: [VOTE] Private branches in the official Tomcat git repository

2019-10-12 Thread Rainer Jung
Am 11.10.2019 um 16:20 schrieb Rémy Maucherat: Hi, This vote is to regulate the use of branches in the official Tomcat repository beyond branches that are approved by the community such as 8.5.x and 7.0.x. It is possible to do development in private branches directly in the official Tomcat

Re: Migrating Tomcat Connectors to Git

2019-10-08 Thread Rainer Jung
Am 08.10.2019 um 13:39 schrieb Rainer Jung: Am 08.10.2019 um 13:09 schrieb Mark Thomas: Hi all, Tomcat Connectors (mod_jk, isapi_redirect) are currently in svn. There hasn't been much activity on these over the last year or so so there has been no reason to migrate the project to Git. I've

Re: Migrating Tomcat Connectors to Git

2019-10-08 Thread Rainer Jung
Am 08.10.2019 um 13:09 schrieb Mark Thomas: Hi all, Tomcat Connectors (mod_jk, isapi_redirect) are currently in svn. There hasn't been much activity on these over the last year or so so there has been no reason to migrate the project to Git. I've recently fixed a mod_jk bug and I have a patch

Re: [PROPOSAL] Tomcat 10: Drop APR Connector

2019-10-08 Thread Rainer Jung
Am 07.10.2019 um 16:39 schrieb Christopher Schultz: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, I recently gave a presentation on locking-down Apache Tomcat[1] and I briefly discussed the "sharp edges" present in Tomcat. Some of them are unnecessarily sharp and may be actually

Re: [PROPOSAL] Tomcat 10: Remove CGI Servlet

2019-10-08 Thread Rainer Jung
Am 07.10.2019 um 18:37 schrieb Igal Sapir: On 10/7/2019 8:14 AM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 10/7/19 11:10, Mark Thomas wrote: All, I recently gave a presentation on locking-down Apache Tomcat[1] and I briefly discussed the "sharp

Re: [PROPOSAL] Tomcat 10: Remove Server-Side Includes (SSI)

2019-10-08 Thread Rainer Jung
Am 07.10.2019 um 20:01 schrieb Rémy Maucherat: On Mon, Oct 7, 2019 at 4:46 PM Christopher Schultz mailto:ch...@christopherschultz.net>> wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, I recently gave a presentation on locking-down Apache Tomcat[1] and I

Re: svn commit: r1867891 - in /tomcat/jk/trunk: native/apache-2.0/mod_jk.c xdocs/miscellaneous/changelog.xml

2019-10-02 Thread Rainer Jung
Thank you, Mark! Am 02.10.2019 um 17:00 schrieb ma...@apache.org: Author: markt Date: Wed Oct 2 15:00:48 2019 New Revision: 1867891 URL: http://svn.apache.org/viewvc?rev=1867891=rev Log: Fix a bug in the normalization checks that prevented file based requests, such as SSI file includes, from

Re: Better support for OpenJSSE?

2019-09-23 Thread Rainer Jung
Am 23.09.2019 um 12:56 schrieb Rémy Maucherat: On Mon, Sep 23, 2019 at 12:42 PM Rainer Jung <mailto:rainer.j...@kippdata.de>> wrote: Hi dev@, hi George, Am 20.09.2019 um 01:36 schrieb George Stanchev: > Since I was the one that brought up a question ab

Re: Better support for OpenJSSE?

2019-09-23 Thread Rainer Jung
..@apache.org>> wrote: On 19/09/2019 09:27, Rainer Jung wrote: > I made a patch to detect ALPN support at runtime using reflection. > Please have a look. Feedback welcome, whether we want to include that or > whether we want to stick with the simpl

Re: Better support for OpenJSSE?

2019-09-19 Thread Rainer Jung
Am 19.09.2019 um 12:01 schrieb Mark Thomas: On 19/09/2019 09:27, Rainer Jung wrote: I made a patch to detect ALPN support at runtime using reflection. Please have a look. Feedback welcome, whether we want to include that or whether we want to stick with the simpler approach we currently use

Better support for OpenJSSE?

2019-09-19 Thread Rainer Jung
The people from Azul have backported JSSE from Java 11 to Java 8 as an additional provider. It is called OpenJSSE and available under https://github.com/openjsse/openjsse They moved packages underneath org.openjsse. OpenJSSE provides eg. TLS 1.3 and ALPN. So using OpenJSSE allows to use TLS

Re: [tomcat] 01/01: Tag 9.0.25

2019-09-16 Thread Rainer Jung
The BOM in changelog.xml is back, at least in the tag, letting checkstyle fail. See below. Am 16.09.2019 um 13:55 schrieb ma...@apache.org: This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to tag 9.0.25 in repository

Re: Malicious bugzilla attachment? [Was: [Bug 63695] session_cookie attribute does not work?]

2019-08-29 Thread Rainer Jung
have pointed him to the users list. But since he actually tried to dig into it, I would find it more friendly to give him a final chance to check my hint how to fix the config. Regards, Rainer Mark On 29/08/2019 10:47, Rainer Jung wrote: I don't know whether this attachment is just broken

Malicious bugzilla attachment? [Was: [Bug 63695] session_cookie attribute does not work?]

2019-08-29 Thread Rainer Jung
I don't know whether this attachment is just broken or some kind of attack. We might want to delete it if possible. It has suffix .pptx but neither Ooo, nor LibreOffice or Powerpoint show correct content. The file starts with a magic header "NASCA DRM FILE - VER1.00". Regards, Rainer Am

Re: [tomcat] 01/01: Tag 9.0.23

2019-08-14 Thread Rainer Jung
Hi there, this commit introduced a BOM at the beginning of the changelog.xml file, which leads to a checkstyle validation failure during building 9.0.23 (when validation is actiive). The BOM isn't shown in the below mail, but one can see the leading ef bb bf wit any binary editor. I first

Re: tcnative and JDK13/14

2019-07-30 Thread Rainer Jung
by default, the bad is, that an error report switch would have a side effect that can lead to errors even without any error report happening. Regards, Rainer Am 30.07.2019 um 09:48 schrieb Rainer Jung: The HotSpot runtime team is investigating it. It was a surprise for them. New ticket opened

Re: tcnative and JDK13/14

2019-07-30 Thread Rainer Jung
ticket: https://bugs.openjdk.java.net/browse/JDK-8222720 Backport to OpenJDK 11 (for 11.0.5, not yet released): https://bugs.openjdk.java.net/browse/JDK-8226873 Regards, Rainer Am 29.07.2019 um 23:45 schrieb Rainer Jung: OpenJDK 13/14 introduced change fb5b3981eac: 8222720: Provide extended

tcnative and JDK13/14

2019-07-29 Thread Rainer Jung
OpenJDK 13/14 introduced change fb5b3981eac: 8222720: Provide extended VMWare/vSphere virtualization related info in the hs_error file on linux/windows x86_64 On SLES 12 (maybe also other Linuxes) the impl loads /usr/lib64/libguestlib.so.0 already during JVM startup. That library depends on

Re: [VOTE] Release Apache Tomcat 7.0.96

2019-07-26 Thread Rainer Jung
Am 26.07.2019 um 22:57 schrieb Rainer Jung: Am 24.07.2019 um 15:56 schrieb Violeta Georgieva: The proposed Apache Tomcat 7.0.96 release is now available for voting. For full details, see the changelog: https://ci.apache.org/projects/tomcat/tomcat7/docs/changelog.html It can be obtained

Re: [VOTE] Release Apache Tomcat 7.0.96

2019-07-26 Thread Rainer Jung
Am 24.07.2019 um 15:56 schrieb Violeta Georgieva: The proposed Apache Tomcat 7.0.96 release is now available for voting. For full details, see the changelog: https://ci.apache.org/projects/tomcat/tomcat7/docs/changelog.html It can be obtained from:

Re: [VOTE] Release Apache Tomcat 7.0.96

2019-07-25 Thread Rainer Jung
perties.default (and to the correct value). This should show you, where your wring value was read from. Regards, Rainer Am 25.07.2019 um 17:00 schrieb Rainer Jung: Hi Felix, could it be you have overwritten objenesis.loc in some build.properties? Commit 9e32afaf34e on 2019-07-05 fo

Re: [VOTE] Release Apache Tomcat 7.0.96

2019-07-25 Thread Rainer Jung
Hi Felix, could it be you have overwritten objenesis.loc in some build.properties? Commit 9e32afaf34e on 2019-07-05 for TC 7 contains: -objenesis.loc=https://bintray.com/easymock/distributions/download_file?file_path=objenesis-${objenesis.version}-bin.zip

Re: CI is back

2019-07-19 Thread Rainer Jung
Am 19.07.2019 um 13:22 schrieb Rémy Maucherat: On Fri, Jul 19, 2019 at 12:20 PM Rainer Jung <mailto:rainer.j...@kippdata.de>> wrote: I have the same problem (Java version needed for TLS based downloads) here for TC 7 and decided to split my build scripts in a download phase

Re: CI is back

2019-07-19 Thread Rainer Jung
Am 19.07.2019 um 13:20 schrieb Rémy Maucherat: On Fri, Jul 19, 2019 at 12:05 PM Emmanuel Bourg > wrote: Le 16/07/2019 à 10:39, Mark Thomas a écrit : > On July 15, 2019 11:08:22 PM UTC, "Rémy Maucherat" mailto:r...@apache.org>> wrote: > > That is

Re: CI is back

2019-07-19 Thread Rainer Jung
I have the same problem (Java version needed for TLS based downloads) here for TC 7 and decided to split my build scripts in a download phase using higher Java and the build phase using minimal Java. I think we should use our java.7.home property for the download steps. For TC 7 I currently

Re: Graal and Tomcat Native

2019-07-18 Thread Rainer Jung
} } } } } Regards, Rainer Am 18.07.2019 um 08:57 schrieb jean-frederic clere: On 12/07/2019 11:21, Rémy Maucherat wrote: On Thu, Jul 11, 2019 at 11:01 PM Rainer Jung mailto:rainer.j...@kippdata.de>> wrote: Am 11.07.2019 um

Re: [tomcat] branch master updated: Add JNI configuration

2019-07-17 Thread Rainer Jung
Am 15.07.2019 um 18:17 schrieb r...@apache.org: This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/master by this push:

Illegal reflective access in TC 9

2019-07-16 Thread Rainer Jung
I noticed (no regression) warnings during unit test run of the following types for modern JDK: [junit] WARNING: An illegal reflective access operation has occurred [junit] WARNING: Illegal reflective access by ... [junit] WARNING: Please consider reporting this to the maintainers

Re: Graal and Tomcat Native

2019-07-11 Thread Rainer Jung
Am 11.07.2019 um 22:10 schrieb Rémy Maucherat: On Thu, Jul 11, 2019 at 8:42 PM Rainer Jung <mailto:rainer.j...@kippdata.de>> wrote: Hi Rémy, When one looks up the macros in native/include/tcn.h, this boils down to the following returning null: (*env)->FindCla

Re: [VOTE] Release Apache Tomcat 7.0.95

2019-07-11 Thread Rainer Jung
Am 11.07.2019 um 20:54 schrieb Michael Osipov: Am 2019-07-11 um 20:39 schrieb Violeta Georgieva: The proposed Apache Tomcat 7.0.95 release is now available for voting. For full details, see the changelog: https://ci.apache.org/projects/tomcat/tomcat7/docs/changelog.html That's confusing. I

Re: Graal and Tomcat Native

2019-07-11 Thread Rainer Jung
Hi Rémy, Am 11.07.2019 um 18:35 schrieb Rémy Maucherat: On Thu, Jul 11, 2019 at 4:36 PM Rainer Jung <mailto:rainer.j...@kippdata.de>> wrote: Probably not very helup, but to make sure, the GetEnv is failing, I would add a little code to native/src/jnilib.c in J

Re: Graal and Tomcat Native

2019-07-11 Thread Rainer Jung
before it is returning. Sorry for not being more helpful, Rainer Am 11.07.2019 um 10:59 schrieb Rémy Maucherat: On Thu, Jul 11, 2019 at 9:18 AM Rainer Jung <mailto:rainer.j...@kippdata.de>> wrote: Hi Rémy, for which Java version and distribution is this? The docs for Java 7

Re: Graal and Tomcat Native

2019-07-11 Thread Rainer Jung
Hi Rémy, for which Java version and distribution is this? The docs for Java 7 and 8 are much less precise about return codes than the cited docs for Java 9. So older versions might give a generic error. The used code for checking versions is in the HotSpot sources for version 8 inside

Re: [VOTE] Release Apache Tomcat 9.0.22

2019-07-05 Thread Rainer Jung
Am 04.07.2019 um 21:33 schrieb Mark Thomas: The proposed Apache Tomcat 9.0.22 release is now available for voting. The major changes compared to the 9.0.21 release are: - Add user buildable optional modules for easier CDI 2 and JAX-RS support. Also include a new documentation page

Re: [tomcat-native] branch master updated: Support old shells.

2019-06-28 Thread Rainer Jung
commit(s) were added to refs/heads/master by this push: new edae9b1 Support old shells. edae9b1 is described below commit edae9b16888c1d5e73863877ff27bf129adc2fcd Author: Rainer Jung AuthorDate: Thu Jun 27 01:02:02 2019 +0200 Support old shells. Hi Rainer, do you still see shells

Re: svn commit: r1843685 - in /tomcat/native/trunk/native: build/buildcheck.sh buildconf

2019-06-26 Thread Rainer Jung
Forget that, one could overwrite the env var PYTHON from outside. That's enough for me. Regards, Rainer Am 27.06.2019 um 00:48 schrieb Rainer Jung: Hi there, I observed a problem with this commit while looking at the 1.2.23 candidate. Please see below. Am 12.10.2018 um 18:02 schrieb csuth

Re: svn commit: r1843685 - in /tomcat/native/trunk/native: build/buildcheck.sh buildconf

2019-06-26 Thread Rainer Jung
Hi there, I observed a problem with this commit while looking at the 1.2.23 candidate. Please see below. Am 12.10.2018 um 18:02 schrieb csuth...@apache.org: Author: csutherl Date: Fri Oct 12 16:02:57 2018 New Revision: 1843685 URL: http://svn.apache.org/viewvc?rev=1843685=rev Log: Update

Re: Tomcat-Native - Time to move to git?

2019-06-17 Thread Rainer Jung
Am 17.06.2019 um 18:56 schrieb Mark Thomas: Hi, I'm starting to look at OCSP stapling for our OpenSSL based connectors and I suspect a Tomcat Native release will be required. Even if it isn't for this, it has been a while since the last Tomcat Native release so I expect we'll need to do one

Re: [tomcat] branch master updated (83bd9a9 -> a10dcad)

2019-05-11 Thread Rainer Jung
That's an interesting variation of the commit mail problem, that we hoped had been fixed. Again the detail mail is missing and now we have "No new revisions were added by this update.". If no one has an idea what is special about this commit I will let infra know. Of course any ideas for

Re: [tomcat] branch master updated: Add GraalCompat for native images

2019-05-06 Thread Rainer Jung
Am 05.05.2019 um 14:30 schrieb r...@apache.org: This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/master by this push:

Re: [tomcat] branch master updated (a10ec6e -> 05323c3)

2019-05-03 Thread Rainer Jung
I think this is the first summary message I have seen, that contains the correct number of revisions and is followed by the corresponding detail mails with diffs. So it seems the fix applied by infra works :) Regards, Rainer Am 03.05.2019 um 17:33 schrieb ma...@apache.org: This is an

Re: Missing git commit emails

2019-05-02 Thread Rainer Jung
Am 30.04.2019 um 12:07 schrieb Mark Thomas: On 30/04/2019 09:17, Rainer Jung wrote: What could we do to avoid those summary emails, more precisely to reliably get the detail emails? Currently a review via email often is not possible due to the missing detail emails. I think it is related

Missing git commit emails

2019-04-30 Thread Rainer Jung
What could we do to avoid those summary emails, more precisely to reliably get the detail emails? Currently a review via email often is not possible due to the missing detail emails. I wonder whether the occurence of these "no details, instead just a summary" emails has anything to do with

Re: [tomcat] branch 7.0.x updated: Fix resource leak on exception path

2019-04-18 Thread Rainer Jung
Am 19.04.2019 um 00:27 schrieb Mark Thomas: On 18/04/2019 21:48, Rainer Jung wrote: This results in a compiler error. See below for details. Whoops. Should be fixed now. Sorry about that. NP. Confirmed, compiles now. Thanks and regards, Rainer

Re: [tomcat] branch 7.0.x updated: Fix resource leak on exception path

2019-04-18 Thread Rainer Jung
This results in a compiler error. See below for details. Am 17.04.2019 um 18:56 schrieb ma...@apache.org: This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 7.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following

Re: [VOTE] Release Apache Tomcat 9.0.18

2019-04-11 Thread Rainer Jung
Am 11.04.2019 um 16:15 schrieb Mark Thomas: On 11/04/2019 15:11, Rémy Maucherat wrote: I already made the fix but the commit emails is stuck. https://github.com/apache/tomcat/commit/4c6c3e9f434ca1a5cecf04f1b9148fb221b3af37 Great. Thanks. What other things do we need to take care of before

Re: [VOTE] Release Apache Tomcat 9.0.18

2019-04-11 Thread Rainer Jung
Am 11.04.2019 um 14:51 schrieb Rémy Maucherat: On Thu, Apr 11, 2019 at 2:00 PM Rainer Jung wrote: Am 10.04.2019 um 15:44 schrieb Mark Thomas: The proposed Apache Tomcat 9.0.18 release is now available for voting. The major changes compared to the 9.0.17 release are: - Fix for CVE-2019-0232

Re: [VOTE] Release Apache Tomcat 9.0.18

2019-04-11 Thread Rainer Jung
Am 10.04.2019 um 15:44 schrieb Mark Thomas: The proposed Apache Tomcat 9.0.18 release is now available for voting. The major changes compared to the 9.0.17 release are: - Fix for CVE-2019-0232 a RCE vulnerability on Windows - Add support for Java 11 to the JSP compiler. Java 12 and 13 are

Re: Tagging 9.0.18

2019-04-10 Thread Rainer Jung
Am 09.04.2019 um 19:45 schrieb Mark Thomas: Hi all, I'm a bit behind again this month - mainly because I was at the http workshop last week (very useful - a write-up is on the way). I'm very keen on reading your notes. On the httpd dev list Bill mentioned three links to notes taken by Daniel

Re: [tomcat] branch master updated (267b8d8 -> b35d947)

2019-03-05 Thread Rainer Jung
Am 05.03.2019 um 14:45 schrieb ma...@apache.org: This is an automated email from the ASF dual-hosted git repository. markt pushed a change to branch master in repository https://gitbox.apache.org/repos/asf/tomcat.git. from 267b8d8 Fix https://bz.apache.org/bugzilla/show_bug.cgi?id=63206

Re: Building and Testing Tomcat 7

2019-03-04 Thread Rainer Jung
Thanks Igal. Am 02.03.2019 um 23:08 schrieb Igal Sapir: Rainer, On Sat, Feb 16, 2019 at 2:42 PM Rainer Jung wrote: Hi Igal, Am 16.02.2019 um 22:10 schrieb Igal Sapir: Violeta, On Sat, Feb 16, 2019 at 9:41 AM Violeta Georgieva wrote: The proposed Apache Tomcat 7.0.93 release is now

Re: New git based merging workflow?

2019-02-28 Thread Rainer Jung
ne. I can probably do more in the IDE than I am currently doing. I'm still finding my way a bit and figuring out what process works best for me. HTH, Mark On 28/02/2019 10:04, Rainer Jung wrote: Hi there, I am struggling a bit with the new merging workflow from master to the branches. I did a

New git based merging workflow?

2019-02-28 Thread Rainer Jung
Hi there, I am struggling a bit with the new merging workflow from master to the branches. I did a short read on the workspaces and tried cherry-picking with and without workspaces. It seems workspaces are not for doing actual commits that should at the end et pushed to origin. And when

Re: [tomcat] branch master updated: Remove further remains of the extras package.

2019-02-26 Thread Rainer Jung
/asf/tomcat.git The following commit(s) were added to refs/heads/master by this push: new 0752512 Remove further remains of the extras package. 0752512 is described below commit 0752512ac27ab338371b72ded2b216d972091196 Author: Rainer Jung AuthorDate: Wed Feb 27 00:26:03 2019 +0100

Re: [VOTE] Release Apache Tomcat 7.0.93

2019-02-16 Thread Rainer Jung
Hi Igal, Am 16.02.2019 um 22:10 schrieb Igal Sapir: Violeta, On Sat, Feb 16, 2019 at 9:41 AM Violeta Georgieva wrote: The proposed Apache Tomcat 7.0.93 release is now available for voting. I know that this is an issue with my environment, and not with Tomcat, but I wonder how you get it

Re: OpenSSL session caching defaults

2019-02-11 Thread Rainer Jung
Am 11.02.2019 um 10:18 schrieb Mark Thomas: The OpenSSL defaults are: - session caching enabled - sessions timeout 300 (seconds) r1686258 changed those to: - session caching disabled - session timeout 14400 (4 hours) This was part of the netty changes. I think the timeout change is OK but I

TC test suite results non-native

2019-02-01 Thread Rainer Jung
Hi there, I ran the test suite for a wide range of combinations of TC versions (7, 8.5 and 9 head), Java versions (1.7.0, 1.8.0 and 11 - where applicable) and OpenSSL (1.1.1a, 1.1.1, 1.1.0i, 1.1.0e, 1.0.2q, 1.0.2). tc revision was 1852637, tcnative was always 1.2.21, platforms where Solaris

Re: TC trunk on SLES 11 with APR and Java 11: to many threads during TestDefaultServletEncodingWith*Bom

2019-01-29 Thread Rainer Jung
Am 29.01.2019 um 10:12 schrieb Rémy Maucherat: On Tue, Jan 29, 2019 at 12:01 AM Rainer Jung wrote: Thanks Rémy, that seems to have fixed it. As a much smaller annoyance, now every single executing test writes one new line: WARNING [main] org.apache.tomcat.util.net.AprEndpoint$Sendfile.stop

Re: TC trunk on SLES 11 with APR and Java 11: to many threads during TestDefaultServletEncodingWith*Bom

2019-01-28 Thread Rainer Jung
Am 28.01.2019 um 11:49 schrieb Rémy Maucherat: On Mon, Jan 28, 2019 at 11:16 AM Rainer Jung wrote: Am 28.01.2019 um 10:50 schrieb Rémy Maucherat: On Sun, Jan 27, 2019 at 2:18 AM Rainer Jung wrote: When running the unit tests for trunk using Java 11 and APR connector I run out of memory

Re: TC trunk on SLES 11 with APR and Java 11: to many threads during TestDefaultServletEncodingWith*Bom

2019-01-28 Thread Rainer Jung
Am 28.01.2019 um 10:50 schrieb Rémy Maucherat: On Sun, Jan 27, 2019 at 2:18 AM Rainer Jung wrote: When running the unit tests for trunk using Java 11 and APR connector I run out of memory, first in threads, later in heap. The prpoblematic tests are TestDefaultServletEncodingWithBom

Re: TC trunk on SLES 11 with APR and Java 11: to many threads during TestDefaultServletEncodingWith*Bom

2019-01-27 Thread Rainer Jung
probably a bit excessive. I don't understand the lifecycle of the embedded TC during the unit tests and the sendfile threads in APR well enough to be able to suggest a fix. Regards, Rainer Am 27.01.2019 um 15:10 schrieb Rainer Jung: I see the same problem on RHEL 6, but only the thread part

Re: TC trunk on SLES 11 with APR and Java 11: to many threads during TestDefaultServletEncodingWith*Bom

2019-01-27 Thread Rainer Jung
ad problem. Regards, Rainer Am 27.01.2019 um 02:18 schrieb Rainer Jung: When running the unit tests for trunk using Java 11 and APR connector I run out of memory, first in threads, later in heap. The prpoblematic tests are TestDefaultServletEncodingWithBom and TestDefaultServletEncoding

TC trunk on SLES 11 with APR and Java 11: to many threads during TestDefaultServletEncodingWith*Bom

2019-01-26 Thread Rainer Jung
When running the unit tests for trunk using Java 11 and APR connector I run out of memory, first in threads, later in heap. The prpoblematic tests are TestDefaultServletEncodingWithBom and TestDefaultServletEncodingWithoutBom. A thread dumps shows 540 sendfile threads like the following:

TC 9 plus Java 11 illegal reflective access during unit tests

2019-01-26 Thread Rainer Jung
Hi there, FYI: during unit tests run (testing tcnative) for TC trunk I get the following warnings when testing with Java 11: 166 x WARNING: Illegal reflective access by org.apache.catalina.loader.WebappClassLoaderBase (file:/.../output/classes/) to field

Re: svn commit: r1852152 - /tomcat/native/trunk/xdocs/miscellaneous/changelog.xml

2019-01-25 Thread Rainer Jung
Thanks for adding, I forgot it. Rainer - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org

Re: [VOTE] Release Apache Tomcat Native 1.2.20

2019-01-24 Thread Rainer Jung
Checked in as 1852036. My tests looked good (no crashes), but it would be useful to rerun the original memleak checks against the patched code. Regards, Rainer Am 24.01.2019 um 15:54 schrieb Rainer Jung: Am 24.01.2019 um 15:51 schrieb Rainer Jung: Am 24.01.2019 um 14:16 schrieb Mark Thomas

Re: [VOTE] Release Apache Tomcat Native 1.2.20

2019-01-24 Thread Rainer Jung
Am 24.01.2019 um 15:51 schrieb Rainer Jung: Am 24.01.2019 um 14:16 schrieb Mark Thomas: On 24/01/2019 13:01, Rainer Jung wrote: Am 24.01.2019 um 13:37 schrieb Mark Thomas: It can happen in normal usage. I saw it once. It happens on Connector stop so it could be worse. My memory leak fix

Re: [VOTE] Release Apache Tomcat Native 1.2.20

2019-01-24 Thread Rainer Jung
Am 24.01.2019 um 14:16 schrieb Mark Thomas: On 24/01/2019 13:01, Rainer Jung wrote: Am 24.01.2019 um 13:37 schrieb Mark Thomas: It can happen in normal usage. I saw it once. It happens on Connector stop so it could be worse. My memory leak fix is definitely the root cause. Any thoughts

Re: [VOTE] Release Apache Tomcat Native 1.2.20

2019-01-24 Thread Rainer Jung
Am 24.01.2019 um 13:37 schrieb Mark Thomas: On 24/01/2019 12:18, Rainer Jung wrote: Am 21.01.2019 um 15:49 schrieb Mark Thomas: Version 1.2.20 includes the following changes compared to 1.2.19: - Fixed memory leak associated with the use of OpenSSL BIO (used when    OpenSSL provides the TLS

Re: [VOTE] Release Apache Tomcat Native 1.2.20

2019-01-24 Thread Rainer Jung
Am 21.01.2019 um 15:49 schrieb Mark Thomas: Version 1.2.20 includes the following changes compared to 1.2.19: - Fixed memory leak associated with the use of OpenSSL BIO (used when OpenSSL provides the TLS functionality for the NIO and NIO2 connectors) Various other fixes and

Re: [VOTE] Release Apache Tomcat Native 1.2.20

2019-01-24 Thread Rainer Jung
I added some debug logging to native and the Java classes and the picture looks understandable now. Here the example from NIO and TestCustomSsl: - test testCustomTrustManagerNone creates OpenSSLEngine 7f560c39, ssl 4298850656 and con->pool 4309969128 from parent pool aprPool = c->pool

Re: [VOTE] Release Apache Tomcat Native 1.2.20

2019-01-24 Thread Rainer Jung
Am 24.01.2019 um 11:17 schrieb Rémy Maucherat: On Thu, Jan 24, 2019 at 10:49 AM Rainer Jung wrote: The other possibility - since the crash often happens in the finalizer - that there is double destruction between normal code and finalizer code. OpenSSLEngine.shutdown is obviously very

Re: [VOTE] Release Apache Tomcat Native 1.2.20

2019-01-24 Thread Rainer Jung
ere) but I expect that it will need to be cancelled and a 1.2.21 will be required. I'll try and figure out where r1851094 went wrong. Any help gratefully received. Mark On 24/01/2019 09:41, Rainer Jung wrote: Addition: - running the same tests just replacing tcnative 1.2.20 by 1.2.19 does n

Re: [VOTE] Release Apache Tomcat Native 1.2.20

2019-01-24 Thread Rainer Jung
- since the crash often happens in the finalizer - that there is double destruction between normal code and finalizer code. But since I ran the 1.2.20 and 1.2.19 tests against the same tc 8.5 head, I doubt that. Regards, Rainer Am 24.01.2019 um 00:13 schrieb Rainer Jung: Am 21.01.2019 um 15:49

Re: [VOTE] Release Apache Tomcat Native 1.2.20

2019-01-23 Thread Rainer Jung
Am 21.01.2019 um 15:49 schrieb Mark Thomas: Version 1.2.20 includes the following changes compared to 1.2.19: - Fixed memory leak associated with the use of OpenSSL BIO (used when OpenSSL provides the TLS functionality for the NIO and NIO2 connectors) Various other fixes and

Re: Extras

2019-01-10 Thread Rainer Jung
Am 10.01.2019 um 15:01 schrieb Rémy Maucherat: On Thu, Jan 10, 2019 at 2:53 PM Rainer Jung wrote: Am 10.01.2019 um 13:16 schrieb Rémy Maucherat: On Thu, Jan 10, 2019 at 1:09 PM Mark Thomas wrote: There is the possibility that an alternative logging JAR could return. https://markmail.org

Re: Extras

2019-01-10 Thread Rainer Jung
Am 10.01.2019 um 13:16 schrieb Rémy Maucherat: On Thu, Jan 10, 2019 at 1:09 PM Mark Thomas wrote: There is the possibility that an alternative logging JAR could return. https://markmail.org/message/gdmffcyporhcmqge Whether that needs an optional / alternative JAR or whether it could be

Re: buildbot failure in on tomcat-85-trunk

2019-01-06 Thread Rainer Jung
Hi Chris, Am 05.01.2019 um 22:25 schrieb Christopher Schultz: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, Hmm... this my fault. The EncryptInterceptor tests pass on my local machine but not on the buildbot server, apparently. How can I get the log file from the test failure? junit's

Re: New design for the Tomcat website

2019-01-03 Thread Rainer Jung
Thanks Igal, Am 03.01.2019 um 02:59 schrieb Igal Sapir: Hi Tomcat team, I am working on a new design for the Tomcat website and wanted some preliminary feedback. You can see the first mockup at http://people.apache.org/~isapir/mockups/tomcat-site-1/ Please let me know your thoughts. I

Re: svn commit: r1849118 [1/9] - in /tomcat/site/trunk/docs/connectors-doc: ./ ajp/ ajp/printer/ common_howto/ common_howto/printer/ miscellaneous/ miscellaneous/printer/ news/ news/printer/ printer/

2018-12-17 Thread Rainer Jung
Looks great, thanks! Regards, Rainer - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org

Re: Current problems with TLS 1.0 and NIO(2)+native+openssl 1.1.1

2018-11-29 Thread Rainer Jung
Am 29.11.2018 um 15:55 schrieb Mark Thomas: On 29/11/2018 13:27, Rémy Maucherat wrote: On Sun, Nov 25, 2018 at 10:42 AM Rainer Jung wrote: In our Java code, what happens is a call to unwrap() in OpenSSLEngine. This call writes I think 146 bytes, then checks pendingReadableBytesInSSL

Current problems with TLS 1.0 and NIO(2)+native+openssl 1.1.1

2018-11-25 Thread Rainer Jung
I observed that when building tcnative against OpenSSL 1.1.1 I ran into hangs when talking TLS 1.0 with Tomcat trunk using that tcnative plus Nio(2). A simple "GET /" request eg. send with curl, hangs for 60 seconds after a successful TLS handshake, then the client ends with an "empty reply

Re: Tagging Tomcat Native 1.2.19

2018-11-24 Thread Rainer Jung
20:37 schrieb Rainer Jung: One correction: using openssl s_client correctly does not hang. Only curl build with OpenSSL hangs. I tried my old curl builds and it seems it starts to hang with curl 7.24.0. Version 7.23.1 does not hang. The OpenSSL lib version on the client side does not seem

Re: Tagging Tomcat Native 1.2.19

2018-11-23 Thread Rainer Jung
debugging (eg. check whether APR also hangs or only NIO+native) but eventually this might end up being a curl bug. Regards, Rainer Am 23.11.2018 um 17:19 schrieb Rainer Jung: Short addition: When using Apache httpd 2.4.37 build with OpenSSL 1.1.1a, there are no hangs with TLS 1.0. So it seems

Re: Tagging Tomcat Native 1.2.19

2018-11-23 Thread Rainer Jung
Short addition: When using Apache httpd 2.4.37 build with OpenSSL 1.1.1a, there are no hangs with TLS 1.0. So it seems we have a relevant difference in our server-side use of the OpenSSL API. Easy to reproduce, but not easy to debug ... Regards, Rainer Am 23.11.2018 um 15:50 schrieb Rainer

  1   2   3   4   5   6   7   8   9   10   >