[Bug 68941] ServletFileUpload missing in tomcat-coyote.jar

2024-04-24 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68941

Mark Thomas  changed:

   What|Removed |Added

 Resolution|--- |WONTFIX
 Status|NEW |RESOLVED

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68941] ServletFileUpload missing in tomcat-coyote.jar

2024-04-24 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68941

--- Comment #1 from Remy Maucherat  ---
This class is not used in Tomcat so it was removed:
https://github.com/apache/tomcat/commit/9ba3b0c57fff311cd898716db19e508183545b28

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68941] New: ServletFileUpload missing in tomcat-coyote.jar

2024-04-24 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68941

Bug ID: 68941
   Summary: ServletFileUpload missing in tomcat-coyote.jar
   Product: Tomcat 9
   Version: 9.0.88
  Hardware: Macintosh
OS: other
Status: NEW
  Severity: regression
  Priority: P2
 Component: Packaging
  Assignee: dev@tomcat.apache.org
  Reporter: off...@alpl.lu
  Target Milestone: -

Created attachment 39683
  --> https://bz.apache.org/bugzilla/attachment.cgi?id=39683=edit
package screenshot

org.apache.tomcat.util.http.fileupload.servlet.ServletFileUpload 

is missing in tomcat-coyote.jar

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68938] ScriptEngine engine is null

2024-04-24 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68938

Mark Thomas  changed:

   What|Removed |Added

 Status|NEW |RESOLVED
 Resolution|--- |INVALID

--- Comment #3 from Mark Thomas  ---
Bugzilla is not a support forum.

This is not a Tomcat issue.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68938] ScriptEngine engine is null

2024-04-23 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68938

--- Comment #2 from Adam  ---
(In reply to Michael Osipov from comment #1)
> ??? So what? What is the report here?

How to config the maven pom to solve the problem.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68934] Log events which exceed Connector parameter limits such as maxConnections

2024-04-23 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68934

Christopher Schultz  changed:

   What|Removed |Added

Summary|Add logginge for set|Log events which exceed
   |Connector parameter limits  |Connector parameter limits
   |such as maxConnections  |such as maxConnections

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68934] Add logginge for set Connector parameter limits such as maxConnections

2024-04-23 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68934

Remy Maucherat  changed:

   What|Removed |Added

 Status|NEW |RESOLVED
 Resolution|--- |FIXED

--- Comment #1 from Remy Maucherat  ---
It is not possible to do something generic for everything.

I added a debug log to LimitLatch when going over the limit, which is the
structure used for enforcing maxConnections. The latch had some tracing
already, but nothing for the actually important event ... This could get
verbose if hit all the time though.

maxThreads is about the thread pool, which has a lot of statistics and
exceptions when rejecting a task (when maxThreads + queue full). There are
multiple possible thread pool implementations so any of them could be doing
something slightly different.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68932] Occasional 404 or 500 errors

2024-04-23 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68932

--- Comment #6 from Michael Osipov  ---
(In reply to Christopher Schultz from comment #5)
> Surely, Michael meant to suggest upgrading to the latest 9.0.88 that was
> just released.

No, I wanted to know wether this problem is in 8 or 9 first. It is easier to
diff latest version of 8 and 9 instead of ancient ones.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68932] Occasional 404 or 500 errors

2024-04-23 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68932

--- Comment #5 from Christopher Schultz  ---
Surely, Michael meant to suggest upgrading to the latest 9.0.88 that was just
released.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68919] Make Tomcat return 503 on stopped web applications

2024-04-23 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68919

--- Comment #3 from Christopher Schultz  ---
(In reply to Michael Osipov from comment #2)
> I am not convinced by either approach because in any case it would require me
> to deploy a ROOT application with Tomcat privileges to properly fetch the
> URL and check whether the application is truly stopped.

I don't think so. If Tomcat cannot route a request to a non-ROOT application,
the ROOT application will receive the request instead.

So, for example, if you expect a resource to be available at /myapp/resource
but the /myapp application is not running for whatever reason, then
/myapp/resource will be served by the ROOT application. There is no reason for
the ROOT application to then turn-around and re-request /myapp/resource from
Tomcat "to see if it's working". You already know its NOT working since it was
routed to ROOT.

> > Tomcat rewrite Valve
> This is static, I should dynamically be able to determine that the requested
> webapp is down

See above. I think Tomcat provides that without you having to probe anything.

> > plain JSP +  configuration in web.xml
> How? The status is issued by the container, how am I supposed to change the
> status code reasonably from a JSP. Looks wrong to me.

If /myapp/resource is not available, it will be served by ROOT. Here is where
you get to pick the HTTP status code. Tomcat will not say "oh and by the way,
/myapp/resource was supposed to be served by /myapp but I had to give it to
you, instead so something is definitely wrong". Instead, the simple fact that
ROOT is handling the request means that /myapp is not running so ROOT "knows"
something is wrong already. Just return a 503 or 404 or 123 from whatever
mechanism you want.

> > Custom Java code that you write
> Too sophisticated honestly.
> 
> I think that it is best configured at  or  level inside of
> Tomcat.

I'm suggesting this is already possible: just configure a ROOT context inside a
 and you are done.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68911] Newly introduced ConfigurationSource doesn't respect environment variables

2024-04-23 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68911

--- Comment #13 from Remy Maucherat  ---
(In reply to 7element from comment #12)
> Created attachment 39682 [details]
> Patch
> 
> Propose a patch with the requested change

The patch does not seem to do anything, since
ConfigurationSource.super.getServerXml() default implementation also calls
getResource (the idea is to allow overriding).

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68938] ScriptEngine engine is null

2024-04-23 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68938

--- Comment #1 from Michael Osipov  ---
??? So what? What is the report here?

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68938] New: ScriptEngine engine is null

2024-04-23 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68938

Bug ID: 68938
   Summary: ScriptEngine engine is null
   Product: Tomcat 9
   Version: 9.0.87
  Hardware: PC
OS: Mac OS X 10.1
Status: NEW
  Severity: normal
  Priority: P2
 Component: Catalina
  Assignee: dev@tomcat.apache.org
  Reporter: kaixinwangzi1...@163.com
  Target Milestone: -


org.opoo.maven
tomcat9-maven-plugin
3.0.1

/
8080
UTF-8


I use this plugin. 

ScriptEngineManager manager = new ScriptEngineManager();
ScriptEngine engine = manager.getEngineByName("javascript");
engine is null

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68911] Newly introduced ConfigurationSource doesn't respect environment variables

2024-04-23 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68911

--- Comment #12 from 7elem...@mail.bg ---
Created attachment 39682
  --> https://bz.apache.org/bugzilla/attachment.cgi?id=39682=edit
Patch

Propose a patch with the requested change

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68911] Newly introduced ConfigurationSource doesn't respect environment variables

2024-04-23 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68911

Remy Maucherat  changed:

   What|Removed |Added

 Status|REOPENED|RESOLVED
 Resolution|--- |INVALID

--- Comment #11 from Remy Maucherat  ---
Please do not reopen the BZ. Please use the user mailing list to discuss this
further instead. If a problem is found, then it will be addressed just the
same.

The shell scripts will pass the CATALINA_BASE environment variable as the
catalina.base Java system property, which will then be used to setup the paths
that are used by CatalinaBaseConfigurationSource. I fail to see a behavior
change there.

Note: 8.5 to 9.0 is a major version update, so some change of behavior is
acceptable, and some configuration updates could be required.

[remm@feather build]$ export CATALINA_BASE=/tmp
[remm@feather build]$ ./bin/catalina.sh run
Using CATALINA_BASE:   /tmp
Using CATALINA_HOME:   /home/remm/Work/tomcat/apache-tomcat-trunk/output/build
Using CATALINA_TMPDIR: /tmp/temp
Using JRE_HOME:/usr/lib/jvm/java-22
Using CLASSPATH:  
/home/remm/Work/tomcat/apache-tomcat-trunk/output/build/bin/bootstrap.jar:/home/remm/Work/tomcat/apache-tomcat-trunk/output/build/bin/tomcat-juli.jar
Using CATALINA_OPTS:   
WARNING: java.io.tmpdir directory does not exist
Apr 23, 2024 10:18:24 AM org.apache.catalina.startup.Catalina parseServerXml
WARNING: Unable to load server configuration from [/tmp/conf/server.xml]
java.io.FileNotFoundException: /tmp/conf/server.xml (No such file or directory)
at java.base/java.io.FileInputStream.open0(Native Method)
at java.base/java.io.FileInputStream.open(FileInputStream.java:213)
at java.base/java.io.FileInputStream.(FileInputStream.java:152)
at java.base/java.io.FileInputStream.(FileInputStream.java:106)
at
java.base/sun.net.www.protocol.file.FileURLConnection.connect(FileURLConnection.java:84)
at
java.base/sun.net.www.protocol.file.FileURLConnection.getInputStream(FileURLConnection.java:186)
at
org.apache.catalina.startup.CatalinaBaseConfigurationSource.getResource(CatalinaBaseConfigurationSource.java:120)
at
org.apache.tomcat.util.file.ConfigurationSource.getConfResource(ConfigurationSource.java:150)
at
org.apache.tomcat.util.file.ConfigurationSource.getServerXml(ConfigurationSource.java:127)
at
org.apache.catalina.startup.CatalinaBaseConfigurationSource.getServerXml(CatalinaBaseConfigurationSource.java:54)
at
org.apache.catalina.startup.Catalina.parseServerXml(Catalina.java:590)
at org.apache.catalina.startup.Catalina.load(Catalina.java:691)
at org.apache.catalina.startup.Catalina.load(Catalina.java:729)
at
java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:103)
at java.base/java.lang.reflect.Method.invoke(Method.java:580)
at org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:299)
at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:469)

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68911] Newly introduced ConfigurationSource doesn't respect environment variables

2024-04-23 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68911

7elem...@mail.bg changed:

   What|Removed |Added

 Status|RESOLVED|REOPENED
 Resolution|INVALID |---

--- Comment #10 from 7elem...@mail.bg ---
I'm sorry, but I don't find it exotic to request CATALINA_BASE to be respected
when tomcat initially boots up and not only user.dir to be used to search for
server.xml
As I said already, all I want is backward compatibility as this was the case
until 8.5
On top I don't want to change the logic and break currently released tomcat
versions
All I want is to add a backward compatible way to search for the configuration,
i.e. to search for additional place (CATALINA_BASE) for server.xml as a last
resort, before failing and continue with the defaults.
I couldn't find a way to change with configuration
org.apache.catalina.startup.CatalinaBaseConfigurationSource to my own
ConfigurationSource and that is the reason for this request.

Best Regards

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68934] New: Add logginge for set Connector parameter limits such as maxConnections

2024-04-22 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68934

Bug ID: 68934
   Summary: Add logginge for set Connector parameter limits such
as maxConnections
   Product: Tomcat 10
   Version: unspecified
  Hardware: All
OS: Linux
Status: NEW
  Severity: enhancement
  Priority: P2
 Component: Connectors
  Assignee: dev@tomcat.apache.org
  Reporter: ba...@hawaii.edu
  Target Milestone: --

Tomcat 10.1.x 

Tocat allows to set limits on certain Connector parameters, e.g.:
maxConnections, maxThreads. It would be useful if logging could be configured
to report when these limits were reached.

Logging needn't be super timely, but would be helpful for forensic confirmation
that the parameter in question may require tuning.

Ref.: Tomcat Users mailing list thread
<https://lists.apache.org/thread/v3s4h1dgg5pgnzwszxmgcgy03zgndrvd>

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68932] Occasional 404 or 500 errors

2024-04-22 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68932

--- Comment #4 from Michael Osipov  ---
You should first upgrade to 8.5.100 and see whether the error is present there
as well.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68932] Occasional 404 or 500 errors

2024-04-22 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68932

--- Comment #3 from Nathan  ---
This issue has already arisen in projects across different departments.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68932] Occasional 404 or 500 errors

2024-04-22 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68932

Nathan  changed:

   What|Removed |Added

 CC||ningj...@163.com

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68932] Occasional 404 or 500 errors

2024-04-22 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68932

--- Comment #2 from Nathan  ---
This is 500 error stack info below:
org.apache.coyote.http11.Http11Ppocessor.service Error processing request
java.lang.Nul1PointerException
at org.apache.tomcat.util.buf.MessageBytes.toChars(MessageBytes.java:322)
at org.apache.catalina.mapper.Mapper.map(Mapper.java:664)
at
org.apache.catalina.connector.CoyoteAdapter.postParseRequest(CoyoteAdapter.java:692)
atorg.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:338)
at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:390)
at
org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:63)
at
org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:926)
at
org.apache.tomcat.util.net.Nio2Endpoint$5ocketProcessor.doRun(Nio2Endpoint.java
:1713)
at
org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:52)
at
org.apache.tomcat.util.net.AbstractEndpoint.processSocket(AbstractEndpoint.java:1288)
at
org.apache.tomcat.uti1.net.Nio2Endpoint$Nio2Socketwrapper$2.completed(Nio2Endpoint.java:641)
at
org.apache.tomcat.util.net.Nio2Endpoint$Nio2SocketWrapper$2.completed(Nio2Endpoint.java:619)
at sun.nio.ch.Invoker.invokeUnchecked(Invoker.java:126)
at sun.nio.ch.UnixAsynchronousSocketChannelImpl.finishRead(UnixAs ynchronous
SocketChannelImpl.java:432)
at sun.nio.ch.UnixAsynchronousSocketChannelImp1.finish(UnixAs
ynchronousSocketChannelImpl.java:191)
at sun.nio.ch.UnixAsynchronousSocketChannelImp1.onEvent(UnixAs
ynchronousSocketChannelImpl.java:213)
at sun.nio.ch.EPol1Port$EventHandlerTask.run(EPol1Port.java: 293)
at
sun.nio.ch.AsynchronousChannelGroupImp1$1.run(AsynchronousChannelGroupImpl.java:112)
at
java.uti1,concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
at java.util.concurrent.ThreadPoolExecutor$Worker .run
(ThreadPoolExecutor.java:624)
at java.Lang.Thread.run(Thread.java:750)

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68932] Occasional 404 or 500 errors

2024-04-22 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68932

Nathan  changed:

   What|Removed |Added

Version|9.0.83  |9.0.76

--- Comment #1 from Nathan  ---
This is code snippet in StandardHostValve:
Context context = request.getContext();
if (context == null) {
if (!response.isError()) {
response.sendError(404);//here is 404 error
}
return;
}

..

This is stack info below:
at org.apache.coyote.Response.setStatus(Response.java:229)
at org.apache.catalina.connector.Response.sendError(Response.java:1276) 
at org.apache.catalina.connector.Response.sendError(Response.java:1249)
at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:102) 
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:93)
at
org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:673)
 
at
org.apache.catalina.core.standardEngineValve.invoke(StandardEngineValve.java:74)
 
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:343) 
at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:390)
at
org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:63)
at
org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:926)
 
at
org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1791)
 
at
org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:52)
at
org.apache.tomcat.util.threads.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1191)
 
at
org.apache.tomcat.util.threads.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:659)
 
at
org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
 
at java.lang.Thread.run(Thread.java:750)

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68932] New: Occasional 404 or 500 errors

2024-04-22 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68932

Bug ID: 68932
   Summary: Occasional 404 or 500 errors
   Product: Tomcat 9
   Version: 9.0.83
  Hardware: All
OS: Linux
Status: NEW
  Severity: major
  Priority: P2
 Component: Catalina
  Assignee: dev@tomcat.apache.org
  Reporter: ningj...@163.com
  Target Milestone: -

When I upgrade tomcat 8.5.64 to 9.0.76(or 9.0.83), I found that there are
Occasional 404 or 500 errors (rate: 1/1,000,000~1/500,000).
I don't know how this happened.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68909] JSP compilation error due to classpath problems

2024-04-22 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68909

Chris  changed:

   What|Removed |Added

 Status|NEW |RESOLVED
 Resolution|--- |INVALID

--- Comment #9 from Chris  ---
Hello Mark,

thanks for your lines.

Indeed this is the workaround, I manually applied last week to apply the latest
Tomcat versions to all installations.

I herby withdraw my bug, since it is no issue of Tomcat.

Thanks guys for your support.

Chris

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68928] Apache httpd not starting with mod_jk 1.2.49 after upgrade to SLES 15 SP5

2024-04-22 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68928

--- Comment #2 from SimEon  ---
(In reply to Rainer Jung from comment #1)
> Fix for 1.2.49 was incomplete due to a typo in the Makefile. See comment #33
> in BZ 66005.
> 
> *** This bug has been marked as a duplicate of bug 66005 ***


Thank you very much. 

We got it running with re-building mod_jk again and beforehand renaming
"-export-symbols-regexp" to "-export-symbols-regex" in apache-2.0/Makefile.in
as mentioned in BZ 66005.


Danke & Gruss,
Simeon

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68919] Make Tomcat return 503 on stopped web applications

2024-04-22 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68919

--- Comment #2 from Michael Osipov  ---
Chris,

I am not convined by either approach because in any case it would require me to
deploy a ROOT application with Tomcat priviledges to properly fetch the URL and
check whether the application is truly stopped.

> Tomcat rewrite Valve
This is static, I should dynamically be able to determine that the requested
webapp is down

> plain JSP +  configuration in web.xml
How? The status is issued by the container, how am I supposed to change the
status code reasonably from a JSP. Looks wrong to me.

> Custom Java code that you write
Too sophisticated honestly.

I think that it is best configured at  or  level inside of
Tomcat.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 66005] Apache crashes, if there is a tomcat server, which can not be resolved

2024-04-22 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=66005

Rainer Jung  changed:

   What|Removed |Added

 CC||simeon.fais...@dxc.com

--- Comment #34 from Rainer Jung  ---
*** Bug 68928 has been marked as a duplicate of this bug. ***

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68928] Apache httpd not starting with mod_jk 1.2.49 after upgrade to SLES 15 SP5

2024-04-22 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68928

Rainer Jung  changed:

   What|Removed |Added

 Resolution|--- |DUPLICATE
 Status|NEW |RESOLVED

--- Comment #1 from Rainer Jung  ---
Fix for 1.2.49 was incomplete due to a typo in the Makefile. See comment #33 in
BZ 66005.

*** This bug has been marked as a duplicate of bug 66005 ***

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68928] New: Apache httpd not starting with mod_jk 1.2.49 after upgrade to SLES 15 SP5

2024-04-22 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68928

Bug ID: 68928
   Summary: Apache httpd not starting with mod_jk 1.2.49 after
upgrade to SLES 15 SP5
   Product: Tomcat Connectors
   Version: 1.2.49
  Hardware: PC
OS: Linux
Status: NEW
  Severity: normal
  Priority: P2
 Component: mod_jk
  Assignee: dev@tomcat.apache.org
  Reporter: simeon.fais...@dxc.com
  Target Milestone: ---

Good morning!

We have been upgrading our system from SLES 12 to SLES 15 SP5.

We are running a self-compiled Apache httpd with mod_jk on multiple similar
systems. They are running fine on SLES 12, but stop working on SLES 15 SP5. We
tested with the following two sets of versions, but got the same results today:

1)
httpd_version: httpd-2.4.58
jk_version: tomcat-connectors-1.2.49-src
openssl_version: openssl-3.0.12
pcre_version: pcre-8.45
apr_version: apr-1.7.4
apr_util_version: apr-util-1.6.3

2)
httpd_version: httpd-2.4.59
jk_version: tomcat-connectors-1.2.49-src
openssl_version: openssl-3.3.0
pcre_version: pcre-8.45
apr_version: apr-1.7.4
apr_util_version: apr-util-1.6.3


The error was a not starting httpd with the module mod_jk.so included within
the configuration. Without the mod_jk.so in the config the httpd process was
running fine.

Error messages:

1. In syslog it shows the process dump:
2024-04-22T06:20:54.594579+00:00  systemd[1]: Starting The Apache HTTP
Server...
2024-04-22T06:20:54.656987+00:00  systemd[1]: Started The Apache HTTP Server.
2024-04-22T06:20:54.683137+00:00  systemd[1]: Started Process Core Dump (PID
14707/UID 0).
2024-04-22T06:20:54.958281+00:00  systemd-coredump[14708]: Process 14706
(httpd) of user 0 dumped core.#012#012Found module linux-vdso.so.1 with
build-id: d74f0fa9e6060ef50f04c54743fb715c80644efa#012Found module mod_env.so
with build-id: b09767ea8787f9edb7dd59e6d2bf5bef62e54a16#012Found module
mod_expires.so with build-id: f92c0b312e0af0ebef8734ec326538c22879d90f#012Found
module mod_cache_disk.so with build-id:
cd6b448361f9583b797a669aed525a045ab291f9#012Found module mod_cache.so with
build-id: 9a7aa6f344900598d28b3ec3e67711fd2825ae02#012Found module
mod_deflate.so with build-id: 97ce87386abda3446a8a54ce590ecfd19e37ddbd#012Found
module mod_filter.so with build-id:
559eb5331e63f1b433a5597fa304062851ac4a81#012Found module mod_setenvif.so with
build-id: 3e293f1905ebb3e1f962bb0a5303c65bc0139834#012Found module
mod_lbmethod_bytraffic.so with build-id:
be82ad83f17b7c9cdff8d92d98127b34fae3a16e#012Found module mod_rewrite.so with
build-id: 41009232c80c69da2eb3d68d2b5ddb0a9602ee6c#012Found module
mod_proxy_http.so with build-id:
3bfcade3b891801786ec25269d019c1e1e80e16d#012Found module
mod_lbmethod_byrequests.so with build-id:
3ff4f5930fa07c14021b1f82532db2a0d7badd56#012Found module mod_slotmem_shm.so
with build-id: 2e02511ba76733ebb4993c1d110e76ab6028c688#012Found module
mod_proxy_balancer.so with build-id:
ec73ee99138cc5ff48f3b2434f9a2b5fc0df2fac#012Found module mod_proxy_connect.so
with build-id: 3b12468ddb85b5a5972b391bc03df064484dd674#012Found module
mod_proxy.so with build-id: 8b9716c849a962972180d521d24be354cf734f34#012Found
module mod_headers.so with build-id:
12fa2d10cbe963dfb506a959ce064be39650c9b9#012Found module mod_unique_id.so with
build-id: 2b03b6fa0464c9b1869e86c2404dadd21416a40c#012Found module
mod_status.so with build-id: deaf7ff59eac61c5db3d64a028d4d73536147536#012Found
module mod_alias.so with build-id:
da6dec92b937af8a41190c33c14a22e04ce37314#012Found module mod_unixd.so with
build-id: 47a3b68b9b827a14189dd7a198dae8bcba92d3d3#012Found module
mod_log_config.so with build-id:
02a955eba9349826e308ec602e0ab11c8d8fa73d#012Found module mod_mime.so with
build-id: 672a4dfa2b17474a86a964972f7e3497545ac8b9#012Found module
mod_reqtimeout.so with build-id:
f148e20565439ab1bc26158ef12a1673d95e0ee5#012Found module mod_socache_shmcb.so
with build-id: b6f530e391a1feae47c5eeaf4ab840412e7e54c4#012Found module
mod_authz_core.so with build-id:
8ffb3e83446fe2ce293a3b7bf9ce2e8c2be4a173#012Found module mod_authz_host.so with
build-id: 17d63013b75c5cc8194c505cba900fe0c4c5c507#012Found module
libnss_dns.so.2 with build-id:
ef2fd4ef2dc5c4f31c311c8e2f120405c2850e5d#012Found module libnss_files.so.2 with
build-id: 2c0a191e2c931e65d5f1945052e226470aa54a26#012Found module
libjitterentropy.so.3 with build-id:
6cd5111426fb5f10ef2d5fb9109ef901dd6a67f5#012Found module libselinux.so.1 with
build-id: 58d24c02a015417be0c526fa565cfb868164ab7a#012Found module
libcrypto.so.1.1 with build-id:
b61a8d70989fdd00494c15631ad05356193b8234#012Found module libresolv.so.2 with
build-id: 86b7fb29524c820668a22605592a9030e80a2907#012Found module
libkeyutils.so.1 with build-id:
03f844991b5ec4ba1daa95ae19e06faaeb59be31#012Found module libkrb5support.so.0
with build-id: 0dbea5394276f0fd34c8e605ec8f9ae088867f65#012Found module
libcom_err.so.2 with build-id:
2875e21b1e71237a94d63d41390320bbcc0171e6

[Bug 68909] JSP compilation error due to classpath problems

2024-04-22 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68909

--- Comment #8 from Mark Thomas  ---
Arguably the this issue isn't a Tomcat issue. This bug is a result of the
application using the work-around of setting the system property. That in turn
is used due to application and/or library issues loading the correct XML
parser.

The fix to EncodingDetector is the right one to avoid web application class
loader pinning.

It appears from comment #2 that the system property is set programmatically in
the web application. If that is the case then we may have a workaround for your
workaround.

If you add org.apache.jasper.compiler.EncodingDetector to the
classesToInitialize property of the JreMemoryLeakPreventionListener that should
trigger loading of the EncodingDetector before the web application starts and
the system property is set.

Long term, I'd suggest looking at the application and/or the libraries and
trying to fix whatever issues mean you need to set the system property.

Whether the above workaround solves the problem or not, I am leaning to
resolving this as INVALID since it is caused by setting the system property
which isn't appropriate in a web application environment.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68911] Newly introduced ConfigurationSource doesn't respect environment variables

2024-04-22 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68911

Remy Maucherat  changed:

   What|Removed |Added

 Status|REOPENED|RESOLVED
 Resolution|--- |INVALID

--- Comment #9 from Remy Maucherat  ---
ConfigurationSource.DEFAULT is a very bare bones default that is not part of
Catalina. Catalina is the component that uses the CATALINA_BASE env variable
(as the name implies). The ConfigurationSource implementation that implements
this behavior is org.apache.catalina.startup.CatalinaBaseConfigurationSource
which should be properly setup by the Catalina startup. If you are using some
exotic environment, then you need to either setup Catalina properly or
implement a ConfigurationSource that works for your environment.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68919] Make Tomcat return 503 on stopped web applications

2024-04-21 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68919

--- Comment #1 from Christopher Schultz  ---
This can be easily done using the ROOT web application with a custom response
for e.g. /myapp/* which will execute when /myapp/ hasn't deployed properly.

You can even use the status code of your choosing.

Your choice of implementation can include:

- Tomcat rewrite Valve
- plain JSP +  configuration in web.xml
- Custom Java code that you write

I don't think this needs to have further support than is already available, do
you?

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Bug report for Tomcat Native [2024/04/21]

2024-04-21 Thread bugzilla
+---+
| Bugzilla Bug ID   |
| +-+
| | Status: UNC=Unconfirmed NEW=New ASS=Assigned|
| | OPN=ReopenedVER=Verified(Skipped Closed/Resolved)   |
| |   +-+
| |   | Severity: BLK=Blocker CRI=Critical  REG=Regression  MAJ=Major   |
| |   |   MIN=Minor   NOR=NormalENH=Enhancement TRV=Trivial |
| |   |   +-+
| |   |   | Date Posted |
| |   |   |  +--+
| |   |   |  | Description  |
| |   |   |  |  |
|62911|New|Enh|2018-11-15|Add support for proxying ocsp  requests via ProxyH|
|64826|New|Maj|2020-10-19|libtcnative prompts for private key password in so|
|64862|New|Enh|2020-10-30|Improve LibreSSL support  |
|65344|New|Enh|2021-05-31|OpenSSL configuration |
|7|New|Enh|2023-06-23|Take care of OpenSSL deprecated code  |
|67609|New|Nor|2023-10-05|Incomplete OpenSSL error handling/reporting   |
|67683|New|Nor|2023-10-11|C source code is not compatible with OpenSSL 1.0.2|
|68910|New|Enh|2024-04-17|Improve LibreSSL version check in tcnative.m4 |
+-+---+---+--+--+
| Total8 bugs   |
+---+

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Bug report for Tomcat Modules [2024/04/21]

2024-04-21 Thread bugzilla
+---+
| Bugzilla Bug ID   |
| +-+
| | Status: UNC=Unconfirmed NEW=New ASS=Assigned|
| | OPN=ReopenedVER=Verified(Skipped Closed/Resolved)   |
| |   +-+
| |   | Severity: BLK=Blocker CRI=Critical  REG=Regression  MAJ=Major   |
| |   |   MIN=Minor   NOR=NormalENH=Enhancement TRV=Trivial |
| |   |   +-+
| |   |   | Date Posted |
| |   |   |  +--+
| |   |   |  | Description  |
| |   |   |  |  |
|50571|Inf|Nor|2011-01-11|Tomcat 7 JDBC connection pool exception enhancemen|
|51595|Inf|Nor|2011-08-01|org.apache.tomcat.jdbc.pool.jmx.ConnectionPool sho|
|51879|Inf|Enh|2011-09-22|Improve access to Native Connection Methods   |
|52024|Inf|Enh|2011-10-13|Custom interceptor to support automatic failover o|
|53199|Inf|Enh|2012-05-07|Refactor ConnectionPool to use ScheduledExecutorSe|
|54437|New|Enh|2013-01-16|Update PoolProperties javadoc for ConnectState int|
|54929|Inf|Nor|2013-05-05|jdbc-pool cannot be used with Java 1.5, "java.lang|
|55078|New|Nor|2013-06-07|Configuring a DataSource Resource with dataSourceJ|
|55662|New|Enh|2013-10-17|Add a way to set an instance of java.sql.Driver di|
|56046|New|Enh|2014-01-21|org.apache.tomcat.jdbc.pool.XADataSource InitSQL p|
|56088|New|Maj|2014-01-29|AbstractQueryReport$StatementProxy throws exceptio|
|56310|Inf|Maj|2014-03-25|PooledConnection and XAConnection not handled corr|
|56586|New|Nor|2014-06-02|initSQL should be committed if defaultAutoCommit =|
|56775|New|Nor|2014-07-28|PoolCleanerTime schedule issue|
|56779|New|Nor|2014-07-28|Allow multiple connection initialization statement|
|56790|New|Nor|2014-07-29|Resizing pool.maxActive to a higher value at runti|
|56798|New|Nor|2014-07-31|Idle eviction strategy could perform better (and i|
|56804|New|Nor|2014-08-02|Use a default validationQueryTimeout other than "f|
|56805|New|Nor|2014-08-02|datasource.getConnection() may be unnecessarily bl|
|56837|New|Nor|2014-08-11|if validationQuery have error with timeBetweenEvic|
|56970|New|Nor|2014-09-11|MaxActive vs. MaxTotal for commons-dbcp and tomcat|
|57460|New|Nor|2015-01-19|[DB2]Connection broken after few hours but not rem|
|57729|New|Enh|2015-03-20|Add QueryExecutionReportInterceptor to log query e|
|58489|Opn|Maj|2015-10-08|QueryStatsComparator throws IllegalArgumentExcepti|
|59077|New|Nor|2016-02-26|DataSourceFactory creates a neutered data source  |
|59569|New|Nor|2016-05-18|isWrapperFor/unwrap implementations incorrect |
|59879|New|Nor|2016-07-18|StatementCache interceptor returns ResultSet objec|
|60195|New|Nor|2016-10-02|No javadoc in Maven Central   |
|60522|New|Nor|2016-12-27|An option for setting if the transaction should be|
|60524|Inf|Nor|2016-12-28|NPE in SlowQueryReport in tomcat-jdbc-7.0.68  |
|60645|New|Nor|2017-01-25|StatementFinalizer is not thread-safe |
|61032|New|Nor|2017-04-24|min pool size is not being respected  |
|61103|New|Nor|2017-05-18|StatementCache potentially caching non-functional |
|61302|New|Enh|2017-07-15|Refactoring of DataSourceProxy|
|61303|New|Enh|2017-07-15|Refactoring of ConnectionPool |
|62432|New|Nor|2018-06-06|Memory Leak in Statement Finalizer?   |
|62598|New|Enh|2018-08-04|support pool with multiple JDBC data sources  |
|62910|Inf|Nor|2018-11-15|tomcat-jdbc global pool transaction problem   |
|63612|Inf|Cri|2019-07-26|PooledConnection#connectUsingDriver, Thread.curren|
|63705|New|Nor|2019-08-29|The tomcat pool doesn't register all connection th|
|64083|New|Nor|2020-01-17|JDBC pool keeps closed connection as available|
|64107|New|Maj|2020-01-30|PreparedStatements correctly closed are not return|
|64231|New|Nor|2020-03-16|Tomcat jdbc pool behaviour|
|64809|New|Nor|2020-10-13|Connection properties not reset to defaults when C|
|65347|New|Nor|2021-06-02|The equals method from statements generated by the|
|65929|New|Nor|2022-03-03|Connection is not released on Connection.abort() c|
|66502|New|Enh|2023-03-01|tomcat-jdbc ConnectionPool.returnConnection() acce|
|68295|New|Nor|2023-12-05|Connection has already been closed - Tomcat connec|
|68436|New|Nor|2024-01-02|Hide "Not loading a JDBC driver as driverClassName|
+-+---+---+--+--+
| 

Bug report for Tomcat Connectors [2024/04/21]

2024-04-21 Thread bugzilla
+---+
| Bugzilla Bug ID   |
| +-+
| | Status: UNC=Unconfirmed NEW=New ASS=Assigned|
| | OPN=ReopenedVER=Verified(Skipped Closed/Resolved)   |
| |   +-+
| |   | Severity: BLK=Blocker CRI=Critical  REG=Regression  MAJ=Major   |
| |   |   MIN=Minor   NOR=NormalENH=Enhancement TRV=Trivial |
| |   |   +-+
| |   |   | Date Posted |
| |   |   |  +--+
| |   |   |  | Description  |
| |   |   |  |  |
|46767|New|Enh|2009-02-25|mod_jk to send DECLINED in case no fail-over tomca|
|47327|New|Enh|2009-06-07|Return tomcat authenticated user back to mod_jk (A|
|47750|New|Maj|2009-08-27|ISAPI: Loss of worker settings when changing via j|
|48830|New|Nor|2010-03-01|IIS shutdown blocked in endpoint service when serv|
|49822|New|Enh|2010-08-25|Add hash lb worker method |
|49903|New|Enh|2010-09-09|Make workers file reloadable  |
|52483|New|Enh|2012-01-18|Print JkOptions's options in log file and jkstatus|
|54621|New|Enh|2013-02-28|[PATCH] custom mod_jk availability checks |
|56489|New|Enh|2014-05-05|Include a directory for configuration files   |
|56576|New|Enh|2014-05-29|Websocket support |
|57402|New|Enh|2014-12-30|Provide correlation ID between mod_jk log and acce|
|57403|New|Enh|2014-12-30|Persist configuration changes made via status work|
|57407|New|Enh|2014-12-31|Make session_cookie, session_path and session_cook|
|57790|New|Enh|2015-04-03|Check worker names for typos  |
|61476|New|Enh|2017-09-01|Allow reset of an individual worker stat value|
|61621|New|Enh|2017-10-15|Content-Type is forced to lowercase when it goes t|
|62093|New|Enh|2018-02-09|Allow use_server_errors to apply to specific statu|
|63808|Inf|Enh|2019-10-05|the fact that JkMount makes other directives ineff|
|64775|Inf|Nor|2020-09-28|mod_jk is sending both Content-Length and Transfer|
|65488|Inf|Nor|2021-08-08|Destroy method is not being called during Failover|
|68677|New|Enh|2024-02-26|no support for enviroment variables/request attrib|
|68720|New|Nor|2024-03-06|Troubleshooting Tomcat: Addressing Compression Iss|
+-+---+---+--+--+
| Total   22 bugs   |
+---+

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Bug report for Tomcat 9 [2024/04/21]

2024-04-21 Thread bugzilla
+---+
| Bugzilla Bug ID   |
| +-+
| | Status: UNC=Unconfirmed NEW=New ASS=Assigned|
| | OPN=ReopenedVER=Verified(Skipped Closed/Resolved)   |
| |   +-+
| |   | Severity: BLK=Blocker CRI=Critical  REG=Regression  MAJ=Major   |
| |   |   MIN=Minor   NOR=NormalENH=Enhancement TRV=Trivial |
| |   |   +-+
| |   |   | Date Posted |
| |   |   |  +--+
| |   |   |  | Description  |
| |   |   |  |  |
|53602|Ver|Enh|2012-07-25|Support for HTTP status code 451  |
|57505|New|Enh|2015-01-27|Add integration tests for JspC|
|58530|New|Enh|2015-10-23|Proposal for new Manager HTML GUI |
|58548|Inf|Enh|2015-10-26|support certifcate transparency   |
|58859|New|Enh|2016-01-14|Allow to limit charsets / encodings supported by T|
|59750|New|Enh|2016-06-24|Amend "authenticate" method with context by means |
|61971|New|Enh|2018-01-06|documentation for using tomcat with systemd   |
|62048|New|Enh|2018-01-25|Missing logout function in Manager and Host-Manage|
|62072|New|Enh|2018-02-01|Add support for request compression   |
|62405|New|Enh|2018-05-23|Add Rereadable Request Filter |
|62488|New|Enh|2018-06-25|Obtain dependencies from Maven Central where possi|
|62611|Inf|Enh|2018-08-09|Compress log files after rotation |
|62773|New|Enh|2018-09-28|Change DeltaManager to handle session deserializat|
|62814|New|Enh|2018-10-10|Use readable names for cluster channel/map options|
|62843|New|Enh|2018-10-22|Tomcat Russian localization   |
|62964|Inf|Enh|2018-11-29|Add RFC7807 conformant Problem Details for HTTP st|
|63023|New|Enh|2018-12-20|Provide a way to load SecurityProviders into the s|
|63049|New|Enh|2018-12-31|Add support in system properties override from com|
|63237|New|Enh|2019-03-06|Consider processing mbeans-descriptors.xml at comp|
|63389|New|Enh|2019-04-27|Enable Servlet Warmup for Containerization|
|63493|New|Enh|2019-06-10|enhancement - add JMX counters to monitor authenti|
|63505|New|Enh|2019-06-14|enhancement - support of stored procedures for Dat|
|63545|New|Enh|2019-07-06|enhancement - add a new pattern attribute for logg|
|63943|Opn|Enh|2019-11-20|Add possibility to overwrite remote port with info|
|63983|Ver|Cri|2019-12-03|Jasper builds-up open files until garbage collecti|
|64230|New|Enh|2020-03-15|Allow to configure session manager to skip expirin|
|64395|New|Enh|2020-04-30|Windows Installer should offer an option to select|
|65208|New|Enh|2021-03-29|Multi-threaded loading of servlets|
|65302|New|Enh|2021-05-12|Add support for setting com.sun.jndi.ldap.tls.cbty|
|65778|Opn|Enh|2022-01-01|Don't create URL from string  |
|65779|Inf|Enh|2022-01-01|Introduce CATALINA_BASE_DATA  |
|66592|Opn|Enh|2023-05-04|Support for HTTPS proxy in websocket client   |
|66631|New|Enh|2023-06-07|Consider moving module-info.class to META-INF/vers|
|66647|New|Enh|2023-06-14|Analyze usefulness and consider deprecation of cer|
|66654|New|Enh|2023-06-16|Setting displayname while using service.bat to ins|
|67080|Ver|Nor|2023-08-29|ImplicitObjectELResolverImpl.getValue() is slow   |
|68596|New|Enh|2024-02-07|Remaining overhead in javax.el.CompositeELResolver|
|68742|Inf|Nor|2024-03-10|SingleSignOn session invalidation logic fallacy re|
|68876|New|Enh|2024-04-09|serverStartup.pdf missing sources |
|68884|New|Nor|2024-04-11|Delayed HTTP Traffic Processing After Mass Websock|
|68909|New|Nor|2024-04-17|JSP compilation error due to classpath problems   |
|68911|Opn|Nor|2024-04-17|Newly introduced ConfigurationSource doesn't respe|
|68919|New|Enh|2024-04-19|Make Tomcat return 503 on stopped web applications|
+-+---+---+--+--+
| Total   43 bugs   |
+---+

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Bug report for Tomcat 10 [2024/04/21]

2024-04-21 Thread bugzilla
+---+
| Bugzilla Bug ID   |
| +-+
| | Status: UNC=Unconfirmed NEW=New ASS=Assigned|
| | OPN=ReopenedVER=Verified(Skipped Closed/Resolved)   |
| |   +-+
| |   | Severity: BLK=Blocker CRI=Critical  REG=Regression  MAJ=Major   |
| |   |   MIN=Minor   NOR=NormalENH=Enhancement TRV=Trivial |
| |   |   +-+
| |   |   | Date Posted |
| |   |   |  +--+
| |   |   |  | Description  |
| |   |   |  |  |
|64353|New|Enh|2020-04-15|Add support for accessing server certificate from |
|64549|New|Enh|2020-06-23|create a project module to launch Tomcat in OSGi  |
|64550|New|Enh|2020-06-23|create a project module to launch Tomcat in JPMS  |
|65124|New|Enh|2021-02-03|Inefficient generated JSP code|
|65267|New|Enh|2021-04-27|Implement mod_headers like filter |
|65391|New|Enh|2021-06-19|Additional user attributes queried by (some) realm|
|65635|New|Enh|2021-10-15|Methods to return auth errors |
|66125|New|Enh|2022-06-16|JMProxy - enhance security restrictions   |
|66191|New|Enh|2022-08-01|compile taglibs that are not (yet) included in jsp|
|66406|New|Enh|2023-01-02|JULI ClassLoaderLogManager creates multiple logger|
|66613|Ver|Enh|2023-05-23|Developing wiki page: Unclear reference to "servic|
|66616|Ver|Nor|2023-05-26|French: Misleading HTTP 401 error description ("La|
|68480|New|Enh|2024-01-15|Add cipher alias for TLSv1.3  |
|68901|New|Enh|2024-04-16|Coyote is hardcoded to drop connections on 400|408|
+-+---+---+--+--+
| Total   14 bugs   |
+---+

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Bug report for Taglibs [2024/04/21]

2024-04-21 Thread bugzilla
+---+
| Bugzilla Bug ID   |
| +-+
| | Status: UNC=Unconfirmed NEW=New ASS=Assigned|
| | OPN=ReopenedVER=Verified(Skipped Closed/Resolved)   |
| |   +-+
| |   | Severity: BLK=Blocker CRI=Critical  REG=Regression  MAJ=Major   |
| |   |   MIN=Minor   NOR=NormalENH=Enhancement TRV=Trivial |
| |   |   +-+
| |   |   | Date Posted |
| |   |   |  +--+
| |   |   |  | Description  |
| |   |   |  |  |
|38193|Ass|Enh|2006-01-09|[RDC] BuiltIn Grammar support for Field   |
|38600|Ass|Enh|2006-02-10|[RDC] Enable RDCs to be used in X+V markup (X+RDC)|
|42413|New|Enh|2007-05-14|[PATCH] Log Taglib enhancements   |
|46052|New|Nor|2008-10-21|SetLocaleSupport is slow to initialize when many l|
|48333|New|Enh|2009-12-02|TLD generator |
|57548|New|Min|2015-02-08|Auto-generate the value for org.apache.taglibs.sta|
|57684|New|Min|2015-03-10|Version info should be taken from project version |
|59359|New|Enh|2016-04-20|(Task) Extend validity period for signing KEY - be|
|59668|New|Nor|2016-06-06|x:forEach retains the incorrect scope when used in|
|61875|New|Nor|2017-12-08|Investigate whether Xalan can be removed  |
|64649|New|Nor|2020-08-06|XSLT transformation - document('') doesn't return |
|65491|New|Nor|2021-08-09|Behavior differences with c:import when flushing o|
+-+---+---+--+--+
| Total   12 bugs   |
+---+

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Bug report for Tomcat 8 [2024/04/21]

2024-04-21 Thread bugzilla
+---+
| Bugzilla Bug ID   |
| +-+
| | Status: UNC=Unconfirmed NEW=New ASS=Assigned|
| | OPN=ReopenedVER=Verified(Skipped Closed/Resolved)   |
| |   +-+
| |   | Severity: BLK=Blocker CRI=Critical  REG=Regression  MAJ=Major   |
| |   |   MIN=Minor   NOR=NormalENH=Enhancement TRV=Trivial |
| |   |   +-+
| |   |   | Date Posted |
| |   |   |  +--+
| |   |   |  | Description  |
| |   |   |  |  |
|55243|New|Enh|2013-07-11|Add special search string for nested roles|
|55470|New|Enh|2013-08-23|Help users for ClassNotFoundExceptions during star|
|55675|New|Enh|2013-10-18|Checking and handling invalid configuration option|
|55788|New|Enh|2013-11-16|TagPlugins should key on tag QName rather than imp|
|56148|New|Enh|2014-02-17|support (multiple) ocsp stapling  |
|56300|New|Enh|2014-03-22|[Tribes] No useful examples, lack of documentation|
|56438|New|Enh|2014-04-21|If jar scan does not find context config or TLD co|
|56546|New|Enh|2014-05-19|Improve thread trace logging in WebappClassLoader.|
|56713|New|Enh|2014-07-12|Limit time that incoming request waits while webap|
|57129|Opn|Enh|2014-10-22|Regression. Load WEB-INF/lib jarfiles in alphabeti|
|57367|New|Enh|2014-12-18|If JAR scan experiences a stack overflow, give the|
|57421|New|Enh|2015-01-07|Farming default directories   |
|57486|New|Enh|2015-01-23|Improve reuse of ProtectedFunctionMapper instances|
|57701|New|Enh|2015-03-13|Implement "[Redeploy]" button for a web applicatio|
|57827|New|Enh|2015-04-17|Enable adding/removing of members via jmx in a sta|
|57830|New|Enh|2015-04-18|Add support for ProxyProtocol |
|57872|New|Enh|2015-04-29|Do not auto-switch session cookie to version=1 due|
|58052|Opn|Enh|2015-06-19|RewriteValve: Implement additional RewriteRule dir|
|58935|Opn|Enh|2016-01-29|Re-deploy from war without deleting context   |
|60849|New|Enh|2017-03-13|Tomcat NIO Connector not able to handle SSL renego|
|61877|New|Enh|2017-12-08|use web.xml from CATALINA_HOME by default |
|62214|New|Enh|2018-03-22|The "userSubtree=true" and "roleSubtree=true" in J|
|63080|New|Enh|2019-01-16|Support rfc7239 Forwarded header  |
|63167|New|Enh|2019-02-12|Network Requirements To Resolve No Members Active |
|63195|Inf|Enh|2019-02-21|Add easy way to test RemoteIpValve works properly |
|65809|New|Enh|2022-01-19|Reduce memory footprint for long-lasting WebSocket|
+-+---+---+--+--+
| Total   26 bugs   |
+---+

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68911] Newly introduced ConfigurationSource doesn't respect environment variables

2024-04-19 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68911

--- Comment #8 from 7elem...@mail.bg ---
(In reply to Rainer Jung from comment #7)
> Your reproduction suggestion sounds easy, but it misses a lot of important
> precision. Since separating out CATALINA_BASE is a working recipe for many
> of us, could you please answer:
> 
> - which OS is this on? Linux? Windows?

Both Linux and Windows

> 
> - what exact Tomcat version do you use?

I try to seamlessly upgrade from 8.5 to 9/10

> 
> - how do you exactly set CATALINA_BASE?

export CATALINA_BASE=/home/user/.tomcat (conf/server.xml, conf/web.xml,
conf/context.xml, conf/localhost.jks, lib)
set CATALINA_BASE=C:\Users\user\tomcat (conf\server.xml, conf/web.xml,
conf/context.xml, conf/localhost.jks, lib)
>From server.xml you can set work, webapps, lib folders if it finds proper one
at startup

> 
> - is your new conf folder underneath the set value for CATALINA_BASE, so
> something like $CATALINA_BASE/conf?

Yes

> 
> - which other directories and files do you have underneath CATALINA_BASE$
>   - For example webapps and work?

Nothing else. From server.xml you can set work, webapps

> 
> - do you also set CATALINA_HOME to the original product directory?

Yes, but they point to the same place

> 
> - how do you exactly start Tomcat?
>   For instance using the standartup.(sh|bat) script Tomcat provides?

Yes. the standartup.(sh|bat) script Tomcat provides
> 
> - in case you do not start it as a service: in which directory is your shell
> process when you execute the start commands?

Any folder. User on the system can start it's own process and point to his
configuration folder by using CATALINA_BASE. For example

On linux:
/var/lib/tomcat for binaries
/home/user/.tomcat/conf for server.xml, certificates, global web.xml, global
context.xml
/home/user/.tomcat/workspace for webapps, work, etc. I can point to those via
server.xml using appBase and workDir

On Windows: C:\Program Files\tomcat for binaries
C:\Users\user\tomcat\conf for server.xml, certificates, global web.xml, global
context.xml
C:\Users\user\workspace for webapps, work. I can point to those via server.xml
using appBase and workDir

> 
> Thanks and regard,
> 
> Rainer

Thank you very much for the patience

Best regards

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68919] Make Tomcat return 503 on stopped web applications

2024-04-19 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68919

Michael Osipov  changed:

   What|Removed |Added

 CC||micha...@apache.org

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68919] New: Make Tomcat return 503 on stopped web applications

2024-04-19 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68919

Bug ID: 68919
   Summary: Make Tomcat return 503 on stopped web applications
   Product: Tomcat 9
   Version: 9.0.x
  Hardware: All
OS: All
Status: NEW
  Severity: enhancement
  Priority: P2
 Component: Catalina
  Assignee: dev@tomcat.apache.org
  Reporter: micha...@apache.org
  Target Milestone: -

This somewhat reverts or picks up Bug 51117.

When a webapp is deliberately stopped or failed to start Tomcat should respond
with 503 since the resource is known, but Tomcat isn't able to serve it. For
me, it is clearly a difference from 404.

On occasions I have to stop applications because upstream services aren't
available and my downstream clients shall rather see 503 in their logs. I think
it is in conformance with
https://www.rfc-editor.org/rfc/rfc9110.html#name-503-service-unavailable.

At least the behavior should be configurable whether the admin prefers 404 or
503 on a per app basis? Maybe something in context.xml or per Host?

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68911] Newly introduced ConfigurationSource doesn't respect environment variables

2024-04-19 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68911

--- Comment #7 from Rainer Jung  ---
Your reproduction suggestion sounds easy, but it misses a lot of important
precision. Since separating out CATALINA_BASE is a working recipe for many of
us, could you please answer:

- which OS is this on? Linux? Windows?

- what exact Tomcat version do you use?

- how do you exactly set CATALINA_BASE?

- is your new conf folder underneath the set value for CATALINA_BASE, so
something like $CATALINA_BASE/conf?

- which other directories and files do you have underneath CATALINA_BASE$
  - For example webapps and work?

- do you also set CATALINA_HOME to the original product directory?

- how do you exactly start Tomcat?
  For instance using the standartup.(sh|bat) script Tomcat provides?

- in case you do not start it as a service: in which directory is your shell
process when you execute the start commands?

Thanks and regard,

Rainer

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68911] Newly introduced ConfigurationSource doesn't respect environment variables

2024-04-19 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68911

7elem...@mail.bg changed:

   What|Removed |Added

 Status|RESOLVED|REOPENED
 Resolution|INVALID |---

--- Comment #6 from 7elem...@mail.bg ---
I think I can't explain it good, but I'll try
Install tomcat 8, remove conf folder, set CATALINA_BASE outside of tomcat 8
folder with valid (even default configuration). Start tomcat. Check the result.
Do the same with tomcat 9 and you'll understand what I mean.
In this case "If you want to override the default, then call (static)
ConfigFileLoader.setSource with whatever you want", I don't want to call
anything. just to move configuration in different location and set
CATALINA_BASE with no coding whatsoever.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68910] Improve LibreSSL version check in tcnative.m4

2024-04-18 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68910

--- Comment #5 from Michael Osipov  ---
Created attachment 39673
  --> https://bz.apache.org/bugzilla/attachment.cgi?id=39673=edit
Failed tests

(In reply to Christopher Schultz from comment #4)
> Thanks for doing this work; it IS promising.
> 
> Can you share the details of the failures?

Find failed tests attached.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68909] JSP compilation error due to classpath problems

2024-04-18 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68909

--- Comment #7 from Chris  ---
Hi,

we have a central utility method to create our own instances of
"com.ctc.wstx.stax.WstxInputFactory" that is not the issue.

But we use libraries, that in the depth just call
"XMLInputFactory.newFactory()". They kept having problems in the context of sub
ClassLoaders, not considering the service definition within the woodstox*.jar
(/META-INF/services/javax.xml.stream.XMLInputFactory) and than failing with
some missing features of the JDKs default implementation.

And no, we do not require Tomcat to work with
com.ctc.wstx.stax.WstxInputFactory. This was just a side effect that did not
matter until now. Tomcat works with WstxInputFactory and with the sun default
implementation.

Chris

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68909] JSP compilation error due to classpath problems

2024-04-18 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68909

--- Comment #6 from Christopher Schultz  ---
Is it possible for you to use your custom XMLInputFactory directly instead of
calling getInstance(), or do you need Tomcat's JSP compiler to use your custom
XMLInputFactory?

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68910] Improve LibreSSL version check in tcnative.m4

2024-04-18 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68910

--- Comment #4 from Christopher Schultz  ---
Thanks for doing this work; it IS promising.

Can you share the details of the failures?

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68911] Newly introduced ConfigurationSource doesn't respect environment variables

2024-04-18 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68911

Christopher Schultz  changed:

   What|Removed |Added

 Resolution|--- |INVALID
 Status|NEW |RESOLVED

--- Comment #5 from Christopher Schultz  ---
(In reply to 7element from comment #4)
> "The only time "user.dir" is used is if the code initializing Tomcat doesn't
> give it any specific information about where to load the configuration files
> from."
> How do you give specific information about where to load the configuration
> files from initially?

The only place ConfigurationSource.DEFAULT is used is in (static)
ConfigFileLoader.getSource. If you want to override the default, then call
(static) ConfigFileLoader.setSource with whatever you want.

See o.a.catalina.Catalina.parseServerXml for an example of how to set it to
something like what you are expecting.

> I didn't find a way to do that on initial start except having 2 server.xml
> files, one in user.dir and one in my separate location for configuration,
> because CATALINA_BASE environment variable is not respected as in tomcat 8

If you are using Tomcat embedded, then you need to tell Tomcat where to find
your configuration files.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68911] Newly introduced ConfigurationSource doesn't respect environment variables

2024-04-18 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68911

--- Comment #4 from 7elem...@mail.bg ---
"The only time "user.dir" is used is if the code initializing Tomcat doesn't
give it any specific information about where to load the configuration files
from."
How do you give specific information about where to load the configuration
files from initially?
I didn't find a way to do that on initial start except having 2 server.xml
files, one in user.dir and one in my separate location for configuration,
because CATALINA_BASE environment variable is not respected as in tomcat 8

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68911] Newly introduced ConfigurationSource doesn't respect environment variables

2024-04-18 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68911

7elem...@mail.bg changed:

   What|Removed |Added

 Status|NEEDINFO|NEW

--- Comment #3 from 7elem...@mail.bg ---
If you want to separate the binaries of tomcat from it's configuration folder,
then user.dir complicates the matter immensely as initial read of server.xml
where you can configure listener to register a source depends on DEFAULT
ConfigurationSource.
Maybe ConfigurationSource is 5 years old, but behavior changed with tomcat 9.
It was not used as default for tomcat 8

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68910] Improve LibreSSL version check in tcnative.m4

2024-04-18 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68910

--- Comment #3 from Michael Osipov  ---
(In reply to Christopher Schultz from comment #1)
> (In reply to Michael Osipov from comment #0)
> > since we also do support LibreSSL [...]
> 
> Note: Support for LibreSSL is more of an aspiration and less of a
> requirement. We don't technically advertise support for LibreSSL, but I
> would like to be able to support it.

FYI. Just ran 10.1.x with LibreSSL 3.5.2:
   [concat] TEST-org.apache.catalina.valves.rewrite.TestResolverSSL.NIO.txt
   [concat] TEST-org.apache.catalina.valves.rewrite.TestResolverSSL.NIO2.txt
   [concat] TEST-org.apache.tomcat.util.net.TestClientCert.NIO.txt
   [concat] TEST-org.apache.tomcat.util.net.TestClientCert.NIO2.txt
   [concat] TEST-org.apache.tomcat.util.net.TestCustomSslTrustManager.NIO.txt
   [concat] TEST-org.apache.tomcat.util.net.TestCustomSslTrustManager.NIO2.txt
   [concat] TEST-org.apache.tomcat.util.net.openssl.TestOpenSSLConf.NIO.txt
   [concat] TEST-org.apache.tomcat.util.net.openssl.TestOpenSSLConf.NIO2.txt

The rest is passing. These are failing for renegotiation or protocol mismatch.
That looks very promising.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68909] JSP compilation error due to classpath problems

2024-04-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68909

--- Comment #5 from Chris  ---
You are absolutely right. Setting a SystemProperty within a web application is
not a desired approach.

The circumstances of our web application are rather homogeneous: it is always
installed as the one and only web application in Tomcat 9.0.* using Java 8 as a
requirement.

We are relying on some parsing features of woodstox and always instantiate
their factory in our own code. But we call some libraries that themselves use
"XMLInputFactory.newFactory()". We had issues in some class loader
constellations that these libraries did not find the
"/META-INF/services/javax.xml.stream.XMLInputFactory" of woodstox in the
classpath and hence loaded the java sun default Implementation.

We saw the SystemProperty as the only way to "enforce" the usage of woodstox
throughout our entire web application.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68911] Newly introduced ConfigurationSource doesn't respect environment variables

2024-04-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68911

--- Comment #2 from Remy Maucherat  ---
I will review next week. It is very convoluted so it's possible something is
missing.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68911] Newly introduced ConfigurationSource doesn't respect environment variables

2024-04-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68911

Christopher Schultz  changed:

   What|Removed |Added

 OS||All
 Status|NEW |NEEDINFO

--- Comment #1 from Christopher Schultz  ---
ConfigurationSource is 5 years old.

TOMCAT_HOME has never been an environment variable used by Tomcat.

The system property "user.dir" is essentially the same as the CWD of the
process when it was started. It's not the same as the user's home directory.

The only time "user.dir" is used is if the code initializing Tomcat doesn't
give it any specific information about where to load the configuration files
from.

Do you have a situation where Tomcat is actually doing something
incorrect/unexpected or is this a complaint filed after reading the source
code?

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68911] New: Newly introduced ConfigurationSource doesn't respect environment variables

2024-04-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68911

Bug ID: 68911
   Summary: Newly introduced ConfigurationSource doesn't respect
environment variables
   Product: Tomcat 9
   Version: 9.0.x
  Hardware: PC
Status: NEW
  Severity: normal
  Priority: P2
 Component: Catalina
  Assignee: dev@tomcat.apache.org
  Reporter: 7elem...@mail.bg
  Target Milestone: -

Newly introduced ConfigurationSource doesn't respect environment variables used
for so long to point to tomcat configuration and resources like CATALINA_BASE
and TOMCAT_HOME.
It switches to statically used system property user.dir. If user.dir is empty
ConfigurationSource uses OS provided current dir which is dynamic. Plus
user.dir can be used for other purposes by the system and to change it
IMHO ConfigurationSource should use old environment variables.
First as a backward compatibility
Second as a more static way to set configuration
Third docker images use environment variables instead of system properties to
the processes and moving away of a good practice that was followed for so long

Also note that this applies to tomcat 10.x as well

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68909] JSP compilation error due to classpath problems

2024-04-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68909

--- Comment #4 from Konstantin Kolinko  ---
(In reply to Chris from comment #2)
> 
> System.setProperty(javax.xml.stream.XMLInputFactory.class.getName(),
> WstxInputFactory.class.getName());
> 

The above line of code affects the whole JVM, not just your web application,
breaking Tomcat and any other web applications that may be deployed in
parallel.

A web application by design is not allowed to change System properties.


There are proper ways to reconfigure your environment, if you are really
re-configuring your environment. (The conf/catalina.properties file and placing
the shared classes into the lib/ directory, or any other directory specified
via the "common.loader" property).

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68910] Improve LibreSSL version check in tcnative.m4

2024-04-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68910

--- Comment #2 from Michael Osipov  ---
(In reply to Christopher Schultz from comment #1)
> (In reply to Michael Osipov from comment #0)
> > since we also do support LibreSSL [...]
> 
> Note: Support for LibreSSL is more of an aspiration and less of a
> requirement. We don't technically advertise support for LibreSSL, but I
> would like to be able to support it.


Right, let me rephrase: best effort. Still at least here we can present a
better message and may a warning that LibreSSL is best effort.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68909] JSP compilation error due to classpath problems

2024-04-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68909

--- Comment #3 from Christopher Schultz  ---
:(

Sorry about that. We'll re-evaluate our solution to the opposite problem, which
is ClassLoader-pinning when the webapp's ClassLoader is used to obtain the
XMLInputFactory.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68910] Improve LibreSSL version check in tcnative.m4

2024-04-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68910

--- Comment #1 from Christopher Schultz  ---
(In reply to Michael Osipov from comment #0)
> since we also do support LibreSSL [...]

Note: Support for LibreSSL is more of an aspiration and less of a requirement.
We don't technically advertise support for LibreSSL, but I would like to be
able to support it.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68876] serverStartup.pdf missing sources

2024-04-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68876

--- Comment #2 from Mark Thomas  ---
I've converted the original mdl file to six SCG files and added those to the
main branch. I've also fixed the "warpper" typo.

They still need quite a bit of clean up including:
- cleaning up the layout so elements don't overlap
- reviewing the diagrams for alignment with current code (given these were
written for Tomcat 5.0.x)
- remove the PDF and use the SVG files in its place (or regenerate the PDF from
the SVG files)

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68876] serverStartup.pdf missing sources

2024-04-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68876

Mark Thomas  changed:

   What|Removed |Added

   Severity|normal  |enhancement

--- Comment #1 from Mark Thomas  ---
It was created using Rational Rose. It looks like the original mdl file is in
svn:
https://svn.apache.org/viewvc/tomcat/archive/tc5.0.x/trunk/container/webapps/docs/architecture/requestProcess/roseModel.mdl?view=log

The request process diagrams were updated as part of BZ 57282.

I'd be happy to see that converted to png like the request process diagrams.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68910] Improve LibreSSL version check in tcnative.m4

2024-04-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68910

Michael Osipov  changed:

   What|Removed |Added

 CC||micha...@apache.org

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68910] New: Improve LibreSSL version check in tcnative.m4

2024-04-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68910

Bug ID: 68910
   Summary: Improve LibreSSL version check in tcnative.m4
   Product: Tomcat Native
   Version: 2.0.7
  Hardware: All
OS: All
Status: NEW
  Severity: enhancement
  Priority: P2
 Component: Library
  Assignee: dev@tomcat.apache.org
  Reporter: micha...@apache.org
  Target Milestone: ---

Note: Applies to 1.3.x as well and is a followup to
29f0cc900310b1982b462b16fc308cbfeade79d4.

since we also do support LibreSSL I see a few problems here:

> AC_MSG_CHECKING(OpenSSL library version >= 3.0.0)

Does not reflect the minimum LibreSSL version (3.5.2)

Guarantees:
* from 2.2.2 LIBRESSL_VERSION_NUMBER is bumped with each release:
https://github.com/libressl/portable/blob/64e0f7c5d644e55e0bbbf985335e42c4f59e615d/ChangeLog#L2761-L2762
* from 2.3.2 LIBRESSL_VERSION_NUMBER matches the output format of
OPENSSL_VERSION_NUMBER:
https://github.com/libressl/portable/blob/64e0f7c5d644e55e0bbbf985335e42c4f59e615d/ChangeLog#L2589-L2591

So I believe
https://github.com/apache/tomcat-native/blob/d1cc229db7416b59f7d6ba2d7bcb8188b5ebffc6/native/build/tcnative.m4#L228-L239
can/should be rewritten to properly print the actual reqiured version number
instead of hardcoded 3.0.0. If you run LibreSSL 3.4.x the error output would be
confusing.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68908] Tomcat feints death, there is no ClientPoller thread in the stack information

2024-04-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68908

--- Comment #2 from Mark Thomas  ---
*** Bug 68878 has been marked as a duplicate of this bug. ***

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68878] Tomcat feints death, there is no ClientPoller thread in the stack information

2024-04-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68878

Mark Thomas  changed:

   What|Removed |Added

 Resolution|--- |DUPLICATE
 Status|NEW |RESOLVED

--- Comment #1 from Mark Thomas  ---


*** This bug has been marked as a duplicate of bug 68908 ***

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 64839] HTTP2: Exception in thread "http-nio-x.y.z-1090-ClientPoller" java.lang.NullPointerException

2024-04-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64839

Mark Thomas  changed:

   What|Removed |Added

 CC||huangzeling8...@dingtalk.co
   ||m

--- Comment #18 from Mark Thomas  ---
*** Bug 68908 has been marked as a duplicate of this bug. ***

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68908] Tomcat feints death, there is no ClientPoller thread in the stack information

2024-04-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68908

Mark Thomas  changed:

   What|Removed |Added

 Status|NEW |RESOLVED
 OS||All
 Resolution|--- |DUPLICATE

--- Comment #1 from Mark Thomas  ---


*** This bug has been marked as a duplicate of bug 64839 ***

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68909] JSP compilation error due to classpath problems

2024-04-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68909

--- Comment #2 from Chris  ---
Yeah, it comes down to these changes:

https://github.com/apache/tomcat/commit/a2167e13c19115aecd220cd3be19d43d36126f3b
https://github.com/apache/tomcat/commit/3b8f277a7ffc1193ed6c6d4fff85db6dc7327e39

We set a fixed "javax.xml.stream.XMLInputFactory"

System.setProperty(javax.xml.stream.XMLInputFactory.class.getName(),
WstxInputFactory.class.getName());

Before the change, the ContextClassLoader of our WebApplication was used to
load the class.

Now the ContextClassLoader is forced to the
EncodingDetector.class.getClassLoader().

Was this anticipated?

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68909] JSP compilation error due to classpath problems

2024-04-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68909

Chris  changed:

   What|Removed |Added

 OS||All

--- Comment #1 from Chris  ---
I located the problem further:

The WebApplication uses "woodstox-core-6.6.0.jar" which has a

/META-INF/services/javax.xml.stream.XMLInputFactory

pointing to

com.ctc.wstx.stax.WstxInputFactory


The Tomcat now seems to recognize this class but after the change in 9.0.88 is
of cause not able to load this instance, since its in the parent (catalina)
classloader.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68909] New: JSP compilation error due to classpath problems

2024-04-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68909

Bug ID: 68909
   Summary: JSP compilation error due to classpath problems
   Product: Tomcat 9
   Version: 9.0.88
  Hardware: PC
Status: NEW
  Severity: normal
  Priority: P2
 Component: Jasper
  Assignee: dev@tomcat.apache.org
  Reporter: c...@stl.gmbh
  Target Milestone: -

Hi,

we upgraded to tomcat-9.0.88 last night and our application is broken. We
reverted to tomcat-9.0.87 and everything works fine.

We use Ubuntu 22 LTS and Temurin OpenJDK jdk8u402.

Looking at the stack trace, I think this changelog is relevant:

https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.88_(remm)

Prevent the web application's ClassLoader from being pinned by the JSP compiler
if an application uses a custom XMLInputFactory. Based upon a suggestion from
Simon Niederberger. (schultz)

We apply a custom XMLInputFactory and I think it is a classloader related
problem.

---
Here are the Stack Traces:

2024-04-17 06:24:27.904 ERROR 4q001b G5U001
ecadia.ecadia.GUIController.ActionServlet Unexpected Exception
javax.servlet.ServletException: javax.xml.stream.FactoryConfigurationError:
Provider com.ctc.wstx.stax.WstxInputFactory not found
at org.apache.jasper.servlet.JspServlet.service(JspServlet.java:332)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:623)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:200)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:144)
at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:51)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:169)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:144)
at
org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:641)
at
org.apache.catalina.core.ApplicationDispatcher.processRequest(ApplicationDispatcher.java:415)
at
org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:347)
at
org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:284)
at GUIController.ActionServlet.httpResponse(ActionServlet.java:1186)
at GUIController.ActionServlet.doPost(ActionServlet.java:786)
at GUIController.ActionServlet.doGet(ActionServlet.java:265)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:529)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:623)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:200)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:144)
at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:51)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:169)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:144)
at ecadia.servlet.filters.RedirectFilter.doFilter(RedirectFilter.java:104)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:169)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:144)
at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:168)
at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:90)
at
org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:481)
at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:130)
at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:93)
at
org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:670)
at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:74)
at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:346)
at org.apache.coyote.ajp.AjpProcessor.service(AjpProcessor.java:424)
at
org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:63)
at
org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:928)
at
org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1786)
at
org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:52)
at
org.apache.tomcat.util.threads.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1191)
at
org.apache.tomcat.util.threads.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:659)
at
org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:63)
at java.lang.Thread.run(Thread.java:750)
Caused by: javax.xml.stream.FactoryConfigurationError: Provider

[Bug 68908] New: Tomcat feints death, there is no ClientPoller thread in the stack information

2024-04-16 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68908

Bug ID: 68908
   Summary: Tomcat feints death, there is no ClientPoller thread
in the stack information
   Product: Tomcat 9
   Version: 9.0.39
  Hardware: PC
Status: NEW
  Severity: normal
  Priority: P2
 Component: WebSocket
  Assignee: dev@tomcat.apache.org
  Reporter: huangzeling8...@dingtalk.com
  Target Milestone: -

springboot Tomcat 9.0.39  feints death, there is no ClientPoller thread in the
stack information,The error is as follows
[http-nio-18080-exec-146] o.s.web.servlet.HandlerExecutionChain:
HandlerInterceptor.afterCompletion threw exception
java.lang.NullPointerException: null
org.springframework.boot.actuate.metrics.web.servlet.LongTaskTimingHandlerInterceptor.stopLongTaskTimers(LongTaskTimingHandlerInterceptor.java:123)
~[spring-boot-actuator-2.3.5.RELEASE.jar!/:2.3.5.RELEASE]
org.springframework.boot.actuate.metrics.web.servlet.LongTaskTimingHandlerInterceptor.afterCompletion(LongTaskTimingHandlerInterceptor.java:79)
~[spring-boot-actuator-2.3.5.RELEASE.jar!/:2.3.5.RELEASE]
Upon checking the stack information, it was found that the thread of
ClientPoller in Tomcat was missing. Tomcat experienced a fake death situation
without any access log. I suspect it may be related to websocket, as a
websocket client disconnected and experienced the following situation

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68901] Coyote is hardcoded to drop connections on 400|408|411|414|500|503|501 which should be configurable for application level errors to prevent expensive TLS handshake/resumption on reconnect

2024-04-16 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68901

Michael Osipov  changed:

   What|Removed |Added

 CC||micha...@apache.org

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68901] Coyote is hardcoded to drop connections on 400|408|411|414|500|503|501 which should be configurable for application level errors to prevent expensive TLS handshake/resumption on reconnect

2024-04-16 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68901

--- Comment #1 from Michael Osipov  ---
I'd like to see this backed by the current RFC if it is a requirement or just
the way Tomcat handles it. Also maybe it might be worth to raise the same issue
with HTTPd as well.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68901] Coyote is hardcoded to drop connections on 400|408|411|414|500|503|501 which should be configurable for application level errors to prevent expensive TLS handshake/resumption on reconnect

2024-04-16 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68901

Tiago do Couto  changed:

   What|Removed |Added

 CC||ti...@docouto.dev

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68901] New: Coyote is hardcoded to drop connections on 400|408|411|414|500|503|501 which should be configurable for application level errors to prevent expensive TLS handshake/resumption on recon

2024-04-16 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68901

Bug ID: 68901
   Summary: Coyote is hardcoded to drop connections on
400|408|411|414|500|503|501 which should be
configurable for application level errors to prevent
expensive TLS handshake/resumption on reconnect
   Product: Tomcat 10
   Version: unspecified
  Hardware: All
OS: Linux
Status: NEW
  Severity: enhancement
  Priority: P2
 Component: Connectors
  Assignee: dev@tomcat.apache.org
  Reporter: alessandro.vermeu...@ing.com
  Target Milestone: --

Overview:

Currently Coyote is hardcoded to drop connections when a request generates a
response with one of the following status codes:  400|408|411|414|500|503|501.
This behaviour has been around for at least 15 years and has been copied from
Apache HTTPd[1]. It makes sense in case the server itself is the origin of the
error responses.

However, in our case we have plenty of scenarios we have applications returning
generic 500 responses on generic errors, causing connections to drop and
subsequent reconnects. Status codes 503 and 501 also seem to cases which should
be handled just fine without needing to reset the connection.

We terminate TLS in the application where even session resumption is expensive
and a full TLS handshake is even more expensive. 

Together with Tomcat dropping the connections on 500 errors this leads to
cascade failures where spurious load-related errors cause a spike in CPU usage
which can trigger further errors, further consuming CPU until most CPU is used
to handle TLS connections instead of actual value.

We suggest to make the the behaviour to drop connections is configurable.
Either to completely disable it, or to make the status codes configurable.

[1]:
https://github.com/apache/tomcat/blame/bc900e0100de9879604b93af4722c272ab3d1a24/java/org/apache/coyote/http11/Http11Processor.java#L604-L617
```
/**
 * Determine if we must drop the connection because of the HTTP status
code. Use the same list of codes as
 * Apache/httpd.
 */
private static boolean statusDropsConnection(int status) {
return status == 400 /* SC_BAD_REQUEST */ || status == 408 /*
SC_REQUEST_TIMEOUT */ ||
status == 411 /* SC_LENGTH_REQUIRED */ || status == 413 /*
SC_REQUEST_ENTITY_TOO_LARGE */ ||
status == 414 /* SC_REQUEST_URI_TOO_LONG */ || status == 500 /*
SC_INTERNAL_SERVER_ERROR */ ||
status == 503 /* SC_SERVICE_UNAVAILABLE */ || status == 501 /*
SC_NOT_IMPLEMENTED */;
}
```

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68890] Several JSPs in the manage application have contradicting encoding

2024-04-15 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68890

--- Comment #4 from Christopher Schultz  ---
(In reply to Mark Thomas from comment #3)
> The JSP prologue and pageEncoding MUST agree for JSP documents in XML syntax.

s/pageEncoding/contentType/?

pageEncoding specifies the encoding of the source document (.jsp file) but the
response. But maybe they also have to agree?

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68890] Several JSPs in the manage application have contradicting encoding

2024-04-15 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68890

--- Comment #3 from Mark Thomas  ---
For the record, Chris is correct.

The JSP prologue and pageEncoding MUST agree for JSP documents in XML syntax.

For JSP pages that are not in XML syntax, the prologue is just template text
that will be passed through to the output.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68884] Delayed HTTP Traffic Processing After Mass Websocket Disconnect/Reconnect

2024-04-15 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68884

--- Comment #5 from Christopher Schultz  ---
I'm ignorant of the threading details of Websocket, so maybe this is a stupid
question: Could a single thread be used to perform these kinds of cleanups,
instead of an army of threads? That would let a single thread trigger many
session-shutdowns and only yield once for each of them.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68890] Several JSPs in the manage application have contradicting encoding

2024-04-15 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68890

Christopher Schultz  changed:

   What|Removed |Added

 Resolution|--- |FIXED
 Status|NEW |RESOLVED

--- Comment #2 from Christopher Schultz  ---
I've fixed the encoding declaration in 11402a58acfde441d947332c4a6f110a24658efd
in main and back-ported to the other versions.

I'm not going to remove any of the XML stuff at this point, since the page also
declares that is it XHTML. I'm not sure that .jsp versus .jspx has anything to
do with it, as any file processed by the JSP engine can produce output of any
kind, only identified by its Content-Type.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68890] Several JSPs in the manage application have contradicting encoding

2024-04-15 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68890

--- Comment #1 from Michael Osipov  ---
As far as I understand they should not contain an XML prolog at all since they
aren't JSPX

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Bug report for Tomcat Modules [2024/04/14]

2024-04-14 Thread bugzilla
+---+
| Bugzilla Bug ID   |
| +-+
| | Status: UNC=Unconfirmed NEW=New ASS=Assigned|
| | OPN=ReopenedVER=Verified(Skipped Closed/Resolved)   |
| |   +-+
| |   | Severity: BLK=Blocker CRI=Critical  REG=Regression  MAJ=Major   |
| |   |   MIN=Minor   NOR=NormalENH=Enhancement TRV=Trivial |
| |   |   +-+
| |   |   | Date Posted |
| |   |   |  +--+
| |   |   |  | Description  |
| |   |   |  |  |
|50571|Inf|Nor|2011-01-11|Tomcat 7 JDBC connection pool exception enhancemen|
|51595|Inf|Nor|2011-08-01|org.apache.tomcat.jdbc.pool.jmx.ConnectionPool sho|
|51879|Inf|Enh|2011-09-22|Improve access to Native Connection Methods   |
|52024|Inf|Enh|2011-10-13|Custom interceptor to support automatic failover o|
|53199|Inf|Enh|2012-05-07|Refactor ConnectionPool to use ScheduledExecutorSe|
|54437|New|Enh|2013-01-16|Update PoolProperties javadoc for ConnectState int|
|54929|Inf|Nor|2013-05-05|jdbc-pool cannot be used with Java 1.5, "java.lang|
|55078|New|Nor|2013-06-07|Configuring a DataSource Resource with dataSourceJ|
|55662|New|Enh|2013-10-17|Add a way to set an instance of java.sql.Driver di|
|56046|New|Enh|2014-01-21|org.apache.tomcat.jdbc.pool.XADataSource InitSQL p|
|56088|New|Maj|2014-01-29|AbstractQueryReport$StatementProxy throws exceptio|
|56310|Inf|Maj|2014-03-25|PooledConnection and XAConnection not handled corr|
|56586|New|Nor|2014-06-02|initSQL should be committed if defaultAutoCommit =|
|56775|New|Nor|2014-07-28|PoolCleanerTime schedule issue|
|56779|New|Nor|2014-07-28|Allow multiple connection initialization statement|
|56790|New|Nor|2014-07-29|Resizing pool.maxActive to a higher value at runti|
|56798|New|Nor|2014-07-31|Idle eviction strategy could perform better (and i|
|56804|New|Nor|2014-08-02|Use a default validationQueryTimeout other than "f|
|56805|New|Nor|2014-08-02|datasource.getConnection() may be unnecessarily bl|
|56837|New|Nor|2014-08-11|if validationQuery have error with timeBetweenEvic|
|56970|New|Nor|2014-09-11|MaxActive vs. MaxTotal for commons-dbcp and tomcat|
|57460|New|Nor|2015-01-19|[DB2]Connection broken after few hours but not rem|
|57729|New|Enh|2015-03-20|Add QueryExecutionReportInterceptor to log query e|
|58489|Opn|Maj|2015-10-08|QueryStatsComparator throws IllegalArgumentExcepti|
|59077|New|Nor|2016-02-26|DataSourceFactory creates a neutered data source  |
|59569|New|Nor|2016-05-18|isWrapperFor/unwrap implementations incorrect |
|59879|New|Nor|2016-07-18|StatementCache interceptor returns ResultSet objec|
|60195|New|Nor|2016-10-02|No javadoc in Maven Central   |
|60522|New|Nor|2016-12-27|An option for setting if the transaction should be|
|60524|Inf|Nor|2016-12-28|NPE in SlowQueryReport in tomcat-jdbc-7.0.68  |
|60645|New|Nor|2017-01-25|StatementFinalizer is not thread-safe |
|61032|New|Nor|2017-04-24|min pool size is not being respected  |
|61103|New|Nor|2017-05-18|StatementCache potentially caching non-functional |
|61302|New|Enh|2017-07-15|Refactoring of DataSourceProxy|
|61303|New|Enh|2017-07-15|Refactoring of ConnectionPool |
|62432|New|Nor|2018-06-06|Memory Leak in Statement Finalizer?   |
|62598|New|Enh|2018-08-04|support pool with multiple JDBC data sources  |
|62910|Inf|Nor|2018-11-15|tomcat-jdbc global pool transaction problem   |
|63612|Inf|Cri|2019-07-26|PooledConnection#connectUsingDriver, Thread.curren|
|63705|New|Nor|2019-08-29|The tomcat pool doesn't register all connection th|
|64083|New|Nor|2020-01-17|JDBC pool keeps closed connection as available|
|64107|New|Maj|2020-01-30|PreparedStatements correctly closed are not return|
|64231|New|Nor|2020-03-16|Tomcat jdbc pool behaviour|
|64809|New|Nor|2020-10-13|Connection properties not reset to defaults when C|
|65347|New|Nor|2021-06-02|The equals method from statements generated by the|
|65929|New|Nor|2022-03-03|Connection is not released on Connection.abort() c|
|66502|New|Enh|2023-03-01|tomcat-jdbc ConnectionPool.returnConnection() acce|
|68295|New|Nor|2023-12-05|Connection has already been closed - Tomcat connec|
|68436|New|Nor|2024-01-02|Hide "Not loading a JDBC driver as driverClassName|
+-+---+---+--+--+
| 

Bug report for Tomcat Native [2024/04/14]

2024-04-14 Thread bugzilla
+---+
| Bugzilla Bug ID   |
| +-+
| | Status: UNC=Unconfirmed NEW=New ASS=Assigned|
| | OPN=ReopenedVER=Verified(Skipped Closed/Resolved)   |
| |   +-+
| |   | Severity: BLK=Blocker CRI=Critical  REG=Regression  MAJ=Major   |
| |   |   MIN=Minor   NOR=NormalENH=Enhancement TRV=Trivial |
| |   |   +-+
| |   |   | Date Posted |
| |   |   |  +--+
| |   |   |  | Description  |
| |   |   |  |  |
|62911|New|Enh|2018-11-15|Add support for proxying ocsp  requests via ProxyH|
|64826|New|Maj|2020-10-19|libtcnative prompts for private key password in so|
|64862|New|Enh|2020-10-30|Improve LibreSSL support  |
|65344|New|Enh|2021-05-31|OpenSSL configuration |
|7|New|Enh|2023-06-23|Take care of OpenSSL deprecated code  |
|67609|New|Nor|2023-10-05|Incomplete OpenSSL error handling/reporting   |
|67683|New|Nor|2023-10-11|C source code is not compatible with OpenSSL 1.0.2|
+-+---+---+--+--+
| Total7 bugs   |
+---+

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Bug report for Taglibs [2024/04/14]

2024-04-14 Thread bugzilla
+---+
| Bugzilla Bug ID   |
| +-+
| | Status: UNC=Unconfirmed NEW=New ASS=Assigned|
| | OPN=ReopenedVER=Verified(Skipped Closed/Resolved)   |
| |   +-+
| |   | Severity: BLK=Blocker CRI=Critical  REG=Regression  MAJ=Major   |
| |   |   MIN=Minor   NOR=NormalENH=Enhancement TRV=Trivial |
| |   |   +-+
| |   |   | Date Posted |
| |   |   |  +--+
| |   |   |  | Description  |
| |   |   |  |  |
|38193|Ass|Enh|2006-01-09|[RDC] BuiltIn Grammar support for Field   |
|38600|Ass|Enh|2006-02-10|[RDC] Enable RDCs to be used in X+V markup (X+RDC)|
|42413|New|Enh|2007-05-14|[PATCH] Log Taglib enhancements   |
|46052|New|Nor|2008-10-21|SetLocaleSupport is slow to initialize when many l|
|48333|New|Enh|2009-12-02|TLD generator |
|57548|New|Min|2015-02-08|Auto-generate the value for org.apache.taglibs.sta|
|57684|New|Min|2015-03-10|Version info should be taken from project version |
|59359|New|Enh|2016-04-20|(Task) Extend validity period for signing KEY - be|
|59668|New|Nor|2016-06-06|x:forEach retains the incorrect scope when used in|
|61875|New|Nor|2017-12-08|Investigate whether Xalan can be removed  |
|64649|New|Nor|2020-08-06|XSLT transformation - document('') doesn't return |
|65491|New|Nor|2021-08-09|Behavior differences with c:import when flushing o|
+-+---+---+--+--+
| Total   12 bugs   |
+---+

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Bug report for Tomcat 9 [2024/04/14]

2024-04-14 Thread bugzilla
+---+
| Bugzilla Bug ID   |
| +-+
| | Status: UNC=Unconfirmed NEW=New ASS=Assigned|
| | OPN=ReopenedVER=Verified(Skipped Closed/Resolved)   |
| |   +-+
| |   | Severity: BLK=Blocker CRI=Critical  REG=Regression  MAJ=Major   |
| |   |   MIN=Minor   NOR=NormalENH=Enhancement TRV=Trivial |
| |   |   +-+
| |   |   | Date Posted |
| |   |   |  +--+
| |   |   |  | Description  |
| |   |   |  |  |
|53602|Ver|Enh|2012-07-25|Support for HTTP status code 451  |
|57505|New|Enh|2015-01-27|Add integration tests for JspC|
|58530|New|Enh|2015-10-23|Proposal for new Manager HTML GUI |
|58548|Inf|Enh|2015-10-26|support certifcate transparency   |
|58859|New|Enh|2016-01-14|Allow to limit charsets / encodings supported by T|
|59750|New|Enh|2016-06-24|Amend "authenticate" method with context by means |
|61971|New|Enh|2018-01-06|documentation for using tomcat with systemd   |
|62048|New|Enh|2018-01-25|Missing logout function in Manager and Host-Manage|
|62072|New|Enh|2018-02-01|Add support for request compression   |
|62405|New|Enh|2018-05-23|Add Rereadable Request Filter |
|62488|New|Enh|2018-06-25|Obtain dependencies from Maven Central where possi|
|62611|Inf|Enh|2018-08-09|Compress log files after rotation |
|62773|New|Enh|2018-09-28|Change DeltaManager to handle session deserializat|
|62814|New|Enh|2018-10-10|Use readable names for cluster channel/map options|
|62843|New|Enh|2018-10-22|Tomcat Russian localization   |
|62964|Inf|Enh|2018-11-29|Add RFC7807 conformant Problem Details for HTTP st|
|63023|New|Enh|2018-12-20|Provide a way to load SecurityProviders into the s|
|63049|New|Enh|2018-12-31|Add support in system properties override from com|
|63237|New|Enh|2019-03-06|Consider processing mbeans-descriptors.xml at comp|
|63389|New|Enh|2019-04-27|Enable Servlet Warmup for Containerization|
|63493|New|Enh|2019-06-10|enhancement - add JMX counters to monitor authenti|
|63505|New|Enh|2019-06-14|enhancement - support of stored procedures for Dat|
|63545|New|Enh|2019-07-06|enhancement - add a new pattern attribute for logg|
|63943|Opn|Enh|2019-11-20|Add possibility to overwrite remote port with info|
|63983|Ver|Cri|2019-12-03|Jasper builds-up open files until garbage collecti|
|64230|New|Enh|2020-03-15|Allow to configure session manager to skip expirin|
|64395|New|Enh|2020-04-30|Windows Installer should offer an option to select|
|65208|New|Enh|2021-03-29|Multi-threaded loading of servlets|
|65302|New|Enh|2021-05-12|Add support for setting com.sun.jndi.ldap.tls.cbty|
|65778|Opn|Enh|2022-01-01|Don't create URL from string  |
|65779|Inf|Enh|2022-01-01|Introduce CATALINA_BASE_DATA  |
|66592|Opn|Enh|2023-05-04|Support for HTTPS proxy in websocket client   |
|66631|New|Enh|2023-06-07|Consider moving module-info.class to META-INF/vers|
|66647|New|Enh|2023-06-14|Analyze usefulness and consider deprecation of cer|
|66654|New|Enh|2023-06-16|Setting displayname while using service.bat to ins|
|67080|Ver|Nor|2023-08-29|ImplicitObjectELResolverImpl.getValue() is slow   |
|68596|New|Enh|2024-02-07|Remaining overhead in javax.el.CompositeELResolver|
|68742|Inf|Nor|2024-03-10|SingleSignOn session invalidation logic fallacy re|
|68876|New|Nor|2024-04-09|serverStartup.pdf missing sources |
|68878|New|Nor|2024-04-10|Tomcat feints death, there is no ClientPoller thre|
|68884|New|Nor|2024-04-11|Delayed HTTP Traffic Processing After Mass Websock|
+-+---+---+--+--+
| Total   41 bugs   |
+---+

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Bug report for Tomcat 10 [2024/04/14]

2024-04-14 Thread bugzilla
+---+
| Bugzilla Bug ID   |
| +-+
| | Status: UNC=Unconfirmed NEW=New ASS=Assigned|
| | OPN=ReopenedVER=Verified(Skipped Closed/Resolved)   |
| |   +-+
| |   | Severity: BLK=Blocker CRI=Critical  REG=Regression  MAJ=Major   |
| |   |   MIN=Minor   NOR=NormalENH=Enhancement TRV=Trivial |
| |   |   +-+
| |   |   | Date Posted |
| |   |   |  +--+
| |   |   |  | Description  |
| |   |   |  |  |
|64353|New|Enh|2020-04-15|Add support for accessing server certificate from |
|64549|New|Enh|2020-06-23|create a project module to launch Tomcat in OSGi  |
|64550|New|Enh|2020-06-23|create a project module to launch Tomcat in JPMS  |
|65124|New|Enh|2021-02-03|Inefficient generated JSP code|
|65267|New|Enh|2021-04-27|Implement mod_headers like filter |
|65391|New|Enh|2021-06-19|Additional user attributes queried by (some) realm|
|65635|New|Enh|2021-10-15|Methods to return auth errors |
|66125|New|Enh|2022-06-16|JMProxy - enhance security restrictions   |
|66191|New|Enh|2022-08-01|compile taglibs that are not (yet) included in jsp|
|66406|New|Enh|2023-01-02|JULI ClassLoaderLogManager creates multiple logger|
|66613|Ver|Enh|2023-05-23|Developing wiki page: Unclear reference to "servic|
|66616|Ver|Nor|2023-05-26|French: Misleading HTTP 401 error description ("La|
|68480|New|Enh|2024-01-15|Add cipher alias for TLSv1.3  |
+-+---+---+--+--+
| Total   13 bugs   |
+---+

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Bug report for Tomcat 8 [2024/04/14]

2024-04-14 Thread bugzilla
+---+
| Bugzilla Bug ID   |
| +-+
| | Status: UNC=Unconfirmed NEW=New ASS=Assigned|
| | OPN=ReopenedVER=Verified(Skipped Closed/Resolved)   |
| |   +-+
| |   | Severity: BLK=Blocker CRI=Critical  REG=Regression  MAJ=Major   |
| |   |   MIN=Minor   NOR=NormalENH=Enhancement TRV=Trivial |
| |   |   +-+
| |   |   | Date Posted |
| |   |   |  +--+
| |   |   |  | Description  |
| |   |   |  |  |
|55243|New|Enh|2013-07-11|Add special search string for nested roles|
|55470|New|Enh|2013-08-23|Help users for ClassNotFoundExceptions during star|
|55675|New|Enh|2013-10-18|Checking and handling invalid configuration option|
|55788|New|Enh|2013-11-16|TagPlugins should key on tag QName rather than imp|
|56148|New|Enh|2014-02-17|support (multiple) ocsp stapling  |
|56300|New|Enh|2014-03-22|[Tribes] No useful examples, lack of documentation|
|56438|New|Enh|2014-04-21|If jar scan does not find context config or TLD co|
|56546|New|Enh|2014-05-19|Improve thread trace logging in WebappClassLoader.|
|56713|New|Enh|2014-07-12|Limit time that incoming request waits while webap|
|57129|Opn|Enh|2014-10-22|Regression. Load WEB-INF/lib jarfiles in alphabeti|
|57367|New|Enh|2014-12-18|If JAR scan experiences a stack overflow, give the|
|57421|New|Enh|2015-01-07|Farming default directories   |
|57486|New|Enh|2015-01-23|Improve reuse of ProtectedFunctionMapper instances|
|57701|New|Enh|2015-03-13|Implement "[Redeploy]" button for a web applicatio|
|57827|New|Enh|2015-04-17|Enable adding/removing of members via jmx in a sta|
|57830|New|Enh|2015-04-18|Add support for ProxyProtocol |
|57872|New|Enh|2015-04-29|Do not auto-switch session cookie to version=1 due|
|58052|Opn|Enh|2015-06-19|RewriteValve: Implement additional RewriteRule dir|
|58935|Opn|Enh|2016-01-29|Re-deploy from war without deleting context   |
|60849|New|Enh|2017-03-13|Tomcat NIO Connector not able to handle SSL renego|
|61877|New|Enh|2017-12-08|use web.xml from CATALINA_HOME by default |
|62214|New|Enh|2018-03-22|The "userSubtree=true" and "roleSubtree=true" in J|
|63080|New|Enh|2019-01-16|Support rfc7239 Forwarded header  |
|63167|New|Enh|2019-02-12|Network Requirements To Resolve No Members Active |
|63195|Inf|Enh|2019-02-21|Add easy way to test RemoteIpValve works properly |
|65809|New|Enh|2022-01-19|Reduce memory footprint for long-lasting WebSocket|
+-+---+---+--+--+
| Total   26 bugs   |
+---+

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Bug report for Tomcat Connectors [2024/04/14]

2024-04-14 Thread bugzilla
+---+
| Bugzilla Bug ID   |
| +-+
| | Status: UNC=Unconfirmed NEW=New ASS=Assigned|
| | OPN=ReopenedVER=Verified(Skipped Closed/Resolved)   |
| |   +-+
| |   | Severity: BLK=Blocker CRI=Critical  REG=Regression  MAJ=Major   |
| |   |   MIN=Minor   NOR=NormalENH=Enhancement TRV=Trivial |
| |   |   +-+
| |   |   | Date Posted |
| |   |   |  +--+
| |   |   |  | Description  |
| |   |   |  |  |
|46767|New|Enh|2009-02-25|mod_jk to send DECLINED in case no fail-over tomca|
|47327|New|Enh|2009-06-07|Return tomcat authenticated user back to mod_jk (A|
|47750|New|Maj|2009-08-27|ISAPI: Loss of worker settings when changing via j|
|48830|New|Nor|2010-03-01|IIS shutdown blocked in endpoint service when serv|
|49822|New|Enh|2010-08-25|Add hash lb worker method |
|49903|New|Enh|2010-09-09|Make workers file reloadable  |
|52483|New|Enh|2012-01-18|Print JkOptions's options in log file and jkstatus|
|54621|New|Enh|2013-02-28|[PATCH] custom mod_jk availability checks |
|56489|New|Enh|2014-05-05|Include a directory for configuration files   |
|56576|New|Enh|2014-05-29|Websocket support |
|57402|New|Enh|2014-12-30|Provide correlation ID between mod_jk log and acce|
|57403|New|Enh|2014-12-30|Persist configuration changes made via status work|
|57407|New|Enh|2014-12-31|Make session_cookie, session_path and session_cook|
|57790|New|Enh|2015-04-03|Check worker names for typos  |
|61476|New|Enh|2017-09-01|Allow reset of an individual worker stat value|
|61621|New|Enh|2017-10-15|Content-Type is forced to lowercase when it goes t|
|62093|New|Enh|2018-02-09|Allow use_server_errors to apply to specific statu|
|63808|Inf|Enh|2019-10-05|the fact that JkMount makes other directives ineff|
|64775|Inf|Nor|2020-09-28|mod_jk is sending both Content-Length and Transfer|
|65488|Inf|Nor|2021-08-08|Destroy method is not being called during Failover|
|68677|New|Enh|2024-02-26|no support for enviroment variables/request attrib|
|68720|New|Nor|2024-03-06|Troubleshooting Tomcat: Addressing Compression Iss|
|68895|New|Nor|2024-04-14|webdeveloper  |
+-+---+---+--+--+
| Total   23 bugs   |
+---+

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68895] webdeveloper

2024-04-13 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68895

wdevexp...@gmail.com  changed:

   What|Removed |Added

   Keywords||APIBug, FAQ, FixedInTrunk
 OS||All
URL||https://webdevexpert.online

--- Comment #1 from wdevexp...@gmail.com  ---
Webdevexpert an Egyptian web developer, web marketing, and web design company
https://webdevexpert.online
[ web developer](https://webdevexpert.online)

https://webdevexpert.online;>web developer expert

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68895] New: webdeveloper

2024-04-13 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68895

Bug ID: 68895
   Summary: webdeveloper
   Product: Tomcat Connectors
   Version: unspecified
  Hardware: PC
Status: NEW
  Severity: normal
  Priority: P2
 Component: Common
  Assignee: dev@tomcat.apache.org
  Reporter: wdevexp...@gmail.com
  Target Milestone: ---

Webdevexpert an Egyptian web developer, web marketing, and web design company
CALL 00201285510858
https://webdevexpert.online
[ web developer](https://webdevexpert.online)

https://webdevexpert.online;>web developer expert

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68884] Delayed HTTP Traffic Processing After Mass Websocket Disconnect/Reconnect

2024-04-12 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68884

--- Comment #4 from Matt M  ---
Thank you for the feedback and completely agree that there are other factors
involved in creating the conditions for this issue to occur.

The intent behind the proposal is to make those scenarios more recoverable when
they do occur and to solicit feedback on if there may be a better way to
accomplish this.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68884] Delayed HTTP Traffic Processing After Mass Websocket Disconnect/Reconnect

2024-04-12 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68884

Matt M  changed:

   What|Removed |Added

  Attachment #39658|0   |1
is obsolete||

--- Comment #3 from Matt M  ---
Created attachment 39664
  --> https://bz.apache.org/bugzilla/attachment.cgi?id=39664=edit
Proposed patch

Updated format
Diff vs 9.0.86

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68884] Delayed HTTP Traffic Processing After Mass Websocket Disconnect/Reconnect

2024-04-12 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68884

--- Comment #2 from Mark Thomas  ---
Patches should be in diff -u form.

The Tomcat team avoids using system properties for configuration unless
absolutely necessary (it isn't necessary here).

Given that this requires a network interruption or stop the world GC of > 35
seconds, I'd argue that if you are dealing with network drop-outs or GC pauses
of that length you have much bigger problems than this issue. Not that we won't
try and fix this issue but it may affect how we address it.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68889] README.md refers to superseded Tomcat 10.0 version

2024-04-12 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68889

Remy Maucherat  changed:

   What|Removed |Added

 Status|NEW |RESOLVED
 Resolution|--- |FIXED

--- Comment #1 from Remy Maucherat  ---
Ok. There were quite a few issues with the readme, most importantly talking
about the old EE. Woops.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68890] New: Several JSPs in the manage application have contradicting encoding

2024-04-12 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68890

Bug ID: 68890
   Summary: Several JSPs in the manage application have
contradicting encoding
   Product: Tomcat 11
   Version: 11.0.0-M18
  Hardware: All
OS: All
Status: NEW
  Severity: normal
  Priority: P2
 Component: Manager
  Assignee: dev@tomcat.apache.org
  Reporter: micha...@apache.org
  Target Milestone: ---

This also applies to other versions of Tomcat.
List the JSP files:
osipovmi@deblndw011x:~/var/Projekte/tomcat (main *=)
$ find webapps/manager -name \*.jsp
webapps/manager/WEB-INF/jsp/401.jsp
webapps/manager/WEB-INF/jsp/403.jsp
webapps/manager/WEB-INF/jsp/404.jsp
webapps/manager/WEB-INF/jsp/sessionDetail.jsp
webapps/manager/WEB-INF/jsp/sessionsList.jsp
webapps/manager/WEB-INF/jsp/connectorCerts.jsp
webapps/manager/WEB-INF/jsp/connectorCiphers.jsp
webapps/manager/WEB-INF/jsp/connectorTrustedCerts.jsp
webapps/manager/index.jsp

and open them. Many have the XML prolog set "", but set the output encoding to
 <%@page session="false" contentType="text/html; charset=ISO-8859-1" %>
 

This is weird and it should be consistently one encoding, the prolog and those
JSP/HTML tags.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68890] Several JSPs in the manage application have contradicting encoding

2024-04-12 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68890

Michael Osipov  changed:

   What|Removed |Added

 CC||micha...@apache.org

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68889] README.md refers to superseded Tomcat 10.0 version

2024-04-12 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68889

Michael Osipov  changed:

   What|Removed |Added

 CC||micha...@apache.org

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68889] New: README.md refers to superseded Tomcat 10.0 version

2024-04-12 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68889

Bug ID: 68889
   Summary: README.md refers to superseded Tomcat 10.0 version
   Product: Tomcat 10
   Version: 10.1.20
  Hardware: All
OS: All
Status: NEW
  Severity: normal
  Priority: P2
 Component: Documentation
  Assignee: dev@tomcat.apache.org
  Reporter: micha...@apache.org
  Target Milestone: --

In main
https://github.com/apache/tomcat/blob/fa1cc930c5627c30581a1dbd81be05014a47cdd2/README.md?plain=1#L47
refers only to 10.1, but in the others:
*
https://github.com/apache/tomcat/blob/86b7beeb8eb52ef8854fe4dacaf639279075e0ed/README.md?plain=1#L46
*
https://github.com/apache/tomcat/blob/a41afc8e804835e5c20b37d48e4a339e398fdc1c/README.md?plain=1#L46
*
https://github.com/apache/tomcat/blob/3ca0410760b992ffdbf684f53397190ed0e23bbe/README.md?plain=1#L46

Still refer to an superseded version. I belive that this block should be
consistent throughout versions.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68884] Delayed HTTP Traffic Processing After Mass Websocket Disconnect/Reconnect

2024-04-12 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68884

Michael Osipov  changed:

   What|Removed |Added

  Attachment #39658|1   |0
   is patch||

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68884] Delayed HTTP Traffic Processing After Mass Websocket Disconnect/Reconnect

2024-04-11 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68884

Oded Brilon  changed:

   What|Removed |Added

 CC||oded.bri...@servicenow.com

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



  1   2   3   4   5   6   7   8   9   10   >