[Bug 56363] OpenSSL security advisory - Heartbleed bug

2014-04-09 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=56363 r.schilpero...@greenvalley.nl changed: What|Removed |Added CC|

[Bug 56363] OpenSSL security advisory - Heartbleed bug

2014-04-09 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=56363 --- Comment #1 from Mladen Turk mt...@apache.org --- Working on it. -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail:

[Bug 55915] Add ECDHE support to tcnative-1.dll

2014-04-09 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=55915 --- Comment #3 from Mladen Turk mt...@apache.org --- New versions will be configured at build time using perl Configure enable-ecdh enable-ec enable-ecdsa ... -- You are receiving this mail because: You are the assignee for the bug.

svn commit: r1585898 - in /tomcat/native/branches/1.1.x: native/src/sslcontext.c xdocs/miscellaneous/changelog.xml

2014-04-09 Thread mturk
Author: mturk Date: Wed Apr 9 07:32:29 2014 New Revision: 1585898 URL: http://svn.apache.org/r1585898 Log: Apply Ognjen's patch for bz55915 Modified: tomcat/native/branches/1.1.x/native/src/sslcontext.c tomcat/native/branches/1.1.x/xdocs/miscellaneous/changelog.xml Modified:

Re: CVE-2014-0160

2014-04-09 Thread Mladen Turk
On 04/09/2014 01:43 AM, Andrew Carr wrote: http://www.openssl.org/news/secadv_20140407.txt Hi Tomcat Devs, I have been on the dev list for a few years, and a tomcat developer longer than that. While I haven't contributed yet, I was curious if this cve needs a contribution. As far as I can

[Bug 55915] Add ECDHE support to tcnative-1.dll

2014-04-09 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=55915 Mladen Turk mt...@apache.org changed: What|Removed |Added Status|NEW |RESOLVED

Re: Tagging JK 1.2.40

2014-04-09 Thread Tim Whittington
On 8/04/2014, at 11:56 pm, Konstantin Kolinko knst.koli...@gmail.com wrote: 2014-04-08 11:56 GMT+04:00 Mladen Turk mt...@apache.org: Hi, I plan to tag JK 1.2.40 pretty soon (probably end of this week) We have few bugs in the latest release which requires a new version. +1 There is

Re: [Bug 55915] Add ECDHE support to tcnative-1.dll

2014-04-09 Thread Tim Whittington
Does this need a SSL_CTX_set_options(c-ctx, SSL_OP_SINGLE_ECDH_USE) as well? The API docs are pretty sparse, but it looks like mod_ssl does this (as well as nginx etc.) The description in ssl.h is “If set, always create a new key when using tmp_ecdh parameters” Reading the docs for the

svn commit: r1585903 - /tomcat/native/branches/1.1.x/native/srclib/VERSIONS

2014-04-09 Thread mturk
Author: mturk Date: Wed Apr 9 08:31:42 2014 New Revision: 1585903 URL: http://svn.apache.org/r1585903 Log: Update OpenSSL version Modified: tomcat/native/branches/1.1.x/native/srclib/VERSIONS Modified: tomcat/native/branches/1.1.x/native/srclib/VERSIONS URL:

svn commit: r1585923 - in /tomcat/native/branches/1.1.x/native: include/ssl_private.h src/sslcontext.c

2014-04-09 Thread mturk
Author: mturk Date: Wed Apr 9 09:52:40 2014 New Revision: 1585923 URL: http://svn.apache.org/r1585923 Log: As per Tom's suggestion. Set SSL_OP_SINGLE_ECDH_USE to context Modified: tomcat/native/branches/1.1.x/native/include/ssl_private.h

Re: [Bug 55915] Add ECDHE support to tcnative-1.dll

2014-04-09 Thread Mladen Turk
On 04/09/2014 10:27 AM, Tim Whittington wrote: Does this need a SSL_CTX_set_options(c-ctx, SSL_OP_SINGLE_ECDH_USE) as well? Seems it does. Just committed a code found in mod_ssl. Regards -- ^TM - To unsubscribe, e-mail:

Re: JDK 9 build 06 is available on java.net

2014-04-09 Thread Rory O'Donnell Oracle, Dublin ireland
Hi Mark, I suggest you send an email to core-libs-...@openjdk.java.net or log a bug. Rgds, Rory On 04/ 8/14 12:49 PM, Mark Thomas wrote: On 08/04/2014 02:25, Rory O'Donnell Oracle, Dublin Ireland wrote: Hi Mladen, JDK 9 Build 06 Early Access Build is now available for download

Re: JDK 9 build 06 is available on java.net

2014-04-09 Thread Mark Thomas
On 09/04/2014 04:36, Rory O'Donnell Oracle, Dublin ireland wrote: Hi Mark, I suggest you send an email to core-libs-...@openjdk.java.net or log a bug. I've already filed the bug against Java. As far as I recall I never received any response - not unusual in my experience of reporting bugs

[Bug 56372] New: Which API is referenced in comment above public Iterator getFeatureDescriptors in javax.el.ResourceBundleELResolver

2014-04-09 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=56372 Bug ID: 56372 Summary: Which API is referenced in comment above public Iterator getFeatureDescriptors in javax.el.ResourceBundleELResolver Product: Tomcat 7

Re: JDK 9 build 06 is available on java.net

2014-04-09 Thread Rory O'Donnell Oracle, Dublin ireland
Hi Mark, If you log a bug, send me the incident number, I will follow it up. Rgds, Rory On 04/ 9/14 12:00 PM, Mark Thomas wrote: On 09/04/2014 04:36, Rory O'Donnell Oracle, Dublin ireland wrote: Hi Mark, I suggest you send an email to core-libs-...@openjdk.java.net or log a bug. I've

Re: JDK 9 build 06 is available on java.net

2014-04-09 Thread Rory O'Donnell Oracle, Dublin ireland
Thanks Henri! On 04/ 8/14 01:22 PM, Henri Gomez wrote: OpenJDK 8 and 9 have also their continuous build via Obuildfactory (https://github.com/hgomez/obuildfactory) and hosted in Bintray for many Linux flavor ie : * http://dl.bintray.com/hgomez/obuildfactory-fedora18-x86-64/ *

[Bug 56373] New: CompilerOptions.VERSION_1_8 only makes sense when running java8

2014-04-09 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=56373 Bug ID: 56373 Summary: CompilerOptions.VERSION_1_8 only makes sense when running java8 Product: Tomcat 7 Version: trunk Hardware: PC OS: Linux

[Bug 56374] New: Page in wrong language - getting lowest rank Accept-Language in request header

2014-04-09 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=56374 Bug ID: 56374 Summary: Page in wrong language - getting lowest rank Accept-Language in request header Product: Tomcat 7 Version: unspecified Hardware: Macintosh

[Bug 56374] Page in wrong language - getting lowest rank Accept-Language in request header

2014-04-09 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=56374 --- Comment #1 from Steve Root st...@rkbb.co.uk --- Created attachment 31493 -- https://issues.apache.org/bugzilla/attachment.cgi?id=31493action=edit screenshot showing header request and result page -- You are receiving this mail

[Bug 56374] Page in wrong language - getting lowest rank Accept-Language in request header

2014-04-09 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=56374 Steve Root st...@rkbb.co.uk changed: What|Removed |Added Attachment #31493|screenshot showing header |EN_getEN screenshot

[Bug 56374] Page in wrong language - getting lowest rank Accept-Language in request header

2014-04-09 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=56374 --- Comment #2 from Steve Root st...@rkbb.co.uk --- Created attachment 31494 -- https://issues.apache.org/bugzilla/attachment.cgi?id=31494action=edit EN-ES_getES screenshot showing header request and result page -- You are receiving

[Bug 56374] Page in wrong language - getting lowest rank Accept-Language in request header

2014-04-09 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=56374 --- Comment #3 from Steve Root st...@rkbb.co.uk --- Created attachment 31495 -- https://issues.apache.org/bugzilla/attachment.cgi?id=31495action=edit EN-ES-FR_getES screenshot showing header request and result page -- You are receiving

[Bug 56374] Page in wrong language - getting lowest rank Accept-Language in request header

2014-04-09 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=56374 --- Comment #4 from Steve Root st...@rkbb.co.uk --- Created attachment 31496 -- https://issues.apache.org/bugzilla/attachment.cgi?id=31496action=edit EN-FR_getFR screenshot showing header request and result page -- You are receiving

[Bug 56374] Page in wrong language - getting lowest rank Accept-Language in request header

2014-04-09 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=56374 --- Comment #5 from Steve Root st...@rkbb.co.uk --- Created attachment 31497 -- https://issues.apache.org/bugzilla/attachment.cgi?id=31497action=edit EN-FR-ES_getES screenshot showing header request and result page -- You are receiving

[Bug 56374] Page in wrong language - getting lower rank Accept-Language in request header

2014-04-09 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=56374 Steve Root st...@rkbb.co.uk changed: What|Removed |Added Summary|Page in wrong language -|Page in wrong

Re: JDK 9 build 06 is available on java.net

2014-04-09 Thread Mark Thomas
On 09/04/2014 05:14, Rory O'Donnell Oracle, Dublin ireland wrote: Hi Mark, If you log a bug, send me the incident number, I will follow it up. I'll see if I can find the incident number for the bug I already reported but I think I deleted the e-mail after 6 or so months of no response. If I

[Bug 56373] CompilerOptions.VERSION_1_8 only makes sense when running java8

2014-04-09 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=56373 Mark Thomas ma...@apache.org changed: What|Removed |Added Status|NEW |RESOLVED

Re: svn commit: r1585898 - in /tomcat/native/branches/1.1.x: native/src/sslcontext.c xdocs/miscellaneous/changelog.xml

2014-04-09 Thread Konstantin Kolinko
2014-04-09 11:32 GMT+04:00 mt...@apache.org: Author: mturk Date: Wed Apr 9 07:32:29 2014 New Revision: 1585898 URL: http://svn.apache.org/r1585898 Log: Apply Ognjen's patch for bz55915 Modified: tomcat/native/branches/1.1.x/native/src/sslcontext.c

[Bug 56374] Page in wrong language - getting lower rank Accept-Language in request header

2014-04-09 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=56374 --- Comment #6 from Konstantin Kolinko knst.koli...@gmail.com --- A fresh install of Tomcat7 on Debian. Last time when I was looking, a fresh Tomcat on Debian was actually X years old, where X was ~2 or 3. 1. What exactly x.y.z version

[jira] [Commented] (MTOMCAT-266) The fork attribute crashes Tomcat on startup

2014-04-09 Thread *$^¨%`£
[ https://issues.apache.org/jira/browse/MTOMCAT-266?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13964081#comment-13964081 ] Olivier Lamy (*$^¨%`£) commented on MTOMCAT-266: Are you using maven 3.1+

Re: JDK 9 build 06 is available on java.net

2014-04-09 Thread Mark Thomas
On 09/04/2014 05:59, Mark Thomas wrote: On 09/04/2014 05:14, Rory O'Donnell Oracle, Dublin ireland wrote: Hi Mark, If you log a bug, send me the incident number, I will follow it up. I'll see if I can find the incident number for the bug I already reported but I think I deleted the e-mail

[Bug 56372] Which API is referenced in comment above public Iterator getFeatureDescriptors in javax.el.ResourceBundleELResolver

2014-04-09 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=56372 Mark Thomas ma...@apache.org changed: What|Removed |Added Status|NEW |RESOLVED

[Bug 56374] Page in wrong language - getting lower rank Accept-Language in request header

2014-04-09 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=56374 --- Comment #7 from Steve Root st...@rkbb.co.uk --- Good question; On Debian 7 (wheezy) I used: # apt-get install tomcat7 tomcat7-admin and I got Apache Tomcat/7.0.28 I'll go create a new server and try it on 7.0.53 and report back. Thanks

Re: svn commit: r1585898 - in /tomcat/native/branches/1.1.x: native/src/sslcontext.c xdocs/miscellaneous/changelog.xml

2014-04-09 Thread Mladen Turk
On 04/09/2014 02:03 PM, Konstantin Kolinko wrote: 2014-04-09 11:32 GMT+04:00 mt...@apache.org: Author: mturk Date: Wed Apr 9 07:32:29 2014 New Revision: 1585898 URL: http://svn.apache.org/r1585898 Log: Apply Ognjen's patch for bz55915 Modified:

svn commit: r1585957 - /tomcat/native/branches/1.1.x/native/src/sslcontext.c

2014-04-09 Thread mturk
Author: mturk Date: Wed Apr 9 12:54:25 2014 New Revision: 1585957 URL: http://svn.apache.org/r1585957 Log: Ensure we have the needed ECDH with the OpenSSL used Modified: tomcat/native/branches/1.1.x/native/src/sslcontext.c Modified: tomcat/native/branches/1.1.x/native/src/sslcontext.c URL:

svn commit: r1585960 - /tomcat/tc6.0.x/trunk/STATUS.txt

2014-04-09 Thread kkolinko
Author: kkolinko Date: Wed Apr 9 13:02:45 2014 New Revision: 1585960 URL: http://svn.apache.org/r1585960 Log: vote Modified: tomcat/tc6.0.x/trunk/STATUS.txt Modified: tomcat/tc6.0.x/trunk/STATUS.txt URL:

Re: svn commit: r1585898 - in /tomcat/native/branches/1.1.x: native/src/sslcontext.c xdocs/miscellaneous/changelog.xml

2014-04-09 Thread Ognjen Blagojevic
On 9.4.2014 9:32, mt...@apache.org wrote: Log: Apply Ognjen's patch for bz55915 For the record, I am an issue reporter, but patch was provided by Mike Noordermeer. -Ognjen - To unsubscribe, e-mail:

Re: JDK 9 build 06 is available on java.net

2014-04-09 Thread Rory O'Donnell Oracle, Dublin ireland
https://bugs.openjdk.java.net/browse/JDK-8039751 Dalibor has written a blog http://robilad.livejournal.com/139637.html on how to track your issues in the JDK bug system. I hope this helps. Rgds,Rory On 04/ 9/14 01:25 PM, Mark Thomas wrote: On 09/04/2014 05:59, Mark Thomas wrote: On

svn commit: r1585966 - /tomcat/native/branches/1.1.x/xdocs/miscellaneous/changelog.xml

2014-04-09 Thread mturk
Author: mturk Date: Wed Apr 9 13:38:42 2014 New Revision: 1585966 URL: http://svn.apache.org/r1585966 Log: Change patch author Modified: tomcat/native/branches/1.1.x/xdocs/miscellaneous/changelog.xml Modified: tomcat/native/branches/1.1.x/xdocs/miscellaneous/changelog.xml URL:

[Bug 56374] Page in wrong language - getting lower rank Accept-Language in request header

2014-04-09 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=56374 Steve Root st...@rkbb.co.uk changed: What|Removed |Added Status|NEW |RESOLVED

[Bug 46179] apr ssl client authentication

2014-04-09 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=46179 Mark Thomas ma...@apache.org changed: What|Removed |Added Status|REOPENED|RESOLVED

[Bug 56378] New: Cert load fails if cert is located in path with non-ASCII characters

2014-04-09 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=56378 Bug ID: 56378 Summary: Cert load fails if cert is located in path with non-ASCII characters Product: Tomcat Native Version: 1.1.29 Hardware: PC Status:

svn commit: r1585997 - in /tomcat/tc6.0.x/trunk: STATUS.txt java/org/apache/catalina/startup/TldConfig.java java/org/apache/jasper/compiler/JDTCompiler.java java/org/apache/jasper/compiler/TldLocation

2014-04-09 Thread markt
Author: markt Date: Wed Apr 9 15:41:28 2014 New Revision: 1585997 URL: http://svn.apache.org/r1585997 Log: Fix http://issues.apache.org/bugzilla/show_bug.cgi?id=56283 Add support for running Tomcat 6 with ecj-P20140317-1600.jar (as drop-in replacement for ecj-4.3.1.jar). Add support for value

[Bug 56283] Add support for Java 8 to Jasper

2014-04-09 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=56283 --- Comment #4 from Mark Thomas ma...@apache.org --- Patch applied to 6.0.x for 6.0.40 onwards. -- You are receiving this mail because: You are the assignee for the bug.

[Bug 56378] Cert load fails if cert is located in path with non-ASCII characters

2014-04-09 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=56378 Mladen Turk mt...@apache.org changed: What|Removed |Added OS||All --- Comment #1

[jira] [Commented] (MTOMCAT-266) The fork attribute crashes Tomcat on startup

2014-04-09 Thread M. R. (JIRA)
[ https://issues.apache.org/jira/browse/MTOMCAT-266?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13964332#comment-13964332 ] M. R. commented on MTOMCAT-266: --- I'm using 3.2.1. Do you have a suggestion about which

ErrorValve enhancement

2014-04-09 Thread Nick Bunn
Good Day, As i'm sure you are all aware when the default error valve returns its report it publishes the tomcat version and some other troubleshooting data. This of course breaks one of my securities teams rules and also is published as a item that needs to be remediated when hardening

svn commit: r1586044 - in /tomcat/jk/trunk: native/common/jk_ajp_common.c xdocs/miscellaneous/changelog.xml

2014-04-09 Thread rjung
Author: rjung Date: Wed Apr 9 17:26:13 2014 New Revision: 1586044 URL: http://svn.apache.org/r1586044 Log: Fix forwarding of chunked requests, which is broken in version 1.2.37. Bug was introduced by refactoring in r1555413. Modified: tomcat/jk/trunk/native/common/jk_ajp_common.c

Re: ErrorValve enhancement

2014-04-09 Thread Romain Manni-Bucau
Hi for this kind of reason we included in tomee http://svn.apache.org/repos/asf/tomee/tomee/trunk/tomee/tomee-catalina/src/main/java/org/apache/tomee/catalina/valve/MinimumErrorReportValve.java would be great to get it in tomcat OOTB. Romain Manni-Bucau Twitter: @rmannibucau Blog:

Re: Tagging JK 1.2.40

2014-04-09 Thread Rainer Jung
On 08.04.2014 09:56, Mladen Turk wrote: Hi, I plan to tag JK 1.2.40 pretty soon (probably end of this week) We have few bugs in the latest release which requires a new version. I'm all for it, to many bugs which might affect many users. Just now fixed another one (chunked requests broken).

svn propchange: r1586044 - svn:log

2014-04-09 Thread rjung
Author: rjung Revision: 1586044 Modified property: svn:log Modified: svn:log at Wed Apr 9 17:39:54 2014 -- --- svn:log (original) +++ svn:log Wed Apr 9 17:39:54 2014 @@ -1,4 +1,4 @@ Fix forwarding of chunked requests,

Re: Tagging JK 1.2.40

2014-04-09 Thread Mladen Turk
On 04/09/2014 07:38 PM, Rainer Jung wrote: On 08.04.2014 09:56, Mladen Turk wrote: Hi, I plan to tag JK 1.2.40 pretty soon (probably end of this week) We have few bugs in the latest release which requires a new version. I'm all for it, to many bugs which might affect many users. Just now

svn commit: r1586150 - in /tomcat/trunk: java/org/apache/coyote/http11/ java/org/apache/coyote/http11/upgrade/ test/org/apache/tomcat/websocket/

2014-04-09 Thread remm
Author: remm Date: Wed Apr 9 21:21:16 2014 New Revision: 1586150 URL: http://svn.apache.org/r1586150 Log: - Add possibly missing notification. - Try again the SSL websocket test, will revert the commit if not fixed. Modified:

[Bug 56363] OpenSSL security advisory - Heartbleed bug

2014-04-09 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=56363 Klemen Novak klemen.no...@mikrocop.com changed: What|Removed |Added CC|

[Bug 56363] OpenSSL security advisory - Heartbleed bug

2014-04-09 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=56363 Keith Davis keithda...@solidtechservice.com changed: What|Removed |Added CC|

svn commit: r1586177 - in /tomcat/trunk: java/org/apache/coyote/http11/upgrade/AbstractServletOutputStream.java java/org/apache/coyote/http11/upgrade/Nio2ServletOutputStream.java test/org/apache/tomca

2014-04-09 Thread remm
Author: remm Date: Wed Apr 9 23:57:09 2014 New Revision: 1586177 URL: http://svn.apache.org/r1586177 Log: Does not fix the testsuite run, so revert. Modified: tomcat/trunk/java/org/apache/coyote/http11/upgrade/AbstractServletOutputStream.java

buildbot failure in ASF Buildbot on tomcat-trunk

2014-04-09 Thread buildbot
The Buildbot has detected a new failure on builder tomcat-trunk while building ASF Buildbot. Full details are available at: http://ci.apache.org/builders/tomcat-trunk/builds/5667 Buildbot URL: http://ci.apache.org/ Buildslave for this Build: bb-vm_ubuntu Build Reason: scheduler Build Source

[Bug 55943] Provide a way prevent looking at the System classloader before the webapp classloaders

2014-04-09 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=55943 --- Comment #11 from hifisoftw...@gmail.com --- Thank Mark for the link. I have trouble understanding how to configure to follow the old behaviour. Are you suggesting to override the WebappClassLoader class? -- You are receiving this

buildbot success in ASF Buildbot on tomcat-trunk

2014-04-09 Thread buildbot
The Buildbot has detected a restored build on builder tomcat-trunk while building ASF Buildbot. Full details are available at: http://ci.apache.org/builders/tomcat-trunk/builds/5668 Buildbot URL: http://ci.apache.org/ Buildslave for this Build: bb-vm_ubuntu Build Reason: scheduler Build

Tagging Tomcat Native 1.1.30

2014-04-09 Thread Mladen Turk
I plan to tag 1.1.30 either later today or tomorrow and push for a quick release vote. Comments? Regards -- ^TM - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail:

svn commit: r1586221 - /tomcat/native/branches/1.1.x/native/include/ssl_private.h

2014-04-09 Thread mturk
Author: mturk Date: Thu Apr 10 05:44:09 2014 New Revision: 1586221 URL: http://svn.apache.org/r1586221 Log: Revert NO_SSL_INTERN define. We need direct struct access for sslinfo Modified: tomcat/native/branches/1.1.x/native/include/ssl_private.h Modified: