[Bug 55113] FIPS-compatible OpenSSL fails fingerprint test in TCNative with FIPS mode on

https://bz.apache.org/bugzilla/show_bug.cgi?id=55113 Mark Thomas changed: What|Removed |Added Resolution|--- |FIXED

[Bug 60362] Missing reason phrase in response

https://bz.apache.org/bugzilla/show_bug.cgi?id=60362 --- Comment #27 from Todd Pierce --- (In reply to Michael Osipov from comment #26) > (In reply to Ken DeLong from comment #25) > > We have switched to another chip maker, and in any event, the chips that are > >

[Bug 60560] Support systemd/inetd style socket activation

https://bz.apache.org/bugzilla/show_bug.cgi?id=60560 Jeff Turner changed: What|Removed |Added CC|

[GUMP@vmgump-vm3]: Project tomcat-tc8.0.x-test-nio (in module tomcat-8.0.x) failed

To whom it may engage... This is an automated request, but not an unsolicited one. For more information please visit http://gump.apache.org/nagged.html, and/or contact the folk at gene...@gump.apache.org. Project tomcat-tc8.0.x-test-nio has an issue affecting its community

[Bug 60667] Information disclosure vulnerability leaking files from WEB-INF and META-INF

https://bz.apache.org/bugzilla/show_bug.cgi?id=60667 --- Comment #2 from Josh Soref --- mark: did you test on Windows? the `.` behavior is a Windows thing. Case folding could also happen on macOS. (I'm not endorsing the bug, just guessing about how this could be. And I don't

svn commit: r1781351 - in /tomcat/tc8.0.x/trunk: java/org/apache/catalina/ha/authenticator/ClusterSingleSignOn.java java/org/apache/catalina/ha/authenticator/mbeans-descriptors.xml webapps/docs/change

Author: kfujino Date: Thu Feb 2 07:26:35 2017 New Revision: 1781351 URL: http://svn.apache.org/viewvc?rev=1781351=rev Log: Make the accessTimeout configurable in ClusterSingleSignOn. Modified: tomcat/tc8.0.x/trunk/java/org/apache/catalina/ha/authenticator/ClusterSingleSignOn.java

svn commit: r1781350 - in /tomcat/tc8.5.x/trunk: java/org/apache/catalina/ha/authenticator/ClusterSingleSignOn.java java/org/apache/catalina/ha/authenticator/mbeans-descriptors.xml webapps/docs/change

Author: kfujino Date: Thu Feb 2 07:24:22 2017 New Revision: 1781350 URL: http://svn.apache.org/viewvc?rev=1781350=rev Log: Make the accessTimeout configurable in ClusterSingleSignOn. Modified: tomcat/tc8.5.x/trunk/java/org/apache/catalina/ha/authenticator/ClusterSingleSignOn.java

svn commit: r1781349 - in /tomcat/trunk: java/org/apache/catalina/ha/authenticator/ClusterSingleSignOn.java java/org/apache/catalina/ha/authenticator/mbeans-descriptors.xml webapps/docs/changelog.xml

Author: kfujino Date: Thu Feb 2 07:19:34 2017 New Revision: 1781349 URL: http://svn.apache.org/viewvc?rev=1781349=rev Log: Make the accessTimeout configurable in ClusterSingleSignOn. Modified: tomcat/trunk/java/org/apache/catalina/ha/authenticator/ClusterSingleSignOn.java

buildbot failure in on tomcat-8-trunk

The Buildbot has detected a new failure on builder tomcat-8-trunk while building . Full details are available at: https://ci.apache.org/builders/tomcat-8-trunk/builds/911 Buildbot URL: https://ci.apache.org/ Buildslave for this Build: silvanus_ubuntu Build Reason: The AnyBranchScheduler

svn commit: r1781352 - in /tomcat/tc7.0.x/trunk: java/org/apache/catalina/ha/authenticator/ClusterSingleSignOn.java java/org/apache/catalina/ha/authenticator/mbeans-descriptors.xml webapps/docs/change

Author: kfujino Date: Thu Feb 2 07:28:41 2017 New Revision: 1781352 URL: http://svn.apache.org/viewvc?rev=1781352=rev Log: Make the accessTimeout configurable in ClusterSingleSignOn. Modified: tomcat/tc7.0.x/trunk/java/org/apache/catalina/ha/authenticator/ClusterSingleSignOn.java

[Bug 60674] New: Allow subclassing of org.apache.catalina.filters.CorsFilter

https://bz.apache.org/bugzilla/show_bug.cgi?id=60674 Bug ID: 60674 Summary: Allow subclassing of org.apache.catalina.filters.CorsFilter Product: Tomcat 8 Version: 8.5.9 Hardware: All OS: Linux

[Bug 60674] Allow subclassing of org.apache.catalina.filters.CorsFilter

https://bz.apache.org/bugzilla/show_bug.cgi?id=60674 --- Comment #1 from Christopher Schultz --- (In reply to Ralf Hauser from comment #0) > 1) why is the class "final"? > ==> pls remove that Interesting: it's been final since the class was first introduced.

svn commit: r1781262 - /tomcat/native/trunk/native/BUILDING

Author: markt Date: Wed Feb 1 15:32:48 2017 New Revision: 1781262 URL: http://svn.apache.org/viewvc?rev=1781262=rev Log: Correct copy/paste error in title Modified: tomcat/native/trunk/native/BUILDING Modified: tomcat/native/trunk/native/BUILDING URL:

[Bug 60362] Missing reason phrase in response

https://bz.apache.org/bugzilla/show_bug.cgi?id=60362 --- Comment #26 from Michael Osipov <1983-01...@gmx.net> --- (In reply to Ken DeLong from comment #25) > We have switched to another chip maker, and in any event, the chips that are > out in the field are out there, no way to upgrade except by

[Bug 60362] Missing reason phrase in response

https://bz.apache.org/bugzilla/show_bug.cgi?id=60362 --- Comment #24 from Michael Osipov <1983-01...@gmx.net> --- (In reply to Ken DeLong from comment #22) > I talked to our firmware guys - the offending code is actually in Texas > Instruments firmware on the chip we use. So there are likely

[Bug 60362] Missing reason phrase in response

https://bz.apache.org/bugzilla/show_bug.cgi?id=60362 --- Comment #25 from Ken DeLong --- We have switched to another chip maker, and in any event, the chips that are out in the field are out there, no way to upgrade except by replacing them. -- You are receiving this mail

[Bug 60362] Missing reason phrase in response

https://bz.apache.org/bugzilla/show_bug.cgi?id=60362 --- Comment #23 from Michael Osipov <1983-01...@gmx.net> --- (In reply to Ralf Hauser from comment #21) > I am also in favour of allowing the reason code. > > Although the discussion so far appears to be odd. > > > "HTTP/1.1 200 Fine, mate!"

[Bug 60362] Missing reason phrase in response

https://bz.apache.org/bugzilla/show_bug.cgi?id=60362 --- Comment #21 from Ralf Hauser --- I am also in favour of allowing the reason code. Although the discussion so far appears to be odd. > "HTTP/1.1 200 Fine, mate!" is probably of little value. However in particular in the

[Bug 60362] Missing reason phrase in response

https://bz.apache.org/bugzilla/show_bug.cgi?id=60362 --- Comment #22 from Ken DeLong --- I talked to our firmware guys - the offending code is actually in Texas Instruments firmware on the chip we use. So there are likely many devices affected, although I'm sure not all

svn commit: r1781302 - /tomcat/native/trunk/native/BUILDING

Author: markt Date: Wed Feb 1 19:51:45 2017 New Revision: 1781302 URL: http://svn.apache.org/viewvc?rev=1781302=rev Log: Add a section on Windows with FIPS support Modified: tomcat/native/trunk/native/BUILDING Modified: tomcat/native/trunk/native/BUILDING URL:

svn commit: r1781301 - in /tomcat/native/trunk: native/NMAKEmakefile xdocs/miscellaneous/changelog.xml

Author: markt Date: Wed Feb 1 19:51:10 2017 New Revision: 1781301 URL: http://svn.apache.org/viewvc?rev=1781301=rev Log: Windows 64-bit build now possible with FIPS enabled OpenSSL Modified: tomcat/native/trunk/native/NMAKEmakefile tomcat/native/trunk/xdocs/miscellaneous/changelog.xml

svn commit: r1781309 - /tomcat/native/trunk/native/BUILDING

Author: markt Date: Wed Feb 1 21:06:33 2017 New Revision: 1781309 URL: http://svn.apache.org/viewvc?rev=1781309=rev Log: Update building instructions Modified: tomcat/native/trunk/native/BUILDING Modified: tomcat/native/trunk/native/BUILDING URL: