[PROPOSAL] Copy DBCP 1.x (and POOL 1.x) source to 7.0.x

2019-02-12 Thread Mark Thomas
Hi, Tomcat 7 depends on DBCP 1.x and POOL 1.x. The last release of each of these was in 2013. There are a number of fixes I would like to be able to pull into Tomcat 7 - including the fix for BZ 58338. There is little/no appetite in the Commons community to release DBCP 1.x or Pool 1.x. Having

[Bug 63041] shutdown.sh exits non 0 requires KILLSIG from OS

2019-02-12 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=63041 --- Comment #20 from Mark Thomas --- (In reply to Konstantin Kolinko from comment #19) > An idea: use a named pipe (a FIFO special file) to solve the original bug > 53930. If I am understanding this correctly that would mean: - reverting

Re: [PROPOSAL] Copy DBCP 1.x (and POOL 1.x) source to 7.0.x

2019-02-12 Thread Rémy Maucherat
On Tue, Feb 12, 2019 at 2:55 PM Mark Thomas wrote: > Hi, > > Tomcat 7 depends on DBCP 1.x and POOL 1.x. The last release of each of > these was in 2013. There are a number of fixes I would like to be able > to pull into Tomcat 7 - including the fix for BZ 58338. > > There is little/no appetite

Re: Quick review of outline for Tomcat security presentation?

2019-02-12 Thread Tim Funk
Nice ... Some possible adds .. - Keep your java up to date (companion point to OS update) - Link to OWASP (whole talk to itself) - IP Filtering ... Consider a WAF - IP Filtering ... Where possible - Block all outbound connections - Maybe Lockout realm worth a quick mention? - IIRC: Clustering has

[Bug 63041] shutdown.sh exits non 0 requires KILLSIG from OS

2019-02-12 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=63041 --- Comment #21 from Thomas Opfer --- > If I am understanding this correctly that would mean: > > - reverting r1848046 and r1850829 for 9.0.x > - reverting r1848048 and r1850830 for 8.5.x > - reverting r1848049 and r1850831 for 7.0.x That

[Tomcat Wiki] Update of "AddOns" by KonstantinKolinko

2019-02-12 Thread Apache Wiki
Dear Wiki user, You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change notification. The "AddOns" page has been changed by KonstantinKolinko: https://wiki.apache.org/tomcat/AddOns?action=diff=13=14 Comment: Move PicketLink Vault to a named section + =

[Tomcat Wiki] Update of "AddOns" by KonstantinKolinko

2019-02-12 Thread Apache Wiki
Dear Wiki user, You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change notification. The "AddOns" page has been changed by KonstantinKolinko: https://wiki.apache.org/tomcat/AddOns?action=diff=14=15 Comment: Add a link to Agafua-syslog (Historically, the name is a

Re: Jakarta EE TCKs and compatibility logo

2019-02-12 Thread Rémy Maucherat
On Tue, Feb 12, 2019 at 6:16 PM Mark Thomas wrote: > Any other thoughts on this topic? > I think we should have EE compatibility back if possible. Rémy > Mark > > > On 21/01/2019 10:56, Mark Thomas wrote: > > Switching hats and speaking as a Tomcat committer. > > > > My experience is that

Re: Jakarta EE TCKs and compatibility logo

2019-02-12 Thread Mark Thomas
Any other thoughts on this topic? Mark On 21/01/2019 10:56, Mark Thomas wrote: > Switching hats and speaking as a Tomcat committer. > > My experience is that folks expect Tomcat to follow the spec and want to > know that it does. However, formal certification (or lack of it) hasn't > seemed to

[Bug 63041] shutdown.sh exits non 0 requires KILLSIG from OS

2019-02-12 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=63041 --- Comment #23 from Thomas Opfer --- (In reply to Rainer Jung from comment #22) > Do we actually understand, what would be wrong with the line > > 2\>\&1 \& echo \$! \>\"$catalina_pid_file\" \; \} $catalina_out_command "&" > > (single

Re: [PROPOSAL] Copy DBCP 1.x (and POOL 1.x) source to 7.0.x

2019-02-12 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 2/12/19 08:55, Mark Thomas wrote: > Hi, > > Tomcat 7 depends on DBCP 1.x and POOL 1.x. The last release of each > of these was in 2013. There are a number of fixes I would like to > be able to pull into Tomcat 7 - including the fix for BZ

[Bug 63023] Provide a way to load SecurityProviders into the system classloader compatible with Java 9+

2019-02-12 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=63023 Jonathan Horowitz changed: What|Removed |Added Version|9.0.14 |9.0.16 -- You are receiving this

[Bug 63041] shutdown.sh exits non 0 requires KILLSIG from OS

2019-02-12 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=63041 --- Comment #22 from Rainer Jung --- Do we actually understand, what would be wrong with the line 2\>\&1 \& echo \$! \>\"$catalina_pid_file\" \; \} $catalina_out_command "&" (single escaped ampersand)? As far as I understand from this

[GUMP@vmgump-vm3]: Project tomcat-trunk-test-nio2 (in module tomcat-trunk) failed

2019-02-12 Thread Bill Barker
-SNAPSHOT.jar -Dtest.openssl.path=/srv/gump/public/workspace/openssl-master/dest-20190212/bin/openssl -Dexecute .test.nio=false -Dhamcrest.jar=/srv/gump/packages/hamcrest/hamcrest-core-1.3.jar -Dbndlib.jar=/srv/gump/packages/bnd/bndlib-4.0.0/biz.aQute.bndlib-4.0.0.jar -Dexecute.test.apr=false

[Bug 63167] Network Requirements To Resolve No Members Active In Cluster Group

2019-02-12 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=63167 Mark Thomas changed: What|Removed |Added Component|Cluster |Documentation Severity|normal