[GitHub] [tomcat] jfclere commented on pull request #511: Allow to decrypt PEM keys.

2022-05-10 Thread GitBox
jfclere commented on PR #511: URL: https://github.com/apache/tomcat/pull/511#issuecomment-1122256216 @markt-asf OK Please close this PR when yours is ready (or when you have committed). -- This is an automated message from the Apache Git Service. To respond to the message, please log on

[tomcat] branch main updated (1709d67737 -> 04811bb640)

2022-05-10 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a change to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git from 1709d67737 Add support for encrypted PKCS#1 keys. Based on #511. Thanks to jfclere add 04811bb640 Change name from

[tomcat] branch main updated: This works on Linux and Windows

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 136f86744c This works on Linux and Windows

[tomcat] branch 9.0.x updated: Fix backport

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 18dd6259a9 Fix backport 18dd6259a9 is described

[tomcat] branch 8.5.x updated: Fix backport

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new c1a34719ce Fix backport c1a34719ce is described

[tomcat] branch 10.0.x updated: This works on Linux and Windows

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.0.x by this push: new 75146202a1 This works on Linux and Windows

[tomcat] branch 8.5.x updated: This works on Linux and Windows

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new cdf358f066 This works on Linux and Windows

[tomcat] branch 8.5.x updated: Fix failure on Java 17 - spotted by unit tests

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new e21fff2a15 Fix failure on Java 17 - spotted by

[tomcat] branch 9.0.x updated: Fix failure on Java 17 - spotted by unit tests

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 2bd94154ff Fix failure on Java 17 - spotted by

[tomcat] branch 10.0.x updated: Fix failure on Java 17 - spotted by unit tests

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.0.x by this push: new cc02e48d92 Fix failure on Java 17 - spotted by

[tomcat] branch main updated: Fix failure on Java 17 - spotted by unit tests

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new b260b8968b Fix failure on Java 17 - spotted by unit

[tomcat] tag 10.1.0-M15 created (now dcf3e81b2e)

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a change to tag 10.1.0-M15 in repository https://gitbox.apache.org/repos/asf/tomcat.git at dcf3e81b2e (commit) This tag includes the following new commits: new dcf3e81b2e Tag 10.1.0-M15 The 1 revisions

[tomcat] 01/01: Tag 10.1.0-M15

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to tag 10.1.0-M15 in repository https://gitbox.apache.org/repos/asf/tomcat.git commit dcf3e81b2e709574971c7a9592614d70c1b55bf7 Author: Mark Thomas AuthorDate: Tue May 10 20:54:06 2022 +0100 Tag

[tomcat] branch 9.0.x updated: This works on Linux and Windows

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 3c3ad31dc1 This works on Linux and Windows

svn commit: r54420 - in /dev/tomcat/tomcat-10/v10.1.0-M15: ./ bin/ bin/embed/ src/

2022-05-10 Thread markt
Author: markt Date: Tue May 10 20:18:16 2022 New Revision: 54420 Log: Upload Apache Tomcat 10.1.0-M15 for voting Added: dev/tomcat/tomcat-10/v10.1.0-M15/ dev/tomcat/tomcat-10/v10.1.0-M15/KEYS dev/tomcat/tomcat-10/v10.1.0-M15/README.html

[tomcat] branch 10.0.x updated: Fix backport

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.0.x by this push: new fd30e16f37 Fix backport fd30e16f37 is described

[VOTE] Release Apache Tomcat 10.1.0-M15

2022-05-10 Thread Mark Thomas
The proposed Apache Tomcat 10.1.0-M15 release is now available for voting. Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 without changes. Java EE applications designed for Tomcat 9 and earlier may be placed in the $CATALINA_BASE/webapps-javaee directory and Tomcat

[GitHub] [tomcat] markt-asf closed pull request #511: Allow to decrypt PEM keys.

2022-05-10 Thread GitBox
markt-asf closed pull request #511: Allow to decrypt PEM keys. URL: https://github.com/apache/tomcat/pull/511 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe,

[GitHub] [tomcat] markt-asf commented on pull request #511: Allow to decrypt PEM keys.

2022-05-10 Thread GitBox
markt-asf commented on PR #511: URL: https://github.com/apache/tomcat/pull/511#issuecomment-1122302040 Done. Not quite as generic as I would like but I couldn't figure out how to get from DEK-Info to JSSE standard names without a manual lookup. Thanks for doing all the hard work on this.

[Bug 65853] [CsrfPreventionFilter] Extract evaluation of skipNonceCheck into overridable method

2022-05-10 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=65853 --- Comment #15 from Marvin Fröhlich --- I have now integrated your new version of CsrfPreventionFilter as base to our filter class. And it tuned out, that there are some minor things missing, that will prevent us from using the class as it is

[tomcat] branch 8.5.x updated: Change name from java17 to foreign

2022-05-10 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new b56714efb3 Change name from java17 to foreign

[tomcat] branch 9.0.x updated: Change name from java17 to foreign

2022-05-10 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 8dac6661e3 Change name from java17 to foreign

[tomcat] branch 10.0.x updated: Change name from java17 to foreign

2022-05-10 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 10.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.0.x by this push: new 74617c9bec Change name from java17 to foreign

[GitHub] [tomcat] markt-asf commented on pull request #511: Allow to decrypt PEM keys.

2022-05-10 Thread GitBox
markt-asf commented on PR #511: URL: https://github.com/apache/tomcat/pull/511#issuecomment-1122094182 +1 to broadening the support of our PEM file conversion. I think the algorithm and the digest should be saved with the part for consistency with the rest of the code. I'm happy to

[Bug 65118] Spurious null pointer exception in Http2UpgradeHandler when reloading web page

2022-05-10 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=65118 Remy Maucherat changed: What|Removed |Added Status|REOPENED|NEEDINFO -- You are receiving this

[tomcat] branch main updated: Add support for encrypted PKCS#1 keys. Based on #511. Thanks to jfclere

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 1709d67737 Add support for encrypted PKCS#1 keys.

[GitHub] [tomcat] garethjevans opened a new pull request, #512: Adding a ServiceBindingPropertySource

2022-05-10 Thread GitBox
garethjevans opened a new pull request, #512: URL: https://github.com/apache/tomcat/pull/512 The property source allows values in Tomcat's configuration files to be injected directly from a servicebinding.io's Service Binding without having to be converted to an environment variable

[tomcat] branch 9.0.x updated: Avoid null response

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 0cd7fad07f Avoid null response 0cd7fad07f is

[tomcat] branch main updated: Avoid null response

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 5af33624a2 Avoid null response 5af33624a2 is

[tomcat] branch 10.0.x updated: Avoid null response

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.0.x by this push: new 1768355a1e Avoid null response 1768355a1e is

[tomcat] branch 8.5.x updated: Avoid null response

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new eb1a95ac47 Avoid null response eb1a95ac47 is

[GitHub] [tomcat] markt-asf commented on pull request #511: Allow to decrypt PEM keys.

2022-05-10 Thread GitBox
markt-asf commented on PR #511: URL: https://github.com/apache/tomcat/pull/511#issuecomment-1122127955 Mostly done but I'm looking at trying to make the support for encrypted PKCS1 files more generic rather than just supporting the one cipher. -- This is an automated message from the

[Bug 65118] Spurious null pointer exception in Http2UpgradeHandler when reloading web page

2022-05-10 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=65118 Gerard M. Davison changed: What|Removed |Added Resolution|FIXED |--- Status|RESOLVED

[tomcat] branch 10.0.x updated: Add support for encrypted PKCS#1 keys. Based on #511. Thanks to jfclere

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.0.x by this push: new b1b84bdd77 Add support for encrypted PKCS#1

[tomcat] branch 8.5.x updated: Add support for encrypted PKCS#1 keys. Based on #511. Thanks to jfclere

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new 48d8df33c1 Add support for encrypted PKCS#1 keys.

[tomcat] branch 9.0.x updated: Add support for encrypted PKCS#1 keys. Based on #511. Thanks to jfclere

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 6341ae6e73 Add support for encrypted PKCS#1 keys.

[Bug 65853] [CsrfPreventionFilter] Extract evaluation of skipNonceCheck into overridable method

2022-05-10 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=65853 --- Comment #16 from Mark Thomas --- (In reply to Marvin Fröhlich from comment #15) > For one there is no need to call getNonceCache(req), if both > skipNonceCheck(req) and skipNonceGeneration(req) return true. For us is is > actually

[tomcat] branch 10.0.x updated: Fix PEM file lookup so it works with Ant and IDEs

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.0.x by this push: new b2d13a1265 Fix PEM file lookup so it works with

[tomcat] branch 9.0.x updated: Fix PEM file lookup so it works with Ant and IDEs

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 4d0e54e3b6 Fix PEM file lookup so it works with

[tomcat] branch 8.5.x updated: Fix PEM file lookup so it works with Ant and IDEs

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new c28a437b85 Fix PEM file lookup so it works with

[tomcat] branch 10.0.x updated (f9e8ef3adf -> cb81148dba)

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a change to branch 10.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git from f9e8ef3adf Fix copy/paste error new a6ff8a899b Clean up - no functional change new 0bc6d80e5a Allow

[tomcat] 01/03: Clean up - no functional change

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit a6ff8a899b6e6a7a5c1d272c0531742f7df387b3 Author: Mark Thomas AuthorDate: Tue May 10 16:13:31 2022 +0100 Clean up -

[Bug 65853] [CsrfPreventionFilter] Extract evaluation of skipNonceCheck into overridable method

2022-05-10 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=65853 --- Comment #18 from Mark Thomas --- So in your code the call to getNonceCache() will create a cache instance if none is found? That doesn't seem quite right. I'd expect that method to return null if the cache doesn't exist rather than the

[tomcat] 03/03: Refactor calls to getNonceCache() so only called when necessary.

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit cb81148dbad77e32cba4b735e06784e9feefcf67 Author: Mark Thomas AuthorDate: Tue May 10 16:33:51 2022 +0100 Refactor

[tomcat] 02/03: Allow sub-class to decide if session being null is an issue or not

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 0bc6d80e5a6c34c26582ed2514d1567472ee2253 Author: Mark Thomas AuthorDate: Tue May 10 16:14:51 2022 +0100 Allow

svn commit: r1900790 - in /tomcat/site/trunk: docs/security-10.html docs/security-8.html docs/security-9.html xdocs/security-10.xml xdocs/security-8.xml xdocs/security-9.xml

2022-05-10 Thread markt
Author: markt Date: Tue May 10 17:06:42 2022 New Revision: 1900790 URL: http://svn.apache.org/viewvc?rev=1900790=rev Log: Add CVE-2022-29885 Modified: tomcat/site/trunk/docs/security-10.html tomcat/site/trunk/docs/security-8.html tomcat/site/trunk/docs/security-9.html

[Bug 65853] [CsrfPreventionFilter] Extract evaluation of skipNonceCheck into overridable method

2022-05-10 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=65853 --- Comment #20 from Marvin Fröhlich --- The other reason for extension is to have more flexibility (wildcard support) in entry point handling. -- You are receiving this mail because: You are the assignee for the bug.

[tomcat] branch 10.0.x updated: Adding a ServiceBindingPropertySource

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.0.x by this push: new 0b898bfb8e Adding a ServiceBindingPropertySource

[tomcat] branch 10.0.x updated: Fix copy/paste error

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.0.x by this push: new f9e8ef3adf Fix copy/paste error f9e8ef3adf is

[tomcat] branch 9.0.x updated: Fix copy/paste error

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new c832fc6498 Fix copy/paste error c832fc6498 is

[tomcat] branch main updated: Fix copy/paste error

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 352a55934b Fix copy/paste error 352a55934b is

[tomcat] branch main updated: Typo on changelog.xml from jsp:pluing to jsp:plugin.

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new b0f4bf718a Typo on changelog.xml from jsp:pluing to

[GitHub] [tomcat] markt-asf merged pull request #513: Typo on changelog.xml, changed from jsp:pluing to jsp:plugin.

2022-05-10 Thread GitBox
markt-asf merged PR #513: URL: https://github.com/apache/tomcat/pull/513 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail:

[GitHub] [tomcat] markt-asf merged pull request #512: Adding a ServiceBindingPropertySource

2022-05-10 Thread GitBox
markt-asf merged PR #512: URL: https://github.com/apache/tomcat/pull/512 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail:

[tomcat] branch main updated: No need to create a nonce cache if you aren't going to create a nonce

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 957133f838 No need to create a nonce cache if you

[tomcat] branch 10.0.x updated: No need to create a nonce cache if you aren't going to create a nonce

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.0.x by this push: new dc0fe4 No need to create a nonce cache if

[tomcat] branch 9.0.x updated: No need to create a nonce cache if you aren't going to create a nonce

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 9ce3e28e53 No need to create a nonce cache if you

[tomcat] branch 8.5.x updated: No need to create a nonce cache if you aren't going to create a nonce

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new 84fa8914b9 No need to create a nonce cache if you

[tomcat] 02/03: Allow sub-class to decide if session being null is an issue or not

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit e9413ef1ece2a6fead21ddbdbecacebf229a541e Author: Mark Thomas AuthorDate: Tue May 10 16:14:51 2022 +0100 Allow

[tomcat] 01/03: Clean up - no functional change

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit a9e8be066c8a78d65f6ce91ec4d7071fbd80ada8 Author: Mark Thomas AuthorDate: Tue May 10 16:13:31 2022 +0100 Clean up -

[tomcat] 02/03: Allow sub-class to decide if session being null is an issue or not

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 1fcc216e2a87d5223c5e2be1a2ab43a6851242ef Author: Mark Thomas AuthorDate: Tue May 10 16:14:51 2022 +0100 Allow

[tomcat] 01/03: Clean up - no functional change

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 1ab3a2ba856bbefc8d3b44263bc3017db5848912 Author: Mark Thomas AuthorDate: Tue May 10 16:13:31 2022 +0100 Clean up -

[tomcat] 03/03: Refactor calls to getNonceCache() so only called when necessary.

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 1b8041818885d6932d3d48591b28e7f3c1cf0c3a Author: Mark Thomas AuthorDate: Tue May 10 16:33:51 2022 +0100 Refactor

[tomcat] branch 8.5.x updated (9dc00acdd0 -> e7d801b241)

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a change to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git from 9dc00acdd0 Fix copy/paste error new 1ab3a2ba85 Clean up - no functional change new 1fcc216e2a Allow sub-class

[tomcat] 03/03: Refactor calls to getNonceCache() so only called when necessary.

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit e7d801b2417662c86e567544f41f1e3873eaeafb Author: Mark Thomas AuthorDate: Tue May 10 16:33:51 2022 +0100 Refactor

[tomcat] branch 9.0.x updated (c832fc6498 -> 1b80418188)

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a change to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git from c832fc6498 Fix copy/paste error new a9e8be066c Clean up - no functional change new e9413ef1ec Allow sub-class

[GitHub] [tomcat] markt-asf commented on pull request #512: Adding a ServiceBindingPropertySource

2022-05-10 Thread GitBox
markt-asf commented on PR #512: URL: https://github.com/apache/tomcat/pull/512#issuecomment-1122616275 Agreed. I was going to merge this, tidy things up a bit and then back-port. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to

[tomcat] branch main updated: Add a change log entry and do some minor clean-up

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new da3012ed27 Add a change log entry and do some minor

[tomcat] branch 8.5.x updated: Adding a ServiceBindingPropertySource

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new 038bf486b1 Adding a ServiceBindingPropertySource

[tomcat] branch 10.0.x updated: EncryptInterceptor only provides partial protection on untrusted network

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.0.x by this push: new 36826ea638 EncryptInterceptor only provides

[tomcat] branch 9.0.x updated: EncryptInterceptor only provides partial protection on untrusted network

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new eaafd28296 EncryptInterceptor only provides

[tomcat] branch 8.5.x updated: EncryptInterceptor only provides partial protection on untrusted network

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new b679bc627f EncryptInterceptor only provides

[tomcat] branch main updated: EncryptInterceptor only provides partial protection on untrusted network

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 0fa7721f11 EncryptInterceptor only provides partial

[SECURITY] CVE-2022-29885 Apache Tomcat EncryptInterceptor DoS

2022-05-10 Thread Mark Thomas
CVE-2022-29885 Apache Tomcat EncryptInterceptor Severity: Low Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 10.1.0-M1 to 10.1.0-M14 Apache Tomcat 10.0.0-M1 to 10.0.20 Apache Tomcat 9.0.13 to 9.0.62 Apache Tomcat 8.5.38 to 8.5.78 Description: The documentation for the

[GitHub] [tomcat] druizdeazua opened a new pull request, #513: Typo on changelog.xml, changed from jsp:pluing to jsp:plugin.

2022-05-10 Thread GitBox
druizdeazua opened a new pull request, #513: URL: https://github.com/apache/tomcat/pull/513 While going through changelog.xml file found small typo, just providing small correction. from jsp:pluing to jsp:plugin, below impacted section: To align with the JSP 3.1

[tomcat] 02/02: Remove meaningless code

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 366bb95af80b65ce288de094b632546ef3f06839 Author: lihan AuthorDate: Sun May 8 20:13:35 2022 +0800 Remove meaningless

[tomcat] branch main updated (957133f838 -> 366bb95af8)

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a change to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git from 957133f838 No need to create a nonce cache if you aren't going to create a nonce new 4a7722a90d Remove meaningless

[tomcat] 01/02: Remove meaningless code

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 4a7722a90dca22c6113907ecb2420cd9fa0a4678 Author: lihan AuthorDate: Sun May 8 19:32:59 2022 +0800 Remove meaningless

[GitHub] [tomcat] markt-asf merged pull request #510: Remove the prestartminSpareThreads field from StandardThreadExecutor

2022-05-10 Thread GitBox
markt-asf merged PR #510: URL: https://github.com/apache/tomcat/pull/510 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail:

[tomcat] branch main updated: Update change log

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 85a4325284 Update change log 85a4325284 is described

[Bug 65853] [CsrfPreventionFilter] Extract evaluation of skipNonceCheck into overridable method

2022-05-10 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=65853 --- Comment #19 from Marvin Fröhlich --- (In reply to Mark Thomas from comment #18) > So in your code the call to getNonceCache() will create a cache instance if > none is found? That doesn't seem quite right. I'd expect that method to >

[GitHub] [tomcat] ChristopherSchultz commented on pull request #512: Adding a ServiceBindingPropertySource

2022-05-10 Thread GitBox
ChristopherSchultz commented on PR #512: URL: https://github.com/apache/tomcat/pull/512#issuecomment-1122565867 This looks interesting to me. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the

[Bug 65853] [CsrfPreventionFilter] Extract evaluation of skipNonceCheck into overridable method

2022-05-10 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=65853 --- Comment #17 from Marvin Fröhlich --- (In reply to Mark Thomas from comment #16) > Done. Thanks a lot. (In reply to Mark Thomas from comment #16) > Do you mean there is no need to call createNoneCache() since that is what > happens in

[tomcat] branch 8.5.x updated: Remove meaningless code

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new 7957a1d52a Remove meaningless code 7957a1d52a is

[tomcat] branch 9.0.x updated: Remove meaningless code

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new a6fc970985 Remove meaningless code a6fc970985 is

[tomcat] branch 10.0.x updated: Remove meaningless code

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.0.x by this push: new 9317827f7a Remove meaningless code 9317827f7a is

[tomcat] branch main updated: Fix PEM file lookup so it works with Ant and IDEs

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 13f3e971f2 Fix PEM file lookup so it works with Ant

[tomcat] branch 8.5.x updated: Fix copy/paste error

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new 9dc00acdd0 Fix copy/paste error 9dc00acdd0 is

[GitHub] [tomcat] ChristopherSchultz commented on pull request #511: Allow to decrypt PEM keys.

2022-05-10 Thread GitBox
ChristopherSchultz commented on PR #511: URL: https://github.com/apache/tomcat/pull/511#issuecomment-1122525000 > Mostly done but I'm looking at trying to make the support for encrypted PKCS1 files more generic rather than just supporting the one cipher. I had the same problem:

[tomcat] 01/03: Clean up - no functional change

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 258162cf4b8209060e8d85d2e289feeaad4c726a Author: Mark Thomas AuthorDate: Tue May 10 16:13:31 2022 +0100 Clean up - no

[tomcat] 03/03: Refactor calls to getNonceCache() so only called when necessary.

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git commit d0971c3f0781b37c2f3b3e0092587c69dd4e6fbd Author: Mark Thomas AuthorDate: Tue May 10 16:33:51 2022 +0100 Refactor

[tomcat] 02/03: Allow sub-class to decide if session being null is an issue or not

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git commit cc36dd4bb334a86d5624892236e16adab0307900 Author: Mark Thomas AuthorDate: Tue May 10 16:14:51 2022 +0100 Allow

[tomcat] branch main updated (352a55934b -> d0971c3f07)

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a change to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git from 352a55934b Fix copy/paste error new 258162cf4b Clean up - no functional change new cc36dd4bb3 Allow sub-class

[tomcat] branch main updated: Adding a ServiceBindingPropertySource

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new ba7f29a0cb Adding a ServiceBindingPropertySource

[tomcat] branch 9.0.x updated: Adding a ServiceBindingPropertySource

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 53d572b93e Adding a ServiceBindingPropertySource

Re: [VOTE] Release Apache Tomcat 10.1.0-M15

2022-05-10 Thread Mark Thomas
The correct Maven staging repo is: https://repository.apache.org/content/repositories/orgapachetomcat-1372 Sorry for the change. Mark On 10/05/2022 23:16, Mark Thomas wrote: Hi all, Something went wrong with closing the staging repo and 10.0.21 and 10.1.0-M15 ended up in the same staging

[tomcat] tag 10.0.21 created (now feb577944d)

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a change to tag 10.0.21 in repository https://gitbox.apache.org/repos/asf/tomcat.git at feb577944d (commit) This tag includes the following new commits: new feb577944d Tag 10.0.21 The 1 revisions

[tomcat] 01/01: Tag 10.0.21

2022-05-10 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to tag 10.0.21 in repository https://gitbox.apache.org/repos/asf/tomcat.git commit feb577944dee2ac7cc9839638e9388d90067f1cb Author: Mark Thomas AuthorDate: Tue May 10 22:49:24 2022 +0100 Tag 10.0.21

[VOTE] Release Apache Tomcat 10.0.21

2022-05-10 Thread Mark Thomas
The proposed Apache Tomcat 10.0.21 release is now available for voting. Apache Tomcat 10.0.x implements Jakarta EE 9 and, as such, the primary package for all the specification APIs has changed from javax.* to jakarta.* Applications that run on Tomcat 9 will not run on Tomcat 10 without

Re: [VOTE] Release Apache Tomcat 10.0.21

2022-05-10 Thread Raymond Augé
[x] Stable - go ahead and release as 10.0.21 (stable) On Tue, May 10, 2022 at 6:39 PM Mark Thomas wrote: > The proposed Apache Tomcat 10.0.21 release is now available for > voting. > > Apache Tomcat 10.0.x implements Jakarta EE 9 and, as such, the primary > package for all the specification

  1   2   >