SSL Socket does not timeout when no handshake occurs

2004-01-11 Thread Alex Chan
I have found that if a connection is initiated on the SSL port but the client does not participate in the SSL handshake, the socket seems to hang around indefinitely. The test I used was to telnet to the secure port without typing/sending any further data. When doing the same to the non-secure por

cvs commit: jakarta-tomcat-catalina/modules/cluster/src/share/org/apache/catalina/cluster/tcp ReplicationValve.java

2004-01-11 Thread fhanik
fhanik 2004/01/11 21:23:11 Modified:modules/cluster/src/share/org/apache/catalina/cluster ClusterSession.java SessionMessage.java modules/cluster/src/share/org/apache/catalina/cluster/session DeltaManager.java DeltaSession.j

cvs commit: jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/session StandardManager.java

2004-01-11 Thread fhanik
fhanik 2004/01/11 21:21:48 Modified:catalina/src/share/org/apache/catalina Manager.java catalina/src/share/org/apache/catalina/core StandardContext.java catalina/src/share/org/apache/catalina/session StandardM

Possible Bug in 4.1.27 - RequestDispatcher fails after cross context include

2004-01-11 Thread Scott Goldstein
I sent this to the user list, but received no reply. This is in response to bug #25965. I have two web applications, client and server (attached). In the client web application, there is a single servlet, ClientServlet which performs an include to another servlet, ServerServlet, in server web ap

DO NOT REPLY [Bug 26039] - spanish translations

2004-01-11 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE. http://nagoya.apache.org/bugzilla/show_bu

DO NOT REPLY [Bug 25610] - javadocs of TLV.validate() need

2004-01-11 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE. http://nagoya.apache.org/bugzilla/show_bu

Re: SECURITY BUG: No place to disable HTTP TRACE vulnerability

2004-01-11 Thread Bill Barker
- Original Message - From: "Remy Maucherat" <[EMAIL PROTECTED]> To: "Tomcat Developers List" <[EMAIL PROTECTED]> Sent: Sunday, January 11, 2004 1:18 AM Subject: Re: SECURITY BUG: No place to disable HTTP TRACE vulnerability > Bill Barker wrote: > > Ok, this isn't right. Tomcat defaults

Re: cvs commit: jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/realm RealmBase.java

2004-01-11 Thread Bill Barker
- Original Message - From: "Remy Maucherat" <[EMAIL PROTECTED]> To: "Tomcat Developers List" <[EMAIL PROTECTED]> Sent: Sunday, January 11, 2004 1:18 AM Subject: Re: cvs commit: jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/realm RealmBase.java > Bill Barker wrote: > >>r

Re: cvs commit: jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/realm RealmBase.java

2004-01-11 Thread Bill Barker
- Original Message - From: "Remy Maucherat" <[EMAIL PROTECTED]> To: "Tomcat Developers List" <[EMAIL PROTECTED]> Sent: Sunday, January 11, 2004 1:27 AM Subject: Re: cvs commit: jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/realm RealmBase.java > [EMAIL PROTECTED] wrote:

DO NOT REPLY [Bug 12249] - tomcat binds to IP addresses it is configured not to bind to

2004-01-11 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE. http://nagoya.apache.org/bugzilla/show_bu

DO NOT REPLY [Bug 12253] - Catalina fails to set proper charset

2004-01-11 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE. http://nagoya.apache.org/bugzilla/show_bu

DO NOT REPLY [Bug 12240] - Management of error-codes

2004-01-11 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE. http://nagoya.apache.org/bugzilla/show_bu

Bug report for Watchdog [2004/01/11]

2004-01-11 Thread bugzilla
+---+ | Bugzilla Bug ID | | +-+ | | Status: UNC=Unconfirmed NEW=New ASS=Assigned

Bug report for Tomcat 4 [2004/01/11]

2004-01-11 Thread bugzilla
+---+ | Bugzilla Bug ID | | +-+ | | Status: UNC=Unconfirmed NEW=New ASS=Assigned

Bug report for Tomcat 3 [2004/01/11]

2004-01-11 Thread bugzilla
+---+ | Bugzilla Bug ID | | +-+ | | Status: UNC=Unconfirmed NEW=New ASS=Assigned

cvs commit: jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/startup SetDocBaseRule.java

2004-01-11 Thread remm
remm2004/01/11 02:05:35 Modified:catalina/src/share/org/apache/catalina/startup SetDocBaseRule.java Log: - Fix array out of bounds when docBase is equal to "". Revision ChangesPath 1.10 +10 -6 jakarta-tomcat-catalina/catalina/src/shar

Re: cvs commit: jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/realm RealmBase.java

2004-01-11 Thread Remy Maucherat
[EMAIL PROTECTED] wrote: remm2004/01/11 01:23:42 Modified:catalina/src/share/org/apache/catalina/realm RealmBase.java Log: - Ooops. Put back the if(found) blocks. I left in some of my changes: @@ -457,10 +457,7 @@ // Check each defined security constraint

cvs commit: jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/realm RealmBase.java

2004-01-11 Thread remm
remm2004/01/11 01:23:42 Modified:catalina/src/share/org/apache/catalina/realm RealmBase.java Log: - Ooops. Put back the if(found) blocks. Revision ChangesPath 1.25 +11 -11 jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/realm/RealmBase.java

cvs commit: jakarta-tomcat-catalina/webapps/docs/config ajp.xml http.xml

2004-01-11 Thread remm
remm2004/01/11 01:20:22 Modified:webapps/docs/config ajp.xml http.xml Log: - Document allowTrace. - Improve docs for the encoding flag. Revision ChangesPath 1.4 +10 -3 jakarta-tomcat-catalina/webapps/docs/config/ajp.xml Index: ajp.xml ==

Re: SECURITY BUG: No place to disable HTTP TRACE vulnerability

2004-01-11 Thread Remy Maucherat
Bill Barker wrote: Ok, this isn't right. Tomcat defaults to NonLoginAuthenticator if there is no login-config. This one just approves everybody for everything. Ok. This isn't absolutely critical, but needs to be fixed. Rémy - T

Re: cvs commit: jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/realm RealmBase.java

2004-01-11 Thread Remy Maucherat
Bill Barker wrote: remm2004/01/10 09:23:39 Modified:catalina/src/share/org/apache/catalina/realm RealmBase.java Log: - findMethod wasn't called on the right collection. - The algorithm ignored extension mapped constraints as long as a widcard or exact mapped constraint was foun

RE: Jk2 object model

2004-01-11 Thread Mladen Turk
> From: Costin Manolache > Sent: 11. siječanj 2004 2:36 > To: Tomcat Developers List > Subject: Re: Jk2 object model > > > > > But this time I'd like to spend a month or so doing 'real' design > > without the single line of code. If we manage to put and > describe our > > needs on the paper

Re: About Book How Tomcat Works

2004-01-11 Thread Chris Wahl
I am pleased by your message :) But your site still can not be checked out even using proxy. So I don't know how to donate (or pay) , since no publisher to contact . Is there an alternative way to get the book's status? Anxiously waiting for the book . . . - Original Message - From: "Bud

Re: About Book How Tomcat Works

2004-01-11 Thread Budi Kurniawan
Hi Chris, I happen to be in this mailing list too:) I'm still writing, having completed 15 chapters of a total of 18. The book will go to the printer early Feb 2004. If interested, you can pre-order this book now to enjoy a 45% discount. That's right. I'm self-publishing this book. Cheers, budi