[BUG] mod_jk2
mod_jk2 searches for '*.properties' in `apxs -q prefix`/conf instead of `apxs -q sysconfdir`. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
DO NOT REPLY [Bug 29695] New: - regression in SSL cipher strength
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT http://issues.apache.org/bugzilla/show_bug.cgi?id=29695. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE. http://issues.apache.org/bugzilla/show_bug.cgi?id=29695 regression in SSL cipher strength Summary: regression in SSL cipher strength Product: Tomcat 5 Version: 5.0.24 Platform: Other OS/Version: Other Status: NEW Severity: Normal Priority: Other Component: Connector:Coyote AssignedTo: [EMAIL PROTECTED] ReportedBy: [EMAIL PROTECTED] 4.1.24 through 4.1.27 nicely negotiated AES256 with my recent Mozilla browser. now that I am on 5.024, I only get AES-128 (irrespective of whether the className=org.apache.coyote.tomcat5.CoyoteConnector is present - in the sample server.xml that attribute is not present, in http://jakarta.apache.org/tomcat/tomcat-5.0-doc/ssl-howto.html it is, but either way, the security is reduced :( ) - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
DO NOT REPLY [Bug 29695] - regression in SSL cipher strength
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT http://issues.apache.org/bugzilla/show_bug.cgi?id=29695. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE. http://issues.apache.org/bugzilla/show_bug.cgi?id=29695 regression in SSL cipher strength --- Additional Comments From [EMAIL PROTECTED] 2004-06-20 11:23 --- Please investigate this more, or this will be resolved as INVALID. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[GUMP@brutus]: jakarta-tomcat-catalina/jakarta-tomcat-catalina success
To whom it may satisfy... This is an automated request, but not an unsolicited one. For more information please visit http://gump.apache.org/nagged.html, and/or contact folk at [EMAIL PROTECTED] Project jakarta-tomcat-catalina *no longer* has an issue. Project State : 'Success' Full details are available at: http://brutus.apache.org:8080/gump/jakarta-tomcat-catalina/jakarta-tomcat-catalina/index.html That said, some snippets follow: The following annotations were provided: -DEBUG- Jar [naming-resources.jar] identifier set to jar basename: [naming-resources] -DEBUG- Jar [servlets-default.jar] identifier set to jar basename: [servlets-default] -DEBUG- Jar [naming-common.jar] identifier set to jar basename: [naming-common] -DEBUG- Jar [catalina.jar] identifier set to jar basename: [catalina] -DEBUG- Jar [bootstrap.jar] identifier set to jar basename: [bootstrap] -DEBUG- Jar [servlets-common.jar] identifier set to jar basename: [servlets-common] -DEBUG- Jar [servlets-invoker.jar] identifier set to jar basename: [servlets-invoker] -INFO- Dependency on javamail exists, no need to add for property mail.jar. -INFO- Dependency on jaf exists, no need to add for property activation.jar. -INFO- Dependency on jmx exists, no need to add for property jmx.jar. -INFO- Dependency on jakarta-servletapi-5-servlet exists, no need to add for property servlet-api.jar. -INFO- Dependency on jakarta-servletapi-5-jsp exists, no need to add for property jsp-api.jar. -INFO- Dependency on xml-xerces exists, no need to add for property xml-apis.jar. -INFO- Dependency on xml-xerces exists, no need to add for property xercesImpl.jar. -INFO- Dependency on jakarta-tomcat-util exists, no need to add for property tomcat-util.jar. -INFO- Dependency on commons-logging exists, no need to add for property commons-logging-api.jar. -INFO- Dependency on ant exists, no need to add for property ant.home. -INFO- Dependency on jsse exists, no need to add for property jsse.home. -INFO- Dependency on jmx exists, no need to add for property jmx.home. -INFO- Dependency on jmx exists, no need to add for property jmxtools.jar. -INFO- Dependency on jndi exists, no need to add for property jndi.home. -INFO- Dependency on jakarta-regexp exists, no need to add for property regexp.home. -INFO- Dependency on jakarta-regexp exists, no need to add for property regexp.jar. -INFO- Dependency on javamail exists, no need to add for property mail.home. -INFO- Dependency on jaf exists, no need to add for property activation.home. -INFO- Dependency on jakarta-tomcat-coyote exists, no need to add for property tomcat-coyote.home. -INFO- Enable verbose output, due to 1 previous error(s). The following work was performed: http://brutus.apache.org:8080/gump/jakarta-tomcat-catalina/jakarta-tomcat-catalina/gump_work/build_jakarta-tomcat-catalina_jakarta-tomcat-catalina.html Work Name: build_jakarta-tomcat-catalina_jakarta-tomcat-catalina (Type: Build) State: Success Elapsed: 0 hours, 0 minutes, 20 seconds Command Line: java -Djava.awt.headless=true -Xbootclasspath/p:/usr/local/gump/public/workspace/xml-xerces2/java/build/xercesImpl.jar:/usr/local/gump/public/workspace/xml-xerces2/java/build/xml-apis.jar:/usr/local/gump/public/workspace/xml-xalan/java/build/xalan-unbundled.jar:/usr/local/gump/public/workspace/xml-commons/java/external/build/xml-apis.jar org.apache.tools.ant.Main -verbose -Dgump.merge=/usr/local/gump/public/gump/work/merge.xml -Dbuild.sysclasspath=only -Dtomcat33.home=*Unset* -Djsp-api.jar=/usr/local/gump/public/workspace/jakarta-servletapi-5/jsr152/dist/lib/jsp-api.jar -Djmx.jar=/usr/local/gump/packages/jmx-1_2-ri/lib/jmxri.jar -Djmx.home=/usr/local/gump/packages/jmx-1_2-ri -Djdbc20ext.jar=/usr/local/gump/packages/jdbc2_0/jdbc2_0-stdext.jar -Djtc.home=/usr/local/gump/public/workspace/jakarta-tomcat-connectors -Dmail.home=/usr/local/gump/packages/javamail-1.3 -Dant.home=/usr/local/gump/public/workspace/ant/dist -Dsite2.home=/usr/local/gump/public/workspace/jakarta-site2 -Dcommons-collections.jar=/usr/local/gump/public/workspace/jakarta-commons/collections/build/commons-collections-20040620.jar -Dcatalina.deploy=/usr/local/gump/public/workspace/jakarta-tomcat-catalina/build -Dxml-apis.jar=/usr/local/gump/public/workspace/xml-xerces2/java/build/xml-apis.jar -DxercesImpl.jar=/usr/local/gump/public/workspace/xml-xerces2/java/build/xercesImpl.jar -Djsse.home=/usr/local/gump/packages/jsse1.0.3 -Djaas.jar=/usr/local/gump/packages/jaas1_0/lib/jaas.jar -Dcatalina.build=/usr/local/gump/public/workspace/jakarta-tomcat-catalina/build -Dcommons-fileupload.jar=/usr/local/gump/public/workspace/jakarta-commons/fileupload/target/commons-fileupload-20040620.jar -Dmail.jar=/usr/local/gump/packages/javamail-1.3/mail.jar -Dcommons-digester.jar=/usr/local/gump/public/workspace/jakarta-commons/digester/dist/commons-digester.jar -Djndi.jar=/usr/local/gump/packages/jndi1_2_1/lib/jndi.jar -Djmxtools.jar=/usr
[GUMP@brutus]: jakarta-tomcat-5/jakarta-tomcat-5 failed
To whom it may engage... This is an automated request, but not an unsolicited one. For more information please visit http://gump.apache.org/nagged.html, and/or contact folk at [EMAIL PROTECTED] Project jakarta-tomcat-5 has an issue affecting its community integration. Project State : 'Failed', Reason 'Build Failed' Full details are available at: http://brutus.apache.org:8080/gump/jakarta-tomcat-5/jakarta-tomcat-5/index.html That said, some snippets follow: The following annotations were provided: -DEBUG- Jar [naming-resources.jar] identifier set to jar basename: [naming-resources] -DEBUG- Jar [servlets-default.jar] identifier set to jar basename: [servlets-default] -DEBUG- Jar [naming-common.jar] identifier set to jar basename: [naming-common] -DEBUG- Jar [catalina.jar] identifier set to jar basename: [catalina] -DEBUG- Jar [bootstrap.jar] identifier set to jar basename: [bootstrap] -DEBUG- Jar [servlets-common.jar] identifier set to jar basename: [servlets-common] -DEBUG- Jar [servlets-invoker.jar] identifier set to jar basename: [servlets-invoker] -INFO- Dependency on javamail exists, no need to add for property mail.jar. -INFO- Dependency on jaf exists, no need to add for property activation.jar. -INFO- Dependency on jakarta-servletapi-5-servlet exists, no need to add for property servlet-api.jar. -INFO- Dependency on jakarta-servletapi-5-jsp exists, no need to add for property jsp-api.jar. -INFO- Dependency on xml-xerces exists, no need to add for property xercesImpl.jar. -INFO- Dependency on xml-xerces exists, no need to add for property xml-apis.jar. -INFO- Dependency on jakarta-tomcat-util exists, no need to add for property tomcat-util.jar. -INFO- Dependency on commons-el exists, no need to add for property commons-el.jar. -INFO- Dependency on commons-logging exists, no need to add for property commons-logging-api.jar. -INFO- Dependency on commons-modeler exists, no need to add for property commons-modeler.jar. -INFO- Dependency on ant exists, no need to add for property ant.home. -INFO- Dependency on jsse exists, no need to add for property jsse.home. -INFO- Dependency on jmx exists, no need to add for property jmx.home. -INFO- Dependency on jmx exists, no need to add for property jmx.jar. -INFO- Dependency on jmx exists, no need to add for property jmx-tools.jar. -INFO- Dependency on jndi exists, no need to add for property jndi.home. -INFO- Dependency on jakarta-regexp exists, no need to add for property regexp.home. -INFO- Dependency on jakarta-regexp exists, no need to add for property regexp.jar. -INFO- Dependency on javamail exists, no need to add for property mail.home. -INFO- Dependency on jakarta-tomcat-coyote exists, no need to add for property tomcat-coyote.home. -INFO- Dependency on jakarta-tomcat-jasper_tc5 exists, no need to add for property jasper.home. -INFO- Dependency on jaf exists, no need to add for property activation.home. -INFO- Dependency on commons-modeler exists, no need to add for property commons-modeler.home. -INFO- Dependency on commons-daemon exists, no need to add for property commons-daemon.jsvc.tar.gz. -INFO- Dependency on jakarta-struts exists, no need to add for property struts.home. -INFO- Enable verbose output, due to 1 previous error(s). -INFO- Failed with reason build failed -INFO- Enable debug output, due to build failure. The following work was performed: http://brutus.apache.org:8080/gump/jakarta-tomcat-5/jakarta-tomcat-5/gump_work/build_jakarta-tomcat-5_jakarta-tomcat-5.html Work Name: build_jakarta-tomcat-5_jakarta-tomcat-5 (Type: Build) State: Failed Elapsed: 0 hours, 0 minutes, 28 seconds Command Line: java -Djava.awt.headless=true -Xbootclasspath/p:/usr/local/gump/public/workspace/xml-xerces2/java/build/xercesImpl.jar:/usr/local/gump/public/workspace/xml-xerces2/java/build/xml-apis.jar:/usr/local/gump/public/workspace/xml-xalan/java/build/xalan-unbundled.jar:/usr/local/gump/public/workspace/xml-commons/java/external/build/xml-apis.jar org.apache.tools.ant.Main -verbose -Dgump.merge=/usr/local/gump/public/gump/work/merge.xml -Dbuild.sysclasspath=only -Dtomcat33.home=*Unset* -Djsp-api.jar=/usr/local/gump/public/workspace/jakarta-servletapi-5/jsr152/dist/lib/jsp-api.jar -Djmx.jar=/usr/local/gump/packages/jmx-1_2-ri/lib/jmxri.jar -Djmx.home=/usr/local/gump/packages/jmx-1_2-ri -Djdbc20ext.jar=/usr/local/gump/packages/jdbc2_0/jdbc2_0-stdext.jar -Dregexp.jar=/usr/local/gump/public/workspace/jakarta-regexp/build/jakarta-regexp-20040620.jar -Dmail.home=/usr/local/gump/packages/javamail-1.3 -Dant.home=/usr/local/gump/public/workspace/ant/dist -Dsite2.home=/usr/local/gump/public/workspace/jakarta-site2 -Dcommons-collections.jar=/usr/local/gump/public/workspace/jakarta-commons/collections/build/commons-collections-20040620.jar -Dxml-apis.jar=/usr/local/gump/public/workspace/xml-xerces2/java/build/xml-apis.jar -DxercesImpl.jar=/usr/local/gump/public/workspace/xml-xerces2/java/build
Bug report for Tomcat 3 [2004/06/20]
+---+ | Bugzilla Bug ID | | +-+ | | Status: UNC=Unconfirmed NEW=New ASS=Assigned| | | OPN=ReopenedVER=Verified(Skipped Closed/Resolved) | | | +-+ | | | Severity: BLK=Blocker CRI=CriticalMAJ=Major | | | | MIN=Minor NOR=Normal ENH=Enhancement | | | | +-+ | | | | Date Posted | | | | | +--+ | | | | | Description | | | | | | | | 2350|Ver|Nor|2001-06-27|ServletConfig.getInitParameter() requires url-patt| | 2478|Opn|Cri|2001-07-06|Passing Session variables between JSP's and Servle| | 4551|Opn|Nor|2001-10-31|Ctx( /tt01 ): IOException in: R( /tt01 + /com/abc/| | 4980|New|Min|2001-11-20|Startup message indicates incorrect log file | | 4994|New|Nor|2001-11-21|Tomcat needs a mechanism for clean and certain shu| | 5064|New|Cri|2001-11-25|Socket write error when include files is more than| | 5108|New|Maj|2001-11-26|Docs for Tomcat 3.2.x appear to be for Tomcat 3.3 | | 5137|New|Nor|2001-11-27|Null pointer in class loader after attempting to r| | 5160|Unc|Maj|2001-11-28|'IllegalStateException' | | 5331|New|Nor|2001-12-09|getPathInfo vs URL normalization | | 5510|New|Blk|2001-12-19|How to call ejb deployed in JBoss from Tomcat serv| | 5756|New|Nor|2002-01-08|jspc.bat exits with wrong ERRORLEVEL | | 5797|New|Nor|2002-01-10|UnCatched ? StringIndexOutOfBoundsException: Strin| | 6027|New|Maj|2002-01-25|Tomcat Automatically shuts down as service | | 6168|New|Blk|2002-02-01|IllegalStateException | | 6451|New|Cri|2002-02-14|Stackoverflow | | 6478|New|Enh|2002-02-14|Default Tomcat Encoding | | 6488|Ver|Maj|2002-02-15|Error: 304. Apparent bug in default ErrorHandler c| | 6648|New|Nor|2002-02-25|jakarta-servletapi build with java 1.4 javadoc err| | 6702|New|Cri|2002-02-27|win 2k services not working | | 6796|New|Cri|2002-03-01|Tomcat dies periodically | | 6989|New|Maj|2002-03-08|Unable to read tld file during parallel JSP compil| | 7013|New|Cri|2002-03-10|Entering a servlet path with non-ISO8859-1 charact| | 7227|New|Nor|2002-03-19|error-code directive don't work | | 7626|New|Nor|2002-03-29|classloader not working properly | | 7652|New|Cri|2002-04-01|Tomcat stalls periodically| | 7785|New|Blk|2002-04-06|tomcat bug in context reloading | | 7863|New|Maj|2002-04-09|I have a problem when running Tomcat with IIS | | 8187|New|Cri|2002-04-17|Errors when Tomcat used with MS Access database | | 8239|New|Cri|2002-04-18|Resource temporary unavailable| | 8263|New|Cri|2002-04-18|url-pattern easy to circumvent| | 9250|New|Maj|2002-05-20|outOfMemoryError | | 9367|New|Maj|2002-05-23|HttpSessionBindingEvent not thrown for HttpSession| | 9390|New|Nor|2002-05-24|jasper compilation error in tomcat| | 9480|New|Nor|2002-05-29|Data connection pooling | | 9607|New|Maj|2002-06-04|precompile JSP| | 9737|Ver|Nor|2002-06-10|ArrayIndexOutOfBoundsException when sending just p| |10047|New|Cri|2002-06-20|IllegalStateException | |10202|New|Maj|2002-06-25|Tomcat is not responding in time | |10357|Unc|Blk|2002-06-30|java.lang.IllegalArgumentException: Short Read| |10406|New|Cri|2002-07-02|IllegalStateException | |11087|New|Blk|2002-07-23|IllegalStateException | |11286|New|Maj|2002-07-30|Tomcat threads not respond if increase JVM size | |11466|New|Nor|2002-08-05|ContextManager: SocketException reading request | |12156|New|Cri|2002-08-29|Apache and Tomcat 3.3.1 Interworking problem | |12194|New|Maj|2002-08-30|Tomcat does not send WWW-Authenticate header | |12475|New|Nor|2002-09-10|CPU Usage is 0%, Tomcat doesn't response | |12852|New|Nor|2002-09-20|May be error in _jspService() - out.flushBuffers(| |13706|New|Nor|2002-10-16|Many Processs Java / TOMCAT in a PC with Linux Con| |14386|New|Maj|2002-11-08|Date headers corrupted using setDateHeader| |15632|New|Nor|2002-12-23|Problem with the Tomcat Sessions Parameter on URL |
Bug report for Tomcat 4 [2004/06/20]
+---+ | Bugzilla Bug ID | | +-+ | | Status: UNC=Unconfirmed NEW=New ASS=Assigned| | | OPN=ReopenedVER=Verified(Skipped Closed/Resolved) | | | +-+ | | | Severity: BLK=Blocker CRI=CriticalMAJ=Major | | | | MIN=Minor NOR=Normal ENH=Enhancement | | | | +-+ | | | | Date Posted | | | | | +--+ | | | | | Description | | | | | | | | 3614|Opn|Nor|2001-09-14|bug in manager webapp | | 3839|Opn|Maj|2001-09-26|Problem bookmarking login page| | 3888|Opn|Blk|2001-09-30|WebappClassLoader: Lifecycle error : CL stopped | | 4138|Opn|Nor|2001-10-12|Processor threads have inconsistent ClassLoader st| | 4352|Ass|Nor|2001-10-22|JDBCRealm does not work with CLIENT-CERT auth-meth| | 5329|New|Nor|2001-12-08|NT Service exits startup before Tomcat is finished| | 5795|New|Enh|2002-01-10|Catalina Shutdown relies on localhost causing prob| | 5829|New|Enh|2002-01-13|StandardManager needs to cope with sessions throwi| | 5858|New|Enh|2002-01-15|Add tomcat dir to java.library.path | | 5985|New|Enh|2002-01-23|Tomcat should perform a more restrictive validatio| | 6218|Opn|Nor|2002-02-04|Relative links broken for servlets| | 6229|New|Enh|2002-02-04|Need way to specify where to write catalina.out | | 6582|New|Min|2002-02-20|Sample code does not match behavior | | 6600|Opn|Enh|2002-02-20|enodeURL adds 'jsession' when 'isRequestedSessionI| | 6614|New|Enh|2002-02-21|Have Bootstrap and StandardClassLoader use the sam| | 6671|New|Enh|2002-02-25|Simple custom tag example uses old declaration sty| | 7043|New|Enh|2002-03-12|database user and password for JDBC Based Store | | 7360|New|Nor|2002-03-22|res-sharing-scope not supported | | 7374|New|Enh|2002-03-22|Apache Tomcat/4.0.1 message on standard output| | 7676|New|Enh|2002-04-02|Allow name property to use match experssions in h| | 7689|New|Min|2002-04-02|Performance problem with Xerces parser| | 7723|New|Enh|2002-04-03|[patch] additional factory for org.apache.naming.f| | 7831|New|Nor|2002-04-08|[PATCH] JNDIRealm does not work with CLIENT-CERT a| | 7880|Ver|Cri|2002-04-09|If a TLV flags flags an error during the translati| | 8026|New|Enh|2002-04-12|Exceptions in StandardHostDeployer.addChild are lo| | 8275|Ver|Min|2002-04-18|ContextConfig.start() attempts to create a $CATALI| | 8323|New|Enh|2002-04-20|No support for running the 64 bit JVM | | 8343|New|Enh|2002-04-21|adding a absorber logger class to org.apache.ca| | 8441|New|Enh|2002-04-23|Command line files for NetWare| | 8541|New|Nor|2002-04-26|IIS redirector URL-encodes cookie values | | 8705|New|Enh|2002-05-01|SessionListener should extend EventListener | | 8744|New|Enh|2002-05-02|No way to configure/extend runtime classloaders. | | 8776|New|Enh|2002-05-03|The session url encoding under somce circumstances| | 9027|New|Cri|2002-05-13|The Tomcat Servlet Container use the identity spec| | 9050|Ver|Nor|2002-05-13|GET Query Parameters Require an Equal Sign| | 9227|New|Enh|2002-05-19|Allow an empty value of a pathname in the Standard| | 9456|New|Enh|2002-05-28|Problem saving server.xml file: invalid XML markup| | 9511|New|Enh|2002-05-30|Object instantiation optimization in StandardSessi| | 9629|New|Enh|2002-06-05|Fix ServletContext.getResourcePaths to match spec | | 9745|New|Enh|2002-06-10|extern cache mgt bug for conditionally dynamic pag| | 9852|New|Enh|2002-06-13|Odd Digest and Realm Behaviour| | 9856|New|Enh|2002-06-14|sendError(404) fails after getOutputStream() is ca| |10021|New|Enh|2002-06-19|Include upgrade option in installer | |10026|Opn|Nor|2002-06-19|manager/stop and manager/remove | |10060|New|Enh|2002-06-20|Make the common and shared class loaders look in c| |10120|New|Enh|2002-06-21|Custom realm and shared instalation. | |10225|New|Enh|2002-06-25|ANT Tasks Error Situation | |10335|New|Enh|2002-06-28|[RFE,patch] Make JAASRealm more flexible | |10385|Opn|Nor|2002-07-01|SSI-Servlet produces invalid character encoding in| |10457|New|Enh|2002-07-03|Patch submission for DefaultServlet/WebdavServlet | |10526|New|Enh|2002-07-06|Authenticators do not always cache the Principal |
Bug report for Watchdog [2004/06/20]
+---+ | Bugzilla Bug ID | | +-+ | | Status: UNC=Unconfirmed NEW=New ASS=Assigned| | | OPN=ReopenedVER=Verified(Skipped Closed/Resolved) | | | +-+ | | | Severity: BLK=Blocker CRI=CriticalMAJ=Major | | | | MIN=Minor NOR=Normal ENH=Enhancement | | | | +-+ | | | | Date Posted | | | | | +--+ | | | | | Description | | | | | | | | 278|Unc|Nor|2000-12-04|Bug in GetParameterValuesTestServlet.java file Bug| | 279|Unc|Nor|2000-12-04|Logical Error in GetParameterValuesTestServlet Bug| | 469|Unc|Nor|2001-01-17|in example-taglib.tld urn should be uri BugRat| | 470|Unc|Nor|2001-01-17|FAIL positiveForward.jsp and positiveInclude.jsp B| | 9634|New|Enh|2002-06-05|No tests exist for ServletContext.getResourcePaths| |10703|New|Enh|2002-07-11|Need to test getRequestURI after RequestDispatcher| |11336|New|Enh|2002-07-31|Test wrapped path methods with RD.foward()| |11663|New|Maj|2002-08-13|JSP precompile tests rely on Jasper specific behav| |11664|New|Maj|2002-08-13|A sweep is needed of all Watchdog 4.0 tag librarie| |11665|New|Maj|2002-08-13|ServletToJSPErrorPageTest and ServletToServletErro| |11666|New|Maj|2002-08-13|SetBufferSize_1TestServlet is invalid.| |14004|New|Maj|2002-10-28|Incorrent behaviour of all attribute-related lifec| |15504|New|Nor|2002-12-18|JSP positiveGetValues test relies on order preserv| |24649|New|Nor|2003-11-12|getRemoteHost fails when agent has uppercase chara| |29398|New|Nor|2004-06-04|Update site and note current status | +-+---+---+--+--+ | Total 15 bugs | +---+ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: cvs commit: jakarta-tomcat-catalina/catalina/src/share/org/apache/coyote/tomcat5 CoyoteResponse.java
Bill, Thanks for implementing a patch for TC5. I looked at porting it to TC4 and noticed that the implementation of toAbsolute() is very different. Looking through the CVS logs, the TC4 implementation used to be the same as TC5 but you changed it back in Oct 2002. I can see pros and cons of both implementations. Is one significantly better than the other and if so is it worth changing the other one? If not, I propose to add a 'location.startsWith(mailto:;)' test to TC4 to fix bug 18147. What do you think? Thanks, Mark -Original Message- From: Bill Barker [mailto:[EMAIL PROTECTED] Sent: Saturday, June 19, 2004 9:47 PM To: Tomcat Developers List Subject: Re: cvs commit: jakarta-tomcat-catalina/catalina/src/share/org/apache/coyote/t omcat5 CoyoteResponse.java - Original Message - From: Mark Thomas [EMAIL PROTECTED] To: 'Tomcat Developers List' [EMAIL PROTECTED] Sent: Saturday, June 19, 2004 11:50 AM Subject: RE: cvs commit: jakarta-tomcat-catalina/catalina/src/share/org/apache/coyote/tomcat5 CoyoteResponse.java Fair point - I'll revert it now. Is your objection to the concept of supporting mailto in redirect or just this bad implementation of it? I have seen some uses of this and some users must want to do it or the bug report would never have been filed. I am happy to work on a better implementation. I don't care one way or the other about supporting mailto in a redirect. I believe that the check used to be done by testing if a o.a.t.u.net.URL could be constructed from the 'location', and consider it absolute if it could be. A well-formed mailto URI would pass this test. This one would also fail something like 'foobar.html?uri=http://myserver/myapp', which currently passes. The current code is supposed to be an optimization to save the time (and garbage) of parsing a URI that just gets thrown away. I could probably live with 'location.startsWith(mailto:;)' (and, even, news:; :) as a compromise. Mark -Original Message- From: Bill Barker [mailto:[EMAIL PROTECTED] Sent: Saturday, June 19, 2004 7:56 PM To: Tomcat Developers List Subject: Re: cvs commit: jakarta-tomcat-catalina/catalina/src/share/org/apache/coyote/t omcat5 CoyoteResponse.java - Original Message - From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Saturday, June 19, 2004 11:14 AM Subject: cvs commit: jakarta-tomcat-catalina/catalina/src/share/org/apache/coyote/tomcat5 CoyoteResponse.java markt 2004/06/19 11:14:23 Modified:catalina/src/share/org/apache/coyote/tomcat5 CoyoteResponse.java Log: Fix bug 18147. Prevent mailto URLs from being mangled in re-directs. - Ported from TC4 Big huge -1. Please revert this, since it is questionable that it fixes any real problem, and it breaks plenty of things (e.g. sendRedirect(mailto.html)). - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: cvs commit: jakarta-tomcat-catalina/catalina/src/share/org/apache/coyote/tomcat5 CoyoteResponse.java
- Original Message - From: Mark Thomas [EMAIL PROTECTED] To: 'Tomcat Developers List' [EMAIL PROTECTED] Sent: Sunday, June 20, 2004 9:26 AM Subject: RE: cvs commit: jakarta-tomcat-catalina/catalina/src/share/org/apache/coyote/tomcat5 CoyoteResponse.java Bill, Thanks for implementing a patch for TC5. I looked at porting it to TC4 and noticed that the implementation of toAbsolute() is very different. Looking through the CVS logs, the TC4 implementation used to be the same as TC5 but you changed it back in Oct 2002. I can see pros and cons of both implementations. Is one significantly better than the other and if so is it worth changing the other one? If not, I propose to add a 'location.startsWith(mailto:;)' test to TC4 to fix bug 18147. What do you think? My change back in 2002 was from java.net.URL to o.a.t.u.net.URL. It was Remy that didn't like all the garbage it produced for TC5 :). Now, TC5 is probably better than TC4. I also don't think that this is a critical call, so I don't think it really matters. The check for 'is an absolute URL' is pretty much the same for well-formed URLs, but TC5 doesn't generate garbage in checking. It's true that TC5 doesn't correctly handle the case of 'sendRedirect(//www.yahoo.com)', but I doubt that it is that big of an issue. To keep the current method of TC4, I'd go with: if(url.getAuthority() == null) return location (we might as well allow 'news:' as well :). Thanks, Mark -Original Message- From: Bill Barker [mailto:[EMAIL PROTECTED] Sent: Saturday, June 19, 2004 9:47 PM To: Tomcat Developers List Subject: Re: cvs commit: jakarta-tomcat-catalina/catalina/src/share/org/apache/coyote/t omcat5 CoyoteResponse.java - Original Message - From: Mark Thomas [EMAIL PROTECTED] To: 'Tomcat Developers List' [EMAIL PROTECTED] Sent: Saturday, June 19, 2004 11:50 AM Subject: RE: cvs commit: jakarta-tomcat-catalina/catalina/src/share/org/apache/coyote/tomcat5 CoyoteResponse.java Fair point - I'll revert it now. Is your objection to the concept of supporting mailto in redirect or just this bad implementation of it? I have seen some uses of this and some users must want to do it or the bug report would never have been filed. I am happy to work on a better implementation. I don't care one way or the other about supporting mailto in a redirect. I believe that the check used to be done by testing if a o.a.t.u.net.URL could be constructed from the 'location', and consider it absolute if it could be. A well-formed mailto URI would pass this test. This one would also fail something like 'foobar.html?uri=http://myserver/myapp', which currently passes. The current code is supposed to be an optimization to save the time (and garbage) of parsing a URI that just gets thrown away. I could probably live with 'location.startsWith(mailto:;)' (and, even, news:; :) as a compromise. Mark -Original Message- From: Bill Barker [mailto:[EMAIL PROTECTED] Sent: Saturday, June 19, 2004 7:56 PM To: Tomcat Developers List Subject: Re: cvs commit: jakarta-tomcat-catalina/catalina/src/share/org/apache/coyote/t omcat5 CoyoteResponse.java - Original Message - From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Saturday, June 19, 2004 11:14 AM Subject: cvs commit: jakarta-tomcat-catalina/catalina/src/share/org/apache/coyote/tomcat5 CoyoteResponse.java markt 2004/06/19 11:14:23 Modified:catalina/src/share/org/apache/coyote/tomcat5 CoyoteResponse.java Log: Fix bug 18147. Prevent mailto URLs from being mangled in re-directs. - Ported from TC4 Big huge -1. Please revert this, since it is questionable that it fixes any real problem, and it breaks plenty of things (e.g. sendRedirect(mailto.html)). - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] This message is intended only for the use of the person(s) listed above as the intended recipient(s), and may contain information that is PRIVILEGED and CONFIDENTIAL. If you are not an intended recipient, you may not read, copy, or distribute this message or any attachment. If you received this communication in error, please notify us immediately by e-mail and then delete all copies of this message and any attachments. In addition you should be aware that ordinary (unencrypted) e-mail sent through the Internet is not secure. Do not send confidential or sensitive information, such as social
cvs commit: jakarta-tomcat-connectors/coyote/src/java/org/apache/coyote/tomcat4 CoyoteResponse.java
markt 2004/06/20 13:58:31
Modified:coyote/src/java/org/apache/coyote/tomcat4
CoyoteResponse.java
Log:
Fix bug 18147. Prevent mailto URLs from being mangled in re-directs.
- With thanks to Bill Barker for the help and advice
Revision ChangesPath
1.38 +5 -1
jakarta-tomcat-connectors/coyote/src/java/org/apache/coyote/tomcat4/CoyoteResponse.java
Index: CoyoteResponse.java
===
RCS file:
/home/cvs/jakarta-tomcat-connectors/coyote/src/java/org/apache/coyote/tomcat4/CoyoteResponse.java,v
retrieving revision 1.37
retrieving revision 1.38
diff -u -r1.37 -r1.38
--- CoyoteResponse.java 19 Jun 2004 18:53:44 - 1.37
+++ CoyoteResponse.java 20 Jun 2004 20:58:31 - 1.38
@@ -1255,6 +1255,10 @@
URL url = null;
try {
url = new URL(location);
+
+if (url.getAuthority() == null)
+return location;
+
} catch (MalformedURLException e1) {
HttpServletRequest hreq =
(HttpServletRequest) request.getRequest();
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
DO NOT REPLY [Bug 18147] - Using HttpServletResponse.sendRedirect() with a mailto loses the 'to' information
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT http://issues.apache.org/bugzilla/show_bug.cgi?id=18147. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE. http://issues.apache.org/bugzilla/show_bug.cgi?id=18147 Using HttpServletResponse.sendRedirect() with a mailto loses the 'to' information [EMAIL PROTECTED] changed: What|Removed |Added Status|REOPENED|RESOLVED Resolution||FIXED --- Additional Comments From [EMAIL PROTECTED] 2004-06-20 21:00 --- This has now been fixed in TC4 and TC5. Thanks to Bill Barker for the help and advice. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[GUMP@brutus]: jakarta-tomcat-5/jakarta-tomcat-5 failed
To whom it may engage... This is an automated request, but not an unsolicited one. For more information please visit http://gump.apache.org/nagged.html, and/or contact folk at [EMAIL PROTECTED] Project jakarta-tomcat-5 has an issue affecting its community integration, and has been outstanding for 2 runs. Project State : 'Failed', Reason 'Build Failed' Full details are available at: http://brutus.apache.org:8080/gump/jakarta-tomcat-5/jakarta-tomcat-5/index.html That said, some snippets follow: The following annotations were provided: -DEBUG- Jar [naming-resources.jar] identifier set to jar basename: [naming-resources] -DEBUG- Jar [servlets-default.jar] identifier set to jar basename: [servlets-default] -DEBUG- Jar [naming-common.jar] identifier set to jar basename: [naming-common] -DEBUG- Jar [catalina.jar] identifier set to jar basename: [catalina] -DEBUG- Jar [bootstrap.jar] identifier set to jar basename: [bootstrap] -DEBUG- Jar [servlets-common.jar] identifier set to jar basename: [servlets-common] -DEBUG- Jar [servlets-invoker.jar] identifier set to jar basename: [servlets-invoker] -INFO- Dependency on javamail exists, no need to add for property mail.jar. -INFO- Dependency on jaf exists, no need to add for property activation.jar. -INFO- Dependency on jakarta-servletapi-5-servlet exists, no need to add for property servlet-api.jar. -INFO- Dependency on jakarta-servletapi-5-jsp exists, no need to add for property jsp-api.jar. -INFO- Dependency on xml-xerces exists, no need to add for property xercesImpl.jar. -INFO- Dependency on xml-xerces exists, no need to add for property xml-apis.jar. -INFO- Dependency on jakarta-tomcat-util exists, no need to add for property tomcat-util.jar. -INFO- Dependency on commons-el exists, no need to add for property commons-el.jar. -INFO- Dependency on commons-logging exists, no need to add for property commons-logging-api.jar. -INFO- Dependency on commons-modeler exists, no need to add for property commons-modeler.jar. -INFO- Dependency on ant exists, no need to add for property ant.home. -INFO- Dependency on jsse exists, no need to add for property jsse.home. -INFO- Dependency on jmx exists, no need to add for property jmx.home. -INFO- Dependency on jmx exists, no need to add for property jmx.jar. -INFO- Dependency on jmx exists, no need to add for property jmx-tools.jar. -INFO- Dependency on jndi exists, no need to add for property jndi.home. -INFO- Dependency on jakarta-regexp exists, no need to add for property regexp.home. -INFO- Dependency on jakarta-regexp exists, no need to add for property regexp.jar. -INFO- Dependency on javamail exists, no need to add for property mail.home. -INFO- Dependency on jakarta-tomcat-coyote exists, no need to add for property tomcat-coyote.home. -INFO- Dependency on jakarta-tomcat-jasper_tc5 exists, no need to add for property jasper.home. -INFO- Dependency on jaf exists, no need to add for property activation.home. -INFO- Dependency on commons-modeler exists, no need to add for property commons-modeler.home. -INFO- Dependency on commons-daemon exists, no need to add for property commons-daemon.jsvc.tar.gz. -INFO- Dependency on jakarta-struts exists, no need to add for property struts.home. -INFO- Enable verbose output, due to 1 previous error(s). -INFO- Failed with reason build failed -INFO- Enable debug output, due to build failure. The following work was performed: http://brutus.apache.org:8080/gump/jakarta-tomcat-5/jakarta-tomcat-5/gump_work/build_jakarta-tomcat-5_jakarta-tomcat-5.html Work Name: build_jakarta-tomcat-5_jakarta-tomcat-5 (Type: Build) State: Failed Elapsed: 0 hours, 0 minutes, 28 seconds Command Line: java -Djava.awt.headless=true -Xbootclasspath/p:/usr/local/gump/public/workspace/xml-xerces2/java/build/xercesImpl.jar:/usr/local/gump/public/workspace/xml-xerces2/java/build/xml-apis.jar:/usr/local/gump/public/workspace/xml-xalan/java/build/xalan-unbundled.jar:/usr/local/gump/public/workspace/xml-commons/java/external/build/xml-apis.jar org.apache.tools.ant.Main -verbose -Dgump.merge=/usr/local/gump/public/gump/work/merge.xml -Dbuild.sysclasspath=only -Dtomcat33.home=*Unset* -Djsp-api.jar=/usr/local/gump/public/workspace/jakarta-servletapi-5/jsr152/dist/lib/jsp-api.jar -Djmx.jar=/usr/local/gump/packages/jmx-1_2-ri/lib/jmxri.jar -Djmx.home=/usr/local/gump/packages/jmx-1_2-ri -Djdbc20ext.jar=/usr/local/gump/packages/jdbc2_0/jdbc2_0-stdext.jar -Dregexp.jar=/usr/local/gump/public/workspace/jakarta-regexp/build/jakarta-regexp-20040620.jar -Dmail.home=/usr/local/gump/packages/javamail-1.3 -Dant.home=/usr/local/gump/public/workspace/ant/dist -Dsite2.home=/usr/local/gump/public/workspace/jakarta-site2 -Dcommons-collections.jar=/usr/local/gump/public/workspace/jakarta-commons/collections/build/commons-collections-20040620.jar -Dxml-apis.jar=/usr/local/gump/public/workspace/xml-xerces2/java/build/xml-apis.jar -DxercesImpl.jar=/usr/local/gump
