Re: inprocess Tomcat/apache via mod_jk
Hi, Thanks a lot. I am really appreciated for your reply. How about the worker MPM? My team is running the httpd.worker on RHEL4. The current setting is: StartServers 1 ServerLimit 1 MaxClients 64 MinSpareThreads 32 MaxSpareThreads 64 ThreadsPerChild 64 Does the inprocess Tomcat 5.5.9 work for the worker MPM? thanks, Christine --- Bill Barker <[EMAIL PROTECTED]> wrote: > Well, inprocess doesn't really work for any MPM on > *nix systems (e.g. with > the prefork MPM, you end up with MaxChild copies of > Tomcat running :). As a > result, there just hasn't been that much interest in > implementing (or even > back-porting) a feature that only works on Windows > and NetWare. > > > - Original Message - > From: "Christine Ho" <[EMAIL PROTECTED]> > To: > Sent: Tuesday, August 16, 2005 3:30 PM > Subject: inprocess Tomcat/apache via mod_jk > > > Hi, >I have posted this email a month ago. I just > wonder > if any developer on mod_jk can answer my question. I > would like to have inprocess Tomcat 5.5.9 running in > Apache 2.x if possible. > > thanks again, > Christine > > > Hi, >I tried to setup Tomcat 5.5.9 running inside the > apache server 2.x via the mod_jk on RHEL4. I got the > following error: > [debug] open_jvm2::jk_jni_worker.c (1055): JVM > created > [emerg] get_bridge_object::jk_jni_worker.c (1097): > Can't find class > org/apache/tomcat/modules/server/JNIEndpoint > > I looked at the mod_jk source codes and found out > that > the mod_jk supports the TC32_BRIDGE_TYPE and > TC33_BRIDGE_TYPE. It doesnt support bridge type of > tomcat 4.x and up. Plus the tomcat 5.5.9 doesnt have > the JNIEndpoint.class. > > However, it seems to me that the deprecated mod_jk2 > supports bridge type of tomcat 4.x and up because it > tries to instantiate the class > org/apache/jk/apr/TomcatStarter.class which exists > in > tomcat-ajp.jar. > > I really dont understand why the mod_jk supports > tomcat 3.x only whereas the deprecated mod_jk2 > supports tomcat 4.x and 5.x. Can somebody please > tell > me why? > > Also is it easy to have mod_jk to support > TC55_BRIDGE_TYPE? Based on the mod_jk source codes > jk_jni_worker.c, I think I just need to define the > TC55_JAVA_BRIDGE_CLASS_NAME to be > org/apache/jk/apr/TomcatStarter.class and then > assign > it to the btype. Is it just that simple? > > Another question is what the disadvantages of > running > tomcat inside the apache are. I googled and it seems > to me that not too many people try to run inprocess > tomcat inside apache. I would be interested in > adding > the 5.5 bridge type to the mod_jk. > > thanks, > Christine > > > __ > Do You Yahoo!? > Tired of spam? Yahoo! Mail has the best spam > protection around > http://mail.yahoo.com > > - > To unsubscribe, e-mail: > [EMAIL PROTECTED] > For additional commands, e-mail: > [EMAIL PROTECTED] > > > > > > This message is intended only for the use of the > person(s) listed above as the intended recipient(s), > and may contain information that is PRIVILEGED and > CONFIDENTIAL. If you are not an intended recipient, > you may not read, copy, or distribute this message > or any attachment. If you received this > communication in error, please notify us immediately > by e-mail and then delete all copies of this message > and any attachments. > > In addition you should be aware that ordinary > (unencrypted) e-mail sent through the Internet is > not secure. Do not send confidential or sensitive > information, such as social security numbers, > account numbers, personal identification numbers and > passwords, to us via ordinary (unencrypted) e-mail. > > > - > To unsubscribe, e-mail: > [EMAIL PROTECTED] > For additional commands, e-mail: > [EMAIL PROTECTED] > > Start your day with Yahoo! - make it your home page http://www.yahoo.com/r/hs - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
inprocess Tomcat/apache via mod_jk
Hi, I have posted this email a month ago. I just wonder if any developer on mod_jk can answer my question. I would like to have inprocess Tomcat 5.5.9 running in Apache 2.x if possible. thanks again, Christine Hi, I tried to setup Tomcat 5.5.9 running inside the apache server 2.x via the mod_jk on RHEL4. I got the following error: [debug] open_jvm2::jk_jni_worker.c (1055): JVM created [emerg] get_bridge_object::jk_jni_worker.c (1097): Can't find class org/apache/tomcat/modules/server/JNIEndpoint I looked at the mod_jk source codes and found out that the mod_jk supports the TC32_BRIDGE_TYPE and TC33_BRIDGE_TYPE. It doesnt support bridge type of tomcat 4.x and up. Plus the tomcat 5.5.9 doesnt have the JNIEndpoint.class. However, it seems to me that the deprecated mod_jk2 supports bridge type of tomcat 4.x and up because it tries to instantiate the class org/apache/jk/apr/TomcatStarter.class which exists in tomcat-ajp.jar. I really dont understand why the mod_jk supports tomcat 3.x only whereas the deprecated mod_jk2 supports tomcat 4.x and 5.x. Can somebody please tell me why? Also is it easy to have mod_jk to support TC55_BRIDGE_TYPE? Based on the mod_jk source codes jk_jni_worker.c, I think I just need to define the TC55_JAVA_BRIDGE_CLASS_NAME to be org/apache/jk/apr/TomcatStarter.class and then assign it to the btype. Is it just that simple? Another question is what the disadvantages of running tomcat inside the apache are. I googled and it seems to me that not too many people try to run inprocess tomcat inside apache. I would be interested in adding the 5.5 bridge type to the mod_jk. thanks, Christine __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Support JSS in Tomcat
Hi, I am working for Redhat and I dont think this is a problem of contributing the codes to the ASF. What kind of procedures I need to follow in order to submit my codes? thanks, Christine --- Bill Barker <[EMAIL PROTECTED]> wrote: > > - Original Message ----- > From: "Christine Ho" <[EMAIL PROTECTED]> > To: "Tomcat Developers List" > ; > <[EMAIL PROTECTED]> > Sent: Friday, July 22, 2005 10:22 AM > Subject: Re: Support JSS in Tomcat > > > > >--- Bill Barker <[EMAIL PROTECTED]> wrote: > >> > >> I don't think that anybody is proposing bundling > >> jss34.jar with Tomcat. It > >> would be an optional dependency much like PureTLS > is > >> now. Anybody that > >> wanted to use it would have to download it from > >> mozilla.org and install it. > >> And as Remy pointed out, Christine would have to > >> agree to donate her code to > >> the ASF, at which point it would be licensed > under > >> ASFL. > >> > > > >I have no problem to donate the codes to the ASF. I > >just need the approval from my manager because the > >code is owned by the company. > > Since the code is owned by the company, you should > probably take a look at > http://www.apache.org/licenses/#grants. I'm not > trying to be a hard-ass, > it's just that I have an irrational fear of lawyers > ;-). > > >Besides jss.jar, people also need to download two > >shared libraries, nspr and nss from mozilla.org > >because JSS is not pure JAVA implementation. > > > >Christine > > > >> My reading of MPL-1.1 (again IANAL) is that: > >> import org.mozilla.some.package.SomeClass; > >> > >> isn't viral, so that there isn't any problem with > >> having > >> o.a.t.u.net.jss.JSSServerSocketFactory with an > ASF > >> license. > >> > > > > > > > > > > > > > This message is intended only for the use of the > person(s) listed above as the intended recipient(s), > and may contain information that is PRIVILEGED and > CONFIDENTIAL. If you are not an intended recipient, > you may not read, copy, or distribute this message > or any attachment. If you received this > communication in error, please notify us immediately > by e-mail and then delete all copies of this message > and any attachments. > > In addition you should be aware that ordinary > (unencrypted) e-mail sent through the Internet is > not secure. Do not send confidential or sensitive > information, such as social security numbers, > account numbers, personal identification numbers and > passwords, to us via ordinary (unencrypted) e-mail. > > > - > To unsubscribe, e-mail: > [EMAIL PROTECTED] > For additional commands, e-mail: > [EMAIL PROTECTED] > > Start your day with Yahoo! - make it your home page http://www.yahoo.com/r/hs - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Support JSS in Tomcat
--- Bill Barker <[EMAIL PROTECTED]> wrote: > > I don't think that anybody is proposing bundling > jss34.jar with Tomcat. It > would be an optional dependency much like PureTLS is > now. Anybody that > wanted to use it would have to download it from > mozilla.org and install it. > And as Remy pointed out, Christine would have to > agree to donate her code to > the ASF, at which point it would be licensed under > ASFL. > I have no problem to donate the codes to the ASF. I just need the approval from my manager because the code is owned by the company. Besides jss.jar, people also need to download two shared libraries, nspr and nss from mozilla.org because JSS is not pure JAVA implementation. Christine > My reading of MPL-1.1 (again IANAL) is that: > import org.mozilla.some.package.SomeClass; > > isn't viral, so that there isn't any problem with > having > o.a.t.u.net.jss.JSSServerSocketFactory with an ASF > license. > Start your day with Yahoo! - make it your home page http://www.yahoo.com/r/hs - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Support JSS in Tomcat
Thanks. It works. JSS can be used under either Mozilla Public License (MPL) or LGPL. Is MPL or LGPL compatible with ASF license? The good thing about JSS is that it is FIPS-140 compliant. Christine --- Bill Barker <[EMAIL PROTECTED]> wrote: > The element is deprecated in TC 5.x. In > particular, you can't use > it to specify a SocketFactory. > > You pass the FQN of your SSLImplementation to the > Connector with something > like: >secure="true" scheme="https" > sslProtocol="SSL" > > sSLImplementation="org.apache.tomcat.util.net.jss.JSSImplementationClass" > /> > > I'd be happy to review your implementation (assuming > that the licensing is > compatible with ASF) if you want to submit it. The > easiest way is to open a > BZ enhancement request and attach your code to that. > > - Original Message - > From: "Christine Ho" <[EMAIL PROTECTED]> > To: > Sent: Wednesday, July 20, 2005 4:54 PM > Subject: Support JSS in Tomcat > > > Hi, > Tomcat 5.5.x supports JSSE only. I am working on > web > application which uses JSS > (http://www.mozilla.org/projects/security/pki/jss/javadoc/) > I need to run the web application on Tomcat 5.x. I > implemented the JSSSocketFactory.java, > JSSSupport.java > etc in the new package called > org.apache.tomcat.util.net.jss. I tried to specify > the > SocketFactory class in server.xml but it doesnt > work. > I thought we can do something like that: > > className="org.apache.catalina.connector.http.HttpConnector" >port="8443" minProcessors="5" > maxProcessors="75" >enableLookups="true" >acceptCount="10" debug="0" scheme="https" > secure="true"> > className="org.apache.tomcat.util.net.jss.JSSServerSocketFactory" >clientAuth="false" protocol="SSL"/> > > > It doesnt work at all. I looked at the source code > and > found out that SSLImplementationName is always null. > Currently, I have to change the implementations > array > in SSLImplementation.java to include my > implementation > class which is JSSImplementationClass. Then > recompiled > the tomcat and it works. I just wonder if I overlook > some of the configuration parameters in server.xml. > If > the server.xml in tomcat 5.5 does not support the > Factory parameter, then I would like to modify the > codes to support this feature. Therefore i dont need > to recompile the tomcat to include my > SSLServerSocketFactory implementation. Also I would > like to contribute my codes for the JSS > ServerSocketFactory implementation if you are > interested. > > Christine > > > > > Start your day with Yahoo! - make it your home page > http://www.yahoo.com/r/hs > > > - > To unsubscribe, e-mail: > [EMAIL PROTECTED] > For additional commands, e-mail: > [EMAIL PROTECTED] > > > > > > This message is intended only for the use of the > person(s) listed above as the intended recipient(s), > and may contain information that is PRIVILEGED and > CONFIDENTIAL. If you are not an intended recipient, > you may not read, copy, or distribute this message > or any attachment. If you received this > communication in error, please notify us immediately > by e-mail and then delete all copies of this message > and any attachments. > > In addition you should be aware that ordinary > (unencrypted) e-mail sent through the Internet is > not secure. Do not send confidential or sensitive > information, such as social security numbers, > account numbers, personal identification numbers and > passwords, to us via ordinary (unencrypted) e-mail. > > > - > To unsubscribe, e-mail: > [EMAIL PROTECTED] > For additional commands, e-mail: > [EMAIL PROTECTED] > > Start your day with Yahoo! - make it your home page http://www.yahoo.com/r/hs - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Support JSS in Tomcat
Hi, Tomcat 5.5.x supports JSSE only. I am working on web application which uses JSS (http://www.mozilla.org/projects/security/pki/jss/javadoc/) I need to run the web application on Tomcat 5.x. I implemented the JSSSocketFactory.java, JSSSupport.java etc in the new package called org.apache.tomcat.util.net.jss. I tried to specify the SocketFactory class in server.xml but it doesnt work. I thought we can do something like that: It doesnt work at all. I looked at the source code and found out that SSLImplementationName is always null. Currently, I have to change the implementations array in SSLImplementation.java to include my implementation class which is JSSImplementationClass. Then recompiled the tomcat and it works. I just wonder if I overlook some of the configuration parameters in server.xml. If the server.xml in tomcat 5.5 does not support the Factory parameter, then I would like to modify the codes to support this feature. Therefore i dont need to recompile the tomcat to include my SSLServerSocketFactory implementation. Also I would like to contribute my codes for the JSS ServerSocketFactory implementation if you are interested. Christine Start your day with Yahoo! - make it your home page http://www.yahoo.com/r/hs - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
inprocess Tomcat/apache via mod_jk
Hi, I tried to setup Tomcat 5.5.9 running inside the apache server 2.x via the mod_jk on RHEL4. I got the following error: [debug] open_jvm2::jk_jni_worker.c (1055): JVM created [emerg] get_bridge_object::jk_jni_worker.c (1097): Can't find class org/apache/tomcat/modules/server/JNIEndpoint I looked at the mod_jk source codes and found out that the mod_jk supports the TC32_BRIDGE_TYPE and TC33_BRIDGE_TYPE. It doesnt support bridge type of tomcat 4.x and up. Plus the tomcat 5.5.9 doesnt have the JNIEndpoint.class. However, it seems to me that the deprecated mod_jk2 supports bridge type of tomcat 4.x and up because it tries to instantiate the class org/apache/jk/apr/TomcatStarter.class which exists in tomcat-ajp.jar. I really dont understand why the mod_jk supports tomcat 3.x only whereas the deprecated mod_jk2 supports tomcat 4.x and 5.x. Can somebody please tell me why? Also is it easy to have mod_jk to support TC55_BRIDGE_TYPE? Based on the mod_jk source codes jk_jni_worker.c, I think I just need to define the TC55_JAVA_BRIDGE_CLASS_NAME to be org/apache/jk/apr/TomcatStarter.class and then assign it to the btype. Is it just that simple? Another question is what the disadvantages of running tomcat inside the apache are. I googled and it seems to me that not too many people try to run inprocess tomcat inside apache. I would be interested in adding the 5.5 bridge type to the mod_jk. thanks, Christine __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
