Re: Tomcat returns Jsp source code as text/plain to the browser

2014-10-01 Thread Gadi Sastiel
Hi, the request is seen on the tomcat access log ( i've changed the path deliberately) [01/Oct/2014:10:01:27 +0300] GET /x/yy/z/Page.jsp%22 HTTP/1.1 200 30223 Thanks Gadi On Tue, Sep 30, 2014 at 10:06 PM, André Warnier a...@ice-sa.com wrote: Gadi Sastiel wrote: I have in

Re: Tomcat returns Jsp source code as text/plain to the browser

2014-10-01 Thread Mark Thomas
On 01/10/2014 08:14, Gadi Sastiel wrote: Hi, the request is seen on the tomcat access log ( i've changed the path deliberately) [01/Oct/2014:10:01:27 +0300] GET /x/yy/z/Page.jsp%22 HTTP/1.1 200 30223 OK. Given that this doesn't happen on a clean Tomcat install it is likely

[ANN] Apache Tomcat 8.0.14 available

2014-10-01 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat 8.0.14. Apache Tomcat 8 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language and Java WebSocket technologies. Apache Tomcat 8.0.14 includes numerous fixes for

Re: Tomcat returns Jsp source code as text/plain to the browser

2014-10-01 Thread Gadi Sastiel
In the web.xml under /tomcat/conf/ !-- == Default Servlet === -- servlet servlet-namedefault/servlet-name servlet-classorg.apache.catalina.servlets.DefaultServlet/servlet-class init-param

Re: [ANN] Apache Tomcat 8.0.14 available

2014-10-01 Thread Johan Compagner
On 1 October 2014 10:48, Mark Thomas ma...@apache.org wrote: Please refer to the change log for the complete list of changes: http://tomcat.apache.org/tomcat-8.0-doc/changelog.html that one only goes to max .12 (at least at this time) -- Johan Compagner Servoy

Re: [ANN] Apache Tomcat 8.0.14 available

2014-10-01 Thread Mark Thomas
On 01/10/2014 11:00, Johan Compagner wrote: On 1 October 2014 10:48, Mark Thomas ma...@apache.org wrote: Please refer to the change log for the complete list of changes: http://tomcat.apache.org/tomcat-8.0-doc/changelog.html that one only goes to max .12 (at least at this time) The

Re: JNDIRealm doesn't work when binding as non-admin user

2014-10-01 Thread Jesse Barnum
On Sep 30, 2014, at 4:06 PM, Mark Thomas ma...@apache.org wrote: On 30/09/2014 20:24, Mark Thomas wrote: On 30/09/2014 15:19, Jesse Barnum wrote: snip/ By the way, I've noticed that I get a NPE if I don't define roleBase with an empty string (it should be optional, since I've specified

Re: JNDIRealm doesn't work when binding as non-admin user

2014-10-01 Thread Mark Thomas
On 01/10/2014 02:46, Jesse Barnum wrote: On Sep 30, 2014, at 4:06 PM, Mark Thomas ma...@apache.org wrote: On 30/09/2014 20:24, Mark Thomas wrote: On 30/09/2014 15:19, Jesse Barnum wrote: snip/ By the way, I've noticed that I get a NPE if I don't define roleBase with an empty string (it

Re: Tomcat returns Jsp source code as text/plain to the browser

2014-10-01 Thread Gadi Sastiel
Probably it happens since our JSP's are not under the WEB-INF folder. Should be moved there. Problem solved temporary by adding rewrite rule to the apache httpd-ssl.conf: RewriteRule ^.*\.jsp/*.*$ - [F] Thanks for everyone who tried to help. On Wed, Oct 1, 2014 at 12:10 PM, Gadi Sastiel

Client authentication for specific path

2014-10-01 Thread Nathan Quirynen
Hi Tomcat users, A current application has client authentication configured in the SSL Connector (server.xml): Connector port=8443 ... clientAuth=true keystoreFile=.keystore keystorePass=... truststoreFile=.truststore truststorePass=... / And the CA root certificates have been added to the

[OT] Forward TLS connection information from AWS ELB - httpd - Tomcat

2014-10-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, I'm interested in using AWS ELB for SSL termination but allowing the client's TLS connection information to be forwarded all the way through the chain to Tomcat. The setup looks like this: ELB /\ / \ /\ w0

Re: Tomcat returns Jsp source code as text/plain to the browser

2014-10-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Gadi, On 10/1/14 9:32 AM, Gadi Sastiel wrote: Probably it happens since our JSP's are not under the WEB-INF folder. Should be moved there. That's unlikely to be the problem. Problem solved temporary by adding rewrite rule to the apache

Re: [OT] Forward TLS connection information from AWS ELB - httpd - Tomcat

2014-10-01 Thread Frederik Nosi
Hi Christopher, On 10/01/2014 04:26 PM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, I'm interested in using AWS ELB for SSL termination but allowing the client's TLS connection information to be forwarded all the way through the chain to Tomcat. The setup

Re: question on certificate use - resending with attachment descriptions in case they get stripped out again. If this doesnt work I will resend the email when I get home

2014-10-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Ognjen, On 9/30/14 4:33 PM, Ognjen Blagojevic wrote: On 30.9.2014 20:54, ray.d...@usbank.com wrote: Connector port=443 maxThreads=200 scheme=https secure=true SSLEnabled=true keystoreFile=C:\Bonaire\REVPORT\.keystore keystorePass=changeit

tomcat 8 depends on URL.setURLStreamHandlerFactory method

2014-10-01 Thread Johan Compagner
Hi, we have tomcat completely as an OSGI plugin project: https://github.com/Servoy/servoy-eclipse-tomcat/tree/master/org.apache.tomcat so that we can start it from our eclipse application and also dynamically add servlets and filters from all kinds of plugins (so everything is osgi based) Our

Re: [OT] Forward TLS connection information from AWS ELB - httpd - Tomcat

2014-10-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Frederik, On 10/1/14 11:15 AM, Frederik Nosi wrote: Hi Christopher, On 10/01/2014 04:26 PM, Christopher Schultz wrote: All, I'm interested in using AWS ELB for SSL termination but allowing the client's TLS connection information to be

Re: Client authentication for specific path

2014-10-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Nathan, On 10/1/14 10:02 AM, Nathan Quirynen wrote: Hi Tomcat users, A current application has client authentication configured in the SSL Connector (server.xml): Connector port=8443 ... clientAuth=true keystoreFile=.keystore

Re: Client authentication for specific path

2014-10-01 Thread Nathan Quirynen
On 01/10/14 18:08, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Nathan, On 10/1/14 10:02 AM, Nathan Quirynen wrote: Hi Tomcat users, A current application has client authentication configured in the SSL Connector (server.xml): Connector port=8443 ...

Re: Client authentication for specific path

2014-10-01 Thread Cédric Couralet
2014-10-01 18:16 GMT+02:00 Nathan Quirynen nat...@pensionarchitects.be: On 01/10/14 18:08, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Nathan, On 10/1/14 10:02 AM, Nathan Quirynen wrote: Hi Tomcat users, A current application has client authentication

Re: [OT] Forward TLS connection information from AWS ELB - httpd - Tomcat

2014-10-01 Thread Frederik Nosi
Hi Christopher, On 10/01/2014 06:05 PM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Frederik, On 10/1/14 11:15 AM, Frederik Nosi wrote: Hi Christopher, On 10/01/2014 04:26 PM, Christopher Schultz wrote: All, I'm interested in using AWS ELB for SSL termination

Re: [OT] Forward TLS connection information from AWS ELB - httpd - Tomcat

2014-10-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Frederik, On 10/1/14 12:52 PM, Frederik Nosi wrote: Hi Christopher, On 10/01/2014 06:05 PM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Frederik, On 10/1/14 11:15 AM, Frederik Nosi wrote: Hi Christopher,

Tomcat mixing sessions in production, can't reproduce on development

2014-10-01 Thread Fabio Sobral
Hi. We have a GWT web application running on Glassfish for well over a year now, but I never liked it. After much insistence I convinced people to try Tomcat 8 and the results were great. However, after running for 48h in production the user sessions started to get mixed and we reverted to using

Re: [OT] Forward TLS connection information from AWS ELB - httpd - Tomcat

2014-10-01 Thread Stefan Mayr
Am 01.10.2014 19:18, schrieb Christopher Schultz: -BEGIN PGP SIGNED MESSAGE- ... What I'm mainly looking for is a way to say the incoming connection (from ELB) is HTTP and I want to pretend that the connection is HTTPS. Then the easier solution seems using ELB for SSL termination and

Re: [OT] Forward TLS connection information from AWS ELB - httpd - Tomcat

2014-10-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Stefan, On 10/1/14 2:18 PM, Stefan Mayr wrote: Am 01.10.2014 19:18, schrieb Christopher Schultz: -BEGIN PGP SIGNED MESSAGE- ... What I'm mainly looking for is a way to say the incoming connection (from ELB) is HTTP and I want to

Re: tomcat 8 depends on URL.setURLStreamHandlerFactory method

2014-10-01 Thread Mark Thomas
On 01/10/2014 16:59, Johan Compagner wrote: Hi, we have tomcat completely as an OSGI plugin project: https://github.com/Servoy/servoy-eclipse-tomcat/tree/master/org.apache.tomcat so that we can start it from our eclipse application and also dynamically add servlets and filters from all

Re: question on certificate use - resending with attachment descriptions in case they get stripped out again. If this doesnt work I will resend the email when I get home

2014-10-01 Thread ray . diaz
Thanks Ongnjen, you gave me the hint I needed to fix the issue! What I did was delete my keystore and start back from scratch. I had to run these extra steps though: keytool -genkey -alias aliasname tomcat -keyalg RSA then enter in the exact matching info that was specified in the assigned

Re: JNDIRealm doesn't work when binding as non-admin user

2014-10-01 Thread Jesse Barnum
On Sep 30, 2014, at 4:06 PM, Mark Thomas ma...@apache.org wrote: On 30/09/2014 20:24, Mark Thomas wrote: On 30/09/2014 15:19, Jesse Barnum wrote: snip/ By the way, I've noticed that I get a NPE if I don't define roleBase with an empty string (it should be optional, since I've specified

Re: Session lost in Tomcat 5.5.36

2014-10-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Diego, On 9/30/14 6:56 AM, Diego Ruotolo wrote: Working on my company webapp I notice the following problem: sometimes the jsession cookie is lost, and therefore my whole http session is lost. The context is: - Tomcat v. 5.5.36 - JDK

Re: JNDIRealm doesn't work when binding as non-admin user

2014-10-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jesse, On 10/1/14 4:33 PM, Jesse Barnum wrote: On Sep 30, 2014, at 4:06 PM, Mark Thomas ma...@apache.org wrote: On 30/09/2014 20:24, Mark Thomas wrote: On 30/09/2014 15:19, Jesse Barnum wrote: snip/ By the way, I've noticed that I get a

Re: JNDIRealm doesn't work when binding as non-admin user

2014-10-01 Thread Jesse Barnum
On Oct 1, 2014, at 8:55 AM, Mark Thomas ma...@apache.org wrote: It is likely to be at least a month before those versions are released. How do you feel about building from source? The other option is that I can make some snapshot versions available for you to test. Mark Sorry for the

Re: [OT] Forward TLS connection information from AWS ELB - httpd - Tomcat

2014-10-01 Thread Stefan Mayr
Hi Christopher, Am 01.10.2014 20:40, schrieb Christopher Schultz: -BEGIN PGP SIGNED MESSAGE- ... I've been trying to get mod_remoteip to handle the client's IP address for me -- especially for logging -- but I'm having some difficulty and have asked a question over on the httpd

Re: JNDIRealm doesn't work when binding as non-admin user

2014-10-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jesse, On 10/1/14 5:13 PM, Jesse Barnum wrote: On Oct 1, 2014, at 8:55 AM, Mark Thomas ma...@apache.org wrote: It is likely to be at least a month before those versions are released. How do you feel about building from source? The other

Re: [OT] Forward TLS connection information from AWS ELB - httpd - Tomcat

2014-10-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Stefan, On 10/1/14 5:33 PM, Stefan Mayr wrote: Hi Christopher, Am 01.10.2014 20:40, schrieb Christopher Schultz: -BEGIN PGP SIGNED MESSAGE- ... I've been trying to get mod_remoteip to handle the client's IP address for me --

Re: JNDIRealm doesn't work when binding as non-admin user

2014-10-01 Thread Konstantin Kolinko
2014-10-02 1:33 GMT+04:00 Christopher Schultz ch...@christopherschultz.net: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jesse, On 10/1/14 5:13 PM, Jesse Barnum wrote: On Oct 1, 2014, at 8:55 AM, Mark Thomas ma...@apache.org wrote: It is likely to be at least a month before those