Re: I don't understand a recent change released in Tomcat 7.0.70

On 23 June 2016 at 19:43, Mark Thomas wrote: > On 23/06/2016 17:56, Lyallex wrote: >> I'm trying to understand why a recent change in 7.0.70 has been done >> the way it has. >> The change makes absolutely no sense to me and I need to ask the >> implementer why in the name of

RE: How to patch Apache Tomcat in AIX

Thanks Ben, Please let me know if Apache HTTP does not support patching as well. Regards, Hariprasad Satyamurty Global Infrastructure Services | Manulife Asia Email : hariprasad_satyamur...@manulife.com -Original Message- From: Ben Stringer [mailto:b...@burbong.com] Sent: Friday, June

RE: How to patch Apache Tomcat in AIX

On Fri, June 24, 2016 2:00 pm, Satyamurthy, Hariprasad wrote: > Hi All, > > We have multiple vulnerabilities in our environment ( AIX ) which are > related to Apache, Apache Tomcat and Apache HTTP. > > Please let me know if there is a link to documentation which we can use to > patch these

RE: How to patch Apache Tomcat in AIX

Hi All, We have multiple vulnerabilities in our environment ( AIX ) which are related to Apache, Apache Tomcat and Apache HTTP. Please let me know if there is a link to documentation which we can use to patch these vulnerabilities. AIX OS version : 6100-09-05-1524 Note: These

Re: Fail secure state

On 23.06.2016 21:43, Jason Ricles wrote: Fail-secure is a condition achieved by the application server in order to ensure that in the event of an operational failure, the system does not enter into an unsecure state where intended security properties no longer hold Just to make sure : you do

Re: Fail secure state

Fail-secure is a condition achieved by the application server in order to ensure that in the event of an operational failure, the system does not enter into an unsecure state where intended security properties no longer hold On Thu, Jun 23, 2016 at 3:33 PM, Mark Thomas wrote: >

Re: Fail secure state

On 23/06/2016 20:21, Jason Ricles wrote: > Does tomcat have a secure state if system initialization fails, > shutdown fails, or aborts fail? Define "secure state", "system initialization", "fails", "shutdown" and "aborts" and we might be able to help you. Mark

Fail secure state

Does tomcat have a secure state if system initialization fails, shutdown fails, or aborts fail? - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: I don't understand a recent change released in Tomcat 7.0.70

On 23/06/2016 17:56, Lyallex wrote: > I'm trying to understand why a recent change in 7.0.70 has been done > the way it has. > The change makes absolutely no sense to me and I need to ask the > implementer why in the name of sanity he did what he did. > I'm talking to you markt whoever you are :-)

I don't understand a recent change released in Tomcat 7.0.70

I'm trying to understand why a recent change in 7.0.70 has been done the way it has. The change makes absolutely no sense to me and I need to ask the implementer why in the name of sanity he did what he did. I'm talking to you markt whoever you are :-) Where should I ask the question? dev list?

Re: Incorrect request processing times in server status

Hey Mark, Thanks for your reply. The problem is, this happens only for some requests, not all. For eg., for the manager/status call, it shows the request time correctly. Thanks, Mohit On Thu, Jun 23, 2016 at 1:12 PM, Mark Thomas wrote: > On 23/06/2016 12:11, Mohit Chawla

Re: Http2UpgradeHandler error

On 23/06/2016 13:07, Andrei Ivanov wrote: > On Thu, Jun 23, 2016 at 2:52 PM, Mark Thomas wrote: >> On 22/06/2016 21:28, Andrei Ivanov wrote: >>> Yes, I can test. >>> 64-bit please. >> >> Thanks. >> >> It turned out not to be quite as simple as just a tc-native update. >> You'll

Re: Http2UpgradeHandler error

On Thu, Jun 23, 2016 at 2:52 PM, Mark Thomas wrote: > On 22/06/2016 21:28, Andrei Ivanov wrote: >> Yes, I can test. >> 64-bit please. > > Thanks. > > It turned out not to be quite as simple as just a tc-native update. > You'll need this dll: >

Re: Passing client certificate through Nginx to Tomcat SSL Valve

On 23/06/2016 12:51, Lucas Ventura Carro wrote: > And here comes the incompatibility: Nginx replaces new lines with tab > characters, but the valve only try to change white spaces. > Should not be the SSL Valve smarter and try to replace one or multiple > whitespaces (the regex '\s+')? Or at

Re: Http2UpgradeHandler error

On 22/06/2016 21:28, Andrei Ivanov wrote: > Yes, I can test. > 64-bit please. Thanks. It turned out not to be quite as simple as just a tc-native update. You'll need this dll: http://home.apache.org/~markt/dev/tc-native-debug/tcnative-1.dll and these class files:

Passing client certificate through Nginx to Tomcat SSL Valve

I have a webapp which reads a X.509 client certificate from the standard servlet request attribute: ServletRequest.getAttribute("javax.servlet.request.X509Certificate"). When Tomcat is the HTTPS endpoint, works like a charm. But when there is a Nginx as the HTTPS endpoint, and Tomcat is configured

Re: Incorrect request processing times in server status

On 23/06/2016 12:11, Mohit Chawla wrote: > Hi, > > Can someone suggest if this should be opened as a bug instead ? Not a bug. Probably just an unstable system clock. Mark > > Thanks, > Mohit > > On Tue, Jun 21, 2016 at 11:06 AM, Mohit Chawla < > mohit.chawla.bin...@gmail.com> wrote: > >>

Re: Incorrect request processing times in server status

Hi, Can someone suggest if this should be opened as a bug instead ? Thanks, Mohit On Tue, Jun 21, 2016 at 11:06 AM, Mohit Chawla < mohit.chawla.bin...@gmail.com> wrote: > Hello list, > > On a new tomcat installation I am noticing extremely high values for > request processing times being

Re: sequence of loading jars

On 23/06/2016 11:25, Venkata Reddy P wrote: > Hi, > > Sometimes I have to deploy the one special jar using on top of existing jar > classes for debugging. Classes always override JARs in Tomcat so unpack the debug classes to WEB-INF/classes or CATALINA_BASE/lib as appropriate and restart. Mark

Re: Getting current_statement_cache in tomcat jdbc connection pool

On 23/06/2016 11:06, Manisha Sapiah wrote: > Hi , > > Is there any way to get current_statement_cache in tomcat jdbc connection > pool. No, given that there is no such field or variable to be found anywhere in the current 9.0.x code. Mark

RE: sequence of loading jars

Hi, Sometimes I have to deploy the one special jar using on top of existing jar classes for debugging. Thanks -Original Message- From: Mark Thomas [mailto:ma...@apache.org] Sent: Thursday, June 23, 2016 3:51 PM To: Tomcat Users List Subject: Re: sequence of loading jars On 23/06/2016

Re: sequence of loading jars

On 23/06/2016 10:59, Venkata Reddy P wrote: > Hi, > > I am using the tomcat8.0.33, is there a way to control the order of > loading the jars from particular folder using class loaders > (common,shared,server)? Yes, but why do you want to do that? > I would also like to know if there is a way to

Getting current_statement_cache in tomcat jdbc connection pool

Hi , Is there any way to get current_statement_cache in tomcat jdbc connection pool. Many Thanks in advance.

sequence of loading jars

Hi, I am using the tomcat8.0.33, is there a way to control the order of loading the jars from particular folder using class loaders (common,shared,server)? I would also like to know if there is a way to control the sequence of loading the jars using "java.ext.dirs" system property? Many

want to know about how to post comment