Re: HTTP to HTTPS redirect not happening

2019-07-20 Thread Martynas Jusevičius
Richard, I think the rule goes that you should avoid touching server.xml for something that web.xml can do. On Sun, Jul 21, 2019 at 4:40 AM Richard Huntrods wrote: > > I apologise for top posting in advance, but just a quick update and > quicker question... > > After Konstantin found my typo, I

Re: HTTP to HTTPS redirect not happening

2019-07-20 Thread Richard Huntrods
I apologise for top posting in advance, but just a quick update and quicker question... After Konstantin found my typo, I tried editing the global web.xml file (/conf/web.xml) . In my case, this is actually the file I want based on the behaviour described by Konstantin as this entire tomcat

Re: Re: HTTP to HTTPS redirect not happening

2019-07-20 Thread Richard Huntrods
Sorry for top-posting. It's the default with my mail program (thunderbird)... On 7/20/2019 11:27 AM, Konstantin Kolinko wrote: > сб, 20 июл. 2019 г. в 17:47, Richard Huntrods : >> OK. That was really weird. >> >> As I said in my message, following the directions on the web did NOT >> work. It

Re: Re: HTTP to HTTPS redirect not happening

2019-07-20 Thread Richard Huntrods
Thanks. However, what I don't understand is why putting that code into the webapps WEB-INF/web.xml would cause the behaviour I want in ROOT. Sadly, this is a production server and I can't play with it except after hours. EDIT. I tried working with web.xml on my development server, and could not

Re: WAR file not deploying correctly

2019-07-20 Thread Konstantin Kolinko
пт, 19 июл. 2019 г. в 12:47, Victor WILLART : > > Hi everybody, > > > I am using Tomcat 8.0, and I am struggling to replace and deploy a WAR file. > Tomcat 8.0 has reached End of Life and should not be used anymore. The replacements are Tomcat 8.5 and 9.0. > > I made a new WAR file, named it

Re: HTTP to HTTPS redirect not happening

2019-07-20 Thread Konstantin Kolinko
сб, 20 июл. 2019 г. в 17:47, Richard Huntrods : > > OK. That was really weird. > > As I said in my message, following the directions on the web did NOT > work. It didn't force redirection from http to https. > > What it DID end up doing was to kill the tomcat servlet application. > Before the

Re: OT: Tomcat on AWS for Dummies

2019-07-20 Thread Mark Eggers
Chris, > Jerry, > >> On 7/19/19 13:38, Jerry Malcolm wrote: > I have had a dedicated hosted environment with WAMP and > Tomcat for over 15 years. I'm very familiar with everything > related to that environment... apache http, mysql, dns > server, the file system, JAMES, and all

Re: HTTP to HTTPS redirect not happening

2019-07-20 Thread Richard Huntrods
Fixed it by brute force. First, I tried putting the changes ONLY in ../tomcat/webapps/ROOT/WEB-INF/web.xml instead of ../tomcat/conf/web.xml The good news is that didn't affect the servlet application. The bad news is now the http://mydomain.com/ started getting the 404 error. So I undid that

Re: HTTP to HTTPS redirect not happening

2019-07-20 Thread logo
Richard, > Am 20.07.2019 um 16:47 schrieb Richard Huntrods : > > OK. That was really weird. > > As I said in my message, following the directions on the web did NOT > work. It didn't force redirection from http to https. > > What it DID end up doing was to kill the tomcat servlet

Re: HTTP to HTTPS redirect not happening

2019-07-20 Thread Richard Huntrods
OK. That was really weird. As I said in my message, following the directions on the web did NOT work. It didn't force redirection from http to https. What it DID end up doing was to kill the tomcat servlet application. Before the change it was working fine, and after the change it would only

Re: Security vulnerabilities with tomcat 9

2019-07-20 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Sumit, On 7/20/19 08:47, Sumit Bhardwaj wrote: > Hi, > > We are using tomcat 9 and getting following two vulnerabilities in > security scans. > > Cookie Does Not Contain The "secure" Attribute (1) Cookie Does Not > Contain The "HTTPOnly"

Re: OT: Tomcat on AWS for Dummies

2019-07-20 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jerry, > On 7/19/19 13:38, Jerry Malcolm wrote: I have had a dedicated hosted environment with WAMP and Tomcat for over 15 years. I'm very familiar with everything related to that environment... apache http, mysql, dns server,

Re: Security vulnerabilities with tomcat 9

2019-07-20 Thread Scott Hoenigman
If you have a load balancer you will need to add these attributes there as well... Sent from my T-Mobile 4G LTE Device Original message From: Sumit Bhardwaj Date: 7/20/19 8:52 AM (GMT-05:00) To: Tomcat Users List Subject: Security vulnerabilities with tomcat 9 Hi, We

Security vulnerabilities with tomcat 9

2019-07-20 Thread Sumit Bhardwaj
Hi, We are using tomcat 9 and getting following two vulnerabilities in security scans. Cookie Does Not Contain The "secure" Attribute (1) Cookie Does Not Contain The "HTTPOnly" Attribute (1) We have done things mentioned in https://geekflare.com/secure-cookie-flag-in-tomcat/ true true and

Re: WAR file not deploying correctly

2019-07-20 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Victor, On 7/19/19 05:47, Victor WILLART wrote: > Hi everybody, > > > I am using Tomcat 8.0, and I am struggling to replace and deploy a > WAR file. > > > I made a new WAR file, named it like the old one, and replaced it > in my webapps folder.

Re: HTTP to HTTPS redirect not happening

2019-07-20 Thread logo
Richard, > Am 20.07.2019 um 04:19 schrieb Richard Huntrods : > > I tried implementing automatic redirection from HTTP to HTTPS on my > tomcat today, but it's not working. > > First, my system: > OS: Ubuntu 18.04.2 LTS (server) > Tomcat: 9.0.22 (installed from tomcat distribution, not via apt