Re: OpenSSL config for Tomcat 7

2020-02-28 Thread Jason Wee
when you stack them, do you mean you cat those certificates into one pem file? On Sat, Feb 29, 2020 at 8:22 AM John Beaulaurier -X (jbeaulau - ADVANCED NETWORK INFORMATION INC at Cisco) wrote: > > Hello, > > We're running Tomcat 7 and need to implement SSL. We are using APR/OpenSSL, > but I

Re: cookie configurations for Tomcat 7

2020-02-28 Thread Martin Grigorov
On Fri, Feb 28, 2020 at 7:31 PM Lazar Kirchev wrote: > Chris, > > I just thought that I have some concerns passing a map with the headers to > generateCookie() method. This means that for each call the caller will have > to read all headers from the coyote.Response and put them in a map, even if

OpenSSL config for Tomcat 7

2020-02-28 Thread John Beaulaurier -X (jbeaulau - ADVANCED NETWORK INFORMATION INC at Cisco)
Hello, We're running Tomcat 7 and need to implement SSL. We are using APR/OpenSSL, but I can't get the intermediate certificates pulled in when starting Tomcat. The server certificate is recognized and used but not the other two. I have tried the following in PEM format. * Stacking them

Re: Client cert auth on demand

2020-02-28 Thread Martynas Jusevičius
Yes the clients connect only directly to nginx. So the proxy config within 2 pairs of containers is like this: # website service; clientAuth=false nginx:80 -> tomcat:8080 nginx:443 -> tomcat:8443 # API service; clientAuth=true nginx-api:90 -> tomcat-api:8080 nginx-api:5443 -> tomcat-api:8443

Re: CrawlerSessionManagerValve

2020-02-28 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Chris, On 2/28/20 13:25, Chris Cheshire wrote: > On Fri, Feb 28, 2020 at 12:51 PM Christopher Schultz > wrote: >> >> -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 >> >> Chris and Mark, >> >> On 2/28/20 11:51, Mark Thomas wrote: >>> On 28/02/2020

Re: Client cert auth on demand

2020-02-28 Thread Mark Thomas
On 28/02/2020 21:00, Martynas Jusevičius wrote: > Setting up a second container with a different port was easy enough. > > However I got stuck on the URL mapping/rewriting. Using nginx as a > proxy, I don't think it's possible to rewrite headers with the > upstream module: >

Re: Client cert auth on demand

2020-02-28 Thread Martynas Jusevičius
Setting up a second container with a different port was easy enough. However I got stuck on the URL mapping/rewriting. Using nginx as a proxy, I don't think it's possible to rewrite headers with the upstream module: https://nginx.org/en/docs/http/ngx_http_upstream_module.html As I understand it

Re: CrawlerSessionManagerValve

2020-02-28 Thread Chris Cheshire
On Fri, Feb 28, 2020 at 12:51 PM Christopher Schultz wrote: > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Chris and Mark, > > On 2/28/20 11:51, Mark Thomas wrote: > > On 28/02/2020 14:51, Chris Cheshire wrote: > >> (9.0.31) > >> > >> What is the reason why the pattern isn't compiled

Re: CrawlerSessionManagerValve

2020-02-28 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Chris and Mark, On 2/28/20 11:51, Mark Thomas wrote: > On 28/02/2020 14:51, Chris Cheshire wrote: >> (9.0.31) >> >> What is the reason why the pattern isn't compiled with the case >> insensitive flag? Is it due to performance? > > I wrote that

Re: cookie configurations for Tomcat 7

2020-02-28 Thread Lazar Kirchev
Chris, I just thought that I have some concerns passing a map with the headers to generateCookie() method. This means that for each call the caller will have to read all headers from the coyote.Response and put them in a map, even if the CookieProcessor will not need them, as is the case with the

Re: CrawlerSessionManagerValve

2020-02-28 Thread Mark Thomas
On 28/02/2020 14:51, Chris Cheshire wrote: > (9.0.31) > > What is the reason why the pattern isn't compiled with the case > insensitive flag? Is it due to performance? I wrote that Valve. At least the first iteration anyway. Others improved it along the way. I honestly can't remember why I

Re: issue faced in tomcat 8.5.51

2020-02-28 Thread tomcat/perl
On 28.02.2020 15:11, calder wrote: On Fri, Feb 28, 2020, 07:39 Rathore, Rajendra wrote: Hi Team, I am using below configuration in server.xml for tomcat but I got below exception in start up time < snip > Caused by: java.lang.IllegalArgumentException: The AJP Connector is

Re: cookie configurations for Tomcat 7

2020-02-28 Thread Lazar Kirchev
Chris, Actually in my preferred option the implementation in the CookieProcessorBase should not be no-op, but it should call CookieProcessor.generateCookie(Cookie). And the calls to CookieProcessor.generateCookie(Cookie) in o.a.c.connector.Response and o.a.c.core.ApplicationPushBuilder should be

CrawlerSessionManagerValve

2020-02-28 Thread Chris Cheshire
(9.0.31) What is the reason why the pattern isn't compiled with the case insensitive flag? Is it due to performance? Chris - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail:

Re: issue faced in tomcat 8.5.51

2020-02-28 Thread calder
On Fri, Feb 28, 2020, 07:39 Rathore, Rajendra wrote: > Hi Team, > > I am using below configuration in server.xml for tomcat > > secretRequired="false" secure="false" address="127.0.0.1" >tomcatAuthentication="false" enableLookups="false" > maxPostSize="-1"

Re: cookie configurations for Tomcat 7

2020-02-28 Thread Lazar Kirchev
Chris, Yes, I will prepare a PR in the next days. However, as Tomcat 8.5 should be able to work both on Java 7 and Java 8, interface default methods can't be used. So would you prefer to have a second CookieProcessor.generateCookie(Map<> requestHeaders, Cookie) in addition to the existing

issue faced in tomcat 8.5.51

2020-02-28 Thread Rathore, Rajendra
Hi Team, I am using below configuration in server.xml for tomcat but I got below exception in start up time 2020-02-27 17:59:57,524 ERROR [Servlet engine main] org.apache.catalina.core.StandardService - Failed to start connector [Connector[AJP/1.3-8010]]

Re: Problem compiling jsps after switching to 8.5.51

2020-02-28 Thread Mark Thomas
On 28/02/2020 10:57, Marek Neumann wrote: > After going to the latest 8.5 release we have problems with jasper compiling > jsps: > > [WARNING] org.apache.jasper.JasperException: javax.el.ELException: Unable to > find ExpressionFactory of type: # Licensed to the Apache Software Foundation >

Problem compiling jsps after switching to 8.5.51

2020-02-28 Thread Marek Neumann
After going to the latest 8.5 release we have problems with jasper compiling jsps: [WARNING] org.apache.jasper.JasperException: javax.el.ELException: Unable to find ExpressionFactory of type: # Licensed to the Apache Software Foundation (ASF) under one or more We are using