Disabling hostname verification on websockets in Tomcat 8+

2023-05-25 Thread V User
Hello, I'm working through upgrading an application from Tomcat 7 to Tomcat 9, and am running into an issue with hostname verification. The application initiates websocket connections using SSL to several other servers by IP address, and those servers' certificates either do not have any subject

OT: java.net.socket exception

2023-05-25 Thread jonmcalexander
So, to start I'm not a developer. With that said, have a development team that is getting the exception below in their Tomcat 9.0.74 implementation using Java 11 (also with Java 8). After much troubleshooting with their configuration, it turned out to be this in the JAVA_OPTIONS:

Re: Multiple concurrent sessions

2023-05-25 Thread Christopher Schultz
Stephane, On 5/25/23 12:44, Stephane Passignat wrote: Hello, I would like to open multiple concurrent session in a web-application for one user. As far as I understand, the sessionid is stored in the cookie and the cookie is associated to the server (http://localhost:8080/). So if I open a

Re: WebdavServlet protected resources cannot be opened in Word

2023-05-25 Thread Christopher Schultz
All, On 5/24/23 07:17, Mark Thomas wrote: On 24/05/2023 08:03, Кирилл Бубович wrote: We use webdav servlet to enable editing docx documents. We also use the

Re: Multiple concurrent sessions

2023-05-25 Thread Brian Wolfe
Am I understanding your use case right? You need a particular user to have multiple sessions in the same browser? or are you saying you need multiple users to be able to log into your application in the same browser? On Thu, May 25, 2023 at 12:45 PM Stephane Passignat wrote: > Hello, > > I

Multiple concurrent sessions

2023-05-25 Thread Stephane Passignat
Hello, I would like to open multiple concurrent session in a web-application for one user. As far as I understand, the sessionid is stored in the cookie and the cookie is associated to the server (http://localhost:8080/). So if I open a new browser window with the URL, I reach the same page

Re: HTTP 400 from tcp half-open health checks

2023-05-25 Thread Van Hoa Phan
Correct me if I am wrong, but isn't such logging necessary to detect syn flood attacks(expected behavior)? On Thu, May 25, 2023 at 7:29 PM Mark Thomas wrote: > On 25/05/2023 09:14, Paul Baines wrote: > > Hello! We upgraded a Windows Tomcat instance from 8.5.41 to 8.5.84. This > Tomcat instance

Re: HTTP 400 from tcp half-open health checks

2023-05-25 Thread Mark Thomas
On 25/05/2023 09:14, Paul Baines wrote: Hello! We upgraded a Windows Tomcat instance from 8.5.41 to 8.5.84. This Tomcat instance is behind a load balancer. Since the upgrade the Tomcat access log (AccessLogValve) has an "empty" entry with response 400 for every TCP half-open health check from

HTTP 400 from tcp half-open health checks

2023-05-25 Thread Paul Baines
Hello! We upgraded a Windows Tomcat instance from 8.5.41 to 8.5.84. This Tomcat instance is behind a load balancer. Since the upgrade the Tomcat access log (AccessLogValve) has an "empty" entry with response 400 for every TCP half-open health check from the load balancer. Because the health

Re: WebdavServlet protected resources cannot be opened in Word

2023-05-25 Thread Кирилл Бубович
I will also try to apply WebdavFixFilter чт, 25 мая 2023 г. в 10:27, Кирилл Бубович : > Hi Mark and Thomas, > > Thank you for your help! Our configuration is the following: > > - Tomcat 9.0.74 > - We run the application in a Docker container based on >

Re: WebdavServlet protected resources cannot be opened in Word

2023-05-25 Thread Кирилл Бубович
Hi Mark and Thomas, Thank you for your help! Our configuration is the following: - Tomcat 9.0.74 - We run the application in a Docker container based on adoptopenjdk/openjdk11:jdk-11.0.18_10-alpine