RE: RHEL 8.6 ==> Tomcat Native 1.2.32 ==> OpenSSLEngine could not initialize

Hi Christopher, Thanks for the reply. We found the solution for the problem. Tomcat Native, we used the same '*.so' compiled in RHEL 7.9. Once compiled with RHEL 8.6 it worked. Regards, Abirami.S -Original Message- From: Christopher Schultz Sent: Thursday, June 22, 2023 7:35 PM To:

Re: Get Client Certificate Information

The compile actually created 4 .class files: CGIServlet$CGIEnvironment.class CGIServlet$CGIRunner.class CGIServlet$HTTPHeaderInputStream.class CGIServlet.class So, I combined them into CGIServlet.jar I'll look at ant deploy. On Thu, Jun 22, 2023 at 5:29 PM Christopher Schultz <

Re: Get Client Certificate Information

Timothy, On 6/22/23 14:01, Timothy Ward wrote: I am trying to go the route of modifying the CGIServlet from: h ttps://github.com/apache/tomcat/blob/main/java/org/apache/catalina/servlets/CGIServlet.java#L771

Re: Get Client Certificate Information

I am trying to go the route of modifying the CGIServlet from: h ttps://github.com/apache/tomcat/blob/main/java/org/apache/catalina/servlets/CGIServlet.java#L771 I got it to compile with my changes

RE: [SECURITY] CVE-2023-34981 Apache Tomcat - Information disclosure

Now that is what I call proactive! Dream * Excel * Explore * Inspire Jon McAlexander Senior Infrastructure Engineer Asst. Vice President He/His Middleware Product Engineering Enterprise CIO | EAS | Middleware | Infrastructure Solutions 8080 Cobblestone Rd | Urbandale, IA 50322 MAC: F4469-010

Re: [SECURITY] CVE-2023-34981 Apache Tomcat - Information disclosure

Funny thing: we recently needed to update a customer's Tomcat because they were complaining about a security issue that had prompted 8.5.88. And by the time we got the update request, 8.5.89 was already out, but we hadn't yet heard of CVE-2023-34981. So we'd already skipped over 8.5.88

Re: RHEL 8.6 ==> Tomcat Native 1.2.32 ==> OpenSSLEngine could not initialize

Hello, On 6/22/23 07:47, S Abirami wrote: Hi All, Our application using embedded tomcat 9.0.62 on RHEL linux environment. Tomcat native version :1.2.32 openssl version OpenSSL 1.1.1k After upgrading from RHEL 7.9 to RHEL 8.6 version, embedded tomcat throws an exception when starting the

Re: Get Client Certificate Information

Timothy, On 6/21/23 16:56, Timothy Ward wrote: import javax.servlet.http.HttpServletRequest; import javax.security.cert.Certificate; import javax.security.cert.X509Certificate; public class GrabCert extends Object { public static String getCommonName() { try {

RHEL 8.6 ==> Tomcat Native 1.2.32 ==> OpenSSLEngine could not initialize

Hi All, Our application using embedded tomcat 9.0.62 on RHEL linux environment. Tomcat native version :1.2.32 openssl version OpenSSL 1.1.1k After upgrading from RHEL 7.9 to RHEL 8.6 version, embedded tomcat throws an exception when starting the application for https.

Re: [SECURITY] CVE-2023-34981 Apache Tomcat - Information disclosure

On 22/06/2023 00:17, Stefan Mayr wrote: Hi, Am 21.06.2023 um 12:20 schrieb Mark Thomas: CVE-2023-34981 Apache Tomcat - Information disclosure Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 11.0.0-M5 Apache Tomcat 10.1.8 Apache Tomcat 9.0.74