Re: 9.0.83 addSslHostConfig JMX Operation Regression (Sample Code Attached)

2023-12-12 Thread Daniel Skiles
I apologize for it being a bit rough - it's what I was using to troubleshoot locally. import static java.util.Objects.nonNull; import java.lang.management.ManagementFactory; import java.util.Arrays; import java.util.HashMap; import java.util.Map; import java.util.Optional; import

RE: JAVA -tomcat- Request header is too large

2023-12-12 Thread Amit Pande
Thank you, Chris. Right now, we're on 9.x line. But this is a very important and useful field for debugging which we should be aware of. Thanks, Amit -Original Message- From: Christopher Schultz Sent: Monday, December 11, 2023 2:02 PM To: users@tomcat.apache.org Subject: Re: JAVA

Re: Typo in the release announcement

2023-12-12 Thread Christopher Schultz
Anmed, On 12/12/23 12:51, Ahmed Ashour wrote: Hi all, In https://tomcat.apache.org/, there are three places of occurs during HTTP HTTP request processing with an extra `HTTP`. Thanks,Ahmed Thanks for the report. I've fixed the web site, but we won't bother to re-send the release

Re: channelStartOptions for cluster with static membership

2023-12-12 Thread Christopher Schultz
Manak, On 12/12/23 10:05, Manak Bisht wrote: To use *DeltaManager* with unicast (static membership), the Tomcat 8.5 documentation (https://tomcat.apache.org/tomcat-8.5-doc/config/cluster.html) states that the channelStartOptions should be equal to *3*. However, the value should be left as the

Typo in the release announcement

2023-12-12 Thread Ahmed Ashour
Hi all, In https://tomcat.apache.org/,  there are three places of >occurs during HTTP HTTP request processing with an extra `HTTP`. Thanks,Ahmed

[ANN] Apache Tomcat 9.0.84 available

2023-12-12 Thread Rémy Maucherat
The Apache Tomcat team announces the immediate availability of Apache Tomcat 9.0.84. Apache Tomcat 9 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 9.0.84 is a bugfix and

Re: Use JAVA/CATALINA_OPTS arguments in server.xml

2023-12-12 Thread Chuck Caldarale
> On Dec 12, 2023, at 09:11, Manak Bisht wrote: > > Hi, is it possible to use values passed as arguments through > *JAVA_OPTS *or *CATALINA_OPTS > *in the *server.xml*? Yes. For example, setting the port number in server.xml for the default connector: And using the following in

Use JAVA/CATALINA_OPTS arguments in server.xml

2023-12-12 Thread Manak Bisht
Hi, is it possible to use values passed as arguments through *JAVA_OPTS *or *CATALINA_OPTS *in the *server.xml*? Sincerely Manak Bisht

channelStartOptions for cluster with static membership

2023-12-12 Thread Manak Bisht
To use *DeltaManager* with unicast (static membership), the Tomcat 8.5 documentation (https://tomcat.apache.org/tomcat-8.5-doc/config/cluster.html) states that the channelStartOptions should be equal to *3*. However, the value should be left as the default when using the *StaticMembershipService*

Apache Tomcat 10.1.17 Available

2023-12-12 Thread Christopher Schultz
The Apache Tomcat team announces the immediate availability of Apache Tomcat 10.1.17. Apache Tomcat 10 is an open source software implementation of the Jakarta Servlet, Jakarta Server Pages, Jakarta Expression Language, Jakarta WebSocket, Jakarta Authentication and Jakarta Annotations

[ANN] Apache Tomcat 8.5.97 available

2023-12-12 Thread Christopher Schultz
The Apache Tomcat team announces the immediate availability of Apache Tomcat 8.5.97. Apache Tomcat 8 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 8.5.97 is a bugfix and

RE: Weird CSRF prevention behavior

2023-12-12 Thread Berneburg, Cris J. - US
Chris CS> HTTP POST should not be prohibited unless I'm reading CS> both the code and the CSRF specs incorrectly. cjb> Pretend that it does. How would you solve that? CS> You have to manually add the CSRF token in each CS> in a hidden FORM parameter. It's doable, but it sucks to CS> have to