Happy Birthday, Chuck!

2012-07-26 Thread Gregor S.
Hi Chuck, thanks again for your valuable comments on this list, and keep it up! Cheers! Gregor -- just because you're paranoid, don't mean they're not after you... gpgp-fp: 3DB13F197F8A0360814885D1F1F1E2EFAD509AFD skype:rc46fi gplus.to/gregor twitter.com/#/2smart4u

Problems w/ TLS (record-splitting)

2012-04-10 Thread Gregor S.
Hi guys, I know, it's actually not a Tomcat-problem, but I was wondering if one of those guru hanging around in this mailing-list could give me a hint on how to handle this problem. As some of you might be aware, Firefox (from on version 9.x) cannot handle TLS-records which are served from a

Re: Problems w/ TLS (record-splitting)

2012-04-10 Thread Gregor S.
Hi Chris, first, thanks for your answer. Since this is a *sic* managed server, I don't have root-access, so I can only guess regarding the version of the APR (it's the one from the packages, but AFAIK the APR has been stable since quite a while, so I asume it should be the latest one. As for

Re: is der any default username for tomcat?

2012-01-06 Thread Gregor S.
On Fri, Jan 6, 2012 at 3:59 PM, Caldarale, Charles R chuck.caldar...@unisys.com wrote: From: charan raj [mailto:charanraj...@gmail.com] Subject: Re: is der any default username for tomcat? Is it a full moon? Over there: Definately YES. Cheers Gregor -- just because you're paranoid, don't

Can't get APR running w/ Tomcat 6.0.33 (Debian)

2011-12-20 Thread Gregor S.
Hi guys, I'm a bit desperated: I'm trying to re-organize our pet Tomcat within the following environment: Using CATALINA_BASE: /home/tomcat/local/apache-tomcat-6.0.33 Using CATALINA_HOME: /home/tomcat/local/apache-tomcat-6.0.33 Using CATALINA_TMPDIR:

Re: Can't get APR running w/ Tomcat 6.0.33 (Debian)

2011-12-20 Thread Gregor S.
Hi André, that's a good idea trying the APR w/o SSL, I'll give it a try pretty soon. Still, we do need SSL (personal data, we're obliged by law), but that might give me a clue at what to look at. Updating Java and the OS unfortunately (big, big sighh) is not an option, at least for the next

Re: Can't get APR running w/ Tomcat 6.0.33 (Debian)

2011-12-20 Thread Gregor S.
Ok, here's some news: When using the APR without SSL by changing the attribute of APRLiefeCycleListener to Listener className=org.apache.catalina.core.AprLifecycleListener SSLEngine=off / it's working. My SSL-version is OpenSSL version OpenSSL 0.9.8c 05 Sep 2006 According to the docs

Re: Can't get APR running w/ Tomcat 6.0.33 (Debian)

2011-12-20 Thread Gregor S.
This time, it's great some of the guys are on Google+. Thanks to +Jean-Frederic Clere, I changed the listener-definition to Listener className=org.apache.catalina.core.AprLifecycleListener SSLEngine=on SSLRandomSeed=/dev/urandom/ and it's working now. Ok, it's not the best solution since AFAIK

Re: Can't get APR running w/ Tomcat 6.0.33 (Debian)

2011-12-20 Thread Gregor S.
Hi Chris, On Tue, Dec 20, 2011 at 7:43 PM, Christopher Schultz ch...@christopherschultz.net wrote: Yeah, it's a question of faster startup or better entropy. Everything is PRNGs, anyway. If you want real entropy, you have to listen to cosmic background radiation or something. Now *that*

Re: Can't get APR running w/ Tomcat 6.0.33 (Debian)

2011-12-20 Thread Gregor S.
Chris, On Tue, Dec 20, 2011 at 9:25 PM, Christopher Schultz ch...@christopherschultz.net wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 That's an interesting academic question: would the stock market provide enough entropy? when looking at my small portfolio becoming smaller and

Re: path used for tc-natuve

2011-12-16 Thread Gregor S.
Guys, I feel you're seeing thing way too complicated. Chris: IIRC, Tomcat loads tcnative without a version number in it's name even when it prefers a version that is of a certain level. I don't believe you're right, since when I upgraded Tomcat5.5 having an old version of tcnative installed,

Re: path used for tc-natuve

2011-12-15 Thread Gregor S.
Hi André, long time no see ;) Ok, let's try to free you from your wprries: You'l only need OpenSSL if you are running a https-connector. if you don't use https, you don't need OpenSSL. And even if you want to run https, it's no big deal: apt-get install OpenSSL and you're all set. One

Re: path used for tc-natuve

2011-12-15 Thread Gregor S.
Hi André, On Thu, Dec 15, 2011 at 3:45 PM, André Warnier a...@ice-sa.com wrote: Indeed. Where have you been ? either in the office or changing Junior's nappies ;) I am not using HTTPS, and my problem is not at the /running/ stage. But from the README, I got the impression that I needed

Re: path used for tc-natuve

2011-12-15 Thread Gregor S.
Hi Chris, On Thu, Dec 15, 2011 at 4:34 PM, Christopher Schultz ch...@christopherschultz.net wrote: I think that's a bad idea because then you have built your libtcnative (which can be considered Tomcat-version-specific, or at least Tomcat-version-sensitive) for the whole system to use and

Re: path used for tc-natuve

2011-12-15 Thread Gregor S.
...and sorry for my typoes, I'm kind in a rush... -- just because you're paranoid, don't mean they're not after you... gpgp-fp: 3DB13F197F8A0360814885D1F1F1E2EFAD509AFD skype:rc46fi gplus.to/gregor twitter.com/#/2smart4u - To

Re: path used for tc-natuve

2011-12-15 Thread Gregor S.
Hi Chuck! On Thu, Dec 15, 2011 at 5:36 PM, Caldarale, Charles R chuck.caldar...@unisys.com wrote: From: Gregor S. [mailto:rc4...@googlemail.com] Subject: Re: path used for tc-natuve I guess it's a bad idea to run two different versions of Tomcat on the same box. ??? Clearly that's not true

Re: Problems with forwaring HTTP to HTTPS

2011-12-01 Thread Gregor S.
descriptor. Wondering if I'm the first person missing such a feature. Thanks! Gregor On Thu, Dec 1, 2011 at 3:43 PM, Mark Thomas ma...@apache.org wrote: On 30/11/2011 18:32, Gregor S. wrote: My understanding was, that in the global web.xml ($catalina.home/conf/web.xml) the defaults

Problems with forwaring HTTP to HTTPS

2011-11-30 Thread Gregor S.
Hi list, I'm a bit puzzled. I want to forward all incoming HTTP-traffic to HTTPS. Within my $catalina.home/conf/server.xml I've specified the following connectors: Connector port=80 protocol=HTTP/1.1 connectionTimeout=2 redirectPort=443 / Connector