RE: Is it possible to add hsts header over http response ?

CONFIDENTIAL & RESTRICTED Would/should this also cover cases where Tomcat is working on http or ajp although the connection is considered secure as SSL is offloaded to httpd or some other reverse proxy? -Original Message- From: Thomas Hoffmann (Speed4Trade GmbH) Sent: Thursday,

RE: tomcat is not coming Up

CONFIDENTIAL & RESTRICTED If on the old command line the apr libs were referenced but on the new one it is not, I believe that could make the process not find the libraries to communicate. Enough of a reason to terminate with an error, but maybe it is on stderr and nowhere in the logs. *

RE: Receiving HTTP (any version but 3 prefered) over UDP

CONFIDENTIAL & RESTRICTED You seem to know that domain. Would it make sense if you tried to create that HTTP/UDP support such that it could be integrated into future Tomcats? Hiran -Original Message- From: Aryeh Friedman Sent: Saturday, December 10, 2022 23:16 To: Tomcat Users List

RE: Tomcat/Java app timezone radomly changes during operation.

CONFIDENTIAL & RESTRICTED Does the system time (OS) change in a similar way? Is it always the change of instead using CDT the timestamps switch to UTC? Do the times at least match to some degree? I mean is it just the wrong timezone (and same hour of the day), or is it the same instant in time

RE: Strange timeout: is it Tomcat, or is it some intermediate stage?

CONFIDENTIAL & RESTRICTED To me the "nginx/1.20.0" is a hint that between your client and Tomcat there is some NginX running, and likely that one's timeout is expiring. It is no indication though what was going on with Tomcat, and why it may have taken that long. Hiran -Original

Wiki List of Specifications - update?

CONFIDENTIAL & RESTRICTED Hello there. I stumbled over the list of specifications for Tomcat on this page: https://cwiki.apache.org/confluence/display/TOMCAT/Specifications If is referenced in the left side of the Tomcat homepage. This list may need an update. At least on the Servlet

RE: Issue with catalina.out not being generated (RHEL 7.9, tomcat 9.0.63)

CONFIDENTIAL & RESTRICTED AFAIK catalina.out is just written by redirecting Tomcat's stdout to that file. So if you run Tomcat from any kind of wrapper such as jsvc, what is this going to do to Tomcat's stdout? See 'Considerations for production usage' on this page:

RE: Tomcat in distroless image

CONFIDENTIAL & RESTRICTED Just my 2 cents... Tomcat is based on Java. AFAIK java itself needs a wide range of 'OS services'. Is there some distributionless java image around? Hiran -Original Message- From: Thomas Meyer Sent: Thursday, June 30, 2022 19:53 To: users@tomcat.apache.org

RE: Encryption of Tomcat AJP

CONFIDENTIAL & RESTRICTED From: Mark Thomas Subject: Re: Encryption of Tomcat AJP >On 19/05/2022 01:32, Brian Eller wrote: >> TRADING PARTNER >> >> Hello, >> >> I am working on a Tomcat install embedded inside a vendor >> product that uses Apache to pass traffic to Tomcat. My

RE: Tomcat 9.0.59 - TLS 1.3 cipher configuration ignored (TLS 1.2 ok)

CONFIDENTIAL & RESTRICTED Hello Torsten. It seems to me you are listing a cipher that might be correct according to the OpenSSL documentation, but then whether that is available to your JVM may be different. Maybe you can run some small java application on the very same JVM to simply list the

RE: Troubleshoot why Tomcat stops running (was RE: How do I post a question with the users?)

_err file exists or the shutdown is mentioned in one of the files at tomcat/logs Greetings, Thomas -Ursprüngliche Nachricht- Von: Shakila Rajaiah Gesendet: Donnerstag, 10. Februar 2022 22:38 An: Tomcat Users List ; ch...@christopherschultz.net; Hiran CHAUDHURI Betreff: Re: Troubleshoot

Troubleshoot why Tomcat stops running (was RE: How do I post a question with the users?)

CONFIDENTIAL & RESTRICTED Usually Tomcat runs rock solid for ages. You need to find out the reason for the process to stop. Have you had a look at the Tomcat logfiles? https://tomcat.apache.org/tomcat-9.0-doc/introduction.html#Directories_and_Files Hiran -Original Message- From:

Tomcat testing

Hello there. My organization requires that Tomcat releases - especially patches - get tested before we propagate them into production environments. For sure similar tests are run by the ASF before releasing the software at all. Is there a way to run the very same tests within our organization?