Re: Question about custom JSSEImplementation

On Thu, Sep 22, 2016 at 4:07 PM, Mark Thomas wrote: > > It is only used by BIO which has been removed in 8.5.x. Even in 8.0.x I > don't see anywhere obvious it could help unless you: > a) set bindOnInit to false > and > b) start/stop the connector frequently > > In that case,

Question about custom JSSEImplementation

Hi all, I am reviewing some legacy code in Apache OFBiz [*], in the attempt to simplify its integration with Tomcat 8.0.+ and in preparation to upgrade to Tomcat 8.5.+. I have noticed that OFBiz, which starts a Tomcat instance in embedded mode, uses a legacy class that extends the Tomcat's

Re: Enabling X-XSS-Protection

Hi Mark, I have created a ticket and attached a patch to it: https://bz.apache.org/bugzilla/show_bug.cgi?id=58735 Thanks, Jacopo On 08/10/2015, Mark Thomas wrote: > On 08/10/2015, Jacopo Cappellato wrote: >>... >> Do you think that HttpHeaderSecurityFilter should be enha

Enabling X-XSS-Protection

Hi all, I am looking for a way to add the X-XSS-Protection header (*) to the response from Tomcat. I am currently using the Tomcat's HttpHeaderSecurityFilter that allows to setup other useful security related headers but it doesn't seem to support the X-XSS-Protection header (**). Do you think

Re: Issue running Websockets JSR356 with Tomcat 7.0.50 Embedded

jarScanner.setScanClassPath(false) Thanks, Jacopo On Feb 14, 2014, at 7:58 PM, Jacopo Cappellato jacopo.cappell...@gmail.com wrote: Here is the client code that I use to recreate the problem: public static void main(String[] args) throws Exception { String currentDir = new File(.).getCanonicalPath

Re: Issue running Websockets JSR356 with Tomcat 7.0.50 Embedded

On Feb 25, 2014, at 4:20 PM, Mark Thomas ma...@apache.org wrote: On 25/02/2014 15:14, Jacopo Cappellato wrote: Any hints? I would really appreciate if someone could provide some pointers (e.g. classes involved etc) about the implementation of the mechanism used to discover and deploy

Re: Websocket classes in tomcat-embed-core-7.0.52.jar

On Feb 20, 2014, at 9:10 AM, Ralph Schaer ralphsch...@gmail.com wrote: Hi The embedded core jar 7.0.52 no longer contains the websocket classes. It only contains an empty org.apache.tomcat.websocket package Version 7.0.50 of the embedded core contains all the websocket classes. Is this

Re: Issue running Websockets JSR356 with Tomcat 7.0.50 Embedded

the examples webapp and the Tomcat jars. Is there a way to deploy successfully the websockets with setScanClassPath(false) ? Thanks, Jacopo On Feb 13, 2014, at 6:47 PM, Jacopo Cappellato jacopo.cappell...@gmail.com wrote: Hello all, I did further tests and I have now implemented a test

Re: Issue running Websockets JSR356 with Tomcat 7.0.50 Embedded

). Since I doubt we will be able to set it to true in OFBiz, I would really appreciate if you could provide some hints about the mechanism that Tomcat uses to deploy websockets. Am I completely off track? Thanks, Jacopo On Jan 29, 2014, at 4:42 PM, Jacopo Cappellato jacopo.cappell...@gmail.com

Issue running Websockets JSR356 with Tomcat 7.0.50 Embedded

Hello all, I am trying to deploy and use Websockets using the Tomcat 7.0.50 *Embedded* distribution [*]. Some more details on my environment: * I have the following jars in my classpath: ** tomcat-7.0.50-tomcat-embed-core.jar ** tomcat-7.0.50-tomcat-embed-jasper.jar **

Re: Issue running Websockets JSR356 with Tomcat 7.0.50 Embedded

Thank you Mark! Please see inline: On Jan 29, 2014, at 4:50 PM, Mark Thomas ma...@apache.org wrote: On 29/01/2014 15:42, Jacopo Cappellato wrote: Hello all, I am trying to deploy and use Websockets using the Tomcat 7.0.50 *Embedded* distribution [*]. Java version? 1.7.0_40 Some

Fine tune or disable JMX activity

Hi all, I am a committer of the Apache OFBiz project; OFBiz uses Tomcat 7.0.28 in embedded mode. While doing some profiling with Java VisualVM I have noticed that a lot of object (java.util.TreeMap$Entry) are created even when there is no traffic; they don't represent a memory leak because a

Re: Fine tune or disable JMX activity

On Jun 22, 2012, at 5:11 PM, Pid wrote: On 22/06/2012 16:09, Jacopo Cappellato wrote: Hi all, I am a committer of the Apache OFBiz project; OFBiz uses Tomcat 7.0.28 in embedded mode. While doing some profiling with Java VisualVM I have noticed that a lot of object (java.util.TreeMap

Re: Fine tune or disable JMX activity

On Jun 22, 2012, at 5:45 PM, Caldarale, Charles R wrote: So let's see... you're using VisualVM which depends on JMX to retrieve the information it reports, and you want to disable JMX? I think you're observing self-induced behavior. ah ah, yes I think you are quite right and it was a dumb

Re: OutOfMemoryError happening in embedded instance of Tomcat 6 (Apache OFBiz project)

(we are running some load testing sessions right now). Thanks so much and sorry for the off-topic. Jacopo On Jul 7, 2008, at 6:03 PM, Filip Hanik - Dev Lists wrote: just use the -XX:+HeapDumpOnOutOfMemoryError and see what is causing the OOME Filip Jacopo Cappellato wrote: Hi all, I am

OutOfMemoryError happening in embedded instance of Tomcat 6 (Apache OFBiz project)

Hi all, I am one of the committers and PMC member of the Apache OFBiz project (ofbiz.apache.org). Our project is using an embedded instance of Tomcat to run the web applications that compose the OFBiz suite of ERP applications. A few weeks ago, with rev. 659490, we have upgraded Tomcat