Re: Is there a 6.0.x patch for CVE-2016-5388?

Hi, Thanks for your reply. I meant to ask if Tomcat will be releasing a 6.0.x version (say 6.0.46?) addressing this CVE. If yes, what time frame may I expect this version out? Best regards, Vamsi

Is there a 6.0.x patch for CVE-2016-5388?

Hi, Is there a 6.0.x patch for CVE-2016-5388? I do not see it listed in https://tomcat.apache.org/security-6.html . Thanks and best regards, Vamsi

Problem accessing a secure resource with FORM login method when web application clustered on Tomcat 6.0.18

Hi, I am using Tomcat 6.0.18 embedded in Geronimo server to cluster my web application. I have two nodes Node1 and Node2. On Node1 the HTTP port is 8080 and AJP port 8009. On Node2 the HTTP port is 8090 and AJP port 8019. I am using Apache HTTP Server (HTTP on port 80) with mod_jk as the

Re: Problem accessing a secure resource with FORM login method when web application clustered on Tomcat 6.0.18

On Thu, Mar 3, 2011 at 5:57 PM, Mark Thomas ma...@apache.org wrote: On 03/03/2011 12:18, Vamsavardhana Reddy wrote: My guess is that there is an issue with Tomcat AJP connector because of which the request is getting forwarded to the login page when the HTTP server switches the node

Re: How to access the client's X509 Cert of an https request ?

I thought that is the only way. Is there any other way to get hold of the client cert? ++Vamsi On Fri, Apr 11, 2008 at 1:52 PM, Mark Thomas [EMAIL PROTECTED] wrote: Hanson Char wrote: Finally, I found at least one answer to this problem: If you read the spec, there are simpler ways:

Re: What is the difference between TomCat and Geronimo?

Also Geronimo has a distribution with Tomcat as the web container. ++Vamsi On Wed, Apr 9, 2008 at 12:40 PM, Mark Thomas [EMAIL PROTECTED] wrote: Ben Stover wrote: What is the difference between TomCat and Geronimo? Geronimo is a full J2EE container. Tomcat is a Servlet/JSP container (so

Re: rolling the console log

May be you can pipe it to rotatelogs? See [1]. [1] http://httpd.apache.org/docs/2.0/programs/rotatelogs.html ++Vamsi On Fri, Apr 4, 2008 at 2:57 AM, Angelina Talley [EMAIL PROTECTED] wrote: Hello! We are running Tomcat 5.0 in a production environment (so upgrading isn't an option) and have

Re: displaying an image from outside the webapps directory

Have you considered using the allowLinking attribute (See http://tomcat.apache.org/tomcat-6.0-doc/config/context.html) and creating a soft-link inside the webapp directory to the directory which is outside of webapp? ++Vamsi On Fri, Mar 21, 2008 at 4:28 PM, Kimberly Begley [EMAIL PROTECTED]

Re: Multi domain certificate with keytool

. Vamsavardhana Reddy-2 wrote: You should be able to create a PKCS12 keystore using OpenSSL with the private key and the certificate you have. See if the following thread helps. http://www.mail-archive.com/[EMAIL PROTECTED]/msg08816.html ++Vamsi On Wed, Mar 12, 2008 at 6:59 PM, Some

Re: Multi domain certificate with keytool

You should be able to create a PKCS12 keystore using OpenSSL with the private key and the certificate you have. See if the following thread helps. http://www.mail-archive.com/[EMAIL PROTECTED]/msg08816.html ++Vamsi On Wed, Mar 12, 2008 at 6:59 PM, Some user [EMAIL PROTECTED] wrote: Dear

Re: catalina.out is not reloading

I am guessing... Somewhere in the script there should be a catalina.out to append to catalina.out. Change that to catalina.out so that the old file is automatically rewritten. Or else you may use rotatelogs program that comes with apache http server. See

Tomcat access logs

Is there a way to specify how many days access logs should be retained by tomcat so that old access logs (for e.g. more than a month old) are automatically deleted? I am using Tomcat 5.5.15. ++Vamsi

Re: Invalid Keystore Format Exception

? ++Vamsi On Jan 30, 2008 8:12 PM, Ole Ersoy [EMAIL PROTECTED] wrote: Hi Vamsi, I tried: $JAVA_HOME/bin/keytool -genkey -alias tomcat -keyalg RSA -storetype JKS Thanks for the suggestion though, - Ole Vamsavardhana Reddy wrote: May be you should use the -storetype JKS to be sure of the format

Re: Invalid Keystore Format Exception

Glad that your problem is solved :) ++Vamsi On Jan 30, 2008 10:38 PM, Ole Ersoy [EMAIL PROTECTED] wrote: OK - Looks like it's an IcedTea thing. I installed JDK 1.6, regenerated the key, and now it works fine. Thanks again for all the helpful suggestions, - Ole Vamsavardhana Reddy

Re: Invalid Keystore Format Exception

May be you should use the -storetype JKS to be sure of the format in which the keystore is generated. ++Vamsi On Jan 30, 2008 11:11 AM, Ole Ersoy [EMAIL PROTECTED] wrote: Hi, I'm trying to get SSL working real quick for some experiments, and I did this: $JAVA_HOME/bin/keytool -genkey

Re: Use JMX to manage applications

On 8/23/07, lightbulb432 [EMAIL PROTECTED] wrote: What is the preferred API for accessing MBeans from within servlets or JSPs? MBeanServerConnection jmxServerConnection = JMXConnectorFactory.connect (new JMXServiceURL(urlForJMX),null).getMBeanServerConnection();

Re: How to get port of a running Tomcat instance

I do not know if this info is helpful... ServletRequest has getServerPort() and getServerName() methods that should give the port and server through which the request came. Vamsi On 8/24/07, Brian Barnett [EMAIL PROTECTED] wrote: Can someone provide a java code snippet showing how to get the

Re: Thawte SSL certificates

Can you send me the certificate(s) you received from the Thawte CA? May be I can help. You should be comfortable sending it as there is nothing secret about Certificates. It is only your private-key that should not be transmitted. Vamsi On 8/13/07, Lyallex [EMAIL PROTECTED] wrote: Hi I