RE: OT: Question about TomcatX.exe files

Thank you Mark. I mainly wanted to have answers for when I will be invariably questioned about it. :-). I knew about the naming, but understand that these aren't recompiled for each release, so modifying the version wouldn't work. (file/properties) Thanks, Dream * Excel * Explore * Inspire

OT: Question about TomcatX.exe files

Ok, this is a silly off-topic question, but is there an underlying reason that the wrapper exe files for Windows Tomcat do not reflect the same file version as the implementation version found in the manifest of the bootstrap.jar? That version info matching the release version of the Tomcat

RE: [ANN] New committer: Han Li

Congratulations Han! Dream * Excel * Explore * Inspire Jon McAlexander Senior Infrastructure Engineer Asst. Vice President He/His Middleware Product Engineering Enterprise CIO | EAS | Middleware | Infrastructure Solutions 8080 Cobblestone Rd | Urbandale, IA 50322 MAC: F4469-010 Tel 515-988-2508

RE: Simple SSL question

Thank you! Dream * Excel * Explore * Inspire Jon McAlexander Senior Infrastructure Engineer Asst. Vice President He/His Middleware Product Engineering Enterprise CIO | EAS | Middleware | Infrastructure Solutions 8080 Cobblestone Rd | Urbandale, IA 50322 MAC: F4469-010 Tel 515-988-2508 | Cell

RE: Simple SSL question

Peter, Yes, that WOULD be a good thing. That and some examples of implementing the new COOL stuff like configure TLS virtual hosting with SNI, would be very helpful. Dream * Excel * Explore * Inspire Jon McAlexander Senior Infrastructure Engineer Asst. Vice President He/His Middleware

RE: Simple SSL question

Thanks Chris, I was just wondering if there was a vanity name for the "new" structure is all, to differentiate in documentation. Thanks, Dream * Excel * Explore * Inspire Jon McAlexander Senior Infrastructure Engineer Asst. Vice President He/His Middleware Product Engineering Enterprise CIO |

RE: Simple SSL question

Is there a "name" for the new connector style? The old is known as the Coyote Connector. Thanks again! Dream * Excel * Explore * Inspire Jon McAlexander Senior Infrastructure Engineer Asst. Vice President He/His Middleware Product Engineering Enterprise CIO | EAS | Middleware | Infrastructure

RE: Simple SSL question

Thanks Mark!!! > -Original Message- > From: Mark Thomas > Sent: Wednesday, August 10, 2022 2:43 PM > To: users@tomcat.apache.org > Subject: Re: Simple SSL question > > On 10/08/2022 19:22, jonmcalexan...@wellsfargo.com.INVALID wrote: > > Ok, I'm asking a rather simple, stupid (in my

Simple SSL question

Ok, I'm asking a rather simple, stupid (in my opinion) question, but here goes: What is the best practice form of connector for SSL. Is it the old-school coyote connector or the connector with the section? Are the two interchangeable, or does the SSLHostConfig one rely on openssl and won't

RE: Apache Tomcat 8.5.82 Release Date

Love it Chris! Dream * Excel * Explore * Inspire Jon McAlexander Senior Infrastructure Engineer Asst. Vice President He/His Middleware Product Engineering Enterprise CIO | EAS | Middleware | Infrastructure Solutions 8080 Cobblestone Rd | Urbandale, IA 50322 MAC: F4469-010 Tel 515-988-2508 |

RE: TLS Weak Cipher Keys for Key Exchange.

To possibly answer my own question, it appears that this can be done on the java command line: set the system property jdk.security.defaultKeySize with the algorithm and its desired default key size. For example, to test a DSA default keysize of 2048, specify

TLS Weak Cipher Keys for Key Exchange.

Good afternoon. Recently a new Qualys QID vulnerability was released, QID: 38863 - Cryptographically Weak Key Exchange Size, which deals with weak cipher key exchange key values. I know that we can add a cipher list in the TLS Connector in the server.xml, but is there a way to specify a Key

RE: [OT] issues with Tomcat to Siteminder communication post mod-proxy setup

Could this potentially be caused by But not using Tomcat Native? Thanks, Dream * Excel * Explore * Inspire Jon McAlexander Senior Infrastructure Engineer Asst. Vice President He/His Middleware Product Engineering Enterprise CIO | EAS | Middleware | Infrastructure Solutions 8080

RE: [OT] issues with Tomcat to Siteminder communication post mod-proxy setup

Here is the error we are getting. The login form, hosted by Tomcat, does a POST to the /login/login.fcc for siteminder which is on the HTTPD server and is not behind the proxypass or proxypassreverse. javax.net.ssl|DEBUG|96|https-jsse-nio-8305-exec-1|2022-07-12 13:12:49.399

RE: [OT] issues with Tomcat to Siteminder communication post mod-proxy setup

I'm wondering if it is having to do with the SMSESSION cookie not getting passed correctly. Still trying to figure this one out. Thanks, Dream * Excel * Explore * Inspire Jon McAlexander Senior Infrastructure Engineer Asst. Vice President He/His Middleware Product Engineering Enterprise CIO |

[OT] issues with Tomcat to Siteminder communication post mod-proxy setup

Chris, Moving this discussion to here. Yes, it appears that I broke something when setting up the Tomcat Connector for the mod-proxy that is now affecting, somehow, the SSL communication with the Site Minder services. Here is the connector we added below. Temporarily have set

RE: SSL handshake failure logs required for auditing purpose

Tre's Bueno! Dream * Excel * Explore * Inspire Jon McAlexander Senior Infrastructure Engineer Asst. Vice President He/His Middleware Product Engineering Enterprise CIO | EAS | Middleware | Infrastructure Solutions 8080 Cobblestone Rd | Urbandale, IA 50322 MAC: F4469-010 Tel 515-988-2508 | Cell

RE: Question regarding Tomcat and Apache HTTPD Mod-proxy over SSL [EXTERNAL]

Thank you as always Mark and all! Dream * Excel * Explore * Inspire Jon McAlexander Senior Infrastructure Engineer Asst. Vice President He/His Middleware Product Engineering Enterprise CIO | EAS | Middleware | Infrastructure Solutions 8080 Cobblestone Rd | Urbandale, IA 50322 MAC: F4469-010 Tel

RE: Question regarding Tomcat and Apache HTTPD Mod-proxy over SSL [EXTERNAL]

Ok, so in short ots not possible to mutually authenticate the mod-proxy and a tomcat connector, correct? ­ I'm needing to convert an ajp configuration to mod-proxy, but a security architect wants the other as well. Thanks, Sent with BlackBerry Work (www.blackberry.com)

RE: Question regarding Tomcat and Apache HTTPD Mod-proxy over SSL [EXTERNAL]

That was my thought also, but wouldn’t that then require the end-users to also have certificates? Or would it just be Apache HTTPD? Basically the end users connection terminates at the proxy, and the proxy uses its own connection to pass it thru. Is that right? Dream * Excel * Explore *

Question regarding Tomcat and Apache HTTPD Mod-proxy over SSL

I'm trying to figure out if there is a way to use certificates between Tomcat and Apache for mutual authentication of the mod-proxy connection to Tomcat. This would be similar as to how you can setup the WebSphere plugin to communicate with WebSphere over a mutually secured connection. Is this

RE: [ANN] ApacheCon NA 2022 in New Orleans, 3-6 Oct 2022, CFP is OPEN!

Ah, ok. I understand. :-) It may be something to consider for the future, for those of us with disabilities. :-) Dream * Excel * Explore * Inspire Jon McAlexander Senior Infrastructure Engineer Asst. Vice President He/His Middleware Product Engineering Enterprise CIO | EAS | Middleware |

RE: [ANN] ApacheCon NA 2022 in New Orleans, 3-6 Oct 2022, CFP is OPEN!

Understood. I'm willing to give it a try if you want to sign me up, but I have to do it virtual. Traveling is not possible for me. Let me know please. Dream * Excel * Explore * Inspire Jon McAlexander Senior Infrastructure Engineer Asst. Vice President He/His Middleware Product Engineering

RE: [ANN] ApacheCon NA 2022 in New Orleans, 3-6 Oct 2022, CFP is OPEN!

> -Original Message- > From: Christopher Schultz > Sent: Monday, May 23, 2022 2:37 PM > To: Tomcat Users List ; Coty Sutherland > > Cc: Tomcat Developers List > Subject: Re: [ANN] ApacheCon NA 2022 in New Orleans, 3-6 Oct 2022, CFP is > OPEN! > Importance: High > > Coty, > > On

RE: Encryption of Tomcat AJP

> -Original Message- > From: Brian Eller > Sent: Thursday, May 19, 2022 9:29 AM > To: Tomcat Users List > Subject: RE: Encryption of Tomcat AJP > > TRADING PARTNER > > Thank you Mark, > > My vendor supports AJP but, I don't know if they support > mod_http_proxy. This is a

RE: [ANN] Apache Tomcat 9.0.63 available

Is there any news around 8.5 next release?­ Thanks, Sent with BlackBerry Work (www.blackberry.com) From: Rémy Maucherat Sent: May 16, 2022 7:41 AM To: Tomcat Developers List ; Tomcat Users List ; annou...@tomcat.apache.org; annou...@apache.org Subject: [ANN]

RE: Tomcat ownership changed spontaneously

This is another reason why separating CATALINA_HOME from CATALINA_BASE is a good thing. Dream * Excel * Explore * Inspire Jon McAlexander Infrastructure Engineer Asst Vice President He/His Middleware Product Engineering Enterprise CIO | EAS | Middleware | Infrastructure Solutions 8080

RE: Possibly Silly Question

Thanks for the info Konstantin! Dream * Excel * Explore * Inspire Jon McAlexander Infrastructure Engineer Asst Vice President He/His Middleware Product Engineering Enterprise CIO | EAS | Middleware | Infrastructure Solutions 8080 Cobblestone Rd | Urbandale, IA 50322 MAC: F4469-010 Tel

RE: Possibly Silly Question

Thanks as always Chris! Dream * Excel * Explore * Inspire Jon McAlexander Infrastructure Engineer Asst Vice President He/His Middleware Product Engineering Enterprise CIO | EAS | Middleware | Infrastructure Solutions 8080 Cobblestone Rd | Urbandale, IA 50322 MAC: F4469-010 Tel 515-988-2508 |

RE: Possibly Silly Question

That is what I thought, but I just wanted to make sure. Have some dubious data from Flexera around Tomcat versions. Thanks, Dream * Excel * Explore * Inspire Jon McAlexander Infrastructure Engineer Asst Vice President He/His Middleware Product Engineering Enterprise CIO | EAS | Middleware |

Possibly Silly Question

Good morning, Doing some history research, but was there EVER a released version 1x or 2x of Tomcat? IF so, what version numbers had been out there, once upon a time ago? Thank you, Dream * Excel * Explore * Inspire Jon McAlexander Infrastructure Engineer Asst Vice President He/His Middleware

RE: Maybe a stupid (Windows related) question

> -Original Message- > From: Rony G. Flatscher (Apache) > Sent: Tuesday, March 22, 2022 12:21 PM > To: users@tomcat.apache.org > Subject: Maybe a stupid (Windows related) question > > For debugging purposes I downloaded the zip-version of Tomcat 10.0.18 and > start it up using

RE: Duplicate accept detected. This is a known OS bug.

Thank you! Dream * Excel * Explore * Inspire Jon McAlexander Infrastructure Engineer Asst Vice President Middleware Product Engineering Enterprise CIO | EAS | Middleware | Infrastructure Solutions 8080 Cobblestone Rd | Urbandale, IA 50322 MAC: F4469-010 Tel 515-988-2508 | Cell 515-988-2508

RE: Duplicate accept detected. This is a known OS bug.

Thanks Mark, This team is has Some of the apps running on PCF and also running both JAVA 8 and JAVA 11. This is using Oracle Java on RHEL 7.9. In reading through the activity log on the bug report, it appears that it's being seen on multiple Linux distros as well as on Windows. This feels

RE: clearReferencesThreads issues warning about 2 threads, spawned by JDK in printing components

Thanks Mark, Unfortunately the URL in the error gets blocked by our security, so I looked it up on my home system now. Dream * Excel * Explore * Inspire Jon McAlexander Infrastructure Engineer Asst Vice President Middleware Product Engineering Enterprise CIO | EAS | Middleware |

Duplicate accept detected. This is a known OS bug.

Hi all, I have an application team occasionally getting the following exception with their application. They are currently using Tomcat 9.0.56. I'm not finding much on the intertubes in regards to this. Does anyone have any information? org.apache.tomcat.util.net.Acceptor run SEVERE: Socket

RE: Tomcat 9 cannot start on windows 10 as service

> -Original Message- > From: W > Sent: Tuesday, February 8, 2022 10:36 PM > To: users@tomcat.apache.org > Subject: Tomcat 9 can not start on windows 10 as service > > Hi, > I install tomcat 9 using downloaded installation package. It was installed > successfully. I made tomcat manager

RE: How to Upgrade tomcat from 8.5.23 to 8.5.73 | windows r2 2008 server

Hey, I look up to you, Mark, and Rémy. Just trying to make sure I understand, so that when I grow up I might be as good as you 3. :-) Dream * Excel * Explore * Inspire Jon McAlexander Infrastructure Engineer Asst Vice President Middleware Product Engineering Enterprise CIO | EAS | Middleware |

RE: How to Upgrade tomcat from 8.5.23 to 8.5.73 | windows r2 2008 server

> -Original Message- > From: Christopher Schultz > Sent: Monday, February 7, 2022 2:32 PM > To: users@tomcat.apache.org > Subject: Re: How to Upgrade tomcat from 8.5.23 to 8.5.73 | windows r2 2008 > server > > Rakesh, > > On 2/6/22 14:52, rakesh meka wrote: > > Greetings of the day.

RE: How to Upgrade tomcat from 8.5.23 to 8.5.73 | windows r2 2008 server

Note, this is if on Windows. Linux/Unix is similar without the service part.­ Thanks, Sent with BlackBerry Work (www.blackberry.com) From: jonmcalexan...@wellsfargo.com.INVALID Sent: Feb 7, 2022 8:48 AM To: users@tomcat.apache.org Subject: RE: How to Upgrade

RE: How to Upgrade tomcat from 8.5.23 to 8.5.73 | windows r2 2008 server

The way I suggest ­is to do this: First Time 1. Install new version side-by-side. 2. Separate CATALINA_BASE and CATALUNA_HOME. 3. Create a symbolic link for CATALINA_HOME. 4. Make the necessary changes to config files, make sure the CATALINA_BASE lib only contains the jar files for your

RE: log4j CVE general question

Ok, so I have been given clearance to share the stance that we are taking with log4j. We have contacted Apache Security and are awaiting a response. Before making a final decision around log4j 1.x, consider the following: -Initially, 1.x wasn’t assessed for the vulnerability, because, it is end

RE: log4j CVE general question

I understand Chris. I guess I was looking to see if he had contact info for anyone on that particular project. I know it's not like a "company". Thanks though! Dream * Excel * Explore * Inspire Jon McAlexander Infrastructure Engineer Asst Vice President Middleware Product Engineering

log4j CVE general question

So, based on these entries on the log4j apache pages, I can't see that any 1x product is vulnerable. Mark, is there some message from Apache that we can share with those that need to know that for certain 1x log4j is NOT vulnerable? News CVE-2021-44228 The Log4j team has been made aware of a

RE: Disable a library in Tomcat configuration

Thanks Mark­ Thanks, Sent with BlackBerry Work (www.blackberry.com) From: Mark Thomas Sent: Dec 11, 2021 2:23 AM To: users@tomcat.apache.org Subject: Re: Disable a library in Tomcat configuration On 11/12/2021 02:02, jonmcalexan...@wellsfargo.com.INVALID

RE: CVE-2021-44228 Log4j 2 Vulnerability -- How does this affect Tomcat?

If you aren't able to get the "fixed" version of the jar that fixes the vulnerability, I would suggest adding this to your Java Options for Tomcat: -Dlog4j2.formatMsgNoLookups=true Thanks, Dream * Excel * Explore * Inspire Jon McAlexander Infrastructure Engineer Asst Vice President Middleware

Disable a library in Tomcat configuration

Is there a way to forcibly prevent a library from loading in Tomcat during startup that will also prevent an app from loading the library? Trying to find­ a way to block vulnerabilities. Thanks, Sent with BlackBerry Work (www.blackberry.com)

RE: Updating Tomcat on an Amazon Linux 2 EC2 instance?

I think it's going to come down to how the 8.5.58 was installed. Was it via an rpm or zip file? I have used both methods and you should be able to install the 8.5.73 without affecting the 8.5.58. If you are using a separated CATALINA_BASE and CATALINA_HOME, then updating your configuration

RE: How to *properly* create and use a CATALINA_BASE installation

Yeah, we love our symbolic links here, Ix and Windows. Thanks, Sent with BlackBerry Work (www.blackberry.com) From: Michael B Allen Sent: Nov 17, 2021 9:17 PM To: Tomcat Users List Subject: Re: How to *properly* create and use a CATALINA_BASE installation On Wed, Nov 17, 2021 at 9:05 PM

RE: How to *properly* create and use a CATALINA_BASE installation

Sorry about my bad reply order. Mark, you do a lot of what I do, but most of our stuff isn't using initd. I like your use of links, best way to handle upgrades, imo.­ Thanks, Sent with BlackBerry Work (www.blackberry.com) From: Mark Eggers Sent: Nov 17,

RE: How to *properly* create and use a CATALINA_BASE installation

We export it. You have to make sure the setenv.sh is calling setenv.sh. it works fine for me.­ Thanks, Sent with BlackBerry Work (www.blackberry.com) From: Michael B Allen Sent: Nov 17, 2021 6:54 PM To: Tomcat Users List Subject: Re: How to *properly* create

RE: [ANN] Apache Tomcat 8.5.73 available

Please ignore this Dream * Excel * Explore * Inspire Jon McAlexander Infrastructure Engineer Asst Vice President Middleware Product Engineering Enterprise CIO | EAS | Middleware | Infrastructure Solutions 8080 Cobblestone Rd | Urbandale, IA 50322 MAC: F4469-010 Tel 515-988-2508 | Cell

RE: [ANN] Apache Tomcat 8.5.73 available

http://tomcat.apache.org/tomcat-8.5-doc/changelog.html Dream * Excel * Explore * Inspire Jon McAlexander Infrastructure Engineer Asst Vice President Middleware Product Engineering Enterprise CIO | EAS | Middleware | Infrastructure Solutions 8080 Cobblestone Rd | Urbandale, IA 50322 MAC:

RE: How to *properly* create and use a CATALINA_BASE installation

Michael, -Original Message- > From: Christopher Schultz > Sent: Wednesday, November 17, 2021 9:43 AM > To: users@tomcat.apache.org > Subject: Re: How to *properly* create and use a CATALINA_BASE installation > > Michael, > > On 11/16/21 17:05, Michael B Allen wrote: > >> >

RE: How to *properly* create and use a CATALINA_BASE installation

Thanks for the info Chris! Dream * Excel * Explore * Inspire Jon McAlexander Infrastructure Engineer Asst Vice President Middleware Product Engineering Enterprise CIO | EAS | Middleware | Infrastructure Solutions 8080 Cobblestone Rd | Urbandale, IA 50322 MAC: F4469-010 Tel 515-988-2508 | Cell

RE: How to *properly* create and use a CATALINA_BASE installation

I meant the other configuration files. I guess I haven't dug deep enough, but DOES Tomcat handle the catalina.properties, catalina.policy, logging.properties, etc. files hierarchically similar to how Microsoft handles web.config files? CATALINA_HOME being the parent and Instances automatically

RE: How to *properly* create and use a CATALINA_BASE installation

Hey Michael, I too would like to know more of what Chris is sa­ying in regards to the conf folder. Thanks, Sent with BlackBerry Work (www.blackberry.com) From: Michael B Allen Sent: Nov 15, 2021 4:24 PM To: Tomcat Users List Subject: Re: How to *properly*

RE: How to *properly* create and use a CATALINA_BASE installation

Files Required in CATALINA_BASE: bin Only shell scripts or batch files. Make sure that setenv.sh or setenv.bat sets and passes the CATALINA_BASE and CATALINA_HOME locations properly. conf All of the conf files. lib Only .jar files needed by your Instance, not

RE: Strange Oracle JDBC Driver error on Application Deployment

Thanks Mark E.! Dream * Excel * Explore * Inspire Jon McAlexander Infrastructure Engineer Asst Vice President Middleware Product Engineering Enterprise CIO | EAS | Middleware | Infrastructure Solutions 8080 Cobblestone Rd | Urbandale, IA 50322 MAC: F4469-010 Tel 515-988-2508 | Cell 515-988-2508

RE: Strange Oracle JDBC Driver error on Application Deployment

Hmmm...strange. I've gone thru their configuration and modified it to match up with our strategy of using separate HOME and BASE locations. I've had them get rid of duplicate jar files from BASE that are in HOME. Only 1-off is the Oracle JDBC jar. I do need to see if they have "cleared cache"

Strange Oracle JDBC Driver error on Application Deployment

I have an application team that is getting the following stack trace while starting Tomcat 8.5.70. I've done some searching but can't find anything. In looking at their context.xml it appears that they have jmxEnabled="false" in each of the resources. Any assistance would be grand. Thanks,

RE: Tomcat 8.5.37 is automatically redeploying apps on every Saturday

> -Original Message- > From: Shekhar Naidu > Sent: Friday, October 15, 2021 7:45 AM > To: users@tomcat.apache.org > Subject: Tomcat 8.5.37 is automatically redeploying apps on every Saturday > > Hi all, > > > We are seeing a weird behavior in our new Linux environments. Since we > >>

RE: Interesting log capability request

> -Original Message- > From: Robert Hicks > Sent: Thursday, October 7, 2021 2:23 PM > To: Tomcat Users List > Subject: Re: Interesting log capability request > > The catalina.out log should capture that information already, right? > > This is what I see when I shutdown my barebones

Interesting log capability request

I have an app team that wants to know if it's possible to capture how long the Tomcat Shutdown takes? I don't think there is without modifying something in the Catalina.sh under the Stop section, but wondering if there is something already built in. Thanks, Dream * Excel * Explore * Inspire

RE: UserDatabaseRealm and DIGEST

Thank you Chris! Dream * Excel * Explore * Inspire Jon McAlexander Infrastructure Engineer Asst Vice President Middleware Product Engineering Enterprise CIO | EAS | Middleware | Infrastructure Solutions 8080 Cobblestone Rd | Urbandale, IA 50322 MAC: F4469-010 Tel 515-988-2508 | Cell

RE: UserDatabaseRealm and DIGEST

Chris, > -Original Message- > From: Christopher Schultz > Sent: Tuesday, August 24, 2021 5:52 PM > To: users@tomcat.apache.org > Subject: Re: UserDatabaseRealm and DIGEST > > Jon, > > On 8/24/21 12:53, jonmcalexan...@wellsfargo.com.INVALID wrote: > >> -Original Message- > >>

RE: UserDatabaseRealm and DIGEST

> -Original Message- > From: Mark Thomas > Sent: Tuesday, August 24, 2021 11:41 AM > To: users@tomcat.apache.org > Subject: Re: UserDatabaseRealm and DIGEST > > On 24/08/2021 17:28, jonmcalexan...@wellsfargo.com.INVALID wrote: > > Ok, so I've been reading thru the documentation on DIGEST

UserDatabaseRealm and DIGEST

Ok, so I've been reading thru the documentation on DIGEST but not entirely sure I have it right. What is the best practice for DIGEST and what algorithms are allowed, such as is sha-256 allowed? Thanks, Dream * Excel * Explore * Inspire Jon McAlexander Infrastructure Engineer Asst Vice

RE: Question for verification

Doh Thanks! Dream * Excel * Explore * Inspire Jon McAlexander Infrastructure Engineer Asst Vice President Middleware Product Engineering Enterprise CIO | Platform Services | Middleware | Infrastructure Solutions 8080 Cobblestone Rd | Urbandale, IA 50322 MAC: F4469-010 Tel 515-988-2508 |

Question for verification

Verifying an assumption. All modern versions of Tomcat (8.5 and above) are compatible with Java 11. Thanks in advance Dream * Excel * Explore * Inspire Jon McAlexander Infrastructure Engineer Asst Vice President Middleware Product Engineering Enterprise CIO | Platform Services | Middleware |

RE: Tomcat 8.5.68 failing on takeoff!

I'm no expert, especially on AS400's, but make sure that your Java 8 is good. Saw someone on CentOS having a similar issue and it was a bad Java. Dream * Excel * Explore * Inspire Jon McAlexander Infrastructure Engineer Asst Vice President Middleware Product Engineering Enterprise CIO |

RE: Strange incomplete response/truncation with Tomcat 9.0.48 AND 9.0.50 [OT]

Thank you Chris!!! Dream * Excel * Explore * Inspire Jon McAlexander Infrastructure Engineer Asst Vice President Middleware Product Engineering Enterprise CIO | Platform Services | Middleware | Infrastructure Solutions 8080 Cobblestone Rd | Urbandale, IA 50322 MAC: F4469-010 Tel 515-988-2508 |

RE: Strange incomplete response/truncation with Tomcat 9.0.48 AND 9.0.50

Thanks Mark! Dream * Excel * Explore * Inspire Jon McAlexander Infrastructure Engineer Asst Vice President Middleware Product Engineering Enterprise CIO | Platform Services | Middleware | Infrastructure Solutions 8080 Cobblestone Rd | Urbandale, IA 50322 MAC: F4469-010 Tel 515-988-2508 | Cell

RE: Strange incomplete response/truncation with Tomcat 9.0.48 AND 9.0.50

Is there an estimated target date for release of 9.0.51 Dream * Excel * Explore * Inspire Jon McAlexander Infrastructure Engineer Asst Vice President Middleware Product Engineering Enterprise CIO | Platform Services | Middleware | Infrastructure Solutions 8080 Cobblestone Rd | Urbandale, IA

Strange incomplete response/truncation with Tomcat 9.0.48 AND 9.0.50

I have a team that is running into issues since version 9.0.48 where they are receiving incomplete message responses from Tomcat when the request was made from WebLogic. Here is the data I was provided: it is breaking application files by truncating the files from source to destination which

RE: [SECURITY] CVE-2021-30639 Apache Tomcat DoS

Corrected Numbers. Subtract 3667 desktops from the 8.5.64 numbers. 8.5.64 DISCOVERED_VERSION (Multiple Items) ASSET_CLAS_DS DESKTOP Row Labels Count of CI_NM_HOST (blank) 3667 Grand Total 3667 Distributed Servers: DISCOVERED_VERSION (Multiple Items) ASSET_CLAS_DS DISTRIBUTED

RE: CATALINA_OPTS vs JAVA_OPTS

Thanks Chris! Dream * Excel * Explore * Inspire Jon McAlexander Infrastructure Engineer Asst Vice President Middleware Product Engineering Enterprise CIO | Platform Services | Middleware | Infrastructure Solutions 8080 Cobblestone Rd | Urbandale, IA 50322 MAC: F4469-010 Tel 515-988-2508 | Cell

RE: CATALINA_OPTS vs JAVA_OPTS

Yes, but ultimately it is running Java, so was curious. Is there even a need of both when running as a Windows service? These are probably "duh" questions, but just want to fully "get it". Thanks, Dream * Excel * Explore * Inspire Jon McAlexander Infrastructure Engineer Asst Vice President

RE: CATALINA_OPTS vs JAVA_OPTS

Ok, so this is a really good explanation. However, when setting up in Windows as a Service, does the JAVA_OPTIONS in the Registry go in as JAVA_OPTS or CATALINA_OPTS? Is there a way to have separate CATALINA_OPTS for Tomcat Windows Services? Thanks, Dream * Excel * Explore * Inspire Jon

RE: Strange connection error

Is it a cypher issue? (noting the handshake issue). Did you also upgrade the Java at the same time? Dream * Excel * Explore * Inspire Jon McAlexander Infrastructure Engineer Asst Vice President Middleware Product Engineering Enterprise CIO | Platform Services | Middleware | Infrastructure

RE: Question about encrypting database passwords in the context.xml file - Tomcat 9

And when that isn't good enough for your senior management, take a look at the Tomcat Vault in GITHUB. :-) Dream * Excel * Explore * Inspire Jon McAlexander Infrastructure Engineer Asst Vice President Middleware Product Engineering Enterprise CIO | Platform Services | Middleware |

RE: Tomcat 9.0

Tomcat 9.0.45 was released on 4/6/2021. Dream * Excel * Explore * Inspire Jon McAlexander Infrastructure Engineer Asst Vice President Middleware Product Engineering Enterprise CIO | Platform Services | Middleware | Infrastructure Solutions 8080 Cobblestone Rd | Urbandale, IA 50322 MAC:

RE: Looking for useless information. :-)

Thanks everyone!!! Dream * Excel * Explore * Inspire Jon McAlexander Infrastructure Engineer Asst Vice President Middleware Product Engineering Enterprise CIO | Platform Services | Middleware | Infrastructure Solutions 8080 Cobblestone Rd | Urbandale, IA 50322 MAC: F4469-010 Tel 515-988-2508 |

Looking for useless information. :-)

Hi All. I have a team hounding me for the release date of Tomcat 3.1 and I'm not able to find it so far. Anyone remember this ancient history? Thanks, Dream * Excel * Explore * Inspire Jon McAlexander Infrastructure Engineer Asst Vice President Middleware Product Engineering Enterprise CIO |

RE: [ANN] Apache Tomcat 7.0.108 released

We are getting the firewall error again like we did once last year, stating that its blacklisted. Dream * Excel * Explore * Inspire Jon McAlexander Infrastructure Engineer Asst Vice President Middleware Product Engineering Enterprise CIO | Platform Services | Middleware | Infrastructure

RE: Tomcat end-point Client certificate issue

­They responded they are not using TLS session tickets, not to their knowledge. Sent with BlackBerry Work (www.blackberry.com) From: Mark Thomas Sent: Feb 6, 2021 2:39 AM To: users@tomcat.apache.org Subject: Re: Tomcat end-point Client certificate issue On

RE: Tomcat end-point Client certificate issue

I will check with the development team. Thanks, Dream * Excel * Explore * Inspire Jon McAlexander Infrastructure Engineer Asst Vice President Middleware Product Engineering Enterprise CIO | Platform Services | Middleware | Infrastructure Solutions 8080 Cobblestone Rd | Urbandale, IA 50322

Tomcat end-point Client certificate issue

Hey everybody, Anyone run into an error or warning like this before? App team is using Tomcat 9.0.37. [05/02/2021 14:34:14:702 ] [] WARN com...xxx.SearchCriteriaEnhancedController SearchCriteriaEnhancedAction::actionExecute CAS Query WS returned Fault. Details:

RE: random 400 errors

Thank you! I will pass this on to the app team. Sent with BlackBerry Work (www.blackberry.com) From: Mark Thomas Sent: Nov 24, 2020 3:14 AM To: users@tomcat.apache.org Subject: Re: random 400 errors On 24/11/2020 04:04, jonmcalexan...@wellsfargo.com.INVALID

random 400 errors

Hi Guru's I have an application team having a strange issue post upgrade to Tomcat 8.5.58 and/or 8.5.59 (Happens with both) from Tomcat 8.5.57. See below: "We are seeing issue in our application, where after upgrading from Tomcat 8.5.57 to 8.5.58 or 8.5.59, it randomly throws 400 error for

RE: Tomcat Windows Service

Windows Service On Fri, Nov 20, 2020 at 10:59 AM jonmcalexander wrote: > When adding an instance as a service and using a domain service account to > run Tomcat, > what additional user rights assignments does the service account need? The account will need at least SeServiceLogonRi

Tomcat Windows Service

Question, When adding an instance as a service and using a domain service account to run Tomcat, what additional user rights assignments does the service account need? Thanks! Sent with BlackBerry Work (www.blackberry.com)

RE: Default Application questions

Thank you! This answered my question. Dream * Excel * Explore * Inspire Jon McAlexander Infrastructure Engineer Asst Vice President Middleware Product Engineering Enterprise CIO | Platform Services | Middleware | Infrastructure Solutions 8080 Cobblestone Rd | Urbandale, IA 50322 MAC: F4469-010

Default Application questions

I'm doing some documentation cleanup. When was the balancer app, if it existed, removed from the ootb tomcat applications? Was there ever a webdav app, or just the WebdavServlet class? Thanks, Dream * Excel * Explore * Inspire Jon McAlexander Infrastructure Engineer Asst Vice President

RE: Question regarding Invoker

Thank you! Dream * Excel * Explore * Inspire Jon McAlexander Infrastructure Engineer Asst Vice President Middleware Product Engineering Enterprise CIO | Platform Services | Middleware | Infrastructure Solutions 8080 Cobblestone Rd | Urbandale, IA 50322 MAC: F4469-010 Tel 515-988-2508 | Cell

Question regarding Invoker

I believe I have read that the Invoker Servlet was deprecated in Tomcat 6 and removed entirely in Tomcat 7 and above. Can someone confirm that this is correct? I couldn't find any announcement of this on tomcat.apache.org. Thanks, Dream * Excel * Explore * Inspire Jon McAlexander

RE: Virtual event focussed on Tomcat Security

I really like the idea of this. Something similar to the ApacheCon, or a series of ZOOM meetings or such. Dream * Excel * Explore * Inspire Jon McAlexander Infrastructure Engineer Asst Vice President Middleware Product Engineering Enterprise CIO | Platform Services | Middleware |

RE: Any update on 9.0.38 release plan

Sounds like it could be any day now. Dream * Excel * Explore * Inspire Jon McAlexander Infrastructure Engineer Asst Vice President Middleware Product Engineering Enterprise CIO | Platform Services | Middleware | Infrastructure Solutions 8080 Cobblestone Rd | Urbandale, IA 50322 MAC: F4469-010

RE: Tomcat v9 - Insecure transport vulnerability reported by Qualys

What is the URL they are testing? Is there a reason there is a 9443 port open? How about adding a blank page with a redirect, or use the rewrite valve to rewrite to https? Dream * Excel * Explore * Inspire Jon McAlexander Asst Vice President Middleware Product Engineering Enterprise CIO |

RE: Tomcat v9 - Insecure transport vulnerability reported by Qualys

Did Qualsys include a QID with their report? Dream * Excel * Explore * Inspire Jon McAlexander Asst Vice President Middleware Product Engineering Enterprise CIO | Platform Services | Middleware | Infrastructure Solutions 8080 Cobblestone Rd | Urbandale, IA 50322 MAC: F4469-010 Tel 515-988-2508

<    1   2   3   >