Re: Tomcat 7 cannot get ciphers with SHA256 or SHA384

2014-05-26 Thread Sverre Moe
Documentation aside, none of these cipher-suites are supported in Oracle Java 7. The AES_CBC ciphers I had there are supported in Java 7. I have already concluded as much regarding the AES_x_GCM. Using Java 8 one have access to these higher GCM ciphers, but only very few obscure browsers

Re: realm, access to Request object

2014-05-26 Thread Jan Vávra
Hello. -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 5/20/14, 4:28 AM, Mark Thomas wrote: On 20/05/2014 09:11, Jan Vávra wrote: Hello. I write my own realm implementation for Tomcat 7.x. In the method Principal authenticate(X509Certificate[] certs) I'd like to read request

Re: How to monitor performance of tomcat

2014-05-26 Thread Randhir Singh
Hi, I increased the Heap PermGen memory as per trail mail but the performance seemed to deteriorate. On the day I increased the memory in the morning, the system hung 3 times in the day whereas the maximum times it has got hang before is 2 times in a day. I changed the memory settings for Heap

RE: Tomcat is down or refused connection

2014-05-26 Thread Ballarpure, Akshay (EXT-Tata Consultancy Ser - IN/Hyderabad)
Thanks for information.. Sorry i missed adding important information. I can see below message for only 1 or 2 second and it got recovered automatically. [Tue May 20 06:48:43 2014] [57070:140373099702016] [error] ajp_get_reply::jk_ajp_common.c (2126): (worker1) Tomcat is down or refused

Re: Tomcat 7 cannot get ciphers with SHA256 or SHA384

2014-05-26 Thread Tim Whittington
On 26/05/2014, at 6:58 pm, Sverre Moe sverre@gmail.com wrote: Documentation aside, none of these cipher-suites are supported in Oracle Java 7. The AES_CBC ciphers I had there are supported in Java 7. I have already concluded as much regarding the AES_x_GCM. Using Java 8 one have

Re: Tomcat 7 cannot get ciphers with SHA256 or SHA384

2014-05-26 Thread Sverre Moe
Latest versions of Firefox and Chrome (and others I suspect) use GCM ciphers (gmail seems to prefer them for example). Yes, but it only supports AES_128_GCM_SHA256. No Chromium support for AES_256_GCM_SHA384. Neither does it support SHA256/SHA384 for AES_X_CBC. You don’t have to accept the

Re: How to monitor performance of tomcat

2014-05-26 Thread André Warnier
Randhir Singh wrote: Hi, I increased the Heap PermGen memory as per trail mail but the performance seemed to deteriorate. On the day I increased the memory in the morning, the system hung 3 times in the day whereas the maximum times it has got hang before is 2 times in a day. I changed the

Re: Tomcat is down or refused connection

2014-05-26 Thread Mark Eggers
Please do not top post. On 5/26/2014 2:15 AM, Ballarpure, Akshay (EXT-Tata Consultancy Ser - IN/Hyderabad) wrote: Thanks for information.. Sorry i missed adding important information. I can see below message for only 1 or 2 second and it got recovered automatically. [Tue May 20 06:48:43

Re: Tomcat 7 cannot get ciphers with SHA256 or SHA384

2014-05-26 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Tim, On 5/25/14, 9:34 PM, Tim Whittington wrote: On 21/05/2014, at 10:21 pm, Sverre Moe sverre@gmail.com wrote: snip ciphers=TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA265,

Re: Tomcat 7 cannot get ciphers with SHA256 or SHA384

2014-05-26 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Sverre, On 5/26/14, 5:42 AM, Sverre Moe wrote: Latest versions of Firefox and Chrome (and others I suspect) use GCM ciphers (gmail seems to prefer them for example). Yes, but it only supports AES_128_GCM_SHA256. No Chromium support for

Re: Tomcat is down or refused connection

2014-05-26 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 5/26/14, 10:25 AM, Mark Eggers wrote: Please do not top post. On 5/26/2014 2:15 AM, Ballarpure, Akshay (EXT-Tata Consultancy Ser - IN/Hyderabad) wrote: Thanks for information.. Sorry i missed adding important information. I can

Re: Regarding i think an intrusion

2014-05-26 Thread Leonardo Santagostini
Well well well. Thank you all so much !!! Since Struts upgrade i got not intrussion on my servers =) =) Thank you list for the support, for the time and for helpme with this issue. Yours, Leonardo Saludos.- Leonardo Santagostini http://ar.linkedin.com/in/santagostini 2014-05-20 12:45

Re: realm, access to Request object

2014-05-26 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jan, On 5/26/14, 2:58 AM, Jan Vávra wrote: Hello. -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 5/20/14, 4:28 AM, Mark Thomas wrote: On 20/05/2014 09:11, Jan Vávra wrote: Hello. I write my own realm implementation for Tomcat

Re: AJP protocol with Apache Tomcat Version 7.0.52

2014-05-26 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Pradeep, On 5/23/14, 2:26 PM, pradeepgm wrote: You have a blocking AJP connector (BIO) with maxThreads of 250. Therefore that connector can support a maximum of 250 connections. You have httpd with MaxClients 1536 and - since AJP uses

Re: CATALINA_PID != real PID

2014-05-26 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Арсений, On 5/23/14, 7:24 AM, Арсений Зинченко wrote: Hi, Leon. Thanks for replay. Don't know why - but now it works good :-) If Tomcat was already running, you might have cloberred your PID file, but not actually successfully-launched

Re: Tomcat 7 Cluster with load balancing only needs to run a service periodically

2014-05-26 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Suhas, On 5/21/14, 9:46 AM, Suhaas Lang wrote: Thanks for your response. No. I am not allowed to use cron :-) One thing I have been asked to look at is nodes co-ordinating by sending events to each other. But again I am wondering how

Re: Tomcat 7 cannot get ciphers with SHA256 or SHA384

2014-05-26 Thread Sverre Moe
AES GCM mode is not in Java 7, that is right. These higher cipher suites are supported and implemented in Java 8. There is just that none of the major browsers support them. *http://docs.oracle.com/javase/8/docs/technotes/guides/security/SunProviders.html#SupportedCipherSuites

Re: Tomcat is down or refused connection

2014-05-26 Thread Mark Eggers
Chris, On 5/26/2014 11:28 AM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 5/26/14, 10:25 AM, Mark Eggers wrote: Please do not top post. On 5/26/2014 2:15 AM, Ballarpure, Akshay (EXT-Tata Consultancy Ser - IN/Hyderabad) wrote: Thanks for information..

Re: Tomcat 7 Cluster with load balancing only needs to run a service periodically

2014-05-26 Thread Suhaas Lang
Yes, Christopher, I know. Any pointers? Any open source libraries that might be worth looking at? Regards, Suhaas On May 26, 2014 2:52 PM, Christopher Schultz ch...@christopherschultz.net wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Suhas, On 5/21/14, 9:46 AM, Suhaas Lang

Re: Tomcat 7 cannot get ciphers with SHA256 or SHA384

2014-05-26 Thread Tim Whittington
On 27/05/2014, at 6:09 am, Christopher Schultz ch...@christopherschultz.net wrote: snip If you run the code I referenced elsewhere in this thread, you'll see that some of the components are available, just not in the combinations you have above: $ java -showversion -classpath build/