Re: Tomcat Clustering Support

2018-10-10 Thread Mark Thomas
On 15/08/18 20:52, Mark Thomas wrote: > On 15/08/18 20:43, Scott Evans wrote: >> Hi, >> >> Our system is on Apache Tomcat Version 8.0.47. >> OS is Windows Server 2012 R2 Datacenter. >> >> We are looking for someone that may be interested in paid contract work to >> assist with troubleshooting and

Re: [SECURITY] CVE-2018-11784 Apache Tomcat - Open Redirect

2018-10-10 Thread Mark Thomas
On 08/10/18 21:55, Michael Yoder wrote: > On Wed, Oct 3, 2018 at 12:50 PM Mark Thomas wrote: >> CVE-2018-11784 Apache Tomcat - Open Redirect > > Is it possible to get more information on the "specially crafted URL"? > I'd like more information so that I can test if some of our apps are >

To Support at Tomcat, Got an issue Finding Maths.

2018-10-10 Thread Ian Burton
I have spent many hours searching for a organised way to ask for a Public void setter(double value){ Value = Maths.sin(param1); } Here is an example of files used from Java to JSP. [Calculus Beanjava – Measures.jsp] Nothing has been compatible, is there a licence restriction? Ian burton.

Re: [SECURITY] CVE-2018-11784 Apache Tomcat - Open Redirect

2018-10-10 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark and Michael, On 10/10/18 05:15, Mark Thomas wrote: > On 08/10/18 21:55, Michael Yoder wrote: >> On Wed, Oct 3, 2018 at 12:50 PM Mark Thomas >> wrote: >>> CVE-2018-11784 Apache Tomcat - Open Redirect >> >> Is it possible to get more

Re: log4j: Logging to same file from multiple contexts?

2018-10-10 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 David, On 10/8/18 14:27, David Filip wrote: > Dear Tomcat Users, > > Apologies if this is more of a log4j question, but I thought that > I'd start here, in case Tomcat has any easy remedies. > > I have a common webapp that I deploy to multiple,

Re: TLS1.3 support for tomcat 7 with APR/tomcat-native

2018-10-10 Thread Усманов Азат Анварович
Thanks Cristopher, I already did. All that´s left is to get the latest patch backported to tomcat 7 От: Christopher Schultz Отправлено: 10 октября 2018 г. 17:47:47 Кому: users@tomcat.apache.org Тема: Re: TLS1.3 support for tomcat 7 with APR/tomcat-native

Re: To Support at Tomcat, Got an issue Finding Maths.

2018-10-10 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Ian, On 10/10/18 06:19, Ian Burton wrote: > I have spent many hours searching for a organised way to ask for a > > Public void setter(double value){ > > Value = Maths.sin(param1); > > } > > Here is an example of files used from Java to JSP. >

Re: Tomcat JNDI Authentication - No Login

2018-10-10 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Lee, On 10/9/18 08:11, Lee Broom wrote: > Hello My aim is to introduce a domain level > authentication/authorisation security layer when accessing the > http://localhost:8080/sample/ application. I don't want this web > application to be openly

Re: Redirecting to https URL when https port is accessed with http scheme

2018-10-10 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Martynas, On 10/6/18 06:31, Martynas Jusevičius wrote: > see also this thread: > https://mail-archives.apache.org/mod_mbox/tomcat-users/201808.mbox/%3C cae35vmwcm9dkxmvabofgjb5d_oa07a6mrjxwcgknksbzgjh...@mail.gmail.com%3E > > I did this with

Re: TC 8.5 cachingAllowed=false ramifications?

2018-10-10 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Cris, On 10/9/18 11:59, Berneburg, Cris J. - US wrote: > Thanks Chris > > cjb> of TC 8.5.32 on Java 8u181, report output Excel cjb> files > won't load (immediately). An error is cjb> displayed to the user. > [...] cjb> 1. What are the

Re: Request for a technical review

2018-10-10 Thread Deepak Behera
Hi Mallory, I can have a look. Please let me know further details. Thanks, Deepak Behera

Request for a technical review

2018-10-10 Thread Mallory Mooney
Hi all, I work for Datadog and am writing a guide about monitoring Tomcat (with or without Datadog). I'd love to get some feedback on the technical content. The project maintainers we reached out to recommended we post a request here. Would anyone be up for that? I can send the post link to

Security Alerts Email Subscription

2018-10-10 Thread Goutam, Pradeep
Hello Team Is there a mailing list for subscription to just the security alerts for Apache HTTP and Tomcat Server, If there is one can you please send it to me. Thanks Pradeep This e-mail transmission may contain information that is proprietary, privileged and/or confidential and is intended

Re: TLS1.3 support for tomcat 7 with APR/tomcat-native

2018-10-10 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Усманов, On 10/6/18 17:27, Усманов Азат Анварович wrote: > I've been searching the web for any idea why Chrome can do throw > empty response error with tls1.3 and found this bug > https://bugzilla.redhat.com/show_bug.cgi?id=1619389 at fedora , it

Re: Security Alerts Email Subscription

2018-10-10 Thread Igal Sapir
Pradeep, On 10/10/2018 11:03 AM, Goutam, Pradeep wrote: Hello Team Is there a mailing list for subscription to just the security alerts for Apache HTTP and Tomcat Server, If there is one can you please send it to me. You should subscribe to the Announce mailing list:

Re: Request for a technical review

2018-10-10 Thread Mark Thomas
On 10/10/18 17:44, Mallory Mooney wrote: > Hi all, > > I work for Datadog and am writing a guide about monitoring Tomcat (with or > without Datadog). I'd love to get some feedback on the technical content. > The project maintainers we reached out to recommended we post a request > here. > >

RE: Tomcat Clustering Support

2018-10-10 Thread Caldarale, Charles R
> From: Mark Thomas [mailto:ma...@apache.org] > Subject: Re: Tomcat Clustering Support > Thread A is in the middle of processing a request. It is evaluating some > EL which requires access to the view map which in turn causes the > ViewMap to update the session. >