Re: Security issue involving HTTP response headers

2019-10-22 Thread logo
Hi James, see below: Am 2019-10-21 23:34, schrieb James H. H. Lampert: httpHeaderSecurity org.apache.catalina.filters.HttpHeaderSecurityFilter antiClickJackingOption SAMEORIGIN Mark mentioned it before, that can also go into your apps web.xml and

postgresql jndi datasource with certificate authentication?

2019-10-22 Thread Magosányi Árpád
Hi! Anyone have a postgresql jndi datasource with certificate authentication working? I have the following in context.xml:     I have this in ~tomcat/.postgresql: root@market:/var/lib/tomcat9/.postgresql# ls -lL total 11 -rw-r--r-- 1 root   root 4597 Oct 21 12:49 postgresql.crt

Re: postgresql jndi datasource with certificate authentication?

2019-10-22 Thread logo
Arpad, have you tried sth like this: StringBuffer sb = new StringBuffer("jdbc:postgresql://infra.kodekonveyor.com:5432/users?useSSL=true=true=UTF-8&"); sb.append("user=market=&");

OT Developer Praise - was Re: EOL for Tomcat 9.X ?

2019-10-22 Thread Olaf Kock
On 22.10.19 17:56, Michael Osipov wrote: > Am 2019-10-22 um 16:43 schrieb Christopher Schultz: >> >> So Tomcat 9 is looking good for aother 10 years at this point. > > ...and this is the reason why I appreciate the Tomcat devs' work. I > can simply stick to a version and virtually forget about

Re: Cannot add dependency job for unit systemd-console-setup.service

2019-10-22 Thread Christopher Schultz
Emefile, On 10/20/19 10:00, Zero wrote: On 10/20/19 3:28 PM, Emefile Francis Nwajie wrote: Thank you Andre for helping out. I figured that the "systemd-console-setup.service" was disabled in the server. I have enable it. However, tomcat still refuses to start. Below is the content of

Re: OT Developer Praise - was Re: EOL for Tomcat 9.X ?

2019-10-22 Thread Christopher Schultz
Olaf, On 10/22/19 12:17, Olaf Kock wrote: On 22.10.19 17:56, Michael Osipov wrote: Am 2019-10-22 um 16:43 schrieb Christopher Schultz: So Tomcat 9 is looking good for aother 10 years at this point. ...and this is the reason why I appreciate the Tomcat devs' work. I can simply stick to a

Re: SameSite Cookie Setup Not Working

2019-10-22 Thread M. Manna
Apologies, but got this resolved. the httpOly attribute was missing from one of the apps. I have now set it globally for all my apps. Thanks, On Tue, 22 Oct 2019 at 15:34, M. Manna wrote: > Hello, > > As per the official documentation, I setup my same site cookie using >

Re: Adding the manager app to an existing installation

2019-10-22 Thread Christopher Schultz
Tom, On 10/18/19 12:54, Tom Povey wrote: Typo in my email. They’re on 8.5.36. I will upgrade them to the latest 8.5. Might be easiest to copy/paste the tomcat-users.xml file into an email and DEFINITELY REMOVE YOUR PASSWORDS from it. -chris On 18 Oct 2019, at 16:45, Olaf Kock wrote:

Re: postgresql jndi datasource with certificate authentication?

2019-10-22 Thread logo
Arpad and Chris, Am 2019-10-22 18:07, schrieb Christopher Schultz: Magosányi, On 10/22/19 11:09, Magosányi Árpád wrote: As I understand you are suggesting to use direct connection to the database. The servlet needs a JNDI datasource, and the question is about configuring that datasource in

Re: postgresql jndi datasource with certificate authentication?

2019-10-22 Thread Christopher Schultz
Arpad, On 10/22/19 12:19, logo wrote: I have the following in context.xml: url="jdbc:postgresql://infra.kodekonveyor.com:5432/users?ssl=truesslmode=verify-ca" username="market" maxTotal="20" maxIdle="10" maxWaitMillis="-1"/> I have this in

SameSite Cookie Setup Not Working

2019-10-22 Thread M. Manna
Hello, As per the official documentation, I setup my same site cookie using Rfc62665CookieProcessor and set everything in "strict" mode. However, when I restarted my server, I only see httpOnly, secure - but not SameSite checked under browser's developer console. Could someone please help me

Re: EOL for Tomcat 9.X ?

2019-10-22 Thread Michael Osipov
Am 2019-10-22 um 16:43 schrieb Christopher Schultz: Robert, On 10/18/19 11:46, Robert Hicks wrote: Thanks! Further, releases of the servlet spec seem to be published approximately every 4 years in recent memory[1]. Tomcat 9 implements spec version 4.0, released in Sept 2017. If that

Re: postgresql jndi datasource with certificate authentication?

2019-10-22 Thread Christopher Schultz
Magosányi, On 10/22/19 11:09, Magosányi Árpád wrote: As I understand you are suggesting to use direct connection to the database. The servlet needs a JNDI datasource, and the question is about configuring that datasource in tomcat. As I can modify the servlet, I could choose to set up hibernate

Re: OT Developer Praise - was Re: EOL for Tomcat 9.X ?

2019-10-22 Thread Christopher Schultz
Olaf, On 10/22/19 12:17, Olaf Kock wrote: On 22.10.19 17:56, Michael Osipov wrote: Am 2019-10-22 um 16:43 schrieb Christopher Schultz: So Tomcat 9 is looking good for aother 10 years at this point. ...and this is the reason why I appreciate the Tomcat devs' work. I can simply stick to a

Re: EOL for Tomcat 9.X ?

2019-10-22 Thread Christopher Schultz
Robert, On 10/18/19 11:46, Robert Hicks wrote: Thanks! Further, releases of the servlet spec seem to be published approximately every 4 years in recent memory[1]. Tomcat 9 implements spec version 4.0, released in Sept 2017. If that version is superseded twice and history is a guide, then

Re: postgresql jndi datasource with certificate authentication?

2019-10-22 Thread Magosányi Árpád
Peter, As I understand you are suggesting to use direct connection to the database. The servlet needs a JNDI datasource, and the question is about configuring that datasource in tomcat. As I can modify the servlet, I could choose to set up hibernate in other ways, but I would like to separate the

Re: postgresql jndi datasource with certificate authentication?

2019-10-22 Thread Magosányi Árpád
Thank you all for the suggestions. Based on the documentation, my setup should work: The server certificate is already processed and accepted (I know that because I could not get it right at the first try). The driver is supposed to work with a PEM certificate and a pkcs-8 DER encoded key, and

Basic question about application configuration

2019-10-22 Thread Mathieu Dubois
Dear Tomcat users, I am not familiar with Tomcat or the Java world in general so I have a rather simple question. Part of my job is to maintain and evolve a Java web application based on JBPM which as such use a (MySQL) DB. This application is independently deployed on a handful Tomcat

AW: Basic question about application configuration

2019-10-22 Thread bernd . schatz
Hi Mathieu, > -Ursprüngliche Nachricht- > Von: Mathieu Dubois > Gesendet: Mittwoch, 23. Oktober 2019 03:00 > An: users@tomcat.apache.org [SNIP] > I have read a bit about Tomcat and if I understand correctly, the > correct way to do is to declare a Resource in the configuration of each >