Re: Configuring DIGEST auth for manager

2017-11-08 Thread Philippe Mouawad
Hello, Any feedback on this ? Thanks On Sun, Nov 5, 2017 at 9:16 PM, Philippe Mouawad < p.moua...@ubik-ingenierie.com> wrote: > Hello, > I am having issues making Digest auth work in Tomcat 8.5.23 for manager > application. > > I have done the following: > > 1) Edit server.xml and have set

Question related to mutual authentication

2017-11-08 Thread Nicolas Therrien
Hi! I have successfully set up mutual authentication on a Tomcat 9.0.1 server running on CentOS 6.5. To do my testing, I use a Java program that I wrote to verify my understanding of SSL and the server configuration. My question is about the server-side verification of the client certificate

Re: stopping scanning of TLDs

2017-11-08 Thread Ray Holme
this makes it easy in linux or mac land for i in *.jar; do echo scanning $i; jar tf $i | grep "\.tld"; sleep 1; done On Wednesday, November 8, 2017 3:27 PM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Ray, On 11/8/17 11:24

Re: stopping scanning of TLDs

2017-11-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Ray, On 11/8/17 11:24 AM, Ray Holme wrote: > In a prior post, I asked if there was a way to see if a jar uses a > tag library. Chris responded - look for ".tld" in the files. To clarify, I was responding to a question as to whether a JAR file

Re: non www to www URL Rewrite

2017-11-08 Thread tomcat
On 08.11.2017 17:35, RAVIRAJ SHAH wrote: Sorry for my language my query with example Let's say my website domain is "example.com" Now I want to redirect "example.com" to "www.example.com" Kindly share how I can achieve it Well first, you need the 2 entries in the DNS server for "example.com".

Re: stopping scanning of TLDs

2017-11-08 Thread Chris Cheshire
On Wed, Nov 8, 2017 at 11:24 AM, Ray Holme wrote: > In a prior post, I asked if there was a way to see if a jar uses a tag > library. > Chris responded - look for ".tld" in the files. > So I looked (turns out ecj.. has no ".tld": > $ grep "tld" *.jarBinary file

Re: non www to www URL Rewrite

2017-11-08 Thread RAVIRAJ SHAH
Sorry for my language my query with example Let's say my website domain is "example.com" Now I want to redirect "example.com" to "www.example.com" Kindly share how I can achieve it On Wed, Nov 8, 2017, 19:08 André Warnier (tomcat) wrote: > On 08.11.2017 14:30, RAVIRAJ SHAH

Re: stopping scanning of TLDs

2017-11-08 Thread Ray Holme
In a prior post, I asked if there was a way to see if a jar uses  a tag library.   Chris responded - look for ".tld" in the files. So I looked (turns out ecj.. has no ".tld": $ grep "tld" *.jarBinary file catalina-storeconfig.jar matches Binary file ecj-4.6.1.jar matches Binary file

Re: Supported callbacks in Tomcat JASPIC implementation

2017-11-08 Thread Lazar Kirchev
Yes, my mistake - 3.5, not 4.5. But the content is the same. Thanks Mark! On Wed, Nov 8, 2017 at 5:38 PM, Mark Thomas wrote: > On 08/11/2017 12:00, Lazar Kirchev wrote: > > Hello, > > > > According to the JASSPIC spec version 1.1, chapter 4.5, The > CallbackHandler > > should

Re: Supported callbacks in Tomcat JASPIC implementation

2017-11-08 Thread Mark Thomas
On 08/11/2017 12:00, Lazar Kirchev wrote: > Hello, > > According to the JASSPIC spec version 1.1, chapter 4.5, The CallbackHandler > should support CallerPrincipalCallback, GroupPrincipalCallback, > PasswordValidationCallback, as well as CertStoreCallback, > PrivateKeyCallback, SecretKeyCallback

Re: stopping scanning of TLDs

2017-11-08 Thread Mark Thomas
On 08/11/2017 12:59, Ray Holme wrote: > The following three are interesting as they are in the tomcat distributed > list of NOT-TO_SCAN and have .tlds: catalina-storeconfig.jar; ecj-4.6.1.jar; > tomcat-util-scan.jar No, they don't. What led you to conclude that they did? Mark

tomcat-jdbc connection return to pool and SQL Warnings

2017-11-08 Thread Benoit Wiart
Hi, It looks like Connection#clearWarnings() is not called on the proxied jdbc connection when the connection is returned to the pool. Is this something missing or that's a design choice ? In our use case : 1 - borrow a connection from the pool 2 - use it -> the driver set a SQLWarning on the

Re: Start embedded Tomcat 9.0.1 server from java code

2017-11-08 Thread Maxim Solodovnik
Thanks a lot for the review Konstantin, I have correct our tests :) Will Also contact CXF project This code was taken from their tests: [1] :)) [1] https://github.com/apache/cxf/blob/master/systests/cdi/base/src/main/java/org/apache/cxf/systests/cdi/base/tomcat/AbstractTomcatServer.java#L45 On

Re: non www to www URL Rewrite

2017-11-08 Thread tomcat
On 08.11.2017 14:30, RAVIRAJ SHAH wrote: Anybody please help I think that you first try to communicate more clearly what you want to achieve. "redirect non-www URL to www URL only" does not appear to make much sense. Also please send your message to the list as *plain text*, not html. It will

Re: non www to www URL Rewrite

2017-11-08 Thread RAVIRAJ SHAH
Anybody please help On Tue, Nov 7, 2017, 12:00 RAVIRAJ SHAH wrote: > Dear All, > > Kindly request you to help to resolve this issue > > Problem Statement : > we want to redirect non-www URL to www URL only > > Current setup : > > Defined rewrite valve in server.xml as

stopping scanning of TLDs

2017-11-08 Thread Ray Holme
Using Chris's algorithm, I searched for ".tld" in all jars used by both tomcat and my application extending it. The following two were in my .../WEB-INF/lib directory and needed to NOT be in the list of NOT-TO_SCAN   i.e. ...  they need to be scanned:  jasperreports-5.1.0.jar matches; 

Supported callbacks in Tomcat JASPIC implementation

2017-11-08 Thread Lazar Kirchev
Hello, According to the JASSPIC spec version 1.1, chapter 4.5, The CallbackHandler should support CallerPrincipalCallback, GroupPrincipalCallback, PasswordValidationCallback, as well as CertStoreCallback, PrivateKeyCallback, SecretKeyCallback and TrustStoreCallback. However, in Tomcat 8.5.*

Re: Start embedded Tomcat 9.0.1 server from java code

2017-11-08 Thread Konstantin Kolinko
I have several comments on [1] https://github.com/apache/openmeetings/blob/master/openmeetings-web/src/test/java/org/apache/openmeetings/webservice/AbstractWebServiceTest.java#L98 2017-11-07 20:07 GMT+03:00 Tobias Soloschenko : > Hi Maxim, > > same for me I