Re: Tomcat version 9.0.22 release

On Sat, Jul 13, 2019 at 12:47 AM Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Krushal, > > On 7/11/19 13:00, Kaushal Shriyan wrote: > > Is there a way to find out if tomcat version 9.0.22 > >

Re: High CPU Usage with Tomcat 9 in SSL

Are you using JSSE or OpenSSL for crypto? JSSE. will there be any difference with openssl? How are you measuring CPU usage? using jconsole/jvisualvm Have you tried to correlate that CPU usage with user-request load? I am not sure if I understood the question, but I ran similar load for over a

Re: Tomcat 9 & Port 80

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 André and Ralph, On 7/12/19 05:59, André Warnier (tomcat) wrote: > On 11.07.2019 21:37, Arbelo, Ralph wrote: >> Thank you for your reply, André. >> >> Unfortunately, the Tomcat 9 Ubuntu package is only available on >> Ubuntu 18 and 19 (at least

Re: High CPU Usage with Tomcat 9 in SSL

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Sumit, On 7/12/19 08:30, Sumit Bhardwaj wrote: > Hi, > > We are using tomcat 9.0.14,and we are running some performance > tests for our application. > > What we have observed is that 1- CPU usage of tomcat is less than > 10%, when using tomcat

Re: Tomcat version 9.0.22 release

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Krushal, On 7/11/19 13:00, Kaushal Shriyan wrote: > Is there a way to find out if tomcat version 9.0.22 > https://tomcat.apache.org/download-90.cgi#9.0.22 is a security or > enhancement or bug fix to tomcat version 9.0.21? > > Any help would be

Modify web.xml in production war file

Hi Everyone, We have been shipping web application with war packaging in our production builds which contains a web.xml with few security sections. This web.xml defines security constraints that are in most cases not what the final deployment uses. This means that to update the war we need to

Re: TLS client cert clarification

Thanks for the very quick response! Out of curiosity is this ensured by some sort of caching in the Tomcat server after the TLS handshake? Or is it expected that the client would send the certificate with each post handshake request. I ask as I'm seeing intermittent requests that do not have

High CPU Usage with Tomcat 9 in SSL

Hi, We are using tomcat 9.0.14,and we are running some performance tests for our application. What we have observed is that 1- CPU usage of tomcat is less than 10%, when using tomcat without SSL for a week. 2. CPU Usage is around 20% and it keeps growing after a day to 40% and keeps increasing

Re: Tomcat 9 & Port 80

On 11.07.2019 21:37, Arbelo, Ralph wrote: Thank you for your reply, André. Unfortunately, the Tomcat 9 Ubuntu package is only available on Ubuntu 18 and 19 (at least that I could find). I'm on 16 at the moment (though I did think about upgrading) which is why I'm using the binary distribution

Re: OCSP Connector on Tomcat 8.5 not working

On 11/07/2019 21:18, Michael Magnuson wrote: > > > Thanks Mark. I would like to deny access if an unknown response is received. Understood. Please open an enhancement request in Bugzilla to deny a request if an unknown OCSP response is received. http://tomcat.apache.org/bugreport.html It is

Re: TLS client cert clarification

On 12/07/2019 08:22, Martynas Jusevičius wrote: > In my experience with 8.x -- on all requests. The above is correct for JSSE based TLS connections. It also applies to most OpenSSL based connections. There is one edge case that can cause problems. If: - OpenSSL based TLS connections are used; -

RE: Tomcat serving javascript files as text/html

Hi all, Also css files are served as text/html which causes my pages no longer to be rendered correctly. It all seems related to a change in Tomcat-8.5.36: "The default Servlet should not override a previously set content-type. (remm)" The application sets the content-type in the jsp

Re: Tomcat serving javascript files as text/html

On 12/07/2019 08:27, Jean Pierre Urkens wrote: > Hi, > > I recently upgraded my Tomcat-8.5 installation from 8.5.30 to the latest > version 8.5.43 and I am noticing that js files are served by > Tomcat-8.5.43 with content-type: ‘text/html’ instead of > ‘application/javascript’ as it is

Tomcat serving javascript files as text/html

Hi, I recently upgraded my Tomcat-8.5 installation from 8.5.30 to the latest version 8.5.43 and I am noticing that js files are served by Tomcat-8.5.43 with content-type: 'text/html' instead of 'application/javascript' as it is configured in the mime-mappings. Could someone clarify this

Re: TLS client cert clarification

In my experience with 8.x -- on all requests. On Fri, Jul 12, 2019 at 3:06 AM Wilmoth, Jon wrote: > > I was hoping to get some clarification on when to expect client x509 certs in > http requests where the Tomcat server (v9.x) has been configured to “want” or > “need” client auth. >