Re: Trouble with ServiceLoader from common.loader

2020-04-15 Thread Osipov, Michael
Am 2020-04-16 um 00:01 schrieb [ext] Osipov, Michael: Seekings advise whether it is me/my understanding or some flaw in Tomcat's class loader hierarchy. The test happens on Tomcat 8.5.54 with Java 13 for JDK-8160768. My implementation of javax.naming.ldap.spi.LdapDnsProvider is packed along w

Trouble with ServiceLoader from common.loader

2020-04-15 Thread Osipov, Michael
Seekings advise whether it is me/my understanding or some flaw in Tomcat's class loader hierarchy. The test happens on Tomcat 8.5.54 with Java 13 for JDK-8160768. My implementation of javax.naming.ldap.spi.LdapDnsProvider is packed along with the META-INF/services/javax.naming.ldap.spi.LdapDns

Re: [OT] Webapp deployed in Tomcat 8.5.31 fail to use TLSv1.2 when sending mail

2020-04-15 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Curt, Marking [OT] since Tomcat is not responsible for sending email. Responses in-line. On 4/14/20 06:48, Curt Johansson wrote: > Hi, I have a written a webapplication deployed in Tomcat 8.5.31 > that sends mail using Apache-commons email client.

Re: Alternatives for AJP

2020-04-15 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Frank, On 4/15/20 03:05, Frank Tornack wrote: > Chris, > > Am Dienstag, den 14.04.2020, 10:56 -0400 schrieb Christopher > Schultz: >> Frank, >> >> On 4/12/20 10:20, Frank Tornack wrote: >>> It is possible to replace AJP with normal HTTP or HTTPs. >>

Re: Tomcat SSL Connector - Http11NioProtocol - javax.crypto.ShortBufferException on second request

2020-04-15 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Andrea, On 4/14/20 04:29, Parigino Andrea Aiello wrote: > Il giorno lun 13 apr 2020 alle ore 21:49 Rémy Maucherat > ha scritto: > >> On Mon, Apr 13, 2020 at 7:07 PM Mark Thomas >> wrote: >> >>> On 13/04/2020 11:39, Parigino Andrea Aiello wrote: >>

Re: java.lang.IllegalArgumentException: Invalid character found in the request target. The valid characters are defined in RFC 7230 and RFC 3986

2020-04-15 Thread Manuel Dominguez Sarmiento
Base64 would work. I would suggest the error log makes this explicit, so whoever looks at it knows how to deal with it and diagnose accordingly. *Manuel Dominguez Sarmiento* On 15/04/2020 15:37, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Manuel, On 4/13/20 15:

Re: java.lang.IllegalArgumentException: Invalid character found in the request target. The valid characters are defined in RFC 7230 and RFC 3986

2020-04-15 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Manuel, On 4/13/20 15:13, Manuel Dominguez Sarmiento wrote: > Thanks Mark. Including the request line (encoded if necessary to > avoid issues with control characters) should definitely help. Yeah, I was thinking that maybe base64-encoding the reque

Re: Accessing server cert from valve

2020-04-15 Thread Osipov, Michael
Added as https://bz.apache.org/bugzilla/show_bug.cgi?id=64353 - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Accessing server cert from valve

2020-04-15 Thread Osipov, Michael
Mark, Am 2020-04-15 um 13:44 schrieb Mark Thomas: > On 15/04/2020 12:06, Osipov, Michael wrote: >> Folks, >> >> is there any way to access the server certififace from a valve which has >> been used to establish the TLS context? I haven't found an easy way. I >> don't want to traverse request.getC

Re: Accessing server cert from valve

2020-04-15 Thread Mark Thomas
On 15/04/2020 12:06, Osipov, Michael wrote: > Folks, > > is there any way to access the server certififace from a valve which has > been used to establish the TLS context? I haven't found an easy way. I > don't want to traverse request.getConnector().findSslHostConfigs() > because it would make it

Accessing server cert from valve

2020-04-15 Thread Osipov, Michael
Folks, is there any way to access the server certififace from a valve which has been used to establish the TLS context? I haven't found an easy way. I don't want to traverse request.getConnector().findSslHostConfigs() because it would make it more complex than necessary or even unreliable, es

Re: Tomcat 9 under Debian 10 - GC issues - 100% CPU

2020-04-15 Thread Mark Thomas
On 15/04/2020 10:39, Yves Berquin wrote: > Hello, > > Our typical platform for running our app is a dedicated server with 32GB of > RAM running Tomcat 8.50 under Debian9 and Java 8. We run +- 20 .war > programs on these platforms. It's running fine. The app is not very > demanding - it gets its da

Tomcat 9 under Debian 10 - GC issues - 100% CPU

2020-04-15 Thread Yves Berquin
Hello, Our typical platform for running our app is a dedicated server with 32GB of RAM running Tomcat 8.50 under Debian9 and Java 8. We run +- 20 .war programs on these platforms. It's running fine. The app is not very demanding - it gets its data from a postgresql server. When we tried moving to

Re: HTTP2 Pseudo Headers in HttpServletRequest

2020-04-15 Thread Chirag Dewan
Hi Mark, Thanks for the quick update. That would work. Thank you, Chirag On Wed, 15 Apr, 2020, 1:00 PM Mark Thomas, wrote: > On 15/04/2020 06:32, Chirag Dewan wrote: > > Hi, > > > > I have a Jersey application deployed on an Embedded Tomcat 9.0.29. I have > > enabled the APR connector with HTT

Re: HTTP2 Pseudo Headers in HttpServletRequest

2020-04-15 Thread Mark Thomas
On 15/04/2020 06:32, Chirag Dewan wrote: > Hi, > > I have a Jersey application deployed on an Embedded Tomcat 9.0.29. I have > enabled the APR connector with HTTP2 Upgrade Protocol to support HTTP2 > requests. > > Now when I try to get :authority and :path header from the > HttpServletRequest, I

Re: Alternatives for AJP

2020-04-15 Thread Frank Tornack
Chris, Am Dienstag, den 14.04.2020, 10:56 -0400 schrieb Christopher Schultz: > Frank, > > On 4/12/20 10:20, Frank Tornack wrote: > > It is possible to replace AJP with normal HTTP or HTTPs. > > > > AJP has an advantage, it needs less bandwidth. > > Reference? https://marc.info/?l=tomcat-user&m=