Re: Strange crash-on-takeoff, Tomcat 7.0.104

2020-11-18 Thread Mark Eggers
James, On 11/18/2020 5:06 PM, James H. H. Lampert wrote: Ladies and Gentlemen: The same customer installation that required 104 (but with the 103 catalina.sh, to avoid Bug 64501) back in June is now demanding an update to 106 because of the CVE-2020-13935 vulnerability. Two questions: 1. I

Re: Strange crash-on-takeoff, Tomcat 7.0.104

2020-11-18 Thread James H. H. Lampert
Ladies and Gentlemen: The same customer installation that required 104 (but with the 103 catalina.sh, to avoid Bug 64501) back in June is now demanding an update to 106 because of the CVE-2020-13935 vulnerability. Two questions: 1. Is the problem from June fixed in 106? 2. Does 106 take care

Re: tomcat 8.5 TLS cipher strings

2020-11-18 Thread Baron Fujimoto
On Wed, Nov 18, 2020 at 04:45:05PM +, Mark Thomas wrote: On 18/11/2020 03:07, Baron Fujimoto wrote: On Mon, Nov 16, 2020 at 09:47:03AM +, Mark Thomas wrote: Have you tried adding ":-AES:+AESGCM" to the cipher string you are already using? I hadn't (did I miss where these were docu

how to configure per-host logging with rsyslogd

2020-11-18 Thread Jerry Lin
Hello, I'm running tomcat9 on Debian 10 (systemd). The logging appears to go through rsyslog.d and there is a /etc/rsyslog.d/tomcat9.conf that seems to govern the location of the logs: :programname, startswith, "tomcat9" { /var/log/tomcat9/catalina.out;TomcatFormat stop } My setup is that I

Re: tomcat 8.5 TLS cipher strings

2020-11-18 Thread Mark Thomas
On 18/11/2020 03:07, Baron Fujimoto wrote: > On Mon, Nov 16, 2020 at 09:47:03AM +, Mark Thomas wrote: >> Have you tried adding ":-AES:+AESGCM" to the cipher string you are >> already using? > > I hadn't (did I miss where these were documented somewhere?). However it > seems like once I add

Re: Weirdest Tomcat Behavior Ever?

2020-11-18 Thread Mark Thomas
On 18/11/2020 15:41, Eric Robinson wrote: >> -Original Message- >> From: Mark Thomas >> Sent: Wednesday, November 18, 2020 3:03 AM >> To: users@tomcat.apache.org >> Subject: Re: Weirdest Tomcat Behavior Ever? >> >> On 13/11/2020 23:46, Mark Thomas wrote: >>> Eric sent me a copy of the stra

RE: Weirdest Tomcat Behavior Ever?

2020-11-18 Thread Eric Robinson
> -Original Message- > From: Mark Thomas > Sent: Wednesday, November 18, 2020 3:03 AM > To: users@tomcat.apache.org > Subject: Re: Weirdest Tomcat Behavior Ever? > > On 13/11/2020 23:46, Mark Thomas wrote: > > Eric sent me a copy of the strace (thanks Eric) and while it is > > consistent w

[ANN] Apache Tomcat 8.5.60 available

2020-11-18 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat 8.5.60. Apache Tomcat 8 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and Java Authentication Service Provider Interface for Containers t

[ANN] Apache Tomcat 9.0.40 available

2020-11-18 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat 9.0.40. Apache Tomcat 9 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 9.0.40 is a bugfix and feat

[ANN] Apache Tomcat 10.0.0-M10 available

2020-11-18 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat 10.0.0-M9. Apache Tomcat 10 is an open source software implementation of the Jakarta Servlet, Jakarta Server Pages, Jakarta Expression Language, Jakarta WebSocket, Jakarta Authentication and Jakarta Annotations specificat

Re: Weirdest Tomcat Behavior Ever?

2020-11-18 Thread Mark Thomas
On 13/11/2020 23:46, Mark Thomas wrote: > Eric sent me a copy of the strace (thanks Eric) and while it is > consistent with what has already been observed, it didn't provide any > new information on the socket / file descriptor being closed. > > I'd like to suggest running again with the following