Re: embedded, not local

2021-02-15 Thread Rob Sargent

I added a CORS filter to my /sgs/WEB-INF/web.xml.  [1]
In hopes of getting some logs out of tomcat I have added a Valve to 
/sgs/META-INF/context.xml [2]


Neither of these has had in affect.  I see no logs and I still hit the 
maybe-cors problem.


I have two tomcat connectivity checks: one is a anonymous servlet at 
"/monitor" and the other is a servlet in my webapp doing helloWorld duty 
on "/sgs/webmonitor".  Both localhost and k1 still happy on http, not 
https for both endpoints, with and without the lastest xml additions.


rjs

[1]

    CorsFilter
org.apache.catalina.filters.CorsFilter
    
  cors.allowed.origins
https://www.apache.org
    
    
  
  cors.allowed.origins
  https://hci.utah.edu
    
    
  cors.allowed.methods
  GET,POST,OPTIONS,PUT
    
    
  cors.allowed.headers
Content-Type,X-Requested-With,accept,Origin,Access-Control-Request-Method,Access-Control-Request-Headers
    
    
cors.support.credentials
  false
    
    
  cors.exposed.headers
Access-Control-Allow-Origin
    
  
  
    CorsFilter
    /sgs/*
  

[2]
  
    Enable debugging for the application
    debug
    true
  
  
  

On 2/15/21 4:26 PM, Rob Sargent wrote:

Thanks again, Chris,

On 2/15/21 1:32 PM, Christopher Schultz wrote:


Try this:

$ openssl s_client -showcerts -connect k1:16004 -tls1_2







Re: embedded, not local

2021-02-15 Thread Rob Sargent

Thanks again, Chris,

On 2/15/21 1:32 PM, Christopher Schultz wrote:


Try this:

$ openssl s_client -showcerts -connect k1:16004 -tls1_2


openssl s_client -showcerts -connect k1:16004 -tls1_2
CONNECTED(0003)
140444510528832:error:1408F10B:SSL routines:ssl3_get_record:wrong 
version number:../ssl/record/ssl3_record.c:331:

---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 5 bytes and written 217 bytes
Verification: OK
---
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : 
    Session-ID:
    Session-ID-ctx:
    Master-Key:
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    Start Time: 1613429202
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
    Extended master secret: no
---


Check the port? Remember that TLS is enabled on one port (Connector) 
while plaintext is on another port (Connector). So switch from 
plaintext to TLS you will need to change port numbers in your s_client 
connection string (and browser).


How many connectors are you configuring? And how? Your code only shows 
configuring a local "connector" reference, but not where it came from, 
if it was added to the server component, etc.


I'm not following perfectly.  I did localhost lookup at Luis's 
suggestion, but I name k1 in all my code/runs.

Do I have to add a doOptions handler in my servlets to handle prefight?



This is my Connector generation and consumption code:

    Service service = embeddedTomcat.getService();
    service.addConnector(addTLSConnector(tomcatPort));

   private Connector addTLSConnector(int tcport) {
 Connector connector = new Connector();
 addTLSConnector(connector, tcport);
 return connector;
   }
  private Connector addTLSConnector(Connector connector, int tcport) {
    File keyFile = new File
   (System.getProperty("SGSSRVR_keystoreFile"));
    if (! keyFile.exists()) throw new RuntimeException("where's the
   keystore?");
    File trustFile = new File
   (System.getProperty("SGSSRVR_truststoreFile"));
    if (! trustFile.exists()) throw new RuntimeException("where's
   the truststore?");
    boolean done = true;
    connector.setPort(tcport);
    connector.setSecure(true);
    connector.setScheme(System.getProperty("SGSSRVR_scheme"));
    //done = done && connector.setProperty("protocol", "HTTP/1.1");
    done = done && connector.setProperty("sslProtocol", "TLS");
    done = done &&
   connector.setProperty("address",System.getProperty("SGSSRVR_hostaddr"));
    done = done && connector.setProperty("keyAlias",
   System.getProperty("SGSSRVR_keystoreAlias"));
    done = done && connector.setProperty("keystorePass",
   System.getProperty("SGSSRVR_keystorePwd"));
    done = done && connector.setProperty("keystoreFile",
   keyFile.getAbsolutePath());
    done = done && connector.setProperty("keystoreType",
   System.getProperty("SGSSRVR_storeType"));
   //    done = done && connector.setProperty("truststoreType",
   System.getProperty("SGSSRVR_storeType"));
   //    done = done && connector.setProperty("truststoreFile",
   trustFile.getAbsolutePath());
   //    done = done && connector.setProperty("truststoreAlias",
   System.getProperty("SGSSRVR_truststoreAlias"));
   //    done = done && connector.setProperty("truststorePassword",
   System.getProperty("SGSSRVR_truststorePwd"));

    done = done && connector.setProperty("clientAuth", "false");
    done = done && connector.setProperty("maxThreads", "200");
    done = done && connector.setProperty("SSLEnabled", "true");
    if (! done) {
  System.out.println("Some problem(s) in connector setup");
    }
    return connector;
  }

with comments on trust or key lines or neither.  trust.Alias and 
trust.pass, in either order, always fail (seen in IntelliJ when 'done' 
flips to false)


and the properties are sent in from files:

   SGSSRVR_socketPort        = 16004
   SGSSRVR_scheme            = https
   SGSSRVR_databaseConnection    = jdbc:postgresql://%s:%d/%s
   SGSSRVR_emergencyJsonDir    = /home/u0138544/aws/deploy/crash/
   SGSSRVR_ContextRootDir         =
   /home/u0138544/aws/deploy/webroot/tomcat.16004/work/Tomcat/k1
   SGSSRVR_dbTestUser        = viv
   SGSSRVR_dbTestDb        = postgres
   SGSSRVR_databasePort        = 5432
   SGSSRVR_databaseHost        = k2
   SGSSRVR_roleExtension        = _notnull
   SGSSRVR_expansionStep        = 5
   SGSSRVR_hostaddr            = k1
   SGSSRVR_keystoreFile        = /home/u0138544/aws/deploy/server/k1.p12
   SGSSRVR_keystoreAlias        = k1
   SGSSRVR_keystorePwd            = changeit
   SGSSRVR_truststoreFile        = /home/u0138544/aws/deploy/server/k1.p12
   SGSSRVR_truststoreAlias        = k1
   SGSSRVR_truststorePwd          = changeit
   

Re: embedded, not local

2021-02-15 Thread Christopher Schultz

Rob,

On 2/15/21 13:41, Rob Sargent wrote:

openssl s_client -showcerts -connect k1:16004
CONNECTED(0003)
139674280387904:error:1408F10B:SSL routines:ssl3_get_record:wrong 
version number:../ssl/record/ssl3_record.c:331:

---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 5 bytes and written 312 bytes
Verification: OK
---
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---

Is it the version mismatch, or am I back in CORShell?


Try this:

$ openssl s_client -showcerts -connect k1:16004 -tls1_2

Check the port? Remember that TLS is enabled on one port (Connector) 
while plaintext is on another port (Connector). So switch from plaintext 
to TLS you will need to change port numbers in your s_client connection 
string (and browser).


How many connectors are you configuring? And how? Your code only shows 
configuring a local "connector" reference, but not where it came from, 
if it was added to the server component, etc.


-chris


On 2/15/21 11:12 AM, Luis Rodríguez Fernández wrote:

mmm, I see...

- May I ask you to run ` openssl s_client -showcerts -connect
localhost:16004` to check that your tomcat connector has started? You
should get an output like `Verify return code: 18 (self signed 
certificate)`
- Having a look at what your browser is saying I have the feeling that 
your

issue is not 100% SSL/TLS related but more CORS related stuff...

Cheers,

Luis

El lun, 15 feb 2021 a las 16:18, Rob Sargent ()
escribió:


Luis,
Not a peep.  Not in IntelliJ, nor from startup script (with zero output
redirects). It works (on localhost:16004 and on k1:16004 (fully
qualified), but only http, not https.  The browser shows "This site
can’t provide a secure connection" and not much from chrome inspect:
request: "Referrer Policy: strict-origin-when-cross-origin"
response: "Failed to load response data"

Thanks
rjs

On 2/15/21 2:14 AM, Luis Rodríguez Fernández wrote:

Hello Rob,

Do you have a stacktrace or error message that you can share?

Cheers,

Luis










-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: embedded, not local

2021-02-15 Thread Rob Sargent

openssl s_client -showcerts -connect k1:16004
CONNECTED(0003)
139674280387904:error:1408F10B:SSL routines:ssl3_get_record:wrong 
version number:../ssl/record/ssl3_record.c:331:

---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 5 bytes and written 312 bytes
Verification: OK
---
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---

Is it the version mismatch, or am I back in CORShell?


On 2/15/21 11:12 AM, Luis Rodríguez Fernández wrote:

mmm, I see...

- May I ask you to run ` openssl s_client -showcerts -connect
localhost:16004` to check that your tomcat connector has started? You
should get an output like `Verify return code: 18 (self signed certificate)`
- Having a look at what your browser is saying I have the feeling that your
issue is not 100% SSL/TLS related but more CORS related stuff...

Cheers,

Luis

El lun, 15 feb 2021 a las 16:18, Rob Sargent ()
escribió:


Luis,
Not a peep.  Not in IntelliJ, nor from startup script (with zero output
redirects). It works (on localhost:16004 and on k1:16004 (fully
qualified), but only http, not https.  The browser shows "This site
can’t provide a secure connection" and not much from chrome inspect:
request: "Referrer Policy: strict-origin-when-cross-origin"
response: "Failed to load response data"

Thanks
rjs

On 2/15/21 2:14 AM, Luis Rodríguez Fernández wrote:

Hello Rob,

Do you have a stacktrace or error message that you can share?

Cheers,

Luis









Re: embedded, not local

2021-02-15 Thread Luis Rodríguez Fernández
mmm, I see...

- May I ask you to run ` openssl s_client -showcerts -connect
localhost:16004` to check that your tomcat connector has started? You
should get an output like `Verify return code: 18 (self signed certificate)`
- Having a look at what your browser is saying I have the feeling that your
issue is not 100% SSL/TLS related but more CORS related stuff...

Cheers,

Luis

El lun, 15 feb 2021 a las 16:18, Rob Sargent ()
escribió:

> Luis,
> Not a peep.  Not in IntelliJ, nor from startup script (with zero output
> redirects). It works (on localhost:16004 and on k1:16004 (fully
> qualified), but only http, not https.  The browser shows "This site
> can’t provide a secure connection" and not much from chrome inspect:
> request: "Referrer Policy: strict-origin-when-cross-origin"
> response: "Failed to load response data"
>
> Thanks
> rjs
>
> On 2/15/21 2:14 AM, Luis Rodríguez Fernández wrote:
> > Hello Rob,
> >
> > Do you have a stacktrace or error message that you can share?
> >
> > Cheers,
> >
> > Luis
> >
> >
> >
>
>

-- 

"Ever tried. Ever failed. No matter. Try Again. Fail again. Fail better."

- Samuel Beckett


Re: java.lang.ClassNotFoundException: javax.servlet.Filter

2021-02-15 Thread Jason Wee
No problem, just wanna understand better if this will tackle in the near future.

On another note, I did custom patch on one of the lib,
https://github.com/jasonwee/jakarta-taglibs-mailer for my own usage.

I guess I will do the same for this lib if I found time. If you want a
custom or specific patch, please also let me know so I can contribute
back to the tomcat community.

Thank.

Jason

On Mon, Feb 15, 2021 at 11:35 PM Woonsan Ko  wrote:
>
> On Mon, Feb 15, 2021 at 7:19 AM Jason Wee  wrote:
> >
> > okay, currently there is no custom application code, I just build two
> > of the libs and place into tomcat lib using the tomcat documentation.
> >
> > Do you mean I have to change the reference? Example
> > https://github.com/apache/openwebbeans/blob/master/webbeans-web/src/main/java/org/apache/webbeans/servlet/WebBeansConfigurationListener.java#L36
> > ?
>
> It should be your decision. ;-)
> Please see the linked page from the download page:
> - https://tomcat.apache.org/whichversion.html
>
> For example, I think you may stick with Tomcat 9, or you may ask or
> help the libraries to be compatible with Jakarta EE in their own
> communities.
> It is up to you.
>
> Regards,
> Woonsan
>
> >
> > Jason
> >
> > On Mon, Feb 15, 2021 at 6:19 PM Mark Thomas  wrote:
> > >
> > > On 15/02/2021 08:26, Jason Wee wrote:
> > > > Using Apache Tomcat 10.0.2, build owb and cxf and placed into lib 
> > > > directory
> > > >
> > > > tomcat-cxf-3.4.1.jar
> > > > tomcat-owb-2.0.20.jar
> > > >
> > > > reading reference,  https://tomcat.apache.org/tomcat-10.0-doc/cdi.html
> > > >
> > > > and when i start tomcat, I get the following exception
> > >
> > > Quoting from the top of the Tomcat 10 download page:
> > >
> > > "Users of Tomcat 10 onwards should be aware that, as a result of the
> > > move from Java EE to Jakarta EE as part of the transfer of Java EE to
> > > the Eclipse Foundation, the primary package for all implemented APIs has
> > > changed from javax.* to jakarta.*. This will almost certainly require
> > > code changes to enable applications to migrate from Tomcat 9 and earlier
> > > to Tomcat 10 and later. A migration tool is under development to aid
> > > this process."
> > >
> > > https://tomcat.apache.org/download-10.cgi
> > >
> > > Mark
> > >
> > >
> > > >
> > > > ==> localhost.2021-02-15.log <==
> > > > 15-Feb-2021 16:19:04.700 INFO [main]
> > > > org.apache.catalina.core.ApplicationContext.log Marking servlet
> > > > [ApacheTomcatCXFServlet] as unavailable
> > > > 15-Feb-2021 16:19:04.700 SEVERE [main]
> > > > org.apache.catalina.core.StandardContext.loadOnStartup Servlet
> > > > [ApacheTomcatCXFServlet] in web application [/rest] threw load()
> > > > exception
> > > > java.lang.ClassNotFoundException: javax.servlet.Filter
> > > > at 
> > > > org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1364)
> > > > at 
> > > > org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1187)
> > > > at java.base/java.lang.ClassLoader.defineClass1(Native Method)
> > > > at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1016)
> > > > at 
> > > > java.base/java.security.SecureClassLoader.defineClass(SecureClassLoader.java:174)
> > > > at 
> > > > org.apache.catalina.loader.WebappClassLoaderBase.findClassInternal(WebappClassLoaderBase.java:2433)
> > > > at 
> > > > org.apache.catalina.loader.WebappClassLoaderBase.findClass(WebappClassLoaderBase.java:864)
> > > > at 
> > > > org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1333)
> > > > at 
> > > > org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1187)
> > > > at java.base/java.lang.ClassLoader.defineClass1(Native Method)
> > > > at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1016)
> > > > at 
> > > > java.base/java.security.SecureClassLoader.defineClass(SecureClassLoader.java:174)
> > > > at 
> > > > org.apache.catalina.loader.WebappClassLoaderBase.findClassInternal(WebappClassLoaderBase.java:2433)
> > > > at 
> > > > org.apache.catalina.loader.WebappClassLoaderBase.findClass(WebappClassLoaderBase.java:864)
> > > > at 
> > > > org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1333)
> > > > at 
> > > > org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1187)
> > > > at java.base/java.lang.ClassLoader.defineClass1(Native Method)
> > > > at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1016)
> > > > at 
> > > > java.base/java.security.SecureClassLoader.defineClass(SecureClassLoader.java:174)
> > > > at 
> > > > org.apache.catalina.loader.WebappClassLoaderBase.findClassInternal(WebappClassLoaderBase.java:2433)
> > > > at 
> > > > org.apache.catalina.loader.WebappClassLoaderBase.findClass(WebappClassLoaderBase.java:864)
> > > > at 
> > > > org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1333)
> > 

Re: java.lang.ClassNotFoundException: javax.servlet.Filter

2021-02-15 Thread Woonsan Ko
On Mon, Feb 15, 2021 at 7:19 AM Jason Wee  wrote:
>
> okay, currently there is no custom application code, I just build two
> of the libs and place into tomcat lib using the tomcat documentation.
>
> Do you mean I have to change the reference? Example
> https://github.com/apache/openwebbeans/blob/master/webbeans-web/src/main/java/org/apache/webbeans/servlet/WebBeansConfigurationListener.java#L36
> ?

It should be your decision. ;-)
Please see the linked page from the download page:
- https://tomcat.apache.org/whichversion.html

For example, I think you may stick with Tomcat 9, or you may ask or
help the libraries to be compatible with Jakarta EE in their own
communities.
It is up to you.

Regards,
Woonsan

>
> Jason
>
> On Mon, Feb 15, 2021 at 6:19 PM Mark Thomas  wrote:
> >
> > On 15/02/2021 08:26, Jason Wee wrote:
> > > Using Apache Tomcat 10.0.2, build owb and cxf and placed into lib 
> > > directory
> > >
> > > tomcat-cxf-3.4.1.jar
> > > tomcat-owb-2.0.20.jar
> > >
> > > reading reference,  https://tomcat.apache.org/tomcat-10.0-doc/cdi.html
> > >
> > > and when i start tomcat, I get the following exception
> >
> > Quoting from the top of the Tomcat 10 download page:
> >
> > "Users of Tomcat 10 onwards should be aware that, as a result of the
> > move from Java EE to Jakarta EE as part of the transfer of Java EE to
> > the Eclipse Foundation, the primary package for all implemented APIs has
> > changed from javax.* to jakarta.*. This will almost certainly require
> > code changes to enable applications to migrate from Tomcat 9 and earlier
> > to Tomcat 10 and later. A migration tool is under development to aid
> > this process."
> >
> > https://tomcat.apache.org/download-10.cgi
> >
> > Mark
> >
> >
> > >
> > > ==> localhost.2021-02-15.log <==
> > > 15-Feb-2021 16:19:04.700 INFO [main]
> > > org.apache.catalina.core.ApplicationContext.log Marking servlet
> > > [ApacheTomcatCXFServlet] as unavailable
> > > 15-Feb-2021 16:19:04.700 SEVERE [main]
> > > org.apache.catalina.core.StandardContext.loadOnStartup Servlet
> > > [ApacheTomcatCXFServlet] in web application [/rest] threw load()
> > > exception
> > > java.lang.ClassNotFoundException: javax.servlet.Filter
> > > at 
> > > org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1364)
> > > at 
> > > org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1187)
> > > at java.base/java.lang.ClassLoader.defineClass1(Native Method)
> > > at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1016)
> > > at 
> > > java.base/java.security.SecureClassLoader.defineClass(SecureClassLoader.java:174)
> > > at 
> > > org.apache.catalina.loader.WebappClassLoaderBase.findClassInternal(WebappClassLoaderBase.java:2433)
> > > at 
> > > org.apache.catalina.loader.WebappClassLoaderBase.findClass(WebappClassLoaderBase.java:864)
> > > at 
> > > org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1333)
> > > at 
> > > org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1187)
> > > at java.base/java.lang.ClassLoader.defineClass1(Native Method)
> > > at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1016)
> > > at 
> > > java.base/java.security.SecureClassLoader.defineClass(SecureClassLoader.java:174)
> > > at 
> > > org.apache.catalina.loader.WebappClassLoaderBase.findClassInternal(WebappClassLoaderBase.java:2433)
> > > at 
> > > org.apache.catalina.loader.WebappClassLoaderBase.findClass(WebappClassLoaderBase.java:864)
> > > at 
> > > org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1333)
> > > at 
> > > org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1187)
> > > at java.base/java.lang.ClassLoader.defineClass1(Native Method)
> > > at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1016)
> > > at 
> > > java.base/java.security.SecureClassLoader.defineClass(SecureClassLoader.java:174)
> > > at 
> > > org.apache.catalina.loader.WebappClassLoaderBase.findClassInternal(WebappClassLoaderBase.java:2433)
> > > at 
> > > org.apache.catalina.loader.WebappClassLoaderBase.findClass(WebappClassLoaderBase.java:864)
> > > at 
> > > org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1333)
> > > at 
> > > org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1187)
> > > at 
> > > org.apache.catalina.core.DefaultInstanceManager.loadClass(DefaultInstanceManager.java:540)
> > > at 
> > > org.apache.catalina.core.DefaultInstanceManager.loadClassMaybePrivileged(DefaultInstanceManager.java:521)
> > > at 
> > > org.apache.catalina.core.DefaultInstanceManager.newInstance(DefaultInstanceManager.java:151)
> > > at 
> > > org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:1043)
> > > at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:984)
> > > at 
> > > 

Re: embedded, not local

2021-02-15 Thread Rob Sargent

Luis,
Not a peep.  Not in IntelliJ, nor from startup script (with zero output 
redirects). It works (on localhost:16004 and on k1:16004 (fully 
qualified), but only http, not https.  The browser shows "This site 
can’t provide a secure connection" and not much from chrome inspect:

request: "Referrer Policy: strict-origin-when-cross-origin"
response: "Failed to load response data"

Thanks
rjs

On 2/15/21 2:14 AM, Luis Rodríguez Fernández wrote:

Hello Rob,

Do you have a stacktrace or error message that you can share?

Cheers,

Luis







Re: java.lang.ClassNotFoundException: javax.servlet.Filter

2021-02-15 Thread Jason Wee
okay, currently there is no custom application code, I just build two
of the libs and place into tomcat lib using the tomcat documentation.

Do you mean I have to change the reference? Example
https://github.com/apache/openwebbeans/blob/master/webbeans-web/src/main/java/org/apache/webbeans/servlet/WebBeansConfigurationListener.java#L36
?

Jason

On Mon, Feb 15, 2021 at 6:19 PM Mark Thomas  wrote:
>
> On 15/02/2021 08:26, Jason Wee wrote:
> > Using Apache Tomcat 10.0.2, build owb and cxf and placed into lib directory
> >
> > tomcat-cxf-3.4.1.jar
> > tomcat-owb-2.0.20.jar
> >
> > reading reference,  https://tomcat.apache.org/tomcat-10.0-doc/cdi.html
> >
> > and when i start tomcat, I get the following exception
>
> Quoting from the top of the Tomcat 10 download page:
>
> "Users of Tomcat 10 onwards should be aware that, as a result of the
> move from Java EE to Jakarta EE as part of the transfer of Java EE to
> the Eclipse Foundation, the primary package for all implemented APIs has
> changed from javax.* to jakarta.*. This will almost certainly require
> code changes to enable applications to migrate from Tomcat 9 and earlier
> to Tomcat 10 and later. A migration tool is under development to aid
> this process."
>
> https://tomcat.apache.org/download-10.cgi
>
> Mark
>
>
> >
> > ==> localhost.2021-02-15.log <==
> > 15-Feb-2021 16:19:04.700 INFO [main]
> > org.apache.catalina.core.ApplicationContext.log Marking servlet
> > [ApacheTomcatCXFServlet] as unavailable
> > 15-Feb-2021 16:19:04.700 SEVERE [main]
> > org.apache.catalina.core.StandardContext.loadOnStartup Servlet
> > [ApacheTomcatCXFServlet] in web application [/rest] threw load()
> > exception
> > java.lang.ClassNotFoundException: javax.servlet.Filter
> > at 
> > org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1364)
> > at 
> > org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1187)
> > at java.base/java.lang.ClassLoader.defineClass1(Native Method)
> > at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1016)
> > at 
> > java.base/java.security.SecureClassLoader.defineClass(SecureClassLoader.java:174)
> > at 
> > org.apache.catalina.loader.WebappClassLoaderBase.findClassInternal(WebappClassLoaderBase.java:2433)
> > at 
> > org.apache.catalina.loader.WebappClassLoaderBase.findClass(WebappClassLoaderBase.java:864)
> > at 
> > org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1333)
> > at 
> > org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1187)
> > at java.base/java.lang.ClassLoader.defineClass1(Native Method)
> > at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1016)
> > at 
> > java.base/java.security.SecureClassLoader.defineClass(SecureClassLoader.java:174)
> > at 
> > org.apache.catalina.loader.WebappClassLoaderBase.findClassInternal(WebappClassLoaderBase.java:2433)
> > at 
> > org.apache.catalina.loader.WebappClassLoaderBase.findClass(WebappClassLoaderBase.java:864)
> > at 
> > org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1333)
> > at 
> > org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1187)
> > at java.base/java.lang.ClassLoader.defineClass1(Native Method)
> > at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1016)
> > at 
> > java.base/java.security.SecureClassLoader.defineClass(SecureClassLoader.java:174)
> > at 
> > org.apache.catalina.loader.WebappClassLoaderBase.findClassInternal(WebappClassLoaderBase.java:2433)
> > at 
> > org.apache.catalina.loader.WebappClassLoaderBase.findClass(WebappClassLoaderBase.java:864)
> > at 
> > org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1333)
> > at 
> > org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1187)
> > at 
> > org.apache.catalina.core.DefaultInstanceManager.loadClass(DefaultInstanceManager.java:540)
> > at 
> > org.apache.catalina.core.DefaultInstanceManager.loadClassMaybePrivileged(DefaultInstanceManager.java:521)
> > at 
> > org.apache.catalina.core.DefaultInstanceManager.newInstance(DefaultInstanceManager.java:151)
> > at 
> > org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:1043)
> > at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:984)
> > at 
> > org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:4851)
> > at 
> > org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5160)
> > at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)
> > at 
> > org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:717)
> > at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:690)
> > at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:706)
> > at 
> > 

Re: java.lang.ClassNotFoundException: javax.servlet.Filter

2021-02-15 Thread Mark Thomas
On 15/02/2021 08:26, Jason Wee wrote:
> Using Apache Tomcat 10.0.2, build owb and cxf and placed into lib directory
> 
> tomcat-cxf-3.4.1.jar
> tomcat-owb-2.0.20.jar
> 
> reading reference,  https://tomcat.apache.org/tomcat-10.0-doc/cdi.html
> 
> and when i start tomcat, I get the following exception

Quoting from the top of the Tomcat 10 download page:

"Users of Tomcat 10 onwards should be aware that, as a result of the
move from Java EE to Jakarta EE as part of the transfer of Java EE to
the Eclipse Foundation, the primary package for all implemented APIs has
changed from javax.* to jakarta.*. This will almost certainly require
code changes to enable applications to migrate from Tomcat 9 and earlier
to Tomcat 10 and later. A migration tool is under development to aid
this process."

https://tomcat.apache.org/download-10.cgi

Mark


> 
> ==> localhost.2021-02-15.log <==
> 15-Feb-2021 16:19:04.700 INFO [main]
> org.apache.catalina.core.ApplicationContext.log Marking servlet
> [ApacheTomcatCXFServlet] as unavailable
> 15-Feb-2021 16:19:04.700 SEVERE [main]
> org.apache.catalina.core.StandardContext.loadOnStartup Servlet
> [ApacheTomcatCXFServlet] in web application [/rest] threw load()
> exception
> java.lang.ClassNotFoundException: javax.servlet.Filter
> at 
> org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1364)
> at 
> org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1187)
> at java.base/java.lang.ClassLoader.defineClass1(Native Method)
> at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1016)
> at 
> java.base/java.security.SecureClassLoader.defineClass(SecureClassLoader.java:174)
> at 
> org.apache.catalina.loader.WebappClassLoaderBase.findClassInternal(WebappClassLoaderBase.java:2433)
> at 
> org.apache.catalina.loader.WebappClassLoaderBase.findClass(WebappClassLoaderBase.java:864)
> at 
> org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1333)
> at 
> org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1187)
> at java.base/java.lang.ClassLoader.defineClass1(Native Method)
> at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1016)
> at 
> java.base/java.security.SecureClassLoader.defineClass(SecureClassLoader.java:174)
> at 
> org.apache.catalina.loader.WebappClassLoaderBase.findClassInternal(WebappClassLoaderBase.java:2433)
> at 
> org.apache.catalina.loader.WebappClassLoaderBase.findClass(WebappClassLoaderBase.java:864)
> at 
> org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1333)
> at 
> org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1187)
> at java.base/java.lang.ClassLoader.defineClass1(Native Method)
> at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1016)
> at 
> java.base/java.security.SecureClassLoader.defineClass(SecureClassLoader.java:174)
> at 
> org.apache.catalina.loader.WebappClassLoaderBase.findClassInternal(WebappClassLoaderBase.java:2433)
> at 
> org.apache.catalina.loader.WebappClassLoaderBase.findClass(WebappClassLoaderBase.java:864)
> at 
> org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1333)
> at 
> org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1187)
> at 
> org.apache.catalina.core.DefaultInstanceManager.loadClass(DefaultInstanceManager.java:540)
> at 
> org.apache.catalina.core.DefaultInstanceManager.loadClassMaybePrivileged(DefaultInstanceManager.java:521)
> at 
> org.apache.catalina.core.DefaultInstanceManager.newInstance(DefaultInstanceManager.java:151)
> at 
> org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:1043)
> at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:984)
> at 
> org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:4851)
> at 
> org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5160)
> at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)
> at 
> org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:717)
> at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:690)
> at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:706)
> at 
> org.apache.catalina.startup.HostConfig.deployDirectory(HostConfig.java:1093)
> at 
> org.apache.catalina.startup.HostConfig$DeployDirectory.run(HostConfig.java:1810)
> at 
> java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515)
> at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
> at 
> org.apache.tomcat.util.threads.InlineExecutorService.execute(InlineExecutorService.java:75)
> at 
> java.base/java.util.concurrent.AbstractExecutorService.submit(AbstractExecutorService.java:118)
> at 
> org.apache.catalina.startup.HostConfig.deployDirectories(HostConfig.java:1013)
> at 

Re: embedded, not local

2021-02-15 Thread Luis Rodríguez Fernández
Hello Rob,

Do you have a stacktrace or error message that you can share?

Cheers,

Luis




El lun, 15 feb 2021 a las 1:26, Rob Sargent ()
escribió:

> Yep, me again.
>
> Inching along here, unable as yet to re-create ssl traffic when not on
> localhost. Moving from my basement (localhost) where ssl worked using
>
> SGSSRVR_keystoreFile = /home/rob/Downloads/tomcat/localhost-rsa.jks
> SGSSRVR_truststoreFile  =
> /home/rob/Downloads/tomcat/localhost-rsa-cert.pem
> SGSSRVR_storeType = JKS
>
> to my office with three separate machines where I can better impersonate
> AWS.
> Following Chris's adivce (since I've been given the green light to
> self-sign)
>
> | Most people just want to mint a key+cert and have Tomcat use that
> for TLS. You can do that very simply:
> | $ keytool -genkey -keyalg RSA -sigalg SHA256withRSA -keysize 4096
> -alias ${HOSTNAME} -keystore ${HOSTNAME}.p12 -storetype PKCS12 -ext
> san=dns:${HOSTNAME}
> | Fill-out all the stuff. This gives you a new RSA key and a
> self-signed certificate. If self-signed is okay with you, you are done.
>
> I put in my fully qualified hostname("k1"), and added the full path of
> the .p12 file to my configuration props
>
> SGSSRVR_keystoreFile   =
> /home/u0138544/aws/deploy/server/k1.p12
> SGSSRVR_keystoreAlias = k1
> SGSSRVR_keystorePwd  = as-assigned
> SGSSRVR_truststoreFile =
> /home/u0138544/aws/deploy/server/k1.p12
> SGSSRVR_truststoreAlias   = k1
> SGSSRVR_truststorePwd= as-assigned
> ##(with and without)
> SGSSRVR_storeType= PCKS12 (JKStoo)
>
> and pick those up as follows (including trying only key and only trust
> portions)
>
>  done = done && connector.setProperty("sslProtocol", "TLS");
>  done = done && connector.setProperty("keyAlias",
> System.getProperty("SGSSRVR_keystoreAlias"));
>  done = done && connector.setProperty("keystorePass",
> System.getProperty("SGSSRVR_keystorePwd"));
>  done = done && connector.setProperty("keystoreFile",
> keyFile.getAbsolutePath());
>  done = done && connector.setProperty("keystoreType",
> System.getProperty("SGSSRVR_storeType"));
>
>  done = done && connector.setProperty("truststoreType",
> System.getProperty("SGSSRVR_storeType"));
>  done = done && connector.setProperty("truststoreFile",
> trustFile.getAbsolutePath());
>  done = done && connector.setProperty("truststorePassword",
> System.getProperty("SGSSRVR_truststorePwd"));   //always false
>  done = done && connector.setProperty("truststoreAlias",
> System.getProperty("SGSSRVR_truststoreAlias"));  //always false
>
>  done = done && connector.setProperty("SSLEnabled", "true");
>  done = done && connector.setProperty("clientAuth", "false");
>  done = done && connector.setProperty("maxThreads", "200");
>  done = done && connector.setProperty("SSLEnabled", "true");
>
>  if (! done) {
>System.out.println("Some problem(s) in connector setup");
>  }
>
> If anyone can tell me where I've gone wrong (again) I'm all ears.
>
>
>
>
>
>
>

-- 

"Ever tried. Ever failed. No matter. Try Again. Fail again. Fail better."

- Samuel Beckett


java.lang.ClassNotFoundException: javax.servlet.Filter

2021-02-15 Thread Jason Wee
Using Apache Tomcat 10.0.2, build owb and cxf and placed into lib directory

tomcat-cxf-3.4.1.jar
tomcat-owb-2.0.20.jar

reading reference,  https://tomcat.apache.org/tomcat-10.0-doc/cdi.html

and when i start tomcat, I get the following exception

==> localhost.2021-02-15.log <==
15-Feb-2021 16:19:04.700 INFO [main]
org.apache.catalina.core.ApplicationContext.log Marking servlet
[ApacheTomcatCXFServlet] as unavailable
15-Feb-2021 16:19:04.700 SEVERE [main]
org.apache.catalina.core.StandardContext.loadOnStartup Servlet
[ApacheTomcatCXFServlet] in web application [/rest] threw load()
exception
java.lang.ClassNotFoundException: javax.servlet.Filter
at 
org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1364)
at 
org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1187)
at java.base/java.lang.ClassLoader.defineClass1(Native Method)
at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1016)
at 
java.base/java.security.SecureClassLoader.defineClass(SecureClassLoader.java:174)
at 
org.apache.catalina.loader.WebappClassLoaderBase.findClassInternal(WebappClassLoaderBase.java:2433)
at 
org.apache.catalina.loader.WebappClassLoaderBase.findClass(WebappClassLoaderBase.java:864)
at 
org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1333)
at 
org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1187)
at java.base/java.lang.ClassLoader.defineClass1(Native Method)
at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1016)
at 
java.base/java.security.SecureClassLoader.defineClass(SecureClassLoader.java:174)
at 
org.apache.catalina.loader.WebappClassLoaderBase.findClassInternal(WebappClassLoaderBase.java:2433)
at 
org.apache.catalina.loader.WebappClassLoaderBase.findClass(WebappClassLoaderBase.java:864)
at 
org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1333)
at 
org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1187)
at java.base/java.lang.ClassLoader.defineClass1(Native Method)
at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1016)
at 
java.base/java.security.SecureClassLoader.defineClass(SecureClassLoader.java:174)
at 
org.apache.catalina.loader.WebappClassLoaderBase.findClassInternal(WebappClassLoaderBase.java:2433)
at 
org.apache.catalina.loader.WebappClassLoaderBase.findClass(WebappClassLoaderBase.java:864)
at 
org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1333)
at 
org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1187)
at 
org.apache.catalina.core.DefaultInstanceManager.loadClass(DefaultInstanceManager.java:540)
at 
org.apache.catalina.core.DefaultInstanceManager.loadClassMaybePrivileged(DefaultInstanceManager.java:521)
at 
org.apache.catalina.core.DefaultInstanceManager.newInstance(DefaultInstanceManager.java:151)
at 
org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:1043)
at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:984)
at 
org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:4851)
at 
org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5160)
at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)
at 
org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:717)
at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:690)
at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:706)
at org.apache.catalina.startup.HostConfig.deployDirectory(HostConfig.java:1093)
at 
org.apache.catalina.startup.HostConfig$DeployDirectory.run(HostConfig.java:1810)
at 
java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515)
at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
at 
org.apache.tomcat.util.threads.InlineExecutorService.execute(InlineExecutorService.java:75)
at 
java.base/java.util.concurrent.AbstractExecutorService.submit(AbstractExecutorService.java:118)
at 
org.apache.catalina.startup.HostConfig.deployDirectories(HostConfig.java:1013)
at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:428)
at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1520)
at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:309)
at 
org.apache.catalina.util.LifecycleBase.fireLifecycleEvent(LifecycleBase.java:123)
at 
org.apache.catalina.util.LifecycleBase.setStateInternal(LifecycleBase.java:423)
at org.apache.catalina.util.LifecycleBase.setState(LifecycleBase.java:366)
at org.apache.catalina.core.ContainerBase.startInternal(ContainerBase.java:936)
at org.apache.catalina.core.StandardHost.startInternal(StandardHost.java:843)
at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)
at 
org.apache.catalina.core.ContainerBase$StartChild.call(ContainerBase.java:1384)
at