Supporting on-line deployment through JMX

that doesn't require the Manager web app? Thanks David Cleary Progress Software

TomcatCon at ApacheCon?

Mark, Will there be a TomcatCon within ApacheCon this year? Dave

RE: 21 second pause that randomly happens

Thanks for the feedback. I was confident all along this wasn't a Tomcat issue, and I believe we identified the culprit as the firewall. I was looking for logging that would show the socket behavior (accept, close, etc.) to show that as far as Tomcat was concerned, the delay was happening before

Re: 21 second pause that randomly happens

On 16.07.2018 16:35, David Cleary wrote: > 2018-07-16 15:55 GMT+03:00 David Cleary : >>> We have a customer who is experiencing a random, 21 second pause when using >>> out Tomcat > based application server. We believe this may be during a TCP connect and > timeout. Lo

21 second pause that randomly happens

in the Endpoint class, but that did not provide anything useful. There is a NAT firewall between the client and server, so I'm looking for some TCP level logging that could point me in the proper direction. Thanks David Cleary Progress

Re: 21 second pause that randomly happens

2018-07-16 15:55 GMT+03:00 David Cleary : >> We have a customer who is experiencing a random, 21 second pause when using >> out Tomcat based application server. We believe this may be during a TCP connect and timeout. Logging indicates the pause happens before the request makes it

RE: Apache Tomcat Deploying war file every time on AIX even though there are no changes in war file.

Mark, Turns out it is a JDK bug. http://www-01.ibm.com/support/docview.wss?uid=swg1IV99686 https://bugs.openjdk.java.net/browse/JDK-8177809 While it has been fixed, we currently are required to support AIX 6.1, which doesn't have an updated JDK because IBM no longer supports that version of

RE: ecj-4.6.3 no longer required?

. On Wed, Mar 27, 2019 at 1:58 AM David Cleary wrote: > > I'm current updating our server that is based on Tomcat 8.5.x and found that > ecj-4.6.3.jar is no longer in the distribution. The changelog does not note > that it has been removed. I just want to confirm that I should remove thi

ecj-4.6.3 no longer required?

I'm current updating our server that is based on Tomcat 8.5.x and found that ecj-4.6.3.jar is no longer in the distribution. The changelog does not note that it has been removed. I just want to confirm that I should remove this library as part of the Tomcat update. Thanks Dave

Tomcat hanging on shutdown post 9.0.13

We currently ship our AppServer on Tomcat 9.0.13. We like to update to a more recent version when we ship a new release. However, Tomcat refuses to stop, on both Windows and Linux, when we go past 9.0.13. I know that it has something to do with our main web application as Tomcat does shut down

tomcat-users.xml dynamic changes

Mark, I see this feature in the new Tomcat 8.5 release. - Add the ability for a UserDatabase to monitor the backing XML file for changes and reload the source file if a change in the last modified time is detected. This is enabled by default meaning that changes to

Any suggestions on Java 11 JVM options for Tomcat?

We made the decision to move to Java 11 for an upcoming release that will be our Long Term Servicing branch. We have noticed a non-trivial increase in memory usage compared to Java 8. On most platforms, it isn't something critical. On Solaris, with the Oracle JVM, we see about double our

Setting samesite attribute on JSESSIONID

Have a customer asking about this. I see Tomcat supports it here. https://tomcat.apache.org/tomcat-9.0-doc/config/cookie-processor.html We currently use defaults, so I'm looking for an XML fragment and the file it goes in to add the samesite attribute to the JSESSIONID. I'm assuming they want

RE: Setting samesite attribute on JSESSIONID

On 10/10/19 14:08, David Cleary wrote: > Have a customer asking about this. I see Tomcat supports it here. > https://tomcat.apache.org/tomcat-9.0-doc/config/cookie-processor.html > .apache.org > > > We currently use defaults, so I'm looking for an XML fragment and > the f

Compiling TCNative on Windows

One of our customers got binged on a security audit because some Windows binaries weren't compiled with the security features listed below. TCNative is on that list. We only include it for our Windows distributions since it is available in binary form. One side effect of ASLR is that pointers

Alternatives for AJP

Some of our customers are currently using the AJP connector. Given the vulnerability and breaking change to address it, now may be a good time to prompt them look at alternatives. One requirement is HTTPS support. What are the alternatives when hosting Tomcat behind Apache httpd, nginx, or IIS?

RE: Alternatives for AJP

, à 17:45, David Cleary a écrit: >Some of our customers are currently using the AJP connector. Given the >vulnerability and breaking change to address it, now may be a good time >to prompt them look at alternatives. One requirement is HTTPS support. >What are the alternatives when ho

Disabling cipher warning

2023-08-29T15:31:57.840-04:00 WARN [main] o.a.t.u.n.j.JSSEUtil - Some of the specified [ciphers] are not supported by the SSL engine and have been skipped: [Dozens of OpenSSL ciphers] We use OpenSSL and moving to Tomcat 10.1.13 has caused an overload of useless information to appear when

RE: Testing Tomcat pre-releases

> -Original Message- > From: Christopher Schultz > Sent: Thursday, April 28, 2022 12:16 PM > To: Tomcat Users List > Subject: Re: Testing Tomcat pre-releases > > David, > > (Replying to the Tomcat users@ list) > > On 4/28/22 08:45, David Cleary wr

Should allowHostHeaderMismatch be case sensitive

of false, is supposed to reject requests based on the case of the host name. Thanks David Cleary Progress