6.0.18, UNIX,

Hello to All, We are using - Tomcat Version - 6.0.18 Operating System Version : HP-UX 11.31 SSL Version - OpenSSL 0.9.8k 25 Mar 2009 Port - 8443 By running the venerability assessment test we are getting the following observation The remote service encrypts traffic using TLS / SSL and

How to limit the number of renegotiations for a single TLS / SSL connection

Hello All, We are using - Tomcat Version - 6.0.18 Operating System Version : HP-UX 11.31 SSL Version - OpenSSL 0.9.8k 25 Mar 2009 Port - 8443 By running the venerability assessment test we are getting the following observation The remote service encrypts traffic using TLS / SSL and permits

Re: How to limit the number of renegotiations for a single TLS / SSL connection

Hello All, @ Mark we have not specified any specific connector protocol in the connector tag, is that mean we are using native APR connector, and if it is so, then as renegotiation is not permitted in APR why VA tool says renegotiation DoS vulnerability, and it would be of great help if you

Re: How to limit the number of renegotiations for a single TLS / SSL connection

Hello All, We have upgraded the tomcat(7.0.35) and ssl(0.9.8x) Still facing same issue Please suggest Thanks and regards Deepak Kumar From: Pid p...@pidster.com To: Tomcat Users List users@tomcat.apache.org Date: 02/09/2013 11:35 PM Subject:Re: How to limit the number of

Re: How to limit the number of renegotiations for a single TLS / SSL connection

Hello Mark We have just updated the tomcat version to 7.0.35 and have not explicitly gave any connector protocol in connector tag, when tomcat is starting its giving Initializing ProtocolHandler [http-bio-443] Regards Deepak From: Mark Thomas ma...@apache.org To: Tomcat Users List

Re: How to limit the number of renegotiations for a single TLS / SSL connection

Hello Mark We have just updated the tomcat version to 7.0.35 and have not explicitly gave any connector protocol in connector tag, when tomcat is starting its giving Initializing ProtocolHandler [http-bio-8443] Regards Deepak From: Mark Thomas ma...@apache.org To: Tomcat Users List

Re: How to limit the number of renegotiations for a single TLS / SSL connection

Hello, We tried to set APR connector protocol attribute in connector tag but we are not able to start the tomcat as the supporting library are not found in JDK 1.7 installed in my system Please suggest where we will get the APR connector file. @Mark Sorry for duplicate message. That has a

Getting error while starting tomcat

Hello All, Tomcat Server 7.0.35 Operating System Version : HP-UX 11.31 JRE_HOME:/opt/java1.5 We are getting error in Catalina log file while starting the tomcat server Exception in thread main java.lang.UnsupportedClassVersionError: Bad version number in .class file at

Tomcat(7.0.35) vulnerability or issues

Dear All, We are upgrading the tomcat from version 6.0.18 to 7.0.35 Operating System Version : HP-UX 11.31 Please inform us if there are any known issues or any vulnerability on latest tomcat version of 7.0.35. Thanks and Regards Deepak Kumar Disclaimer and confidentiality clause - This

tomcat-7.0.35-windows-x86 ON 64 bit UNIX

Hi, I have downloaded apache-tomcat-7.0.35-windows-x86.zip and runiing it on 64 bit UNIX machine and it is working fine. Is it OK to run x86 setup on 64 bit UNIX machine? Please reply. Server version: Apache Tomcat/7.0.35 Server built: Jan 10 2013 10:52:49 Server number: 7.0.35.0 OS Name:

tomcat-7.0.35 ON Window Server SP 2

Hi, I have downloaded apache-tomcat-7.0.35.zip and runiing it on Window Server SP 2 machine and it is working fine. Is it OK to run apache-tomcat-7.0.35 setup on Window Server SP 2 machine? Please reply. Server version: Apache Tomcat/7.0.35 OS Name:Windows Server SP 2 32 bit

Unable to start tomcat (JDBC-ORACLE CONNECTIVITY ISSUE WITYH OCI8 DRIVER using oracle 11g client.)

Dear All, JDBC-ORACLE CONNECTIVITY ISSUE WITYH OCI8 DRIVER using oracle 11g client.. I am getting below error when i m trying to access oracle db using oracle 11g client. It works with earlier oracle client versions. how do i resolve this. is there any issue with version of ojdbc6.jar that i

denying the request if it comes through IP address instead of DNS

Hello All, We are using - Tomcat Version - 7.0.22 Operating System Version : Windows 2003 server To close a vulnerability, To denying the request if it comes through IP address instead of DNS, we have made below configuration changes in server.xml Engine name=Catalina defaultHost=server

Re: cannot disable SSL v3 [SOLVED]

Hello all, I have removed SSL cypher from my configuration. and its working. Please let me know is this correct way to solve this. I am running Tomcat 7.0.22 Connector port=443 maxThreads=150 scheme=https secure=true

Cannot disable SSL v3

Dear All, Below is my configuration in server.xml file of tomcat 7.0.22. Connector className =org.apache.catalina.connector.http.HttpConnector port=443 maxHttpHeaderSize=8192 maxThreads=150 minSpareThreads=25 enableLookups=false

Re: Cannot disable SSL v3

Dear Chris Thanks for your reply How can I know which protocol support my JVM. We are using java1.7.0_40 I have tested with https://www.ssllabs.com/ssltest/index.html Please let us know is any turnaround in my server.xml configuration to disable SSL v3. Thanks and Regards Deepak

Only one request from client but was served twice by Tomcat

Dear All, We have a client that is basically a JAVA desktop application that calls a servlet which is hosted at Tomcat server. The flow of request and response both are logged at the client as well as the server end.( i.e each and every request and response is logged) Now, the client sent a

Getting javax.net.ssl.SSLHandshakeException

Dear All, We have migrated from apache tomcat 8.0.8 to apache tomcat 8.0.18.(to prevent the poodle attack). But now we are facing the below issue. javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake at

Re: Getting javax.net.ssl.SSLHandshakeException

Dear Christopher , Perhaps you disabled SSLv3 and a client is trying to connect using SSLv3? We agree with your above statement. We have disabled SSLv3 on Tomcat server and our client is an exe which sends request using below code. URL server = new URL(url);

Tomcat hanged on window server 2012

Hi, Our application worked fine on tomcat 8.0.22 on windows server 2003 server. The tomcat server is restarted daily using a scheduler on shutdown.bat (at night) and startup.bat files (in the morning). We have now upgraded our machine to windows server 2012 64 bit and now facing some serious

Re: Tomcat hanged on window server 2012

From: Christopher Schultz ch...@christopherschultz.net To: Tomcat Users List users@tomcat.apache.org Date: 17-08-2015 18:32 Subject:Re: Tomcat hanged on window server 2012 -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Dear Chris, Thanks for the reply, our response to ur

Unable to fix the vulnerability of " HSTS missing from HTTPS server" on tomcat 8.0.27 running on unix .

Hi , We are unable to fix the vulnerability of " HSTS missing from HTTPS server" on apache tomcat 8.0.27 running on unix . We found the solution for the same by enabling httpHeaderSecurity filter in conf\web.xml file, tag and it works absolutely fine for tomcat 8.0.27 on windows, but

HSTS missing from HTTPS server on tomcat 8.0.27

Hi, We are unable to fix the vulnerability of "HSTS missing from HTTPS server" on apache tomcat 8.0.27 while running on unix operating system. Below is the system configuration: OS Name: HP-UX OS Version:B.11.31 Architecture: IA64N Java Home:

RE: HSTS missing from HTTPS server on tomcat 8.0.27

Dear Harrie, We have already implemented the said configuration of filter. Still we are unable to implement HSTS. This configuration works absolutely fine on tomcat running running on windows, but in the case of unix we aren't able to achieve HSTS. Below are the steps followed by us: We

RE: Appscan Issues

Dear Amith, Thanks... I will me more detailed. We don't use Apache HTTPD or ngnix. It's just tomcat7. Below is my connector configuration. Regards, Amith Can you use sslEnabledProtocols="TLSv1.2,TLSv1.1" SSLEnabled="true" in connector tag as below. Thanks and Regards Deepak

Re: Unable to start tomcat

Dear Jason, Thank for your reply. I am unable to understand below hint. Will you please help me out. What action should I take to start my tomcat. And how I can see my buffer space or queue size. -- This looks informative and should give u hint and where you should begin troubleshooting.

Unable to start tomcat

Dear Team I have updated JRE from jre1.8.0_25 to jre1.8.0_211 on my window server 2012. and My tomcat version is apache-tomcat-8.0.41. It was running fine last 6 hours but now I am getting error while stating the tomcat 26-Feb-2020 11:22:23.600 SEVERE [main]

Re: Unable to start tomcat

Dear Jason, Thank you for link. As per below link. I have started our Window Server and problem has been resolved. We are able to start our tomcat. But my worry is, I am unable to find out Root Cause of problem. And how to handle it in future. Do we have any way to monitor buffer space or

Error parsing HTTP request header

Dear Team, We are getting below error in catelina log while starting the tomcat. 26-Feb-2020 18:57:36.795 INFO [main] org.apache.catalina.startup.Catalina.start Server startup in 21520 ms 26-Feb-2020 18:57:38.277 INFO [http-nio-443-exec-11]

RE: Error parsing HTTP request header

May I know the tomcat version please. - It is apache-tomcat-8.0.41 -Original Message- From: dku...@ccilindia.co.in [mailto:dku...@ccilindia.co.in] Sent: 26 February 2020 19:01 To: 'Tomcat Users List' Subject: Error parsing HTTP request header Dear Team, We are getting below error in

Unable to start Tomcat 10.0.4

Dear All, Unable to start tomcat 10.0.4 and getting error Failed to initialize component. /conf/server.xml configuration as below. Getting below error in catalina log Server version name: Apache Tomcat/10.0.4 Server built: Mar 5 2021 11:07:15 UTC Server version

Re: Unable to start Tomcat 10.0.4

> Deepak, > You already have some service listening on port 80 (IIS maybe?) > > > from mobile (sorry for typos ;) > > We have changed the port still getting same error > Maybe you have the same port configured twice in your conf/server.xml? > Please post *all* elements from your

Re: Unable to start Tomcat 10.0.4

You already have some service listening on port 80 (IIS maybe?) from mobile (sorry for typos ;) We have changed the port still getting same error 16-Mar-2021 18:09:38.299 INFO [main] org.apache.coyote.AbstractProtocol.init Initializing ProtocolHandler ["http-nio-81"] 16-Mar-2021 18:09:38.363

Re: Unable to start Tomcat 10.0.4

> Please provide full stacktrace Please find full catlina log and I have already shared server.xml in trail mail 16-Mar-2021 21:26:54.263 WARNING [main] org.apache.tomcat.util.digester.SetPropertiesRule.begin Match [Server/Service/Connector] failed to set property [compressableMimeType] to

Re: Unable to start Tomcat 10.0.4

> If you look at the stack trace, it tells you what the problem is: > Caused by: java.lang.IllegalArgumentException: No SSLHostConfig > element was found with the hostName [_default_] to match the > defaultSSLHostConfigName for the connector [https-openssl-nio-8443] > So it no longer looks like

Re: Unable to start Tomcat 10.0.4

>> Your more recent exception log didn't include the "caused by" exception > -- >> which is the actual failure details. Double-check that and make sure > it's >> the same issue. >> >> Also, use netstat to confirm you aren't using the ports already. > Changing >> it may just find another conflict

Re: Unable to start Tomcat 10.0.4

> Your more recent exception log didn't include the "caused by" exception -- > which is the actual failure details. Double-check that and make sure it's > the same issue. > > Also, use netstat to confirm you aren't using the ports already. Changing > it may just find another conflict (although

Re: Unable to start Tomcat 10.0.4

> I suggest you have a read here: > https://tomcat.apache.org/tomcat-10.0-doc/config/http.html#SSL_Support > The documentation covers the details you need to correctly configure Tomcat > and SSL and links to a related page about SSL configuration. > Notice the line: > Each secure connector must

Unable to transfer file above 60mb in Tomcat

Dear team, I have a file copy application, that run between tomcat server and java client. Its copy file from server end to paste at client end. At server end code written in Servlet file. Its read file data and file name from file. And storing it into String object and send it to client in