mirrors are broken?

2021-09-22 Thread jean-frederic clere

Hi,

https://tomcat.apache.org/download-90.cgi gives me:
+++
Error!

/var/www/dyn/closer.lua:322: attempt to index local 'cdn_uri_check' (a 
nil value)

+++

Have we break something with the mirror logic? Or is my favorite mirror 
broken?


--
Cheers

Jean-Frederic


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



ApacheCon @home CfP closes in 4 days

2020-07-09 Thread jean-frederic clere

Hi folks,

The Call for Papers will close in 4 days, don't shy we are looking for 
topics about how you use Tomcat, so please submit.


The conference will take place ONLINE the 29 September to 1 of October.

Check: https://acna2020.jamhosted.net/ and remember NO travels you just 
need a webcam and an internet connection: anyone can try ;-)


--
Cheers

Jean-Frederic

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



small extension for Tomcat in ApacheConNA2019

2019-05-13 Thread jean-frederic clere
Hi,

We have a small extension for The Tomcat track in ApacheConNA2019 CfP
until Tuesday 23h59 GMT! Go and submit now ;-)

-- 
Cheers

Jean-Frederic

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



ApacheCon call for presentations, httpd content

2019-05-08 Thread jean-frederic clere
Hi, folks.

The call for presentations for ApacheCon North America closes in a
little less than 6 days.

The CFP is here - https://www.apachecon.com/acna19/cfp.html - and closes
May 13th.

Thanks!

Jean-Frederic


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



[SECURITY] CVE-2018-8034 Apache Tomcat - Security Constraint Bypass

2018-07-22 Thread Jean-Frederic Clere
CVE-2018-8034 Apache Tomcat - Security Constraint Bypass

Severity: Low

Vendor: The Apache Software Foundation

Versions Affected:
Apache Tomcat 9.0.0.M1 to 9.0.9
Apache Tomcat 8.5.0 to 8.5.31
Apache Tomcat 8.0.0.RC1 to 8.0.52
Apache Tomcat 7.0.35 to 7.0.88

Description:
The host name verification when using TLS with the WebSocket
client was missing. It is now enabled by default.

Mitigation:
Users of the affected versions should apply one of the following
mitigations:
- Upgrade to Apache Tomcat 9.0.10 or later.
- Upgrade to Apache Tomcat 8.5.32 or later.
- Upgrade to Apache Tomcat 8.0.53 or later.
- Upgrade to Apache Tomcat 7.0.90 or later.

History:
2018-07-22 Original advisory

References:
[1] http://tomcat.apache.org/security-9.html

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



[SECURITY] CVE-2018-8037 Apache Tomcat - Information Disclosure

2018-07-22 Thread Jean-Frederic Clere
CVE-2018-8037 Apache Tomcat - Information Disclosure

Severity: Important

Vendor: The Apache Software Foundation

Versions Affected:
Apache Tomcat 9.0.0.M9 to 9.0.9
Apache Tomcat 8.5.5 to 8.5.31

Description:

A bug in the tracking of connection closures can lead to
reuse of user sessions in a new connection.

Mitigation:
Users of the affected versions should apply one of the following
mitigations:
- Upgrade to Apache Tomcat 9.0.10 or later.
- Upgrade to Apache Tomcat 8.5.32 or later.

History:
2018-07-22 Original advisory

References:
[1] http://tomcat.apache.org/security-9.html

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



[SECURITY] CVE-2018-1336 Apache Tomcat - Denial of Service

2018-07-22 Thread Jean-Frederic Clere
CVE-2018-1336 Apache Tomcat - Denial of Service

Severity: Important

Vendor: The Apache Software Foundation

Versions Affected:
Apache Tomcat 9.0.0.M9 to 9.0.7
Apache Tomcat 8.5.0 to 8.5.30
Apache Tomcat 8.0.0.RC1 to 8.0.51
Apache Tomcat 7.0.28 to 7.0.86

Description:

An improper handing of overflow in the UTF-8 decoder with
supplementary characters can lead to an infinite loop in the
decoder causing a Denial of Service.

Mitigation:
Users of the affected versions should apply one of the following
mitigations:
- Upgrade to Apache Tomcat 9.0.7 or later.
- Upgrade to Apache Tomcat 8.5.32 or later.
- Upgrade to Apache Tomcat 8.0.52 or later.
- Upgrade to Apache Tomcat 7.0.90 or later.

History:
2018-07-22 Original advisory

References:
[1] http://tomcat.apache.org/security-9.html

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



[SECURITY] CVE-2018-8020 Apache Tomcat Native Connector - Mishandled OCSP responses can allow clients to authenticate with revoked certificates

2018-07-21 Thread Jean-Frederic Clere
CVE-2018-8020 Apache Tomcat Native Connector - Mishandled OCSP responses can 
allow clients to authenticate with revoked certificates

Severity: Important

Vendor: The Apache Software Foundation

Versions Affected:
Apache Tomcat Native 1.2.0 to 1.2.16
Apache Tomcat Native 1.1.23 to 1.1.34

Description:
Apache Tomcat Native has a flaw that does not properly check OCSP pre-produced
responses, which are lists (multiple entries) of certificate statuses.
Subsequently, revoked client certificates may not be properly identified,
allowing for users to authenticate with revoked certicates to connections that
require mutual TLS.
Users not using OCSP checks are not affected by this vulnerability.

Mitigation:
Users of the affected versions should apply one of the following
mitigations:
- Upgrade to Apache Tomcat 1.2.17 or later
  Note: This version was included in Apache Tomcat 9.0.10 onwards, 8.5.32
onwards, 8.0.53 onwards and 7.0.90 onwards.

History:
2018-03-09 Original advisory

References:
[1] http://tomcat.apache.org/security-native.html

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



[SECURITY] CVE-2018-8019 Apache Tomcat Native Connector - Mishandled OCSP invalid response

2018-07-21 Thread Jean-Frederic Clere
CVE-2018-8019 Apache Tomcat Native Connector - Mishandled OCSP invalid response

Severity: Moderate

Vendor: The Apache Software Foundation

Versions Affected:
Apache Tomcat Native 1.2.0 to 1.2.16
Apache Tomcat Native 1.1.23 to 1.1.34

Description:
When using an OCSP responder Tomcat Native did not correctly handle invalid 
responses. This allowed for revoked client certificates to be incorrectly 
identified. It was therefore possible for users to authenticate with revoked 
certificates when using mutual TLS.
Users not using OCSP checks are not affected by this vulnerability.

Mitigation:
Users of the affected versions should apply one of the following
mitigations:
- Upgrade to Apache Tomcat 1.2.17 or later
  Note: This version was included in Apache Tomcat 9.0.10 onwards, 8.5.32
onwards, 8.0.53 onwards and 7.0.90 onwards.

History:
2018-03-09 Original advisory

References:
[1] http://tomcat.apache.org/security-native.html

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



[ANN] Apache Tomcat Native 1.2.17 released

2018-06-20 Thread Jean-Frederic Clere
The Apache Tomcat team announces the immediate availability of Apache
Tomcat Native 1.2.17 stable.

The key features of this release are:
- Windows binaries built with APR 1.6.3 and OpenSSL 1.0.2o.
- Fix Certificate verification using CRL.
- Arrange  OCSP response processing.

Note that users should now be using 1.2.x in preference to 1.1.x.

Please refer to the change log for the complete list of changes:
http://tomcat.apache.org/native-doc/miscellaneous/changelog.html

Downloads:
http://tomcat.apache.org/download-native.cgi

The Apache Tomcat Native Library provides portable API for features
not found in contemporary JDK's. It uses Apache Portable Runtime as
operating system abstraction layer and OpenSSL for SSL networking and
allows optimal performance in production environments.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: TomcatCon @ ApacheCon

2017-01-12 Thread jean-frederic clere
On 01/10/2017 09:05 PM, Christopher Schultz wrote:
> Mark,
> 
> On 1/9/17 6:57 AM, Mark Thomas wrote:
>> There is the opportunity (if we can pull it together as a
>> community) to run a dedicated Tomcat conference alongside ApacheCon
>> NA 2017. The dates are May 16 to 18.
> 
> Interesting.
> 
>> The call for papers closes on Feb 11 so we have around a month to
>> get organised. We'll also need to convince the conference
>> organisers that a) there is a demand for this and b) we have a
>> plan.
> 
>> Getting the right content is going to be critical to success. I've
>> been thinking about this for a while and I think we can identify
>> the right content
> 
> I have a single presentation submitted already for consideration. The
> topic is "Let's Encrypt Apache Tomcat" ;)

OK I can do a H2 presentation / new SSL config in Tomcat before ;-)

> 
> I was also planning on reprising one of my previous presentations,
> either the "Monitoring" or "Load-balancing" one, or possibly the
> credential-handlers one. They have all been fairly well-attended in
> the past.
> 
> If you wanted to really get a LOT of sessions going, I'd be willing to
> do all of them, though it *is* a lot of talking.
> 
>> "What topic(s) need to be covered in a Tomcat conference to make it
>> as easy as possible to get your employer to pay for you to
>> attend?"
> 
>> We have up to three days and potentially multiple tracks so even if
>> you think you have a niche requirement, please speak up. We
>> typically have a number of Tomcat committers speaking at ApacheCon
>> so finding someone to cover a particular topic shouldn't be too
>> tricky. Equally, if you have a topic you could present on that you
>> think others would find useful, speak up.
> 
>> Do feel free to add your +1 if someone else mentions a topic your
>> are interested first. Having an idea of how popular the topics are
>> would also be helpful.
> 
>> Also, we don't have to stick to the standard "Sit and listen to
>> someone present for 40 mins" format. Discussions, workshops,
>> hackathons are all possible.
> 
>> Some topic ideas to get the ball rolling.
> 
>> Hands-on workshop: Configuring TLS with Apache Tomcat
> 
> +0
> 
>> Reverse Proxying to Apache Tomcat Load-balancing with Apache
>> Tomcat Clustering  with Apache Tomcat
> 
> +1 to all 3
> 
>> Tomcat Clinic (like the users list but with everyone in the same
>> room)
> 
> Evidently, Daniel Rugguri tried this a few years ago with a "Let's
> solve your mox_proxy problem" workshop, and literally nobody showed
> up. I'm skeptical about a workshop for a few reasons:
> 
> 1. Attendees might not have a "problem to solve" and therefore see a
> workshop as a waste of their time.
> 
> 2. Anyone with a problem to solve isn't going to wait-around for the
> conference to get it solved.
> 
> Maybe we could instead have more like a live-demo of setting things up
> from scratch. So it's not an AMA (AUA?) with a topic of e.g.
> "custering" but instead have a session titled something like
> "Clustering A - Z" where we build a live cluster while the audience
> watches and asks questions in real time.
> 
> Jean-Frederic and I were musing in Austin (?) about getting a small
> number of Raspberry Pi-type devices on the stage with activity/state
> lights on them, build a cluster, and then start unplugging things to
> show what actually happens when disaster strikes in your environment,
> and how the cluster reacts.

I already have 3 Raspberry ready for this kind of thing, probably needs
a few more to make a bigger cluster.

> 
> I'm not sure that could be done in 1 hour, especially with all of the
> questions we are likely to get or scenarios we might like to demonstrate
> .

Nope that is ~2 hours workshop

Cheers

Jean-Frederic

> 
> -chris
> 
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
> 
> 


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: TomcatCon @ ApacheCon

2017-01-09 Thread jean-frederic clere
On 01/09/2017 12:57 PM, Mark Thomas wrote:
> All,
> 
> There is the opportunity (if we can pull it together as a community) to
> run a dedicated Tomcat conference alongside ApacheCon NA 2017. The dates
> are May 16 to 18.
> 
> The call for papers closes on Feb 11 so we have around a month to get
> organised. We'll also need to convince the conference organisers that a)
> there is a demand for this and b) we have a plan.
> 
> Getting the right content is going to be critical to success. I've been
> thinking about this for a while and I think we can identify the right
> content if as many folks as possible on this list answer the following
> question:
> 
> "What topic(s) need to be covered in a Tomcat conference to make it as
> easy as possible to get your employer to pay for you to attend?"
> 
> We have up to three days and potentially multiple tracks so even if you
> think you have a niche requirement, please speak up. We typically have a
> number of Tomcat committers speaking at ApacheCon so finding someone to
> cover a particular topic shouldn't be too tricky. Equally, if you have a
> topic you could present on that you think others would find useful,
> speak up.
> 
> Do feel free to add your +1 if someone else mentions a topic your are
> interested first. Having an idea of how popular the topics are would
> also be helpful.
> 
> Also, we don't have to stick to the standard "Sit and listen to someone
> present for 40 mins" format. Discussions, workshops, hackathons are all
> possible.
> 
> Some topic ideas to get the ball rolling.
> 
> Hands-on workshop: Configuring TLS with Apache Tomcat
> Reverse Proxying to Apache Tomcat
> Load-balancing with Apache Tomcat
> Clustering  with Apache Tomcat
> Tomcat Clinic (like the users list but with everyone in the same room)
> 
> I look forward to hearing your topic ideas.

The classical tomcat-next (presenting 8.5 and 9 + migration + openssl)
easily fill a room and an afternoon of workshop.
Proxy and Load-balancing are also often asked...

What about tomcat in cloud?

Cheers

Jean-Frederic

> 
> Mark
> 
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
> 
> 


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



[ANN] Apache Tomcat 6.0.45 available

2016-02-12 Thread Jean-Frederic Clere
The Apache Tomcat team announces the immediate availability of Apache
Tomcat 6.0.45.

Apache Tomcat is an open source software implementation of the Java
Servlet, JavaServer Pages and Java Expression Language technologies.

This release contains a number of bug fixes and improvements compared to
version 6.0.44. The notable changes since 6.0.45 include:
- Update to Tomcat Native Library version 1.1.34.
- Drop support for support for Intel Itanium CPU.


Please refer to the change log for the complete list of changes:
http://tomcat.apache.org/tomcat-6.0-doc/changelog.html

Note: This version has 3 zip binaries: a generic one and
  two bundled with Tomcat native binaries for Windows
  operating systems running on different CPU architectures.

Downloads:
http://tomcat.apache.org/download-60.cgi

Migration guides from Apache Tomcat 5.5.x:
http://tomcat.apache.org/migration.html

- The Apache Tomcat team

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: [ANN] Apache Tomcat Connectors 1.2.41 released

2015-08-19 Thread jean-frederic clere

On 08/17/2015 01:10 PM, Mark Thomas wrote:

The Apache Tomcat Project is proud to announce the release of version
1.2.41 of the Apache Tomcat Connectors.
This version fixes one security issue (CVE-2014-8111) and a number of
bugs found in previous releases.


Many thanks for the release and sorry for all the troubles around 
CVE-2014-8111.


Cheers

Jean-Frederic

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



tomcat meetup during apachecon

2015-04-14 Thread jean-frederic clere

Hi,

If you are @apachecon in Austin feel first to join: http://sched.co/35Hk

Cheers

Jean-Frederic

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



[ANN] Apache Tomcat 6.0.37 released

2013-05-06 Thread jean-frederic clere

The Apache Tomcat team announces the immediate availability of Apache
Tomcat 6.0.37 stable.

Apache Tomcat 6.0.37 is primarily a security and bug fix release. All 
users of older versions of the Tomcat 6.0 family should upgrade to 6.0.37.



Note that is version has 4 zip binaries: a generic one and three
bundled with Tomcat native binaries for different CPU architectures.

Apache Tomcat 6.0 includes new features over Apache Tomcat 5.5,
including support for the new Servlet 2.5 and JSP 2.1 specifications, a
refactored clustering implementation, advanced IO features, and
improvements in memory usage.

Please refer to the change log for the list of changes:
http://tomcat.apache.org/tomcat-6.0-doc/changelog.html

Downloads:
http://tomcat.apache.org/download-60.cgi

Migration guide from Apache Tomcat 5.5.x:
http://tomcat.apache.org/migration.html

Thank you,

-- The Apache Tomcat Team

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



[ANN] Apache Tomcat 6.0.36 released

2012-10-23 Thread jean-frederic clere

The Apache Tomcat team announces the immediate availability of Apache
Tomcat 6.0.36 stable.

Apache Tomcat 6.0.36 is primarily a security and bug fix release. All 
users of older versions of the Tomcat 6.0 family should upgrade to 6.0.36.



Note that is version has 4 zip binaries: a generic one and three
bundled with Tomcat native binaries for different CPU architectures.

Apache Tomcat 6.0 includes new features over Apache Tomcat 5.5,
including support for the new Servlet 2.5 and JSP 2.1 specifications, a
refactored clustering implementation, advanced IO features, and
improvements in memory usage.

Please refer to the change log for the list of changes:
http://tomcat.apache.org/tomcat-6.0-doc/changelog.html

Downloads:
http://tomcat.apache.org/download-60.cgi

Migration guide from Apache Tomcat 5.5.x:
http://tomcat.apache.org/migration.html

Thank you,

-- The Apache Tomcat Team

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



[ANN] Apache Tomcat 6.0.35 released

2011-12-06 Thread jean-frederic clere

The Apache Tomcat team announces the immediate availability of Apache
Tomcat 6.0.35 stable.

Apache Tomcat 6.0.35 is primarily a security and bug fix release. All 
users of older versions of the Tomcat 6.0 family should upgrade to 6.0.35.



Note that is version has 4 zip binaries: a generic one and three
bundled with Tomcat native binaries for different CPU architectures.

Apache Tomcat 6.0 includes new features over Apache Tomcat 5.5,
including support for the new Servlet 2.5 and JSP 2.1 specifications, a
refactored clustering implementation, advanced IO features, and
improvements in memory usage.

Please refer to the change log for the list of changes:
http://tomcat.apache.org/tomcat-6.0-doc/changelog.html

Downloads:
http://tomcat.apache.org/download-60.cgi

Migration guide from Apache Tomcat 5.5.x:
http://tomcat.apache.org/migration.html

Thank you,

-- The Apache Tomcat Team

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: distributed session manager with infinispan

2011-11-28 Thread jean-frederic clere

On 11/27/2011 06:44 PM, Zdeněk Henek wrote:

Hi,

I have created prototype of distributed session manager which uses
infinispan to distribute session state.

The code is available here:
https://github.com/zvrablik/tomcatInfinispanSessionManager

Would anybody have time to discuss the prototype or test it?


Cool I contacted Infinispan guys to have their views on it.

Cheers

Jean-Frederic

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



[ANN] Apache Tomcat 6.0.33 released

2011-08-18 Thread jean-frederic clere

The Apache Tomcat team announces the immediate availability of Apache
Tomcat 6.0.33 stable.

Apache Tomcat 6.0.33 is primarily a security and bug fix release. All 
users of older versions of the Tomcat 6.0 family should upgrade to 6.0.33.



Note that is version has 4 zip binaries: a generic one and three
bundled with Tomcat native binaries for different CPU architectures.

Apache Tomcat 6.0 includes new features over Apache Tomcat 5.5,
including support for the new Servlet 2.5 and JSP 2.1 specifications, a
refactored clustering implementation, advanced IO features, and
improvements in memory usage.

Please refer to the change log for the list of changes:
http://tomcat.apache.org/tomcat-6.0-doc/changelog.html

Downloads:
http://tomcat.apache.org/download-60.cgi

Migration guide from Apache Tomcat 5.5.x:
http://tomcat.apache.org/migration.html

Thank you,

-- The Apache Tomcat Team

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



[ANN] Apache Tomcat 6.0.32 released

2011-02-03 Thread jean-frederic clere

The Apache Tomcat team announces the immediate availability of Apache
Tomcat 6.0.32 stable.

Apache Tomcat 6.0.32 is primarily a security and bug fix release. All 
users of older versions of the Tomcat 6.0 family should upgrade to 6.0.32.



Note that is version has 4 zip binaries: a generic one and three
bundled with Tomcat native binaries for different CPU architectures.

Apache Tomcat 6.0 includes new features over Apache Tomcat 5.5,
including support for the new Servlet 2.5 and JSP 2.1 specifications, a
refactored clustering implementation, advanced IO features, and
improvements in memory usage.

Please refer to the change log for the list of changes:
http://tomcat.apache.org/tomcat-6.0-doc/changelog.html

Downloads:
http://tomcat.apache.org/download-60.cgi

Migration guide from Apache Tomcat 5.5.x:
http://tomcat.apache.org/migration.html

Thank you,

-- The Apache Tomcat Team

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



[ANN] Apache Tomcat 6.0.30 released

2011-01-13 Thread jean-frederic clere

The Apache Tomcat team announces the immediate availability of Apache
Tomcat 6.0.30 stable. This release includes bug-fixes over Apache
Tomcat 6.0.29.

Note that is version has 4 zip binaries: a generic one and three
bundled with Tomcat native binaries for different CPU architectures.

Apache Tomcat 6.0 includes new features over Apache Tomcat 5.5,
including support for the new Servlet 2.5 and JSP 2.1 specifications, a
refactored clustering implementation, advanced IO features, and
improvements in memory usage.

Please refer to the change log for the list of changes:
http://tomcat.apache.org/tomcat-6.0-doc/changelog.html

Downloads:
http://tomcat.apache.org/download-60.cgi

Migration guide from Apache Tomcat 5.5.x:
http://tomcat.apache.org/migration.html

Thank you,

-- The Apache Tomcat Team

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Meetup during ApacheConNA2010

2010-10-14 Thread jean-frederic clere
Hi,

We will have a meetup during the ApacheConNA2010 on Thursday 4th at
20h00. Meetups are free to attend and a opportunity to have short
presentation and discussion about the new Tomcat 7 and the latest
improvement done in the code.
See http://wiki.apache.org/tomcat/TomcatAtApacheConNA2010 and register
if you are around Atlanta and want to join us.

Cheers

Jean-Frederic

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



[ANN] Apache Tomcat 6.0.29 released

2010-07-23 Thread jean-frederic clere
The Apache Tomcat team announces the immediate availability of Apache
Tomcat 6.0.29 stable. This release includes bug-fixes over Apache
Tomcat 6.0.28.

Apache Tomcat 6.0 includes new features over Apache Tomcat 5.5,
including support for the new Servlet 2.5 and JSP 2.1 specifications, a
refactored clustering implementation, advanced IO features, and
improvements in memory usage.

Please refer to the change log for the list of changes:
http://tomcat.apache.org/tomcat-6.0-doc/changelog.html

Downloads:
http://tomcat.apache.org/download-60.cgi

Migration guide from Apache Tomcat 5.5.x:
http://tomcat.apache.org/migration.html

Thank you,

-- The Apache Tomcat Team

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: [ANN] Apache Tomcat 6.0.28 released

2010-07-09 Thread jean-frederic clere
The Apache Tomcat team announces the immediate availability of Apache
Tomcat 6.0.28 stable. This release includes bug-fixes over Apache
Tomcat 6.0.26.

Apache Tomcat 6.0 includes new features over Apache Tomcat 5.5,
including support for the new Servlet 2.5 and JSP 2.1 specifications, a
refactored clustering implementation, advanced IO features, and
improvements in memory usage.

Please refer to the change log for the list of changes:
http://tomcat.apache.org/tomcat-6.0-doc/changelog.html

Downloads:
http://tomcat.apache.org/download-60.cgi

Migration guide from Apache Tomcat 5.5.x:
http://tomcat.apache.org/migration.html

Thank you,

-- The Apache Tomcat Team

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Tomcat at the next ApacheCon

2010-03-18 Thread jean-frederic clere
Hi,

We all want to see a Tomcat track at the ApacheConNA2010, don't we?

I have created a wiki page to collect the presentation proposals.
Fell free to add the stuff you would like to present at the ApacheCon.
The tomcat PMC will review it and then propose it to the planners of
conference.

Note we have until the Sunday, March 21st to collect that information.

Cheers

Jean-Frederic

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



[ANN] Apache Tomcat 6.0.26 released

2010-03-11 Thread jean-frederic clere
The Apache Tomcat team announces the immediate availability of Apache
Tomcat 6.0.26 stable. This release includes bug-fixes over Apache
Tomcat 6.0.24.
Note that is version has 4 zip binaries: a generic one and three
bundled with Tomcat native binaries for different CPU architectures.


Apache Tomcat 6.0 includes new features over Apache Tomcat 5.5,
including support for the new Servlet 2.5 and JSP 2.1 specifications, a
refactored clustering implementation, advanced IO features, and
improvements in memory usage.

Please refer to the change log for the list of changes:
http://tomcat.apache.org/tomcat-6.0-doc/changelog.html

Downloads:
http://tomcat.apache.org/download-60.cgi

Migration guide from Apache Tomcat 5.5.x:
http://tomcat.apache.org/migration.html

Thank you,

-- The Apache Tomcat Team

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



[ANN] Apache Tomcat 6.0.24 released

2010-01-21 Thread jean-frederic clere
The Apache Tomcat team announces the immediate availability of Apache
Tomcat 6.0.24 stable. This release includes many bug-fixes over Apache
Tomcat 6.0.20.
Note that is version has 4 zip binaries: a generic one and three
bundled with Tomcat native binaries for different CPU architectures.


Apache Tomcat 6.0 includes new features over Apache Tomcat 5.5,
including support for the new Servlet 2.5 and JSP 2.1 specifications, a
refactored clustering implementation, advanced IO features, and
improvements in memory usage.

Please refer to the change log for the list of changes:
http://tomcat.apache.org/tomcat-6.0-doc/changelog.html

Downloads:
http://tomcat.apache.org/download-60.cgi

Migration guide from Apache Tomcat 5.5.x:
http://tomcat.apache.org/migration.html

Thank you,

-- The Apache Tomcat Team

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: [ANN] Apache Tomcat Native 1.1.18 released

2009-11-24 Thread jean-frederic clere

On 11/23/2009 10:49 PM, Tony Anecito wrote:

Thanks Team for the fixes and any enhancements!

So does one need to uninstall the older version before installing this one?


The files of the new packages will overwrite the old ones, but that is 
good idea to uninstall the old package(s).


Cheers

Jean-Frederic



Regards,
-Tony

--- On Mon, 11/23/09, jean-frederic clerejfcl...@gmail.com  wrote:


From: jean-frederic clerejfcl...@gmail.com
Subject: [ANN] Apache Tomcat Native 1.1.18 released
To: Tomcat Developers Listd...@tomcat.apache.org, Tomcat Users 
Listusers@tomcat.apache.org, annou...@apache.org
Date: Monday, November 23, 2009, 1:59 PM
The Apache Tomcat team announces the
immediate availability of Apache Tomcat Native 1.1.18
stable. This release includes few bug fixes over Apache
Tomcat Native 1.1.16 and fixes the client initiated part of
cve-2009-3555, note that the server initiated renegociation
was added in 1.1.17 (and is still in the 1.1.18 code).

Please refer to the change log for the list of changes: 
http://tomcat.apache.org/native-doc/miscellaneous/changelog.html

Downloads: http://tomcat.apache.org/download-native.cgi

Thank you,

-- The Apache Tomcat Team

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org







-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org





-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



[ANN] Apache Tomcat Native 1.1.18 released

2009-11-23 Thread jean-frederic clere
The Apache Tomcat team announces the immediate availability of Apache 
Tomcat Native 1.1.18 stable. This release includes few bug fixes over 
Apache Tomcat Native 1.1.16 and fixes the client initiated part of 
cve-2009-3555, note that the server initiated renegociation was added in 
1.1.17 (and is still in the 1.1.18 code).


Please refer to the change log for the list of changes: 
http://tomcat.apache.org/native-doc/miscellaneous/changelog.html


Downloads: http://tomcat.apache.org/download-native.cgi

Thank you,

-- The Apache Tomcat Team

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Tomcat meetup at ApacheCon

2009-10-22 Thread jean-frederic clere

Hi everyone,


There is a Tomcat meetup organized at the ApacheCon on Monday 2d of 
November at 20h00.


To register 
http://spreadsheets.google.com/viewform?formkey=dEJLcHk3c1ZrRm8tWUNYeXZZckN0Vnc6MA


For more information or add idem you want to present go to
http://wiki.apache.org/tomcat/TomcatAtApacheConUs2009

See you in Oakland

Cheers

Jean-Frederic

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Tomcat tracks at the ApacheConUS2009

2009-06-17 Thread jean-frederic clere

Hi,

The Tomcat PMC has prepared the tracks of Tomcat for the ApacheCon US 
2009. The first track is the official Tomcat Wednesday track the second 
one will be held in a small room (50) on Thursday after the main track.


Drafts of the tracks are available at 
http://wiki.apache.org/tomcat/TomcatTrackUs09 and 
http://wiki.apache.org/tomcat/SmallTomcatTrackUs09


The first track needs to be fixed soon for the conference announcement 
but the second one could be changed later. We also plan to make Meetups 
or BOF the evening of the Thursday.


Comments?

Cheers

Jean-Frederic

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: What Tomcat presentations / demos / discussions do you want to see at ApacheCon US 2009?

2009-04-22 Thread jean-frederic clere

Rainer Jung wrote:

On 16.04.2009 12:44, Mark Thomas wrote:

Gregor Schneider wrote:

- Concerning how often questions regarding mod_jk are showing up in
the list: mod_jk - HowTo / Best practices

Any takers for presenting this?


Not sure, whether this is too specific for ApacheCon, but yes, if there
is interest, I could give the talk. I'll submit a proposal and let the
committee decide :)

Concerning the proposal about a joined talk for httpd and mod_jk reverse
proxy solutions: putting all this into one slot will be very dificult.
Then we would need to keep it an overview thing and again people might
not get the answers they are seeking (to many it depends without
really explaining how you decide).

So I prefer to do either a more specific talk (like one on mod_jk), or
we would need two adjacent time slots. The latter gives maybe to much
precious time ressources to this topic.


May be we need a frond-end presentation with more than one speaker (I 
will be happy to make a mod_proxy one.


Cheers

Jean-Frederic



Regards,

Rainer


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org





-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



ApacheCon Europe 2009: Early Bird Deadline Extended until 13th of February

2009-02-10 Thread jean-frederic clere

Here's some great news for everyone who's thinking of
traveling to Amsterdam for this year's ApacheCon Europe. The Early Bird
deadline has been extended to Friday, February 13th - and remember,
there is a discount of 150 Euro on registration for anyone staying at
the Mövenpick Hotel. Register at http://www.eu.apachecon.com.

ApacheCon is a week of open source goodness straight from the source of
The Apache Software Foundation:

 - More than 60 1-Hour Sessions on System Administration, Development,
   Data Mining and Search Technologies, Enterprise Web Services, SOA,
   and Cloud Technologies, Open Source Business and Community, and more
 - Over a dozen Training Workshops from industry experts (see below)
 - World-class Keynotes and vendor Expo
 - Lightning Talks and Birds-of-a-Feather sessions
 - New this year: Geeks for Geeks Track, BarCampApache, and Hackathon!

ApacheCon Europe 2009 features 2-day, 1-day, and half-day Training
Workshops on the following topics:

 Data Mining and Search Technologies
 ---
 - Lucene Boot Camp  (Grant Ingersoll)
 - Solr Boot Camp  (Erik Hatcher)


 The Next Generation of Web Data Storage
 ---
 - Building Standalone CouchDB Applications (J. Chris Anderson)
 - High Performance CouchDB (J. Chris Anderson)


 Cloud and Distributed Computing Technologies
 
 - Hadoop Tools and Tricks for Data Processing Pipelines
   (Christophe Bisciglia and Aaron Kimball)


 System Administration
 -
 - Apache HTTP Server - Nuts to Bolts  (Jim Jagielski)
 - Everything Tomcat - Administering, Tuning,
   Troubleshooting and Developing  (Mark Thomas)


 Developing State-of-the-Art Web Applications
 
 - A Day of REST  (J Aaron Farr)
 - Apache CXF - Developing and Deploying Open Source
   SOA Endpoints  (Adrian Trenaman)
 - Ajax on Struts 2: How a Second Generation Web Application
   Framework Meets the Demands of RIA  (Chad Michael Davis)
 - Behavior-Driving Your Apache Wicket Application:
   Making the Most of Webdriver and JDave-Wicket (Timo Rantalaiho)


 Building and Managing Java-based Projects
 -
 - Maven Workshop  (Zeger Hendrikse)


 Professional Media Trainings
 
 - Media  Analyst Training (Sally Khudairi)
 - Intermediate Media  Analyst Training (Sally Khudairi)


We hope to see you on the 23-27 March at the Mövenpick Hotel in
Amsterdam! Visit http://www.eu.apachecon.com for further information
and registration details.

Interested in sponsoring the ApacheCon conferences?  Please contact
Delia Frees at de...@apachecon.com for further information.

-- ApacheCon Europe 2009 Team planners-2009-eu at apachecon.com 
http://www.eu.apachecon.com


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Want to learn Everything on Tomcat. 23/24 March in Amsterdam.

2009-02-07 Thread jean-frederic clere

Hi,

A new tutorial has been added to the ApacheCon Web site:
Everything Tomcat - Administering, Tuning, Troubleshooting and Develop.
That is a 2 day tutorial given by Mark Thomas who is one of the greatest
tomcat developers. Getting a tutorial during the ApacheCon is the 
oportunity to get more than a standard tutorial because most of the 
tomcat committers are also around at the conference so any question can 
be answered during the tutorial.

See http://eu.apachecon.com/c/aceu2009/ and join us at that great event.

Cheers

Jean-Frederic

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



[Fwd: [Urgent] Please help promote ApacheCon video streaming!]

2008-11-04 Thread jean-frederic clere
 ---BeginMessage---
Hi,

please help promote the ApacheCon live video streaming by forwarding
the email below to your PMC user and dev mailing lists, ASAP!

Thank you
Lars Eilebrecht

-

Subject: ApacheCon live video streaming available; keynotes and Apache 101 are 
free


Can't make ApacheCon this week in New Orleans?  You can still watch all 
the keynotes, Apache 101 sessions, and system administration track in 
live video streams:

   http://streaming.linux-magazin.de/en/program_apacheconus08.htm?ann

Keynotes and the Apache 101 lunchtime sessions are free; the full 
sysadmin track, including httpd performance, security, and server stack 
administration talks are available for a fee.

Keynotes include:
- David Recordon, Six Apart  (Wednesday 09:30)
   Learning from Apache to create Open Specifications

- Shahani Markus Weerawarana, Ph.D.  (Thursday 11:30)
   Standing on the Shoulders of Giants

- Sam Ramji, Microsoft  (Friday 11:30)
   struct.new(future, :open, :microsoft)


   Reminder: New Orleans is CST or UTC/GMT -6 hours.


Advance notice: ApacheCon EU 2009 returns to Amsterdam, 23-27 March.  We 
had a great response to our CFP and look forward to announcing the 
schedule in the next month.

---

-- 
Lars Eilebrecht  -  V.P., Conference Planning
[EMAIL PROTECTED]  -  http://www.us.apachecon.com




---End Message---
-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[ANN] Apache Tomcat Native 1.1.15 released

2008-09-11 Thread jean-frederic clere
The Apache Tomcat team announces the immediate availability of Apache 
Tomcat Native 1.1.15 stable. This release includes few bug fixes over 
Apache Tomcat Native 1.1.14.


Please refer to the change log for the list of changes: 
http://tomcat.apache.org/native-doc/miscellaneous/changelog.html


Downloads: http://tomcat.apache.org/download-native.cgi

Thank you,

-- The Apache Tomcat Team

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[ANN] Apache Tomcat Native 1.1.14 released

2008-07-04 Thread jean-frederic clere
The Apache Tomcat team announces the immediate availability of Apache 
Tomcat Native 1.1.14 stable. This release includes few bug fixes over 
Apache Tomcat Native 1.1.13.


Please refer to the change log for the list of changes: 
http://tomcat.apache.org/native-doc/miscellaneous/changelog.html


Downloads: http://tomcat.apache.org/download-native.cgi

Thank you,

-- The Apache Tomcat Team

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[ANN] Apache Tomcat Native 1.1.13 released

2008-02-15 Thread jean-frederic clere

The Apache Tomcat team announces the immediate availability of Apache
Tomcat Native 1.1.13 stable. This release includes many bugfixes over 
Apache Tomcat Native 1.1.12 and the first official release of Tomcat Native.



Please refer to the change log for the list of changes:
http://tomcat.apache.org/native-doc/miscellaneous/changelog.html

Downloads:
http://tomcat.apache.org/download-native.cgi


Thank you,

-- The Apache Tomcat Team


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]