Re: GraalVM native image for embedded Tomcat

2020-10-16 Thread Martin Grigorov
On Fri, Oct 16, 2020 at 3:43 PM Martin Grigorov wrote: > Hi, > > I am trying to create a GraalVM native image for an application that uses > tomcat-embed-core but it fails with the following error: > > [INFO] --- native-image-maven-plugin:20.2.0:native-image (default) @

GraalVM native image for embedded Tomcat

2020-10-16 Thread Martin Grigorov
Hi, I am trying to create a GraalVM native image for an application that uses tomcat-embed-core but it fails with the following error: [INFO] --- native-image-maven-plugin:20.2.0:native-image (default) @ tomcat-embedded --- [INFO] ImageClasspath Entry:

Re: Deploying war, Negative Date exception

2020-10-12 Thread Martin Grigorov
Hi Peter, On Mon, Oct 12, 2020 at 2:20 PM Peter Henderson wrote: > Hello fellow tomcat users. > > My environment. > Tomcat: 9.0.39 > Java: openjdk 11.0.8 2020-07-14 > OS: Ubuntu 18.04.5 LTS > > Source code [0] > > When deploying this war [1], by copying it into the webapps directory, > I get

Re: HTTP2: memory filled up fast on increasing the connections to 1000/2000 (Embedded tomcat 9.0.38)

2020-10-09 Thread Martin Grigorov
Hi Arshiya, On Fri, Oct 9, 2020 at 2:33 PM Arshiya Shariff wrote: > Hi, > > Mark , with the test runs that I performed over clean 9.0.x branch I was > not able to reproduce this. But with 9.0.38 and the jars built from 9.0.x > with hash: c8ec2d4cde3a31b0e9df9a30e7915d77ba725545 , with 700 or

Re: Fwd: Re: At least one JAR was scanned for TLDs yet contained no TLDs.

2020-10-08 Thread Martin Grigorov
Forwarded Message > > Subject: Re: At least one JAR was scanned for TLDs yet contained > > no TLDs. > > Date: Thu, 8 Oct 2020 13:37:49 +0300 > > From: Raivo Rebane > > To: Martin Grigorov , > > users-get.123_...

Re: Re: At least one JAR was scanned for TLDs yet contained no TLDs.

2020-10-08 Thread Martin Grigorov
On Thu, Oct 8, 2020, 14:00 Raivo Rebane wrote: > > > > Forwarded Message > Subject:Re: At least one JAR was scanned for TLDs yet contained no > TLDs. > Date: Thu, 8 Oct 2020 13:37:49 +0300 > From: Raivo Rebane > To: Martin

Re: At least one JAR was scanned for TLDs yet contained no TLDs.

2020-10-08 Thread Martin Grigorov
Hi, On Wed, Oct 7, 2020 at 9:46 PM Raivo Rebane wrote: > Hello > > If I start Tomcat9 I got following: > > [main] org.apache.jasper.servlet.TldScanner.scanJars At least one JAR > was scanned for TLDs yet contained no TLDs. Enable debug logging for > this logger for a complete list of JARs that

Re: Is Tomcat7 supports HTTP2

2020-10-08 Thread Martin Grigorov
Hi, On Thu, Oct 8, 2020 at 9:32 AM Tosh, Bibhuti Bhusan (Bibhuti) < bt...@avaya.com> wrote: > HI All, > I am an user of tomcat7 version. I wanted to know this version tomcat > 7.0.105 supports HTTP2 and CVE-2020-11996 is still applicable to tis > version. I did not any reference of tomcat7

Re: VersionLoggerListener

2020-10-07 Thread Martin Grigorov
d recommend you to download a new .zip/.tgz, or re-install Tomcat. Martin > Regards > > Raivo > > On 07.10.20 14:01, Martin Grigorov wrote: > > Hi, > > > > On Wed, Oct 7, 2020 at 1:51 PM Raivo Rebane wrote: > > > >> Hello > >> > &g

Re: VersionLoggerListener

2020-10-07 Thread Martin Grigorov
Hi, On Wed, Oct 7, 2020 at 1:51 PM Raivo Rebane wrote: > Hello > > My tomcat9 don't starts and gives error: > > java.lang.ClassNotFoundException: > org.apache.catalina.startup.VersionLoggerListener > > How to resolve this problem ? > Download Tomcat again. Your installation must be corrupted

Re: A lot of EOFs when using NIO2 with HTTP2

2020-10-06 Thread Martin Grigorov
On Tue, Oct 6, 2020 at 12:47 PM Mark Thomas wrote: > On 06/10/2020 10:35, Martin Grigorov wrote: > > On Tue, Oct 6, 2020 at 12:15 PM Martin Grigorov > > wrote: > > > >> > >> > >> On Tue, Oct 6, 2020 at 12:06 PM Mark Thomas wrote: > >> &g

Re: A lot of EOFs when using NIO2 with HTTP2

2020-10-06 Thread Martin Grigorov
On Tue, Oct 6, 2020 at 12:15 PM Martin Grigorov wrote: > > > On Tue, Oct 6, 2020 at 12:06 PM Mark Thomas wrote: > >> On 06/10/2020 07:30, Martin Grigorov wrote: >> > Hi, >> > >> > I face an issue with the NIO2 protocol. >> > When I increase

Re: A lot of EOFs when using NIO2 with HTTP2

2020-10-06 Thread Martin Grigorov
On Tue, Oct 6, 2020 at 12:13 PM Rémy Maucherat wrote: > On Tue, Oct 6, 2020 at 8:31 AM Martin Grigorov > wrote: > > > Hi, > > > > I face an issue with the NIO2 protocol. > > When I increase the request rate to more than 500 requests per second it > > star

Re: A lot of EOFs when using NIO2 with HTTP2

2020-10-06 Thread Martin Grigorov
On Tue, Oct 6, 2020 at 12:06 PM Mark Thomas wrote: > On 06/10/2020 07:30, Martin Grigorov wrote: > > Hi, > > > > I face an issue with the NIO2 protocol. > > When I increase the request rate to more than 500 requests per second it > > starts failing

Re: Unclear sentence in FailedRequestFilter's javadoc

2020-10-06 Thread Martin Grigorov
Hi Konstantin, On Mon, Oct 5, 2020 at 2:53 PM Konstantin Kolinko wrote: > пн, 5 окт. 2020 г. в 14:16, Martin Grigorov : > > > > Hi, > > > > What is the meaning of "addresses" at > > > https://github.com/apache/tomcat/blob/a0fb5f4b42c593fa566878dddfa

Re: A lot of EOFs when using NIO2 with HTTP2

2020-10-06 Thread Martin Grigorov
On Tue, Oct 6, 2020 at 9:30 AM Martin Grigorov wrote: > Hi, > > I face an issue with the NIO2 protocol. > When I increase the request rate to more than 500 requests per second it > starts failing with: > > 06-Oct-2020 09:18:19.964 FINE [https-jsse-nio2-8080-exec-6] >

A lot of EOFs when using NIO2 with HTTP2

2020-10-06 Thread Martin Grigorov
Hi, I face an issue with the NIO2 protocol. When I increase the request rate to more than 500 requests per second it starts failing with: 06-Oct-2020 09:18:19.964 FINE [https-jsse-nio2-8080-exec-6] org.apache.coyote.http2.Http2UpgradeHandler.init Connection [1], State [NEW] 06-Oct-2020

Unclear sentence in FailedRequestFilter's javadoc

2020-10-05 Thread Martin Grigorov
Hi, What is the meaning of "addresses" at https://github.com/apache/tomcat/blob/a0fb5f4b42c593fa566878dddfa213e5f3c9c499/java/org/apache/catalina/filters/FailedRequestFilter.java#L40 ? "Parameter parsing does check content type of the request, so there should not be problems with *addresses*

Re: HTTP2: memory filled up fast on increasing the connections to 1000/2000 (Embedded tomcat 9.0.38)

2020-10-01 Thread Martin Grigorov
On Thu, Oct 1, 2020 at 12:29 PM Mark Thomas wrote: > On 30/09/2020 18:47, Martin Grigorov wrote: > > On Wed, Sep 30, 2020 at 7:47 PM Mark Thomas wrote: > >> On 30/09/2020 16:17, Mark Thomas wrote: > > > > >>> That is helpful. Looks like you hav

Re: HTTP2: memory filled up fast on increasing the connections to 1000/2000 (Embedded tomcat 9.0.38)

2020-09-30 Thread Martin Grigorov
On Wed, Sep 30, 2020 at 7:47 PM Mark Thomas wrote: > On 30/09/2020 16:17, Mark Thomas wrote: > > On 30/09/2020 13:53, Martin Grigorov wrote: > >> On Wed, Sep 30, 2020 at 12:50 PM Martin Grigorov > > > > > > > > > >> When I load test HTTP

Re: HTTP2: memory filled up fast on increasing the connections to 1000/2000 (Embedded tomcat 9.0.38)

2020-09-30 Thread Martin Grigorov
On Wed, Sep 30, 2020 at 12:50 PM Martin Grigorov wrote: > Hi, > > On Wed, Sep 30, 2020 at 11:35 AM Mark Thomas wrote: > >> On 30/09/2020 06:42, Arshiya Shariff wrote: >> > Hi Martin , >> > >> > Thank you for the response. >> > >> >

Re: HTTP2: POST request with a small body leads to GOAWAY + ErrCode=ENHANCE_YOUR_CALM

2020-09-30 Thread Martin Grigorov
On Wed, Sep 30, 2020 at 1:15 PM Martin Grigorov wrote: > > > On Wed, Sep 30, 2020 at 1:01 PM Martin Grigorov > wrote: > >> Hi, >> >> I've tried to test the scenario of Arshiya Shariff: >> "With a payload of 200 bytes we were able to send 20K reques

Re: HTTP2: POST request with a small body leads to GOAWAY + ErrCode=ENHANCE_YOUR_CALM

2020-09-30 Thread Martin Grigorov
On Wed, Sep 30, 2020 at 1:01 PM Martin Grigorov wrote: > Hi, > > I've tried to test the scenario of Arshiya Shariff: > "With a payload of 200 bytes we were able to send 20K requests/sec with > 200 users from Jmeter without any memory issue . On increasing the payload >

HTTP2: POST request with a small body leads to GOAWAY + ErrCode=ENHANCE_YOUR_CALM

2020-09-30 Thread Martin Grigorov
Hi, I've tried to test the scenario of Arshiya Shariff: "With a payload of 200 bytes we were able to send 20K requests/sec with 200 users from Jmeter without any memory issue . On increasing the payload to 5Kb and the number of users to 1000 in Jmeter and sending 1000 requests per second , the

Re: HTTP2: memory filled up fast on increasing the connections to 1000/2000 (Embedded tomcat 9.0.38)

2020-09-30 Thread Martin Grigorov
GOAWAY+ENHANCE_YOUR_CALM for very low load. Martin > > Mark > > > > > > Thanks and Regards > > Arshiya Shariff > > > > -Original Message- > > From: Martin Grigorov > > Sent: Monday, September 28, 2020 11:44 PM > > To: Tomcat User

Re: ApacheCon @ Home Tomcat Track Schedule

2020-09-29 Thread Martin Grigorov
Hi, A friendly reminder: the conference already started and the Tomcat sessions will start in less than 6 hours from now! On Fri, Aug 14, 2020 at 6:49 PM Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > All, > > I'm happy to

Re: HTTP2: memory filled up fast on increasing the connections to 1000/2000 (Embedded tomcat 9.0.38)

2020-09-28 Thread Martin Grigorov
Hi Arshiya, On Mon, Sep 28, 2020 at 7:59 PM Arshiya Shariff wrote: > Hi All, > With 200 threads(users) , ramp up duration of 2 seconds , loop count 80 > and by sending 1000 http2 requests/sec from JMeter Client to an embedded > tomcat application we did not observe any memory issue , but on

Re: ByteBuffer pooling

2020-09-28 Thread Martin Grigorov
On Mon, Sep 28, 2020 at 6:11 PM Rémy Maucherat wrote: > On Mon, Sep 28, 2020 at 4:34 PM Martin Grigorov > wrote: > > > Hi, > > > > I've profiled the memory allocation during load testing HTTP2: > > https://pasteboard.co/Jtblqfl.png > > > > As you c

ByteBuffer pooling

2020-09-28 Thread Martin Grigorov
Hi, I've profiled the memory allocation during load testing HTTP2: https://pasteboard.co/Jtblqfl.png As you can see there are a lot of ByteBuffer.allocate(int) calls. org.apache.catalina.connector.Response#Response(int) org.apache.catalina.connector.Request#inputBuffer

Re: HTTP2: Tomcat sends GOAWAY when trying to respond over a stream where the client has already sent RST_STREAM:NO ERROR

2020-09-25 Thread Martin Grigorov
ection . > I guess some other error happened and that led to the GOAWAY. But I cannot be sure. Any errors in the logs ? > > Thanks and Regards > Arshiya Shariff > > -----Original Message- > From: Martin Grigorov > Sent: Tuesday, September 22, 2020 7:31 PM > To: Tom

Re: Tomcat's support for path parameters can expose resources despite reverse proxy access restrictions

2020-09-24 Thread Martin Grigorov
On Thu, Sep 24, 2020 at 2:11 PM Martin Grigorov wrote: > Hi, > > On Thu, Sep 24, 2020 at 1:02 PM Nils Breunese wrote: > >> Hello, >> >> I recently learned that when a server that supports path parameters [0] — >> like Tomcat (I found Jetty also does) — is run

Re: Tomcat's support for path parameters can expose resources despite reverse proxy access restrictions

2020-09-24 Thread Martin Grigorov
Hi, On Thu, Sep 24, 2020 at 1:02 PM Nils Breunese wrote: > Hello, > > I recently learned that when a server that supports path parameters [0] — > like Tomcat (I found Jetty also does) — is run behind a reverse proxy that > does path-based access control checks and does not support path

Re: Issue in unpacking files

2020-09-23 Thread Martin Grigorov
received. > > Please treat the file name deployed as ems.war and not ems.wzr. > > Thanks > > Mohan > > > -Original Message- > From: Martin Grigorov > Sent: Wednesday, September 23, 2020 6:00 PM > To: Tomcat Users List > Subject: Re: Issue in unpacki

Re: Issue in unpacking files

2020-09-23 Thread Martin Grigorov
Hi, On Wed, Sep 23, 2020 at 3:03 PM Mohan T wrote: > Dear All, > > > > We have two environments where in one the .war file is getting extracted > and on the other it is not. See the below for your reference. The file > being deployed is ems.wzr > > > > We are using apache-tomcat-8.5.35. Any

Re: Low throughput with HTTP2

2020-09-23 Thread Martin Grigorov
Hi, I've debugged further with Wireshark: 1) Golang: https://pasteboard.co/Jsnvx1z.png (SETTINGS, HEADERS+DATA) 2) Nodejs: https://pasteboard.co/JsnwRNV.png (SETTINGS, HEADERS+PARTIAL DATA, DATA) 3) Rust: https://pasteboard.co/JsnxvKGU.png (SETTINGS, HEADERS+PARTIAL DATA+DATA) 4) Netty:

Re: HTTP2: Tomcat sends GOAWAY when trying to respond over a stream where the client has already sent RST_STREAM:NO ERROR

2020-09-22 Thread Martin Grigorov
-6.8). The server should close the connection only if some serious problem has happened, e.g. an IOException. Tell us more about your use case. What do you want to do when 1.5secs pass ? What do you expect to happen ? > > Thanks and Regards > Arshiya Sharif > > -Original Me

Re: Low throughput with HTTP2

2020-09-22 Thread Martin Grigorov
On Mon, Sep 21, 2020 at 4:46 PM Rémy Maucherat wrote: > On Mon, Sep 21, 2020 at 2:49 PM Martin Grigorov > wrote: > > > Hi Remy, > > > > On Mon, Sep 21, 2020 at 2:56 PM Rémy Maucherat wrote: > > > > > > > > > > > > 2020-09-

Re: HTTP2: Tomcat sends GOAWAY when trying to respond over a stream where the client has already sent RST_STREAM:NO ERROR

2020-09-21 Thread Martin Grigorov
Hi, On Mon, Sep 21, 2020 at 7:56 PM Arshiya Shariff wrote: > Hi All, > > The client has configured a response timeout of 1.5 seconds. In a case > when our application tries to respond over a http2 stream asynchronously > after 2 seconds where the client has already sent RST_STREAM with NO ERROR

Re: Low throughput with HTTP2

2020-09-21 Thread Martin Grigorov
On Mon, Sep 21, 2020 at 9:31 PM Martin Grigorov wrote: > > > On Mon, Sep 21, 2020 at 5:52 PM Mark Thomas wrote: > >> On 21/09/2020 13:48, Martin Grigorov wrote: >> > Hi Remy, >> > >> > On Mon, Sep 21, 2020 at 2:56 PM Rémy Maucherat wrote: >&g

Re: Low throughput with HTTP2

2020-09-21 Thread Martin Grigorov
On Mon, Sep 21, 2020 at 5:52 PM Mark Thomas wrote: > On 21/09/2020 13:48, Martin Grigorov wrote: > > Hi Remy, > > > > On Mon, Sep 21, 2020 at 2:56 PM Rémy Maucherat wrote: > > > > > > > > > >>> 2020-09-21 14:25:04.850 DEBUG 232086

Re: Low throughput with HTTP2

2020-09-21 Thread Martin Grigorov
On Mon, Sep 21, 2020 at 3:48 PM Martin Grigorov wrote: > Hi Remy, > > On Mon, Sep 21, 2020 at 2:56 PM Rémy Maucherat wrote: > > > > >> > 2020-09-21 14:25:04.850 DEBUG 232086 --- [https-jsse-nio-18080-exec-8] >> > o.a.coyote.http11.Http11NioProtocol :

Re: Low throughput with HTTP2

2020-09-21 Thread Martin Grigorov
Hi Remy, On Mon, Sep 21, 2020 at 2:56 PM Rémy Maucherat wrote: > > 2020-09-21 14:25:04.850 DEBUG 232086 --- [https-jsse-nio-18080-exec-8] > > o.a.coyote.http11.Http11NioProtocol : Found processor [null] for > > socket [org.apache.tomcat.util.net.SecureNioChannel@2b435926 > >

Re: Low throughput with HTTP2

2020-09-21 Thread Martin Grigorov
On Mon, Sep 21, 2020 at 12:08 PM Martin Grigorov wrote: > > > On Mon, Sep 21, 2020 at 11:23 AM Mark Thomas wrote: > >> On 21/09/2020 08:18, Martin Grigorov wrote: >> > On Fri, Sep 18, 2020 at 6:16 PM Mark Thomas wrote: >> > >> >

Re: Low throughput with HTTP2

2020-09-21 Thread Martin Grigorov
On Mon, Sep 21, 2020 at 12:08 PM Martin Grigorov wrote: > > > On Mon, Sep 21, 2020 at 11:23 AM Mark Thomas wrote: > >> On 21/09/2020 08:18, Martin Grigorov wrote: >> > On Fri, Sep 18, 2020 at 6:16 PM Mark Thomas wrote: >> > >> >

Re: Low throughput with HTTP2

2020-09-21 Thread Martin Grigorov
On Mon, Sep 21, 2020 at 11:23 AM Mark Thomas wrote: > On 21/09/2020 08:18, Martin Grigorov wrote: > > On Fri, Sep 18, 2020 at 6:16 PM Mark Thomas wrote: > > > >> On 18/09/2020 14:07, Martin Grigorov wrote: > >> > >> > >> > >>&g

Re: Low throughput with HTTP2

2020-09-21 Thread Martin Grigorov
On Fri, Sep 18, 2020 at 6:16 PM Mark Thomas wrote: > On 18/09/2020 14:07, Martin Grigorov wrote: > > > > > What is the difference > > between org.apache.coyote.http2.StreamStateMachine.State#CLOSED_RX > > and org.apache.coyote.http2.StreamStateMachine

Re: Low throughput with HTTP2

2020-09-18 Thread Martin Grigorov
On Fri, Sep 18, 2020 at 10:48 AM Martin Grigorov wrote: > Hi, > > On Wed, Sep 16, 2020 at 10:24 AM Martin Grigorov > wrote: > >> Hi Remy, >> >> On Tue, Sep 15, 2020 at 6:16 PM Rémy Maucherat wrote: >> >>> On Tue, Sep 15, 2020 at 5:08

Re: Low throughput with HTTP2

2020-09-18 Thread Martin Grigorov
Hi, On Wed, Sep 16, 2020 at 10:24 AM Martin Grigorov wrote: > Hi Remy, > > On Tue, Sep 15, 2020 at 6:16 PM Rémy Maucherat wrote: > >> On Tue, Sep 15, 2020 at 5:08 PM Martin Grigorov >> wrote: >> >> > Hi Mark, >> > >> > On Tue, Sep 15,

Re: tomcat warnings. [EXTERNAL]

2020-09-17 Thread Martin Grigorov
On Thu, Sep 17, 2020, 16:07 Beard, Shawn wrote: > Yes its 9.0.31.0 > The last 0 makes me think that you have installed Tomcat by using your OS package manager. Try with stock Tomcat downloaded from Apache servers. > [mwuser@usilg01-tcd003 ~]$ ./version.sh > Using CATALINA_BASE:

Re: Low throughput with HTTP2

2020-09-16 Thread Martin Grigorov
Hi Remy, On Tue, Sep 15, 2020 at 6:16 PM Rémy Maucherat wrote: > On Tue, Sep 15, 2020 at 5:08 PM Martin Grigorov > wrote: > > > Hi Mark, > > > > On Tue, Sep 15, 2020 at 3:34 PM Mark Thomas wrote: > > > > > On 15/09/2020 12:46, Martin Grigorov wrot

Re: Low throughput with HTTP2

2020-09-15 Thread Martin Grigorov
Hi Chris, On Tue, Sep 15, 2020 at 5:09 PM Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Martin, > > On 9/15/20 07:37, Martin Grigorov wrote: > > I am running some load tests on Tomcat and I'

Re: Low throughput with HTTP2

2020-09-15 Thread Martin Grigorov
Hi Mark, On Tue, Sep 15, 2020 at 3:34 PM Mark Thomas wrote: > On 15/09/2020 12:46, Martin Grigorov wrote: > > On Tue, Sep 15, 2020 at 2:37 PM Martin Grigorov > > wrote: > > > >> Hi, > >> > >> I am running some load tests on Tomcat an

Re: Low throughput with HTTP2

2020-09-15 Thread Martin Grigorov
On Tue, Sep 15, 2020 at 2:37 PM Martin Grigorov wrote: > Hi, > > I am running some load tests on Tomcat and I've noticed that when HTTP2 is > enabled the throughput drops considerably. > > Here are the steps to reproduce: > > 1) Enable HTTP2, e.g. by commenting out t

Low throughput with HTTP2

2020-09-15 Thread Martin Grigorov
Hi, I am running some load tests on Tomcat and I've noticed that when HTTP2 is enabled the throughput drops considerably. Here are the steps to reproduce: 1) Enable HTTP2, e.g. by commenting out this connector:

Re: Tomcat v9 - Insecure transport vulnerability reported by Qualys

2020-09-15 Thread Martin Grigorov
hi, On Tue, Sep 15, 2020 at 8:20 AM Pratik Shrestha wrote: > Hi Guys, > > Just wanted to know if anyone found an idea on fixing it or a workaround. > Did you find what is the expected behavior by Qualis ? > > Thanks > > Pratik. > > On Fri, Aug 28, 2020 at 10:46 AM Pratik Shrestha > wrote: >

Re: Tomcat Processing Timer Question

2020-09-11 Thread Martin Grigorov
Hi, On Sat, Sep 12, 2020, 02:57 Eric Robinson wrote: > I'm not sure what you mean by measuring at the load balancer level. We're > using the jasper logs and those only exist on the tomcat server itself. I > must be misunderstanding your meaning. > He meant to use the LB's logs for the same.

Re: How to Set Content Security Policy headers in Tomcat 8.5.x

2020-09-10 Thread Martin Grigorov
Hi, On Wed, Sep 9, 2020 at 8:54 PM Nitin Kadam wrote: > Hi All, > > Need to set the *Content security policy* header for Tomcat Web server > (8.5..x) which hosted on Windows server 2012, As per the internal security > team same is not a complaint > can you please help me setting CSP filters for

Re: HTTP2: Connections abruptly closed by sending GOAWAY

2020-09-09 Thread Martin Grigorov
Hi, On Wed, Sep 9, 2020 at 3:31 PM Arshiya Shariff wrote: > Thank you for the response Mark . > > > > Hi All, > > > > Can you please help us understand this behavior . > > The following is the sequence of events that is happening for a few > streams . > > Initially when the stream is opened ,

Re: Release date of latest Tomcat version - 9.0.38

2020-09-02 Thread Martin Grigorov
Hi, On Wed, Sep 2, 2020, 17:46 Arshiya Shariff wrote: > Hi , > Thank you for your response . > Is there a way I can track when the version is released for Voting (or) > will I get notified in the Users list ? > You need to subscribe to the dev@ mailing list. > Thanks and Regards > Arshiya

Re: Tomcat 9 : Unable to specify wildcard care name in Host

2020-08-26 Thread Martin Grigorov
On Tue, Aug 25, 2020 at 3:01 PM Tom Chiverton wrote: > I'd like to propose some changes to the docs, but can not locate their > source to submit a request. > https://github.com/apache/tomcat/blob/master/webapps/docs/config/host.xml This is for Tomcat 10.x (master branch). > > For instance, in

Re: Tomcat v9 - Insecure transport vulnerability reported by Qualys

2020-08-26 Thread Martin Grigorov
Hi, On Wed, Aug 26, 2020 at 7:53 AM Pratik Shrestha wrote: > Thanks for reply, > > Hi Peter - it complains on port 8443 which belongs to Tomcat. > > Hi Mark - Yes. making HTTP request on HTTPS is wrong. But this security > vulnerability is given to us by Qualys scan. It tries to post plain HTTP

Re: Date of EOL and EOS for Tomcat8.5

2020-08-06 Thread Martin Grigorov
Hi, On Wed, Aug 5, 2020 at 5:59 PM Rajat Gupta wrote: > Hi, > > Please let us know the date of End Of Service and End Of Life for Tomcat > *8.5* > It is not known yet. At the moment there is a date set only for 7.0.x: https://tomcat.apache.org/tomcat-70-eol.html Newer versions will live

Re: Best practices for profiling

2020-08-04 Thread Martin Grigorov
Hi, On Sun, Aug 2, 2020 at 1:09 AM calder wrote: > On Sat, Aug 1, 2020, 15:16 Aryeh Friedman > wrote: > > > On Sat, Aug 1, 2020 at 3:28 PM calder wrote: > > > > > On Sat, Aug 1, 2020 at 12:53 PM Aryeh Friedman < > aryeh.fried...@gmail.com > > > > > > wrote: > > > > > > > > What are the best

Re: Error in stopping application tomcat !!

2020-07-23 Thread Martin Grigorov
ll have to consult with the changelogs for all the versions in between. > On Thu, Jul 23, 2020 at 6:00 PM Martin Grigorov > wrote: > > > On Thu, Jul 23, 2020 at 3:10 PM Kushagra Bindal < > bindal.kusha...@gmail.com > > > > > wrote: > > > > > Hi Martin, > > &g

Re: Error in stopping application tomcat !!

2020-07-23 Thread Martin Grigorov
text or the beans with type org.springframework.amqp.rabbit.listener.SimpleMessageListenerContainer are not notified to stop for some other reason. > > On Thu, Jul 23, 2020 at 3:22 PM Martin Grigorov > wrote: > >> Hi, >> >> On Thu, Jul 23, 2020 at 6:35 AM Kushagra Bindal &l

Re: Error in stopping application tomcat !!

2020-07-23 Thread Martin Grigorov
let me know if anything specific is further needed from my end which > I can provide to have a better clarity. > > I have shared the server.xml and command which we are using in stopping the > tomcat. > > > On Thu, Jul 23, 2020 at 2:49 AM Martin Grigorov > wrote: &

Re: Error in stopping application tomcat !!

2020-07-22 Thread Martin Grigorov
On Wed, Jul 22, 2020, 15:55 Kushagra Bindal wrote: > Hi Christopher, > > Did you get a chance to look into this? > > Please help us in resolving this issue. > > On Sat, Jul 18, 2020 at 11:26 AM Kushagra Bindal < > bindal.kusha...@gmail.com> > wrote: > > > Hi Chris, > > > > Additionally when

Re: Memory leak in the PKCS11 how to fix the problem

2020-07-22 Thread Martin Grigorov
> Hello Martin, > > Thanks for your reply > > > https://www.dropbox.com/sh/o6zra7pf2o1xpge/AAA1J7BaVdPDF7s3RjPmy0xBa?dl=0 > > Here is the link I have shared the flame graph. > Also kindly check my answers in red as well. > > Thanks &am

Re: Memory leak in the PKCS11 how to fix the problem

2020-07-22 Thread Martin Grigorov
Hi Ragavendhiran, On Sat, Jul 18, 2020 at 3:55 PM Ragavendhiran Bhiman (rabhiman) wrote: > Hello All, > > > > I am seeing the memory leaks from tomcat apache in the following SSL path > using PKCS11. Attached the flame graph of memory possible memory leaks in > this area. > > Please check the

Re: Rewrite Valve Problem

2020-07-22 Thread Martin Grigorov
Hi Jerry, On Tue, Jul 21, 2020 at 2:39 AM Jerry Malcolm wrote: > > On 7/20/2020 5:00 PM, Mark Thomas wrote: > > On 20/07/2020 22:43, Jerry Malcolm wrote: > > > > > > > >>> Do you have a ROOT web application deployed? If not, this could be > >>>

Re: Tomcat relicts from previous installation - ubuntu

2020-07-09 Thread Martin Grigorov
On Thu, Jul 9, 2020, 19:13 Christoph Kukulies wrote: > Is it an Ubuntu peculiarity that a tomcat.service gets installed? I > assume, I’m getting this automatically when doing an > apt-get install tomcat8, right? > Yes. All distros do that. You can download the tar.gz file from

Re: Tomcat relicts from previous installation - ubuntu

2020-07-09 Thread Martin Grigorov
Hi Christoph, On Thu, Jul 9, 2020 at 12:48 PM Christoph Kukulies wrote: > I’m resurrecting tomcat on a server (Ubuntu 18.04.4) on which I had been > running tomcat7 some time ago. > At the moment, when the system has started up, I’m seeing a process: > > root@kuku:~# ps ax | grep -i tomcat >

Re: [ANN] New committer: Raymond Augé

2020-07-02 Thread Martin Grigorov
Welcome Raymond! On Thu, Jul 2, 2020, 17:40 Mark Thomas wrote: > On behalf of the Tomcat committers I am pleased to announce that > Raymond Augé (rotty3000) has been voted in as a new Tomcat committer. > > Please join me in welcoming him. > > Kind regards, > > Mark > >

Re: Junk characters in SOAP request after upgrade to tomcat 9.0.31

2020-06-12 Thread Martin Grigorov
Hi, On Fri, Jun 12, 2020 at 8:17 AM Naveen Kumar wrote: > Hi All, > > Can someone please help on this ? It is in production and affecting many > customers. Upgrading tomcat is a big task. > Any pointers will be really appreciated. > You say "If I upgrade tomcat to 9.0.35, the error

Re: Should Tomcat 10 enable response compression by default?

2020-06-10 Thread Martin Grigorov
On Tue, Jun 9, 2020 at 11:26 PM Manuel Dominguez Sarmiento wrote: > I would not change this default. GZIP (or other kinds) of response > compression are better addressed as servlet filters. Having the Tomcat > feature is good, but IMHO it should only be enabled by those who need it. > > At least

Re: Vulnerability flagged in Nessus Scan

2020-06-03 Thread Martin Grigorov
ll cover only error code 500 (for Exceptions, but not for java.lang.Error) and won't cover NotFound (404) and the others. I guess Nessus won't be totally happy with your approach. > > Regards with Thanks, > > Fang > > On Wed, 3 Jun 2020, 15:56 Martin Grigorov, wrote: > > &

Re: Vulnerability flagged in Nessus Scan

2020-06-03 Thread Martin Grigorov
Hi, On Wed, Jun 3, 2020 at 5:53 AM FANG YAP wrote: > Resend > > On Wed, 3 Jun 2020, 10:10 FANG YAP, wrote: > > > Hi Tomcat, > > > > Nessus scanned and found issue in Apache Tomcat Port 8080 > > > > Port: 8080 > > Plugin Text: > > The server is not configured to return a custom page in the

Re: Query Related to org.apache.catalina.security.SecurityListener

2020-05-19 Thread Martin Grigorov
hub.com/apache/tomcat/blob/master/java/org/apache/catalina/security/SecurityListener.java It is used only at start time. If Tomcat starts fine then all is good! If it throws an Error then you will need to fix the issue. > > > Regards > Kushagra > > On Tue, May 19, 2020, 11:5

Re: Tomcat 8.5 appends null characters

2020-05-19 Thread Martin Grigorov
Hi, On Tue, May 19, 2020 at 3:32 PM Tuukka Ilomäki wrote: > Dear collective wisdom, > as the EOL of Tomcat 7 is looming, we are migrating our legacy app from > Tomcat 7.0 to Tomcat 8.5. We deploy exactly the same war in both versions. > For some reason Tomcat 8.5 adds null characters to the end

Re: Query Related to org.apache.catalina.security.SecurityListener

2020-05-19 Thread Martin Grigorov
Hi, On Mon, May 18, 2020 at 7:38 PM Kushagra Bindal wrote: > Hi, > > We are planning to upgrade from apache tomcat from 8.5.24 to 8.5.53 > version. During this process I found that in catalina.sh file below line > which was commented in 8.5.24 version > > # Uncomment the following line to make

Re: RST on TCP level sent by Tomcat

2020-05-18 Thread Martin Grigorov
Hi Arshiya, On Mon, May 18, 2020 at 2:15 PM Arshiya Shariff wrote: > Hi Mark, > Thank you for the quick response. > > Please provide us a little more clarity on the 3rd query : > > 3. We see that RST is sent by tomcat on receiving http2 request, when > does this happen ? > >>> When things go

Re: Getting 404 error while accessing URL after deployment

2020-05-04 Thread Martin Grigorov
Hi, On Mon, May 4, 2020 at 5:02 PM Megha Agrawal wrote: > Hi > > I am trying to deploy my project on the tomcat server and access the URL > using browser. Project is deploying successfully on the server but unable > to access URL related to that project. Also, logs are not generating for > the

Re: Issue with AJP listener

2020-04-30 Thread Martin Grigorov
Hi, On Thu, Apr 30, 2020 at 11:15 AM Mark Thomas wrote: > On 29/04/2020 18:11, Christopher Schultz wrote: > > Mark, > > > > On 4/28/20 13:33, Mark Thomas wrote: > >> On 28/04/2020 16:30, Satya Kishore Thumu wrote: > >>> Hi Chris, Post the Ghostcat changes tomcat now listens only on > >>> ipv4

Re: suspected memory leak in io.netty.buffer.PoolChunk

2020-04-30 Thread Martin Grigorov
Hi, On Thu, Apr 30, 2020 at 10:04 AM Ragavendhiran Bhiman (rabhiman) wrote: > Hi All, > > When I analysed the heap dump the primary suspect shows that 54.21% > occupied by the from io.netty.buffer.PoolChunk memory leak. > io.netty.* is from Netty project (https://netty.io/index.html) It seems

Re: Issue with AJP listener

2020-04-28 Thread Martin Grigorov
on "localhost" (IPv4) only. You can use 0.0.0.0 to bind on all again but this is highly NOT recommended! https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.100 > Thank you, > Kishore > > > On Tue, Apr 28, 2020 at 4:12 PM Martin Grigorov > wrote:

Re: Issue with AJP listener

2020-04-28 Thread Martin Grigorov
Hi, On Tue, Apr 28, 2020 at 1:06 PM Satya Kishore Thumu wrote: > Hi, > We are using apache before Tomcat as front end and using modjk for > connection between apache and Tomcat. After upgrading tomcat(to 7.0.100 as > we have other dependencies we can't use latest as of now), i'm unable to > use

Re: Losing session between calls from mobile phone

2020-04-28 Thread Martin Grigorov
On Mon, Apr 27, 2020 at 10:54 PM Martin Grigorov > wrote: > > > Hi, > > > > On Tue, Apr 28, 2020 at 2:23 AM AJ Chen wrote: > > > > > My web application using tomcat 6 can track user session (cookie by > > > default) for mobile and PC users in dev e

Re: Apache tomcat 9.0.6 Compatibility with Adopt openJDK

2020-04-27 Thread Martin Grigorov
Hi, On Tue, Apr 28, 2020 at 5:12 AM Reddy, Tippana Krishnanandan < tire...@deloitte.com> wrote: > Hi everyone, > > We are using Tomcat 9.0.6 . I want to know if we have any document which > shows the compatibility of Tomcat with Adopt openJDK. > Any JDK 1.8+ should be OK. But as any other

Re: Losing session between calls from mobile phone

2020-04-27 Thread Martin Grigorov
Hi, On Tue, Apr 28, 2020 at 2:23 AM AJ Chen wrote: > My web application using tomcat 6 can track user session (cookie by > default) for mobile and PC users in dev environment. But when deployed on > cloud server, it fails to track session for some mobile users. meaning, > servlet always creates

Re: Is ARM64 architecture officially supported ?

2020-04-20 Thread Martin Grigorov
Hi Michael, On Sun, Apr 19, 2020 at 9:08 PM Michael Osipov wrote: > Am 2020-04-19 um 19:51 schrieb Martin Grigorov: > > Hi Emilio, > > > > On Fri, Apr 17, 2020 at 2:14 PM Emilio Fernandes < > > emilio.fernande...@gmail.com> wrote: > > > >> Hola T

Re: Is ARM64 architecture officially supported ?

2020-04-19 Thread Martin Grigorov
Hi Emilio, On Fri, Apr 17, 2020 at 2:14 PM Emilio Fernandes < emilio.fernande...@gmail.com> wrote: > Hola Tomcat community! > > We consider using AWS Graviton [1] based instances which use ARM64 > processors for our backend services. > I've googled around and found [2] saying that Tomcat is

Re: javax.servlet.ServletContainerInitializer defined in jar not loading on Tomcat 8.5.51 and above

2020-04-07 Thread Martin Grigorov
Hi, On Tue, Apr 7, 2020 at 9:01 AM Jackson Ong <83cl...@gmail.com> wrote: > We have an webapp running fine on Tomcat 8.5.50 and below and we used a > custom WebappClassLoader to load jars (common path for jars), but it failed > to load on Tomcat 8.5.51 and above. Upon checking, we noticed that >

Re: Configure Tomcat for specific Urls on specific Port

2020-04-06 Thread Martin Grigorov
Hi, On Mon, Apr 6, 2020 at 9:32 AM Vijay Roy wrote: > Hi Team , > > We are using tomcat in one of our projects and we have tomcat ports 8080 > and 8081 opened by the following configurations. > >server="" >connectionTimeout="2" >

Re: Tomcat 9.31 PUT/POST Request receiving Partial Data

2020-03-31 Thread Martin Grigorov
Hi, On Tue, Mar 31, 2020 at 8:17 PM wrote: > -Original Message- > > From: Bhavesh Mistry > > Sent: Wednesday, February 26, 2020 7:51 PM > > To: Tomcat Users List > > Subject: Re: Tomcat 9.31 PUT/POST Request receiving Partial Data > > > The response get truncated after 16321 bytes.

Re: Support with error in launcher.log

2020-03-30 Thread Martin Grigorov
Hi, On Mon, Mar 30, 2020 at 1:02 PM Luigi Tagliafierro wrote: > Hi everybody, > > we are experiencing an error : The bitbucket log > (/var/atlassian/bitbucket_home/log/launcher.log) constantly repeats this > error: > > "java.lang.IllegalArgumentException: An invalid domain [.code.doxee.com] >

Re: invoke jmxproxy servlet using argument with a , is not a possible

2020-03-24 Thread Martin Grigorov
Hi, On Mon, Mar 23, 2020 at 7:08 PM Arnaud Yahoo wrote: > Hello > > I am trying to invoke a mbean through jmxproxy servlet. Arguments are > separated with , so when one argument itself is containing a coma, it > breaks the invocation. > > It seems there is no way to escape ,. > > For example

Re: Tomcat Wiki Source Code Download

2020-03-24 Thread Martin Grigorov
Hi, On Tue, Mar 24, 2020 at 9:12 AM Brian Burch wrote: > I'm quite baffled! > > http://tomcat.apache.org/source.html gives me the url:- > > http://svn.apache.org/repos/asf/tomcat/site > > I made a clean "svn checkout" and referred to the README.txt about the > source files being xml formatted.

Re: Version Question

2020-03-20 Thread Martin Grigorov
Hi, On Sat, Mar 21, 2020, 00:37 wrote: > Good afternoon Mark and group. > > There is a question as to WHAT are the correct versions released. Are > these 7.0.103, 8.5.53, and 9.0.33 as shown on tomcat.apache.org, OR is it > 7.0.104, 8.5.54 and 9.0.34 as shown on ci.apache.org? > The first. CI

Re: Security audit raises questions (Tomcat 7.0.93)

2020-03-17 Thread Martin Grigorov
On Wed, Mar 18, 2020 at 12:31 AM James H. H. Lampert < jam...@touchtonecorp.com> wrote: > > On 3/17/20 3:18 PM, Martynas Jusevičius wrote: > > why should DELETE or OPTIONS not be enabled? They are standard HTTP > methods. > > True, but (quoting the audit report) > > . . . [DELETE] may allow a

Re: Tomcat and IPv6

2020-03-17 Thread Martin Grigorov
Hi, On Tue, Mar 17, 2020 at 9:22 PM wrote: > We have a team having issues with Tomcat, AJP, and switching to IPv6. They > are currently running version 9.0.31. Below are the errors being received: > > [Tue Mar 17 10:50:38 2020] [1412:139846332929792] [error] > ajp_service::jk_ajp_common.c

  1   2   >