Re: Tomcat 7 cannot get ciphers with SHA256 or SHA384

2014-05-26 Thread Tim Whittington
On 26/05/2014, at 6:58 pm, Sverre Moe sverre@gmail.com wrote: Documentation aside, none of these cipher-suites are supported in Oracle Java 7. The AES_CBC ciphers I had there are supported in Java 7. I have already concluded as much regarding the AES_x_GCM. Using Java 8 one have

Re: Tomcat 7 cannot get ciphers with SHA256 or SHA384

2014-05-26 Thread Tim Whittington
On 27/05/2014, at 6:09 am, Christopher Schultz ch...@christopherschultz.net wrote: snip If you run the code I referenced elsewhere in this thread, you'll see that some of the components are available, just not in the combinations you have above: $ java -showversion -classpath build/

Re: Tomcat 7 cannot get ciphers with SHA256 or SHA384

2014-05-25 Thread Tim Whittington
On 21/05/2014, at 10:21 pm, Sverre Moe sverre@gmail.com wrote: snip ciphers=TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA265,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA256 / Documentation aside, none of these cipher-suites are

Re: Tomcat does not accept connections from Safari on iPad vs an SSL connector with JSSE ciphers

2013-03-03 Thread Tim Whittington
On Tue, Feb 19, 2013 at 10:59 AM, Giuseppe Sacco giuse...@eppesuigoccas.homedns.org wrote: [...] I listed all providers here: http://centrum.lixper.it/~giuseppe/ipad-tomcat-list-ciphers-no-bouncycastle.html as you may see, a few of them are TLS_RSA and TLS_DHE: *

Re: Restricting ciphers

2013-01-13 Thread Tim Whittington
As can be seen from your usage of keystoreType attribute, you are using Java implementation of the Connector, not openssl/APR one. You should look into Java documentation for their cipher names. See this thread from October 2009: http://markmail.org/message/zn4namfhypyxum23 Ahh, that was it!

Re: Canceling Download on IIS7 with ISAPI Redirector 1.2.31 causes 100% CPU usage

2011-05-21 Thread Tim Whittington
It looks like this is a regression in 1.2.31 - the socket shutdown code that drained the response message from the AJP socket before closing it was mis-counting the bytes read, causing a CPU busy loop until it hit a 30 second cap on lingering byte reads. I've committed a fix for 1.2.32 and also

Re: Canceling Download on IIS7 with ISAPI Redirector 1.2.31 causes 100% CPU usage

2011-05-15 Thread Tim Whittington
This sounds like https://issues.apache.org/bugzilla/show_bug.cgi?id=50839 If you can capture a TRACE level log form the Tomcat Connector (configure in isapi_redirect.properties) and attach it to the bug, I'll take a look. cheers tim On Sun, May 15, 2011 at 1:20 AM, eurotrans-Verlag

Re: Windows Authentication: Issue 49318 vs 47679

2011-04-11 Thread Tim Whittington
On Mon, Mar 28, 2011 at 7:26 AM, Stefan Mayr ste...@mayr-stefan.de wrote: Hello everybody, as many others before we wanted to do single-sign-on for intranet web applications using integrated windows authentication (negotiate because IE sometimes tries NTLM instead of using plain kerberos -

Re: Which data structure (whether FIFO queue or Input stream) is used by Tomcat server

2011-04-11 Thread Tim Whittington
Start at org.apache.tomcat.util.net.AbstractEndpoint.createExecutor() and follow your nose from there. If you make any progress and want to discuss implementation details, then the dev list is the best place to discuss those. cheers tim On Mon, Apr 11, 2011 at 11:34 PM, Pid p...@pidster.com

Re: Tomcat Jakarta 1.2.31 ISAPI Reconnector incorrectly sending Content body with HTTP 304 Status

2010-11-29 Thread Tim Whittington
This is the first time I ask a question here, so I hope I do it right. I am using Tomcat 7.0.5 (with Tomcat Native 1.1.20 library) on Windows Server 2003 (32-Bit) with Java 1.6.0_22, and I have configured IIS6.0 to use the Jakarta 1.2.31 ISAPI Redirector (with enable_chunked_encoding set to

Re: Tomcat Jakarta 1.2.31 ISAPI Reconnector incorrectly sending Content body with HTTP 304 Status

2010-11-29 Thread Tim Whittington
=50363 cheers tim On Mon, Nov 29, 2010 at 11:10 PM, Tim Whittington t...@apache.org wrote: This is the first time I ask a question here, so I hope I do it right. I am using Tomcat 7.0.5 (with Tomcat Native 1.1.20 library) on Windows Server 2003 (32-Bit) with Java 1.6.0_22, and I have

Re: [ANN] New Tomcat committer: Christopher Schultz (schultz)

2010-11-23 Thread Tim Whittington
Welcome aboard. tim On Tue, Nov 23, 2010 at 8:16 AM, Mark Thomas ma...@apache.org wrote: On behalf of the Tomcat committers I am pleased to announce that Christopher Schultz (schultz) has been voted in as a new Tomcat committer. Please join me in welcoming him. Mark

Re: Does mod_jk support chunked encoding?

2008-07-15 Thread Tim Whittington
mod_jk does chunked encoding on all dynamic responses (e.g. From Tomcat) that donĀ¹t already have some form of response end set (e.g. A Content-Length header). To be accurate I think this is more a function of Apache than mod_jk. All you should need to do is connect Tomcat to Apache using mod_jk

RE: Tomcat ISAPI Redirector for IIS

2008-02-18 Thread Tim Whittington
It looks like you've got more than one thing going on. The debug log refers to a worker named 'ajp13', which is the default name, and not the one you've got configured in your uriworkermap.properties/worker.properties - This usually points to your filter config and the ISAPI extension DLL (the

RE: Content_Length Problem

2008-01-08 Thread Tim Whittington
That log statement indicates you haven't enabled chunked encoding in the connector config (it's off by default). Add enable_chunked_encoding=true to your isapi_redirect.properties (or as a registry setting if you're using that) and restart IIS. tim -Original Message- From: Woytasik Joe

RE: Content_Length Problem

2008-01-05 Thread Tim Whittington
From what I can tell there's nothing (technically) wrong with what Tomcat + ISAPI Redirector is doing here. What's actually happening here is that Tomcat internally only provides a Content-Length header if it can determine the length of the content easily (e.g. it's a static file) or the Servlet

RE: [Announce] Enhanced ISAPI Redirector + Tomcat Connector Binaries (and IIS 6.0)

2008-01-02 Thread Tim Whittington
Haagen - Original Message - From: Tim Whittington [EMAIL PROTECTED] To: users@tomcat.apache.org; [EMAIL PROTECTED] Sent: Thursday, December 20, 2007 5:20 PM Subject: [Announce] Enhanced ISAPI Redirector + Tomcat Connector Binaries Hi all We've been using Tomcat and Tomcat Connectors

RE: [ANN] Apache Tomcat JK 1.2.26 Web Server Connector released

2008-01-02 Thread Tim Whittington
Binary builds of 1.2.26 for various platforms are available now from http://sourceforge.net/projects/timsjk/ These include builds of a patched IIS 5/6 ISAPI Redirector that support HTTP 1.1 chunked encoding (and thus keep-alives on dynamic content). cheers tim -Original Message- From:

[Announce] Enhanced ISAPI Redirector + Tomcat Connector Binaries

2007-12-20 Thread Tim Whittington
Hi all We've been using Tomcat and Tomcat Connectors in our company products for almost 10 years now, and it's a very important part of our technology stack. Over those years we've contributed some enhancements and fixes to the IIS connector/ISAPI Redirector, and most of these have been