Re: Tomcat on Windows : new keystore possibilities

this... David Wooffindin From: Bill Stewart Sent: Monday, April 8, 2024 5:36:47 PM To: Tomcat Users List Subject: Re: Tomcat on Windows : new keystore possibilities On Mon, Apr 8, 2024 at 8:27 AM david w wrote: If you can share a way for this to not be necessary

Re: Tomcat on Windows : new keystore possibilities

If you can share a way for this to not be necessary, I'm all ears... David Wooffindin From: Bill Stewart Sent: Monday, April 8, 2024 4:22:37 PM To: Tomcat Users List Subject: Re: Tomcat on Windows : new keystore possibilities On Mon, Apr 8, 2024 at 3:49 AM

Tomcat on Windows : new keystore possibilities

Hello Referring to the documentation on Apache Tomcat 9 Configuration Reference (9.0.87) - The HTTP Connector keystore types, i wanted to get mentioned that a new set of possibilities is available with newer java

Tomcat in a Windows environment : new keystore possibilities

Referring to the documentation on Apache Tomcat 9 Configuration Reference (9.0.87) - The HTTP Connector keystore types, i wanted to get mentioned that a new set of possibilities is available with newer java builds, when

How to properly enable logging in "org.apache.catalina.core.StandardContext"

In our SpringBoot services, we sometimes run into situations where we get an exception like this: org.springframework.context.ApplicationContextException: Unable to start web server; nested exception is org.springframework.boot.web.server.WebServerException: Unable to start embedded Tomcat It

Should allowHostHeaderMismatch be case sensitive

of false, is supposed to reject requests based on the case of the host name. Thanks David Cleary Progress

Disabling cipher warning

2023-08-29T15:31:57.840-04:00 WARN [main] o.a.t.u.n.j.JSSEUtil - Some of the specified [ciphers] are not supported by the SSL engine and have been skipped: [Dozens of OpenSSL ciphers] We use OpenSSL and moving to Tomcat 10.1.13 has caused an overload of useless information to appear when

Tomcat-embed and Tomcat Vulnerabilities

of vulnerability going to mention tomcat-embed or Tomcat Server only when applicable? Thank you David A Christensen HCL Software -- ::DISCLAIMER:: The contents of this e-mail and any attachment(s) are confidential and intended for the named recipient(s) only. E-mail

Re: Tomcat/Java app timezone radomly changes during operation.

David wrote: > I'll see if I can answer all queries. > > The server doesn't migrate, at least not across timezones. It is a > nutanix virtual though, so migration between hosts locally is possible. > > There is a Java app that allows a user to reset their password. The db >

Re: Tomcat/Java app timezone radomly changes during operation.

by load/db contention. Lower environments that don't show the issue don't have much traffic as they are for dev/uat/etc. Thanks all! David On Fri, Oct 28, 2022, 02:51 Konstantin Kolinko wrote: > чт, 27 окт. 2022 г. в 18:31, David : > > > > Hi all, > > > > I've

Tomcat/Java app timezone radomly changes during operation.

restarting tomcat. During the issue the log timestamp remains in CDT as expected, even though values passed are UTC. I have explicitly defined the timezone in setenv.sh with no change in behavior. Any thoughts as what to investigate are greatly appreciated. Thanks, David

Re: Help with deploying multiple .WAR files in Tomcat

We successfully deploy multiple webapps by simply dropping .war files into the webapps directory all the time. No problems here. Just sharing my perspective. David On Thu, Aug 4, 2022 at 4:10 PM James H. H. Lampert wrote: > Multiple WAR files work fine for us. But we don't simply &q

RE: Testing Tomcat pre-releases

> -Original Message- > From: Christopher Schultz > Sent: Thursday, April 28, 2022 12:16 PM > To: Tomcat Users List > Subject: Re: Testing Tomcat pre-releases > > David, > > (Replying to the Tomcat users@ list) > > On 4/28/22 08:45, David Cleary wr

Re: javax.servlet vs jakarta.servlet?

On 12/29/2021 2:54 PM, Michael B Allen wrote: On Wed, Dec 29, 2021 at 2:07 PM Mark Thomas wrote: One of the advantages of moving to Eclipse is that everyone involved in the spec, not just the spec lead, has an equal say in what goes into the spec. That sounds like design by committee which

RE: CVE-2021-44228 Log4j 2 Vulnerability - Runtime vs compile time Java version

not protect you. I must repeat, there was a website stating that the presence of tomcat alone would open up another attack vector through log4j2. Best regards, David -Original Message- From: Juri Berlanda Sent: Monday, 13 December 2021 16:03 To: users@tomcat.apache.org Subject: Re: CVE-2021

RE: CVE-2021-44228 Log4j 2 Vulnerability - Runtime vs compile time Java version

Hi, as far as I read through the details, it is a runtime option of the JRE. So, it does not need any recompilation. However, some websites pointed out that if you are using Tomcat you could bypass the JRE protection. Best regards, David From: Scott,Tim Sent: Monday, 13 December 2021 09:57

End of life dates

Hi - What are the end of life / end of support dates for v8.5 and v9 please ? Unless stated otherwise above: IBM United Kingdom Limited - Registered in England and Wales with number 741598. Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire PO6 3AU

Re: 403 Error

Hi Thomas, Thanks for the response. The application uses ADFS authentication, which should be happening through an Apache httpd server, with the application accessed at https://marmoset.eng.uwaterloo.ca. So is the indication here that the ADFS authentication is not working? Thanks, David Lau

403 Error

ilter' 03-Sep-2021 03:13:31.474 FINE [main] org.apache.catalina.core.StandardContext.filterStart Starting filter 'InstructorActionFilter' Any assistance would be greatly appreciated. Thanks, David - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Truststore in HTTPS Connector does not work with Linux

). -Original Message- From: David Weisgerber Sent: Thursday, 17 September 2020 09:29 To: Tomcat Users List Subject: RE: Truststore in HTTPS Connector does not work with Linux Hi, > Ugh. That *does* point toward a bug in Tomcat itself or something odd with > the JVM. Yep. >

RE: Truststore in HTTPS Connector does not work with Linux

re any other people that can confirm this? I guess client certificates is a more rarely used feature. Best regards, David

RE: Truststore in HTTPS Connector does not work with Linux

eystore > /diagdata/keystore.jks BEGIN CERTIFICATE= blah blah blah =END > CERTIFICATE= > > $ keytool -importcert -alias 'dummy' -keystore /diagdata/keystore.jks [paste > cert here] I tried this but it did not help... Thanks, David

AW: Truststore in HTTPS Connector does not work with Linux

e=WINDOWS-ROOT ____ Von: Luis Rodríguez Fernández [uo67...@gmail.com] Gesendet: Dienstag, 8. September 2020 10:16 An: Tomcat Users List Betreff: Re: Truststore in HTTPS Connector does not work with Linux Hello David, That error usually happens when the java

Truststore in HTTPS Connector does not work with Linux

up from version 8.5.5. The error also seems not to be based on the java version, I tried it with Java 8 and Java 14. Under Windows we use Java 9... Is this a Linux specific bug? What is a trust anchor anyway? Thanks in advance, David - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Tomcat 9.0.29 - HTTPS threads age, max connections reached, Tomcat not responding on 8443

On Thu, Aug 27, 2020 at 4:30 PM Christopher Schultz wrote: > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > David, > > On 8/27/20 17:14, David wrote: > > Thank you all for the replies! > > > > On Thu, Aug 27, 2020 at 3:53 PM Christopher Schultz >

Re: Tomcat 9.0.29 - HTTPS threads age, max connections reached, Tomcat not responding on 8443

Thank you all for the replies! On Thu, Aug 27, 2020 at 3:53 PM Christopher Schultz wrote: > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > David, > > On 8/27/20 13:57, David wrote: > > On Thu, Aug 27, 2020 at 12:35 PM Christopher Schultz > > wrote: >

Re: Tomcat 9.0.29 - HTTPS threads age, max connections reached, Tomcat not responding on 8443

On Thu, Aug 27, 2020 at 12:35 PM Christopher Schultz wrote: > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > David, > > On 8/27/20 10:48, David wrote: > > In the last two weeks I've had two occurrences where a single > > CentOS 7 production server ho

Tomcat 9.0.29 - HTTPS threads age, max connections reached, Tomcat not responding on 8443

automate a resolution to keep the system from experiencing downtime, or for any insight on where to look for a root cause. Thanks in advance for any guidance you can lend. Thanks, David

Re: Tomcat 8.5.(x > 5) & SSL Connections (sun.security.provider.certpath.SunCertPathBuilderException)

touch anything Java related in their updates (unless it is related to some JNI code that is calling some OS specific stuff somewhere?). Nonetheless, thanks for your feedback, and I'm closing down this thread now. Regards, Dave. > On Aug 10, 2020, at 4:28 AM, Mark Thomas wrote: > > On 09/08/2

Re: Tomcat 8.5.(x > 5) & SSL Connections (sun.security.provider.certpath.SunCertPathBuilderException)

S 10.12) it never stopped working, and up until about a week ago, it worked correctly on the newer Macs (macOS 10.14), until it didn't, without knowing what changed. Clear as mud? > On Aug 9, 2020, at 3:19 PM, Mark Thomas wrote: > > On August 8, 2020 6:59:23 PM UTC, David Filip wrote: >

Re: Tomcat 8.5.(x > 5) & SSL Connections (sun.security.provider.certpath.SunCertPathBuilderException)

te: > > On Sat, Aug 8, 2020, 13:59 David Filip <mailto:dfi...@colornet.com>> wrote: > >> Hello Everyone! >> >> I spent a large part of yesterday and this morning trying to debug an SSL >> problem on Tomcat 8.5.57 to no avail. I've seen some discus

Tomcat 8.5.(x > 5) & SSL Connections (sun.security.provider.certpath.SunCertPathBuilderException)

Hello Everyone! I spent a large part of yesterday and this morning trying to debug an SSL problem on Tomcat 8.5.57 to no avail. I've seen some discussion on either this problem or something related back in 2016, but wanted to confirm what the "correct" solution might be, because I got lost in

RE: Alternatives for AJP

, à 17:45, David Cleary a écrit: >Some of our customers are currently using the AJP connector. Given the >vulnerability and breaking change to address it, now may be a good time >to prompt them look at alternatives. One requirement is HTTPS support. >What are the alternatives when ho

Alternatives for AJP

Some of our customers are currently using the AJP connector. Given the vulnerability and breaking change to address it, now may be a good time to prompt them look at alternatives. One requirement is HTTPS support. What are the alternatives when hosting Tomcat behind Apache httpd, nginx, or IIS?

Compiling TCNative on Windows

One of our customers got binged on a security audit because some Windows binaries weren't compiled with the security features listed below. TCNative is on that list. We only include it for our Windows distributions since it is available in binary form. One side effect of ASLR is that pointers

Any suggestions on Java 11 JVM options for Tomcat?

We made the decision to move to Java 11 for an upcoming release that will be our Long Term Servicing branch. We have noticed a non-trivial increase in memory usage compared to Java 8. On most platforms, it isn't something critical. On Solaris, with the Oracle JVM, we see about double our

RE: Setting samesite attribute on JSESSIONID

On 10/10/19 14:08, David Cleary wrote: > Have a customer asking about this. I see Tomcat supports it here. > https://tomcat.apache.org/tomcat-9.0-doc/config/cookie-processor.html > .apache.org > > > We currently use defaults, so I'm looking for an XML fragment and > the f

Setting samesite attribute on JSESSIONID

Have a customer asking about this. I see Tomcat supports it here. https://tomcat.apache.org/tomcat-9.0-doc/config/cookie-processor.html We currently use defaults, so I'm looking for an XML fragment and the file it goes in to add the samesite attribute to the JSESSIONID. I'm assuming they want

tomcat-users.xml dynamic changes

Mark, I see this feature in the new Tomcat 8.5 release. - Add the ability for a UserDatabase to monitor the backing XML file for changes and reload the source file if a change in the last modified time is detected. This is enabled by default meaning that changes to

Tomcat hanging on shutdown post 9.0.13

We currently ship our AppServer on Tomcat 9.0.13. We like to update to a more recent version when we ship a new release. However, Tomcat refuses to stop, on both Windows and Linux, when we go past 9.0.13. I know that it has something to do with our main web application as Tomcat does shut down

RE: ecj-4.6.3 no longer required?

. On Wed, Mar 27, 2019 at 1:58 AM David Cleary wrote: > > I'm current updating our server that is based on Tomcat 8.5.x and found that > ecj-4.6.3.jar is no longer in the distribution. The changelog does not note > that it has been removed. I just want to confirm that I should remove thi

ecj-4.6.3 no longer required?

I'm current updating our server that is based on Tomcat 8.5.x and found that ecj-4.6.3.jar is no longer in the distribution. The changelog does not note that it has been removed. I just want to confirm that I should remove this library as part of the Tomcat update. Thanks Dave

Re: Tomcat 8.5 Startup w/systemctl & Immediate Shutdown

23, 2019, at 3:22 AM, Mark Thomas wrote: > > On 22/01/2019 23:52, David Filip wrote: >> Hi All, >> >> I seem to be having troubles getting Tomcat 8.5 to start on an Amazon Linux >> 2 server with systemctl. The problem seems to be that after starting >> tomc

Re: Tomcat 8.5 Startup w/systemctl & Immediate Shutdown

- > Hash: SHA256 > > David, > > On 1/22/19 18:52, David Filip wrote: >> Hi All, >> >> I seem to be having troubles getting Tomcat 8.5 to start on an >> Amazon Linux 2 server with systemctl. The problem seems to be >> that after starting tomcat, i

Tomcat 8.5 Startup w/systemctl & Immediate Shutdown

Hi All, I seem to be having troubles getting Tomcat 8.5 to start on an Amazon Linux 2 server with systemctl. The problem seems to be that after starting tomcat, it always immediately tries to shut down. From /var/log: Jan 22 23:13:32 cloud systemd: Starting Tomcat 8.5 servlet container...

RE: Apache Tomcat Deploying war file every time on AIX even though there are no changes in war file.

Mark, Turns out it is a JDK bug. http://www-01.ibm.com/support/docview.wss?uid=swg1IV99686 https://bugs.openjdk.java.net/browse/JDK-8177809 While it has been fixed, we currently are required to support AIX 6.1, which doesn't have an updated JDK because IBM no longer supports that version of

log4j: Logging to same file from multiple contexts?

Dear Tomcat Users, Apologies if this is more of a log4j question, but I thought that I'd start here, in case Tomcat has any easy remedies. I have a common webapp that I deploy to multiple, different contexts. In log4j.properties, I have a few different log files defined, e.g., for logins:

Re: how to prevent user access to JSP pages?

Has any decision been made on how the original poster will do this? As I read through the various responses, while you can always argue certain structures are better, it's simply not true that if you create messy/insecure JSPs, you'll somehow create clean/secure servlets.  Any error you would

Re: how to prevent user access to JSP pages?

I'll be curious to see the answers. JSPs are servlets. For us, the common way would be for your non-JSP servlets to authenticate the request (and save the results in the request), and then your JSPs can check if the request has been authenticated before progressing further.  Of course, if

RE: Re: Tomcat 5.5.17 migration to 6.0.53

-Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: Tuesday, 24 July 2018 12:41 PM To: users@tomcat.apache.org Subject: [EXTERNAL] Re: Tomcat 5.5.17 migration to 6.0.53 -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 David, On 7/24/18 10:54 AM

Re: Re: Tomcat 5.5.17 migration to 6.0.53

Hey thanks. Before I go through your recommendations with a fine tooth comb, do you think it will be there same amount of work trying to go straight to the latest Apache version? I started thinking of this since your mentioned the vul. Thanks, David On Tue, Jul 24, 2018 at 12:41 PM

RE: Re: Tomcat 5.5.17 migration to 6.0.53

Subject: [EXTERNAL] Re: Tomcat 5.5.17 migration to 6.0.53 -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 David, On 7/23/18 12:51 PM, David Babooram wrote: > Hello > > I have begun a migration from 5.5 to 6. Yes I know 6 is EOL but the > migration from 5.5 to 6 has some more d

Tomcat 5.5.17 migration to 6.0.53

Hello I have begun a migration from 5.5 to 6. Yes I know 6 is EOL but the migration from 5.5 to 6 has some more documentation compared to 5.5 to the latest version. I followed the standard migration of libs and classes from /common /shared etc to the new /lin directory for 6.. The server

RE: 21 second pause that randomly happens

: charlie arehart [mailto:charlie_li...@carehart.org] Sent: Thursday, July 19, 2018 12:24 PM To: 'Tomcat Users List' Subject: RE: 21 second pause that randomly happens David? Are you still needing help with this? Your answers to what I ask may help us get you to a solution. /charlie

Re: 21 second pause that randomly happens

On 16.07.2018 16:35, David Cleary wrote: > 2018-07-16 15:55 GMT+03:00 David Cleary : >>> We have a customer who is experiencing a random, 21 second pause when using >>> out Tomcat > based application server. We believe this may be during a TCP connect and > timeout. Lo

Re: 21 second pause that randomly happens

2018-07-16 15:55 GMT+03:00 David Cleary : >> We have a customer who is experiencing a random, 21 second pause when using >> out Tomcat based application server. We believe this may be during a TCP connect and timeout. Logging indicates the pause happens before the request makes it

21 second pause that randomly happens

in the Endpoint class, but that did not provide anything useful. There is a NAT firewall between the client and server, so I'm looking for some TCP level logging that could point me in the proper direction. Thanks David Cleary Progress

Re: RE: Re: Tomcat 5.5.17 migration to 6

Alright. I guess the thought the process was to upgrade to 6, then 7, 8 Thanks, David On Sat, Jul 14, 2018 at 3:38 PM -0400, "Caldarale, Charles R" mailto:chuck.caldar...@unisys.com>> wrote: > From: David Babooram [mailto:david.baboo...@digicelgroup.com] > Subject:

Re: Re: Tomcat 5.5.17 migration to 6

Hi Good point. But by decision was based on what was presented in the Apache site. In that, upgrade from 5.5 was known to only go to 6. Nevertheless.. is there some official documents on migrating to 8.5? Thanks, David On Sat, Jul 14, 2018 at 11:05 AM -0400, "calder" mai

Tomcat 5.5.17 migration to 6

on how to proceed with this migration? Thanks, David Notice of Confidentiality: The information contained in this communication is intended solely for the use of the individual or entity to whom it is addressed and others authorized to receive it. It may

Re: configuring ciphers for SSL Labs server test

We're doing good with this:     protocols="TLSv1.1, TLSv1.2" honorCipherOrder="true" ciphers="TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,

TomcatCon at ApacheCon?

Mark, Will there be a TomcatCon within ApacheCon this year? Dave

Supporting on-line deployment through JMX

that doesn't require the Manager web app? Thanks David Cleary Progress Software

The case of disappearing JARs

I've got a case of disappearing JARs from my webapps lib folder which I can't seem to solve, hopefully someone on the list can provide some pointers. We've got a number of webapps which are deployed by an installer already exploded (The war is exploded and wrapped by the installer) without the

Re: Session timeout despite user activity - websockets on Tomcat 8.5.16

On 8/9/17 8:35 AM, Mark Thomas wrote: On 09/08/17 16:09, David Wall wrote: We're using Tomcat 8.5.16 with Java 1.8.0_91, Vaadin 7.7.10 and Atmosphere Websockets. We have had reports of sessions logging out while users are active with our Vaadin-based application. This has been frustrating

Session timeout despite user activity - websockets on Tomcat 8.5.16

lves as I believe it's managed by Tomcat itself, but as Tomcat is handling the websocket requests, it's unclear why they are not tied to the HttpSession. Anybody have any ideas? Thanks as we have a lot of frustrated users who would love for us to find ou

Re: trimSpaces removing whitespace from html

Here is the link to the enhancement request. https://bz.apache.org/bugzilla/show_bug.cgi?id=45931 Thanks On 29 May 2017 at 13:32, David Kavanagh <david.kavan...@marfeel.com> wrote: > > > On 29 May 2017 at 10:43, Mark Thomas <ma...@apache.org> wrote: > >> On 26/05

Re: trimSpaces removing whitespace from html

On 29 May 2017 at 10:43, Mark Thomas <ma...@apache.org> wrote: > On 26/05/17 21:33, Christopher Schultz wrote: > > Mark, > > > > On 5/26/17 6:59 AM, Mark Thomas wrote: > >> On 26/05/17 10:15, David Kavanagh wrote: > >>> Hey guys, > >&g

Re: trimSpaces removing whitespace from html

On 26 May 2017 at 22:33, Christopher Schultz <ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Mark, > > On 5/26/17 6:59 AM, Mark Thomas wrote: > > On 26/05/17 10:15, David Kavanagh wrote: > >> Hey guys, > >&

Re: trimSpaces removing whitespace from html

I will need to confirm with some people if that is a realistic fix for us and i will let you know. Thanks On 26 May 2017 at 13:05, David Kavanagh <david.kavan...@marfeel.com> wrote: > Thanks Mark, > > I will try that out and let you know if it sorts our issue. > > Much appr

Re: trimSpaces removing whitespace from html

Thanks Mark, I will try that out and let you know if it sorts our issue. Much appreciated On 26 May 2017 at 12:59, Mark Thomas <ma...@apache.org> wrote: > On 26/05/17 10:15, David Kavanagh wrote: > > Hey guys, > > > > Thanks for getting back to me. I didn't realise t

Re: trimSpaces removing whitespace from html

data-mrf-transitioner="${transitioner}" data-mrf-virtualpageid="${virtualPageId}" class="${articleClass} ${imageClassName} ${pocketClassName}">

Re: trimSpaces removing whitespace from html

Hi Mark, Apologies for the delay. I have the files that should reproduce the error for you. The imageTopWrapper.jsp loads the articleBody.tag. Then inside the articleBody.tag file the following section loads class names into the class attributes. data-mrf-transitioner="${transitioner}"

Re: trimSpaces removing whitespace from html

Ok cool, hopefully that will reproduce so you can see for yourself. Thanks! On 15 May 2017 at 10:39, Mark Thomas <ma...@apache.org> wrote: > On 12/05/17 17:08, David Kavanagh wrote: > > Yes, this is one of the .jsp files. I don't know how useful this is. > > Hopefull

Re: trimSpaces removing whitespace from html

l.com/jsp/mrf/dali; %> <%@taglib prefix="c" uri="http://java.sun.com/jsp/jstl/core; %> <%@page pageEncoding="UTF-8" %> On 11 May 2017 at 18:35, Mark Thomas <ma...@apache.org> wrote: > On 11 May 2017 15:34:32 BST, David Kavanagh <david.kavan...@marfeel.c

Re: trimSpaces removing whitespace from html

Yes, the problem happens in the class attribute string. They are some examples but it happened throughout the files in many cases. I am using .jsp files Also, in the second example that i gave, you can see that mrf-video was removed as well as mrf-m and mrf-image being joined. This was the

Re: trimSpaces removing whitespace from html

-page mrf-noFillet mrf-author mrf-mmrf-image"> 3.Before 3.After There are many more incidents of the same thing happening. Thanks On 10 May 2017 at 20:13, Mark Thomas <ma...@apache.org> wrote: > On 10/05/17 17:17, David Kavanagh wrote: > > Hey, > > >

trimSpaces removing whitespace from html

ge: Inline images 5] 3. Before [image: Inline images 6] 3. After [image: Inline images 7] Any advice on this would be greatly appreciated. Kind Regards David

RE: Diagnose why Tomcat doesn't appear to deploy webapp module

> -Original Message- > From: KARR, DAVID > Sent: Monday, April 17, 2017 5:01 PM > To: Tomcat Users List <users@tomcat.apache.org> > Subject: Diagnose why Tomcat doesn't appear to deploy webapp module > > I'm trying to set up an existing Spring webapp that ran

Diagnose why Tomcat doesn't appear to deploy webapp module

I'm trying to set up an existing Spring webapp that ran on a different container before (weblogic), to run on Tomcat. Working on it in Eclipse, I've gotten all of the compile errors out, and I was able to add the webapp to my Tomcat server instance in the "Servers" view. I started the server

CVEs Not Published

these published? We use some tools to help us identify vulnerable versions based off of CVEs published in the NVD and not having them be published for so long is causing some problems. Regards, David

RE: When do I actually need to add JNDI references to web.xml?

> -Original Message- > From: KARR, DAVID > Sent: Tuesday, March 14, 2017 1:20 PM > To: Tomcat Users List <users@tomcat.apache.org> > Subject: When do I actually need to add JNDI references to web.xml? > > I have a small CXF/REST/Spring/JDBC app that I've ru

When do I actually need to add JNDI references to web.xml?

I have a small CXF/REST/Spring/JDBC app that I've run on TomEE and Tomcat. I define datasources and environment entries and retrieve those from the application code using JNDI interfaces. This all works fine. What confuses me is that whenever I read in various unrelated docs about setting

RE: Moved app from TomEE to Tomcat, now getting Spring errors failing to go through proxy for XML validation

go through proxy for XML validation > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > David, > > On 3/10/17 1:07 PM, KARR, DAVID wrote: > > I have an app using CXF/REST/Spring/JDBC that is working pretty well > > in TomEE (7.0.1). I'm trying to move it to T

RE: get NPE from NamingContextListener in app moved from TomEE to Tomcat

> -Original Message- > From: Mark Thomas [mailto:ma...@apache.org] > Sent: Friday, March 10, 2017 9:42 AM > To: Tomcat Users List <users@tomcat.apache.org> > Subject: Re: get NPE from NamingContextListener in app moved from TomEE > to Tomcat > > On 10/03

Moved app from TomEE to Tomcat, now getting Spring errors failing to go through proxy for XML validation

I have an app using CXF/REST/Spring/JDBC that is working pretty well in TomEE (7.0.1). I'm trying to move it to Tomcat (8.5.11) because it doesn't need to be in TomEE, and I'm having problems adding additional features due to aspects of TomEE. I'm first testing the port by running Tomcat in

get NPE from NamingContextListener in app moved from TomEE to Tomcat

I have a CXF/REST/Spring/JDBC app running in TomEE (7.0.1). I've decided to try to move it to Tomcat (8.5.11) because of some classloader conflicts (CXF classes) I'm now seeing in trying to add some new code to the app. Initially, I'm just running the server in Eclipse. When I add the apps to

Required changes to move an app from TomEE 7.0.1 to Tomcat 8.5.11

I'm currently running a somewhat simple CXF/REST/Spring app in TomEE 7.0.1. It uses the CXF libraries in WEB-INF/lib, not in the container. It uses a couple of Environment strings, and some DataSource resources, all of which it gets from JNDI. I'm considering moving this app from TomEE to

Re: Can Tomcat act as an HTTPS proxy?

On Thu, Jan 19, 2017 at 7:15 PM, Daniel Savard <daniel.sav...@gmail.com> wrote: > 2017-01-19 12:21 GMT-05:00 David P. Caldwell <da...@code.davidpcaldwell.com> > : > >> Chris, >> >> Good questions, I'll try to clarify. >> >> 1. The backend serv

Re: Can Tomcat act as an HTTPS proxy?

ution -- since I have my Tomcat "middle" server with an HTTPS connector, and that is working, I am also going to experiment with using HTTPS to communicate with the middle, and then switch the back end to HTTP. I'm not sure that'll help (because I'm not sure how I can implement the "dir

Re: Can Tomcat act as an HTTPS proxy?

erver-side implementation that can make the request of the backend server and return the response to the front end. On Thu, Jan 19, 2017 at 10:38 AM, David P. Caldwell <da...@code.davidpcaldwell.com> wrote: > I'm trying to forward HTTPS requests through a Tomcat HTTP (or HTTPS) > server to

Can Tomcat act as an HTTPS proxy?

murky, so I might be wrong. Am I on the right track? If so, is there something configurable that will allow those requests to be forwarded rather than rejected? -- David P. Caldwell http://www.davidpcaldwell.com/ - To unsubscribe

Re: Tcnative.dll apr-1.5.2-win32-src - unable to compile with openssl-1.0.2j-fips-x86_64

I was able to get it to work with VS2008 & Win DDK7 (7600.16385.1) , although for cmsc I had to add (was only working on x64 build); %XCOPYD% "%WINDDK%\lib\win7\amd64" lib\amd64\ as some of the headers weren't the full variants from the other directories, while win7 was. I don't recall taht error

Re: TomcatCon @ ApacheCon

> > Embedded Tomcat and microservices? With and as an alternative to Spring > Boot? > > -Terence Bandoian > http://www.tmbsw.com/ > > +1. Something to do with using Tomcat within a microservices architecture, possibly with Docker and Kubernetes.

Re: Tomcat 8.5 - APR 1.2.10 SSL CPU issue ?

:: Have value for s: -1 ssl_socket_recv:: Have value for rv: 730053 ssl_socket_recv:: con->shutdown_type: 2 Thanks, On Fri, Jan 6, 2017 at 5:43 PM, David Oswell <dosw...@gmail.com> wrote: > Yep that would, Originally I had just turned the return 0 to throw an > IOException - w

Re: Tomcat 8.5 - APR 1.2.10 SSL CPU issue ?

the WSAECONNABORTED status within APR. It also seems a bit time dependent, might be a case of whether APR is getting to the socket read before or after the FIN packet coming though ?? On Fri, Jan 6, 2017 at 5:11 PM, Mark Thomas <ma...@apache.org> wrote: > On 06/01/2017 21:50, David Oswell wrote: > &g

Re: Tomcat 8.5 - APR 1.2.10 SSL CPU issue ?

I've somehow gotten the build for tcnative working here (more shocked I finally got openssl to build!) There seems to be a slight difference in how the shutdown occurs. When the APR_EGENERAL is returned its due to falling through the SSL_ERROR_SYSCALL block in sslnetwork.c:ssl_socket_recv, This

Re: Tomcat 8.5 - APR 1.2.10 SSL CPU issue ?

socket for APR_POLLIN, the poller then adds it back as OPEN_READ again, and exec adds back to poller for APR_POLLIN. desc in AprEndpoint contains; [48, 565911936, 1, 565903728, 0, 0, 0, 0, 0, ] desc[0] looks to indicate Poll.APR_POLLHUP wrapper.pollerFlags = 1 On Wed, Jan 4, 2017 at

Re: Tomcat 8.5 - APR 1.2.10 SSL CPU issue ?

:) On Wed, Jan 4, 2017 at 12:29 PM, David Oswell <dosw...@gmail.com> wrote: > Hi Mark, > > Thanks for the response - So far I've narrowed down to this; > 0 - ntoskrnl.exe!KeSynchronizeExecution+0x2246 > 1 - ntoskrnl.exe!KeWaitForMultipleObjects+0x135e &

Re: Tomcat 8.5 - APR 1.2.10 SSL CPU issue ?

080 poller thread (after load), it's waiting appropriately. I'll try and get the remote debugger connected now and see what time is being passed for waiting. On Wed, Jan 4, 2017 at 11:30 AM, Mark Thomas <ma...@apache.org> wrote: > On 04/01/2017 16:02, David Oswell wrote: &

  1   2   3   4   5   6   7   8   9   10   >