Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-28 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Alex, On 7/28/15 2:25 AM, Alex Soto wrote: Well the answer comes from httpd team do I expect they aware of this. Moreover they explained me this about ticketing and why it is normal this behaviour If this is expected behavior, it's certainly

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-28 Thread Alex Soto
I send you here the link so you can read it http://httpd.markmail.org/search/?q=Alex%20Soto#query:Alex%20Soto+page:1+mid:74py424qest6gnj3+state:results El dt., 28 jul. 2015 a les 17:33, Christopher Schultz ( ch...@christopherschultz.net) va escriure: -BEGIN PGP SIGNED MESSAGE- Hash:

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-28 Thread Alex Soto
Well the answer comes from httpd team do I expect they aware of this. Moreover they explained me this about ticketing and why it is normal this behaviour Alex El dl., 27 de jul., 2015 a les 23.32 Christopher Schultz ch...@christopherschultz.net va escriure: -BEGIN PGP SIGNED MESSAGE-

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-27 Thread Alex Soto
Hi guys, finally I found what was happening. It was a problem with the ticketing system of SSL. To avoid it and makes everything works you only need to set SSLSessionTickets to off. And that's all, now everything works as expected. Thank you very much for all your help. Alex. El dl., 13 jul.

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Alex, On 7/27/15 7:36 AM, Alex Soto wrote: finally I found what was happening. It was a problem with the ticketing system of SSL. To avoid it and makes everything works you only need to set SSLSessionTickets to off. And that's all, now

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Konstantin, On 7/9/15 6:30 AM, Konstantin Kolinko wrote: Please do not top-post, Rules: http://tomcat.apache.org/lists.html#tomcat-users - 6. 2015-07-09 13:07 GMT+03:00 Alex Soto asot...@gmail.com: yes (LogFormat %H %{SSL_SESSION_ID}e %h %l

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-09 Thread Alex Soto
Hello yes I have raised the question to httpd mailing list. Just to keep you informed. Look what I have discovere. If I run in Chrome or Firefox I get next log messages: HTTP/1.1 - on TLSv1.2 Initial 172.17.42.1 - - [09/Jul/2015:13:57:18 +] GET /hello/hello HTTP/1.1 200 89 HTTP/1.1 - on

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-09 Thread Konstantin Kolinko
Please do not top-post, Rules: http://tomcat.apache.org/lists.html#tomcat-users - 6. 2015-07-09 13:07 GMT+03:00 Alex Soto asot...@gmail.com: yes (LogFormat %H %{SSL_SESSION_ID}e %h %l %u %t \%r\ %s %b) note that in both cases %H is the same value. I think it is correct. Agreed. HTTP/1.1 is

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-09 Thread Alex Soto
Hi at the end it seems apache is doing something (wrong or not) HTTP/1.1 - 172.17.42.1 - - [09/Jul/2015:09:15:06 +] GET /hello/hello HTTP/1.1 200 89 HTTP/1.1 1b17f16f8ae73c1b4d706c1598aadb596db610bbdaeb1cd967e0bea98ec2abcb 172.17.42.1 - - [09/Jul/2015:09:15:34 +] GET /hello/hello

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-09 Thread André Warnier
Hi. Alex Soto wrote: Hi at the end it seems apache is doing something (wrong or not) HTTP/1.1 - 172.17.42.1 - - [09/Jul/2015:09:15:06 +] GET /hello/hello HTTP/1.1 200 89 HTTP/1.1 1b17f16f8ae73c1b4d706c1598aadb596db610bbdaeb1cd967e0bea98ec2abcb 172.17.42.1 - - [09/Jul/2015:09:15:34 +]

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-09 Thread Alex Soto
yes (LogFormat %H %{SSL_SESSION_ID}e %h %l %u %t \%r\ %s %b) note that in both cases %H is the same value. I think it is correct. El dj., 9 jul. 2015 a les 12:06, André Warnier (a...@ice-sa.com) va escriure: Hi. Alex Soto wrote: Hi at the end it seems apache is doing something (wrong or

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-08 Thread André Warnier
Alex Soto wrote: Hi I have tried this approach custom JkEnvVar are pass correctly, what I don't know how to do is how to set an already JkEnvVar to a new JkEnvVar (what you mention about force)) I have tried with %{SSL_SESSION_ID} and $ but no luck (Don't know if it is because originally it was

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-08 Thread Alex Soto
Hi I have tried this approach custom JkEnvVar are pass correctly, what I don't know how to do is how to set an already JkEnvVar to a new JkEnvVar (what you mention about force)) I have tried with %{SSL_SESSION_ID} and $ but no luck (Don't know if it is because originally it was null or not).

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-08 Thread Alex Soto
I have tried what you mention. When SSL_Id is there both request.getAttribute(javax.servlet, .); and request.getAttribute(SSL_SESSION_ID); returns valid sslId and in the same way if one is null them the other one is null too so it behaviour is consistent. About header approach always it is

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-08 Thread Alex Soto
no they are always the same, I simply go to browser do https://localhost/hello/hello and I only push refresh button several times, until the id appears. Then after some pushes it disappears again and appears after some time again. So I think I am not changing the protocol from https to http. In

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Alex, On 7/8/15 10:18 AM, Alex Soto wrote: I have tried what you mention. When SSL_Id is there both request.getAttribute(javax.servlet, .); and request.getAttribute(SSL_SESSION_ID); returns valid sslId and in the same way if one is null

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-08 Thread André Warnier
Alex Soto wrote: no they are always the same, I simply go to browser do https://localhost/hello/hello and I only push refresh button several times, until the id appears. Then after some pushes it disappears again and appears after some time again. So I think I am not changing the protocol from

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-07 Thread André Warnier
Alex Soto wrote: Thank you so much but it is already set. https://github.com/lordofthejars/apache-tomee-ssl/blob/master/httpd.conf#L171 This is so strange. But there is also this phrase : In order to make SSL data available for mod_jk in Apache, you need to set SSLOptions +StdEnvVars.

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-07 Thread Alex Soto
yes it is set at httpd-ssl.config https://github.com/lordofthejars/apache-tomee-ssl/blob/master/httpd-ssl.conf#L229 which I think that is where it should be set. Everything too strange, but thanks anyway. El dt., 7 jul. 2015 a les 19:17, André Warnier (a...@ice-sa.com) va escriure: Alex Soto

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-07 Thread Alex Soto
Hi Mark, SSL Session ID is not passed to Tomcat. You can see the logs here https://gist.github.com/lordofthejars/226d8ed605f2a58b52f3 (I have created a gist to not add here a lot of lines). Now the question is is it happens because of mod_jk or because of Apache? Alex. El dl., 6 jul. 2015 a les

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-07 Thread Mark Thomas
On 07/07/2015 09:28, Alex Soto wrote: Hi Mark, SSL Session ID is not passed to Tomcat. You can see the logs here https://gist.github.com/lordofthejars/226d8ed605f2a58b52f3 (I have created a gist to not add here a lot of lines). Now the question is is it happens because of mod_jk or because

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-07 Thread André Warnier
Alex Soto wrote: yes it is set at httpd-ssl.config https://github.com/lordofthejars/apache-tomee-ssl/blob/master/httpd-ssl.conf#L229 which I think that is where it should be set. Everything too strange, but thanks anyway. Then, and until Rainer himself jumps in, let me ask you if it would be

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-07 Thread Alex Soto
Thank you so much but it is already set. https://github.com/lordofthejars/apache-tomee-ssl/blob/master/httpd.conf#L171 This is so strange. El dt., 7 jul. 2015 a les 12:25, André Warnier (a...@ice-sa.com) va escriure: Mark Thomas wrote: On 07/07/2015 09:28, Alex Soto wrote: Hi Mark, SSL

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-07 Thread André Warnier
Mark Thomas wrote: On 07/07/2015 09:28, Alex Soto wrote: Hi Mark, SSL Session ID is not passed to Tomcat. You can see the logs here https://gist.github.com/lordofthejars/226d8ed605f2a58b52f3 (I have created a gist to not add here a lot of lines). Now the question is is it happens because of

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-06 Thread Mark Thomas
On 06/07/2015 10:48, Alex Soto wrote: Hello I have seen a strange behaviour in Apache HTTPD (2.4) and TomEE (in fact it is a Tomcat (7.0.61) so it is exactly the same for Tomcat) when I configure Apache server with SSL and mod_jk. In fact I am not sure where it is the problem if in mod_jk, in

Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-06 Thread Alex Soto
Hello I have seen a strange behaviour in Apache HTTPD (2.4) and TomEE (in fact it is a Tomcat (7.0.61) so it is exactly the same for Tomcat) when I configure Apache server with SSL and mod_jk. In fact I am not sure where it is the problem if in mod_jk, in Apache Server or in Tomcat, but I suspect