On 9/23/26 3:01 AM, Mark Thomas wrote:
- Remove the examples web application
My, this was an awful lot of security-related mitigation announcements.
First, please refresh my memory: on an IBM Midrange box, do connectors
in the general form
<Connector port="443" protocol="org.apache.coyote.http11.Http11Protocol"
keystoreFile="<REDACTED Java keystore pathname>"
maxThreads="150" SSLEnabled="true" scheme="https" secure="true"
clientAuth="false" sslProtocol="TLSv1.2" />
(some of our more security-conscious customers have things a bit
tighter, like limits on acceptable ciphers) use OpenSSL in Tomcat 9?
Second, by "the examples web application" do you mean the default ROOT
context, or perhaps one of the other bundled webapp? Because we
routinely strip out every bundled webapp other than Manager, simply
because our own webapp is so enormous (we also have to expand the upload
limit in Manager by a full order of magnitude), and Manager is the only
bundled webapp that's of any practical use in the installations we manage.
--
JHHL
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
