Assuring Security by testing

2008-04-30 Thread Michael Osipov
Hi devs, I've been investigating Apache Tomcat within my Bachelor's thesis "Application of security test tools in open source" at the Free University of Berlin (FU Berlin) [1]. Basically, I am looking for security measures which have been taken to prevent security leaks/vulnerabilities especially

Re: Assuring Security by testing

2008-04-30 Thread Michael Osipov
Mark Thomas wrote: Michael Osipov wrote: Security advisories are taken up by a security team [3]. Does this team or any other group/person take any measures to assure security with testing tools, with a special test plan or functional requirements? Hello Mark, I did not expect such a quick

Re: Assuring Security by testing

2008-05-01 Thread Michael Osipov
Mark Thomas wrote: Jim Manico wrote: The Fortify Opensource project automatically scans the Tomcat codebase on a regular basis. This probably only gives you 10% security coverage at best, but it's a free report form a $50k tool. http://opensource.fortifysoftware.com A great example of why

Re: svn commit: r1834798 - in /tomcat/trunk/bin: makebase.bat makebase.sh

2018-07-01 Thread Michael Osipov
Am 2018-07-01 um 20:44 schrieb isa...@apache.org: Author: isapir Date: Sun Jul 1 18:44:38 2018 New Revision: 1834798 URL: http://svn.apache.org/viewvc?rev=1834798&view=rev Log: Fix https://bz.apache.org/bugzilla/show_bug.cgi?id=62500 Added scripts to create CATALINA_BASE directory Added:

Re: svn commit: r1834798 - in /tomcat/trunk/bin: makebase.bat makebase.sh

2018-07-01 Thread Michael Osipov
Am 2018-07-01 um 21:33 schrieb Igal Sapir: On 7/1/2018 12:18 PM, Michael Osipov wrote: Am 2018-07-01 um 20:44 schrieb isa...@apache.org: Author: isapir Date: Sun Jul  1 18:44:38 2018 New Revision: 1834798 URL: http://svn.apache.org/viewvc?rev=1834798&view=rev Log: Fix https://bz.apache

Re: svn commit: r1834801 - in /tomcat/trunk/bin: makebase.bat makebase.sh

2018-07-01 Thread Michael Osipov
Am 2018-07-01 um 21:51 schrieb isa...@apache.org: Author: isapir Date: Sun Jul 1 19:51:28 2018 New Revision: 1834801 Modified: tomcat/trunk/bin/makebase.sh URL: http://svn.apache.org/viewvc/tomcat/trunk/bin/makebase.sh?rev=1834801&r1=1834800&r2=1834801&view=diff

Re: svn commit: r1834989 - in /tomcat/trunk/bin: makebase.bat makebase.sh

2018-07-03 Thread Michael Osipov
Am 2018-07-03 um 17:31 schrieb ma...@apache.org: Author: markt Date: Tue Jul 3 15:31:37 2018 New Revision: 1834989 URL: http://svn.apache.org/viewvc?rev=1834989&view=rev Log: Fix line-endings Modified: tomcat/trunk/bin/makebase.bat (props changed) tomcat/trunk/bin/makebase.sh (pr

Inconsistencies makebase.sh

2018-07-03 Thread Michael Osipov
Friends, I still see some inconsistencies and portability issues: 1. Some expressions, some are not. It should be consistently quoted to avoid whitespace issues or similar. 2. "cp -a" is not portable. Some platforms don't have it, e.g., HP-UX which I use for approx 10 years with Tomcat. 3. Ev

Re: makebase script and webapps

2018-07-03 Thread Michael Osipov
Am 2018-07-03 um 18:27 schrieb Mark Thomas: Hi, I've been looking at the makebase script and thinking about potential use cases. Currently, we copy conf recursively but create an empty webapps. This is inconsistent as any directories under conf will (nearly always) be web application specific c

Re: makebase script and webapps

2018-07-03 Thread Michael Osipov
Am 2018-07-03 um 22:07 schrieb Mark Thomas: On 03/07/18 21:02, Michael Osipov wrote: Am 2018-07-03 um 18:27 schrieb Mark Thomas: Hi, I've been looking at the makebase script and thinking about potential use cases. Currently, we copy conf recursively but create an empty webapps. Th

Re: makebase script and webapps

2018-07-03 Thread Michael Osipov
Am 2018-07-03 um 22:12 schrieb Mark Thomas: On 03/07/18 21:10, Michael Osipov wrote: Am 2018-07-03 um 22:07 schrieb Mark Thomas: On 03/07/18 21:02, Michael Osipov wrote: Am 2018-07-03 um 18:27 schrieb Mark Thomas: Hi, I've been looking at the makebase script and thinking about potentia

Re: makebase script and webapps

2018-07-03 Thread Michael Osipov
Am 2018-07-03 um 22:37 schrieb Igal Sapir: On 7/3/2018 1:15 PM, Michael Osipov wrote: Am 2018-07-03 um 22:12 schrieb Mark Thomas: On 03/07/18 21:10, Michael Osipov wrote: Am 2018-07-03 um 22:07 schrieb Mark Thomas: On 03/07/18 21:02, Michael Osipov wrote: Am 2018-07-03 um 18:27 schrieb Mark

[INFRA] Tomcat cannot be built due to back mirrors

2018-07-25 Thread Michael Osipov
Folks, we need to inquire this with INFRA: PS D:\Entwicklung\Projekte\tomcat-8.5.x> ant Buildfile: D:\Entwicklung\Projekte\tomcat-8.5.x\build.xml download-compile: testexist: [echo] Testing for C:\Users\mosipov/tomcat-build-libs/commons-daemon-1.1.0/commons-daemon-1.1.0.jar downloadgz-

Re: [INFRA] Tomcat cannot be built due to back mirrors

2018-07-26 Thread Michael Osipov
Am 2018-07-26 um 00:55 schrieb Konstantin Kolinko: 2018-07-25 22:33 GMT+03:00 Michael Osipov : Folks, we need to inquire this with INFRA: PS D:\Entwicklung\Projekte\tomcat-8.5.x> ant Buildfile: D:\Entwicklung\Projekte\tomcat-8.5.x\build.xml download-compile: testexist: [echo] Test

Re: Timestamps in the manifests

2018-08-06 Thread Michael Osipov
Am 2018-08-06 um 20:24 schrieb Emmanuel Bourg: Hi all, We have 4 timestamps in the manifest of our jar files: DSTAMP: 20180806 TSTAMP: 1443 TODAY: August 6 2018 Bnd-LastModified: 1533578685288 Are they really necessary? This doesn't help making the generated files reproducible [1]. Any

Re: [VOTE] Release Apache Tomcat 8.5.34

2018-09-10 Thread Michael Osipov
Am 2018-09-05 um 00:52 schrieb Mark Thomas: The proposed Apache Tomcat 8.5.34 release is now available for voting. The major changes compared to the 8.5.33 release are: - Fix multiple issues associated with using the asynchronous Servlet API in combination with HTTP/2 - Add recursion to rew

Re: [VOTE][RESULT] Release Apache Tomcat 8.5.34

2018-09-10 Thread Michael Osipov
Am 2018-09-10 um 22:18 schrieb Mark Thomas: The following voters were cast: Binding: +1: remm, markt, michaelo, csutherl, ebourg My vote is binding? I am solely a committer at moment, not a PMC member. Michael - To unsubscri

Re: [ANN] Apache Tomcat 8.5.34 available

2018-09-11 Thread Michael Osipov
Am 2018-09-11 um 14:53 schrieb Mark Thomas: The Apache Tomcat team announces the immediate availability of Apache Tomcat 8.5.34. Apache Tomcat 8 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and Java Authenticati

JDBC drivers in WEB-INF/lib

2018-09-11 Thread Michael Osipov
Hi folks, in bug 62670 [1] -- contrary to my statement -- Mark pointed out that is it pefectly legal to have a JDBC driver in WEB-INF/lib. While I was living for years with the assumption that this is discouraged because the DriverManager is VM wide and not classloader-wide, plus numerous SO

Re: JDBC drivers in WEB-INF/lib

2018-09-12 Thread Michael Osipov
Am 2018-09-11 um 23:53 schrieb Christopher Schultz: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Michael, On 9/11/18 3:33 PM, Michael Osipov wrote: in bug 62670 [1] -- contrary to my statement -- Mark pointed out that is it pefectly legal to have a JDBC driver in WEB-INF/lib. While I was

Re: Specifying a URL for the docBase

2018-12-04 Thread Michael Osipov
Am 2018-12-03 um 20:30 schrieb Mark Thomas: Hi, I have been looking at [1]. This is a request to be able to specify a URL for a WAR, including a URL that points to a WAR file packaged inside a JAR. This request is in the context of embedded Tomcat. The embedded aspects are just part of this. Fi

Re: Specifying a URL for the docBase

2018-12-04 Thread Michael Osipov
Am 2018-12-04 um 23:22 schrieb Woonsan Ko: On Wed, Dec 5, 2018 at 5:36 AM Michael Osipov wrote: Am 2018-12-03 um 20:30 schrieb Mark Thomas: Hi, I have been looking at [1]. This is a request to be able to specify a URL for a WAR, including a URL that points to a WAR file packaged inside a

Re: Git migration - Timing

2019-02-11 Thread Michael Osipov
> All, > > I'd like to propose that we make the move from svn to git for Tomcat > 7.0.x, 8.5.x and 9.0.x as soon as the next 7.0.x release is complete. > > The proposed approach is documented here: > https://cwiki.apache.org/confluence/display/TOMCAT/Git+migration > > I anticipate that the repos

Re: Re: Git migration - Timing

2019-02-11 Thread Michael Osipov
> On 11/02/2019 19:57, Michael Osipov wrote: > >> All, > >> > >> I'd like to propose that we make the move from svn to git for Tomcat > >> 7.0.x, 8.5.x and 9.0.x as soon as the next 7.0.x release is complete. > >> > >> The propo

Re: Git migration - Timing

2019-02-16 Thread Michael Osipov
Am 2019-02-11 um 15:51 schrieb Mark Thomas: All, I'd like to propose that we make the move from svn to git for Tomcat 7.0.x, 8.5.x and 9.0.x as soon as the next 7.0.x release is complete. The proposed approach is documented here: https://cwiki.apache.org/confluence/display/TOMCAT/Git+migration

Re: Git migration - Timing

2019-02-16 Thread Michael Osipov
Am 2019-02-16 um 14:46 schrieb Mark Thomas: On 16/02/2019 13:39, Michael Osipov wrote: Am 2019-02-11 um 15:51 schrieb Mark Thomas: All, I'd like to propose that we make the move from svn to git for Tomcat 7.0.x, 8.5.x and 9.0.x as soon as the next 7.0.x release is complete. The pro

Git migration: new branch/tag naming scheme

2019-02-16 Thread Michael Osipov
Folks, given that we are currently in the process of migrating to Git I'd like to propose a more readible and with the branch names consistent tag naming scheme. The given approach, for whatsoever reason, performs an uppercase and replaces dots with underscores. This reduces readability, but

Git migration: consistent commit message

2019-02-16 Thread Michael Osipov
Folks, most of you know that there is a common convention of how to write decent Git commit messages. The scheme is: \n\n". Where as title (proposed) is: BZ #: If there is no corresponding BZ issue (which almost always should be), just an abtract. The abstract shouldn't contain more tha

Re: Git migration: new branch/tag naming scheme

2019-02-18 Thread Michael Osipov
Am 2019-02-18 um 11:03 schrieb Mark Thomas: On 18/02/2019 09:13, Rémy Maucherat wrote: On Sat, Feb 16, 2019 at 4:09 PM Michael Osipov wrote: Folks, given that we are currently in the process of migrating to Git I'd like to propose a more readible and with the branch names consisten

Re: Git migration: new branch/tag naming scheme

2019-02-18 Thread Michael Osipov
Am 2019-02-18 um 15:19 schrieb Igal Sapir: On Mon, Feb 18, 2019 at 2:03 AM Mark Thomas wrote: On 18/02/2019 09:13, Rémy Maucherat wrote: On Sat, Feb 16, 2019 at 4:09 PM Michael Osipov wrote: Folks, given that we are currently in the process of migrating to Git I'd like to prop

Re: Git migration: new branch/tag naming scheme

2019-02-20 Thread Michael Osipov
Am 2019-02-20 um 17:44 schrieb Mark Thomas: On 20/02/2019 16:14, Igal Sapir wrote: Michael, On Mon, Feb 18, 2019 at 11:53 AM Michael Osipov wrote: Am 2019-02-18 um 15:19 schrieb Igal Sapir: I actually prefer "tc8.5" and "tc7.0" for the branches (over "8.5.x&quo

Better integration of RemoteIpValve, AuthenticatorBase and reverse proxies

2019-02-21 Thread Michael Osipov
Hi folks, I have some improvement ideas for several components where I think others would benefit from too. We intend to run a set of apps on Tomcat 8.5 behind Apache 2.4.x for a possible future load balacing scenario. While evaluating this task I have stumbled on the issue that it isn't tha

Re: [VOTE] Migrate to git

2019-02-21 Thread Michael Osipov
Am 2019-02-21 um 17:13 schrieb Mark Thomas: This is a VOTE to migrate the primary source code repository for Apache Tomcat 9.0.x, 8.5.x and 7.0.x from svn to git. The migration will be performed as per: https://cwiki.apache.org/confluence/display/TOMCAT/Git+migration with the following changes:

Re: Git migration read for testing

2019-02-26 Thread Michael Osipov
Am 2019-02-26 um 14:54 schrieb Rémy Maucherat: On Tue, Feb 26, 2019 at 1:33 PM Mark Thomas wrote: All, https://github.com/apache/tomcat is now ready for testing. It should contain: branches - master (9.0.x) - 8.5.x - 7.0.x Tags: - one for each 7.0.x, 8.5.x and 9.0.x release Tags have all

Re: Git migration read for testing

2019-02-26 Thread Michael Osipov
Am 2019-02-26 um 13:33 schrieb Mark Thomas: All, https://github.com/apache/tomcat is now ready for testing. It should contain: branches - master (9.0.x) - 8.5.x - 7.0.x Tags: - one for each 7.0.x, 8.5.x and 9.0.x release Tags have all been renamed to follow a a.b.c-MODIFIERn format for versi

Re: Git migration read for testing

2019-03-02 Thread Michael Osipov
Am 2019-03-01 um 21:50 schrieb Mark Thomas: On 01/03/2019 19:54, Mark Thomas wrote: On 01/03/2019 19:00, Coty Sutherland wrote: The email notifications work for when we push commits to the repository, but it looks like we're missing emails when PRs are opened. ACK. I'll talk to infra. Fixed

Re: [tomcat] 01/01: Fix wrong protocol version usage

2019-03-31 Thread Michael Osipov
automated email from the ASF dual-hosted git repository. michaelo pushed a commit to branch wrong-http2-version in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 0e1de0d34302cdea6b3c2a47b03dcca4c7e2f9b7 Author: Michael Osipov AuthorDate: Sun Mar 31 10:03:29 2019 +0200

Re: [tomcat] 01/01: Fix wrong protocol version usage

2019-04-01 Thread Michael Osipov
Am 2019-04-01 um 09:36 schrieb Rémy Maucherat: On Sun, Mar 31, 2019 at 7:38 PM Michael Osipov wrote: Am 2019-03-31 um 14:50 schrieb Konstantin Kolinko: -1 (veto). This was discussed several years ago, and the decision was to use "HTTP/2.0" https://bz.apache.org/bugzilla/show_

Re: [tomcat] branch master updated: https://bz.apache.org/bugzilla/show_bug.cgi?id=63286 access log formats

2019-04-01 Thread Michael Osipov
Am 2019-04-01 um 13:10 schrieb ma...@apache.org: This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/master by this push: n

Re: [tomcat] branch master updated: https://bz.apache.org/bugzilla/show_bug.cgi?id=63286 access log formats

2019-04-01 Thread Michael Osipov
Am 2019-04-01 um 13:42 schrieb Mark Thomas: On 01/04/2019 12:41, Michael Osipov wrote: Am 2019-04-01 um 13:10 schrieb ma...@apache.org: This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf

Re: [tomcat] 01/01: Fix wrong protocol version usage

2019-04-02 Thread Michael Osipov
https://gitbox.apache.org/repos/asf/tomcat.git commit 0e1de0d34302cdea6b3c2a47b03dcca4c7e2f9b7 Author: Michael Osipov AuthorDate: Sun Mar 31 10:03:29 2019 +0200 Fix wrong protocol version usage When serving a HTTP/2 request the protocol version was set as "HTTP/2.0" which does not exist

Re: [tomcat] branch master updated: Update ServerInfo to reflect actual information instead of placeholders when running development builds

2019-04-12 Thread Michael Osipov
Am 2019-04-11 um 21:49 schrieb csuth...@apache.org: This is an automated email from the ASF dual-hosted git repository. csutherl pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/master by this push:

Re: [PROPOSAL] Remove the functional specs from docs webapp

2020-08-11 Thread Michael Osipov
Am 2020-08-10 um 17:46 schrieb Mark Thomas: Hi all, I'd like to propose removing all the functional spec pages from the documentation web application. My reasoning for this proposal is, in short, that we aren't using or maintaining these pages. I don't recall any discussion of these docs on th

Re: [tomcat] branch master updated: Improve entity tag handling

2020-08-11 Thread Michael Osipov
Am 2020-08-11 um 16:52 schrieb ma...@apache.org: This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/master by this push: n

Re: [tomcat] branch master updated: Improve entity tag handling

2020-08-11 Thread Michael Osipov
Am 2020-08-11 um 18:53 schrieb Mark Thomas: On 11/08/2020 17:29, Michael Osipov wrote: Am 2020-08-11 um 16:52 schrieb ma...@apache.org: commit bef507e1b7ac2eb0ff012d0d40035e218a5839cc Author: Mark Thomas AuthorDate: Tue Aug 11 15:27:45 2020 +0100 Improve entity tag handling

Re: [PROPOSAL] Remove the functional specs from docs webapp

2020-08-11 Thread Michael Osipov
Am 2020-08-11 um 21:04 schrieb Mark Thomas: On 11/08/2020 17:30, Michael Osipov wrote: Am 2020-08-10 um 17:46 schrieb Mark Thomas: Hi all, I'd like to propose removing all the functional spec pages from the documentation web application. +1 Can you list them specifically? I am

Re: [tomcat] branch master updated: Extracted CSS styles to external file for better code mainenance

2020-08-16 Thread Michael Osipov
Am 2020-08-16 um 20:05 schrieb isa...@apache.org: This is an automated email from the ASF dual-hosted git repository. isapir pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/master by this push:

Re: [tomcat] branch master updated: Extracted CSS styles to external file for better code mainenance

2020-08-16 Thread Michael Osipov
Am 2020-08-16 um 21:58 schrieb Igal Sapir: Michael, On Sun, Aug 16, 2020 at 11:37 AM Michael Osipov wrote: Am 2020-08-16 um 20:05 schrieb isa...@apache.org: This is an automated email from the ASF dual-hosted git repository. isapir pushed a commit to branch master in repository https

Re: Time for Tomcat Native 1.2.25

2020-08-20 Thread Michael Osipov
Am 2020-08-20 um 18:30 schrieb Mark Thomas: Hi, It has been a while since 1.2.24 and there are a few fixes in the changelog (mainly for LibreSSL and better support for a range of platforms). With this in mind, I'm currently intending to tag 1.2.25 in ~24 hours Please go ahead. I have started a

Re: [VOTE] Release Apache Tomcat Native 1.2.25

2020-08-24 Thread Michael Osipov
Am 2020-08-21 um 20:22 schrieb Mark Thomas: Version 1.2.25 includes the following changes compared to 1.2.24 - Improvements to LibreSSL support - Improvements to HP_UX support Various other fixes and improvements. See the changelog for details. The proposed release artefacts can be found at [

Re: [VOTE] Release Apache Tomcat Native 1.2.25

2020-08-24 Thread Michael Osipov
Am 2020-08-24 um 15:42 schrieb Mark Thomas: On 24/08/2020 12:58, Michael Osipov wrote: Am 2020-08-21 um 20:22 schrieb Mark Thomas: Version 1.2.25 includes the following changes compared to 1.2.24 - Improvements to LibreSSL support - Improvements to HP_UX support Various other fixes and

Re: [VOTE] Release Apache Tomcat Native 1.2.25

2020-08-24 Thread Michael Osipov
Am 2020-08-24 um 15:42 schrieb Mark Thomas: On 24/08/2020 12:58, Michael Osipov wrote: Am 2020-08-21 um 20:22 schrieb Mark Thomas: Version 1.2.25 includes the following changes compared to 1.2.24 - Improvements to LibreSSL support - Improvements to HP_UX support Various other fixes and

Re: [VOTE][RESULT] Release Apache Tomcat Native 1.2.25

2020-09-04 Thread Michael Osipov
Am 2020-09-03 um 16:34 schrieb Mark Thomas: The following votes were cast: Binding: +1: markt, mgrigorov, fschumacher +0: schultz The vote therefore passes. I think it is worth noting that there were crashes / unit test failures reported with LibreSSL. This isn't unexpected. There is more wor

Re: [tomcat] 01/04: Add connection pool to JNDI realm

2020-10-13 Thread Michael Osipov
Am 2020-10-07 um 22:34 schrieb r...@apache.org: This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 50de36b7874da98591345e40b374a1e2dd52c188 Author: remm AuthorDate: Thu Jan

[DISCUSS] Deprecate and remove RealmBase#stripRealmForGss

2020-10-13 Thread Michael Osipov
Folks, I'd like to propose to get rid of that config option in 10 and deprecate in previous versions for the following reasons: * It suffers from abstraction: It assumes that the GSS name is always email style w/o checking its OID * The realm part, if any, is an integeral part of the principa

Re: [tomcat] 01/04: Add connection pool to JNDI realm

2020-10-13 Thread Michael Osipov
Am 2020-10-13 um 13:49 schrieb Rémy Maucherat: On Tue, Oct 13, 2020 at 11:33 AM Michael Osipov wrote: Am 2020-10-07 um 22:34 schrieb r...@apache.org: This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 8.5.x in repository https

Re: [tomcat] branch 8.5.x updated: Always retry on a new connection, even when pooling

2020-10-13 Thread Michael Osipov
Am 2020-10-13 um 16:05 schrieb r...@apache.org: This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new 8

Re: [DISCUSS] Deprecate and remove RealmBase#stripRealmForGss

2020-10-13 Thread Michael Osipov
Am 2020-10-13 um 12:32 schrieb Mark Thomas: On 13/10/2020 10:48, Michael Osipov wrote: Folks, I'd like to propose to get rid of that config option in 10 and deprecate in previous versions for the following reasons: * It suffers from abstraction: It assumes that the GSS name is always

Re: [tomcat] branch 8.5.x updated: Always retry on a new connection, even when pooling

2020-10-14 Thread Michael Osipov
Am 2020-10-14 um 12:32 schrieb Rémy Maucherat: On Tue, Oct 13, 2020 at 8:27 PM Michael Osipov wrote: Am 2020-10-13 um 16:05 schrieb r...@apache.org: This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 8.5.x in repository https

Re: [tomcat] branch master updated: Add extended ErrorReportValve that returns response as JSON instead of HTML

2020-10-14 Thread Michael Osipov
Am 2020-10-14 um 16:55 schrieb kfuj...@apache.org: This is an automated email from the ASF dual-hosted git repository. kfujino pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/master by this push:

Re: Re: [tomcat] branch 8.5.x updated: Always retry on a new connection, even when pooling

2020-10-15 Thread Michael Osipov
> On Wed, Oct 14, 2020 at 6:32 PM Michael Osipov wrote: > > > Am 2020-10-14 um 12:32 schrieb R=C3=A9my Maucherat: > > > On Tue, Oct 13, 2020 at 8:27 PM Michael Osipov > > wrote: > > > > > >> Am 2020-10-13 um 16:05 schrieb r...@apache.org: >

Re: [tomcat] branch 8.5.x updated: Always retry on a new connection, even when pooling

2020-10-15 Thread Michael Osipov
Am 2020-10-15 um 16:48 schrieb Rémy Maucherat: On Thu, Oct 15, 2020 at 2:31 PM Michael Osipov <1983-01...@gmx.net> wrote: On Wed, Oct 14, 2020 at 6:32 PM Michael Osipov wrote: Am 2020-10-14 um 12:32 schrieb R=C3=A9my Maucherat: On Tue, Oct 13, 2020 at 8:27 PM Michael Osipov

Re: [DISCUSS] Deprecate and remove RealmBase#stripRealmForGss

2020-10-15 Thread Michael Osipov
Am 2020-10-13 um 21:08 schrieb Michael Osipov: Am 2020-10-13 um 12:32 schrieb Mark Thomas: On 13/10/2020 10:48, Michael Osipov wrote: Folks, I'd like to propose to get rid of that config option in 10 and deprecate in previous versions for the following reasons: * It suffers from abstra

Re: [tomcat] branch 8.5.x updated: Always retry on a new connection, even when pooling

2020-10-19 Thread Michael Osipov
Am 2020-10-15 um 16:48 schrieb Rémy Maucherat: On Thu, Oct 15, 2020 at 2:31 PM Michael Osipov <1983-01...@gmx.net> wrote: On Wed, Oct 14, 2020 at 6:32 PM Michael Osipov wrote: Am 2020-10-14 um 12:32 schrieb R=C3=A9my Maucherat: On Tue, Oct 13, 2020 at 8:27 PM Michael Osipov

Re: [tomcat] branch 8.5.x updated: Always retry on a new connection, even when pooling

2020-10-19 Thread Michael Osipov
Am 2020-10-19 um 16:34 schrieb Rémy Maucherat: On Mon, Oct 19, 2020 at 3:11 PM Michael Osipov wrote: Am 2020-10-15 um 16:48 schrieb Rémy Maucherat: On Thu, Oct 15, 2020 at 2:31 PM Michael Osipov <1983-01...@gmx.net> wrote: On Wed, Oct 14, 2020 at 6:32 PM Michael Osipov wrote:

Re: Required build version(s)

2024-02-12 Thread Michael Osipov
I have complained about this many times... On 2024/02/12 20:58:14 Christopher Schultz wrote: > All, > > The release managers have bumped-up their tool chains to Java 17 or > later for all supported releases. Tomcat 11 requires Java 21. Tomcat > 8.5.x only requires Java 11. > > But the document

Re: Some remarks on panama libssl loading

2024-04-17 Thread Michael Osipov
Rainer, I do not fully understand the problem here. We use libtool to solve exactly this problem with versioned SONAMEs. It will create symlinks to the SONAME. Do you expect anyone even with dlopen() to load libfoo.o.{SOVERSION} unless it is strictly needed? E.g.: lrwxr-xr-x 1 root wheel

Re: Some remarks on panama libssl loading

2024-04-17 Thread Michael Osipov
On 2024/04/17 14:21:06 Rainer Jung wrote: > Am 17.04.24 um 15:34 schrieb Michael Osipov: > > Rainer, I do not fully understand the problem here. We use libtool to solve > > exactly this problem with versioned SONAMEs. It will create symlinks to the > > SONAME. > > Do

Our ASN.1 parser

2024-05-03 Thread Michael Osipov
Hi folks, currenly we have a minimalistic ASN.1 parser in the code tree w/o any testing since it assumes that the passed byte array is properly encoded. Now, I do have some X.509 related improvements which I'd like to bring upstream from my OSS project which I think will benefit everyone using

Re: Our ASN.1 parser

2024-05-03 Thread Michael Osipov
On 2024/05/03 08:59:17 Mark Thomas wrote: > > > On 03/05/2024 08:17, Michael Osipov wrote: > > Hi folks, > > > > currenly we have a minimalistic ASN.1 parser in the code tree w/o any > > testing > > The ASN.1 parsing is covered by the test suite. My ba

Re: Passing down arbitrary auth attributes down to Realm#authenticate()

2024-05-08 Thread Michael Osipov
On 2024/05/07 18:20:46 Mark Thomas wrote: > On 07/05/2024 19:06, Michael Osipov wrote: > > Folks, > > > > I am working on a custom Authenticator and Realm where I need to pass > > down a custom value to Realm#authenticate(), more specially a value > > obtained

Re: Passing down arbitrary auth attributes down to Realm#authenticate()

2024-05-08 Thread Michael Osipov
On 2024/05/07 21:10:33 Christopher Schultz wrote: > Michael, > > On 5/7/24 14:06, Michael Osipov wrote: > > Folks, > > > > I am working on a custom Authenticator and Realm where I need to pass > > down a custom value to Realm#authenticate(), more spe

Re: [tcnative] switch from using ERR_error_string to ERR_error_string_n

2024-05-15 Thread Michael Osipov
On 2024/05/14 21:15:03 Christopher Schultz wrote: > All, > > I'd like to basically globally-search-and-replace ERR_error_string for > ERR_error_string_n and use a #define constant for both the > initialization of all > > char err[256]; > > and similar strings and use that same constant for

Re: [tcnative] Should we make DEBUG builds available for Windows?

2024-05-16 Thread Michael Osipov
On 2024/05/15 13:12:44 Christopher Schultz wrote: > All, > > A recent thread was posted with a tcnative crash with not much in the > way of useful information in the error: > > https://lists.apache.org/thread/m1dbj3w1x1oqftqsbj7jbnvkm2073x1o > > The error details were: > > " > # EXCEPTION_ACC

Re: (tomcat-native) branch main updated: Ensure local reference capacity is available for array allocations.

2024-05-16 Thread Michael Osipov
Not for 1.3.x? On 2024/05/16 13:52:45 schu...@apache.org wrote: > This is an automated email from the ASF dual-hosted git repository. > > schultz pushed a commit to branch main > in repository https://gitbox.apache.org/repos/asf/tomcat-native.git > > > The following commit(s) were added to refs

Re: (tomcat-native) branch main updated: Use ERR_error_string_n instead of ERR_error_string.

2024-05-16 Thread Michael Osipov
Not for 1.3.x? On 2024/05/15 13:14:56 schu...@apache.org wrote: > This is an automated email from the ASF dual-hosted git repository. > > schultz pushed a commit to branch main > in repository https://gitbox.apache.org/repos/asf/tomcat-native.git > > > The following commit(s) were added to refs

Re: (tomcat-native) branch main updated: Ensure local reference capacity is available for array allocations.

2024-05-20 Thread Michael Osipov
On 2024/05/17 14:37:32 Christopher Schultz wrote: > Michael, > > On 5/16/24 10:39, Michael Osipov wrote: > > Not for 1.3.x? > > Good question. I wasn't sure how much energy we are expecting to put > into tcnative 1.3.x. > > I have no problem back-porting

Re: WebDAV and Microsoft clients

2024-05-22 Thread Michael Osipov
On 2024/05/22 17:21:07 Mark Thomas wrote: > All, > > I've been looking at the WebDav Servlet for the last few days and in > particular how it interacts with Microsoft clients. Which clients are we talking about? Windows Explorer? I know that DAV Redirector/Explorer are quite picky about TLS and

Re: WebDAV and Microsoft clients

2024-05-23 Thread Michael Osipov
On 2024/05/23 08:00:24 Mark Thomas wrote: > On 22/05/2024 21:47, Michael Osipov wrote: > > On 2024/05/22 17:21:07 Mark Thomas wrote: > >> All, > >> > >> I've been looking at the WebDav Servlet for the last few days and in > >> particular how i

Re: [PROPOSAL] Tomcat 10: Remove Server-Side Includes (SSI)

2024-06-07 Thread Michael Osipov
On 2024/06/07 08:05:34 Mark Thomas wrote: > On 06/06/2024 16:30, Christopher Schultz wrote: > > All, > > > > Resurrecting this thread from 2019. > > > > I'd like to remove the SSI configuration from conf/web.xml and put it > > into webapps/docs/ssi-howto.html. > > > > Are there any objections?

Re: [PROPOSAL] Tomcat 10: Remove Server-Side Includes (SSI)

2024-06-07 Thread Michael Osipov
On 2024/06/07 12:54:44 Christopher Schultz wrote: > Michael, > > On 6/7/24 08:01, Michael Osipov wrote: > > On 2024/06/07 08:05:34 Mark Thomas wrote: > >> On 06/06/2024 16:30, Christopher Schultz wrote: > >>> All, > >>> > >>> Resurr

Re: (tomcat) branch main updated: Add RealmBase.getPrincipal(GSSName, GSSCredential, GSSContext)

2024-06-11 Thread Michael Osipov
omcat.git > > > > > > The following commit(s) were added to refs/heads/main by this push: > > new 956c4577ca Add RealmBase.getPrincipal(GSSName, GSSCredential, > > GSSContext) > > 956c4577ca is described below > > > > commit 956c4577caedca7d77c5

Re: BND 7 and multi release JARs

2024-06-11 Thread Michael Osipov
On 2024/06/11 14:15:48 Rémy Maucherat wrote: > Hi, > > To fix the issue with having Java 22 classes in tomcat-coyote (and > embedded), I was looking at multi release JARs. I think it would work > fine *if* we were building the JARs ourselves (jarIt task), but then > the jars are actually rebuilt w

Re: BND 7 and multi release JARs

2024-06-11 Thread Michael Osipov
On 2024/06/11 14:15:48 Rémy Maucherat wrote: > Hi, > > To fix the issue with having Java 22 classes in tomcat-coyote (and > embedded), I was looking at multi release JARs. I think it would work > fine *if* we were building the JARs ourselves (jarIt task), but then > the jars are actually rebuilt w

Re: (tomcat) branch main updated: Add RealmBase.getPrincipal(GSSName, GSSCredential, GSSContext)

2024-06-11 Thread Michael Osipov
On 2024/06/11 16:47:37 Mark Thomas wrote: > On 11/06/2024 12:45, Michael Osipov wrote: > > On 2024/06/11 10:48:29 Mark Thomas wrote: > >> On 11/06/2024 11:14, micha...@apache.org wrote: > >>> This is an automated email from the ASF dual-hosted git repository. > &

Re: (tomcat) branch main updated: Restore warning to use only this listener with Server

2024-06-14 Thread Michael Osipov
On 2024/06/14 09:39:23 ma...@apache.org wrote: > This is an automated email from the ASF dual-hosted git repository. > > markt pushed a commit to branch main > in repository https://gitbox.apache.org/repos/asf/tomcat.git > > > The following commit(s) were added to refs/heads/main by this push: >

Re: Release Managers wanted

2021-05-13 Thread Michael Osipov
Am 2021-05-13 um 00:10 schrieb Mark Thomas: All, Assuming 7.0.109 is the last Tomcat 7 release I am the current release manager for 10.0.x, 9.0.x, 8.5.x, migration tool, native and mod_jk. I'd like to share the load and the knowledge a little. The step-by-step release process was documented

Re: [tomcat] branch main updated: Remove code deprecated in 10.1.x apart from the APR Endpoint

2021-05-25 Thread Michael Osipov
Am 2021-05-24 um 20:55 schrieb Mark Thomas: On 24/05/2021 18:43, Rémy Maucherat wrote: On Mon, May 24, 2021 at 6:34 PM wrote: This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git

Re: [tomcat] branch main updated: Remove code deprecated in 10.1.x apart from the APR Endpoint

2021-05-25 Thread Michael Osipov
Am 2021-05-25 um 09:44 schrieb Mark Thomas: On 25/05/2021 08:27, Michael Osipov wrote: Am 2021-05-24 um 20:55 schrieb Mark Thomas: On 24/05/2021 18:43, Rémy Maucherat wrote: On Mon, May 24, 2021 at 6:34 PM wrote: This is an automated email from the ASF dual-hosted git repository. markt

Re: [tomcat] branch main updated: Remove code deprecated in 10.1.x apart from the APR Endpoint

2021-05-25 Thread Michael Osipov
Am 2021-05-25 um 10:06 schrieb Mark Thomas: On 25/05/2021 09:03, Michael Osipov wrote: Am 2021-05-25 um 09:44 schrieb Mark Thomas: On 25/05/2021 08:27, Michael Osipov wrote: Am 2021-05-24 um 20:55 schrieb Mark Thomas: On 24/05/2021 18:43, Rémy Maucherat wrote: On Mon, May 24, 2021 at 6:34

APR connector on Windows 8+ fails to listen on all addresses

2021-05-25 Thread Michael Osipov
Folks, we needed to deploy Tomcat 9.0.x on a Windows server (no jokes, please), but the contractor wasn't able to configure the APR connector to accept on external interfaces even after a day. After my analysis it turned out be a subtile bug in libapr which affects Windows users only. I am als

Renamings with APR removal in 10.1.x

2021-05-25 Thread Michael Osipov
Mark, since you are going to remove all bits soon, will you rename Java items with still carry the APR substring? E.g., AprLifecycleListener will be a misleading name for obvious reasons. Michael - To unsubscribe, e-mail: de

Re: Renamings with APR removal in 10.1.x

2021-05-27 Thread Michael Osipov
Am 2021-05-26 um 15:29 schrieb Mark Thomas: On 25/05/2021 17:27, Michael Osipov wrote: Mark, since you are going to remove all bits soon, will you rename Java items with still carry the APR substring? E.g., AprLifecycleListener will be a misleading name for obvious reasons. I hadn&#

Re: APR connector on Windows 8+ fails to listen on all addresses

2021-05-27 Thread Michael Osipov
Am 2021-05-26 um 15:25 schrieb Mark Thomas: On 25/05/2021 17:23, Michael Osipov wrote: Nice research. Mark, I don't know when the next APR release will happen, but I consider this to be very annoying. Maybe it makes sense to push 1.2.29 with APR 1.7.1-dev to please Windows users?

Re: APR connector on Windows 8+ fails to listen on all addresses

2021-05-27 Thread Michael Osipov
8, 10? This [1] is what you need to make it work. Kindly respond to my PR. M [1] https://github.com/apache/apr/commit/2bcd4b3ddb108d16f1c758c00a45de9aef57aa3a On 25/05/2021 18:23, Michael Osipov wrote: Folks, we needed to deploy Tomcat 9.0.x on a Windows server (no jokes, please), bu

Re: APR connector on Windows 8+ fails to listen on all addresses

2021-05-27 Thread Michael Osipov
- AprLifecycleListener is enabled - No address configured for Connector - Logs confirm http-apr-8080 I can access the default home page via both IPv4 and IPv6 from both the local machine and remotely. On 25/05/2021 18:23, Michael Osipov wrote: >>> * Windows 8+ or Windows Server 2016/2019 * Have at l

Re: APR connector on Windows 8+ fails to listen on all addresses

2021-05-27 Thread Michael Osipov
Prefences in the OS: PS C:\Users\osipovmi> netsh interface ipv6 show prefixpolicies Der aktive Status wird abgefragt... Vorgänger Label Präfix -- - 50 0 :::0:0/96 40 1 ::1/128 30 2 ::/0 20

Re: APR connector on Windows 8+ fails to listen on all addresses

2021-05-27 Thread Michael Osipov
Am 2021-05-27 um 15:41 schrieb Mark Thomas: On 27/05/2021 13:24, Mark Thomas wrote: On 27/05/2021 11:12, Michael Osipov wrote: Am 2021-05-27 um 11:52 schrieb Mark Thomas: Michael, I think we need to step back a bit. I am unable to recreate the issue you describe. I am using: - Windows

Re: [VOTE] Release Apache Tomcat Native 1.2.30

2021-06-02 Thread Michael Osipov
Am 2021-06-01 um 11:53 schrieb Mark Thomas: Resending with correct subject line... Version 1.2.30 includes the following changes compared to 1.2.28 - Fix an issue where some Windows systems in some configurations would   only listen on IPv6 addresses on dual stack systems even though   config

Re: [tomcat] branch main updated: Portable temp path code

2021-06-30 Thread Michael Osipov
Am 2021-06-30 um 17:45 schrieb r...@apache.org: This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new d2e

  1   2   3   4   >