svn commit: r524626 - in /tomcat/site/trunk: docs/security-3.html xdocs/security-3.xml
Author: markt Date: Sun Apr 1 09:32:52 2007 New Revision: 524626 URL: http://svn.apache.org/viewvc?view=rev&rev=524626 Log: More tomcat 3 issues. Modified: tomcat/site/trunk/docs/security-3.html tomcat/site/trunk/xdocs/security-3.xml Modified: tomcat/site/trunk/docs/security-3.html URL: http://svn.apache.org/viewvc/tomcat/site/trunk/docs/security-3.html?view=diff&rev=524626&r1=524625&r2=524626 == --- tomcat/site/trunk/docs/security-3.html (original) +++ tomcat/site/trunk/docs/security-3.html Sun Apr 1 09:32:52 2007 @@ -469,6 +469,52 @@ attacks using specially crafted URLs. Affects: 3.0, 3.1-3.1.1, 3.2-3.2.1 + + +moderate: Information disclosure + http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0590";> + CVE-2001-0590 + + + +A specially crafted URL can be used to obtain the source for JSPs. + +Affects: 3.0, 3.1-3.1.1, 3.2-3.2.1 + + + + + + + + + + + + + + + +Fixed in Apache Tomcat 3.1 + + + + + + + + + +important: Information disclosure + http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-1210";> + CVE-2001-0590 + + + +source.jsp, provided as part of the examples, allows an attacker to read + arbitary files via a .. (dot dot) in the argument to source.jsp. + +Affects: 3.0 Modified: tomcat/site/trunk/xdocs/security-3.xml URL: http://svn.apache.org/viewvc/tomcat/site/trunk/xdocs/security-3.xml?view=diff&rev=524626&r1=524625&r2=524626 == --- tomcat/site/trunk/xdocs/security-3.xml (original) +++ tomcat/site/trunk/xdocs/security-3.xml Sun Apr 1 09:32:52 2007 @@ -128,6 +128,25 @@ attacks using specially crafted URLs. Affects: 3.0, 3.1-3.1.1, 3.2-3.2.1 + +moderate: Information disclosure + http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0590";> + CVE-2001-0590 + +A specially crafted URL can be used to obtain the source for JSPs. + +Affects: 3.0, 3.1-3.1.1, 3.2-3.2.1 + + + +important: Information disclosure + http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-1210";> + CVE-2001-0590 + +source.jsp, provided as part of the examples, allows an attacker to read + arbitary files via a .. (dot dot) in the argument to source.jsp. + +Affects: 3.0 - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
svn commit: r524636 - in /tomcat/site/trunk: docs/security-3.html xdocs/security-3.xml
Author: markt Date: Sun Apr 1 10:18:07 2007 New Revision: 524636 URL: http://svn.apache.org/viewvc?view=rev&rev=524636 Log: Better info on snoop servlet issues and change 3.3 to 3.3a Modified: tomcat/site/trunk/docs/security-3.html tomcat/site/trunk/xdocs/security-3.xml Modified: tomcat/site/trunk/docs/security-3.html URL: http://svn.apache.org/viewvc/tomcat/site/trunk/docs/security-3.html?view=diff&rev=524636&r1=524635&r2=524636 == --- tomcat/site/trunk/docs/security-3.html (original) +++ tomcat/site/trunk/docs/security-3.html Sun Apr 1 10:18:07 2007 @@ -233,19 +233,7 @@ adequately firewalled to ensure it is not accessible to remote attackers. There are no plans to issue a an update to Tomcat 3.x for this issue. -Affects: 3.0, 3.1-3.1.1, 3.2-3.2.4, 3.3-3.3.2 - - -low: Information disclosure - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-2006";> - CVE-2002-2006 - - -The snoop servlet installed as part of the examples includes output that - identifies the Tomcat installation path. There are no plans to issue a an - update to Tomcat 3.x for this issue. - -Affects: 3.0, 3.1-3.1.1, 3.2-3.2.4, 3.3-3.3.2 +Affects: 3.0, 3.1-3.1.1, 3.2-3.2.4, 3.3a-3.3.2 @@ -281,7 +269,7 @@ recommended that the examples web application is not installed on production servers. -Affects: 3.0, 3.1-3.1.1, 3.2-3.2.4, 3.3-3.3.1a +Affects: 3.0, 3.1-3.1.1, 3.2-3.2.4, 3.3a-3.3.1a @@ -316,7 +304,7 @@ trusted privileges enabling files outside of the web application to be read even when running under a security manager. -Affects: 3.0, 3.1-3.1.1, 3.2-3.2.4, 3.3-3.3.1 +Affects: 3.0, 3.1-3.1.1, 3.2-3.2.4, 3.3a-3.3.1 important: Information disclosure @@ -328,7 +316,7 @@ returned or a directory listing being returned even when a welcome file was defined. -Affects: 3.0, 3.1-3.1.1, 3.2-3.2.4, 3.3-3.3.1 +Affects: 3.0, 3.1-3.1.1, 3.2-3.2.4, 3.3a-3.3.1 @@ -364,7 +352,7 @@ sequence of such requests may cause all request processing threads, and hence Tomcat, to become unresponsive. -Affects: 3.0, 3.1-3.1.1, 3.2-3.2.4, 3.3 +Affects: 3.0, 3.1-3.1.1, 3.2-3.2.4, 3.3a @@ -379,8 +367,8 @@ - -Fixed in Apache Tomcat 3.3 + +Fixed in Apache Tomcat 3.3a @@ -400,6 +388,20 @@ file system path for a JSP. Affects: 3.2.3-3.2.4 + + +low: Information disclosure + http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-2006";> + CVE-2002-2006, + http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0760";> + CVE-2000-0760 + + +The snoop servlet installed as part of the examples includes output that + identifies the Tomcat installation path. There are no plans to issue a an + update to Tomcat 3.x for this issue. + +Affects: 3.0, 3.1-3.1.1, 3.2-3.2.4 Modified: tomcat/site/trunk/xdocs/security-3.xml URL: http://svn.apache.org/viewvc/tomcat/site/trunk/xdocs/security-3.xml?view=diff&rev=524636&r1=524635&r2=524636 == --- tomcat/site/trunk/xdocs/security-3.xml (original) +++ tomcat/site/trunk/xdocs/security-3.xml Sun Apr 1 10:18:07 2007 @@ -35,17 +35,7 @@ adequately firewalled to ensure it is not accessible to remote attackers. There are no plans to issue a an update to Tomcat 3.x for this issue. -Affects: 3.0, 3.1-3.1.1, 3.2-3.2.4, 3.3-3.3.2 - -low: Information disclosure - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-2006";> - CVE-2002-2006 - -The snoop servlet installed as part of the examples includes output that - identifies the Tomcat installation path. There are no plans to issue a an - update to Tomcat 3.x for this issue. - -Affects: 3.0, 3.1-3.1.1, 3.2-3.2.4, 3.3-3.3.2 +Affects: 3.0, 3.1-3.1.1, 3.2-3.2.4, 3.3a-3.3.2 @@ -58,7 +48,7 @@ recommended that the examples web application is not installed on production servers. -Affects: 3.0, 3.1-3.1.1, 3.2-3.2.4, 3.3-3.3.1a +Affects: 3.0, 3.1-3.1.1, 3.2-3.2.4, 3.3a-3.3.1a @@ -70,7 +60,7 @@ trusted privileges enabling files outside of the web application to be read even when running under a security manager. -Affects: 3.0, 3.1-3.1.1, 3.2-3.2.4, 3.3-3.3.1 +Affects: 3.0, 3.1-3.1.1, 3.2-3.2.4, 3.3a-3.3.1 important: Information disclosure http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0042";> @@ -80,7 +70,7 @@ returned or a directory listing being returned even when a welcome file was defined. -Affects: 3.0, 3.1-3.1.1, 3.2-3.2.4, 3.3-3.3.1 +Affects: 3.0, 3.1-3.1.1, 3.2-3.2.4, 3.3a-3.3.1 @@ -93,10 +83,10 @@ sequence of such requests may cause all request processin
Re: svn commit: r521417 - /tomcat/connectors/trunk/jk/native/common/jk_util.c
Hi Mladen, I checked out jk trunk today and built mod_jk on XP pro using Visual Studio .net against httpd 2.0.59, 2.2.4 and 1.3.37. The build worked without problems. I then made a little test using LogLevel debug without rotatelogs, so logging directly to file and the resulting log file contained unix line endings! More precisely: this happened for 2.0.59 and 2.2.4. For 1.3.37, mod_jk opened the log file, but all log output went directly to STDOUT or STDERR and produced error log lines like: [Sun Apr 01 18:58:22 2007] [error] mod_jk: jk_log_to_file [Sun Apr 01 18:58:22 2007] [4132:4580] [debug] ajp_init::jk_ajp_common.c (2137): buffer size: 0\n failed Could you check trunk in your build env? I could provide you my build results and I could also check yours against my Apache/Win. The reason why I don't simply assume my build is borked, is that I saw the same unix line endings in some environment running the official build download (before I introduced the patch). I think we don't use stdio. APR has apr_file_open() which uses CreateFile() and apr_file_write() which goes back to WriteFile() on Windows. Regards, Rainer Mladen Turk schrieb: > Rainer Jung wrote: >> I think I added those after I was frustrated by a customer whose >> mod_jk logs had all non-windows line endings. Sorry, I didn't really >> test your change, but my experience questions this patch. >> > > With you patch the line endings were \r,\r,\n > > >> Do we need to set text mode on the file? Will this work for direct >> logs and piped logs? >> > > Text mode is default unless you open the file with "ab+" > The "b" standing for binary. > > Probably not. The logs will have \n line endings unless > the log rotator itself mangles them. > > Anyhow, either we can have binary files (using read/write) > instead stdio for logs, and use platform specific lineends, > or depend on the stdio provided ones. > > Regards, > Mladen. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
svn commit: r524646 - in /tomcat/site/trunk: docs/security-3.html xdocs/security-3.xml
Author: markt Date: Sun Apr 1 10:45:10 2007 New Revision: 524646 URL: http://svn.apache.org/viewvc?view=rev&rev=524646 Log: The last of the CVE entries. Modified: tomcat/site/trunk/docs/security-3.html tomcat/site/trunk/xdocs/security-3.xml Modified: tomcat/site/trunk/docs/security-3.html URL: http://svn.apache.org/viewvc/tomcat/site/trunk/docs/security-3.html?view=diff&rev=524646&r1=524645&r2=524646 == --- tomcat/site/trunk/docs/security-3.html (original) +++ tomcat/site/trunk/docs/security-3.html Sun Apr 1 10:45:10 2007 @@ -401,7 +401,7 @@ identifies the Tomcat installation path. There are no plans to issue a an update to Tomcat 3.x for this issue. -Affects: 3.0, 3.1-3.1.1, 3.2-3.2.4 +Affects:3.1-3.1.1, 3.2-3.2.4 @@ -482,6 +482,41 @@ A specially crafted URL can be used to obtain the source for JSPs. Affects: 3.0, 3.1-3.1.1, 3.2-3.2.1 + + + + + + + + + + + + + + + +Fixed in Apache Tomcat 3.2.1 + + + + + + + + + +low: Information disclosure + http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0759";> + CVE-2000-0759 + + + +Requesting a JSP that does not exist results in an error page that + includes the full file system page of the current context. + +Affects: 3.1 Modified: tomcat/site/trunk/xdocs/security-3.xml URL: http://svn.apache.org/viewvc/tomcat/site/trunk/xdocs/security-3.xml?view=diff&rev=524646&r1=524645&r2=524646 == --- tomcat/site/trunk/xdocs/security-3.xml (original) +++ tomcat/site/trunk/xdocs/security-3.xml Sun Apr 1 10:45:10 2007 @@ -140,6 +140,28 @@ Affects: 3.0, 3.1-3.1.1, 3.2-3.2.1 + +low: Information disclosure + http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0759";> + CVE-2000-0759 + +Requesting a JSP that does not exist results in an error page that + includes the full file system page of the current context. + +Affects: 3.1 + +important: Information disclosure + http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0672";> + CVE-2000-0672 + +Access to the admin context is not protected. This context allows an + attacker to mount an arbitary file system path as a context. Any files + accessible from this file sytem path to the account under which Tomcat + is running are then visible to the attacker. + +Affects: 3.1 + + important: Information disclosure http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-1210";> - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
svn commit: r524649 - in /tomcat/connectors/trunk/jni/native: Makefile.in build/tcnative.m4
Author: mturk Date: Sun Apr 1 11:21:28 2007 New Revision: 524649 URL: http://svn.apache.org/viewvc?view=rev&rev=524649 Log: Fix detection of OpenSSL without using obsolete AC functions. Modified: tomcat/connectors/trunk/jni/native/Makefile.in tomcat/connectors/trunk/jni/native/build/tcnative.m4 Modified: tomcat/connectors/trunk/jni/native/Makefile.in URL: http://svn.apache.org/viewvc/tomcat/connectors/trunk/jni/native/Makefile.in?view=diff&rev=524649&r1=524648&r2=524649 == --- tomcat/connectors/trunk/jni/native/Makefile.in (original) +++ tomcat/connectors/trunk/jni/native/Makefile.in Sun Apr 1 11:21:28 2007 @@ -59,7 +59,7 @@ $(LIBTOOL) --mode=install $(INSTALL) -m 755 $(TARGET_LIB) $(DESTDIR)$(libdir) $(TARGET_LIB): $(OBJECTS) - $(LINK) @lib_target@ @TCNATIVE_LDFLAGS@ @TCNATIVE_LIBS@ @SSL_LIBS@ + $(LINK) @lib_target@ @TCNATIVE_LDFLAGS@ @TCNATIVE_LIBS@ check: $(TARGET_LIB) (cd test && $(MAKE) check) Modified: tomcat/connectors/trunk/jni/native/build/tcnative.m4 URL: http://svn.apache.org/viewvc/tomcat/connectors/trunk/jni/native/build/tcnative.m4?view=diff&rev=524649&r1=524648&r2=524649 == --- tomcat/connectors/trunk/jni/native/build/tcnative.m4 (original) +++ tomcat/connectors/trunk/jni/native/build/tcnative.m4 Sun Apr 1 11:21:28 2007 @@ -240,118 +240,144 @@ dnl preference to "--with-ssl=" if it was specified. dnl AC_DEFUN(TCN_CHECK_SSL_TOOLKIT,[ - dnl initialise the variables we use - tcn_ssltk_base="" - tcn_ssltk_inc="" - tcn_ssltk_lib="" - tcn_ssltk_type="" - AC_ARG_WITH(ssl, TCN_HELP_STRING(--with-ssl=DIR,OpenSSL SSL/TLS toolkit), [ -dnl If --with-ssl specifies a directory, we use that directory or fail -if test "x$withval" != "xyes" -a "x$withval" != "x"; then - dnl This ensures $withval is actually a directory and that it is absolute - tcn_ssltk_base="`cd $withval ; pwd`" -fi - ]) - if test "x$tcn_ssltk_base" = "x"; then -AC_MSG_RESULT(none) - else -AC_MSG_RESULT($tcn_ssltk_base) - fi +OPENSSL_WARNING= +AC_MSG_CHECKING(for OpenSSL library) +AC_ARG_WITH(ssl, +[ --with-ssl[=PATH] Build with OpenSSL [yes|no|path]], +use_openssl="$withval", use_openssl="auto") - dnl Run header and version checks - saved_CPPFLAGS=$CPPFLAGS - if test "x$tcn_ssltk_base" != "x"; then -tcn_ssltk_inc="-I$tcn_ssltk_base/include" -CPPFLAGS="$CPPFLAGS $tcn_ssltk_inc" - fi - - if test "x$tcn_ssltk_type" = "x"; then -AC_MSG_CHECKING(for OpenSSL version) -dnl First check for manditory headers -AC_CHECK_HEADERS([openssl/opensslv.h], [tcn_ssltk_type="openssl"], []) -if test "$tcn_ssltk_type" = "openssl"; then - dnl so it's OpenSSL - test for a good version - AC_TRY_COMPILE([#include ],[ -#if !defined(OPENSSL_VERSION_NUMBER) - #error "Missing openssl version" -#endif -#if (OPENSSL_VERSION_NUMBER < 0x0090701f) - #error "Unsuported openssl version " OPENSSL_VERSION_TEXT -#endif], - [AC_MSG_RESULT(OK)], - [dnl Unsuported OpenSSL version - AC_MSG_ERROR([Unsupported OpenSSL version. Use 0.9.7a or higher version]) - ]) - dnl Look for additional, possibly missing headers - AC_CHECK_HEADERS(openssl/engine.h) - if test -n "$PKGCONFIG"; then -$PKGCONFIG openssl -if test $? -eq 0; then - tcn_ssltk_inc="$tcn_ssltk_inc `$PKGCONFIG --cflags-only-I openssl`" - CPPFLAGS="$CPPFLAGS $tcn_ssltk_inc" +openssldirs="/usr /usr/local /usr/local/ssl /usr/pkg /usr/sfw" +if test "$use_openssl" = "auto" +then +for d in $openssldirs +do +if test -f $d/include/openssl/opensslv.h +then +use_openssl=$d +break +fi +done +fi +case "$use_openssl" in +no) +AC_MSG_RESULT(no) +TCN_OPENSSL_INC="" +USE_OPENSSL="" +;; +auto) +TCN_OPENSSL_INC="" +USE_OPENSSL="" +AC_MSG_RESULT(not found) +;; +*) +if test "$use_openssl" = "yes" +then +# User did not specify a path - guess it +for d in $openssldirs +do +if test -f $d/include/openssl/opensslv.h +then +use_openssl=$d +break +fi +done +if test "$use_openssl" = "yes" +then +AC_MSG_RESULT(not found) +AC_MSG_ERROR( +[OpenSSL was not found in any of $openssldirs; use --with-ssl=/path]) +fi fi - fi -else - AC_MSG_RESULT([no OpenSSL headers found]) -fi - fi - if test "$tcn_ssltk_type" != "openssl"; then -AC_MSG_ERROR([... No OpenSSL headers found]) - fi - dnl restore - CPPFLAGS=$saved_CPPFLAGS - if test "x$tcn_ssltk_type" = "x"; then -AC_MSG_ERROR([...No recognized SSL/TLS toolkit det
svn commit: r524650 - /tomcat/connectors/trunk/jni/native/srclib/VERSIONS
Author: mturk Date: Sun Apr 1 11:23:24 2007 New Revision: 524650 URL: http://svn.apache.org/viewvc?view=rev&rev=524650 Log: Update to latest stable version for both dependent libraries. Modified: tomcat/connectors/trunk/jni/native/srclib/VERSIONS Modified: tomcat/connectors/trunk/jni/native/srclib/VERSIONS URL: http://svn.apache.org/viewvc/tomcat/connectors/trunk/jni/native/srclib/VERSIONS?view=diff&rev=524650&r1=524649&r2=524650 == --- tomcat/connectors/trunk/jni/native/srclib/VERSIONS (original) +++ tomcat/connectors/trunk/jni/native/srclib/VERSIONS Sun Apr 1 11:23:24 2007 @@ -1,4 +1,4 @@ Use the following version of the libraries -- APR 1.2.7, http://apr.apache.org -- OpenSSL 0.9.8d, http://www.openssl.org +- APR 1.2.8, http://apr.apache.org +- OpenSSL 0.9.8e, http://www.openssl.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: svn commit: r521417 - /tomcat/connectors/trunk/jk/native/common/jk_util.c
Rainer Jung wrote: Hi Mladen, I think we don't use stdio. APR has apr_file_open() which uses CreateFile() and apr_file_write() which goes back to WriteFile() on Windows. We are using stdio for other web servers, so if you add CRLF then the IIS will be broken. Perhaps opening the files as binary for windows, and then forcing CRLF will do. However this would break cygwin builds thought. I'll check 1.3 tomorrow. Regards, Mladen. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
svn commit: r524653 - /tomcat/connectors/tags/other/TOMCAT_NATIVE_1_1_9/
Author: mturk Date: Sun Apr 1 11:39:31 2007 New Revision: 524653 URL: http://svn.apache.org/viewvc?view=rev&rev=524653 Log: Tag native version 1.1.9 Added: tomcat/connectors/tags/other/TOMCAT_NATIVE_1_1_9/ - copied from r524652, tomcat/connectors/trunk/ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: svn commit: r521417 - /tomcat/connectors/trunk/jk/native/common/jk_util.c
Hi Mladen, Aaah, OK, so I was always talking about Apache and you about IIS. That explains our different observations. If we don't find a solution making line endings work for IIS/Sun/Apache und Cygwin, we could also add the platform information to the jk_logger_t or it's logger_private and use this info in jk_log to determine the correct line endings. To make it perform, we could actually put the line ending and it's size into the jk_logger_t or it's private. Concerning apache 1.3: I did the same kind of build with 1.2.21 and 1.2.20 and got the same negative result (httpd opening the log file but writing all log output to stdout/stderr and to the error log). But: using your official build for 1.2.20 logging worked normally! So that problem seems to be related to my build, but I've got no idea what's wrong with my build. I built against an installed form of the official download apache_1.3.37-win32-x86-src.msi. Regards, Rainer Mladen Turk schrieb: > Rainer Jung wrote: >> Hi Mladen, >> >> I think we don't use stdio. APR has apr_file_open() which uses >> CreateFile() and apr_file_write() which goes back to WriteFile() on >> Windows. >> > > We are using stdio for other web servers, so if you add CRLF then > the IIS will be broken. Perhaps opening the files as binary for > windows, and then forcing CRLF will do. However this would break > cygwin builds thought. > > I'll check 1.3 tomorrow. > > Regards, > Mladen. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: svn commit: r521417 - /tomcat/connectors/trunk/jk/native/common/jk_util.c
Rainer Jung wrote: Hi Mladen, I built against an installed form of the official download apache_1.3.37-win32-x86-src.msi. ... and you are using VS 2005 I suppose? That won't work cause you have different MSVCRT's Regards, Mladen. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
svn commit: r524660 - in /tomcat/tc6.0.x/trunk: build.properties.default java/org/apache/catalina/core/AprLifecycleListener.java res/tomcat.nsi
Author: mturk Date: Sun Apr 1 12:37:58 2007 New Revision: 524660 URL: http://svn.apache.org/viewvc?view=rev&rev=524660 Log: Use the tomcat-native-1.1.9 as recommended version. Modified: tomcat/tc6.0.x/trunk/build.properties.default tomcat/tc6.0.x/trunk/java/org/apache/catalina/core/AprLifecycleListener.java tomcat/tc6.0.x/trunk/res/tomcat.nsi Modified: tomcat/tc6.0.x/trunk/build.properties.default URL: http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/build.properties.default?view=diff&rev=524660&r1=524659&r2=524660 == --- tomcat/tc6.0.x/trunk/build.properties.default (original) +++ tomcat/tc6.0.x/trunk/build.properties.default Sun Apr 1 12:37:58 2007 @@ -41,9 +41,9 @@ jdt.loc=http://sunsite.informatik.rwth-aachen.de/eclipse/downloads/drops/R-3.2.1-200609210945/eclipse-JDT-3.2.1.zip # - Tomcat native library - -tomcat-native.home=${base.path}/tomcat-native-1.1.8 +tomcat-native.home=${base.path}/tomcat-native-1.1.9 tomcat-native.tar.gz=${tomcat-native.home}/tomcat-native.tar.gz -tomcat-native.loc=${base-tomcat.loc}/tomcat-connectors/native/tomcat-native-1.1.8-src.tar.gz +tomcat-native.loc=${base-tomcat.loc}/tomcat-connectors/native/tomcat-native-1.1.9-src.tar.gz # - Commons DBCP, version 1.1 or later - commons-dbcp.version=1.2.1 Modified: tomcat/tc6.0.x/trunk/java/org/apache/catalina/core/AprLifecycleListener.java URL: http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/java/org/apache/catalina/core/AprLifecycleListener.java?view=diff&rev=524660&r1=524659&r2=524660 == --- tomcat/tc6.0.x/trunk/java/org/apache/catalina/core/AprLifecycleListener.java (original) +++ tomcat/tc6.0.x/trunk/java/org/apache/catalina/core/AprLifecycleListener.java Sun Apr 1 12:37:58 2007 @@ -59,7 +59,7 @@ protected static final int TCN_REQUIRED_MAJOR = 1; protected static final int TCN_REQUIRED_MINOR = 1; protected static final int TCN_REQUIRED_PATCH = 8; -protected static final int TCN_RECOMMENDED_PV = 8; +protected static final int TCN_RECOMMENDED_PV = 9; // -- Properties Modified: tomcat/tc6.0.x/trunk/res/tomcat.nsi URL: http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/res/tomcat.nsi?view=diff&rev=524660&r1=524659&r2=524660 == --- tomcat/tc6.0.x/trunk/res/tomcat.nsi (original) +++ tomcat/tc6.0.x/trunk/res/tomcat.nsi Sun Apr 1 12:37:58 2007 @@ -193,13 +193,13 @@ ; tcnative-1.dll is a symlink to the tcnative-1-ipv4.dll ; If IPV6 support is required, download the tcnative-1-ipv6.dll insted - ; The tcnative-1.dll from heanet.ie comes with OpenSSL 0.9.8d compiled in. + ; The tcnative-1.dll from heanet.ie comes with APR 1.2.8 and OpenSSL 0.9.8e compiled in. ; TODO: Depending on the JVM download the 32 or 64 bit version. - NSISdl::download /TIMEOUT=3 http://tomcat.heanet.ie/native/1.1.8/binaries/win32/tcnative-1.dll $INSTDIR\bin\tcnative-1.dll + NSISdl::download /TIMEOUT=3 http://tomcat.heanet.ie/native/1.1.9/binaries/win32/tcnative-1.dll $INSTDIR\bin\tcnative-1.dll Pop $0 StrCmp $0 success success SetDetailsView show -DetailPrint "download failed from http://tomcat.heanet.ie/native/1.1.8/binaries/win32/tcnative-1.dll: $0" +DetailPrint "download failed from http://tomcat.heanet.ie/native/1.1.9/binaries/win32/tcnative-1.dll: $0" success: ClearErrors - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: svn commit: r524660 - in /tomcat/tc6.0.x/trunk: build.properties.default java/org/apache/catalina/core/AprLifecycleListener.java res/tomcat.nsi
[EMAIL PROTECTED] wrote: Author: mturk Date: Sun Apr 1 12:37:58 2007 New Revision: 524660 URL: http://svn.apache.org/viewvc?view=rev&rev=524660 Log: Use the tomcat-native-1.1.9 as recommended version. I am against this change. Other than minor fixes, existing users should be allowed to continue using 1.1.8, I don't see any showstopper being fixed in that build. Rémy - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: svn commit: r524660 - in /tomcat/tc6.0.x/trunk: build.properties.default java/org/apache/catalina/core/AprLifecycleListener.java res/tomcat.nsi
Remy Maucherat wrote: [EMAIL PROTECTED] wrote: Author: mturk Date: Sun Apr 1 12:37:58 2007 New Revision: 524660 URL: http://svn.apache.org/viewvc?view=rev&rev=524660 Log: Use the tomcat-native-1.1.9 as recommended version. I am against this change. Other than minor fixes, existing users should be allowed to continue using 1.1.8, I don't see any showstopper being fixed in that build. But they can use it. protected static final int TCN_REQUIRED_PATCH = 8; -protected static final int TCN_RECOMMENDED_PV = 8; +protected static final int TCN_RECOMMENDED_PV = 9; So, the minimum required is 1.1.8 Regards, Mladen. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
svn commit: r524665 - /tomcat/connectors/tags/tc4.1.x/TOMCAT_4_1_35/trunk/
Author: markt Date: Sun Apr 1 13:30:00 2007 New Revision: 524665 URL: http://svn.apache.org/viewvc?view=rev&rev=524665 Log: Tagging 4.1.35 Added: tomcat/connectors/tags/tc4.1.x/TOMCAT_4_1_35/trunk/ - copied from r524664, tomcat/connectors/trunk/ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
svn commit: r524664 - /tomcat/container/tags/tc4.1.x/TOMCAT_4_1_35/tc4.1.x/
Author: markt Date: Sun Apr 1 13:29:54 2007 New Revision: 524664 URL: http://svn.apache.org/viewvc?view=rev&rev=524664 Log: Tagging 4.1.35 Added: tomcat/container/tags/tc4.1.x/TOMCAT_4_1_35/tc4.1.x/ - copied from r524663, tomcat/container/branches/tc4.1.x/ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
svn commit: r524666 - /tomcat/jasper/tags/tc4.1.x/TOMCAT_4_1_35/tc4.1.x/
Author: markt Date: Sun Apr 1 13:30:06 2007 New Revision: 524666 URL: http://svn.apache.org/viewvc?view=rev&rev=524666 Log: Tagging 4.1.35 Added: tomcat/jasper/tags/tc4.1.x/TOMCAT_4_1_35/tc4.1.x/ - copied from r524665, tomcat/jasper/branches/tc4.1.x/ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
svn commit: r524667 - /tomcat/servletapi/tags/servlet2.3-jsp1.2-tc4.x/TOMCAT_4_1_35/servlet2.3-jsp1.2-tc4.x/
Author: markt Date: Sun Apr 1 13:30:12 2007 New Revision: 524667 URL: http://svn.apache.org/viewvc?view=rev&rev=524667 Log: Tagging 4.1.35 Added: tomcat/servletapi/tags/servlet2.3-jsp1.2-tc4.x/TOMCAT_4_1_35/servlet2.3-jsp1.2-tc4.x/ - copied from r524666, tomcat/servletapi/branches/servlet2.3-jsp1.2-tc4.x/ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
svn commit: r524670 - /tomcat/container/tags/tc4.1.x/TOMCAT_4_1_36/
Author: markt Date: Sun Apr 1 13:31:15 2007 New Revision: 524670 URL: http://svn.apache.org/viewvc?view=rev&rev=524670 Log: Tagging 4.1.36 Added: tomcat/container/tags/tc4.1.x/TOMCAT_4_1_36/ - copied from r524669, tomcat/container/branches/tc4.1.x/ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
svn commit: r524671 - /tomcat/connectors/tags/tc4.1.x/TOMCAT_4_1_36/
Author: markt Date: Sun Apr 1 13:31:19 2007 New Revision: 524671 URL: http://svn.apache.org/viewvc?view=rev&rev=524671 Log: Tagging 4.1.36 Added: tomcat/connectors/tags/tc4.1.x/TOMCAT_4_1_36/ - copied from r524670, tomcat/connectors/trunk/ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
svn commit: r524672 - /tomcat/jasper/tags/tc4.1.x/TOMCAT_4_1_36/
Author: markt Date: Sun Apr 1 13:31:23 2007 New Revision: 524672 URL: http://svn.apache.org/viewvc?view=rev&rev=524672 Log: Tagging 4.1.36 Added: tomcat/jasper/tags/tc4.1.x/TOMCAT_4_1_36/ - copied from r524671, tomcat/jasper/branches/tc4.1.x/ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
svn commit: r524673 - /tomcat/servletapi/tags/servlet2.3-jsp1.2-tc4.x/TOMCAT_4_1_36/
Author: markt Date: Sun Apr 1 13:31:27 2007 New Revision: 524673 URL: http://svn.apache.org/viewvc?view=rev&rev=524673 Log: Tagging 4.1.36 Added: tomcat/servletapi/tags/servlet2.3-jsp1.2-tc4.x/TOMCAT_4_1_36/ - copied from r524672, tomcat/servletapi/branches/servlet2.3-jsp1.2-tc4.x/ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: svn commit: r524667 - /tomcat/servletapi/tags/servlet2.3-jsp1.2-tc4.x/TOMCAT_4_1_35/servlet2.3-jsp1.2-tc4.x/
[EMAIL PROTECTED] wrote: > Author: markt > Date: Sun Apr 1 13:30:12 2007 > New Revision: 524667 > > URL: http://svn.apache.org/viewvc?view=rev&rev=524667 > Log: > Tagging 4.1.35 > > Added: > > tomcat/servletapi/tags/servlet2.3-jsp1.2-tc4.x/TOMCAT_4_1_35/servlet2.3-jsp1.2-tc4.x/ > - copied from r524666, > tomcat/servletapi/branches/servlet2.3-jsp1.2-tc4.x/ An error in my script just over wrote the tags for 4.1.35. I'll fix this just as soon as I've checked which revision was tagged for 4.1.35. Sorry for the noise. Mark - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: svn commit: r524660 - in /tomcat/tc6.0.x/trunk: build.properties.default java/org/apache/catalina/core/AprLifecycleListener.java res/tomcat.nsi
Mladen Turk wrote: Remy Maucherat wrote: [EMAIL PROTECTED] wrote: Author: mturk Date: Sun Apr 1 12:37:58 2007 New Revision: 524660 URL: http://svn.apache.org/viewvc?view=rev&rev=524660 Log: Use the tomcat-native-1.1.9 as recommended version. I am against this change. Other than minor fixes, existing users should be allowed to continue using 1.1.8, I don't see any showstopper being fixed in that build. But they can use it. protected static final int TCN_REQUIRED_PATCH = 8; -protected static final int TCN_RECOMMENDED_PV = 8; +protected static final int TCN_RECOMMENDED_PV = 9; So, the minimum required is 1.1.8 Ok. Rémy - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
svn commit: r524678 - /tomcat/connectors/tags/tc4.1.x/TOMCAT_4_1_35/trunk/
Author: markt Date: Sun Apr 1 13:50:01 2007 New Revision: 524678 URL: http://svn.apache.org/viewvc?view=rev&rev=524678 Log: Fixing bad tag Removed: tomcat/connectors/tags/tc4.1.x/TOMCAT_4_1_35/trunk/ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
svn commit: r524679 - /tomcat/container/tags/tc4.1.x/TOMCAT_4_1_35/tc4.1.x/
Author: markt Date: Sun Apr 1 13:50:49 2007 New Revision: 524679 URL: http://svn.apache.org/viewvc?view=rev&rev=524679 Log: Fixing bad tag Removed: tomcat/container/tags/tc4.1.x/TOMCAT_4_1_35/tc4.1.x/ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
svn commit: r524680 - /tomcat/jasper/tags/tc4.1.x/TOMCAT_4_1_35/tc4.1.x/
Author: markt Date: Sun Apr 1 13:51:41 2007 New Revision: 524680 URL: http://svn.apache.org/viewvc?view=rev&rev=524680 Log: Fixing bad tag Removed: tomcat/jasper/tags/tc4.1.x/TOMCAT_4_1_35/tc4.1.x/ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
svn commit: r524681 - /tomcat/servletapi/tags/servlet2.3-jsp1.2-tc4.x/TOMCAT_4_1_35/servlet2.3-jsp1.2-tc4.x/
Author: markt Date: Sun Apr 1 13:52:26 2007 New Revision: 524681 URL: http://svn.apache.org/viewvc?view=rev&rev=524681 Log: Fixing bad tag Removed: tomcat/servletapi/tags/servlet2.3-jsp1.2-tc4.x/TOMCAT_4_1_35/servlet2.3-jsp1.2-tc4.x/ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: svn commit: r521417 - /tomcat/connectors/trunk/jk/native/common/jk_util.c
I used 2003 .net, but this includes a 7.0 version of msvcrt.dll. I build apache httpd 1.3 by myself and then mod_jk, and now everything works as expected. So you are right, the binary httpd download is not compatible with module compilation by vc++ 7.0. Any idea how one can make vc++ 7 use the 6.0 msvcrt dll? The 6.0 dll is included in the msi for apache 1.3 from the download. Regards, and thanks for the hint Rainer Mladen Turk schrieb: > Rainer Jung wrote: >> Hi Mladen, >> >> I built against an installed form of the official >> download apache_1.3.37-win32-x86-src.msi. >> > > ... and you are using VS 2005 I suppose? > That won't work cause you have different MSVCRT's > > Regards, > Mladen. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[VOTE] Release Tomcat 4.1.36
All, Please vote on releasing Apache Tomcat 4.1.36. Download from: http://tomcat.apache.org/dev/dist/apache-tomcat-4.1.36-src.tar.gz The standard distributions are also available from the same location. The vote will run for approximately 72 hours. Tomcat 4.1.36 is: [ ] Stable [ ] Beta [ ] Alpha Mark - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: svn commit: r521417 - /tomcat/connectors/trunk/jk/native/common/jk_util.c
Rainer Jung wrote: I used 2003 .net, but this includes a 7.0 version of msvcrt.dll. I build apache httpd 1.3 by myself and then mod_jk, and now everything works as expected. So you are right, the binary httpd download is not compatible with module compilation by vc++ 7.0. Any idea how one can make vc++ 7 use the 6.0 msvcrt dll? The 6.0 dll is included in the msi for apache 1.3 from the download. You cannot do that unless you have VS 6.0. This is BTW the reason why the httpd binaries are compiled with msvcrt.dll (the binaries can be used with msvcrt71 or msvcrt80, but not the other way round). Regards, Mladen. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
svn commit: r524723 - /tomcat/connectors/trunk/jni/native/build/tcnative.m4
Author: mturk Date: Sun Apr 1 21:51:52 2007 New Revision: 524723 URL: http://svn.apache.org/viewvc?view=rev&rev=524723 Log: Do not check if openssl works. The version check is enough. Modified: tomcat/connectors/trunk/jni/native/build/tcnative.m4 Modified: tomcat/connectors/trunk/jni/native/build/tcnative.m4 URL: http://svn.apache.org/viewvc/tomcat/connectors/trunk/jni/native/build/tcnative.m4?view=diff&rev=524723&r1=524722&r2=524723 == --- tomcat/connectors/trunk/jni/native/build/tcnative.m4 (original) +++ tomcat/connectors/trunk/jni/native/build/tcnative.m4 Sun Apr 1 21:51:52 2007 @@ -314,21 +314,6 @@ saved_libs="$LIBS" CFLAGS="$CFLAGS $TCN_OPENSSL_INC" LIBS="$LIBS $TCN_OPENSSL_LIBS" -AC_MSG_CHECKING(whether linking with OpenSSL works) -AC_TRY_RUN([ -#include -int main() { -ERR_clear_error(); -return (0); -} -], -[AC_MSG_RESULT(yes)], -[AC_MSG_RESULT(no) - AC_MSG_ERROR(Could not run test program using OpenSSL from -$use_openssl/lib and $use_openssl/include. -Please check the argument to --with-ssl and your -shared library configuration (e.g., LD_LIBRARY_PATH).)], -[AC_MSG_RESULT(assuming it does work on target platform)]) AC_ARG_ENABLE(openssl-version-check, [AC_HELP_STRING([--enable-openssl-version-check], - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
svn commit: r524725 - /tomcat/connectors/trunk/jni/native/src/ssl.c
Author: mturk Date: Sun Apr 1 22:22:42 2007 New Revision: 524725 URL: http://svn.apache.org/viewvc?view=rev&rev=524725 Log: In case we don't specify the global randFile use like mod_ssl does with builtin. This fixes long init on some platforms. Modified: tomcat/connectors/trunk/jni/native/src/ssl.c Modified: tomcat/connectors/trunk/jni/native/src/ssl.c URL: http://svn.apache.org/viewvc/tomcat/connectors/trunk/jni/native/src/ssl.c?view=diff&rev=524725&r1=524724&r2=524725 == --- tomcat/connectors/trunk/jni/native/src/ssl.c (original) +++ tomcat/connectors/trunk/jni/native/src/ssl.c Sun Apr 1 22:22:42 2007 @@ -259,7 +259,7 @@ file = ssl_global_rand_file; if (file == NULL) -file = RAND_file_name(buffer, sizeof(buffer)); +return -1; else if ((n = RAND_egd(file)) > 0) { return n; } - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
svn commit: r524726 - in /tomcat/connectors/trunk/jni: jnirelease.sh native/include/tcn_version.h native/os/win32/libtcnative.rc
Author: mturk Date: Sun Apr 1 22:25:55 2007 New Revision: 524726 URL: http://svn.apache.org/viewvc?view=rev&rev=524726 Log: Increment version number and switch back to current and trunk for release. Modified: tomcat/connectors/trunk/jni/jnirelease.sh tomcat/connectors/trunk/jni/native/include/tcn_version.h tomcat/connectors/trunk/jni/native/os/win32/libtcnative.rc Modified: tomcat/connectors/trunk/jni/jnirelease.sh URL: http://svn.apache.org/viewvc/tomcat/connectors/trunk/jni/jnirelease.sh?view=diff&rev=524726&r1=524725&r2=524726 == --- tomcat/connectors/trunk/jni/jnirelease.sh (original) +++ tomcat/connectors/trunk/jni/jnirelease.sh Sun Apr 1 22:25:55 2007 @@ -17,7 +17,7 @@ # # Default place to look for apr source. Can be overridden with # --with-apr=[directory] -apr_src_dir=`pwd`/srclib/apr-1.2.7 +apr_src_dir=`pwd`/srclib/apr-1.2.8 while test $# -gt 0 do @@ -50,12 +50,12 @@ # Replace JKJNIEXT with branch/or tag # and JKJNIVER by the version like 1.1.0 -# JKJNIEXT="trunk" -# JKJNIVER="current" -JKJNIEXT="tags/other/TOMCAT_NATIVE_1_1_9" -JKJNIVER="1.1.9" +JKJNIEXT="trunk" +JKJNIVER="current" +# JKJNIEXT="tags/other/TOMCAT_NATIVE_1_1_10" +# JKJNIVER="1.1.10" SVNBASE=https://svn.apache.org/repos/asf/tomcat/connectors/ -JKJNIDIST=tomcat-connectors-${JKJNIVER}-src +JKJNIDIST=tomcat-native-${JKJNIVER}-src rm -rf ${JKJNIDIST} mkdir -p ${JKJNIDIST}/jni svn export $SVNBASE/${JKJNIEXT}/jni/native ${JKJNIDIST}/jni/native @@ -73,7 +73,7 @@ tar cfz ${JKJNIDIST}.tar.gz ${JKJNIDIST} # # Create Win32 source distribution -JKJNIDIST=tomcat-connectors-${JKJNIVER}-win32-src +JKJNIDIST=tomcat-native-${JKJNIVER}-win32-src rm -rf ${JKJNIDIST} mkdir -p ${JKJNIDIST}/jni svn export --native-eol CRLF $SVNBASE/${JKJNIEXT}/jni/native ${JKJNIDIST}/jni/native Modified: tomcat/connectors/trunk/jni/native/include/tcn_version.h URL: http://svn.apache.org/viewvc/tomcat/connectors/trunk/jni/native/include/tcn_version.h?view=diff&rev=524726&r1=524725&r2=524726 == --- tomcat/connectors/trunk/jni/native/include/tcn_version.h (original) +++ tomcat/connectors/trunk/jni/native/include/tcn_version.h Sun Apr 1 22:25:55 2007 @@ -69,7 +69,7 @@ #define TCN_MINOR_VERSION 1 /** patch level */ -#define TCN_PATCH_VERSION 9 +#define TCN_PATCH_VERSION 10 /** * This symbol is defined for internal, "development" copies of TCN. This Modified: tomcat/connectors/trunk/jni/native/os/win32/libtcnative.rc URL: http://svn.apache.org/viewvc/tomcat/connectors/trunk/jni/native/os/win32/libtcnative.rc?view=diff&rev=524726&r1=524725&r2=524726 == --- tomcat/connectors/trunk/jni/native/os/win32/libtcnative.rc (original) +++ tomcat/connectors/trunk/jni/native/os/win32/libtcnative.rc Sun Apr 1 22:25:55 2007 @@ -19,7 +19,7 @@ "specific language governing permissions and " \ "limitations under the License." -#define TCN_VERISON "1.1.9" +#define TCN_VERISON "1.1.10" 1000 ICON "apache.ico" 1001 DIALOGEX 0, 0, 252, 51 @@ -35,8 +35,8 @@ END 1 VERSIONINFO - FILEVERSION 1,1,9,0 - PRODUCTVERSION 1,1,9,0 + FILEVERSION 1,1,10,0 + PRODUCTVERSION 1,1,10,0 FILEFLAGSMASK 0x3fL #ifdef _DEBUG FILEFLAGS 0x1L - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
svn commit: r524728 - /tomcat/connectors/trunk/jni/jnirelease.sh
Author: mturk Date: Sun Apr 1 22:41:42 2007 New Revision: 524728 URL: http://svn.apache.org/viewvc?view=rev&rev=524728 Log: Prepare tag 1.1.10 Modified: tomcat/connectors/trunk/jni/jnirelease.sh Modified: tomcat/connectors/trunk/jni/jnirelease.sh URL: http://svn.apache.org/viewvc/tomcat/connectors/trunk/jni/jnirelease.sh?view=diff&rev=524728&r1=524727&r2=524728 == --- tomcat/connectors/trunk/jni/jnirelease.sh (original) +++ tomcat/connectors/trunk/jni/jnirelease.sh Sun Apr 1 22:41:42 2007 @@ -50,10 +50,10 @@ # Replace JKJNIEXT with branch/or tag # and JKJNIVER by the version like 1.1.0 -JKJNIEXT="trunk" -JKJNIVER="current" -# JKJNIEXT="tags/other/TOMCAT_NATIVE_1_1_10" -# JKJNIVER="1.1.10" +# JKJNIEXT="trunk" +# JKJNIVER="current" +JKJNIEXT="tags/other/TOMCAT_NATIVE_1_1_10" +JKJNIVER="1.1.10" SVNBASE=https://svn.apache.org/repos/asf/tomcat/connectors/ JKJNIDIST=tomcat-native-${JKJNIVER}-src rm -rf ${JKJNIDIST} - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
svn commit: r524729 - /tomcat/connectors/tags/other/TOMCAT_NATIVE_1_1_10/
Author: mturk Date: Sun Apr 1 22:42:52 2007 New Revision: 524729 URL: http://svn.apache.org/viewvc?view=rev&rev=524729 Log: Tag 1.1.10 with OpenSSL detection and init fix Added: tomcat/connectors/tags/other/TOMCAT_NATIVE_1_1_10/ - copied from r524728, tomcat/connectors/trunk/ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Bug report for Tomcat 3 [2007/04/01]
+---+ | Bugzilla Bug ID | | +-+ | | Status: UNC=Unconfirmed NEW=New ASS=Assigned| | | OPN=ReopenedVER=Verified(Skipped Closed/Resolved) | | | +-+ | | | Severity: BLK=Blocker CRI=CriticalMAJ=Major | | | | MIN=Minor NOR=Normal ENH=Enhancement | | | | +-+ | | | | Date Posted | | | | | +--+ | | | | | Description | | | | | | | | 2350|Ver|Nor|2001-06-27|ServletConfig.getInitParameter() requires url-patt| | 5331|Ass|Nor|2001-12-09|getPathInfo vs URL normalization | | 6027|Inf|Maj|2002-01-25|Tomcat Automatically shuts down as service | | 6488|Ver|Maj|2002-02-15|Error: 304. Apparent bug in default ErrorHandler c| | 7785|Inf|Blk|2002-04-06|tomcat bug in context reloading | | 7863|Inf|Maj|2002-04-09|I have a problem when running Tomcat with IIS | | 8187|Inf|Cri|2002-04-17|Errors when Tomcat used with MS Access database | | 9737|Ver|Nor|2002-06-10|ArrayIndexOutOfBoundsException when sending just p| |10047|Ass|Cri|2002-06-20|IllegalStateException | |10406|Ass|Cri|2002-07-02|IllegalStateException | |11087|Inf|Blk|2002-07-23|IllegalStateException | |12156|Inf|Cri|2002-08-29|Apache and Tomcat 3.3.1 Interworking problem | |16363|Ass|Cri|2003-01-23|Stack Overflow accessing compiled JSP - Tomcat 3.2| |39250|Inf|Cri|2006-04-07|Tomcat 3.2.1 + JDK 1.4| +-+---+---+--+--+ | Total 14 bugs | +---+ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Bug report for Tomcat 4 [2007/04/01]
+---+ | Bugzilla Bug ID | | +-+ | | Status: UNC=Unconfirmed NEW=New ASS=Assigned| | | OPN=ReopenedVER=Verified(Skipped Closed/Resolved) | | | +-+ | | | Severity: BLK=Blocker CRI=CriticalMAJ=Major | | | | MIN=Minor NOR=Normal ENH=Enhancement | | | | +-+ | | | | Date Posted | | | | | +--+ | | | | | Description | | | | | | | | 3839|Opn|Enh|2001-09-26|Problem bookmarking login page| | 4227|Opn|Enh|2001-10-17|Invalid CGI path | | 5329|New|Enh|2001-12-08|NT Service exits startup before Tomcat is finished| | 5795|New|Enh|2002-01-10|Catalina Shutdown relies on localhost causing prob| | 5829|New|Enh|2002-01-13|StandardManager needs to cope with sessions throwi| | 5985|New|Enh|2002-01-23|Tomcat should perform a more restrictive validatio| | 6600|Opn|Enh|2002-02-20|enodeURL adds 'jsession' when 'isRequestedSessionI| | 6614|New|Enh|2002-02-21|Have Bootstrap and StandardClassLoader use the sam| | 6671|New|Enh|2002-02-25|Simple custom tag example uses old declaration sty| | 7043|New|Enh|2002-03-12|database user and password for JDBC Based Store | | 7374|New|Enh|2002-03-22|Apache Tomcat/4.0.1 message on standard output| | 7676|New|Enh|2002-04-02|Allow name property to use match experssions in without className in server.xml produces N| |11069|Opn|Enh|2002-07-23|Tomcat not flag error if tld is outside of /WEB-IN| |11129|New|Enh|2002-07-24|New valve for putting the sessionIDs in the reques| |11248|New|Enh|2002-07-29|DefaultServlet doesn't send expires header| |11754|Opn|Enh|2002-08-15|Synchronous shutdown script - shutdown.sh should w| |12069|New|Enh|2002-08-27|Creation of more HttpSession objects for one previ| |12658|New|Enh|2002-09-15|a proxy host and port at the element level | |12766|New|Enh|2002-09-18|Tomcat should use tld files in /WEB-INF/ over vers| |13309|Opn|Enh|2002-10-04|Catalina calls System.exit() | |13634|New|Enh|2002-10-15|Allowing system properties to be substituted in co| |13689|Opn|Enh|2002-10-16|Classloader paths for 'Common' classes and librari| |13731|New|Enh|2002-10-17|Final request, response, session and other variabl| |13941|New|Enh|2002-10-24|reload is VERY slow | |13965|New|Enh|2002-10-25|Catalina.sh correction request for Tru64 Unix | |14097|New|Enh|2002-10-30|hardcoded registry value for vm lets tomcat servic| |14416|New|Enh|2002-11-10|blank tag name in TLD cause NullPointerException | |14635|New|Enh|2002-11-18|Should be possible not to have -MM-DD in log f| |14766|New|Enh|2002-11-22|Redirect Vavle| |14993|New|Enh|2002-12-02|Possible obselete synchronized declaration| |15115|New|Enh|2002-12-05|correct docs... XML parser *cannot* be overridden | |15417|Opn|Enh|2002-12-16|Add port for forced compilation of JSP pages | |15688|New|Enh|2002-12-27|full-qualified names instead of imports | |15941|New|Enh|2003-01-10|Expose rootCause exceptions at deeper levels | |16294|New|Enh|2003-01-21|Configurable URL Decoding.| |16357|New|Enh|2003-01-23|"connection timeout reached" | |16531|New|Enh|2003-01-29|Updating already deployed ".war" files in a single| |16579|New|Enh|2003-01-30|documentation page layout/style breaks wrapping to| |16596|New|Enh|2003-01-30|option for disabling log rotation | |17070|New|Enh|2003-02-14|The Catalina Ant tasks do not allow for 'reusable'| |17146|New|Enh|2003-02-18|Simplify build.xml using
Bug report for Watchdog [2007/04/01]
+---+ | Bugzilla Bug ID | | +-+ | | Status: UNC=Unconfirmed NEW=New ASS=Assigned| | | OPN=ReopenedVER=Verified(Skipped Closed/Resolved) | | | +-+ | | | Severity: BLK=Blocker CRI=CriticalMAJ=Major | | | | MIN=Minor NOR=Normal ENH=Enhancement | | | | +-+ | | | | Date Posted | | | | | +--+ | | | | | Description | | | | | | | | 278|Unc|Nor|2000-12-04|Bug in GetParameterValuesTestServlet.java file Bug| | 279|Unc|Nor|2000-12-04|Logical Error in GetParameterValuesTestServlet Bug| | 469|Unc|Nor|2001-01-17|in example-taglib.tld "urn" should be "uri" BugRat| | 470|Unc|Nor|2001-01-17|FAIL positiveForward.jsp and positiveInclude.jsp B| | 9634|New|Enh|2002-06-05|No tests exist for ServletContext.getResourcePaths| |10703|New|Enh|2002-07-11|Need to test getRequestURI after RequestDispatcher| |11336|New|Enh|2002-07-31|Test wrapped path methods with RD.foward()| |11663|New|Maj|2002-08-13|JSP precompile tests rely on Jasper specific behav| |11664|New|Maj|2002-08-13|A sweep is needed of all Watchdog 4.0 tag librarie| |11665|New|Maj|2002-08-13|ServletToJSPErrorPageTest and ServletToServletErro| |11666|New|Maj|2002-08-13|SetBufferSize_1TestServlet is invalid.| |14004|New|Maj|2002-10-28|Incorrent behaviour of all attribute-related lifec| |15504|New|Nor|2002-12-18|JSP positiveGetValues test relies on order preserv| |24649|New|Nor|2003-11-12|getRemoteHost fails when agent has uppercase chara| |29398|New|Nor|2004-06-04|Update site and note current status | +-+---+---+--+--+ | Total 15 bugs | +---+ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Bug report for Tomcat 5 [2007/04/01]
+---+ | Bugzilla Bug ID | | +-+ | | Status: UNC=Unconfirmed NEW=New ASS=Assigned| | | OPN=ReopenedVER=Verified(Skipped Closed/Resolved) | | | +-+ | | | Severity: BLK=Blocker CRI=CriticalMAJ=Major | | | | MIN=Minor NOR=Normal ENH=Enhancement | | | | +-+ | | | | Date Posted | | | | | +--+ | | | | | Description | | | | | | | | 2500|Opn|Min|2001-07-08|FileNotFoundException from service() unintentional| |22679|Ver|Enh|2003-08-24|how to access ssl session ID out of tomcat to prev| |28039|Opn|Enh|2004-03-30|Cluster Support for SingleSignOn | |29160|Ver|Enh|2004-05-23|precompile problem: _jspx_meth_* (javax.servlet.js| |29494|Inf|Enh|2004-06-10|No way to set PATH when running as a service on Wi| |30028|Opn|Nor|2004-07-10|session attributes Map may become inconsistent sta| |30241|Ver|Enh|2004-07-21|Enhance build script to use branch argument when c| |33262|Inf|Enh|2005-01-27|Service Manager autostart should check for adminis| |33453|Opn|Enh|2005-02-08|Jasper should recompile JSP files whose datestamps| |33650|Inf|Enh|2005-02-19|Jasper performance for multiple files processing | |33671|Opn|Enh|2005-02-21|Manual Windows service installation with custom na| |34801|New|Enh|2005-05-08|PATCH: CGIServlet does not terminate child after a| |34805|Ass|Enh|2005-05-08|warn about invalid security constraint url pattern| |34868|Ass|Enh|2005-05-11|allow to register a trust store for a session that| |35054|Inf|Enh|2005-05-25|warn if appBase is not existing as a File or direc| |35869|Inf|Enh|2005-07-26|Can't run as a service on Windows Server 2003 64-B| |36121|Opn|Maj|2005-08-10|Including JSP's changes working directory | |36133|Inf|Enh|2005-08-10|Support JSS SSL implementation| |36169|New|Enh|2005-08-12|[PATCH] Enable chunked encoding for IIS JK connect| |36362|New|Enh|2005-08-25|missing check for Java reserved keywords in tag fi| |36540|Inf|Enh|2005-09-07|pooled cluster replication does not seem ensure sy| |36569|Inf|Enh|2005-09-09|Redirects produce illegal URL's | |36837|Inf|Enh|2005-09-28|Looking for ProxyHandler implementation of Http re| |36922|Inf|Enh|2005-10-04|setup.sh file mis-advertised and missing | |36923|New|Nor|2005-10-05|Deactivated EL expressions are not parsed for jsp | |37018|Ass|Enh|2005-10-11|Document how to use tomcat-SSL with a pkcs11 token| |37072|Ass|Nor|2005-10-13|Encoding mismatch in error condition | |37084|Opn| |2005-10-14|JspC from ant fails on JSPs that use custom taglib| |37326|Ass|Nor|2005-11-01|No error reported when has non-exist| |37334|Inf|Enh|2005-11-02|Realm digest property not aligned with the adminis| |37449|Opn|Enh|2005-11-10|Two UserDatabaseRealm break manager user | |37485|Inf|Enh|2005-11-14|I'd like to run init SQL after JDBC Connection cre| |37498|Inf|Nor|2005-11-14|[PATCH] NPE in org.apache.catalina.core.ContainerB| |37515|Inf|Nor|2005-11-15|smap not generated by JspC when used from Ant for | |37627|Opn|Nor|2005-11-24|Slow and incomplete dynamic content generation aft| |37785|Inf|Nor|2005-12-05|Changing startup type via Tomcat Monitor does not | |37794|Opn|Nor|2005-12-05|getParameter() fails on POST with transfer-encodin| |37797|Inf|Maj|2005-12-05|Configure Tomcat utility truncates classpath to 96| |37822|Opn|Nor|2005-12-07|WebappClassLoader interfering with Catalina core c| |37834|Ass|Nor|2005-12-08|compressableMimeTypes not working properly| |37847|Ass|Enh|2005-12-09|Allow User To Optionally Specify Catalina Output F| |37869|Opn|Nor|2005-12-12|Cannot obtain client certificate with SSL / client| |37918|Inf|Nor|2005-12-15|EL cannot find valid getter from object when using| |37956|Opn|Enh|2005-12-18|Make 'set static fields to null' ClassLoader leak | |37984|New|Nor|2005-12-21|JNDIRealm.java not able to handle MD5 password| |38001|Inf|Nor|2005-12-22|TruncatedClassFile when loadind applets | |38046|Ass| |2005-12-27|apache-tomcat-5.5.14-deployer doesn't work (Illega| |38131|Inf|Enh|2006-01-05|WatchedResource does not work if app is outside "w| |38216|Inf|Enh|2006-01-10|Extend Jmxproxy to allow call of MBean Operations | |38261|New|Nor|2006-01-13|XML validation fails when war-files with libraries| |38268|Inf|Enh|2006-01-13|User friendly: Need submit button on adding/deleti| |38290|Inf|Nor|2006-
svn commit: r524730 - in /tomcat/tc6.0.x/trunk: build.properties.default java/org/apache/catalina/core/AprLifecycleListener.java res/tomcat.nsi
Author: mturk Date: Sun Apr 1 23:24:33 2007 New Revision: 524730 URL: http://svn.apache.org/viewvc?view=rev&rev=524730 Log: Use the tomcat-native-1.1.10 as recommended version. Note: 1.1.9 was broken for OpenSSL builds on some platforms. 1.1.8 will continue to work, although on some platforms there can be JVM crash if IPV6 is enabled and platform doesn't support IPV4 addresses on IPV6 sockets. Modified: tomcat/tc6.0.x/trunk/build.properties.default tomcat/tc6.0.x/trunk/java/org/apache/catalina/core/AprLifecycleListener.java tomcat/tc6.0.x/trunk/res/tomcat.nsi Modified: tomcat/tc6.0.x/trunk/build.properties.default URL: http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/build.properties.default?view=diff&rev=524730&r1=524729&r2=524730 == --- tomcat/tc6.0.x/trunk/build.properties.default (original) +++ tomcat/tc6.0.x/trunk/build.properties.default Sun Apr 1 23:24:33 2007 @@ -41,9 +41,9 @@ jdt.loc=http://sunsite.informatik.rwth-aachen.de/eclipse/downloads/drops/R-3.2.1-200609210945/eclipse-JDT-3.2.1.zip # - Tomcat native library - -tomcat-native.home=${base.path}/tomcat-native-1.1.9 +tomcat-native.home=${base.path}/tomcat-native-1.1.10 tomcat-native.tar.gz=${tomcat-native.home}/tomcat-native.tar.gz -tomcat-native.loc=${base-tomcat.loc}/tomcat-connectors/native/tomcat-native-1.1.9-src.tar.gz +tomcat-native.loc=${base-tomcat.loc}/tomcat-connectors/native/tomcat-native-1.1.10-src.tar.gz # - Commons DBCP, version 1.1 or later - commons-dbcp.version=1.2.1 Modified: tomcat/tc6.0.x/trunk/java/org/apache/catalina/core/AprLifecycleListener.java URL: http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/java/org/apache/catalina/core/AprLifecycleListener.java?view=diff&rev=524730&r1=524729&r2=524730 == --- tomcat/tc6.0.x/trunk/java/org/apache/catalina/core/AprLifecycleListener.java (original) +++ tomcat/tc6.0.x/trunk/java/org/apache/catalina/core/AprLifecycleListener.java Sun Apr 1 23:24:33 2007 @@ -59,7 +59,7 @@ protected static final int TCN_REQUIRED_MAJOR = 1; protected static final int TCN_REQUIRED_MINOR = 1; protected static final int TCN_REQUIRED_PATCH = 8; -protected static final int TCN_RECOMMENDED_PV = 9; +protected static final int TCN_RECOMMENDED_PV = 10; // -- Properties Modified: tomcat/tc6.0.x/trunk/res/tomcat.nsi URL: http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/res/tomcat.nsi?view=diff&rev=524730&r1=524729&r2=524730 == --- tomcat/tc6.0.x/trunk/res/tomcat.nsi (original) +++ tomcat/tc6.0.x/trunk/res/tomcat.nsi Sun Apr 1 23:24:33 2007 @@ -195,11 +195,11 @@ ; If IPV6 support is required, download the tcnative-1-ipv6.dll insted ; The tcnative-1.dll from heanet.ie comes with APR 1.2.8 and OpenSSL 0.9.8e compiled in. ; TODO: Depending on the JVM download the 32 or 64 bit version. - NSISdl::download /TIMEOUT=3 http://tomcat.heanet.ie/native/1.1.9/binaries/win32/tcnative-1.dll $INSTDIR\bin\tcnative-1.dll + NSISdl::download /TIMEOUT=3 http://tomcat.heanet.ie/native/1.1.10/binaries/win32/tcnative-1.dll $INSTDIR\bin\tcnative-1.dll Pop $0 StrCmp $0 success success SetDetailsView show -DetailPrint "download failed from http://tomcat.heanet.ie/native/1.1.9/binaries/win32/tcnative-1.dll: $0" +DetailPrint "download failed from http://tomcat.heanet.ie/native/1.1.10/binaries/win32/tcnative-1.dll: $0" success: ClearErrors - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
svn commit: r524732 - /tomcat/tc6.0.x/trunk/webapps/docs/changelog.xml
Author: mturk Date: Sun Apr 1 23:35:20 2007 New Revision: 524732 URL: http://svn.apache.org/viewvc?view=rev&rev=524732 Log: Document APR connector native changes. Modified: tomcat/tc6.0.x/trunk/webapps/docs/changelog.xml Modified: tomcat/tc6.0.x/trunk/webapps/docs/changelog.xml URL: http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/webapps/docs/changelog.xml?view=diff&rev=524732&r1=524731&r2=524732 == --- tomcat/tc6.0.x/trunk/webapps/docs/changelog.xml (original) +++ tomcat/tc6.0.x/trunk/webapps/docs/changelog.xml Sun Apr 1 23:35:20 2007 @@ -267,6 +267,16 @@ + + + +Use the tomcat-native-1.1.10 as recommended version. +OpenSSL detection on some platforms was broken 1.1.8 will continue to work, +although on some platforms there can be JVM crash if IPV6 is enabled and +platform doesn't support IPV4 mapped addresses on IPV6 sockets. + + + - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: TC4.x vs TC5/6.x - JSESSIONID Set-Cookie differences
Filip Hanik - Dev Lists wrote: what would seem appropriate would be to do this: 1. Prevent multiple cookies, ie, swap out the old cookie. Only one session id should be sent down There doesn't seem to be an easy way to get hold of the response object from inside of session.expire(). 2. throw an illegal state exception if a session.create is called after the response headers are committed. i think the code in doGetSession() already does this. Arvind - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: TC4.x vs TC5/6.x - JSESSIONID Set-Cookie differences
Remy Maucherat wrote: This is not that easy to do. I realized this when trying to come up with a patch for moving the logic to the response :) Arvind - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]