DO NOT REPLY [Bug 48564] New: Unable to turn off retries for LB worker

2010-01-18 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=48564

   Summary: Unable to turn off retries for LB worker
   Product: Tomcat Connectors
   Version: 1.2.28
  Platform: PC
OS/Version: Linux
Status: NEW
  Severity: normal
  Priority: P2
 Component: mod_jk
AssignedTo: dev@tomcat.apache.org
ReportedBy: ryl...@gmail.com


I cannot turn off retry for LB worker.

I'm not sure, but looking at jk_lb_worker.c it seems, that setting it to 0
won't help.

Look at the only place, where 'retries' is being checked

   while (recoverable == JK_TRUE) {
lb_sub_worker_t *rec;
if (attempt >= num_of_workers) {
retry++;
if (retry >= p->worker->retries) {
/* Done with retrying */
break;
}

Should retry be checked only if attempt >= num_of_workers ?

Cheers,

R.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



DO NOT REPLY [Bug 48565] New: Stack trace when tomcat service is down

2010-01-18 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=48565

   Summary: Stack trace when tomcat service is down
   Product: Tomcat 6
   Version: 6.0.20
  Platform: HP
OS/Version: Windows Server 2008 (Longhorn)
Status: NEW
  Severity: normal
  Priority: P2
 Component: Cluster
AssignedTo: dev@tomcat.apache.org
ReportedBy: osega...@gencat.net


Hi, 

In our two node cluster we have made a membership configuration using
StaticMembershipInterceptor.

Nodes are added and removed successfuly (or I hope soy) but when a node (tomcat
service) goes down system raises the following stack trace in catalina.out:

I have read about bug: 45261 which it looks fixed in version 6.0.19 but I'm
currently experiencing the issue.


The stack trace:

18-ene-2010 12:52:52 org.apache.catalina.ha.tcp.SimpleTcpCluster memberAdded
INFO: Replication member
added:org.apache.catalina.tribes.membership.MemberImpl[tcp://192.168.0.38:4038,192.168.0.38,4038,
alive=0,id={0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 38 }, payload={}, command={},
domain={}, ]
18-ene-2010 12:52:52
org.apache.catalina.tribes.group.interceptors.TcpFailureDetector
performBasicCheck
INFO: Suspect member, confirmed
alive.[org.apache.catalina.tribes.membership.MemberImpl[tcp://192.168.0.38:4038,192.168.0.38,4038,
alive=0,id={0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 38 }, payload={}, command={},
domain={}, ]]
18-ene-2010 12:52:53 org.apache.catalina.tribes.io.BufferPool getBufferPool
INFO: Created a buffer pool with max size:104857600 bytes of
type:org.apache.catalina.tribes.io.BufferPool15Impl
18-ene-2010 12:52:54
org.apache.catalina.tribes.group.interceptors.ThroughputInterceptor report
INFO: ThroughputInterceptor Report[
Tx Msg:1 messages
Sent:0,00 MB (total)
Sent:0,00 MB (application)
Time:0,02 seconds
Tx Speed:0,04 MB/sec (total)
TxSpeed:0,04 MB/sec (application)
Error Msg:0
Rx Msg:2 messages
Rx Speed:0,00 MB/sec (since 1st msg)
Received:0,00 MB]

18-ene-2010 12:55:09 org.apache.catalina.tribes.transport.nio.ParallelNioSender
doLoop
ADVERTENCIA: Member send is failing for:tcp://192.168.0.38:4038 ; Setting to
suspect and retrying.
18-ene-2010 12:55:11
org.apache.catalina.tribes.group.interceptors.TcpFailureDetector
memberDisappeared
INFO: Received
memberDisappeared[org.apache.catalina.tribes.membership.MemberImpl[tcp://192.168.0.38:4038,192.168.0.38,4038,
alive=0,id={0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 38 }, payload={}, command={},
domain={}, ]] message. Will verify.
18-ene-2010 12:55:12
org.apache.catalina.tribes.group.interceptors.TcpFailureDetector
memberDisappeared
INFO: Verification complete. Member
disappeared[org.apache.catalina.tribes.membership.MemberImpl[tcp://192.168.0.38:4038,192.168.0.38,4038,
alive=0,id={0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 38 }, payload={}, command={},
domain={}, ]]
18-ene-2010 12:55:12 org.apache.catalina.ha.tcp.SimpleTcpCluster
memberDisappeared
INFO: Received member
disappeared:org.apache.catalina.tribes.membership.MemberImpl[tcp://192.168.0.38:4038,192.168.0.38,4038,
alive=0,id={0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 38 }, payload={}, command={},
domain={}, ]
18-ene-2010 12:55:12 org.apache.catalina.ha.tcp.SimpleTcpCluster send
GRAVE: Unable to send message through cluster sender.
org.apache.catalina.tribes.ChannelException: Send failed, attempt:2 max:1;
Faulty members:tcp://192.168.0.38:4038; 
at
org.apache.catalina.tribes.transport.nio.ParallelNioSender.doLoop(ParallelNioSender.java:172)
at
org.apache.catalina.tribes.transport.nio.ParallelNioSender.sendMessage(ParallelNioSender.java:78)
at
org.apache.catalina.tribes.transport.nio.PooledParallelSender.sendMessage(PooledParallelSender.java:53)
at
org.apache.catalina.tribes.transport.ReplicationTransmitter.sendMessage(ReplicationTransmitter.java:80)
at
org.apache.catalina.tribes.group.ChannelCoordinator.sendMessage(ChannelCoordinator.java:78)
at
org.apache.catalina.tribes.group.ChannelInterceptorBase.sendMessage(ChannelInterceptorBase.java:75)
at
org.apache.catalina.tribes.group.interceptors.ThroughputInterceptor.sendMessage(ThroughputInterceptor.java:61)
at
org.apache.catalina.tribes.group.ChannelInterceptorBase.sendMessage(ChannelInterceptorBase.java:75)
at
org.apache.catalina.tribes.group.interceptors.MessageDispatchInterceptor.sendMessage(MessageDispatchInterceptor.java:73)
at
org.apache.catalina.tribes.group.ChannelInterceptorBase.sendMessage(ChannelInterceptorBase.java:75)
at
org.apache.catalina.tribes.group.ChannelInterceptorBase.sendMessage(ChannelInterceptorBase.java:75)
at
org.apache.catalina.tribes.group.interceptors.TcpFailureDetector.sendMessage(TcpFailureDetector.java:87)
at
org.apache.catalina.tribes.group.ChannelInterceptorBase.sendMessage(ChannelInterceptorBase.java:75)
at
org.apache.catalina.tribes.group.GroupChannel.send(GroupChannel.java:216)
at
org.apache.catalina.tribes.group.GroupChannel.send(GroupChannel.java:175)
   

DO NOT REPLY [Bug 48566] New: ImplicitTagLibraryInfo - not respecting JSP version from tag file

2010-01-18 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=48566

   Summary: ImplicitTagLibraryInfo - not respecting JSP version
from tag file
   Product: Tomcat 6
   Version: 6.0.20
  Platform: PC
OS/Version: Windows XP
Status: NEW
  Severity: critical
  Priority: P2
 Component: Jasper
AssignedTo: dev@tomcat.apache.org
ReportedBy: error...@yahoo.com


I've created a tag file (XML style) on which I have a attribute on which I
enable deferral. I'm doing this on tomcat 6.0.20 started with Java6

Tag file looks something like:

http://java.sun.com/JSP/Page"; version="2.1" >




However, at compilation I get this: 

org.apache.jasper.JasperException: Invalid JSP version defined for tag file at
/WEB-INF/tags/userInfo.tag
at
org.apache.jasper.compiler.DefaultErrorHandler.jspError(DefaultErrorHandler.java:51)
at
org.apache.jasper.compiler.ErrorDispatcher.dispatch(ErrorDispatcher.java:409)
at
org.apache.jasper.compiler.ErrorDispatcher.jspError(ErrorDispatcher.java:116)
at
org.apache.jasper.compiler.TagFileProcessor$TagFileDirectiveVisitor.visit(TagFileProcessor.java:280)


If I go look at TagFileProcessor$TagFileDirectiveVisitor L280 , I see a call to
ImplicitTagLibraryInfo which will return the JSP version, and indeed, in my
case it returns 2.0, so the error is at least correct according to the spec
(the spec says it should throw an error is deferral is used pre 2.1)

Now, if I check ImplicitTagLibraryInfo why the version returned is 2.0, I see
that in the constructor of ImplicitTagLibraryInfo the version is initialized b
default at 2.1 (weird, since its 2.1 container, but anyway).
However, when further executing the constructor, it scans the files to see if
has to change the version.
But the problem is that this is only done in case of an IMPLICIT TLD:

ImplicitTagLibraryInfo-L115: } else if (path.endsWith(IMPLICIT_TLD)) {

So, in case of my tag file there is no implicit TLD and the else is never
executed leaving the version at 2.0

This seems incorrect, since my tag clearly indicates to be 2.1 and the JSP
version on tomcat is also 2.1 
Can this be fixed?

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



svn commit: r900393 - /tomcat/tc6.0.x/trunk/STATUS.txt

2010-01-18 Thread jfclere
Author: jfclere
Date: Mon Jan 18 13:48:04 2010
New Revision: 900393

URL: http://svn.apache.org/viewvc?rev=900393&view=rev
Log:
My vote.

Modified:
tomcat/tc6.0.x/trunk/STATUS.txt

Modified: tomcat/tc6.0.x/trunk/STATUS.txt
URL: 
http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/STATUS.txt?rev=900393&r1=900392&r2=900393&view=diff
==
--- tomcat/tc6.0.x/trunk/STATUS.txt (original)
+++ tomcat/tc6.0.x/trunk/STATUS.txt Mon Jan 18 13:48:04 2010
@@ -103,7 +103,7 @@
   TC 5.5.
   http://svn.apache.org/viewvc?rev=899124&view=rev
   +1: kkolinko
-  -1: markt only because it changes the default in 6.0.x
+  -1: markt, jfclere only because it changes the default in 6.0.x
 
 * Remove @Deprecated annotations from javax.servlet.jsp.JspContext
   Part of http://svn.apache.org/viewvc?rev=899635&view=rev



-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



svn commit: r900400 - /tomcat/tc6.0.x/trunk/STATUS.txt

2010-01-18 Thread kkolinko
Author: kkolinko
Date: Mon Jan 18 14:11:41 2010
New Revision: 900400

URL: http://svn.apache.org/viewvc?rev=900400&view=rev
Log:
Withdraw getWriter() proposal.
Propose CRLF fix for installer.

Modified:
tomcat/tc6.0.x/trunk/STATUS.txt

Modified: tomcat/tc6.0.x/trunk/STATUS.txt
URL: 
http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/STATUS.txt?rev=900400&r1=900399&r2=900400&view=diff
==
--- tomcat/tc6.0.x/trunk/STATUS.txt (original)
+++ tomcat/tc6.0.x/trunk/STATUS.txt Mon Jan 18 14:11:41 2010
@@ -94,19 +94,15 @@
   http://svn.apache.org/viewvc?rev=898906&view=rev
   +1: fhanik
   -1: 
-  
-* Allow compliance with SRV.15.2.22.1 to be controlled separately
-  from STRICT_SERVLET_COMPLIANCE, and turn it on by default.
-  If anyone has a better proposal for the property name, you are welcome.
-  Tomcat 5.5 implementation of o.a.c.connector.Response applies this
-  unconditionally, so this patch will also provide better compliance with
-  TC 5.5.
-  http://svn.apache.org/viewvc?rev=899124&view=rev
-  +1: kkolinko
-  -1: markt, jfclere only because it changes the default in 6.0.x
 
 * Remove @Deprecated annotations from javax.servlet.jsp.JspContext
   Part of http://svn.apache.org/viewvc?rev=899635&view=rev
   
http://svn.apache.org/viewvc/tomcat/trunk/java/javax/servlet/jsp/JspContext.java?view=diff&r1=899634&r2=899635&pathrev=899635
   +1: kkolinko
   -1:
+
+* Use CRLF line ends in conf/* files installed by the Windows exe installer
+  
http://people.apache.org/~kkolinko/patches/2010-01-18_tc6_installer-crlf.patch
+  +1: kkolinko
+  -1:
+



-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



svn commit: r900404 - /tomcat/tc6.0.x/trunk/STATUS.txt

2010-01-18 Thread jfclere
Author: jfclere
Date: Mon Jan 18 14:21:34 2010
New Revision: 900404

URL: http://svn.apache.org/viewvc?rev=900404&view=rev
Log:
My vote.

Modified:
tomcat/tc6.0.x/trunk/STATUS.txt

Modified: tomcat/tc6.0.x/trunk/STATUS.txt
URL: 
http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/STATUS.txt?rev=900404&r1=900403&r2=900404&view=diff
==
--- tomcat/tc6.0.x/trunk/STATUS.txt (original)
+++ tomcat/tc6.0.x/trunk/STATUS.txt Mon Jan 18 14:21:34 2010
@@ -103,6 +103,6 @@
 
 * Use CRLF line ends in conf/* files installed by the Windows exe installer
   
http://people.apache.org/~kkolinko/patches/2010-01-18_tc6_installer-crlf.patch
-  +1: kkolinko
+  +1: kkolinko, jfclere
   -1:
 



-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



tagging 6.0.24

2010-01-18 Thread jean-frederic clere
Hi,

I plan to tag 6.0.24 tomorrow lunch time (~13h00 my time).

Please complain if that is not ok.

Cheers

Jean-Frederic

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



svn commit: r900424 - /tomcat/tc6.0.x/trunk/STATUS.txt

2010-01-18 Thread jim
Author: jim
Date: Mon Jan 18 15:32:33 2010
New Revision: 900424

URL: http://svn.apache.org/viewvc?rev=900424&view=rev
Log:
Vote

Modified:
tomcat/tc6.0.x/trunk/STATUS.txt

Modified: tomcat/tc6.0.x/trunk/STATUS.txt
URL: 
http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/STATUS.txt?rev=900424&r1=900423&r2=900424&view=diff
==
--- tomcat/tc6.0.x/trunk/STATUS.txt (original)
+++ tomcat/tc6.0.x/trunk/STATUS.txt Mon Jan 18 15:32:33 2010
@@ -92,7 +92,7 @@
 
 * Force disconnect upon transmission failure
   http://svn.apache.org/viewvc?rev=898906&view=rev
-  +1: fhanik
+  +1: fhanik, jim
   -1: 
 
 * Remove @Deprecated annotations from javax.servlet.jsp.JspContext



-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



svn commit: r900477 - /tomcat/tc6.0.x/trunk/STATUS.txt

2010-01-18 Thread pero
Author: pero
Date: Mon Jan 18 17:46:12 2010
New Revision: 900477

URL: http://svn.apache.org/viewvc?rev=900477&view=rev
Log:
Cast my vote

Modified:
tomcat/tc6.0.x/trunk/STATUS.txt

Modified: tomcat/tc6.0.x/trunk/STATUS.txt
URL: 
http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/STATUS.txt?rev=900477&r1=900476&r2=900477&view=diff
==
--- tomcat/tc6.0.x/trunk/STATUS.txt (original)
+++ tomcat/tc6.0.x/trunk/STATUS.txt Mon Jan 18 17:46:12 2010
@@ -92,7 +92,7 @@
 
 * Force disconnect upon transmission failure
   http://svn.apache.org/viewvc?rev=898906&view=rev
-  +1: fhanik, jim
+  +1: fhanik, jim, pero
   -1: 
 
 * Remove @Deprecated annotations from javax.servlet.jsp.JspContext



-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



svn commit: r900500 - in /tomcat/site/trunk: docs/security-5.html docs/security-6.html xdocs/security-5.xml xdocs/security-6.xml

2010-01-18 Thread markt
Author: markt
Date: Mon Jan 18 18:34:52 2010
New Revision: 900500

URL: http://svn.apache.org/viewvc?rev=900500&view=rev
Log:
Fix typos

Modified:
tomcat/site/trunk/docs/security-5.html
tomcat/site/trunk/docs/security-6.html
tomcat/site/trunk/xdocs/security-5.xml
tomcat/site/trunk/xdocs/security-6.xml

Modified: tomcat/site/trunk/docs/security-5.html
URL: 
http://svn.apache.org/viewvc/tomcat/site/trunk/docs/security-5.html?rev=900500&r1=900499&r2=900500&view=diff
==
--- tomcat/site/trunk/docs/security-5.html (original)
+++ tomcat/site/trunk/docs/security-5.html Mon Jan 18 18:34:52 2010
@@ -1130,7 +1130,7 @@

 The APR/native connector is vulnerable if the OpenSSL version used is
vulnerable. Building with OpenSSL 0.9.8l will disable all renegotiation
-   and protect against this vulernability.
+   and protect against this vulnerability.

 Users should be aware that the impact of disabling renegotiation will
vary with both application and client. In some circumstances disabling

Modified: tomcat/site/trunk/docs/security-6.html
URL: 
http://svn.apache.org/viewvc/tomcat/site/trunk/docs/security-6.html?rev=900500&r1=900499&r2=900500&view=diff
==
--- tomcat/site/trunk/docs/security-6.html (original)
+++ tomcat/site/trunk/docs/security-6.html Mon Jan 18 18:34:52 2010
@@ -868,7 +868,7 @@

 The APR/native connector is vulnerable if the OpenSSL version used is
vulnerable. Building with OpenSSL 0.9.8l will disable all renegotiation
-   and protect against this vulernability.
+   and protect against this vulnerability.

 Users should be aware that the impact of disabling renegotiation will
vary with both application and client. In some circumstances disabling

Modified: tomcat/site/trunk/xdocs/security-5.xml
URL: 
http://svn.apache.org/viewvc/tomcat/site/trunk/xdocs/security-5.xml?rev=900500&r1=900499&r2=900500&view=diff
==
--- tomcat/site/trunk/xdocs/security-5.xml (original)
+++ tomcat/site/trunk/xdocs/security-5.xml Mon Jan 18 18:34:52 2010
@@ -528,7 +528,7 @@

 The APR/native connector is vulnerable if the OpenSSL version used is
vulnerable. Building with OpenSSL 0.9.8l will disable all renegotiation
-   and protect against this vulernability.
+   and protect against this vulnerability.

 Users should be aware that the impact of disabling renegotiation will
vary with both application and client. In some circumstances disabling

Modified: tomcat/site/trunk/xdocs/security-6.xml
URL: 
http://svn.apache.org/viewvc/tomcat/site/trunk/xdocs/security-6.xml?rev=900500&r1=900499&r2=900500&view=diff
==
--- tomcat/site/trunk/xdocs/security-6.xml (original)
+++ tomcat/site/trunk/xdocs/security-6.xml Mon Jan 18 18:34:52 2010
@@ -425,7 +425,7 @@

 The APR/native connector is vulnerable if the OpenSSL version used is
vulnerable. Building with OpenSSL 0.9.8l will disable all renegotiation
-   and protect against this vulernability.
+   and protect against this vulnerability.

 Users should be aware that the impact of disabling renegotiation will
vary with both application and client. In some circumstances disabling



-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



svn commit: r900501 - in /tomcat/site/trunk: docs/security-native.html docs/security.html xdocs/security-native.xml xdocs/security.xml

2010-01-18 Thread markt
Author: markt
Date: Mon Jan 18 18:36:09 2010
New Revision: 900501

URL: http://svn.apache.org/viewvc?rev=900501&view=rev
Log:
Add a security page for the APR/native connector

Added:
tomcat/site/trunk/docs/security-native.html
tomcat/site/trunk/xdocs/security-native.xml
Modified:
tomcat/site/trunk/docs/security.html
tomcat/site/trunk/xdocs/security.xml

Added: tomcat/site/trunk/docs/security-native.html
URL: 
http://svn.apache.org/viewvc/tomcat/site/trunk/docs/security-native.html?rev=900501&view=auto
==
--- tomcat/site/trunk/docs/security-native.html (added)
+++ tomcat/site/trunk/docs/security-native.html Mon Jan 18 18:36:09 2010
@@ -0,0 +1,287 @@
+
+http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd";>
+
+
+Apache Tomcat - Apache Tomcat APR/native Connector 
vulnerabilities
+
+
+
+
+
+
+
+
+
+
+http://tomcat.apache.org/";>
+
+
+
+
+
+Apache Tomcat
+
+
+
+
+http://www.apache.org/";>
+http://www.apache.org/images/asf-logo.gif"; align="right" alt="Apache 
Logo" border="0"/>
+
+
+
+
+
+http://www.google.com/search"; method="get">
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+Apache Tomcat
+
+
+
+Home
+
+
+Taglibs
+
+
+
+Download
+
+
+
+Which version?
+
+
+Tomcat 6.x
+
+
+Tomcat 5.5
+
+
+Tomcat Connectors
+
+
+Tomcat Native
+
+
+http://archive.apache.org/dist/tomcat";>Archives
+
+
+
+Documentation
+
+
+
+Tomcat 6.0
+
+
+Tomcat 5.5
+
+
+Tomcat Connectors
+
+
+Tomcat Native
+
+
+Migration Guide
+
+
+
+Problems?
+
+
+
+Security Reports
+
+
+Find help
+
+
+http://wiki.apache.org/tomcat/FAQ";>FAQ
+
+
+Mailing Lists
+
+
+Bug Database
+
+
+IRC
+
+
+
+Get Involved
+
+
+
+Overview
+
+
+SVN Repositories
+
+
+Mailing Lists
+
+
+http://wiki.apache.org/tomcat";>Wiki
+
+
+
+Misc
+
+
+
+Who We Are
+
+
+Heritage
+
+
+http://www.apache.org";>Apache Home
+
+
+Resources
+
+
+Contact
+
+
+Legal
+
+
+http://www.apache.org/foundation/sponsorship.html";>Sponsorship
+
+
+http://www.apache.org/foundation/thanks.html";>Thanks
+
+
+
+
+
+
+
+
+
+
+Apache Tomcat APR/native Connector vulnerabilities
+
+
+
+
+
+
+
+
+This page lists all security vulnerabilities fixed in released versions
+   of Apache Tomcat APR/native Connector. Each vulnerability is given a
+   security impact rating by the Apache
+   Tomcat security team - please note that this rating may vary from
+   platform to platform. We also list the versions of Apache Tomcat 
APR/native
+   Connectors the flaw is known to affect, and where a flaw has not been
+   verified list the version with a question mark.
+
+This page has been created from a review of the Apache Tomcat archives
+   and the CVE list. Please send comments or corrections for these
+   vulnerabilities to the mailto:secur...@tomcat.apache.org";>Tomcat
+   Security Team.
+
+  
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+Not a vulnerability in the Apache Tomcat APR/native Connector
+
+
+
+
+
+
+
+
+
+TLS SSL Man In The Middle
+   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3555";>
+   CVE-2009-3555
+
+
+A vulnerability exists in the TLS protocol that allows an attacker to
+   inject arbitrary requests into an TLS stream during renegotiation.
+
+The TLS implementation used by Tomcat varies with connector. The
+   APR/native connector uses OpenSSL.
+   
+The APR/native connector is vulnerable if the OpenSSL version used is
+   vulnerable. Note: Building with OpenSSL 0.9.8l will disable all
+   renegotiation and protect against this vulnerability.
+
+From 1.1.18 onwards, client initiated renegotiations are rejected to
+   provide partial protection against this vulnerability with any OpenSSL
+   version.
+   
+Users should be aware that the impact of disabling renegotiation will
+   vary with both application and client. In some circumstances disabling
+   renegotiation may result in some clients being unable to access the
+   application.
+  
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+Copyright © 1999-2010, The Apache Software Foundation
+
+"Apache", the Apache feather, and the Apache Tomcat logo are
+trademarks of the Apache Software Foundation for our open source
+software.
+
+
+
+
+
+
+
+

Modified: tomcat/site/trunk/docs/security.html
URL: 
http://svn.apache.org/viewvc/tomcat/site/trunk/docs/security.html?rev=900501&r1=900500&r2=900501&view=diff
==
--- tomcat/site/trunk/docs/security.html (original)
+++ tomcat/site/trunk/docs/security.html Mon Jan 18 18:36:09 2010
@@ -220,6 +220,10 @@
 Apache Tomcat JK Connectors Security
   Vulnerabilitites
 
+  
+Apache Tomcat APR/native Connector Security
+  Vulnerabilitites
+
 
 
 Lists of security problems fixed in versions of Apache Tomcat that may

Added: tomcat/site/trunk/xdocs/security-native.xml
URL: 
http://svn.apache.o

svn commit: r900503 - in /tomcat/site/trunk: docs/index.html docs/oldnews.html xdocs/index.xml xdocs/oldnews.xml

2010-01-18 Thread markt
Author: markt
Date: Mon Jan 18 18:38:34 2010
New Revision: 900503

URL: http://svn.apache.org/viewvc?rev=900503&view=rev
Log:
Update the front page

Modified:
tomcat/site/trunk/docs/index.html
tomcat/site/trunk/docs/oldnews.html
tomcat/site/trunk/xdocs/index.xml
tomcat/site/trunk/xdocs/oldnews.xml

Modified: tomcat/site/trunk/docs/index.html
URL: 
http://svn.apache.org/viewvc/tomcat/site/trunk/docs/index.html?rev=900503&r1=900502&r2=900503&view=diff
==
--- tomcat/site/trunk/docs/index.html (original)
+++ tomcat/site/trunk/docs/index.html Mon Jan 18 18:38:34 2010
@@ -217,8 +217,8 @@
 
 
 
-
-Tomcat Native 1.1.18 Released
+
+Tomcat Native 1.1.19 Released
 
 
 
@@ -228,79 +228,12 @@
 
 
 
-The Apache Tomcat Project is proud to announce the release of version 1.1.18 
of Tomcat Native.
-This version is principally a security and bugfix release.
+The Apache Tomcat Project is proud to announce the release of version 1.1.19 
of Tomcat Native.
+This version is principally a bugfix release.
 
 
 Download |
-ChangeLog for 
1.1.18 |
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-Tomcat tracks at ApacheCon US 2009
-
-
-
-
-
-
-
-
-http://www.us.apachecon.com/c/acus2009/";>
-http://www.apache.org/ads/ApacheCon/2009-usa-125x125.png"; style="width: 
125px;height: 125px;" align="right"/>
-
-ApacheCon US 2009, 2-6 November 2009 in Oakland, CA, will have a dedicated 
track about Tomcat topics.
-   We will celebrate our 10th anniversary as an Apache project, explain the 
future developements: Tomcat7, asynchrounous servlets,
-   show how to get the best of Tomcat and how to front-end Tomcat clusters.
-   We also have a http://wiki.apache.org/tomcat/TomcatAtApacheConUs2009";>meetup on 
Monday evening where you can get hands-on advice and really join the ranks of 
the Tomcat initiated!
-
-
-   Join us in Oakland!
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-Free Meetup in Oakland
-
-
-
-
-
-
-
-
-During the ApacheCon a
-http://wiki.apache.org/tomcat/TomcatAtApacheConUs2009";>Tomcat 
meetup
-is organised
-
-On Monday 2nd of November at 20:00 http://spreadsheets.google.com/viewform?formkey=dEJLcHk3c1ZrRm8tWUNYeXZZckN0Vnc6MA";>register
 for it
-and join us in Oakland at the http://www.us.apachecon.com/c/acus2009/";>ApacheCon location.
+ChangeLog for 
1.1.19
 
 
 
@@ -327,7 +260,7 @@
 
 
 
-  See  former announcements
+  See  former announcements.
 
 
 

Modified: tomcat/site/trunk/docs/oldnews.html
URL: 
http://svn.apache.org/viewvc/tomcat/site/trunk/docs/oldnews.html?rev=900503&r1=900502&r2=900503&view=diff
==
--- tomcat/site/trunk/docs/oldnews.html (original)
+++ tomcat/site/trunk/docs/oldnews.html Mon Jan 18 18:38:34 2010
@@ -177,6 +177,73 @@
 
 
 
+
+Tomcat tracks at ApacheCon US 2009
+
+
+
+
+
+
+
+
+http://www.us.apachecon.com/c/acus2009/";>
+http://www.apache.org/ads/ApacheCon/2009-usa-125x125.png"; style="width: 
125px;height: 125px;" align="right"/>
+
+ApacheCon US 2009, 2-6 November 2009 in Oakland, CA, will have a dedicated 
track about Tomcat topics.
+   We will celebrate our 10th anniversary as an Apache project, explain the 
future developements: Tomcat7, asynchrounous servlets,
+   show how to get the best of Tomcat and how to front-end Tomcat clusters.
+   We also have a http://wiki.apache.org/tomcat/TomcatAtApacheConUs2009";>meetup on 
Monday evening where you can get hands-on advice and really join the ranks of 
the Tomcat initiated!
+
+
+   Join us in Oakland!
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+Free Meetup in Oakland
+
+
+
+
+
+
+
+
+During the ApacheCon a
+http://wiki.apache.org/tomcat/TomcatAtApacheConUs2009";>Tomcat 
meetup
+is organised
+
+On Monday 2nd of November at 20:00 http://spreadsheets.google.com/viewform?formkey=dEJLcHk3c1ZrRm8tWUNYeXZZckN0Vnc6MA";>register
 for it
+and join us in Oakland at the http://www.us.apachecon.com/c/acus2009/";>ApacheCon location.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
 
 Live Video Streaming of Tomcat Talks at ApacheCon Europe 2009
 

Modified: tomcat/site/trunk/xdocs/index.xml
URL: 
http://svn.apache.org/viewvc/tomcat/site/trunk/xdocs/index.xml?rev=900503&r1=900502&r2=900503&view=diff
==
--- tomcat/site/trunk/xdocs/index.xml (original)
+++ tomcat/site/trunk/xdocs/index.xml Mon Jan 18 18:38:34 2010
@@ -29,42 +29,20 @@
 
 
 
-
+
 
-The Apache Tomcat Project is proud to announce the release of version 1.1.18 
of Tomcat Native.
-This version is principally a security and bugfix release.
+The Apache Tomcat Project is proud to announce the release of version 1.1.19 
of Tomcat Native.
+This version is principally a bugfix release.
 
 
 Download |
-ChangeLog for 
1.1.18 |
-
-
-
-
-http://www.us.apachecon.com/c/acus2009/";>http://www.apache.org/ads/ApacheCon/2009-usa-125x125.png"; style="width: 
125px;height: 125px;" align="right"/>
-ApacheCon US 2009, 2-6 November 2009 in 

svn commit: r900539 - in /tomcat/site/trunk: docs/resources.html xdocs/resources.xml

2010-01-18 Thread markt
Author: markt
Date: Mon Jan 18 20:36:09 2010
New Revision: 900539

URL: http://svn.apache.org/viewvc?rev=900539&view=rev
Log:
Update link at request of publisher

Modified:
tomcat/site/trunk/docs/resources.html
tomcat/site/trunk/xdocs/resources.xml

Modified: tomcat/site/trunk/docs/resources.html
URL: 
http://svn.apache.org/viewvc/tomcat/site/trunk/docs/resources.html?rev=900539&r1=900538&r2=900539&view=diff
==
--- tomcat/site/trunk/docs/resources.html (original)
+++ tomcat/site/trunk/docs/resources.html Mon Jan 18 20:36:09 2010
@@ -306,7 +306,7 @@
   
 
   
-http://www.amazon.com/Tomcat-Developers-Guide-Damodar-Chetty/dp/1847197280/ref=sr_1_1?ie=UTF8&s=books&qid=1261141977&sr=8-1";>Tomcat
 6 Developer's Guide
+http://www.packtpub.com/tomcat-6-developers-guide/book?utm_source=tomcat.apache.org&utm_medium=link&utm_content=pod&utm_campaign=mdb_002136";>Tomcat
 6 Developer's Guide
 , by Damodar Chetty
   Packt Publishing (12/2009)
 

Modified: tomcat/site/trunk/xdocs/resources.xml
URL: 
http://svn.apache.org/viewvc/tomcat/site/trunk/xdocs/resources.xml?rev=900539&r1=900538&r2=900539&view=diff
==
--- tomcat/site/trunk/xdocs/resources.xml (original)
+++ tomcat/site/trunk/xdocs/resources.xml Mon Jan 18 20:36:09 2010
@@ -73,7 +73,7 @@
 
   
 
-  http://www.amazon.com/Tomcat-Developers-Guide-Damodar-Chetty/dp/1847197280/ref=sr_1_1?ie=UTF8&s=books&qid=1261141977&sr=8-1";>Tomcat
 6 Developer's Guide, by Damodar Chetty
+  http://www.packtpub.com/tomcat-6-developers-guide/book?utm_source=tomcat.apache.org&utm_medium=link&utm_content=pod&utm_campaign=mdb_002136";>Tomcat
 6 Developer's Guide, by Damodar Chetty
   Packt Publishing (12/2009)
 
 



-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



native-doc part of Tomcat site: outdated?

2010-01-18 Thread Konstantin Kolinko
Is http://tomcat.apache.org/native-doc/  generated from /native/trunk,
or from /native/branches/1.1.x/  ?

Apparently the site for 1.1.18 was generated from trunk, but the one
for 1.1.19 from the 1.1.x branch.

There are two errors:
1. The "ChangeLog for 1.1.19" link at http://tomcat.apache.org/ should
point to [1] As of now, the link points to [2], which is a stale page
from 1.1.18 site, not mentioning 1.1.19.

[1] http://tomcat.apache.org/native-doc/miscellaneous/changelog.html
[2] http://tomcat.apache.org/native-doc/miscellaneous/changelog-1.1.x.html


2. The main page of native-doc [3] lists "10 September 2008 -
TC-Native-1.1.15 released" as the most recent news item. Subsequent
releases are not mentioned.

[3] http://tomcat.apache.org/native-doc/index.html


A bit of a mess, but I think that the site from the branch is the right one.

Probably we shouldn't maintain changelog-1.1.x.html [2] in the trunk,
because it duplicates effort.

I'll update the link on the main site. Be sure to use the right link
in the announcement.


Best regards,
Konstantin Kolinko

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



svn commit: r900640 - in /tomcat/site/trunk: docs/index.html xdocs/index.xml

2010-01-18 Thread kkolinko
Author: kkolinko
Date: Tue Jan 19 01:48:23 2010
New Revision: 900640

URL: http://svn.apache.org/viewvc?rev=900640&view=rev
Log:
Correct link to the tomcat-native changelog file

Modified:
tomcat/site/trunk/docs/index.html
tomcat/site/trunk/xdocs/index.xml

Modified: tomcat/site/trunk/docs/index.html
URL: 
http://svn.apache.org/viewvc/tomcat/site/trunk/docs/index.html?rev=900640&r1=900639&r2=900640&view=diff
==
--- tomcat/site/trunk/docs/index.html (original)
+++ tomcat/site/trunk/docs/index.html Tue Jan 19 01:48:23 2010
@@ -233,7 +233,7 @@
 
 
 Download |
-ChangeLog for 
1.1.19
+ChangeLog for 1.1.19
 
 
 

Modified: tomcat/site/trunk/xdocs/index.xml
URL: 
http://svn.apache.org/viewvc/tomcat/site/trunk/xdocs/index.xml?rev=900640&r1=900639&r2=900640&view=diff
==
--- tomcat/site/trunk/xdocs/index.xml (original)
+++ tomcat/site/trunk/xdocs/index.xml Tue Jan 19 01:48:23 2010
@@ -36,7 +36,7 @@
 
 
 Download |
-ChangeLog for 
1.1.19
+ChangeLog for 1.1.19
 
 
 



-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



svn commit: r900641 - in /tomcat/site/trunk: docs/security-native.html xdocs/security-native.xml

2010-01-18 Thread kkolinko
Author: kkolinko
Date: Tue Jan 19 01:50:31 2010
New Revision: 900641

URL: http://svn.apache.org/viewvc?rev=900641&view=rev
Log:
svn:eol-style

Modified:
tomcat/site/trunk/docs/security-native.html   (props changed)
tomcat/site/trunk/xdocs/security-native.xml   (props changed)

Propchange: tomcat/site/trunk/docs/security-native.html
--
svn:eol-style = native

Propchange: tomcat/site/trunk/xdocs/security-native.xml
--
svn:eol-style = native



-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



DO NOT REPLY [Bug 48569] New: Not able to replicate Servlet Context Attributes

2010-01-18 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=48569

   Summary: Not able to replicate Servlet Context Attributes
   Product: Tomcat 6
   Version: 6.0.18
  Platform: All
OS/Version: Windows XP
Status: NEW
  Severity: blocker
  Priority: P2
 Component: Cluster
AssignedTo: dev@tomcat.apache.org
ReportedBy: rnd.gu...@gmail.com


Hello,

As per the Tomcat documentation
(http://tomcat.apache.org/tomcat-6.0-doc/config/cluster.html) the servlet
context attributes can be replicated, i did the same by adding the className
attribute as org.apache.catalina.ha.context.ReplicatedContext in Context node.

The below is the sample code.


 
/websites/www.izmoindy.com/ROOT/admin/WEB-INF/web.xml
 
/websites/www.izmoindy.com/ROOT/admin/WEB-INF/struts-config.xml
 
/websites/www.izmoindy.com/ROOT/admin/WEB-INF/faces-config.xml
  


Thanks
Regards
Ramakrishna Gutha

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



svn commit: r900689 - /tomcat/native/trunk/xdocs/news/2010.xml

2010-01-18 Thread rjung
Author: rjung
Date: Tue Jan 19 07:38:27 2010
New Revision: 900689

URL: http://svn.apache.org/viewvc?rev=900689&view=rev
Log:
Fix typo.

Modified:
tomcat/native/trunk/xdocs/news/2010.xml

Modified: tomcat/native/trunk/xdocs/news/2010.xml
URL: 
http://svn.apache.org/viewvc/tomcat/native/trunk/xdocs/news/2010.xml?rev=900689&r1=900688&r2=900689&view=diff
==
--- tomcat/native/trunk/xdocs/news/2010.xml (original)
+++ tomcat/native/trunk/xdocs/news/2010.xml Tue Jan 19 07:38:27 2010
@@ -32,10 +32,10 @@
 
 
 
-DD MMM - TC-Native-2.2.0 released
+DD MMM - TC-Native-2.0.0 released
 
 The Apache Tomcat team is proud to announce the immediate availability
-of Tomcat Native 2.2.0. This is a stable release adding some bug fixes.
+of Tomcat Native 2.0.0. This is a stable release adding some bug fixes.
 
  Please see the ChangeLog for a 
full list of changes.
 



-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



svn commit: r900693 - in /tomcat/native/branches/1.1.x/xdocs: index.xml miscellaneous/project.xml news/2008.xml news/2009.xml news/2010.xml news/project.xml project.xml

2010-01-18 Thread rjung
Author: rjung
Date: Tue Jan 19 07:58:06 2010
New Revision: 900693

URL: http://svn.apache.org/viewvc?rev=900693&view=rev
Log:
Update TC native 1.1.x docs
- add release anouncements for some releases to news
- add news pages for 2009 and 2010 to the menu
- update front page for 1.1.19

Added:
tomcat/native/branches/1.1.x/xdocs/news/2009.xml   (with props)
tomcat/native/branches/1.1.x/xdocs/news/2010.xml   (with props)
Modified:
tomcat/native/branches/1.1.x/xdocs/index.xml
tomcat/native/branches/1.1.x/xdocs/miscellaneous/project.xml
tomcat/native/branches/1.1.x/xdocs/news/2008.xml
tomcat/native/branches/1.1.x/xdocs/news/project.xml
tomcat/native/branches/1.1.x/xdocs/project.xml

Modified: tomcat/native/branches/1.1.x/xdocs/index.xml
URL: 
http://svn.apache.org/viewvc/tomcat/native/branches/1.1.x/xdocs/index.xml?rev=900693&r1=900692&r2=900693&view=diff
==
--- tomcat/native/branches/1.1.x/xdocs/index.xml (original)
+++ tomcat/native/branches/1.1.x/xdocs/index.xml Tue Jan 19 07:58:06 2010
@@ -45,35 +45,13 @@
 
 
 
-10 September 2008 - 
TC-Native-1.1.15 released
-The Apache Tomcat team is proud to announce the immediate availability of 
Tomcat Native 1.1.15 Stable.
+08 January 2010 - TC-Native-1.1.19 
released
+The Apache Tomcat team is proud to announce the immediate availability of 
Tomcat Native 1.1.19 Stable.
 
-Download the http://www.apache.org/dist/tomcat/tomcat-connectors/native/tomcat-native-1.1.15-src.tar.gz";>TC-native
 1.1.15 release sources
- | http://www.apache.org/dist/tomcat/tomcat-connectors/native/tomcat-native-1.1.15-src.tar.gz.asc";>PGP
 signature
+Download the http://www.apache.org/dist/tomcat/tomcat-connectors/native/1.1.19/source/tomcat-native-1.1.19-src.tar.gz";>TC-native
 1.1.19 release sources
+ | http://www.apache.org/dist/tomcat/tomcat-connectors/native/1.1.19/source/tomcat-native-1.1.19-src.tar.gz.asc";>PGP
 signature
 
-Download the http://www.apache.org/dist/tomcat/tomcat-connectors/native/1.1.15/binaries/";>binaries
 for selected platforms.
-
-
-
-04 July 2008 - TC-Native-1.1.14 
released
-The Apache Tomcat team is proud to announce the immediate availability
-of Tomcat Native 1.1.14 Stable.
-
-Download the http://www.apache.org/dist/tomcat/tomcat-connectors/native/tomcat-native-1.1.14-src.tar.gz";>TC-native
 1.1.14 release sources
- | http://www.apache.org/dist/tomcat/tomcat-connectors/native/tomcat-native-1.1.14-src.tar.gz.asc";>PGP
 signature
-
-Download the http://tomcat.heanet.ie/native/";>binaries for 
selected platforms.
-
-
-
-15 February 2008 - TC-Native-1.1.13 
released
-The Apache Tomcat team is proud to announce the immediate availability
-of Tomcat Native 1.1.13 Stable.
-
-Download the http://www.apache.org/dist/tomcat/tomcat-connectors/native/tomcat-native-1.1.13-src.tar.gz";>TC-native
 1.1.13 release sources
- | http://www.apache.org/dist/tomcat/tomcat-connectors/native/tomcat-native-1.1.13-src.tar.gz.asc";>PGP
 signature
-
-Download the http://tomcat.heanet.ie/native/";>binaries for 
selected platforms.
+Download the http://www.apache.org/dist/tomcat/tomcat-connectors/native/1.1.19/binaries/";>binaries
 for selected platforms.
 
 
 

Modified: tomcat/native/branches/1.1.x/xdocs/miscellaneous/project.xml
URL: 
http://svn.apache.org/viewvc/tomcat/native/branches/1.1.x/xdocs/miscellaneous/project.xml?rev=900693&r1=900692&r2=900693&view=diff
==
--- tomcat/native/branches/1.1.x/xdocs/miscellaneous/project.xml (original)
+++ tomcat/native/branches/1.1.x/xdocs/miscellaneous/project.xml Tue Jan 19 
07:58:06 2010
@@ -35,6 +35,8 @@
 
 
 
+
+
 
 
 

Modified: tomcat/native/branches/1.1.x/xdocs/news/2008.xml
URL: 
http://svn.apache.org/viewvc/tomcat/native/branches/1.1.x/xdocs/news/2008.xml?rev=900693&r1=900692&r2=900693&view=diff
==
--- tomcat/native/branches/1.1.x/xdocs/news/2008.xml (original)
+++ tomcat/native/branches/1.1.x/xdocs/news/2008.xml Tue Jan 19 07:58:06 2010
@@ -31,6 +31,20 @@
 
 
 
+
+18 November - TC-Native-1.1.16 released
+
+The Apache Tomcat team is proud to announce the immediate availability
+of Tomcat Native 1.1.16. This is a stable release adding some bug fixes.
+
+
+
+11 September - TC-Native-1.1.15 released
+
+The Apache Tomcat team is proud to announce the immediate availability
+of Tomcat Native 1.1.15. This is a stable release adding some bug fixes.
+
+
 
 4 July - TC-Native-1.1.14 released
 

Added: tomcat/native/branches/1.1.x/xdocs/news/2009.xml
URL: 
http://svn.apache.org/viewvc/tomcat/native/branches/1.1.x/xdocs/news/2009.xml?rev=900693&view=auto
==
--- tomcat/native/branches/1.1.x/xdocs/news/2009.xml (added)
+++ tomcat/native/branches/1.1.x/xdocs/news/2009.xml Tue Jan 19 07:58:06 2010
@