DO NOT REPLY [Bug 50343] New: SSL Error initializing endpoint

2010-11-26 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=50343

   Summary: SSL Error initializing endpoint
   Product: Tomcat 7
   Version: 7.0.4
  Platform: PC
OS/Version: Windows XP
Status: NEW
  Severity: normal
  Priority: P2
 Component: Connectors
AssignedTo: dev@tomcat.apache.org
ReportedBy: tony.liuhong...@gmail.com


1 Overview:
  After set up SSL Connector at server.xml, but can not initializing endpoint

2 Steps to Reproduce: 
   1) Create .keystore with JDK\keytool like "SSL Configuration HOW-TO";
   2) Set up SSL Connector at server.xml keystoreFile and keystorePass;
   3) Startup tomcat server, and get this error.

Actual Results: 
   This download version has problems, because when I download sources code and
build it, it's ok. 

Expected Results: 
   When I download sources code and build it, the error is disappeare.

Build Date & Platform: 
   Build 2010-11-26 on Windows XP

Additional Builds and Platforms: 
   N/A

Additional Information: 
   N/A

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



DO NOT REPLY [Bug 50343] SSL Error initializing endpoint

2010-11-26 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=50343

--- Comment #1 from Tony  2010-11-26 03:06:17 EST ---
Created an attachment (id=26348)
 --> (https://issues.apache.org/bugzilla/attachment.cgi?id=26348)
No Certificate file specified or invalid file format

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



DO NOT REPLY [Bug 50342] Exception on the Host request-header field included colon(':')

2010-11-26 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=50342

Chuck Caldarale  changed:

   What|Removed |Added

 Status|NEW |RESOLVED
 Resolution||INVALID
 OS/Version||All

--- Comment #1 from Chuck Caldarale  2010-11-26 
03:06:24 EST ---
(In reply to comment #0)
> If A tomcat receive a request contained the Host request-header field included
> colon, java.io.CharConversionException is thrown.

Not true.  The exception is thrown because the request contains an invalid port
number after the colon.

> Host:  tomcat.apache.org:www.apache.org   

The above is invalid.

> It looks like the HTTP 1.1 specification allows to do such call

It certainly does not.

> Host = "Host" ":" host [ ":" port ] ; Section 3.2.2

The first colon separates the header name from the header value; the second
colon, when present, separates the host name from the port number.

> Because http specification 1.1 support multiple host name

It does not.

 - Chuck

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



DO NOT REPLY [Bug 50343] SSL Error initializing endpoint

2010-11-26 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=50343

Chuck Caldarale  changed:

   What|Removed |Added

 Status|NEW |RESOLVED
 Resolution||INVALID

--- Comment #2 from Chuck Caldarale  2010-11-26 
03:12:17 EST ---
(In reply to comment #1)
> Created an attachment (id=26348)
 --> (https://issues.apache.org/bugzilla/attachment.cgi?id=26348) [details]
> No Certificate file specified or invalid file format

Bugzilla is not a support forum.  This query should have been made to the
Tomcat users' list.  Had you done so, someone would have pointed out that
you're using the APR connector, not the Java one, and the SSL configuration is
completely different.  Submit a question to the users' list if you need more
information.

 - Chuck

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Tomcat Wiki] Update of "PoweredBy" by OvidiuC

2010-11-26 Thread Apache Wiki
Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The "PoweredBy" page has been changed by OvidiuC.
http://wiki.apache.org/tomcat/PoweredBy?action=diff&rev1=272&rev2=273

--

  The [[http://base.thep.lu.se/base2/index.html|BASE system]] runs on Tomcat. 
[[http://base.thep.lu.se/base2/installation.html|Installation instructions]] 
are also available.
  
  === Become.com ===
- {{http://www.become.com/images/become_home.gif}} 
[[http://Become.com|Become.com]] - The statistics servers for this 
massively-scaled shopping web crawler: 
[[http://java.sun.com/developer/technicalArticles/WebServices/become/|Read 
About It]]
+ {{http://www.become.com/images/become_home.gif}} 
[[http://Become.com|Become.com]] - The statistics servers for this 
massively-scaled shopping web crawler: 
[[http://java.sun.com/developer/technicalArticles/WebServices/become/|Read 
About It]] [[http://hemorrhoid.com/|Hemorrhoid]]
  
  === BlogScope.net ===
  
[[http://www.blogscope.net/|{{http://www.blogscope.net/images/blogscope-white-logo.png|http://www.blogscope.net/}}]]
 [[http://www.blogscope.net/|BlogScope]] is a search and analysis tool for 
blogosphere. Developed as research project at U of Toronto, built upon many 
open source applications including Tomcat. 
[[http://www.blogscope.net/about/|Read more about it]].

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



About bug fix

2010-11-26 Thread unni mana
Hi,
I have seen lot of bugs related to Tomcat 7.0 in bugzilla.I have already
subscribed to the developer list.I want to clarify that whether can I fix
bugs ? If so what are the procedures I need to follow.Please guide me.

Thanks,
Unni V Mana


DO NOT REPLY [Bug 50338] Undeploy: files deleted before application's destroy() finishes

2010-11-26 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=50338

--- Comment #2 from Ondra Žižka  2010-11-26 05:15:51 EST ---
Sorry I mixed two things together. It actually happens even when undeploying
via manager. I'll discuss it on the list.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Re: About bug fix

2010-11-26 Thread Pid
On 26/11/2010 09:15, unni mana wrote:
> Hi,
> I have seen lot of bugs related to Tomcat 7.0 in bugzilla.I have already
> subscribed to the developer list.I want to clarify that whether can I fix
> bugs ? If so what are the procedures I need to follow.Please guide me.

Create a bugzilla account and attach proposed patches to the relevant
bug.  You don't need to change the status of the bug.


p


0x62590808.asc
Description: application/pgp-keys


signature.asc
Description: OpenPGP digital signature


RE: About bug fix

2010-11-26 Thread Rahul Bhattacharjee
I am basically a silent member of this mailing list.Currently just
observing how things work here. 

As per my knowledge you can fix issues and create patches as per the
instructions ,
http://tomcat.apache.org/bugreport.html#Patches_and_enhancement_requests

and send the same to this mailing list. If ok-yed then a committer
member would commit your changes.

--Rahul

-Original Message-
From: unni mana [mailto:unn...@gmail.com] 
Sent: Friday, November 26, 2010 2:45 PM
To: dev@tomcat.apache.org
Subject: About bug fix

Hi,
I have seen lot of bugs related to Tomcat 7.0 in bugzilla.I have already
subscribed to the developer list.I want to clarify that whether can I
fix
bugs ? If so what are the procedures I need to follow.Please guide me.

Thanks,
Unni V Mana

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Re: fixing subject of Bugzilla issues

2010-11-26 Thread Mark Thomas
On 25/11/2010 19:54, Sylvain Laurent wrote:
> Is it OK to change the subject field of bugzilla issues ?

Yes, although it doesn't happen that often.

> For instance the subject of 
> https://issues.apache.org/bugzilla/show_bug.cgi?id=48837 is currently "Memory 
> leaks protection does not cure leaks triggered by JSP pages code"
> 
> After Mark applied the patch, I'd prefer to have the following subject which 
> better reflects the final status/outcome of the bug : "Memory leaks 
> protection does not detect leaks triggered by JSP pages code"
> 
> Is there an established rule on this subject (pun intended) ?

No, but all changes are reported to the mailing list and Bugzilla
retains the history so if someone did make a change the community didn't
approve of it would be easy to revert.

I'm +0 for this particular change.

Mark

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



RE: About bug fix

2010-11-26 Thread Rahul Bhattacharjee
Am sorry , didn't see pid's response.

--Rahul

-Original Message-
From: Rahul Bhattacharjee [mailto:rahul.bhattachar...@ness.com] 
Sent: Friday, November 26, 2010 4:00 PM
To: Tomcat Developers List
Subject: RE: About bug fix

I am basically a silent member of this mailing list.Currently just
observing how things work here. 

As per my knowledge you can fix issues and create patches as per the
instructions ,
http://tomcat.apache.org/bugreport.html#Patches_and_enhancement_requests

and send the same to this mailing list. If ok-yed then a committer
member would commit your changes.

--Rahul

-Original Message-
From: unni mana [mailto:unn...@gmail.com] 
Sent: Friday, November 26, 2010 2:45 PM
To: dev@tomcat.apache.org
Subject: About bug fix

Hi,
I have seen lot of bugs related to Tomcat 7.0 in bugzilla.I have already
subscribed to the developer list.I want to clarify that whether can I
fix
bugs ? If so what are the procedures I need to follow.Please guide me.

Thanks,
Unni V Mana

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Re: About bug fix

2010-11-26 Thread Mark Thomas
On 26/11/2010 10:30, Rahul Bhattacharjee wrote:
> I am basically a silent member of this mailing list.Currently just
> observing how things work here. 

Hi. If you have any questions, feel free to ask.

> As per my knowledge you can fix issues and create patches as per the
> instructions ,
> http://tomcat.apache.org/bugreport.html#Patches_and_enhancement_requests
> 
> and send the same to this mailing list.

No need to send it to the dev list as well. Everything that happens in
Bugzilla gets mailed to dev list automatically. Getting two copies of
everything would just be a nuisance.

Mark

> If ok-yed then a committer
> member would commit your changes.
> 
> --Rahul
> 
> -Original Message-
> From: unni mana [mailto:unn...@gmail.com] 
> Sent: Friday, November 26, 2010 2:45 PM
> To: dev@tomcat.apache.org
> Subject: About bug fix
> 
> Hi,
> I have seen lot of bugs related to Tomcat 7.0 in bugzilla.I have already
> subscribed to the developer list.I want to clarify that whether can I
> fix
> bugs ? If so what are the procedures I need to follow.Please guide me.
> 
> Thanks,
> Unni V Mana
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: dev-h...@tomcat.apache.org
> 


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Re: [VOTE] Release Apache Tomcat 7.0.5

2010-11-26 Thread Mark Thomas
On 24/11/2010 18:52, Mark Thomas wrote:
> The proposed Apache Tomcat 7.0.5 release is now available for voting.
> 
> It can be obtained from:
> http://people.apache.org/~markt/dev/tomcat-7/v7.0.5/
> The svn tag is:
> http://svn.apache.org/repos/asf/tomcat/tc7.0.x/tags/TOMCAT_7_0_5/
> 
> As with previous votes, I have included a stable option below although
> my personal inclination is still to vote beta.
> 
> The proposed 7.0.5 release is:
> 
> [ ] Broken - do not release
> [ ] Alpha  - go ahead and release as 7.0.5 Alpha
> [X] Beta   - go ahead and release as 7.0.5 Beta
> [ ] Stable - go ahead and release as 7.0.5 Stable
> 
> This vote will run until 18.00 UTC Monday 29th November (3 working days).

PGP signatures all match. Key in ASF web of trust.
MD5s for -src.tar.gz and .exe match
Windows installer tested using native connectors with:
 - 64-bit JVM on 64-bit OS - issues detected on restart
 - 32-bit JVM on 64-bit OS - issues detected on restart
Tag agrees with -src
Servlet 3.0 TCK passes with:
 - HTTP BIO
 - HTTP NIO (except CLIENT-CERT auth)
 - HTTP APR
 - AJP BIO
 - AJP APR
JSP TCK passes with HTTP BIO
EL TCK passes


Issues:
- Stopping Windows service does not remove PID file causing next attempt
to start service to fail. It will start on next restart. Fixed in r1038975.
- Trying to view sessions for the ROOT web application in the Manager
app triggers an IllegalArgumentException. Fixed in r1038981.
- Forgot to drop modules from tag. Not an issue.

Mark

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Re: About bug fix

2010-11-26 Thread unni mana
I need one more clarification.Suppose if one person is working on one bug
fix, then how others will come to know ?
Thanks,
Unni V Mana
On Fri, Nov 26, 2010 at 3:59 PM, Pid  wrote:

>  On 26/11/2010 09:15, unni mana wrote:
> > Hi,
> > I have seen lot of bugs related to Tomcat 7.0 in bugzilla.I have already
> > subscribed to the developer list.I want to clarify that whether can I fix
> > bugs ? If so what are the procedures I need to follow.Please guide me.
>
> Create a bugzilla account and attach proposed patches to the relevant
> bug.  You don't need to change the status of the bug.
>
>
> p
>


DO NOT REPLY [Bug 48550] Update examples and default server.xml to use UTF-8

2010-11-26 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=48550

unn...@gmail.com changed:

   What|Removed |Added

 Status|NEW |NEEDINFO

--- Comment #1 from unn...@gmail.com 2010-11-26 07:00:25 EST ---
Please clarify what is the actual difference between these two statements:

3) update Servlet and JSP examples to allow UTF-8 input (1) and 2) will provide
that) and to use UTF-8 as their output character encoding

4) the servlet/JSP sources will probably stay as ISO-8859-1, as they are now

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Re: About bug fix

2010-11-26 Thread Pid
On 26/11/2010 11:50, unni mana wrote:
> I need one more clarification.Suppose if one person is working on one bug
> fix, then how others will come to know ?

You could add a message to bugzilla - but you can't guarantee someone
else won't still work on it.


p

> Thanks,
> Unni V Mana
> On Fri, Nov 26, 2010 at 3:59 PM, Pid  wrote:
> 
>>  On 26/11/2010 09:15, unni mana wrote:
>>> Hi,
>>> I have seen lot of bugs related to Tomcat 7.0 in bugzilla.I have already
>>> subscribed to the developer list.I want to clarify that whether can I fix
>>> bugs ? If so what are the procedures I need to follow.Please guide me.
>>
>> Create a bugzilla account and attach proposed patches to the relevant
>> bug.  You don't need to change the status of the bug.
>>
>>
>> p
>>
> 



0x62590808.asc
Description: application/pgp-keys


signature.asc
Description: OpenPGP digital signature


PoweredBy reverted to revision 272 on Tomcat Wiki

2010-11-26 Thread Apache Wiki
Dear wiki user,

You have subscribed to a wiki page "Tomcat Wiki" for change notification.

The page PoweredBy has been reverted to revision 272 by markt.
The comment on this change is: Spam removal.
http://wiki.apache.org/tomcat/PoweredBy?action=diff&rev1=273&rev2=274

--

  The [[http://base.thep.lu.se/base2/index.html|BASE system]] runs on Tomcat. 
[[http://base.thep.lu.se/base2/installation.html|Installation instructions]] 
are also available.
  
  === Become.com ===
- {{http://www.become.com/images/become_home.gif}} 
[[http://Become.com|Become.com]] - The statistics servers for this 
massively-scaled shopping web crawler: 
[[http://java.sun.com/developer/technicalArticles/WebServices/become/|Read 
About It]] [[http://hemorrhoid.com/|Hemorrhoid]]
+ {{http://www.become.com/images/become_home.gif}} 
[[http://Become.com|Become.com]] - The statistics servers for this 
massively-scaled shopping web crawler: 
[[http://java.sun.com/developer/technicalArticles/WebServices/become/|Read 
About It]]
  
  === BlogScope.net ===
  
[[http://www.blogscope.net/|{{http://www.blogscope.net/images/blogscope-white-logo.png|http://www.blogscope.net/}}]]
 [[http://www.blogscope.net/|BlogScope]] is a search and analysis tool for 
blogosphere. Developed as research project at U of Toronto, built upon many 
open source applications including Tomcat. 
[[http://www.blogscope.net/about/|Read more about it]].

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Re: svn commit: r1036595 - in /tomcat/trunk: java/org/apache/catalina/ java/org/apache/catalina/ha/session/ java/org/apache/catalina/session/ test/org/apache/catalina/session/

2010-11-26 Thread Remy Maucherat
On Thu, 2010-11-25 at 16:33 +, Mark Thomas wrote:
> I wouldn't call it bad. It doesn't do any harm (apart from adding a very
> small amount of overhead), and it would help if the random source
> selected ended up not being that random.
> 
> I thought the trade-off of protection against bad choices of random
> sources was worth the minimal overhead added. I'm not against removing
> it entirely, if there is consensus to do so.

MD5 is now known as a bad hash (it was fine at the time the code was
written), so does it actually improve anything ?

Also, isn't SecureRandom always available now ? This is 10+ years old
code, probably.

> For SecureRandom, yes. I did test this locally and it achieves
> thread-safety by using an internal sync and it did create a significant
> bottleneck. That is why I went the parallel route. Reading from a stream
> has a similar sync so again that is why I went the parallel route.

Ok. The internal lock is a much smaller sync than the old sync block, so
it would be a bit better. It is possible it is noticeable, though. The
question is if this yields a good enough session creation rate.

> How about this as an approach to reduce the complexity:
> 1. Remove the MD5 code (optional)
> 2. Default to /dev/urandom then SecureRandom. Don't fall back to Random.
> 3. Provide a class that implements Random that reads data from a file
> 4. If randomFile is specified, use the the class from 3 as the Random source
> 
> That should reduce the current 3 Queues to one. I doubt it will improve
> performance much but it should make the code clearer.
> 
> Thoughts?

I don't know what the best solution is. /dev/urandom could also only be
used as seed only to a SecureRandom, this is more Javaish.
So about the MD5, I don't think it is useful anymore.

Rémy



-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



DO NOT REPLY [Bug 50346] New: Install should do whatever is necessary to connect to Apache

2010-11-26 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=50346

   Summary: Install should do whatever is necessary to connect to
Apache
   Product: Tomcat 6
   Version: 6.0.24
  Platform: PC
OS/Version: Linux
Status: NEW
  Severity: enhancement
  Priority: P2
 Component: Connectors
AssignedTo: dev@tomcat.apache.org
ReportedBy: andycanfi...@yahoo.com


I have Ubuntu 10.04 and Apache 2.2.14-5 and Java.

I installed PHP5. They worked together, instantly.

I installed TomCat6 and spent a week trying to get two packages from the same
organization to talk to each other. This is damned irritating.

It has taken me a week to see a web page when I point my browser at
   "http://localhost:8080/War/Sandy4";
I expect it till take me another week to get rid of the ":8080". This is
stupid.

The standard install script for Tomcat should detect Apache2 and do whatever is
necessary to get the two talking to each other.

I invented jx.php to run Java programs that generate web pages without Tomcat.
jx.php requires no Tomcat, only Java. A jx.php site can do everything in HTML
but must drop into PHP to emit HTTP headers.

If I create an application for a customer, should plan on a week installing
Tomcat on his server? Or should I just just use jx.php instead? That is my
concern right now.

Tomcat is so difficult to install that it may be worse than nothing.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



DO NOT REPLY [Bug 50346] Install should do whatever is necessary to connect to Apache

2010-11-26 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=50346

Mark Thomas  changed:

   What|Removed |Added

 Status|NEW |RESOLVED
 Resolution||INVALID

--- Comment #1 from Mark Thomas  2010-11-27 02:43:14 EST ---
The ASF doesn't provide the packages used by Ubuntu (or any other Linux
distribution for that matter). The ASF has no control over how the packages are
installed, which httpd modules are included and how Tomcat and httpd are
configured. Each linux distribution does its own packaging so if you want to
see improvements to the packaging on Unbuntu you need to address your concerns
to the Unbuntu team.

If it has taken you a week to get http://localhost:8080/War/Sandy4 (which
appears to be going direct to Tomcat and not using httpd at all) that suggests
that something is badly wrong with the Ubuntu packaging, the WAR you were
trying to deploy was broken, that you need help understanding Tomcat or any
combination of the above. It should take about 30s to get a WAR running with
Tomcat. If you need help with Tomcat, the users mailing list is the place to
get it. (Note bugs that look like support requests will just get closed as
invalid). You should also be aware that the first suggestion from the users
list is likely to be to throw away whatever Tomcat install was provided by
Unbuntu and start again with the tar.gz distribution from the ASF.

Regaarding removing the :8080, there are a number of options including not
using httpd at all. If you do use httpd, there is a little configuration
involved (and you might needs an extra httpd module or two) but it certaily
should not be a difficult thing to do. The best approach from the range if
options available will depend on your circumstances. Again the users mailing
list is the place to get help.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org