Bug report for Taglibs [2014/10/19]
+---+ | Bugzilla Bug ID | | +-+ | | Status: UNC=Unconfirmed NEW=New ASS=Assigned| | | OPN=ReopenedVER=Verified(Skipped Closed/Resolved) | | | +-+ | | | Severity: BLK=Blocker CRI=Critical REG=Regression MAJ=Major | | | | MIN=Minor NOR=NormalENH=Enhancement TRV=Trivial | | | | +-+ | | | | Date Posted | | | | | +--+ | | | | | Description | | | | | | | |38193|Ass|Enh|2006-01-09|[RDC] BuiltIn Grammar support for Field | |38600|Ass|Enh|2006-02-10|[RDC] Enable RDCs to be used in X+V markup (X+RDC)| |42413|New|Enh|2007-05-14|[PATCH] Log Taglib enhancements | |46052|New|Nor|2008-10-21|SetLocaleSupport is slow to initialize when many l| |48333|New|Enh|2009-12-02|TLD generator | |55609|New|Enh|2013-09-28|c:forEach loop on integer range consumes unnecessa| +-+---+---+--+--+ | Total6 bugs | +---+ - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
Bug report for Tomcat 6 [2014/10/19]
+---+ | Bugzilla Bug ID | | +-+ | | Status: UNC=Unconfirmed NEW=New ASS=Assigned| | | OPN=ReopenedVER=Verified(Skipped Closed/Resolved) | | | +-+ | | | Severity: BLK=Blocker CRI=Critical REG=Regression MAJ=Major | | | | MIN=Minor NOR=NormalENH=Enhancement TRV=Trivial | | | | +-+ | | | | Date Posted | | | | | +--+ | | | | | Description | | | | | | | |41679|New|Enh|2007-02-22|SemaphoreValve should be able to filter on url pat| |43400|New|Enh|2007-09-14|enum support for tag libs | |43742|New|Enh|2007-10-30|.tag compiles performed one at a time -- extremel| |43979|New|Enh|2007-11-27|Add abstraction for Java and Classfile output | |44199|New|Enh|2008-01-10|expose current backlog queue size | |44225|New|Enh|2008-01-14|SSL connector tries to load the private keystore f| |44294|New|Enh|2008-01-25|Support for EL functions with varargs | |44312|Opn|Enh|2008-01-28|Warn when overwritting docBase of the default Host| |44645|New|Enh|2008-03-20|[Patch] JNDIRealm - Doesn't support JNDI "java.nam| |44787|New|Enh|2008-04-09|provide more error context on "java.lang.IllegalSt| |45014|New|Enh|2008-05-15|Request and Response classes should have wrappers | |45832|New|Enh|2008-09-18|add DIGEST authentication support to Ant tasks| |45878|New|Enh|2008-09-24|Generated jars do not contain proper manifests or | |45879|Opn|Enh|2008-09-24|Windows installer fails to install NOTICE and RELE| |45931|Opn|Enh|2008-10-01|trimSpaces incorrectly modifies output| |46173|New|Enh|2008-11-09|Small patch for manager app: Setting an optional c| |46263|Opn|Enh|2008-11-21|Tomcat reloading of context.xml does not update do| |46284|New|Enh|2008-11-24|Add flag to DeltaManager that blocks processing cl| |46350|New|Enh|2008-12-05|Maven repository should contain source bundles| |46558|Opn|Enh|2009-01-19|Shutdown port with address binding| |46902|New|Enh|2009-03-24|LoginValve to bypass restrictions of j_security_ch| |47214|New|Enh|2009-05-17|Inner classes that are explicitly referenced - sho| |47242|New|Enh|2009-05-22|request for AJP command line client | |47281|New|Enh|2009-05-28|Efficiency of the JDBCStore | |47407|New|Enh|2009-06-23|HttpSessionListener doesn't operate in the session| |47467|New|Enh|2009-07-02|Deployment of the war file by URL when contextpath| |47834|New|Enh|2009-09-14|TldConfig throws Exception when exploring unpacked| |48358|Opn|Enh|2009-12-09|JSP-unloading reloaded| |48543|New|Enh|2010-01-14|[Patch] More flexibility in specifying -Dcatalina.| |48672|New|Enh|2010-02-03|Tomcat Virtual Host Manager (/host-manager) have b| |48674|New|Enh|2010-02-03|Tomcat Virtual Host Manager application doesn't pe| |48743|New|Enh|2010-02-15|Make the SLEEP variable in catalina.sh settable fr| |48899|New|Enh|2010-03-12|Guess URI charset should solve lot of problems| |48922|New|Enh|2010-03-16|org.apache.catalina.connector.Request clone static| |48928|New|Enh|2010-03-17|An alternative solution to preloading classes when| |49176|Opn|Enh|2010-04-23|Jasper in Dev Mode Is Memory Inefficient | |49464|New|Enh|2010-06-18|DefaultServlet and CharacterEncoding | |49531|New|Enh|2010-06-30|singlesignon failover not working on DeltaManager/| |49804|New|Enh|2010-08-23|Allow Embedded.redirectStreams value to be configu| |49943|New|Enh|2010-09-16|Logging (via juli) does not reread configuration c| |50285|New|Enh|2010-11-17|Standard HTTP and AJP connectors silently ignore a| |50288|New|Enh|2010-11-17|Uploading a war file that already exists should au| |50677|Opn|Enh|2011-01-27|Allow system property variables in catalina.proper| |50692|New|Enh|2011-01-31|Improve log message in ThreadPool.logFull | |51142|New|Enh|2011-05-03|Offer possible resolution of StringIndexOutOfBound| |51513|New|Enh|2011-07-15|GzipInterceptor: Do not compress small packages | |52791|New|Enh|2012-02-28|[PATCH] read windows installer default values from| |52924|New|Enh|2012-03-15|Add support for per-application JSP compile config| |53011|New|Enh|2012-03-31|Ant Jasper task fails after one error | |53031|New|Enh|2012-04-03|Ant Jasper task should support Fork option| |53394|New|Maj|2012-06-11|Log warning if SSLv2 is enabled | |53677|
Bug report for Tomcat Connectors [2014/10/19]
+---+ | Bugzilla Bug ID | | +-+ | | Status: UNC=Unconfirmed NEW=New ASS=Assigned| | | OPN=ReopenedVER=Verified(Skipped Closed/Resolved) | | | +-+ | | | Severity: BLK=Blocker CRI=Critical REG=Regression MAJ=Major | | | | MIN=Minor NOR=NormalENH=Enhancement TRV=Trivial | | | | +-+ | | | | Date Posted | | | | | +--+ | | | | | Description | | | | | | | |34526|Opn|Nor|2005-04-19|Truncated content in decompressed requests from mo| |35959|Opn|Enh|2005-08-01|mod_jk not independant of UseCanonicalName| |43303|New|Enh|2007-09-04|Versioning under Windows not reported by many conn| |44290|Inf|Nor|2008-01-24|mod_jk/1.2.26: retry is not useful for an importan| |44349|Inf|Maj|2008-02-04|mod_jk/1.2.26 module does not read worker.status.s| |44379|New|Enh|2008-02-07|convert the output of strftime into UTF-8 | |44454|New|Nor|2008-02-19|busy count reported in mod_jk inflated, causes inc| |44571|New|Enh|2008-03-10|Limits busy per worker to a threshold | |45063|New|Nor|2008-05-22|JK-1.2.26 IIS ISAPI filter issue when running diff| |45313|New|Nor|2008-06-30|mod_jk 1.2.26 & apache 2.2.9 static compiled on so| |46337|New|Nor|2008-12-04|real worker name is wrong | |46767|New|Enh|2009-02-25|mod_jk to send DECLINED in case no fail-over tomca| |47327|New|Enh|2009-06-07|remote_user not logged in apache logfile | |47617|Inf|Enh|2009-07-31|include time spent doing ajp_get_endpoint() in err| |47678|New|Cri|2009-08-11|Unable to allocate shared memory when using isapi_| |47714|Opn|Cri|2009-08-20|Response mixed between users | |47750|New|Maj|2009-08-27|Loss of worker settings when changing via jkstatus| |47795|New|Maj|2009-09-07|service sticky_session not being set correctly wit| |47840|Inf|Min|2009-09-14|A broken worker name is written in the log file. | |48191|New|Maj|2009-11-13|Problem with mod_jk 1.2.28 - Can not render up the| |48460|New|Nor|2009-12-30|mod_proxy_ajp document has three misleading portio| |48490|New|Nor|2010-01-05|Changing a node to stopped in uriworkermap.propert| |48513|New|Enh|2010-01-09|IIS Quick setup instructions | |48564|New|Nor|2010-01-18|Unable to turn off retries for LB worker | |48830|New|Nor|2010-03-01|IIS shutdown blocked in endpoint service when serv| |48891|Opn|Enh|2010-03-11|Missing EOL-style settings in tomcat/jk/trunk | |49035|New|Maj|2010-04-01|data lost when post a multipart/form-data form| |49063|New|Enh|2010-04-07|Please add JkStripSession status in jk-status work| |49135|New|Enh|2010-04-16|SPDY Connector for The Tomcat | |49469|New|Enh|2010-06-19|Workers status page has negative number of connect| |49732|Opn|Nor|2010-08-10|reply_timeout can't wait forever. | |49822|New|Enh|2010-08-25|Add hash lb worker method | |49903|New|Enh|2010-09-09|Make workers file reloadable | |50186|New|Nor|2010-10-31|Wrong documentation of connection_pool_timeout / c| |52334|New|Maj|2011-12-14|recover_time is not properly used | |52483|New|Enh|2012-01-18|Print JkOptions's options in log file and jkstatus| |52651|New|Nor|2012-02-13|JKSHMFile size limitation | |53883|New|Maj|2012-09-17|isapi_redirect v 1.2.37 crashes w3wp.exe on the p| |53977|New|Maj|2012-10-07|32bits isapi connector cannot work in wow64 mode | |54027|New|Cri|2012-10-18|isapi send request to outside address instead of i| |54112|Opn|Blk|2012-11-07|ISAPI redirector not working when IIS recycles| |54117|New|Maj|2012-11-08|access violation exception in isapi_redirect.dll | |54177|New|Nor|2012-11-20|jkmanager generates non-well-formed XML for certai| |54596|New|Nor|2013-02-22|Relative path functionality truncates last charact| |54621|New|Nor|2013-02-28|[PATCH] custom mod_jk availability checks | |54646|New|Trv|2013-03-06|socket_keepalive is sometimes 1 or true or True in| |54923|New|Nor|2013-05-03|nsapi_redirect.so does not work with iPlanet on So| |56005|New|Nor|2014-01-14|ISAPI redirector WEB-INF/META-INF Path Check false| |56452|New|Nor|2014-04-24|IPv6 address and log level debug caused crash | |56489|New|Enh|2014-05-05|Include a directory for configuration files | |56576|New|Enh|2014-05-29|Websocket support | |56618|
Bug report for Tomcat 8 [2014/10/19]
+---+ | Bugzilla Bug ID | | +-+ | | Status: UNC=Unconfirmed NEW=New ASS=Assigned| | | OPN=ReopenedVER=Verified(Skipped Closed/Resolved) | | | +-+ | | | Severity: BLK=Blocker CRI=Critical REG=Regression MAJ=Major | | | | MIN=Minor NOR=NormalENH=Enhancement TRV=Trivial | | | | +-+ | | | | Date Posted | | | | | +--+ | | | | | Description | | | | | | | |43925|Opn|Enh|2007-11-21|org.apache.jasper.runtime.BodyContentImpl causing | |51497|New|Enh|2011-07-11|Use canonical IPv6 text representation in logs| |53737|Opn|Enh|2012-08-18|Use ServletContext.getJspConfigDescriptor() in Jas| |53930|New|Enh|2012-09-24|allow capture of catalina stdout/stderr to a comma| |54503|New|Enh|2013-01-29|SAML2 based single sign on| |54700|New|Enh|2013-03-15|Improvement: Add support for system property to sp| |54741|New|Enh|2013-03-22|Add org.apache.catalina.startup.Tomcat#addWebapp(S| |55006|New|Enh|2013-05-22|Add http proxy support for ClientEndpoint using sy| |55243|New|Enh|2013-07-11|Add special search string for nested roles| |55252|New|Enh|2013-07-12|Separate Ant and command-line wrappers for JspC | |55383|New|Enh|2013-08-07|Improve markup and design of Tomcat's HTML pages | |55479|New|Enh|2013-08-24|JSR 196 (JASPIC) support in Tomcat| |9|New|Enh|2013-09-14|UserDatabaseRealm enhacement: may use local JNDI | |55675|New|Enh|2013-10-18|Checking and handling invalid configuration option| |55770|New|Enh|2013-11-12|Allow the crlFile to be reloaded | |55788|New|Enh|2013-11-16|TagPlugins should key on tag QName rather than imp| |55884|Ver|Maj|2013-12-14|JSPs no longer compile in Java 8 | |55969|New|Enh|2014-01-07|Security-related enhancements to the Windows Insta| |55988|New|Enh|2014-01-11|Add parameter useCipherSuitesOrder to JSSE (BIO an| |56166|New|Enh|2014-02-20|Suggestions for exception handling (avoid potentia| |56361|New|Enh|2014-04-08|org.apache.tomcat.websocket.WsWebSocketContainer#b| |56397|New|Enh|2014-04-11|Establish parallel Maven-based build process | |56398|New|Enh|2014-04-11|Support Arquillian-based unit testing | |56399|New|Enh|2014-04-11|Re-factor request/response recycling so Coyote and| |56402|New|Enh|2014-04-11|Add support for HTTP Upgrade to AJP components| |56448|New|Enh|2014-04-23|Implement a robust solution for client initiated S| |56546|New|Enh|2014-05-19|Improve thread trace logging in WebappClassLoader.| |56650|New|Enh|2014-06-20|Websockets session replication support| |56676|New|Enh|2014-06-26|Normalize access to native library| |56713|New|Enh|2014-07-12|Limit time that incoming request waits while webap| |56724|New|Enh|2014-07-15|Restart Container background thread if it died une| |56777|New|Enh|2014-07-28|Allow configuration resources to be loaded from pl| |56838|Opn|Enh|2014-08-11|Performance drop when repeatedly calling WebappCla| |56890|Inf|Maj|2014-08-26|getRealPath returns null | |56917|New|Enh|2014-09-05|Create a configuration to write relative 302 respo| |56966|New|Nor|2014-09-11|AccessLogValve's elapsed time has 15ms precision o| |57021|New|Enh|2014-09-25|Improve logging in AprLifecycleListener and jni.Li| |57091|New|Cri|2014-10-14|Websockets cannot be used in Windows applet plugin| |57103|New|Nor|2014-10-17|Download page should provide details on how to ver| |57105|New|Nor|2014-10-17| under in web.xml on| |57108|New|Enh|2014-10-17|Implement multiple sslcontext SNI (server name ind| |57113|New|Nor|2014-10-18|ImportHandler not returning class properly from re| +-+---+---+--+--+ | Total 42 bugs | +---+ - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
Bug report for Tomcat Native [2014/10/19]
+---+ | Bugzilla Bug ID | | +-+ | | Status: UNC=Unconfirmed NEW=New ASS=Assigned| | | OPN=ReopenedVER=Verified(Skipped Closed/Resolved) | | | +-+ | | | Severity: BLK=Blocker CRI=Critical REG=Regression MAJ=Major | | | | MIN=Minor NOR=NormalENH=Enhancement TRV=Trivial | | | | +-+ | | | | Date Posted | | | | | +--+ | | | | | Description | | | | | | | |48655|Inf|Nor|2010-02-02|Active multipart downloads prevent tomcat shutdown| |49038|Inf|Nor|2010-04-02|Crash in tcnative | |52319|Inf|Maj|2011-12-12|Tomcat 6 crashes with [libapr-1.so.0+0x196da] sig| |52627|New|Min|2012-02-08|Segmentation fault in org.apache.tomcat.jni.File.i| |53605|Inf|Nor|2012-07-26|use tcnative-1.1.24 Tomcat shutdown still crash | |53847|Inf|Nor|2012-09-10|High CPU usage in tomcat native 1.22+ | |53940|New|Enh|2012-09-27|Added support for new CRL loading after expiration| |53952|Opn|Nor|2012-10-02|Add support for TLS 1.1 and 1.2 | |54085|New|Nor|2012-11-01|ssl_socket_recv sometimes loops infinitely with no| |54664|New|Reg|2013-03-11|[1.1.27 branch] Poll.remove incorrectly reports AP| |55087|New|Cri|2013-06-10|tomcat crashes in tcnative-1.dll with OCSP when OC| |55113|Inf|Nor|2013-06-18|FIPS-compatible OpenSSL fails fingerprint test in | |55114|New|Nor|2013-06-18|BUILDING file in win32 source package contains UNI| |55706|New|Nor|2013-10-25|broken apr version check in native v1.1.29 build; | |55771|New|Maj|2013-11-12|Memory leak and then crash in org.apache.tomcat.jn| |55797|Inf|Nor|2013-11-19|Tomcat 7.0.47 crashes using server jvm.dll and APR| |55938|New|Nor|2013-12-29|clang-analyzer report for 1.1.31 | |56027|Opn|Nor|2014-01-17|Unable to use TCN on RHEL6 boxes if box is booted | |56108|New|Nor|2014-02-04|Allow user-defined Diffie-Hellman parameters | |56313|New|Maj|2014-03-25|Tomcat 8 crashes in tcnative-1.dll+0x7923 | |56378|New|Nor|2014-04-09|Cert load fails if cert is located in path with no| |56415|New|Maj|2014-04-16|EXCEPTION_ACCESS_VIOLATION (0xc005) in tcnativ| |56844|New|Nor|2014-08-13|Update to OpenSSL 1.0.1j | |56878|New|Trv|2014-08-21|Checking whether unsigned int is less than zero is| |56997|New|Reg|2014-09-19|java.lang.UnsatisfiedLinkError: org.apache.tomcat.| +-+---+---+--+--+ | Total 25 bugs | +---+ - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
Bug report for Tomcat 7 [2014/10/19]
+---+ | Bugzilla Bug ID | | +-+ | | Status: UNC=Unconfirmed NEW=New ASS=Assigned| | | OPN=ReopenedVER=Verified(Skipped Closed/Resolved) | | | +-+ | | | Severity: BLK=Blocker CRI=Critical REG=Regression MAJ=Major | | | | MIN=Minor NOR=NormalENH=Enhancement TRV=Trivial | | | | +-+ | | | | Date Posted | | | | | +--+ | | | | | Description | | | | | | | |18500|New|Enh|2003-03-30|Host aliases to match by regular expression | |28039|Opn|Enh|2004-03-30|Cluster Support for SingleSignOn | |40881|Opn|Enh|2006-11-02|Unable to receive message through TCP channel -> | |41007|Opn|Enh|2006-11-20|Can't define customized 503 error page| |43866|New|Enh|2007-11-14|add support for session attribute propagation with| |44216|New|Enh|2008-01-11|Don't reuse session ID even if emptySessionPath=tr| |49395|New|Enh|2010-06-06|manager.findLeaks : display the date when the leak| |49589|New|Enh|2010-07-12|Tag handlers with constant attribute values are al| |49785|New|Enh|2010-08-19|Enabling TLS for JNDIRealm| |49821|New|Enh|2010-08-25|Tomcat CLI [PATCH/Contribution] | |50019|New|Enh|2010-09-28|Adding JNDI "lookup-name" support In XML and Resou| |50175|New|Enh|2010-10-28|Enhance memory leak detection by selectively apply| |50234|New|Enh|2010-11-08|JspC use servlet 3.0 features | |50504|New|Enh|2010-12-21|Allow setting query string character set trough re| |50670|New|Enh|2011-01-27|Tribes | RpcChannel | Add option to specify extern| |50944|Ver|Blk|2011-03-18|JSF: java.lang.NullPointerException at com.sun.fac| |51195|New|Enh|2011-05-13|"Find leaks" reports a false positive memory/class| |51423|Inf|Enh|2011-06-23|[Patch] to add a path and a version parameters to | |51463|New|Enh|2011-07-01|Tomcat.setBaseDir (package org.apache.catalina.st| |51496|New|Enh|2011-07-11|NSIS - Warn that duplicate service name will resul| |51587|New|Enh|2011-07-29|Implement status and uptime commands | |51953|New|Enh|2011-10-04|Proposal: netmask filtering valve and filter [PATC| |52235|New|Enh|2011-11-23|Please do a bit of SEO tuning for the web site| |52381|New|Enh|2011-12-22|Please add OSGi metadata | |52448|New|Enh|2012-01-11|Cache jar indexes in WebappClassLoader to speed up| |52489|New|Enh|2012-01-19|Enhancement request for code signing of war files | |52688|New|Enh|2012-02-16|Add ability to remove old access log files [PATCHE| |52952|New|Enh|2012-03-20|Improve ExtensionValidator handling for embedded s| |53085|New|Enh|2012-04-16|[perf] [concurrency] DefaultInstanceManager.annota| |53387|New|Enh|2012-06-08|SSI: Allow to use $1 to get result of regular expr| |53411|Opn|Enh|2012-06-13|NullPointerException in org.apache.tomcat.util.buf| |53492|New|Enh|2012-07-01|Make JspC shell multithreaded | |53553|New|Enh|2012-07-16|[PATCH] Deploy uploaded WAR with context.xml from | |53620|New|Enh|2012-07-30|[juli] delay opening a file until something gets l| |54330|New|Enh|2012-12-19|Patch with some refactoring of Member.java [PATCH | |54499|New|Enh|2013-01-29|Implementation of Extensible EL Interpreter | |54618|New|Enh|2013-02-28|Add filter implementing HTTP Strict Transport Secu| |54802|New|Enh|2013-04-04|Provide location information for exceptions thrown| |55104|New|Enh|2013-06-16|Allow passing arguments with spaces to Commons Dae| |55470|New|Enh|2013-08-23|Help users for ClassNotFoundExceptions during star| |55477|New|Enh|2013-08-23|Add a solution to map an realm name to a security | |55662|New|Enh|2013-10-17|Add a way to set an instance of java.sql.Driver di| |56148|New|Enh|2014-02-17|support (multiple) ocsp stapling | |56181|New|Enh|2014-02-23|RemoteIpValve & RemoteIpFilter: HttpServletRequest| |56300|New|Enh|2014-03-22|[Tribes] No useful examples, lack of documentation| |56425|Opn|Nor|2014-04-17|Unable to find unambiguous method in class String | |56438|New|Enh|2014-04-21|If jar scan does not find context config or TLD co| |56614|New|Enh|2014-06-12|Add a switch to ignore annotations detection on ta| |56787|New|Enh|2014-07-29|Simplified jndi name parsing | |56848|Opn|Nor|2014-08-13|Tomcat accept-language parsing doesn't properly ha| |56931|New|Maj|2014-09-08|VirtualDirContext requires an absolute DocBase| |57047|
Bug report for Tomcat Modules [2014/10/19]
+---+ | Bugzilla Bug ID | | +-+ | | Status: UNC=Unconfirmed NEW=New ASS=Assigned| | | OPN=ReopenedVER=Verified(Skipped Closed/Resolved) | | | +-+ | | | Severity: BLK=Blocker CRI=Critical REG=Regression MAJ=Major | | | | MIN=Minor NOR=NormalENH=Enhancement TRV=Trivial | | | | +-+ | | | | Date Posted | | | | | +--+ | | | | | Description | | | | | | | |48240|New|Nor|2009-11-19|Tomcat-Lite missing @Override markers | |48268|New|Nor|2009-11-23|Patch to fix generics in tomcat-lite | |48861|New|Nor|2010-03-04|Files without AL headers | |49685|New|Nor|2010-08-02|Unsafe synchronization in class ManagedBean | |49686|New|Nor|2010-08-02|Using an instance lock to protect static shared da| |50571|Inf|Nor|2011-01-11|Tomcat 7 JDBC connection pool exception enhancemen| |51595|Inf|Nor|2011-08-01|org.apache.tomcat.jdbc.pool.jmx.ConnectionPool sho| |51879|Inf|Enh|2011-09-22|Improve access to Native Connection Methods | |52024|Inf|Enh|2011-10-13|Custom interceptor to support automatic failover o| |53199|Inf|Enh|2012-05-07|Refactor ConnectionPool to use ScheduledExecutorSe| |54437|New|Enh|2013-01-16|Update PoolProperties javadoc for ConnectState int| |54929|Inf|Nor|2013-05-05|jdbc-pool cannot be used with Java 1.5, "java.lang| |55078|New|Nor|2013-06-07|Configuring a DataSource Resource with dataSourceJ| |56046|New|Enh|2014-01-21|org.apache.tomcat.jdbc.pool.XADataSource InitSQL p| |56088|New|Maj|2014-01-29|AbstractQueryReport$StatementProxy throws exceptio| |56310|Inf|Maj|2014-03-25|PooledConnection and XAConnection not handled corr| |56586|New|Nor|2014-06-02|initSQL should be committed if defaultAutoCommit =| |56660|New|Maj|2014-06-23|Resource leak in FairBlockingQueue::poll method | |56765|New|Cri|2014-07-23|Classloader leak in Tomcat 8.0.9 caused by DBCP 2.| |56775|New|Nor|2014-07-28|PoolCleanerTime schedule issue| |56779|New|Nor|2014-07-28|Allow multiple connection initialization statement| |56790|New|Nor|2014-07-29|Resizing pool.maxActive to a higher value at runti| |56798|New|Nor|2014-07-31|Idle eviction strategy could perform better (and i| |56804|New|Nor|2014-08-02|Use a default validationQueryTimeout other than "f| |56805|New|Nor|2014-08-02|datasource.getConnection() may be unnecessarily bl| |56837|New|Nor|2014-08-11|if validationQuery have error with timeBetweenEvic| |56970|New|Nor|2014-09-11|MaxActive vs. MaxTotal for commons-dbcp and tomcat| |56974|New|Nor|2014-09-12|jdbc-pool validation query defaultAutoCommit statu| +-+---+---+--+--+ | Total 28 bugs | +---+ - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
svn commit: r1632896 - /tomcat/tc7.0.x/trunk/webapps/docs/changelog.xml
Author: kkolinko Date: Sun Oct 19 12:07:48 2014 New Revision: 1632896 URL: http://svn.apache.org/r1632896 Log: Changelog for r1627420 Modified: tomcat/tc7.0.x/trunk/webapps/docs/changelog.xml Modified: tomcat/tc7.0.x/trunk/webapps/docs/changelog.xml URL: http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/webapps/docs/changelog.xml?rev=1632896&r1=1632895&r2=1632896&view=diff == --- tomcat/tc7.0.x/trunk/webapps/docs/changelog.xml (original) +++ tomcat/tc7.0.x/trunk/webapps/docs/changelog.xml Sun Oct 19 12:07:48 2014 @@ -135,6 +135,15 @@ + + + +56079: The Apache Tomcat Windows service and the Apache +Tomcat Windows service monitor application are now digitally +signed. (markt) + + + - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
svn commit: r1632897 - in /tomcat/tc6.0.x/trunk: ./ STATUS.txt build.properties.default webapps/docs/changelog.xml
Author: kkolinko Date: Sun Oct 19 12:17:26 2014 New Revision: 1632897 URL: http://svn.apache.org/r1632897 Log: Partial fix for https://issues.apache.org/bugzilla/show_bug.cgi?id=56079 Switch to the signed versions of Apache Commons Daemon 1.0.15 binaries. Note: As location of already downloaded files has not changed, one has to clear the previously downloaded files from ${base.path}/commons-daemon-1.0.15 to get the updated dependency. Modified: tomcat/tc6.0.x/trunk/ (props changed) tomcat/tc6.0.x/trunk/STATUS.txt tomcat/tc6.0.x/trunk/build.properties.default tomcat/tc6.0.x/trunk/webapps/docs/changelog.xml Propchange: tomcat/tc6.0.x/trunk/ -- Merged /tomcat/trunk:r1627033 Merged /tomcat/tc7.0.x/trunk:r1627420 Modified: tomcat/tc6.0.x/trunk/STATUS.txt URL: http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/STATUS.txt?rev=1632897&r1=1632896&r2=1632897&view=diff == --- tomcat/tc6.0.x/trunk/STATUS.txt (original) +++ tomcat/tc6.0.x/trunk/STATUS.txt Sun Oct 19 12:17:26 2014 @@ -57,16 +57,6 @@ PATCHES PROPOSED TO BACKPORT: +1: kkolinko, markt -1: -* For https://issues.apache.org/bugzilla/show_bug.cgi?id=56079 - Switch to the signed versions of Apache Commons Daemon 1.0.15 binaries. - - Motivation: An improvement. As signed binaries are available, let's use - them. I do not envision any drawbacks. - - http://svn.apache.org/r1627420 - +1: kkolinko, markt, remm - -1: - * Mitigate POODLE by disabling SSLv3 by default for JSSE http://people.apache.org/~markt/patches/2014-10-17-poodle-tc6-v1.patch +1: markt Modified: tomcat/tc6.0.x/trunk/build.properties.default URL: http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/build.properties.default?rev=1632897&r1=1632896&r2=1632897&view=diff == --- tomcat/tc6.0.x/trunk/build.properties.default (original) +++ tomcat/tc6.0.x/trunk/build.properties.default Sun Oct 19 12:17:26 2014 @@ -151,10 +151,10 @@ commons-daemon.jar=${commons-daemon.home commons-daemon.native.win.home=${commons-daemon.home}/windows commons-daemon.native.win.mgr.exe=${commons-daemon.native.win.home}/prunmgr.exe commons-daemon.native.src.tgz=${commons-daemon.home}/commons-daemon-${commons-daemon.version}-native-src.tar.gz -commons-daemon.native.win.zip=${commons-daemon.home}/commons-daemon-${commons-daemon.version}-bin-windows.zip +commons-daemon.native.win.zip=${commons-daemon.home}/commons-daemon-${commons-daemon.version}-bin-windows-signed.zip commons-daemon.bin.loc.1=${base-commons.loc.1}/daemon/binaries/commons-daemon-${commons-daemon.version}-bin.tar.gz commons-daemon.bin.loc.2=${base-commons.loc.2}/daemon/binaries/commons-daemon-${commons-daemon.version}-bin.tar.gz commons-daemon.native.src.loc.1=${base-commons.loc.1}/daemon/source/commons-daemon-${commons-daemon.version}-native-src.tar.gz commons-daemon.native.src.loc.2=${base-commons.loc.2}/daemon/source/commons-daemon-${commons-daemon.version}-native-src.tar.gz -commons-daemon.native.win.loc.1=${base-commons.loc.1}/daemon/binaries/windows/commons-daemon-${commons-daemon.version}-bin-windows.zip -commons-daemon.native.win.loc.2=${base-commons.loc.2}/daemon/binaries/windows/commons-daemon-${commons-daemon.version}-bin-windows.zip +commons-daemon.native.win.loc.1=${base-commons.loc.1}/daemon/binaries/windows/commons-daemon-${commons-daemon.version}-bin-windows-signed.zip +commons-daemon.native.win.loc.2=${base-commons.loc.2}/daemon/binaries/windows/commons-daemon-${commons-daemon.version}-bin-windows-signed.zip Modified: tomcat/tc6.0.x/trunk/webapps/docs/changelog.xml URL: http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/webapps/docs/changelog.xml?rev=1632897&r1=1632896&r2=1632897&view=diff == --- tomcat/tc6.0.x/trunk/webapps/docs/changelog.xml (original) +++ tomcat/tc6.0.x/trunk/webapps/docs/changelog.xml Sun Oct 19 12:17:26 2014 @@ -55,6 +55,11 @@ +56079: The Apache Tomcat Windows service and the Apache +Tomcat Windows service monitor application are now digitally +signed. (markt/kkolinko) + + 56988: Allow to use relative path in base.path setting when building Tomcat. (kkolinko) - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
[Bug 57116] New: Bio connector: Do not fallback to default protocol list if "sslEnabledProtocols" has no matches
https://issues.apache.org/bugzilla/show_bug.cgi?id=57116 Bug ID: 57116 Summary: Bio connector: Do not fallback to default protocol list if "sslEnabledProtocols" has no matches Product: Tomcat 6 Version: 6.0.41 Hardware: PC Status: NEW Severity: normal Priority: P2 Component: Connectors Assignee: dev@tomcat.apache.org Reporter: knst.koli...@gmail.com I noted this issue while reviewing Mark's patch to disable SSLv3 proposed for Tomcat 6, but it is present in the code before that patch and is reproducible with 6.0.42. Steps to reproduce: 1. Configure an HTTPS connector in Tomcat using BIO protocol 2. Set sslEnabledProtocols property on that connector to some random value. 1.+2. may be done by the following steps: a) Create a public key pair for localhost with $JAVA_HOME/bin/keytool -genkey -alias tomcat -keyalg RSA and specify a password value of "changeit". "Your name" field is "localhost", the other fields are "Unknown". b) Paste the following into server.xml: 3. Start Tomcat 4. Expected: Connector start failure due to broken configuration. Actual: Tomcat starts successfully and can be accessed via https://localhost:8443/ Cause: == In JSSESocketFactory.initServerSocket(ServerSocket ssocket) there is the following code: String requestedProtocols = (String) attributes.get("protocols"); setEnabledProtocols(socket, getEnabledProtocols(socket, requestedProtocols)); The "getEnabledProtocols(..)" method filters requested protocols vs. socket.getSupportedProtocols(). If there is no match, it returns null. The "setEnabledProtocols(..)" does if (protocols != null) { socket.setEnabledProtocols(protocols); } Thus instead of failing with a message, it silently falls back to using the default list of enabled protocols on a socket. The problem is that the default protocol list may be less secure, that server administrator has tried to configure. Improve error checking = I think that silent filtering of sslEnabledProtocols by socket.getSupportedProtocols() is wrong. In case of a typo, e.g. sslEnabledProtocols="TLSv1,foo" the "foo" value shall cause a configuration error instead of being silently filtered. The Nio connector uses different implementation, via NioEndpoint.createSSLEngine() -> engine.setEnabledProtocols(sslEnabledProtocolsarr) and that method is documented to throw IllegalArgumentException on unsupported protocol names. [1] [1] http://docs.oracle.com/javase/7/docs/api/javax/net/ssl/SSLEngine.html#setEnabledProtocols%28java.lang.String[]%29 The behaviour of Nio connector cannot be tested in 6.0.41/6.0.42, as it does not handle "sslEnabledProtocols" attribute due to bug 57102. Testing it with the current tc6.0.x @1632897 it starts successfully, but a web browser cannot connect to it. The following is logged for each connection attempt via HTTPS (using JDK 5u20): [[[ 19.10.2014 18:09:26 org.apache.tomcat.util.net.NioEndpoint setSocketOptions SEVERE: java.lang.IllegalArgumentException: foo at com.sun.net.ssl.internal.ssl.ProtocolVersion.valueOf(ProtocolVersion.java:120) at com.sun.net.ssl.internal.ssl.ProtocolList.(ProtocolList.java:36) at com.sun.net.ssl.internal.ssl.SSLEngineImpl.setEnabledProtocols(SSLEngineImpl.java:1723) at org.apache.tomcat.util.net.NioEndpoint.createSSLEngine(NioEndpoint.java:1145) at org.apache.tomcat.util.net.NioEndpoint.setSocketOptions(NioEndpoint.java:1098) at org.apache.tomcat.util.net.NioEndpoint$Acceptor.run(NioEndpoint.java:1331) at java.lang.Thread.run(Thread.java:595) ]]] -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
svn commit: r1632912 - /tomcat/tc6.0.x/trunk/STATUS.txt
Author: kkolinko Date: Sun Oct 19 14:22:10 2014 New Revision: 1632912 URL: http://svn.apache.org/r1632912 Log: votes Modified: tomcat/tc6.0.x/trunk/STATUS.txt Modified: tomcat/tc6.0.x/trunk/STATUS.txt URL: http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/STATUS.txt?rev=1632912&r1=1632911&r2=1632912&view=diff == --- tomcat/tc6.0.x/trunk/STATUS.txt (original) +++ tomcat/tc6.0.x/trunk/STATUS.txt Sun Oct 19 14:22:10 2014 @@ -61,10 +61,20 @@ PATCHES PROPOSED TO BACKPORT: http://people.apache.org/~markt/patches/2014-10-17-poodle-tc6-v1.patch +1: markt -1: + -0: kkolinko: I think that JSSESocketFactory.getEnabledProtocols() shall + not return DEFAULT_SERVER_PROTOCOLS list in case if there are no + matches. This behaviour silently enables default list of protocols, + instead of erroring out. + This bug did exist before this patch, so I filed +https://issues.apache.org/bugzilla/show_bug.cgi?id=57116 + + I wish there were some debug logging to see what protocols are being + filtered out by "if (protocol.contains("SSL"))". + * Mitigate POODLE by disabling SSLv3 by default for APR/native http://svn.apache.org/r1632586 - +1: markt + +1: markt, kkolinko -1: - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
[GUMP@vmgump]: Project tomcat-trunk-test-nio2 (in module tomcat-trunk) failed
To whom it may engage... This is an automated request, but not an unsolicited one. For more information please visit http://gump.apache.org/nagged.html, and/or contact the folk at gene...@gump.apache.org. Project tomcat-trunk-test-nio2 has an issue affecting its community integration. This issue affects 1 projects. The current state of this project is 'Failed', with reason 'Build Failed'. For reference only, the following projects are affected by this: - tomcat-trunk-test-nio2 : Tomcat 8.x, a web server implementing the Java Servlet 3.1, ... Full details are available at: http://vmgump.apache.org/gump/public/tomcat-trunk/tomcat-trunk-test-nio2/index.html That said, some information snippets are provided here. The following annotations (debug/informational/warning/error messages) were provided: -DEBUG- Dependency on commons-daemon exists, no need to add for property commons-daemon.native.src.tgz. -DEBUG- Dependency on commons-daemon exists, no need to add for property tomcat-native.tar.gz. -INFO- Failed with reason build failed -INFO- Project Reports in: /srv/gump/public/workspace/tomcat-trunk/output/logs-NIO2 -INFO- Project Reports in: /srv/gump/public/workspace/tomcat-trunk/output/test-tmp-NIO2/logs The following work was performed: http://vmgump.apache.org/gump/public/tomcat-trunk/tomcat-trunk-test-nio2/gump_work/build_tomcat-trunk_tomcat-trunk-test-nio2.html Work Name: build_tomcat-trunk_tomcat-trunk-test-nio2 (Type: Build) Work ended in a state of : Failed Elapsed: 25 mins 53 secs Command Line: /usr/lib/jvm/java-7-oracle/bin/java -Djava.awt.headless=true -Dbuild.sysclasspath=only org.apache.tools.ant.Main -Dgump.merge=/srv/gump/public/gump/work/merge.xml -Djunit.jar=/srv/gump/public/workspace/junit/target/junit-4.12-SNAPSHOT.jar -Dobjenesis.jar=/srv/gump/public/workspace/objenesis/main/target/objenesis-2.2-SNAPSHOT.jar -Dtest.reports=output/logs-NIO2 -Dtomcat-native.tar.gz=/srv/gump/public/workspace/apache-commons/daemon/dist/bin/commons-daemon-20141019-native-src.tar.gz -Dexamples.sources.skip=true -Djdt.jar=/srv/gump/packages/eclipse/plugins/P20140317-1600/ecj-P20140317-1600.jar -Dcommons-daemon.jar=/srv/gump/public/workspace/apache-commons/daemon/dist/commons-daemon-20141019.jar -Dcommons-daemon.native.src.tgz=/srv/gump/public/workspace/apache-commons/daemon/dist/bin/commons-daemon-20141019-native-src.tar.gz -Dtest.temp=output/test-tmp-NIO2 -Dtest.accesslog=true -Dexecute.test.nio=false -Dtest.openssl.path=/srv/gump/public/workspace/openssl/dest-20141019/bi n/openssl -Dexecute.test.apr=false -Dexecute.test.bio=false -Dexecute.test.nio2=true -Deasymock.jar=/srv/gump/public/workspace/easymock/easymock/target/easymock-3.3-SNAPSHOT.jar -Dhamcrest.jar=/srv/gump/public/workspace/hamcrest/build/hamcrest-all-20141019.jar -Dcglib.jar=/srv/gump/packages/cglib/cglib-nodep-2.2.jar test [Working Directory: /srv/gump/public/workspace/tomcat-trunk] CLASSPATH: /usr/lib/jvm/java-7-oracle/lib/tools.jar:/srv/gump/public/workspace/tomcat-trunk/output/build/webapps/examples/WEB-INF/classes:/srv/gump/public/workspace/tomcat-trunk/output/testclasses:/srv/gump/public/workspace/ant/dist/lib/ant.jar:/srv/gump/public/workspace/ant/dist/lib/ant-launcher.jar:/srv/gump/public/workspace/ant/dist/lib/ant-jmf.jar:/srv/gump/public/workspace/ant/dist/lib/ant-junit.jar:/srv/gump/public/workspace/ant/dist/lib/ant-junit4.jar:/srv/gump/public/workspace/ant/dist/lib/ant-swing.jar:/srv/gump/public/workspace/ant/dist/lib/ant-apache-resolver.jar:/srv/gump/public/workspace/ant/dist/lib/ant-apache-xalan2.jar:/srv/gump/public/workspace/xml-commons/java/build/resolver.jar:/srv/gump/public/workspace/tomcat-trunk/output/build/bin/bootstrap.jar:/srv/gump/public/workspace/tomcat-trunk/output/build/bin/tomcat-juli.jar:/srv/gump/public/workspace/tomcat-trunk/output/build/lib/annotations-api.jar:/srv/gump/public/workspace/tomcat-trunk/output/build/lib/servlet-api.ja r:/srv/gump/public/workspace/tomcat-trunk/output/build/lib/jsp-api.jar:/srv/gump/public/workspace/tomcat-trunk/output/build/lib/el-api.jar:/srv/gump/public/workspace/tomcat-trunk/output/build/lib/websocket-api.jar:/srv/gump/public/workspace/tomcat-trunk/output/build/lib/catalina.jar:/srv/gump/public/workspace/tomcat-trunk/output/build/lib/catalina-ant.jar:/srv/gump/public/workspace/tomcat-trunk/output/build/lib/catalina-storeconfig.jar:/srv/gump/public/workspace/tomcat-trunk/output/build/lib/tomcat-coyote.jar:/srv/gump/public/workspace/tomcat-trunk/output/build/lib/jasper.jar:/srv/gump/public/workspace/tomcat-trunk/output/build/lib/jasper-el.jar:/srv/gump/public/workspace/tomcat-trunk/output/build/lib/catalina-tribes.jar:/srv/gump/public/workspace/tomcat-trunk/output/build/lib/catalina-ha.jar:/srv/gump/public/workspace/tomcat-trunk/output/build/lib/tomcat-api.jar:/srv/gump/public/workspace/tomcat-trunk/output/build/lib/tomcat-jni.jar:/srv/gump/public/workspace/tomcat-trunk/output/bu ild/lib/tomcat-spdy.
[Bug 57116] Bio connector: Do not fallback to default protocol list if "sslEnabledProtocols" has no matches
https://issues.apache.org/bugzilla/show_bug.cgi?id=57116 Konstantin Kolinko changed: What|Removed |Added OS||All --- Comment #1 from Konstantin Kolinko --- > Testing it with the current tc6.0.x @1632897 ... It actually was @1632897 + Mark's 2014-10-17-poodle-tc6-v1.patch, so the line numbers of NioEndpoint.java in the stacktrace differ by a small offset. -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
Re: svn commit: r1632625 - in /tomcat/trunk/java/org/apache/tomcat/websocket: LocalStrings.properties WsRemoteEndpointImplBase.java
2014-10-17 20:26 GMT+04:00 Konstantin Kolinko : > 2014-10-17 20:22 GMT+04:00 : >> Author: remm >> Date: Fri Oct 17 16:22:43 2014 >> New Revision: 1632625 >> >> URL: http://svn.apache.org/r1632625 >> Log: >> Add null checks for arguments in remote endpoint. >> > > Wouldn't it better to throw a NullPointerException with those messages? Correcting myself: The JavaEE javadoc [1] says that null data results in IllegalArgumentException. So this change is a correct one. [1] http://docs.oracle.com/javaee/7/api/javax/websocket/RemoteEndpoint.Basic.html Best regards, Konstantin Kolinko - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
svn commit: r1632955 - in /tomcat/tc7.0.x/trunk: ./ java/javax/websocket/ java/javax/websocket/server/
Author: kkolinko Date: Sun Oct 19 17:02:18 2014 New Revision: 1632955 URL: http://svn.apache.org/r1632955 Log: Merged revision(s) 1631347 from tomcat/trunk: Fix Java8 Javadoc warnings for javax.websocket package Modified: tomcat/tc7.0.x/trunk/ (props changed) tomcat/tc7.0.x/trunk/java/javax/websocket/ContainerProvider.java tomcat/tc7.0.x/trunk/java/javax/websocket/Endpoint.java tomcat/tc7.0.x/trunk/java/javax/websocket/PongMessage.java tomcat/tc7.0.x/trunk/java/javax/websocket/RemoteEndpoint.java tomcat/tc7.0.x/trunk/java/javax/websocket/Session.java tomcat/tc7.0.x/trunk/java/javax/websocket/WebSocketContainer.java tomcat/tc7.0.x/trunk/java/javax/websocket/server/HandshakeRequest.java tomcat/tc7.0.x/trunk/java/javax/websocket/server/ServerEndpoint.java tomcat/tc7.0.x/trunk/java/javax/websocket/server/ServerEndpointConfig.java Propchange: tomcat/tc7.0.x/trunk/ -- Merged /tomcat/trunk:r1631347 Modified: tomcat/tc7.0.x/trunk/java/javax/websocket/ContainerProvider.java URL: http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/java/javax/websocket/ContainerProvider.java?rev=1632955&r1=1632954&r2=1632955&view=diff == --- tomcat/tc7.0.x/trunk/java/javax/websocket/ContainerProvider.java (original) +++ tomcat/tc7.0.x/trunk/java/javax/websocket/ContainerProvider.java Sun Oct 19 17:02:18 2014 @@ -30,6 +30,8 @@ public abstract class ContainerProvider /** * Create a new container used to create outgoing WebSocket connections. + * + * @return A newly created container. */ public static WebSocketContainer getWebSocketContainer() { WebSocketContainer result = null; Modified: tomcat/tc7.0.x/trunk/java/javax/websocket/Endpoint.java URL: http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/java/javax/websocket/Endpoint.java?rev=1632955&r1=1632954&r2=1632955&view=diff == --- tomcat/tc7.0.x/trunk/java/javax/websocket/Endpoint.java (original) +++ tomcat/tc7.0.x/trunk/java/javax/websocket/Endpoint.java Sun Oct 19 17:02:18 2014 @@ -22,6 +22,8 @@ public abstract class Endpoint { * Event that is triggered when a new session starts. * * @param session The new session. + * @param configThe configuration with which the Endpoint was + * configured. */ public abstract void onOpen(Session session, EndpointConfig config); @@ -38,8 +40,8 @@ public abstract class Endpoint { /** * Event that is triggered when a protocol error occurs. * - * @param session The session - * @param throwable The exception + * @param session The session. + * @param throwable The exception. */ public void onError(Session session, Throwable throwable) { // NO-OP by default Modified: tomcat/tc7.0.x/trunk/java/javax/websocket/PongMessage.java URL: http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/java/javax/websocket/PongMessage.java?rev=1632955&r1=1632954&r2=1632955&view=diff == --- tomcat/tc7.0.x/trunk/java/javax/websocket/PongMessage.java (original) +++ tomcat/tc7.0.x/trunk/java/javax/websocket/PongMessage.java Sun Oct 19 17:02:18 2014 @@ -24,7 +24,9 @@ import java.nio.ByteBuffer; */ public interface PongMessage { /** - * Obtain the payload of the Pong message as a ByteBuffer. + * Get the payload of the Pong message.. + * + * @return The payload of the Pong message. */ ByteBuffer getApplicationData(); } Modified: tomcat/tc7.0.x/trunk/java/javax/websocket/RemoteEndpoint.java URL: http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/java/javax/websocket/RemoteEndpoint.java?rev=1632955&r1=1632954&r2=1632955&view=diff == --- tomcat/tc7.0.x/trunk/java/javax/websocket/RemoteEndpoint.java (original) +++ tomcat/tc7.0.x/trunk/java/javax/websocket/RemoteEndpoint.java Sun Oct 19 17:02:18 2014 @@ -29,16 +29,20 @@ public interface RemoteEndpoint { /** * Obtain the timeout (in milliseconds) for sending a message - * asynchronously. A non-positive value means an infinite timeout. The - * default value is determined by + * asynchronously. The default value is determined by * {@link WebSocketContainer#getDefaultAsyncSendTimeout()}. + * @return The current send timeout in milliseconds. A non-positive + * value means an infinite timeout. */ long getSendTimeout(); /** - * Set the timeout (in milliseconds) for sending a message asynchronously. A - * non-positive value means an infinite timeout. The default value is - * determined by {@l
svn commit: r1632956 - in /tomcat/tc7.0.x/trunk: ./ java/javax/servlet/ java/javax/servlet/jsp/ java/javax/servlet/jsp/tagext/
Author: kkolinko Date: Sun Oct 19 17:15:14 2014 New Revision: 1632956 URL: http://svn.apache.org/r1632956 Log: Merged r1631568 from tomcat/trunk: Fix some Javadoc warnings when compiling with Java 8 Modified: tomcat/tc7.0.x/trunk/ (props changed) tomcat/tc7.0.x/trunk/java/javax/servlet/ServletContextAttributeListener.java tomcat/tc7.0.x/trunk/java/javax/servlet/ServletContextListener.java tomcat/tc7.0.x/trunk/java/javax/servlet/ServletRegistration.java tomcat/tc7.0.x/trunk/java/javax/servlet/ServletRequest.java tomcat/tc7.0.x/trunk/java/javax/servlet/ServletRequestAttributeListener.java tomcat/tc7.0.x/trunk/java/javax/servlet/ServletRequestEvent.java tomcat/tc7.0.x/trunk/java/javax/servlet/ServletRequestListener.java tomcat/tc7.0.x/trunk/java/javax/servlet/ServletRequestWrapper.java tomcat/tc7.0.x/trunk/java/javax/servlet/jsp/JspApplicationContext.java tomcat/tc7.0.x/trunk/java/javax/servlet/jsp/tagext/TagAttributeInfo.java Propchange: tomcat/tc7.0.x/trunk/ -- Merged /tomcat/trunk:r1631568 Modified: tomcat/tc7.0.x/trunk/java/javax/servlet/ServletContextAttributeListener.java URL: http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/java/javax/servlet/ServletContextAttributeListener.java?rev=1632956&r1=1632955&r2=1632956&view=diff == --- tomcat/tc7.0.x/trunk/java/javax/servlet/ServletContextAttributeListener.java (original) +++ tomcat/tc7.0.x/trunk/java/javax/servlet/ServletContextAttributeListener.java Sun Oct 19 17:15:14 2014 @@ -32,18 +32,21 @@ public interface ServletContextAttribute /** * Notification that a new attribute was added to the servlet context. * Called after the attribute is added. + * @param scae Information about the new attribute */ -public void attributeAdded(ServletContextAttributeEvent scab); +public void attributeAdded(ServletContextAttributeEvent scae); /** * Notification that an existing attribute has been removed from the servlet * context. Called after the attribute is removed. + * @param scae Information about the removed attribute */ -public void attributeRemoved(ServletContextAttributeEvent scab); +public void attributeRemoved(ServletContextAttributeEvent scae); /** * Notification that an attribute on the servlet context has been replaced. * Called after the attribute is replaced. + * @param scae Information about the replaced attribute */ -public void attributeReplaced(ServletContextAttributeEvent scab); +public void attributeReplaced(ServletContextAttributeEvent scae); } Modified: tomcat/tc7.0.x/trunk/java/javax/servlet/ServletContextListener.java URL: http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/java/javax/servlet/ServletContextListener.java?rev=1632956&r1=1632955&r2=1632956&view=diff == --- tomcat/tc7.0.x/trunk/java/javax/servlet/ServletContextListener.java (original) +++ tomcat/tc7.0.x/trunk/java/javax/servlet/ServletContextListener.java Sun Oct 19 17:15:14 2014 @@ -34,6 +34,7 @@ public interface ServletContextListener ** Notification that the web application initialization process is starting. * All ServletContextListeners are notified of context initialization before * any filter or servlet in the web application is initialized. + * @param sce Information about the ServletContext that was initialized */ public void contextInitialized(ServletContextEvent sce); @@ -41,6 +42,7 @@ public interface ServletContextListener ** Notification that the servlet context is about to be shut down. All * servlets and filters have been destroy()ed before any * ServletContextListeners are notified of context destruction. + * @param sce Information about the ServletContext that was destroyed */ public void contextDestroyed(ServletContextEvent sce); } Modified: tomcat/tc7.0.x/trunk/java/javax/servlet/ServletRegistration.java URL: http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/java/javax/servlet/ServletRegistration.java?rev=1632956&r1=1632955&r2=1632956&view=diff == --- tomcat/tc7.0.x/trunk/java/javax/servlet/ServletRegistration.java (original) +++ tomcat/tc7.0.x/trunk/java/javax/servlet/ServletRegistration.java Sun Oct 19 17:15:14 2014 @@ -26,8 +26,8 @@ import java.util.Set; public interface ServletRegistration extends Registration { /** - * - * @param urlPatterns + * TODO + * @param urlPatterns The URL patterns that this Servlet should be mapped to * @return TODO * @throws IllegalArgumentException if urlPattern is null or empty * @throws IllegalStateException if the associated ServletContext has
svn commit: r1632958 - in /tomcat/tc7.0.x/trunk: ./ java/javax/el/ELContext.java java/javax/el/ELContextEvent.java java/javax/el/ELResolver.java java/javax/el/ExpressionFactory.java java/javax/el/Meth
Author: kkolinko Date: Sun Oct 19 17:38:56 2014 New Revision: 1632958 URL: http://svn.apache.org/r1632958 Log: Merged r1631717 from tomcat/trunk: Fix the remaining Javadoc warnings for the EL API when building with Java 8. Modified: tomcat/tc7.0.x/trunk/ (props changed) tomcat/tc7.0.x/trunk/java/javax/el/ELContext.java tomcat/tc7.0.x/trunk/java/javax/el/ELContextEvent.java tomcat/tc7.0.x/trunk/java/javax/el/ELResolver.java tomcat/tc7.0.x/trunk/java/javax/el/ExpressionFactory.java tomcat/tc7.0.x/trunk/java/javax/el/MethodExpression.java tomcat/tc7.0.x/trunk/java/javax/el/ValueExpression.java Propchange: tomcat/tc7.0.x/trunk/ -- Merged /tomcat/trunk:r1631717 Modified: tomcat/tc7.0.x/trunk/java/javax/el/ELContext.java URL: http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/java/javax/el/ELContext.java?rev=1632958&r1=1632957&r2=1632958&view=diff == --- tomcat/tc7.0.x/trunk/java/javax/el/ELContext.java (original) +++ tomcat/tc7.0.x/trunk/java/javax/el/ELContext.java Sun Oct 19 17:38:56 2014 @@ -41,8 +41,14 @@ public abstract class ELContext { // Can't use Class because API needs to match specification /** + * Obtain the context object for the given key. + * + * @param key The key of the required context object + * + * @return The value of the context object associated with the given key + * * @throws NullPointerException - * If the provided key is null + * If the supplied key is null */ public Object getContext(@SuppressWarnings("rawtypes") Class key) { if (key == null) { @@ -55,6 +61,15 @@ public abstract class ELContext { } // Can't use Class because API needs to match specification +/** + * Add an object to this EL context under the given key. + * + * @param key The key under which to store the object + * @param contextObject The object to add + * + * @throws NullPointerException + * If the supplied key or context is null + */ public void putContext(@SuppressWarnings("rawtypes") Class key, Object contextObject) throws NullPointerException { if (key == null || contextObject == null) { Modified: tomcat/tc7.0.x/trunk/java/javax/el/ELContextEvent.java URL: http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/java/javax/el/ELContextEvent.java?rev=1632958&r1=1632957&r2=1632958&view=diff == --- tomcat/tc7.0.x/trunk/java/javax/el/ELContextEvent.java (original) +++ tomcat/tc7.0.x/trunk/java/javax/el/ELContextEvent.java Sun Oct 19 17:38:56 2014 @@ -19,15 +19,12 @@ package javax.el; import java.util.EventObject; -/** - * - */ public class ELContextEvent extends EventObject { private static final long serialVersionUID = 1255131906285426769L; /** - * @param source + * @param source The EL context that was the source of this event */ public ELContextEvent(ELContext source) { super(source); Modified: tomcat/tc7.0.x/trunk/java/javax/el/ELResolver.java URL: http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/java/javax/el/ELResolver.java?rev=1632958&r1=1632957&r2=1632958&view=diff == --- tomcat/tc7.0.x/trunk/java/javax/el/ELResolver.java (original) +++ tomcat/tc7.0.x/trunk/java/javax/el/ELResolver.java Sun Oct 19 17:38:56 2014 @@ -30,10 +30,55 @@ public abstract class ELResolver { public abstract Object getValue(ELContext context, Object base, Object property) throws NullPointerException, PropertyNotFoundException, ELException; +/** + * @param context The EL context for this evaluation + * @param base The base object on which the property is to be found + * @param property The property whose type is to be returned + * @return the type of the provided property + * @throws NullPointerException + * If the supplied context is null + * @throws PropertyNotFoundException + * If the base/property combination provided to the resolver is + * one that the resolver can handle but no match was found or a + * match was found but was not readable + * @throws ELException + * Wraps any exception throw whilst resolving the property + */ public abstract Class getType(ELContext context, Object base, Object property) throws NullPointerException, PropertyNotFoundException, ELException; +/** + * @param context The EL context for this evaluation + * @param base The base object on which the property is to be found + * @param property The property whose value is to be set + * @param valueThe
svn commit: r1632959 - in /tomcat/tc7.0.x/trunk: ./ java/javax/websocket/RemoteEndpoint.java
Author: kkolinko Date: Sun Oct 19 17:42:17 2014 New Revision: 1632959 URL: http://svn.apache.org/r1632959 Log: Merged r1631987 r1631993 from tomcat/trunk: Java 8 isn't complaining about these but Eclipse is so fix them as well Modified: tomcat/tc7.0.x/trunk/ (props changed) tomcat/tc7.0.x/trunk/java/javax/websocket/RemoteEndpoint.java Propchange: tomcat/tc7.0.x/trunk/ -- Merged /tomcat/trunk:r1631987,1631993 Modified: tomcat/tc7.0.x/trunk/java/javax/websocket/RemoteEndpoint.java URL: http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/java/javax/websocket/RemoteEndpoint.java?rev=1632959&r1=1632958&r2=1632959&view=diff == --- tomcat/tc7.0.x/trunk/java/javax/websocket/RemoteEndpoint.java (original) +++ tomcat/tc7.0.x/trunk/java/javax/websocket/RemoteEndpoint.java Sun Oct 19 17:42:17 2014 @@ -173,6 +173,8 @@ public interface RemoteEndpoint { * @param applicationData The payload for the ping message * * @throws IOException If an I/O error occurs while sending the ping + * @throws IllegalArgumentException if the applicationData is too large for + * a control message (max 125 bytes) */ void sendPing(ByteBuffer applicationData) throws IOException, IllegalArgumentException; @@ -185,6 +187,8 @@ public interface RemoteEndpoint { * @param applicationData The payload for the pong message * * @throws IOException If an I/O error occurs while sending the pong + * @throws IllegalArgumentException if the applicationData is too large for + * a control message (max 125 bytes) */ void sendPong(ByteBuffer applicationData) throws IOException, IllegalArgumentException; - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
svn commit: r1632965 - in /tomcat/trunk: java/javax/websocket/PongMessage.java java/javax/websocket/RemoteEndpoint.java java/org/apache/tomcat/websocket/WsRemoteEndpointImplBase.java webapps/docs/chan
Author: kkolinko Date: Sun Oct 19 18:23:07 2014 New Revision: 1632965 URL: http://svn.apache.org/r1632965 Log: Further improve processing of null arguments in remote endpoint (followup to r1632625): 1) Document IllegalArgumentException in javadoc 2) Handle null arguments in sendObject() methods to throw IllegalArgumentException instead of NPE. Modified: tomcat/trunk/java/javax/websocket/PongMessage.java tomcat/trunk/java/javax/websocket/RemoteEndpoint.java tomcat/trunk/java/org/apache/tomcat/websocket/WsRemoteEndpointImplBase.java tomcat/trunk/webapps/docs/changelog.xml Modified: tomcat/trunk/java/javax/websocket/PongMessage.java URL: http://svn.apache.org/viewvc/tomcat/trunk/java/javax/websocket/PongMessage.java?rev=1632965&r1=1632964&r2=1632965&view=diff == --- tomcat/trunk/java/javax/websocket/PongMessage.java (original) +++ tomcat/trunk/java/javax/websocket/PongMessage.java Sun Oct 19 18:23:07 2014 @@ -24,7 +24,7 @@ import java.nio.ByteBuffer; */ public interface PongMessage { /** - * Get the payload of the Pong message.. + * Get the payload of the Pong message. * * @return The payload of the Pong message. */ Modified: tomcat/trunk/java/javax/websocket/RemoteEndpoint.java URL: http://svn.apache.org/viewvc/tomcat/trunk/java/javax/websocket/RemoteEndpoint.java?rev=1632965&r1=1632964&r2=1632965&view=diff == --- tomcat/trunk/java/javax/websocket/RemoteEndpoint.java (original) +++ tomcat/trunk/java/javax/websocket/RemoteEndpoint.java Sun Oct 19 18:23:07 2014 @@ -68,6 +68,7 @@ public interface RemoteEndpoint { * when the message has been sent. * @param data The text message to send * @return A Future that signals when the message has been sent. + * @throws IllegalArgumentException if {@code data} is {@code null}. */ Future sendBinary(ByteBuffer data); @@ -77,11 +78,29 @@ public interface RemoteEndpoint { * @param data The text message to send * @param completionUsed to signal to the client when the message has * been sent + * @throws IllegalArgumentException if {@code data} or {@code completion} + * is {@code null}. */ void sendBinary(ByteBuffer data, SendHandler completion); +/** + * Encodes object as a message and sends it asynchronously, using the + * Future to signal to the client when the message has been sent. + * @param obj The object to be sent. + * @return A Future that signals when the message has been sent. + * @throws IllegalArgumentException if {@code obj} is {@code null}. + */ Future sendObject(Object obj); +/** + * Encodes object as a message and sends it asynchronously, using the + * SendHandler to signal to the client when the message has been sent. + * @param obj The object to be sent. + * @param completionUsed to signal to the client when the message has + * been sent + * @throws IllegalArgumentException if {@code obj} or + * {@code completion} is {@code null}. + */ void sendObject(Object obj, SendHandler completion); } @@ -91,6 +110,7 @@ public interface RemoteEndpoint { /** * Send the message, blocking until the message is sent. * @param text The text message to send. + * @throws IllegalArgumentException if {@code text} is {@code null}. * @throws IOException if an I/O error occurs during the sending of the * message. */ @@ -99,6 +119,7 @@ public interface RemoteEndpoint { /** * Send the message, blocking until the message is sent. * @param data The binary message to send + * @throws IllegalArgumentException if {@code data} is {@code null}. * @throws IOException if an I/O error occurs during the sending of the * message. */ @@ -112,6 +133,7 @@ public interface RemoteEndpoint { * @param fragment The partial message to send * @param isLasttrue if this is the last part of the * message, otherwise false + * @throws IllegalArgumentException if {@code fragment} is {@code null}. * @throws IOException if an I/O error occurs during the sending of the * message. */ @@ -125,6 +147,8 @@ public interface RemoteEndpoint { * @param partialByte The partial message to send * @param isLasttrue if this is the last part of the * message, otherwise fals
[Bug 57118] New: Throw EncodeException from RemoteEndpoint.Basic.sendObject()
https://issues.apache.org/bugzilla/show_bug.cgi?id=57118 Bug ID: 57118 Summary: Throw EncodeException from RemoteEndpoint.Basic.sendObject() Product: Tomcat 8 Version: 8.0.14 Hardware: PC Status: NEW Severity: normal Priority: P2 Component: WebSocket Assignee: dev@tomcat.apache.org Reporter: knst.koli...@gmail.com (Noted when updating documentation in r1632965) The method javax.websocket.RemoteEndpoint.Basic.sendObject(Object) is expected to throw EncodeException if there is no suitable encoder configured for the object type. The actual implementation in org.apache.tomcat.websocket.WsRemoteEndpointBasic.sendObject(Object) does not throw that exception, because the method that is called there does not throw it. It is not even declares a "throws" for it, and it is a checked exception. My understanding is that the exception is passed to a competition handler, but it is not properly unwrapped. An IOException is thrown instead. -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
svn commit: r1632968 - in /tomcat/tc7.0.x/trunk: ./ java/javax/websocket/PongMessage.java java/javax/websocket/RemoteEndpoint.java java/org/apache/tomcat/websocket/WsRemoteEndpointImplBase.java webapp
Author: kkolinko Date: Sun Oct 19 18:38:34 2014 New Revision: 1632968 URL: http://svn.apache.org/r1632968 Log: Further improve processing of null arguments in remote endpoint (followup to r1632625): 1) Document IllegalArgumentException in javadoc 2) Handle null arguments in sendObject() methods to throw IllegalArgumentException instead of NPE. It is merge of r1632965 from tomcat/trunk. Modified: tomcat/tc7.0.x/trunk/ (props changed) tomcat/tc7.0.x/trunk/java/javax/websocket/PongMessage.java tomcat/tc7.0.x/trunk/java/javax/websocket/RemoteEndpoint.java tomcat/tc7.0.x/trunk/java/org/apache/tomcat/websocket/WsRemoteEndpointImplBase.java tomcat/tc7.0.x/trunk/webapps/docs/changelog.xml Propchange: tomcat/tc7.0.x/trunk/ -- Merged /tomcat/trunk:r1632965 Modified: tomcat/tc7.0.x/trunk/java/javax/websocket/PongMessage.java URL: http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/java/javax/websocket/PongMessage.java?rev=1632968&r1=1632967&r2=1632968&view=diff == --- tomcat/tc7.0.x/trunk/java/javax/websocket/PongMessage.java (original) +++ tomcat/tc7.0.x/trunk/java/javax/websocket/PongMessage.java Sun Oct 19 18:38:34 2014 @@ -24,7 +24,7 @@ import java.nio.ByteBuffer; */ public interface PongMessage { /** - * Get the payload of the Pong message.. + * Get the payload of the Pong message. * * @return The payload of the Pong message. */ Modified: tomcat/tc7.0.x/trunk/java/javax/websocket/RemoteEndpoint.java URL: http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/java/javax/websocket/RemoteEndpoint.java?rev=1632968&r1=1632967&r2=1632968&view=diff == --- tomcat/tc7.0.x/trunk/java/javax/websocket/RemoteEndpoint.java (original) +++ tomcat/tc7.0.x/trunk/java/javax/websocket/RemoteEndpoint.java Sun Oct 19 18:38:34 2014 @@ -68,6 +68,7 @@ public interface RemoteEndpoint { * when the message has been sent. * @param data The text message to send * @return A Future that signals when the message has been sent. + * @throws IllegalArgumentException if {@code data} is {@code null}. */ Future sendBinary(ByteBuffer data); @@ -77,11 +78,29 @@ public interface RemoteEndpoint { * @param data The text message to send * @param completionUsed to signal to the client when the message has * been sent + * @throws IllegalArgumentException if {@code data} or {@code completion} + * is {@code null}. */ void sendBinary(ByteBuffer data, SendHandler completion); +/** + * Encodes object as a message and sends it asynchronously, using the + * Future to signal to the client when the message has been sent. + * @param obj The object to be sent. + * @return A Future that signals when the message has been sent. + * @throws IllegalArgumentException if {@code obj} is {@code null}. + */ Future sendObject(Object obj); +/** + * Encodes object as a message and sends it asynchronously, using the + * SendHandler to signal to the client when the message has been sent. + * @param obj The object to be sent. + * @param completionUsed to signal to the client when the message has + * been sent + * @throws IllegalArgumentException if {@code obj} or + * {@code completion} is {@code null}. + */ void sendObject(Object obj, SendHandler completion); } @@ -91,6 +110,7 @@ public interface RemoteEndpoint { /** * Send the message, blocking until the message is sent. * @param text The text message to send. + * @throws IllegalArgumentException if {@code text} is {@code null}. * @throws IOException if an I/O error occurs during the sending of the * message. */ @@ -99,6 +119,7 @@ public interface RemoteEndpoint { /** * Send the message, blocking until the message is sent. * @param data The binary message to send + * @throws IllegalArgumentException if {@code data} is {@code null}. * @throws IOException if an I/O error occurs during the sending of the * message. */ @@ -112,6 +133,7 @@ public interface RemoteEndpoint { * @param fragment The partial message to send * @param isLasttrue if this is the last part of the * message, otherwise false + * @throws IllegalArgumentException if {@code fragment} is {@code null}. * @throws IOException if an I/O erro
svn commit: r1632971 - /tomcat/tc7.0.x/trunk/webapps/docs/changelog.xml
Author: kkolinko Date: Sun Oct 19 18:44:59 2014 New Revision: 1632971 URL: http://svn.apache.org/r1632971 Log: Move recent fixes to the correct section. They will be in 7.0.57, not 7.0.56. (Followup to r1632634 r1632968) Modified: tomcat/tc7.0.x/trunk/webapps/docs/changelog.xml Modified: tomcat/tc7.0.x/trunk/webapps/docs/changelog.xml URL: http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/webapps/docs/changelog.xml?rev=1632971&r1=1632970&r2=1632971&view=diff == --- tomcat/tc7.0.x/trunk/webapps/docs/changelog.xml (original) +++ tomcat/tc7.0.x/trunk/webapps/docs/changelog.xml Sun Oct 19 18:44:59 2014 @@ -116,6 +116,9 @@ Fix client subprotocol handling. (remm) + +Add null checks for arguments in remote endpoint. (remm/kkolinko) + @@ -382,12 +385,6 @@ Update the WebSocket implementation to support the Java WebSocket specification version 1.1. (markt) - -Fix client subprotocol handling. (remm) - - -Add null checks for arguments in remote endpoint. (remm/kkolinko) - - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
svn commit: r1632975 - /tomcat/trunk/webapps/docs/changelog.xml
Author: kkolinko Date: Sun Oct 19 18:59:24 2014 New Revision: 1632975 URL: http://svn.apache.org/r1632975 Log: Note that using SSLProtocol="TLSv1.1,TLSv1.2" requires native 1.1.32 or later. Running with 1.1.31 is OK as long as the new values are not used in configuration. Using "TLSv1.1" with Tomcat Native 1.1.31 results in org.apache.catalina.LifecycleException: Failed to initialize component [Connector[HTTP/1.1-8443]] Caused by: java.lang.Exception: Invalid Server SSL Protocol (error::lib(0):func(0):reason(0)) at org.apache.tomcat.jni.SSLContext.make(Native Method) at org.apache.tomcat.util.net.AprEndpoint.bind(AprEndpoint.java:527) Modified: tomcat/trunk/webapps/docs/changelog.xml Modified: tomcat/trunk/webapps/docs/changelog.xml URL: http://svn.apache.org/viewvc/tomcat/trunk/webapps/docs/changelog.xml?rev=1632975&r1=1632974&r2=1632975&view=diff == --- tomcat/trunk/webapps/docs/changelog.xml (original) +++ tomcat/trunk/webapps/docs/changelog.xml Sun Oct 19 18:59:24 2014 @@ -160,7 +160,8 @@ 53952: Add support for TLSv1.1 and TLSv1.2 for APR connector. -Based upon a patch by Marcel Šebek. (schultz/jfclere) +Based upon a patch by Marcel Šebek. This feature requires +Tomcat Native library 1.1.32 or later. (schultz/jfclere) Cache the Encoder instances used to convert Strings to byte - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
svn commit: r1632976 - in /tomcat/tc7.0.x/trunk: ./ webapps/docs/changelog.xml
Author: kkolinko Date: Sun Oct 19 19:01:27 2014 New Revision: 1632976 URL: http://svn.apache.org/r1632976 Log: Note that using SSLProtocol="TLSv1.1,TLSv1.2" requires native 1.1.32 or later. Running with 1.1.31 is OK as long as the new values are not used in configuration. It is merge of r1632975 from tomcat/trunk. Modified: tomcat/tc7.0.x/trunk/ (props changed) tomcat/tc7.0.x/trunk/webapps/docs/changelog.xml Propchange: tomcat/tc7.0.x/trunk/ -- Merged /tomcat/trunk:r1632975 Modified: tomcat/tc7.0.x/trunk/webapps/docs/changelog.xml URL: http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/webapps/docs/changelog.xml?rev=1632976&r1=1632975&r2=1632976&view=diff == --- tomcat/tc7.0.x/trunk/webapps/docs/changelog.xml (original) +++ tomcat/tc7.0.x/trunk/webapps/docs/changelog.xml Sun Oct 19 19:01:27 2014 @@ -78,7 +78,8 @@ 53952: Add support for TLSv1.1 and TLSv1.2 for APR connector. -Based upon a patch by Marcel Šebek. (schultz/jfclere) +Based upon a patch by Marcel Šebek. This feature requires +Tomcat Native library 1.1.32 or later. (schultz/jfclere) Disable SSLv3 by default for JSSE based HTTPS connectors (BIO and NIO). - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
svn propchange: r1632975 - svn:log
Author: kkolinko Revision: 1632975 Modified property: svn:log Modified: svn:log at Sun Oct 19 19:13:00 2014 -- --- svn:log (original) +++ svn:log Sun Oct 19 19:13:00 2014 @@ -1,5 +1,5 @@ Note that using SSLProtocol="TLSv1.1,TLSv1.2" requires native 1.1.32 or later. -Running with 1.1.31 is OK as long as the new values are not used in configuration. +Running with 1.1.31 is OK as long as the new values or the value "all" (default) are not used in configuration. Using "TLSv1.1" with Tomcat Native 1.1.31 results in org.apache.catalina.LifecycleException: Failed to initialize component [Connector[HTTP/1.1-8443]] - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
svn commit: r1632981 - /tomcat/native/branches/1.1.x/java/org/apache/tomcat/
Author: kkolinko Date: Sun Oct 19 19:27:52 2014 New Revision: 1632981 URL: http://svn.apache.org/r1632981 Log: Update external to pick up changes for https://issues.apache.org/bugzilla/show_bug.cgi?id=53952 Modified: tomcat/native/branches/1.1.x/java/org/apache/tomcat/ (props changed) Propchange: tomcat/native/branches/1.1.x/java/org/apache/tomcat/ -- --- svn:externals (original) +++ svn:externals Sun Oct 19 19:27:52 2014 @@ -1 +1 @@ -^/tomcat/trunk/java/org/apache/tomcat/jni@1590646 jni +^/tomcat/trunk/java/org/apache/tomcat/jni@1632604 jni - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
svn commit: r1632988 - /tomcat/trunk/java/org/apache/tomcat/jni/SSL.java
Author: kkolinko Date: Sun Oct 19 21:01:25 2014 New Revision: 1632988 URL: http://svn.apache.org/r1632988 Log: Followup to the fix for https://issues.apache.org/bugzilla/show_bug.cgi?id=53952 Deprecate SSL_OP_PKCS1_CHECK_1, SSL_OP_PKCS1_CHECK_2 flags. Modified: tomcat/trunk/java/org/apache/tomcat/jni/SSL.java Modified: tomcat/trunk/java/org/apache/tomcat/jni/SSL.java URL: http://svn.apache.org/viewvc/tomcat/trunk/java/org/apache/tomcat/jni/SSL.java?rev=1632988&r1=1632987&r2=1632988&view=diff == --- tomcat/trunk/java/org/apache/tomcat/jni/SSL.java (original) +++ tomcat/trunk/java/org/apache/tomcat/jni/SSL.java Sun Oct 19 21:01:25 2014 @@ -142,9 +142,18 @@ public final class SSL { public static final int SSL_OP_NO_TICKET= 0x4000; -/* The next flag deliberately changes the ciphertest, this is a check - * for the PKCS#1 attack */ +// SSL_OP_PKCS1_CHECK_1 and SSL_OP_PKCS1_CHECK_2 flags are unsupported +// in the current version of OpenSSL library. See ssl.h changes in commit +// 7409d7ad517650db332ae528915a570e4e0ab88b (30 Apr 2011) of OpenSSL. +/** + * @deprecated Unsupported in the current version of OpenSSL + */ +@Deprecated public static final int SSL_OP_PKCS1_CHECK_1= 0x0800; +/** + * @deprecated Unsupported in the current version of OpenSSL + */ +@Deprecated public static final int SSL_OP_PKCS1_CHECK_2= 0x1000; public static final int SSL_OP_NETSCAPE_CA_DN_BUG = 0x2000; public static final int SSL_OP_NETSCAPE_DEMO_CIPHER_CHANGE_BUG = 0x4000; - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
svn commit: r1632989 - /tomcat/native/branches/1.1.x/java/org/apache/tomcat/
Author: kkolinko Date: Sun Oct 19 21:03:13 2014 New Revision: 1632989 URL: http://svn.apache.org/r1632989 Log: Update external to pick up r1632988 Modified: tomcat/native/branches/1.1.x/java/org/apache/tomcat/ (props changed) Propchange: tomcat/native/branches/1.1.x/java/org/apache/tomcat/ -- --- svn:externals (original) +++ svn:externals Sun Oct 19 21:03:13 2014 @@ -1 +1 @@ -^/tomcat/trunk/java/org/apache/tomcat/jni@1632604 jni +^/tomcat/trunk/java/org/apache/tomcat/jni@1632988 jni - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
svn commit: r1632990 - in /tomcat/tc7.0.x/trunk: ./ java/org/apache/tomcat/jni/SSL.java
Author: kkolinko Date: Sun Oct 19 21:04:42 2014 New Revision: 1632990 URL: http://svn.apache.org/r1632990 Log: Followup to the fix for https://issues.apache.org/bugzilla/show_bug.cgi?id=53952 Deprecate SSL_OP_PKCS1_CHECK_1, SSL_OP_PKCS1_CHECK_2 flags. It is merge of r1632988 from tomcat/trunk. Modified: tomcat/tc7.0.x/trunk/ (props changed) tomcat/tc7.0.x/trunk/java/org/apache/tomcat/jni/SSL.java Propchange: tomcat/tc7.0.x/trunk/ -- Merged /tomcat/trunk:r1632988 Modified: tomcat/tc7.0.x/trunk/java/org/apache/tomcat/jni/SSL.java URL: http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/java/org/apache/tomcat/jni/SSL.java?rev=1632990&r1=1632989&r2=1632990&view=diff == --- tomcat/tc7.0.x/trunk/java/org/apache/tomcat/jni/SSL.java (original) +++ tomcat/tc7.0.x/trunk/java/org/apache/tomcat/jni/SSL.java Sun Oct 19 21:04:42 2014 @@ -140,9 +140,18 @@ public final class SSL { public static final int SSL_OP_NO_SSLv3 = 0x0200; public static final int SSL_OP_NO_TLSv1 = 0x0400; -/* The next flag deliberately changes the ciphertest, this is a check - * for the PKCS#1 attack */ +// SSL_OP_PKCS1_CHECK_1 and SSL_OP_PKCS1_CHECK_2 flags are unsupported +// in the current version of OpenSSL library. See ssl.h changes in commit +// 7409d7ad517650db332ae528915a570e4e0ab88b (30 Apr 2011) of OpenSSL. +/** + * @deprecated Unsupported in the current version of OpenSSL + */ +@Deprecated public static final int SSL_OP_PKCS1_CHECK_1= 0x0800; +/** + * @deprecated Unsupported in the current version of OpenSSL + */ +@Deprecated public static final int SSL_OP_PKCS1_CHECK_2= 0x1000; public static final int SSL_OP_NETSCAPE_CA_DN_BUG = 0x2000; public static final int SSL_OP_NETSCAPE_DEMO_CIPHER_CHANGE_BUG = 0x4000; - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
svn commit: r1632995 - in /tomcat/tc7.0.x/trunk: ./ modules/jdbc-pool/resources/MANIFEST.MF
Author: kkolinko Date: Sun Oct 19 21:22:30 2014 New Revision: 1632995 URL: http://svn.apache.org/r1632995 Log: Fix minor issues reported in https://issues.apache.org/bugzilla/show_bug.cgi?id=57079 Remove Ant hard-coded version. Remove "Created-By" Those lines will be added automatically (with the correct values) during build time. It is merge of r1632423 r1632424 from tomcat/trunk. Modified: tomcat/tc7.0.x/trunk/ (props changed) tomcat/tc7.0.x/trunk/modules/jdbc-pool/resources/MANIFEST.MF Propchange: tomcat/tc7.0.x/trunk/ -- Merged /tomcat/trunk:r1632423-1632424 Modified: tomcat/tc7.0.x/trunk/modules/jdbc-pool/resources/MANIFEST.MF URL: http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/modules/jdbc-pool/resources/MANIFEST.MF?rev=1632995&r1=1632994&r2=1632995&view=diff == --- tomcat/tc7.0.x/trunk/modules/jdbc-pool/resources/MANIFEST.MF (original) +++ tomcat/tc7.0.x/trunk/modules/jdbc-pool/resources/MANIFEST.MF Sun Oct 19 21:22:30 2014 @@ -8,12 +8,10 @@ Export-Package: org.apache.tomcat.jdbc.n .logging,javax.management.openmbean,javax.management";version="@VERSION@ ",org.apache.tomcat.jdbc.pool.jmx;uses:="org.apache.tomcat.jdbc.pool,or g.apache.juli.logging,javax.management";version="@VERSION@" -Ant-Version: Apache Ant 1.7.0 Bundle-Vendor: Apache Software Foundation Bundle-Version: @VERSION@ Bundle-Name: Apache Tomcat JDBC Connection Pool Bundle-ManifestVersion: 2 -Created-By: 11.0-b16 (Sun Microsystems Inc.) Bundle-SymbolicName: org.apache.tomcat.jdbc Import-Package: javax.management;version="0", - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
[Bug 57102] Cannot Specify sslEnabledProtocols
https://issues.apache.org/bugzilla/show_bug.cgi?id=57102 --- Comment #8 from Konstantin Kolinko --- > This is fixed in 6.0.x and will be included in 6.0.x onwards. in 6.0.43 onwards. -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
[GUMP@vmgump]: Project tomcat-trunk-test-apr (in module tomcat-trunk) failed
To whom it may engage... This is an automated request, but not an unsolicited one. For more information please visit http://gump.apache.org/nagged.html, and/or contact the folk at gene...@gump.apache.org. Project tomcat-trunk-test-apr has an issue affecting its community integration. This issue affects 1 projects. The current state of this project is 'Failed', with reason 'Build Failed'. For reference only, the following projects are affected by this: - tomcat-trunk-test-apr : Tomcat 8.x, a web server implementing the Java Servlet 3.1, ... Full details are available at: http://vmgump.apache.org/gump/public/tomcat-trunk/tomcat-trunk-test-apr/index.html That said, some information snippets are provided here. The following annotations (debug/informational/warning/error messages) were provided: -DEBUG- Dependency on commons-daemon exists, no need to add for property commons-daemon.native.src.tgz. -DEBUG- Dependency on commons-daemon exists, no need to add for property tomcat-native.tar.gz. -INFO- Failed with reason build failed -INFO- Project Reports in: /srv/gump/public/workspace/tomcat-trunk/output/logs-APR -INFO- Project Reports in: /srv/gump/public/workspace/tomcat-trunk/output/test-tmp-APR/logs The following work was performed: http://vmgump.apache.org/gump/public/tomcat-trunk/tomcat-trunk-test-apr/gump_work/build_tomcat-trunk_tomcat-trunk-test-apr.html Work Name: build_tomcat-trunk_tomcat-trunk-test-apr (Type: Build) Work ended in a state of : Failed Elapsed: 25 mins 52 secs Command Line: /usr/lib/jvm/java-7-oracle/bin/java -Djava.awt.headless=true -Dbuild.sysclasspath=only org.apache.tools.ant.Main -Dgump.merge=/srv/gump/public/gump/work/merge.xml -Djunit.jar=/srv/gump/public/workspace/junit/target/junit-4.12-SNAPSHOT.jar -Dobjenesis.jar=/srv/gump/public/workspace/objenesis/main/target/objenesis-2.2-SNAPSHOT.jar -Dtest.reports=output/logs-APR -Dtomcat-native.tar.gz=/srv/gump/public/workspace/apache-commons/daemon/dist/bin/commons-daemon-20141019-native-src.tar.gz -Dexamples.sources.skip=true -Djdt.jar=/srv/gump/packages/eclipse/plugins/P20140317-1600/ecj-P20140317-1600.jar -Dtest.apr.loc=/srv/gump/public/workspace/tomcat-native/dest-20141019/lib -Dcommons-daemon.jar=/srv/gump/public/workspace/apache-commons/daemon/dist/commons-daemon-20141019.jar -Dcommons-daemon.native.src.tgz=/srv/gump/public/workspace/apache-commons/daemon/dist/bin/commons-daemon-20141019-native-src.tar.gz -Dtest.temp=output/test-tmp-APR -Dtest.accesslog=true -Dexecute.test.nio=false -Dtest.openssl.path=/srv/gump/public/workspace/openssl/dest-20141019/bin/openssl -Dexecute.test.apr=true -Dexecute.test.bio=false -Dexecute.test.nio2=false -Deasymock.jar=/srv/gump/public/workspace/easymock/easymock/target/easymock-3.3-SNAPSHOT.jar -Dhamcrest.jar=/srv/gump/public/workspace/hamcrest/build/hamcrest-all-20141019.jar -Dcglib.jar=/srv/gump/packages/cglib/cglib-nodep-2.2.jar test [Working Directory: /srv/gump/public/workspace/tomcat-trunk] CLASSPATH: /usr/lib/jvm/java-7-oracle/lib/tools.jar:/srv/gump/public/workspace/tomcat-trunk/output/build/webapps/examples/WEB-INF/classes:/srv/gump/public/workspace/tomcat-trunk/output/testclasses:/srv/gump/public/workspace/ant/dist/lib/ant.jar:/srv/gump/public/workspace/ant/dist/lib/ant-launcher.jar:/srv/gump/public/workspace/ant/dist/lib/ant-jmf.jar:/srv/gump/public/workspace/ant/dist/lib/ant-junit.jar:/srv/gump/public/workspace/ant/dist/lib/ant-junit4.jar:/srv/gump/public/workspace/ant/dist/lib/ant-swing.jar:/srv/gump/public/workspace/ant/dist/lib/ant-apache-resolver.jar:/srv/gump/public/workspace/ant/dist/lib/ant-apache-xalan2.jar:/srv/gump/public/workspace/xml-commons/java/build/resolver.jar:/srv/gump/public/workspace/tomcat-trunk/output/build/bin/bootstrap.jar:/srv/gump/public/workspace/tomcat-trunk/output/build/bin/tomcat-juli.jar:/srv/gump/public/workspace/tomcat-trunk/output/build/lib/annotations-api.jar:/srv/gump/public/workspace/tomcat-trunk/output/build/lib/servlet-api.ja r:/srv/gump/public/workspace/tomcat-trunk/output/build/lib/jsp-api.jar:/srv/gump/public/workspace/tomcat-trunk/output/build/lib/el-api.jar:/srv/gump/public/workspace/tomcat-trunk/output/build/lib/websocket-api.jar:/srv/gump/public/workspace/tomcat-trunk/output/build/lib/catalina.jar:/srv/gump/public/workspace/tomcat-trunk/output/build/lib/catalina-ant.jar:/srv/gump/public/workspace/tomcat-trunk/output/build/lib/catalina-storeconfig.jar:/srv/gump/public/workspace/tomcat-trunk/output/build/lib/tomcat-coyote.jar:/srv/gump/public/workspace/tomcat-trunk/output/build/lib/jasper.jar:/srv/gump/public/workspace/tomcat-trunk/output/build/lib/jasper-el.jar:/srv/gump/public/workspace/tomcat-trunk/output/build/lib/catalina-tribes.jar:/srv/gump/public/workspace/tomcat-trunk/output/build/lib/catalina-ha.jar:/srv/gump/public/workspace/tomcat-trunk/output/build/lib/tomcat-api.jar:/srv/gump/public/workspace/tomcat-trunk/output/build/lib/tomcat-jni.jar:/srv/g
[Tomcat Wiki] Update of "Security/POODLE" by KonstantinKolinko
Dear Wiki user, You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change notification. The "Security/POODLE" page has been changed by KonstantinKolinko: https://wiki.apache.org/tomcat/Security/POODLE?action=diff&rev1=1&rev2=2 Comment: Add note on sslEnabledProtocols for Tomcat 6. Add configuration for Apr connector. Disabling SSL v3 on either client side or server side will mitigate this vulnerability. + === JSSE-based connectors (Bio, Nio, Nio2) === + - To disable SSL v3, and enable all TLS protocols plus SSLv2Hello pseudo-protocol on JSSE connectors add the following attributes to your connector configuration in server.xml: + To disable SSL v3, and enable all TLS protocols on JSSE connectors add the following attributes to your HTTPS connector configuration in server.xml: + + sslProtocol="TLS" sslEnabledProtocols="TLSv1.2,TLSv1.1,TLSv1" + + The same, plus SSLv2Hello pseudo-protocol: sslProtocol="TLS" sslEnabledProtocols="TLSv1.2,TLSv1.1,TLSv1,SSLv2Hello" - - The same thing could be done on APR connector using following attributes: - TODO + Notes: + * Allowed values for ''sslEnabledProtocols'' attribute may be found in JVM documentation as the values for method `SSLSocket.setEnabledProtocols()`. Links to Oracle JDK documentation: [[http://docs.oracle.com/javase/7/docs/technotes/guides/security/StandardNames.html#jssenames|Java 7]], [[http://docs.oracle.com/javase/8/docs/technotes/guides/security/StandardNames.html#jssenames|Java 8]]. + * In old versions of Tomcat 6 the name of configuration attribute for Bio connector was ''protocols''. It is ''sslEnabledProtocols'' since Tomcat 6.0.39 onwards. + * The ''sslEnabledProtocols'' attribute has no effect on Nio connector in Tomcat 6.0.39 - 6.0.41 because of [[https://issues.apache.org/bugzilla/show_bug.cgi?id=57102|bug 57102]]. It will be fixed in 6.0.43. + + === APR-based connector (Apr) === + + To disable SSL v3, and enable TLSv1 protocol on APR connector add the following attribute to your HTTPS connector configuration in server.xml: + + SSLProtocol="TLSv1" + + To enable TLSv1, TLSv1.1, TLSv1.2 protocols the setting will be the following - ('''Note''': the "TLSv1.1", "TLSv1.2" values require Tomcat Native 1.1.32 and a version of Tomcat that supports it. Those have not yet been released at the time of this writing, but are expected soon. See [[https://issues.apache.org/bugzilla/show_bug.cgi?id=53952|bug 53952]] for progress): + + SSLProtocol="TLSv1+TLSv1.1+TLSv1.2" == On-line testing tools == - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
[Bug 53952] Add support for TLS 1.1 and 1.2
https://issues.apache.org/bugzilla/show_bug.cgi?id=53952 Brett Randall changed: What|Removed |Added CC||javabr...@gmail.com -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
[Bug 56844] Update to OpenSSL 1.0.1j
https://issues.apache.org/bugzilla/show_bug.cgi?id=56844 Brett Randall changed: What|Removed |Added CC||javabr...@gmail.com -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org