[Bug 59697] tomcat cache DNS forever

2016-06-14 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=59697

Remy Maucherat  changed:

   What|Removed |Added

 Resolution|--- |INVALID
 Status|NEW |RESOLVED

--- Comment #1 from Remy Maucherat  ---
I fail to see how Tomcat interacts with this. Tomcat doesn't maintain a DNS
cache of its own.

I see an email on the user mailing this about this posted two hours before this
bugzilla, that's where support questions should go to. Bugzilla is not a
support forum. Even if a support question doesn't get answered fast enough for
your liking, it is not an excuse to file a bugzilla about it.

-- 
You are receiving this mail because:
You are the assignee for the bug.

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



svn commit: r13993 - in /release/tomcat/tomcat-9/v9.0.0.M8/bin: apache-tomcat-9.0.0.M8.tar.gz.asc apache-tomcat-9.0.0.M8.zip.asc

2016-06-14 Thread markt
Author: markt
Date: Tue Jun 14 07:54:50 2016
New Revision: 13993

Log:
Add missing signatures

Added:
release/tomcat/tomcat-9/v9.0.0.M8/bin/apache-tomcat-9.0.0.M8.tar.gz.asc
release/tomcat/tomcat-9/v9.0.0.M8/bin/apache-tomcat-9.0.0.M8.zip.asc

Added: release/tomcat/tomcat-9/v9.0.0.M8/bin/apache-tomcat-9.0.0.M8.tar.gz.asc
==
--- release/tomcat/tomcat-9/v9.0.0.M8/bin/apache-tomcat-9.0.0.M8.tar.gz.asc 
(added)
+++ release/tomcat/tomcat-9/v9.0.0.M8/bin/apache-tomcat-9.0.0.M8.tar.gz.asc Tue 
Jun 14 07:54:50 2016
@@ -0,0 +1,17 @@
+-BEGIN PGP SIGNATURE-
+Version: GnuPG v2
+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+=wlOL
+-END PGP SIGNATURE-

Added: release/tomcat/tomcat-9/v9.0.0.M8/bin/apache-tomcat-9.0.0.M8.zip.asc
==
--- release/tomcat/tomcat-9/v9.0.0.M8/bin/apache-tomcat-9.0.0.M8.zip.asc (added)
+++ release/tomcat/tomcat-9/v9.0.0.M8/bin/apache-tomcat-9.0.0.M8.zip.asc Tue 
Jun 14 07:54:50 2016
@@ -0,0 +1,17 @@
+-BEGIN PGP SIGNATURE-
+Version: GnuPG v2
+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+=9SP5
+-END PGP SIGNATURE-



-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 59699] New: Caching issue in ELContext / ImportHandler

2016-06-14 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=59699

Bug ID: 59699
   Summary: Caching issue in ELContext / ImportHandler
   Product: Tomcat 8
   Version: 8.5.x-trunk
  Hardware: PC
Status: NEW
  Severity: normal
  Priority: P2
 Component: EL
  Assignee: dev@tomcat.apache.org
  Reporter: benjamin.da...@gmail.com

Hi,

We have just migrated from Glassfish 3 to Jetty 9.3.8 which uses Tomcat
javax.el implementation. Just after the migration, we saw huge performance
drops.

After some investigation (thread dumps,...), most of the code was busy loading
classes through javax.el.ImportHandler class.

This class seems to have been designed to be thread-afe (use of
ConcurrentHashMap), but gets instanciated for every expression being evaluated.
This is beacuse javax.el.ELContext class creates new instances of
javax.el.ImportHandler every time it gets instanciated.

Most the EL expressions "stuck" in this class loading phase were looking for
empty attributes.

I applied a quick fix, and the performances went back to normal (time divided
by 2).

I think the javax.el.ImportHandler class ought to be used as a singleton. I
understand the problems with caching all classes, but by caching only the
ClassNotFound, the problem also goes away.

I am happy to provide some help (and code), if you think this fix is a good
idea.

Thanks,
Benjamin

-- 
You are receiving this mail because:
You are the assignee for the bug.

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Re: Timescale for 8.0.x EOL

2016-06-14 Thread Emmanuel Bourg
Le 13/06/2016 à 17:47, Mark Thomas a écrit :
> Now we have a stable release of 8.5.x, I'd like to finialise the end of
> life date for 8.0.x so we can publish it.
> 
> We originally said we'd do parallel releases for 6 months. That gives an
> EOL date of 30 September 2016 for 8.0.x which seems reasonable to me.
> 
> Any objections to that date or suggestions for a better one?

Hi,

Just a word with my Debian maintainer hat on, Tomcat 8.0.x was shipped
with Debian 8 Jessie with the expectation it would be supported during
the lifetime of this release (until May 2018). I'm currently maintaining
with other volunteers a stable version based on 8.0.14 (with backported
security patches). Canonical does a similar job for Ubuntu 16.04 LTS
based on Tomcat 8.0.32.

The early EOL of 8.0.x is impractical because, at least in Debian, major
updates like the switch to 8.5 aren't allowed for the stable distribution.

I understand you can't maintain so many branches for a long time, but if
Tomcat 8.0.x could be security supported at least until the Debian 9
release (~April/May 2017) it would allow users following the stable
distribution to remain on a supported version of Tomcat (Debian 9 will
include Tomcat 8.5).

If this isn't possible I'm crossing my fingers and hoping that the 8.5
security patches will remain backportable to 8.0.x, and that 8.0.x will
not be affected by security issues not found in 8.5.x.

Emmanuel Bourg


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 59699] Caching issue in ELContext / ImportHandler

2016-06-14 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=59699

Mark Thomas  changed:

   What|Removed |Added

Version|8.5.x-trunk |8.0.27
 OS||All
 Status|NEW |RESOLVED
 Resolution|--- |DUPLICATE

--- Comment #1 from Mark Thomas  ---
Correcting the Tomcat version. Jetty 9.3.8 depends on Tomcat 8.0.27.

You don't see the performance issues in Glassfish because it doesn't fully
implement the spec (despite it being the reference implementation).

If you want to understand the background to waht is going on, have a read
through the mail threads linked from the duplicate.

*** This bug has been marked as a duplicate of bug 57583 ***

-- 
You are receiving this mail because:
You are the assignee for the bug.

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 57583] Performance issue evaluating EL in custom tags (tagx) due to inefficient calls to java.lang.Class.forName()

2016-06-14 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=57583

Mark Thomas  changed:

   What|Removed |Added

 CC||benjamin.da...@gmail.com

--- Comment #11 from Mark Thomas  ---
*** Bug 59699 has been marked as a duplicate of this bug. ***

-- 
You are receiving this mail because:
You are the assignee for the bug.

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Re: Timescale for 8.0.x EOL

2016-06-14 Thread Mark Thomas
On 14/06/2016 09:00, Emmanuel Bourg wrote:
> Le 13/06/2016 à 17:47, Mark Thomas a écrit :
>> Now we have a stable release of 8.5.x, I'd like to finialise the end of
>> life date for 8.0.x so we can publish it.
>>
>> We originally said we'd do parallel releases for 6 months. That gives an
>> EOL date of 30 September 2016 for 8.0.x which seems reasonable to me.
>>
>> Any objections to that date or suggestions for a better one?
> 
> Hi,
> 
> Just a word with my Debian maintainer hat on, Tomcat 8.0.x was shipped
> with Debian 8 Jessie with the expectation it would be supported during
> the lifetime of this release (until May 2018). I'm currently maintaining
> with other volunteers a stable version based on 8.0.14 (with backported
> security patches). Canonical does a similar job for Ubuntu 16.04 LTS
> based on Tomcat 8.0.32.
> 
> The early EOL of 8.0.x is impractical because, at least in Debian, major
> updates like the switch to 8.5 aren't allowed for the stable distribution.
> 
> I understand you can't maintain so many branches for a long time, but if
> Tomcat 8.0.x could be security supported at least until the Debian 9
> release (~April/May 2017) it would allow users following the stable
> distribution to remain on a supported version of Tomcat (Debian 9 will
> include Tomcat 8.5).

That is unlikely unless someone volunteers for that task.

> If this isn't possible I'm crossing my fingers and hoping that the 8.5
> security patches will remain backportable to 8.0.x, and that 8.0.x will
> not be affected by security issues not found in 8.5.x.

That should be fairly simple. You might need to choose between
back-porting from 8.5.x and forward porting from 7.0.x depending on
where the the problem lies to get the simplest patch but you can always
ask here if you need help.

Mark


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



svn commit: r1748365 - in /tomcat/site/trunk: ./ docs/ xdocs/

2016-06-14 Thread markt
Author: markt
Date: Tue Jun 14 09:19:26 2016
New Revision: 1748365

URL: http://svn.apache.org/viewvc?rev=1748365&view=rev
Log:
Update site for 9.0.0.M8 release excluding docs

Modified:
tomcat/site/trunk/build.properties.default
tomcat/site/trunk/docs/download-90.html
tomcat/site/trunk/docs/index.html
tomcat/site/trunk/docs/migration-9.html
tomcat/site/trunk/docs/oldnews.html
tomcat/site/trunk/docs/whichversion.html
tomcat/site/trunk/xdocs/download-90.xml
tomcat/site/trunk/xdocs/index.xml
tomcat/site/trunk/xdocs/migration-9.xml
tomcat/site/trunk/xdocs/oldnews.xml
tomcat/site/trunk/xdocs/whichversion.xml

Modified: tomcat/site/trunk/build.properties.default
URL: 
http://svn.apache.org/viewvc/tomcat/site/trunk/build.properties.default?rev=1748365&r1=1748364&r2=1748365&view=diff
==
--- tomcat/site/trunk/build.properties.default (original)
+++ tomcat/site/trunk/build.properties.default Tue Jun 14 09:19:26 2016
@@ -40,7 +40,7 @@ tomcat60=6.0.45
 tomcat70=7.0.69
 tomcat80=8.0.35
 tomcat85=8.5.2
-tomcat90=9.0.0.M6
+tomcat90=9.0.0.M8
 
 # - Download destination -
 tomcat-site-docs.home=${base.path}/tomcat-site-docs/

Modified: tomcat/site/trunk/docs/download-90.html
URL: 
http://svn.apache.org/viewvc/tomcat/site/trunk/docs/download-90.html?rev=1748365&r1=1748364&r2=1748365&view=diff
==
--- tomcat/site/trunk/docs/download-90.html (original)
+++ tomcat/site/trunk/docs/download-90.html Tue Jun 14 09:19:26 2016
@@ -222,7 +222,7 @@
 Quick Navigation
 
 
-[define v]9.0.0.M6[end]
+[define v]9.0.0.M8[end]
 https://www.apache.org/dist/tomcat/tomcat-9/KEYS";>KEYS |
 [v] |
 Browse |

Modified: tomcat/site/trunk/docs/index.html
URL: 
http://svn.apache.org/viewvc/tomcat/site/trunk/docs/index.html?rev=1748365&r1=1748364&r2=1748365&view=diff
==
--- tomcat/site/trunk/docs/index.html (original)
+++ tomcat/site/trunk/docs/index.html Tue Jun 14 09:19:26 2016
@@ -320,29 +320,26 @@ changelog.
 
 
 
-
-2016-05-16 Tomcat 9.0.0.M6 (alpha) 
Released
+
+2016-06-13 Tomcat 9.0.0.M8 (alpha) 
Released
 
 
 
-The Apache Tomcat Project is proud to announce the release of version 9.0.0.M6
+The Apache Tomcat Project is proud to announce the release of version 9.0.0.M8
 (alpha) of Apache Tomcat. The is a milestone release of the 9.0.x branch and 
has
 been made to provide users with early access to the new features in Apache
 Tomcat 9.0.x so that they may provide feedback. The notable changes compared to
-9.0.0.M4 include:
+9.0.0.M6 include:
 
 
 
-Add direct HTTP/2 connection support
+Improvements to memory leak detection and prevention including the change
+RMI memory leaks are now correctly treated as application bugs rather than 
a
+JRE bug.
 
-Update the implementation of the the proposed Servlet 4.0 API to provide
-mapping type information for the current request to reflect discussions
-within the EG.
+Fix a couple of memory leaks found in Tomcat.
 
-Update the packaged version of the Tomcat Native Library to 1.2.7 to pick 
up
-the Windows binaries that are based on OpenSSL 1.0.2h and APR 1.5.2.
-
-Improve default configuration for TLS connectors.
+The HTTP Server header is no longer set by default.
 
 
 

Modified: tomcat/site/trunk/docs/migration-9.html
URL: 
http://svn.apache.org/viewvc/tomcat/site/trunk/docs/migration-9.html?rev=1748365&r1=1748364&r2=1748365&view=diff
==
--- tomcat/site/trunk/docs/migration-9.html (original)
+++ tomcat/site/trunk/docs/migration-9.html Tue Jun 14 09:19:26 2016
@@ -639,7 +639,8 @@ of Apache Tomcat.
   "9.0.0.M1":"1714130",
   "9.0.0.M3":"1728005",
   "9.0.0.M4":"1734692",
-  "9.0.0.M6":"1743436"
+  "9.0.0.M6":"1743436",
+  "9.0.0.M8":"1747242"
 };
 
 formSubmit.action = "http://svn.apache.org/viewvc/tomcat/trunk/"; +
@@ -672,14 +673,16 @@ of Apache Tomcat.
 
 9.0.0.M1
 9.0.0.M3
-9.0.0.M4
-9.0.0.M6
+9.0.0.M4
+9.0.0.M6
+9.0.0.M8
 , new version:
 
 9.0.0.M1
 9.0.0.M3
 9.0.0.M4
-9.0.0.M6
+9.0.0.M6
+9.0.0.M8
 trunk (unreleased)
 
 

Modified: tomcat/site/trunk/docs/oldnews.html
URL: 
http://svn.apache.org/viewvc/tomcat/site/trunk/docs/oldnews.html?rev=1748365&r1=1748364&r2=1748365&view=diff
==
--- tomcat/site/trunk/docs/oldnews.html (original)
+++ tomcat/site/trunk/docs/oldnews.html Tue Jun 14 09:19:26 2016
@@ -245,6 +245,47 @@
 
 
 
+
+2016-05-16 Tomcat 9.0.0.M6 (alpha) 
Released
+
+
+
+The Apache Tomcat Project is proud to announce the release of version 9.0.0.M6
+(alpha) of Apache Tomcat. The is a milest

svn commit: r1748367 - in /tomcat/site/trunk/docs/tomcat-9.0-doc: ./ api/ api/org/apache/catalina/ api/org/apache/catalina/ant/ api/org/apache/catalina/ant/jmx/ api/org/apache/catalina/authenticator/

2016-06-14 Thread markt
Author: markt
Date: Tue Jun 14 09:30:55 2016
New Revision: 1748367

URL: http://svn.apache.org/viewvc?rev=1748367&view=rev
Log:
Update docs for 9.0.0.M8 release


[This commit notification would consist of 71 parts, 
which exceeds the limit of 50 ones, so it was shortened to the summary.]

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



svn commit: r1748369 - in /tomcat/site/trunk: docs/index.html xdocs/index.xml

2016-06-14 Thread markt
Author: markt
Date: Tue Jun 14 09:37:52 2016
New Revision: 1748369

URL: http://svn.apache.org/viewvc?rev=1748369&view=rev
Log:
Add a missing version update

Modified:
tomcat/site/trunk/docs/index.html
tomcat/site/trunk/xdocs/index.xml

Modified: tomcat/site/trunk/docs/index.html
URL: 
http://svn.apache.org/viewvc/tomcat/site/trunk/docs/index.html?rev=1748369&r1=1748368&r2=1748369&view=diff
==
--- tomcat/site/trunk/docs/index.html (original)
+++ tomcat/site/trunk/docs/index.html Tue Jun 14 09:37:52 2016
@@ -346,7 +346,7 @@ Tomcat 9.0.x so that they may provide fe
 
 
 Full details of these changes, and all the other changes, are available in the
-Tomcat 9
+Tomcat 9
 changelog.
 
 

Modified: tomcat/site/trunk/xdocs/index.xml
URL: 
http://svn.apache.org/viewvc/tomcat/site/trunk/xdocs/index.xml?rev=1748369&r1=1748368&r2=1748369&view=diff
==
--- tomcat/site/trunk/xdocs/index.xml (original)
+++ tomcat/site/trunk/xdocs/index.xml Tue Jun 14 09:37:52 2016
@@ -107,7 +107,7 @@ Tomcat 9.0.x so that they may provide fe
 
 
 Full details of these changes, and all the other changes, are available in the
-Tomcat 9
+Tomcat 9
 changelog.
 
 



-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



svn commit: r1748370 - in /tomcat/site/trunk: ./ docs/ xdocs/

2016-06-14 Thread markt
Author: markt
Date: Tue Jun 14 09:41:45 2016
New Revision: 1748370

URL: http://svn.apache.org/viewvc?rev=1748370&view=rev
Log:
Update site for 8.5.3 release excluding docs.
Since 8.5.3 is now stable, list 8.5.3 before 8.0.35 on the Tomcat 8 download 
page

Modified:
tomcat/site/trunk/build.properties.default
tomcat/site/trunk/docs/download-80.html
tomcat/site/trunk/docs/index.html
tomcat/site/trunk/docs/migration-85.html
tomcat/site/trunk/docs/oldnews.html
tomcat/site/trunk/docs/whichversion.html
tomcat/site/trunk/xdocs/download-80.xml
tomcat/site/trunk/xdocs/index.xml
tomcat/site/trunk/xdocs/migration-85.xml
tomcat/site/trunk/xdocs/oldnews.xml
tomcat/site/trunk/xdocs/whichversion.xml

Modified: tomcat/site/trunk/build.properties.default
URL: 
http://svn.apache.org/viewvc/tomcat/site/trunk/build.properties.default?rev=1748370&r1=1748369&r2=1748370&view=diff
==
--- tomcat/site/trunk/build.properties.default (original)
+++ tomcat/site/trunk/build.properties.default Tue Jun 14 09:41:45 2016
@@ -39,7 +39,7 @@ tomcat.loc=http://www.apache.org/dist/to
 tomcat60=6.0.45
 tomcat70=7.0.69
 tomcat80=8.0.35
-tomcat85=8.5.2
+tomcat85=8.5.3
 tomcat90=9.0.0.M8
 
 # - Download destination -

Modified: tomcat/site/trunk/docs/download-80.html
URL: 
http://svn.apache.org/viewvc/tomcat/site/trunk/docs/download-80.html?rev=1748370&r1=1748369&r2=1748370&view=diff
==
--- tomcat/site/trunk/docs/download-80.html (original)
+++ tomcat/site/trunk/docs/download-80.html Tue Jun 14 09:41:45 2016
@@ -222,11 +222,11 @@
 Quick Navigation
 
 
+[define w]8.5.3[end]
 [define v]8.0.35[end]
-[define w]8.5.2[end]
 https://www.apache.org/dist/tomcat/tomcat-8/KEYS";>KEYS |
 [v] |
-[w] BETA |
+[w] |
 Browse |
 http://archive.apache.org/dist/tomcat/tomcat-8";>Archives
   
@@ -475,7 +475,7 @@
 
 
 
-[w] BETA
+[w]
 
 
 
@@ -486,7 +486,7 @@
 
   
 
-Binary Distributions
+Binary Distributions
 
   
 
@@ -647,7 +647,7 @@
   
   
 
-Source Code Distributions
+Source Code Distributions
 
   
 

Modified: tomcat/site/trunk/docs/index.html
URL: 
http://svn.apache.org/viewvc/tomcat/site/trunk/docs/index.html?rev=1748370&r1=1748369&r2=1748370&view=diff
==
--- tomcat/site/trunk/docs/index.html (original)
+++ tomcat/site/trunk/docs/index.html Tue Jun 14 09:41:45 2016
@@ -279,36 +279,32 @@ changelog.
 
 
 
-
-2016-05-16 Tomcat 8.5.2 (beta) Released
+
+2016-06-13 Tomcat 8.5.3 Released
 
 
 
-The Apache Tomcat Project is proud to announce the release of version 8.5.2
+The Apache Tomcat Project is proud to announce the release of version 8.5.3
 of Apache Tomcat. Apache Tomcat 8.5.x is intended to replace 8.0.x and includes
 new features pulled forward from Tomcat 9.0.x. The minimum Java version and
 implemented specification versions remain unchanged. The notable changes
-compared to 8.5.0 include:
+compared to 8.5.2 include:
 
 
 
-Add the org.apache.catalina.servlet4preview package that can be used to 
gain
-early access to Servlet 4.0 features. Note that this package will not be
-present in Tomcat 9.
+Ensure error will not be thrown during deployment when scanning jar files
+with no or invalid MANIFEST.MF files.
 
-Make default TLS configuration more secure
+Improvements to memory leak detection and prevention.
 
-Add direct HTTP/2 connection support
-
-Update the packaged version of the Tomcat Native Library to 1.2.7 to pick 
up
-the Windows binaries that are based on OpenSSL 1.0.2h and APR 1.5.2.
+The HTTP Server header is no longer set by default.
 
 
 
 
 
 Full details of these changes, and all the other changes, are available in the
-Tomcat 8.5
+Tomcat 8.5
 changelog.
 
 

Modified: tomcat/site/trunk/docs/migration-85.html
URL: 
http://svn.apache.org/viewvc/tomcat/site/trunk/docs/migration-85.html?rev=1748370&r1=1748369&r2=1748370&view=diff
==
--- tomcat/site/trunk/docs/migration-85.html (original)
+++ tomcat/site/trunk/docs/migration-85.html Tue Jun 14 09:41:45 2016
@@ -509,7 +509,8 @@ of Apache Tomcat.
 var revisions = {
   "HEAD":"HEAD",
   "8.5.0":"1735438",
-  "8.5.2":"1743439"
+  "8.5.2":"1743439",
+  "8.5.3":"1747521"
 };
 
 formSubmit.action = 
"http://svn.apache.org/viewvc/tomcat/tc8.5.x/trunk/"; +
@@ -540,12 +541,14 @@ of Apache Tomcat.
 
 Old version:
 
-8.5.0
-8.5.2
+8.5.0
+8.5.2
+8.5.3
 , new version:
 
 8.5.0
-8.5.2
+8.5.2
+8.5.3
 trunk (unreleased)
 
 

Modified: tomcat/site/trunk/docs/oldnews.html
URL: 
http://svn.apache.org/viewvc/tomcat/site/trunk/docs/oldnews.html?rev=174

[ANN] Apache Tomcat 9.0.0.M8 available

2016-06-14 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache
Tomcat 9.0.0.M8.

Apache Tomcat 9 is an open source software implementation of the Java
Servlet, JavaServer Pages, Java Unified Expression Language, Java
WebSocket and JASPIC technologies.

Apache Tomcat 9.0.0.M8 is a milestone release of the 9.0.x branch and
has been made to provide users with early access to the new features in
Apache Tomcat 9.0.x so that they may provide feedback. The notable
changes compared to 9.0.0.M6 include:

- Improvements to memory leak detection and prevention including the
  change RMI memory leaks are now correctly treated as application bugs
  rather than a JRE bug

- Fix a couple of memory leaks found in Tomcat

- The HTTP Server header is no longer set by default

Please refer to the change log for the complete list of changes:
http://tomcat.apache.org/tomcat-9.0-doc/changelog.html

Downloads:
http://tomcat.apache.org/download-90.cgi

Migration guides from Apache Tomcat 5.x, 6.x, 7.x and 8.x:
http://tomcat.apache.org/migration.html

Enjoy!

- The Apache Tomcat team

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



svn commit: r1748374 - in /tomcat/site/trunk/docs/tomcat-8.5-doc: ./ api/ api/org/apache/catalina/ api/org/apache/catalina/ant/ api/org/apache/catalina/ant/jmx/ api/org/apache/catalina/authenticator/

2016-06-14 Thread markt
Author: markt
Date: Tue Jun 14 09:53:33 2016
New Revision: 1748374

URL: http://svn.apache.org/viewvc?rev=1748374&view=rev
Log:
Update docs for 8.5.3 release


[This commit notification would consist of 66 parts, 
which exceeds the limit of 50 ones, so it was shortened to the summary.]

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



svn commit: r1748375 - in /tomcat/site/trunk: docs/whichversion.html xdocs/whichversion.xml

2016-06-14 Thread markt
Author: markt
Date: Tue Jun 14 09:55:40 2016
New Revision: 1748375

URL: http://svn.apache.org/viewvc?rev=1748375&view=rev
Log:
8.5.x is no longer beta
Mark 8.0.x as superseded

Modified:
tomcat/site/trunk/docs/whichversion.html
tomcat/site/trunk/xdocs/whichversion.xml

Modified: tomcat/site/trunk/docs/whichversion.html
URL: 
http://svn.apache.org/viewvc/tomcat/site/trunk/docs/whichversion.html?rev=1748375&r1=1748374&r2=1748375&view=diff
==
--- tomcat/site/trunk/docs/whichversion.html (original)
+++ tomcat/site/trunk/docs/whichversion.html Tue Jun 14 09:55:40 2016
@@ -262,7 +262,7 @@ mapping between the specifications and t
   1.1
   1.1
   8.5.x
-  8.5.3 (beta)
+  8.5.3
   7 and later
 
 
@@ -275,8 +275,8 @@ mapping between the specifications and t
   3.0
   1.1
   N/A
-  8.0.x
-  8.0.35
+  8.0.x (superseded)
+  8.0.35 (superseded)
   7 and later
 
 

Modified: tomcat/site/trunk/xdocs/whichversion.xml
URL: 
http://svn.apache.org/viewvc/tomcat/site/trunk/xdocs/whichversion.xml?rev=1748375&r1=1748374&r2=1748375&view=diff
==
--- tomcat/site/trunk/xdocs/whichversion.xml (original)
+++ tomcat/site/trunk/xdocs/whichversion.xml Tue Jun 14 09:55:40 2016
@@ -48,7 +48,7 @@ mapping between the specifications and t
   1.1
   1.1
   8.5.x
-  8.5.3 (beta)
+  8.5.3
   7 and later
 
 
@@ -58,8 +58,8 @@ mapping between the specifications and t
   3.0
   1.1
   N/A
-  8.0.x
-  8.0.35
+  8.0.x (superseded)
+  8.0.35 (superseded)
   7 and later
 
 



-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[ANN] Apache Tomcat 8.5.3 available

2016-06-14 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache
Tomcat 8.5.3.

This is the first stable release of the 8.5.x branch. Tomcat 8.x users
should now use 8.5.x releases in preference to 8.0.x releases.

Apache Tomcat 8 is an open source software implementation of the Java
Servlet, JavaServer Pages, Java Unified Expression Language, Java
WebSocket and Java Authentication Service Provider Interface for
Containers technologies.

Apache Tomcat 8.5.x is intended to replace 8.0.x and includes new
features pulled forward from the 9.0.x branch. The notable changes since
8.5.2 include:

- Ensure error will not be thrown during deployment when scanning jar
  files with no or invalid MANIFEST.MF files.

- Improvements to memory leak detection and prevention

- The HTTP Server header is no longer set by default

Please refer to the change log for the complete list of changes:
http://tomcat.apache.org/tomcat-8.5-doc/changelog.html

Downloads:
http://tomcat.apache.org/download-80.cgi

Migration guides from Apache Tomcat 5.x, 6.x, 7.x and 8.0.x:
http://tomcat.apache.org/migration.html

Enjoy!

- The Apache Tomcat team

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



svn commit: r1748380 - in /tomcat/site/trunk: build.properties.default docs/download-80.html docs/index.html docs/migration-8.html docs/oldnews.html xdocs/download-80.xml xdocs/index.xml xdocs/migrati

2016-06-14 Thread markt
Author: markt
Date: Tue Jun 14 10:36:50 2016
New Revision: 1748380

URL: http://svn.apache.org/viewvc?rev=1748380&view=rev
Log:
Update site for 8.3.36 release excluding docs.

Modified:
tomcat/site/trunk/build.properties.default
tomcat/site/trunk/docs/download-80.html
tomcat/site/trunk/docs/index.html
tomcat/site/trunk/docs/migration-8.html
tomcat/site/trunk/docs/oldnews.html
tomcat/site/trunk/xdocs/download-80.xml
tomcat/site/trunk/xdocs/index.xml
tomcat/site/trunk/xdocs/migration-8.xml
tomcat/site/trunk/xdocs/oldnews.xml

Modified: tomcat/site/trunk/build.properties.default
URL: 
http://svn.apache.org/viewvc/tomcat/site/trunk/build.properties.default?rev=1748380&r1=1748379&r2=1748380&view=diff
==
--- tomcat/site/trunk/build.properties.default (original)
+++ tomcat/site/trunk/build.properties.default Tue Jun 14 10:36:50 2016
@@ -38,7 +38,7 @@ tomcat.loc=http://www.apache.org/dist/to
 # - Tomcat versions -
 tomcat60=6.0.45
 tomcat70=7.0.69
-tomcat80=8.0.35
+tomcat80=8.0.36
 tomcat85=8.5.3
 tomcat90=9.0.0.M8
 

Modified: tomcat/site/trunk/docs/download-80.html
URL: 
http://svn.apache.org/viewvc/tomcat/site/trunk/docs/download-80.html?rev=1748380&r1=1748379&r2=1748380&view=diff
==
--- tomcat/site/trunk/docs/download-80.html (original)
+++ tomcat/site/trunk/docs/download-80.html Tue Jun 14 10:36:50 2016
@@ -223,7 +223,7 @@
 
 
 [define w]8.5.3[end]
-[define v]8.0.35[end]
+[define v]8.0.36[end]
 https://www.apache.org/dist/tomcat/tomcat-8/KEYS";>KEYS |
 [v] |
 [w] |

Modified: tomcat/site/trunk/docs/index.html
URL: 
http://svn.apache.org/viewvc/tomcat/site/trunk/docs/index.html?rev=1748380&r1=1748379&r2=1748380&view=diff
==
--- tomcat/site/trunk/docs/index.html (original)
+++ tomcat/site/trunk/docs/index.html Tue Jun 14 10:36:50 2016
@@ -245,40 +245,6 @@ project logo are trademarks of the Apach
 
 
 
-
-2016-05-16 Tomcat 8.0.35 Released
-
-
-
-The Apache Tomcat Project is proud to announce the release of version 8.0.35
-of Apache Tomcat. Apache Tomcat 8.0.35 includes fixes for issues identified in
-8.0.33 as well as other enhancements and changes. The notable changes since
-8.0.33 include:
-
-
-
-Making the default TLS configuration more secure.
-
-Update the packaged version of the Tomcat Native Library to 1.2.7 to pick 
up
-the Windows binaries that are based on OpenSSL 1.0.2h and APR 1.5.2.
-
-
-
-
-
-Full details of these changes, and all the other changes, are available in the
-Tomcat 8
-changelog.
-
-
-
-
-
-Download
-
-
-
-
 
 2016-06-13 Tomcat 8.5.3 Released
 
@@ -353,6 +319,40 @@ changelog.
 
 
 
+
+
+2016-06-13 Tomcat 8.0.36 Released
+
+
+
+The Apache Tomcat Project is proud to announce the release of version 8.0.36
+of Apache Tomcat. Apache Tomcat 8.0.36 includes fixes for issues identified in
+8.0.35 as well as other enhancements and changes. The notable changes since
+8.0.35 include:
+
+
+
+Ensure an error will not be thrown during deployment when scanning jar 
files
+with no or invalid MANIFEST.MF files.
+
+Improvements to memory leak detection and prevention.
+
+
+
+
+
+Full details of these changes, and all the other changes, are available in the
+Tomcat 8
+changelog.
+
+
+
+
+
+Download
+
+
+
 
 
 2016-05-08 Tomcat Native 1.2.7 Released

Modified: tomcat/site/trunk/docs/migration-8.html
URL: 
http://svn.apache.org/viewvc/tomcat/site/trunk/docs/migration-8.html?rev=1748380&r1=1748379&r2=1748380&view=diff
==
--- tomcat/site/trunk/docs/migration-8.html (original)
+++ tomcat/site/trunk/docs/migration-8.html Tue Jun 14 10:36:50 2016
@@ -743,7 +743,8 @@ of Apache Tomcat.
   "8.0.30":"1717548",
   "8.0.32":"1728180",
   "8.0.33":"1735674",
-  "8.0.35":"1743442"
+  "8.0.35":"1743442",
+  "8.0.36":"1747548"
 };
 
 formSubmit.action = 
"http://svn.apache.org/viewvc/tomcat/tc8.0.x/trunk/"; +
@@ -800,8 +801,9 @@ of Apache Tomcat.
 8.0.29
 8.0.30
 8.0.32
-8.0.33
-8.0.35
+8.0.33
+8.0.35
+8.0.36
 , new version:
 
 8.0.0-RC1
@@ -830,8 +832,9 @@ of Apache Tomcat.
 8.0.29
 8.0.30
 8.0.32
-8.0.35
-8.0.35
+8.0.33
+8.0.35
+8.0.36
 trunk (unreleased)
 
 

Modified: tomcat/site/trunk/docs/oldnews.html
URL: 
http://svn.apache.org/viewvc/tomcat/site/trunk/docs/oldnews.html?rev=1748380&r1=1748379&r2=1748380&view=diff
==
--- tomcat/site/trunk/docs/oldnews.html (original)
+++ tomcat/site/trunk/docs/oldnews.html Tue Jun 14 10:36:50 2016
@@ -245,6 +245,40 @@
 
 
 
+
+2016-05-16 Tomcat 8.0.35 Released
+
+
+
+The Apache Tomcat P

[Bug 59699] Caching issue in ELContext / ImportHandler

2016-06-14 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=59699

--- Comment #2 from bdahon  ---
Hi,

For what I've read, you modified the findClass method to lookup resources
before actually loading the class. Reading your comments in the code, it's
faster. However, it doesn't actually cache the results, no ?

Wouldn't it be better to actually cache the results ?

Thanks,
Benjamin

-- 
You are receiving this mail because:
You are the assignee for the bug.

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 59699] Caching issue in ELContext / ImportHandler

2016-06-14 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=59699

--- Comment #3 from Mark Thomas  ---
(In reply to bdahon from comment #2)
> Hi,
> 
> For what I've read, you modified the findClass method to lookup resources
> before actually loading the class. Reading your comments in the code, it's
> faster.

That wasn't the only change.

> However, it doesn't actually cache the results, no ?

No additional caching was introduced.

> Wouldn't it be better to actually cache the results ?

No idea.

A thread-safe, memory leak free cache would add a reasonable amount of
complexity. There are no guarantees it would be faster.

Suitable cache settings will vary between applications so that may require per
web application configuration - something that is particularly complex for a
specification class where we can't change the public API.

If a specific performance issue is raised against the latest code (with a test
case that demonstrates the issue) we'll take another look but at this point the
code is viewed as 'good enough'.

-- 
You are receiving this mail because:
You are the assignee for the bug.

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 59699] Caching issue in ELContext / ImportHandler

2016-06-14 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=59699

--- Comment #4 from bdahon  ---
Thanks for your reply.

-- 
You are receiving this mail because:
You are the assignee for the bug.

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 59699] Caching issue in ELContext / ImportHandler

2016-06-14 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=59699

--- Comment #5 from bdahon  ---
Actually, I was not suggesting to cache all the results, only the classes which
could not be found.

-- 
You are receiving this mail because:
You are the assignee for the bug.

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



svn commit: r1748388 - in /tomcat/site/trunk/docs/tomcat-8.0-doc: ./ api/ api/org/apache/catalina/ api/org/apache/catalina/ant/ api/org/apache/catalina/ant/jmx/ api/org/apache/catalina/authenticator/

2016-06-14 Thread markt
Author: markt
Date: Tue Jun 14 11:20:27 2016
New Revision: 1748388

URL: http://svn.apache.org/viewvc?rev=1748388&view=rev
Log:
Update docs for 8.0.36 release


[This commit notification would consist of 63 parts, 
which exceeds the limit of 50 ones, so it was shortened to the summary.]

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[ANN] Apache Tomcat 8.0.36 available

2016-06-14 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache
Tomcat 8.0.36.

Please note that Tomcat 8.x users should now use 8.5.x releases in
preference to 8.0.x releases.

Apache Tomcat 8.0 is an open source software implementation of the Java
Servlet, JavaServer Pages, Java Unified Expression Language and Java
WebSocket technologies.

Apache Tomcat 8.0.36 includes fixes for issues identified in 8.0.35 as
well as other enhancements and changes. The notable changes since 8.0.35
include:

- Ensure error will not be thrown during deployment when scanning jar
  files with no or invalid MANIFEST.MF files.

- Improvements to memory leak detection and prevention

Please refer to the change log for the complete list of changes:
http://tomcat.apache.org/tomcat-8.0-doc/changelog.html

Downloads:
http://tomcat.apache.org/download-80.cgi

Migration guides from Apache Tomcat 5.5.x, 6.0.x and 7.0.x:
http://tomcat.apache.org/migration.html

Enjoy!

- The Apache Tomcat team

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Re: Timescale for 8.0.x EOL

2016-06-14 Thread Rémy Maucherat
2016-06-14 10:31 GMT+02:00 Mark Thomas :

> On 14/06/2016 09:00, Emmanuel Bourg wrote:
> > Le 13/06/2016 à 17:47, Mark Thomas a écrit :
> >> Now we have a stable release of 8.5.x, I'd like to finialise the end of
> >> life date for 8.0.x so we can publish it.
> >>
> >> We originally said we'd do parallel releases for 6 months. That gives an
> >> EOL date of 30 September 2016 for 8.0.x which seems reasonable to me.
> >>
> >> Any objections to that date or suggestions for a better one?
> >
> > Hi,
> >
> > Just a word with my Debian maintainer hat on, Tomcat 8.0.x was shipped
> > with Debian 8 Jessie with the expectation it would be supported during
> > the lifetime of this release (until May 2018). I'm currently maintaining
> > with other volunteers a stable version based on 8.0.14 (with backported
> > security patches). Canonical does a similar job for Ubuntu 16.04 LTS
> > based on Tomcat 8.0.32.
> >
> > The early EOL of 8.0.x is impractical because, at least in Debian, major
> > updates like the switch to 8.5 aren't allowed for the stable
> distribution.
> >
> > I understand you can't maintain so many branches for a long time, but if
> > Tomcat 8.0.x could be security supported at least until the Debian 9
> > release (~April/May 2017) it would allow users following the stable
> > distribution to remain on a supported version of Tomcat (Debian 9 will
> > include Tomcat 8.5).
>
> That is unlikely unless someone volunteers for that task.
>

Yes JF or myself could volunteer to do some additional limited 8.0
releases, but we'll see how it goes in practice.

>
> > If this isn't possible I'm crossing my fingers and hoping that the 8.5
> > security patches will remain backportable to 8.0.x, and that 8.0.x will
> > not be affected by security issues not found in 8.5.x.
>
> That should be fairly simple. You might need to choose between
> back-porting from 8.5.x and forward porting from 7.0.x depending on
> where the the problem lies to get the simplest patch but you can always
> ask here if you need help.
>
> I agree, this should produce an easy patch, backwards or forwards will
depend on the area of the issue. Obviously that's usually not what people
want to hear however, they prefer "we'll support it forever".

Rémy


[GitHub] tomcat-maven-plugin pull request #23: Upgraded to Apache Tomcat 8.5.3

2016-06-14 Thread wikier
GitHub user wikier opened a pull request:

https://github.com/apache/tomcat-maven-plugin/pull/23

Upgraded to Apache Tomcat 8.5.3


https://lists.apache.org/thread.html/a134dd23752acd40b9dd092ab300308804605af76225954ff3758db5@%3Cannounce.apache.org%3E

You can merge this pull request into a Git repository by running:

$ git pull https://github.com/wikier/tomcat-maven-plugin tc8.x

Alternatively you can review and apply these changes as the patch at:

https://github.com/apache/tomcat-maven-plugin/pull/23.patch

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

This closes #23


commit 137a4be76f154200812b261d0081d1a6b129b0a1
Author: Sergio Fernández 
Date:   2016-06-14T13:03:01Z

upgraded to tomcat 8.5.3




---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 59701] New: Improve the documentation when maxPostSize=0

2016-06-14 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=59701

Bug ID: 59701
   Summary: Improve the documentation when maxPostSize=0
   Product: Tomcat 7
   Version: trunk
  Hardware: All
OS: All
Status: NEW
  Severity: normal
  Priority: P2
 Component: Documentation
  Assignee: dev@tomcat.apache.org
  Reporter: huxing.zh...@gmail.com

In HTTP/AJP connector, setting maxPostSize=0 will no longer disable the post
limit from 7.0.63 onwards.

This behavior change is introduced by commit:
https://github.com/apache/tomcat70/commit/26a05bcfefb317f817d88fc9c07f14830b7afb5a#diff-701b4ec867f455fd7f9ebe04b78842bf

With the configuration maxPostSize=0, an upgrade to 7.0.63 onwards may causing
un expected result: A call to getParameter("xxx") may result null.

I think we should clarify this behavior if maxPostSize=0 in documentation.

-- 
You are receiving this mail because:
You are the assignee for the bug.

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 59701] Improve the documentation when maxPostSize=0

2016-06-14 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=59701

--- Comment #1 from Huxing Zhang  ---
Created attachment 33949
  --> https://bz.apache.org/bugzilla/attachment.cgi?id=33949&action=edit
patch against trunk

-- 
You are receiving this mail because:
You are the assignee for the bug.

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 59701] Improve the documentation when maxPostSize=0

2016-06-14 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=59701

--- Comment #2 from Remy Maucherat  ---
Hum, well, I disagree.
The documentation says: "The maximum size in bytes of the POST which will be
handled by the container FORM URL parameter parsing. The limit can be disabled
by setting this attribute to a value less than zero. If not specified, this
attribute is set to 2097152 (2 megabytes)."
This seems right to me (zero means you cannot POST any body that is parsed with
the Servlet API, 1 means one byte only - which won't work ;) -, etc).
Considerations on version numbers and changes should go into the changelog
instead, while the documentation represents the current state.

-- 
You are receiving this mail because:
You are the assignee for the bug.

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Time for Tomcat 7.0.70

2016-06-14 Thread Violeta Georgieva
Hi,

I would like to start the preparation for Tomcat 7.0.70.

If you need something in addition to this release please reply here.

Regards,
Violeta


svn commit: r1748452 - in /tomcat/trunk: build.xml webapps/docs/changelog.xml

2016-06-14 Thread markt
Author: markt
Date: Tue Jun 14 19:41:31 2016
New Revision: 1748452

URL: http://svn.apache.org/viewvc?rev=1748452&view=rev
Log: (empty)

Modified:
tomcat/trunk/build.xml
tomcat/trunk/webapps/docs/changelog.xml

Modified: tomcat/trunk/build.xml
URL: 
http://svn.apache.org/viewvc/tomcat/trunk/build.xml?rev=1748452&r1=1748451&r2=1748452&view=diff
==
--- tomcat/trunk/build.xml (original)
+++ tomcat/trunk/build.xml Tue Jun 14 19:41:31 2016
@@ -152,11 +152,9 @@
   
   
   
-  
 
   
   
-  
 
   
   
@@ -441,6 +439,7 @@
 
 
 
+
 
-
-
   
 
 

Modified: tomcat/trunk/webapps/docs/changelog.xml
URL: 
http://svn.apache.org/viewvc/tomcat/trunk/webapps/docs/changelog.xml?rev=1748452&r1=1748451&r2=1748452&view=diff
==
--- tomcat/trunk/webapps/docs/changelog.xml (original)
+++ tomcat/trunk/webapps/docs/changelog.xml Tue Jun 14 19:41:31 2016
@@ -45,6 +45,15 @@
   issues do not "pop up" wrt. others).
 -->
 
+  
+
+  
+Correct a regression in the fix for 58588 that removed the
+entire org.apache.juli package from the embedded JARs
+rendering them unusable. (markt)
+  
+
+  
   
 
   



-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



svn commit: r1748458 - in /tomcat/tc8.5.x/trunk: ./ build.xml webapps/docs/changelog.xml

2016-06-14 Thread markt
Author: markt
Date: Tue Jun 14 20:23:21 2016
New Revision: 1748458

URL: http://svn.apache.org/viewvc?rev=1748458&view=rev
Log:
Correct a regression in the fix for bug 58588 that removed the entire 
org.apache.juli package from the embedded JARs rendering them unusable.

Modified:
tomcat/tc8.5.x/trunk/   (props changed)
tomcat/tc8.5.x/trunk/build.xml
tomcat/tc8.5.x/trunk/webapps/docs/changelog.xml

Propchange: tomcat/tc8.5.x/trunk/
--
--- svn:mergeinfo (original)
+++ svn:mergeinfo Tue Jun 14 20:23:21 2016
@@ -1 +1 @@
-/tomcat/trunk:1734785,1734799,1734845,1734928,1735041,1735044,1735480,1735577,1735597,1735599-1735600,1735615,1736145,1736162,1736209,1736280,1736297,1736299,1736489,1736646,1736703,1736836,1736849,1737104-1737105,1737112,1737117,1737119-1737120,1737155,1737157,1737192,1737280,1737339,1737632,1737664,1737715,1737748,1737785,1737834,1737860,1737959,1738005,1738007,1738014-1738015,1738018,1738022,1738039,1738043,1738059-1738060,1738147,1738149,1738174-1738175,1738261,1738589,1738623-1738625,1738643,1738816,1738850,1738855,1738946-1738948,1738953-1738954,1738979,1738982,1739079-1739081,1739087,1739113,1739153,1739172,1739176,1739191,1739474,1739726,1739762,1739775,1739814,1739817-1739818,1739975,1740131,1740324,1740465,1740495,1740508-1740509,1740520,1740535,1740707,1740803,1740810,1740969,1740980,1740991,1740997,1741015,1741033,1741036,1741058,1741060,1741080,1741147,1741159,1741164,1741173,1741181,1741190,1741197,1741202,1741208,1741213,1741221,1741225,1741232,1741409,1741501,1741677
 
,1741892,1741896,1741984,1742023,1742042,1742071,1742090,1742093,1742101,1742105,1742111,1742139,1742146,1742148,1742166,1742181,1742184,1742187,1742246,1742248-1742251,1742263-1742264,1742268,1742276,1742369,1742387,1742448,1742509-1742512,1742917,1742919,1742933,1742975-1742976,1742984,1742986,1743019,1743115,1743117,1743124-1743125,1743134,1743425,1743554,1743679,1743696-1743698,1743700-1743701,1744058,1744064-1744065,1744125,1744194,1744229,1744270,1744323,1744432,1744684,1744697,1744705,1744713,1744760,1744786,1745142-1745143,1745145,1745177,1745179-1745180,1745227,1745248,1745254,1745337,1745467,1745576,1745735,1745744,1746304,1746306-1746307,1746319,1746327,1746338,1746340-1746341,1746344,1746427,1746441,1746473,1746490,1746492,1746495-1746496,1746499-1746501,1746503-1746507,1746509,1746549,1746551,1746554,1746556,1746558,1746584,1746620,1746649,1746724,1746939,1746989,1747014,1747028,1747035,1747210,1747225,1747234,1747253,1747404,1747506,1747536,1747924,1747980,1747993,1748
 001,1748253
+/tomcat/trunk:1734785,1734799,1734845,1734928,1735041,1735044,1735480,1735577,1735597,1735599-1735600,1735615,1736145,1736162,1736209,1736280,1736297,1736299,1736489,1736646,1736703,1736836,1736849,1737104-1737105,1737112,1737117,1737119-1737120,1737155,1737157,1737192,1737280,1737339,1737632,1737664,1737715,1737748,1737785,1737834,1737860,1737959,1738005,1738007,1738014-1738015,1738018,1738022,1738039,1738043,1738059-1738060,1738147,1738149,1738174-1738175,1738261,1738589,1738623-1738625,1738643,1738816,1738850,1738855,1738946-1738948,1738953-1738954,1738979,1738982,1739079-1739081,1739087,1739113,1739153,1739172,1739176,1739191,1739474,1739726,1739762,1739775,1739814,1739817-1739818,1739975,1740131,1740324,1740465,1740495,1740508-1740509,1740520,1740535,1740707,1740803,1740810,1740969,1740980,1740991,1740997,1741015,1741033,1741036,1741058,1741060,1741080,1741147,1741159,1741164,1741173,1741181,1741190,1741197,1741202,1741208,1741213,1741221,1741225,1741232,1741409,1741501,1741677
 
,1741892,1741896,1741984,1742023,1742042,1742071,1742090,1742093,1742101,1742105,1742111,1742139,1742146,1742148,1742166,1742181,1742184,1742187,1742246,1742248-1742251,1742263-1742264,1742268,1742276,1742369,1742387,1742448,1742509-1742512,1742917,1742919,1742933,1742975-1742976,1742984,1742986,1743019,1743115,1743117,1743124-1743125,1743134,1743425,1743554,1743679,1743696-1743698,1743700-1743701,1744058,1744064-1744065,1744125,1744194,1744229,1744270,1744323,1744432,1744684,1744697,1744705,1744713,1744760,1744786,1745142-1745143,1745145,1745177,1745179-1745180,1745227,1745248,1745254,1745337,1745467,1745576,1745735,1745744,1746304,1746306-1746307,1746319,1746327,1746338,1746340-1746341,1746344,1746427,1746441,1746473,1746490,1746492,1746495-1746496,1746499-1746501,1746503-1746507,1746509,1746549,1746551,1746554,1746556,1746558,1746584,1746620,1746649,1746724,1746939,1746989,1747014,1747028,1747035,1747210,1747225,1747234,1747253,1747404,1747506,1747536,1747924,1747980,1747993,1748
 001,1748253,1748452

Modified: tomcat/tc8.5.x/trunk/build.xml
URL: 
http://svn.apache.org/viewvc/tomcat/tc8.5.x/trunk/build.xml?rev=1748458&r1=1748457&r2=1748458&view=diff
==
--- tomcat/tc8.5.x/trunk/build.xml (original)
+++ tomcat/tc8.5.x/trunk/build.xml Tue Jun 14 20:23:21 2016
@@ -156,13 +156,11 

[Bug 59703] New: RFC 6265 Cookie Processor doesn't allow cookie domains with a leading dot.

2016-06-14 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=59703

Bug ID: 59703
   Summary: RFC 6265 Cookie Processor doesn't allow cookie domains
with a leading dot.
   Product: Tomcat 8
   Version: 8.0.35
  Hardware: Other
OS: Linux
Status: NEW
  Severity: blocker
  Priority: P2
 Component: Catalina
  Assignee: dev@tomcat.apache.org
  Reporter: alex.bl...@garmin.com

In Tomcat 7 or Tomcat 8, we're seeing HTTP 500s in our access logs due to being
sent requests with cookie values containing UTF-8 characters. 
The corresponding catalina.out exception we see is this:
java.lang.IllegalArgumentException: Control character in cookie value or
attribute.
at
org.apache.tomcat.util.http.LegacyCookieProcessor.isHttpSeparator(LegacyCookieProcessor.java:733)

A recommended fix is to instead use Tomcat 8.0.35 with the 
org.apache.tomcat.util.http.Rfc6265CookieProcessor instead in my context. 
( https://tomcat.apache.org/tomcat-8.0-doc/config/cookie-processor.html )

This fixed that problem, but introduced a new one!

My responses are now blowing up because I'm setting a leading dot on cookie
domains in my generated cookies.  I'm doing this so subdomains can see them. 
(Example: I want to set a cookie with domain '.example.com' so subdomain sites
like meh.example.com & foo.example.com would both see them.) 

Here's the exception I'm now seeing: 
java.lang.IllegalArgumentException: An invalid domain [.example.com] was
specified for this cookie at
org.apache.tomcat.util.http.Rfc6265CookieProcessor.validateDomain(Rfc6265CookieProcessor.java:180)
at
org.apache.tomcat.util.http.Rfc6265CookieProcessor.generateHeader(Rfc6265CookieProcessor.java:122)
 

Can someone look at fixing the validateDomain() method to allow leading dots in
cookie domains???

This usage is perfectly legal and in fact necessary for compatibility with old
browsers like IE8/9 that will ONLY allow these cookies to be seen by subdomains
IF they have that leading dot set! 
(As far as I can tell anyways, a leading dot in cookie domains IS valid.)

Thanks, -Alex

-- 
You are receiving this mail because:
You are the assignee for the bug.

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[GUMP@vmgump]: Project tomcat-native-trunk-make (in module tomcat-native-trunk) failed

2016-06-14 Thread Bill Barker
To whom it may engage...

This is an automated request, but not an unsolicited one. For 
more information please visit http://gump.apache.org/nagged.html, 
and/or contact the folk at gene...@gump.apache.org.

Project tomcat-native-trunk-make has an issue affecting its community 
integration.
This issue affects 3 projects,
 and has been outstanding for 43 runs.
The current state of this project is 'Failed', with reason 'Build Failed'.
For reference only, the following projects are affected by this:
- tomcat-native-trunk-make :  Tomcat native library using Apache Portable 
Runtime
- tomcat-native-trunk-make-install :  Tomcat native library using Apache 
Portable Runtime
- tomcat-trunk-test-apr :  Tomcat 9.x, a web server implementing the Java 
Servlet 4.0,
...


Full details are available at:

http://vmgump.apache.org/gump/public/tomcat-native-trunk/tomcat-native-trunk-make/index.html

That said, some information snippets are provided here.

The following annotations (debug/informational/warning/error messages) were 
provided:
 -INFO- Failed with reason build failed



The following work was performed:
http://vmgump.apache.org/gump/public/tomcat-native-trunk/tomcat-native-trunk-make/gump_work/build_tomcat-native-trunk_tomcat-native-trunk-make.html
Work Name: build_tomcat-native-trunk_tomcat-native-trunk-make (Type: Build)
Work ended in a state of : Failed
Elapsed: 34 secs
Command Line: make 
[Working Directory: /srv/gump/public/workspace/tomcat-native-trunk/native]
-
make[1]: Entering directory 
`/srv/gump/public/workspace/tomcat-native-trunk/native'
/bin/bash /srv/gump/public/workspace/apr-1/dest-20160615/build-1/libtool 
--silent --mode=compile gcc -g -O2 -pthread   -DHAVE_CONFIG_H  -DLINUX 
-D_REENTRANT -D_GNU_SOURCE   -g -O2 -DHAVE_OPENSSL -DHAVE_POLLSET_WAKEUP   
-I/srv/gump/public/workspace/tomcat-native-trunk/native/include 
-I/usr/lib/jvm/java-8-oracle/include -I/usr/lib/jvm/java-8-oracle/include/linux 
-I/srv/gump/public/workspace/openssl-master/dest-20160615/include  
-I/srv/gump/public/workspace/apr-1/dest-20160615/include/apr-1   -o 
src/address.lo -c src/address.c && touch src/address.lo
/bin/bash /srv/gump/public/workspace/apr-1/dest-20160615/build-1/libtool 
--silent --mode=compile gcc -g -O2 -pthread   -DHAVE_CONFIG_H  -DLINUX 
-D_REENTRANT -D_GNU_SOURCE   -g -O2 -DHAVE_OPENSSL -DHAVE_POLLSET_WAKEUP   
-I/srv/gump/public/workspace/tomcat-native-trunk/native/include 
-I/usr/lib/jvm/java-8-oracle/include -I/usr/lib/jvm/java-8-oracle/include/linux 
-I/srv/gump/public/workspace/openssl-master/dest-20160615/include  
-I/srv/gump/public/workspace/apr-1/dest-20160615/include/apr-1   -o src/bb.lo 
-c src/bb.c && touch src/bb.lo
/bin/bash /srv/gump/public/workspace/apr-1/dest-20160615/build-1/libtool 
--silent --mode=compile gcc -g -O2 -pthread   -DHAVE_CONFIG_H  -DLINUX 
-D_REENTRANT -D_GNU_SOURCE   -g -O2 -DHAVE_OPENSSL -DHAVE_POLLSET_WAKEUP   
-I/srv/gump/public/workspace/tomcat-native-trunk/native/include 
-I/usr/lib/jvm/java-8-oracle/include -I/usr/lib/jvm/java-8-oracle/include/linux 
-I/srv/gump/public/workspace/openssl-master/dest-20160615/include  
-I/srv/gump/public/workspace/apr-1/dest-20160615/include/apr-1   -o src/dir.lo 
-c src/dir.c && touch src/dir.lo
/bin/bash /srv/gump/public/workspace/apr-1/dest-20160615/build-1/libtool 
--silent --mode=compile gcc -g -O2 -pthread   -DHAVE_CONFIG_H  -DLINUX 
-D_REENTRANT -D_GNU_SOURCE   -g -O2 -DHAVE_OPENSSL -DHAVE_POLLSET_WAKEUP   
-I/srv/gump/public/workspace/tomcat-native-trunk/native/include 
-I/usr/lib/jvm/java-8-oracle/include -I/usr/lib/jvm/java-8-oracle/include/linux 
-I/srv/gump/public/workspace/openssl-master/dest-20160615/include  
-I/srv/gump/public/workspace/apr-1/dest-20160615/include/apr-1   -o 
src/error.lo -c src/error.c && touch src/error.lo
/bin/bash /srv/gump/public/workspace/apr-1/dest-20160615/build-1/libtool 
--silent --mode=compile gcc -g -O2 -pthread   -DHAVE_CONFIG_H  -DLINUX 
-D_REENTRANT -D_GNU_SOURCE   -g -O2 -DHAVE_OPENSSL -DHAVE_POLLSET_WAKEUP   
-I/srv/gump/public/workspace/tomcat-native-trunk/native/include 
-I/usr/lib/jvm/java-8-oracle/include -I/usr/lib/jvm/java-8-oracle/include/linux 
-I/srv/gump/public/workspace/openssl-master/dest-20160615/include  
-I/srv/gump/public/workspace/apr-1/dest-20160615/include/apr-1   -o src/file.lo 
-c src/file.c && touch src/file.lo
/bin/bash /srv/gump/public/workspace/apr-1/dest-20160615/build-1/libtool 
--silent --mode=compile gcc -g -O2 -pthread   -DHAVE_CONFIG_H  -DLINUX 
-D_REENTRANT -D_GNU_SOURCE   -g -O2 -DHAVE_OPENSSL -DHAVE_POLLSET_WAKEUP   
-I/srv/gump/public/workspace/tomcat-native-trunk/native/include 
-I/usr/lib/jvm/java-8-oracle/include -I/usr/lib/jvm/java-8-oracle/include/linux 
-I/srv/gump/public/workspace/openssl-master/dest-20160615/include  
-I/srv/gump/public/workspace/apr-1/dest-20160615/include/apr-1   -o src/info.lo 
-c src/info.c && touch src/info.lo
/bin/bash /srv/gump/public/workspace/apr-

[Bug 59701] Improve the documentation when maxPostSize=0

2016-06-14 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=59701

--- Comment #3 from Huxing Zhang  ---
I've found the changlelog mention this behavior change in [1]:

57938: Correctly handle empty form fields when a form is submitted as
multipart/form-data, the maxPostSize attribute of the Connector has been set to
a negative value and the Context has been configured with a value of true for
allowCasualMultipartParsing. The meaning of the value zero for the maxPostSize
has also been changed to mean a limit of zero rather than no limit to align it
with maxSavePostSize and to be more intuitive. (markt)

which is quite clear about it. 

And the releated issue:
https://bz.apache.org/bugzilla/show_bug.cgi?id=57938

I still think the above documentation is better, because it clearly says the
meaning of value zero.

Hopefully it will be useful for people who has the same problem.

[1] http://tomcat.apache.org/tomcat-7.0-doc/changelog.html.

-- 
You are receiving this mail because:
You are the assignee for the bug.

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org