svn commit: r1794790 - in /tomcat/site/trunk: docs/migration-8.html xdocs/migration-8.xml

2017-05-11 Thread markt 
Author: markt
Date: Thu May 11 07:16:17 2017
New Revision: 1794790

URL: http://svn.apache.org/viewvc?rev=1794790&view=rev
Log:
Add section on Jar scanning

Modified:
tomcat/site/trunk/docs/migration-8.html
tomcat/site/trunk/xdocs/migration-8.xml

Modified: tomcat/site/trunk/docs/migration-8.html
URL: 
http://svn.apache.org/viewvc/tomcat/site/trunk/docs/migration-8.html?rev=1794790&r1=1794789&r2=1794790&view=diff
==
--- tomcat/site/trunk/docs/migration-8.html (original)
+++ tomcat/site/trunk/docs/migration-8.html Thu May 11 07:16:17 2017
@@ -242,6 +242,9 @@
 JavaServer Pages 2.3
 
 
+Jar Scanning
+
+
 Default connector 
implementation
 
 
@@ -403,6 +406,42 @@ of Apache Tomcat.
   
 
 
+
+  
+
+Jar Scanning
+
+
+
+During the implementation of Servlet 3.1 a number of errors were
+identified in Tomcat 7's Servlet 3.0 pluggability implementation.
+Specifically:
+
+
+
+
+the SCI scan did not obey class loader ordering;
+
+fragments in container JARs were processed rather than ignored;
+
+container provided SCIs were sometimes ignored.
+
+
+
+
+These issues were corrected for Tomcat 8 but not back-ported to Tomcat 7
+because the fixed required significant API changes to the
+JarScanner component as well as changes to the configuration
+options.
+
+
+When migrating to Tomcat 8, Jar scanning configurations will need to be
+reviewed and adjusted for the new configuration options and custom
+JarScanner implementations will need to be updated to 
implement
+the new API.
+  
+
+
 
   
 

Modified: tomcat/site/trunk/xdocs/migration-8.xml
URL: 
http://svn.apache.org/viewvc/tomcat/site/trunk/xdocs/migration-8.xml?rev=1794790&r1=1794789&r2=1794790&view=diff
==
--- tomcat/site/trunk/xdocs/migration-8.xml (original)
+++ tomcat/site/trunk/xdocs/migration-8.xml Thu May 11 07:16:17 2017
@@ -86,6 +86,29 @@ of Apache Tomcat.
 
   
 
+  
+
+During the implementation of Servlet 3.1 a number of errors were
+identified in Tomcat 7's Servlet 3.0 pluggability implementation.
+Specifically:
+
+
+the SCI scan did not obey class loader ordering;
+fragments in container JARs were processed rather than ignored;
+container provided SCIs were sometimes ignored.
+
+
+These issues were corrected for Tomcat 8 but not back-ported to Tomcat 7
+because the fixed required significant API changes to the
+JarScanner component as well as changes to the configuration
+options.
+
+When migrating to Tomcat 8, Jar scanning configurations will need to be
+reviewed and adjusted for the new configuration options and custom
+JarScanner implementations will need to be updated to 
implement
+the new API.
+  
+
   
 
 The default HTTP and AJP connector implementation has switched from the



-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

svn commit: r1794791 - in /tomcat/trunk: java/org/apache/catalina/core/ java/org/apache/catalina/filters/ java/org/apache/catalina/manager/util/ java/org/apache/catalina/servlets/ java/org/apache/cata

2017-05-11 Thread ebourg 
Author: ebourg
Date: Thu May 11 07:23:21 2017
New Revision: 1794791

URL: http://svn.apache.org/viewvc?rev=1794791&view=rev
Log:
Use String.contains() instead of indexOf()

Modified:
tomcat/trunk/java/org/apache/catalina/core/StandardContext.java
tomcat/trunk/java/org/apache/catalina/filters/AddDefaultCharsetFilter.java
tomcat/trunk/java/org/apache/catalina/filters/ExpiresFilter.java
tomcat/trunk/java/org/apache/catalina/manager/util/SessionUtils.java
tomcat/trunk/java/org/apache/catalina/servlets/CGIServlet.java
tomcat/trunk/java/org/apache/catalina/servlets/WebdavServlet.java
tomcat/trunk/java/org/apache/catalina/ssi/SSIServletExternalResolver.java
tomcat/trunk/java/org/apache/catalina/webresources/FileResource.java
tomcat/trunk/java/org/apache/jasper/compiler/JavacErrorDetail.java
tomcat/trunk/java/org/apache/jasper/compiler/Validator.java

tomcat/trunk/java/org/apache/tomcat/util/http/fileupload/util/mime/MimeUtility.java
tomcat/trunk/java/org/apache/tomcat/util/modeler/Registry.java

tomcat/trunk/test/org/apache/catalina/authenticator/TestNonLoginAndBasicAuthenticator.java

tomcat/trunk/test/org/apache/catalina/authenticator/TestSSOnonLoginAndBasicAuthenticator.java
tomcat/trunk/test/org/apache/catalina/core/TestStandardContextAliases.java
tomcat/trunk/test/org/apache/catalina/loader/TestVirtualContext.java
tomcat/trunk/test/org/apache/catalina/startup/TestContextConfig.java

tomcat/trunk/test/org/apache/catalina/tribes/group/TestGroupChannelOptionFlag.java
tomcat/trunk/test/org/apache/tomcat/util/net/TesterSupport.java

Modified: tomcat/trunk/java/org/apache/catalina/core/StandardContext.java
URL: 
http://svn.apache.org/viewvc/tomcat/trunk/java/org/apache/catalina/core/StandardContext.java?rev=1794791&r1=1794790&r2=1794791&view=diff
==
--- tomcat/trunk/java/org/apache/catalina/core/StandardContext.java (original)
+++ tomcat/trunk/java/org/apache/catalina/core/StandardContext.java Thu May 11 
07:23:21 2017
@@ -6045,8 +6045,7 @@ public class StandardContext extends Con
 } else
 return false;
 }
-if ( (urlPattern.startsWith("/")) &&
-(urlPattern.indexOf("*.") < 0)) {
+if (urlPattern.startsWith("/") && !urlPattern.contains("*.")) {
 checkUnusualURLPattern(urlPattern);
 return true;
 } else

Modified: 
tomcat/trunk/java/org/apache/catalina/filters/AddDefaultCharsetFilter.java
URL: 
http://svn.apache.org/viewvc/tomcat/trunk/java/org/apache/catalina/filters/AddDefaultCharsetFilter.java?rev=1794791&r1=1794790&r2=1794791&view=diff
==
--- tomcat/trunk/java/org/apache/catalina/filters/AddDefaultCharsetFilter.java 
(original)
+++ tomcat/trunk/java/org/apache/catalina/filters/AddDefaultCharsetFilter.java 
Thu May 11 07:23:21 2017
@@ -108,7 +108,7 @@ public class AddDefaultCharsetFilter ext
 public void setContentType(String ct) {
 
 if (ct != null && ct.startsWith("text/")) {
-if (ct.indexOf("charset=") < 0) {
+if (!ct.contains("charset=")) {
 super.setContentType(ct + ";charset=" + encoding);
 } else {
 super.setContentType(ct);

Modified: tomcat/trunk/java/org/apache/catalina/filters/ExpiresFilter.java
URL: 
http://svn.apache.org/viewvc/tomcat/trunk/java/org/apache/catalina/filters/ExpiresFilter.java?rev=1794791&r1=1794790&r2=1794791&view=diff
==
--- tomcat/trunk/java/org/apache/catalina/filters/ExpiresFilter.java (original)
+++ tomcat/trunk/java/org/apache/catalina/filters/ExpiresFilter.java Thu May 11 
07:23:21 2017
@@ -1104,7 +1104,7 @@ public class ExpiresFilter extends Filte
 if (str == null || searchStr == null) {
 return false;
 }
-return str.indexOf(searchStr) >= 0;
+return str.contains(searchStr);
 }
 
 /**

Modified: tomcat/trunk/java/org/apache/catalina/manager/util/SessionUtils.java
URL: 
http://svn.apache.org/viewvc/tomcat/trunk/java/org/apache/catalina/manager/util/SessionUtils.java?rev=1794791&r1=1794790&r2=1794791&view=diff
==
--- tomcat/trunk/java/org/apache/catalina/manager/util/SessionUtils.java 
(original)
+++ tomcat/trunk/java/org/apache/catalina/manager/util/SessionUtils.java Thu 
May 11 07:23:21 2017
@@ -112,7 +112,7 @@ public class SessionUtils {
 final List tapestryArray = new ArrayList<>();
 for (Enumeration enumeration = 
in_session.getAttributeNames(); enumeration.hasMoreElements();) {
 String name = enumeration.nextElement();
-if (name.indexOf("tapestry") > -1 && name.indexOf("engine") > 
-1 && null

svn commit: r1794792 - in /tomcat/site/trunk: ./ docs/ xdocs/

2017-05-11 Thread markt 
Author: markt
Date: Thu May 11 07:28:01 2017
New Revision: 1794792

URL: http://svn.apache.org/viewvc?rev=1794792&view=rev
Log:
Update site (excluding docs) for 9.0.0.M21 release

Modified:
tomcat/site/trunk/build.properties.default
tomcat/site/trunk/docs/download-90.html
tomcat/site/trunk/docs/index.html
tomcat/site/trunk/docs/migration-9.html
tomcat/site/trunk/docs/oldnews.html
tomcat/site/trunk/docs/whichversion.html
tomcat/site/trunk/xdocs/download-90.xml
tomcat/site/trunk/xdocs/index.xml
tomcat/site/trunk/xdocs/migration-9.xml
tomcat/site/trunk/xdocs/oldnews.xml
tomcat/site/trunk/xdocs/whichversion.xml

Modified: tomcat/site/trunk/build.properties.default
URL: 
http://svn.apache.org/viewvc/tomcat/site/trunk/build.properties.default?rev=1794792&r1=1794791&r2=1794792&view=diff
==
--- tomcat/site/trunk/build.properties.default (original)
+++ tomcat/site/trunk/build.properties.default Thu May 11 07:28:01 2017
@@ -40,7 +40,7 @@ tomcat60=6.0.53
 tomcat70=7.0.77
 tomcat80=8.0.43
 tomcat85=8.5.14
-tomcat90=9.0.0.M20
+tomcat90=9.0.0.M21
 
 # - Download destination -
 tomcat-site-docs.home=${base.path}/tomcat-site-docs/

Modified: tomcat/site/trunk/docs/download-90.html
URL: 
http://svn.apache.org/viewvc/tomcat/site/trunk/docs/download-90.html?rev=1794792&r1=1794791&r2=1794792&view=diff
==
--- tomcat/site/trunk/docs/download-90.html (original)
+++ tomcat/site/trunk/docs/download-90.html Thu May 11 07:28:01 2017
@@ -230,7 +230,7 @@
 Quick Navigation
 
 
-[define v]9.0.0.M20[end]
+[define v]9.0.0.M21[end]
 https://www.apache.org/dist/tomcat/tomcat-9/KEYS";>KEYS |
 [v] |
 Browse |

Modified: tomcat/site/trunk/docs/index.html
URL: 
http://svn.apache.org/viewvc/tomcat/site/trunk/docs/index.html?rev=1794792&r1=1794791&r2=1794792&view=diff
==
--- tomcat/site/trunk/docs/index.html (original)
+++ tomcat/site/trunk/docs/index.html Thu May 11 07:28:01 2017
@@ -253,60 +253,59 @@ project logo are trademarks of the Apach
 
 
 
-
-2017-04-18 Tomcat 8.5.14 Released
+
+2017-05-10 Tomcat 9.0.0.M21 (alpha) 
Released
 
 
 
-The Apache Tomcat Project is proud to announce the release of version 8.5.14
-of Apache Tomcat. Apache Tomcat 8.5.x is intended to replace 8.0.x and includes
-new features pulled forward from Tomcat 9.0.x. The minimum Java version and
-implemented specification versions remain unchanged. The notable changes
-compared to 8.5.13 include:
+The Apache Tomcat Project is proud to announce the release of version 9.0.0.M21
+(alpha) of Apache Tomcat. The is a milestone release of the 9.0.x branch and 
has
+been made to provide users with early access to the new features in Apache
+Tomcat 9.0.x so that they may provide feedback. The notable changes compared to
+9.0.0.M20 include:
 
 
 
-Correct a regression that broke JMX operations (including the Manager web
-application) if the operation took parameters
+Update the default URIEncoding for a Connector to UTF-8 as required by the
+Servlet 4.0 specification.
 
-Calls to isReady() no longer throw exceptions after timeouts for async
-servlets
+Various improvements to the handling of static custom error pages
+
+Update to Eclipse JDT Compiler 4.6.3
 
 
 
 
 
 Full details of these changes, and all the other changes, are available in the
-Tomcat 8.5
+Tomcat 9
 changelog.
 
 
 
 
 
-Download
+Download
 
 
 
 
-
-2017-04-18 Tomcat 9.0.0.M20 (alpha) 
Released
+
+2017-04-18 Tomcat 8.5.14 Released
 
 
 
-The Apache Tomcat Project is proud to announce the release of version 9.0.0.M20
-(alpha) of Apache Tomcat. The is a milestone release of the 9.0.x branch and 
has
-been made to provide users with early access to the new features in Apache
-Tomcat 9.0.x so that they may provide feedback. The notable changes compared to
-9.0.0.M19 include:
+The Apache Tomcat Project is proud to announce the release of version 8.5.14
+of Apache Tomcat. Apache Tomcat 8.5.x is intended to replace 8.0.x and includes
+new features pulled forward from Tomcat 9.0.x. The minimum Java version and
+implemented specification versions remain unchanged. The notable changes
+compared to 8.5.13 include:
 
 
 
 Correct a regression that broke JMX operations (including the Manager web
 application) if the operation took parameters
 
-Add JMX support for Tribes components
-
 Calls to isReady() no longer throw exceptions after timeouts for async
 servlets
 
@@ -315,14 +314,14 @@ Tomcat 9.0.x so that they may provide fe
 
 
 Full details of these changes, and all the other changes, are available in the
-Tomcat 9
+Tomcat 8.5
 changelog.
 
 
 
 
 
-Download
+Download
 
 
 

Modified: tomcat/site/trunk/docs/migration-9.html
URL: 
http://svn.apache.org/viewvc/tomcat/site/trunk/docs/migration-9.html?rev=17

svn commit: r19616 - /release/tomcat/tomcat-9/v9.0.0.M20/

2017-05-11 Thread markt 
Author: markt
Date: Thu May 11 07:32:28 2017
New Revision: 19616

Log:
Drop 9.0.0.M20 from mirrors

Removed:
release/tomcat/tomcat-9/v9.0.0.M20/


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

svn commit: r1794793 - in /tomcat/site/trunk/docs/tomcat-9.0-doc: ./ api/ api/org/apache/catalina/ api/org/apache/catalina/ant/ api/org/apache/catalina/ant/jmx/ api/org/apache/catalina/authenticator/

2017-05-11 Thread markt 
Author: markt
Date: Thu May 11 07:39:15 2017
New Revision: 1794793

URL: http://svn.apache.org/viewvc?rev=1794793&view=rev
Log:
Update docs for 9.0.0.M21 release


[This commit notification would consist of 70 parts, 
which exceeds the limit of 50 ones, so it was shortened to the summary.]

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

[ANN] Apache Tomcat 9.0.0.M21 available

2017-05-11 Thread Mark Thomas 
The Apache Tomcat team announces the immediate availability of Apache
Tomcat 9.0.0.M21.

Apache Tomcat 9 is an open source software implementation of the Java
Servlet, JavaServer Pages, Java Unified Expression Language, Java
WebSocket and JASPIC technologies.

Apache Tomcat 9.0.0.M21 is a milestone release of the 9.0.x branch and
has been made to provide users with early access to the new features in
Apache Tomcat 9.0.x so that they may provide feedback. The notable
changes compared to 9.0.0.M20 include:

- Update the default URIEncoding for a Connector to UTF-8 as required
  by the Servlet 4.0 specification.

- Various improvements to the handling of static custom error pages

- Update to Eclipse JDT Compiler 4.6.3


Please refer to the change log for the complete list of changes:
http://tomcat.apache.org/tomcat-9.0-doc/changelog.html

Downloads:
http://tomcat.apache.org/download-90.cgi

Migration guides from Apache Tomcat 6.x, 7.x and 8.x:
http://tomcat.apache.org/migration.html

Join us at TomcatCon in Miami for 3 days of Apache Tomcat content:
https://tomcat.apache.org/conference.html

Enjoy!

- The Apache Tomcat team

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

svn commit: r1794796 - in /tomcat/site/trunk: ./ docs/ xdocs/

2017-05-11 Thread markt 
Author: markt
Date: Thu May 11 08:40:04 2017
New Revision: 1794796

URL: http://svn.apache.org/viewvc?rev=1794796&view=rev
Log:
Update site for 8.5.15 release (excluding docs)

Modified:
tomcat/site/trunk/build.properties.default
tomcat/site/trunk/docs/doap_Tomcat.rdf
tomcat/site/trunk/docs/download-80.html
tomcat/site/trunk/docs/index.html
tomcat/site/trunk/docs/migration-85.html
tomcat/site/trunk/docs/oldnews.html
tomcat/site/trunk/docs/whichversion.html
tomcat/site/trunk/xdocs/doap_Tomcat.rdf
tomcat/site/trunk/xdocs/download-80.xml
tomcat/site/trunk/xdocs/index.xml
tomcat/site/trunk/xdocs/migration-85.xml
tomcat/site/trunk/xdocs/oldnews.xml
tomcat/site/trunk/xdocs/whichversion.xml

Modified: tomcat/site/trunk/build.properties.default
URL: 
http://svn.apache.org/viewvc/tomcat/site/trunk/build.properties.default?rev=1794796&r1=1794795&r2=1794796&view=diff
==
--- tomcat/site/trunk/build.properties.default (original)
+++ tomcat/site/trunk/build.properties.default Thu May 11 08:40:04 2017
@@ -39,7 +39,7 @@ tomcat.loc=http://www.apache.org/dist/to
 tomcat60=6.0.53
 tomcat70=7.0.77
 tomcat80=8.0.43
-tomcat85=8.5.14
+tomcat85=8.5.15
 tomcat90=9.0.0.M21
 
 # - Download destination -

Modified: tomcat/site/trunk/docs/doap_Tomcat.rdf
URL: 
http://svn.apache.org/viewvc/tomcat/site/trunk/docs/doap_Tomcat.rdf?rev=1794796&r1=1794795&r2=1794796&view=diff
==
--- tomcat/site/trunk/docs/doap_Tomcat.rdf (original)
+++ tomcat/site/trunk/docs/doap_Tomcat.rdf Thu May 11 08:40:04 2017
@@ -60,8 +60,8 @@
 
   
 Latest Stable 8.5.x Release
-2017-04-18
-8.5.14
+2017-05-11
+8.5.15
   
 
 

Modified: tomcat/site/trunk/docs/download-80.html
URL: 
http://svn.apache.org/viewvc/tomcat/site/trunk/docs/download-80.html?rev=1794796&r1=1794795&r2=1794796&view=diff
==
--- tomcat/site/trunk/docs/download-80.html (original)
+++ tomcat/site/trunk/docs/download-80.html Thu May 11 08:40:04 2017
@@ -230,7 +230,7 @@
 Quick Navigation
 
 
-[define v]8.5.14[end]
+[define v]8.5.15[end]
 [define w]8.0.43[end]
 https://www.apache.org/dist/tomcat/tomcat-8/KEYS";>KEYS |
 [v] |

Modified: tomcat/site/trunk/docs/index.html
URL: 
http://svn.apache.org/viewvc/tomcat/site/trunk/docs/index.html?rev=1794796&r1=1794795&r2=1794796&view=diff
==
--- tomcat/site/trunk/docs/index.html (original)
+++ tomcat/site/trunk/docs/index.html Thu May 11 08:40:04 2017
@@ -253,75 +253,76 @@ project logo are trademarks of the Apach
 
 
 
-
-2017-05-10 Tomcat 9.0.0.M21 (alpha) 
Released
+
+2017-05-10 Tomcat 8.5.15 Released
 
 
 
-The Apache Tomcat Project is proud to announce the release of version 9.0.0.M21
-(alpha) of Apache Tomcat. The is a milestone release of the 9.0.x branch and 
has
-been made to provide users with early access to the new features in Apache
-Tomcat 9.0.x so that they may provide feedback. The notable changes compared to
-9.0.0.M20 include:
+The Apache Tomcat Project is proud to announce the release of version 8.5.14
+of Apache Tomcat. Apache Tomcat 8.5.x is intended to replace 8.0.x and includes
+new features pulled forward from Tomcat 9.0.x. The minimum Java version and
+implemented specification versions remain unchanged. The notable changes
+compared to 8.5.13 include:
 
 
 
-Update the default URIEncoding for a Connector to UTF-8 as required by the
-Servlet 4.0 specification.
-
 Various improvements to the handling of static custom error pages
 
 Update to Eclipse JDT Compiler 4.6.3
 
+Review those places where Tomcat re-encodes a URI or URI component and
+ensure that the correct encoding is consistently applied.
+
 
 
 
 
 Full details of these changes, and all the other changes, are available in the
-Tomcat 9
+Tomcat 8.5
 changelog.
 
 
 
 
 
-Download
+Download
 
 
 
 
-
-2017-04-18 Tomcat 8.5.14 Released
+
+2017-05-10 Tomcat 9.0.0.M21 (alpha) 
Released
 
 
 
-The Apache Tomcat Project is proud to announce the release of version 8.5.14
-of Apache Tomcat. Apache Tomcat 8.5.x is intended to replace 8.0.x and includes
-new features pulled forward from Tomcat 9.0.x. The minimum Java version and
-implemented specification versions remain unchanged. The notable changes
-compared to 8.5.13 include:
+The Apache Tomcat Project is proud to announce the release of version 9.0.0.M21
+(alpha) of Apache Tomcat. The is a milestone release of the 9.0.x branch and 
has
+been made to provide users with early access to the new features in Apache
+Tomcat 9.0.x so that they may provide feedback. The notable changes compared to
+9.0.0.M20 include:
 
 
 
-Correct a regression that broke JMX operations (including the Manager web
-a

svn commit: r19617 - /release/tomcat/tomcat-8/v8.5.14/

2017-05-11 Thread markt 
Author: markt
Date: Thu May 11 08:42:07 2017
New Revision: 19617

Log:
Drop 8.5.14 from mirrors

Removed:
release/tomcat/tomcat-8/v8.5.14/


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

svn commit: r1794797 - /tomcat/trunk/webapps/docs/changelog.xml

2017-05-11 Thread markt 
Author: markt
Date: Thu May 11 08:43:08 2017
New Revision: 1794797

URL: http://svn.apache.org/viewvc?rev=1794797&view=rev
Log:
Add release date

Modified:
tomcat/trunk/webapps/docs/changelog.xml

Modified: tomcat/trunk/webapps/docs/changelog.xml
URL: 
http://svn.apache.org/viewvc/tomcat/trunk/webapps/docs/changelog.xml?rev=1794797&r1=1794796&r2=1794797&view=diff
==
--- tomcat/trunk/webapps/docs/changelog.xml (original)
+++ tomcat/trunk/webapps/docs/changelog.xml Thu May 11 08:43:08 2017
@@ -71,7 +71,7 @@
 
   
 
-
+
   
 
   



-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

svn commit: r1794798 - /tomcat/tc8.5.x/trunk/webapps/docs/changelog.xml

2017-05-11 Thread markt 
Author: markt
Date: Thu May 11 08:43:55 2017
New Revision: 1794798

URL: http://svn.apache.org/viewvc?rev=1794798&view=rev
Log:
Add release date

Modified:
tomcat/tc8.5.x/trunk/webapps/docs/changelog.xml

Modified: tomcat/tc8.5.x/trunk/webapps/docs/changelog.xml
URL: 
http://svn.apache.org/viewvc/tomcat/tc8.5.x/trunk/webapps/docs/changelog.xml?rev=1794798&r1=1794797&r2=1794798&view=diff
==
--- tomcat/tc8.5.x/trunk/webapps/docs/changelog.xml (original)
+++ tomcat/tc8.5.x/trunk/webapps/docs/changelog.xml Thu May 11 08:43:55 2017
@@ -60,7 +60,7 @@
 
   
 
-
+
   
 
   



-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

svn commit: r1794799 - in /tomcat/site/trunk/docs/tomcat-8.5-doc: ./ api/ api/org/apache/catalina/ api/org/apache/catalina/ant/ api/org/apache/catalina/ant/jmx/ api/org/apache/catalina/authenticator/

2017-05-11 Thread markt 
Author: markt
Date: Thu May 11 08:49:04 2017
New Revision: 1794799

URL: http://svn.apache.org/viewvc?rev=1794799&view=rev
Log:
Update docs for 8.5.15 release


[This commit notification would consist of 60 parts, 
which exceeds the limit of 50 ones, so it was shortened to the summary.]

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

[Bug 44225] SSL connector tries to load the private keystore file after privileges have already been dropped by JSVC

2017-05-11 Thread bugzilla 
https://bz.apache.org/bugzilla/show_bug.cgi?id=44225

Mark Thomas  changed:

   What|Removed |Added

 Resolution|--- |WONTFIX
 Status|NEW |RESOLVED

--- Comment #2 from Mark Thomas  ---
It doesn't appear as if anyone is interested in writing a patch for this.

Also, limiting the key file to root doesn't offer any additional security. The
Tomcat process will have the key in memory and hence the OS user tomcat is
running as will always be able to access it.

Therefore, closing this as WONTFIX.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

[GUMP@vmgump-vm3]: Project tomcat-tc7.0.x-test-apr (in module tomcat-7.0.x) failed

2017-05-11 Thread Bill Barker 
To whom it may engage...

This is an automated request, but not an unsolicited one. For 
more information please visit http://gump.apache.org/nagged.html, 
and/or contact the folk at gene...@gump.apache.org.

Project tomcat-tc7.0.x-test-apr has an issue affecting its community 
integration.
This issue affects 1 projects.
The current state of this project is 'Failed', with reason 'Build Failed'.
For reference only, the following projects are affected by this:
- tomcat-tc7.0.x-test-apr :  Tomcat 7.x, a web server implementing Java 
Servlet 3.0,
...


Full details are available at:
http://vmgump-vm3.apache.org/tomcat-7.0.x/tomcat-tc7.0.x-test-apr/index.html

That said, some information snippets are provided here.

The following annotations (debug/informational/warning/error messages) were 
provided:
 -DEBUG- Dependency on tomcat-tc7.0.x-dbcp exists, no need to add for property 
tomcat-dbcp-src.jar.
 -DEBUG- Dependency on commons-daemon exists, no need to add for property 
commons-daemon.native.src.tgz.
 -DEBUG- Dependency on commons-daemon exists, no need to add for property 
tomcat-native.tar.gz.
 -DEBUG- Dependency on tomcat-tc7.0.x-dbcp exists, no need to add for property 
tomcat-dbcp.home.
 -INFO- Failed with reason build failed
 -INFO- Project Reports in: 
/srv/gump/public/workspace/tomcat-7.0.x/output/logs-APR
 -INFO- Project Reports in: 
/srv/gump/public/workspace/tomcat-7.0.x/output/test-tmp-APR/logs



The following work was performed:
http://vmgump-vm3.apache.org/tomcat-7.0.x/tomcat-tc7.0.x-test-apr/gump_work/build_tomcat-7.0.x_tomcat-tc7.0.x-test-apr.html
Work Name: build_tomcat-7.0.x_tomcat-tc7.0.x-test-apr (Type: Build)
Work ended in a state of : Failed
Elapsed: 36 mins 57 secs
Command Line: /usr/lib/jvm/java-8-oracle/bin/java -Djava.awt.headless=true 
-Dbuild.sysclasspath=only org.apache.tools.ant.Main 
-Dgump.merge=/srv/gump/public/gump/work/merge.xml 
-Dbase.path=/srv/gump/public/workspace/tomcat-7.0.x/tomcat-build-libs 
-Dcommons-pool.home=/srv/gump/public/workspace/commons-pool-1.x 
-Dtest.temp=output/test-tmp-APR 
-Djunit.jar=/srv/gump/public/workspace/junit/target/junit-4.13-SNAPSHOT.jar 
-Dobjenesis.jar=/srv/gump/public/workspace/objenesis/main/target/objenesis-2.6-SNAPSHOT.jar
 -Dexamples.sources.skip=true 
-Dcommons-daemon.jar=/srv/gump/public/workspace/apache-commons/daemon/dist/commons-daemon-20170511.jar
 
-Dtomcat-dbcp-src.jar=/srv/gump/public/workspace/tomcat-7.0.x/tomcat-deps/tomcat-dbcp-src.jar
 -Dtomcat-dbcp.home=/srv/gump/public/workspace/tomcat-7.0.x/tomcat-deps 
-Dtest.excludePerformance=true 
-Dhamcrest.jar=/srv/gump/packages/hamcrest/hamcrest-core-1.3.jar 
-Dcommons-dbcp.home=/srv/gump/public/workspace/commons-dbcp-1.x 
-Dexecute.test.apr=true -Dexec
 ute.test.bio=false 
-Dcommons-daemon.native.src.tgz=/srv/gump/public/workspace/apache-commons/daemon/dist/bin/commons-daemon-20170511-native-src.tar.gz
 -Dtest.reports=output/logs-APR 
-Dtomcat-native.tar.gz=/srv/gump/public/workspace/apache-commons/daemon/dist/bin/commons-daemon-20170511-native-src.tar.gz
 -Djdt.jar=/srv/gump/packages/eclipse/plugins/R-4.5-201506032000/ecj-4.5.jar 
-Dtest.apr.loc=/srv/gump/public/workspace/tomcat-native-12/dest-20170511/lib 
-Dtest.relaxTiming=true -Dexecute.test.nio=false -Dtest.accesslog=true 
-Dtomcat-dbcp.jar=/srv/gump/public/workspace/tomcat-7.0.x/tomcat-deps/tomcat-dbcp-20170511.jar
 
-Deasymock.jar=/srv/gump/public/workspace/easymock/core/target/easymock-3.5-SNAPSHOT.jar
 -Dcglib.jar=/srv/gump/packages/cglib/cglib-nodep-2.2.jar test 
[Working Directory: /srv/gump/public/workspace/tomcat-7.0.x]
CLASSPATH: 
/usr/lib/jvm/java-8-oracle/lib/tools.jar:/srv/gump/public/workspace/tomcat-7.0.x/output/build/webapps/examples/WEB-INF/classes:/srv/gump/public/workspace/tomcat-7.0.x/output/testclasses:/srv/gump/public/workspace/ant/dist/lib/ant.jar:/srv/gump/public/workspace/ant/dist/lib/ant-launcher.jar:/srv/gump/public/workspace/ant/dist/lib/ant-jmf.jar:/srv/gump/public/workspace/ant/dist/lib/ant-junit.jar:/srv/gump/public/workspace/ant/dist/lib/ant-junit4.jar:/srv/gump/public/workspace/ant/dist/lib/ant-swing.jar:/srv/gump/public/workspace/ant/dist/lib/ant-apache-resolver.jar:/srv/gump/public/workspace/ant/dist/lib/ant-apache-xalan2.jar:/srv/gump/public/workspace/xml-commons/java/build/resolver.jar:/srv/gump/public/workspace/tomcat-7.0.x/output/build/bin/bootstrap.jar:/srv/gump/public/workspace/tomcat-7.0.x/output/build/bin/tomcat-juli.jar:/srv/gump/public/workspace/tomcat-7.0.x/output/build/lib/annotations-api.jar:/srv/gump/public/workspace/tomcat-7.0.x/output/build/lib/servlet-api.ja
 
r:/srv/gump/public/workspace/tomcat-7.0.x/output/build/lib/jsp-api.jar:/srv/gump/public/workspace/tomcat-7.0.x/output/build/lib/el-api.jar:/srv/gump/public/workspace/tomcat-7.0.x/output/build/lib/catalina.jar:/srv/gump/public/workspace/tomcat-7.0.x/output/build/lib/catalina-ant.jar:/srv/gump/public/workspace/tomcat-7.0.x/output/build/lib/tomcat-coyote.jar:/srv/gump/public/

Re: [VOTE] Release Apache Tomcat 8.0.44

2017-05-11 Thread Rémy Maucherat 
2017-05-10 20:41 GMT+02:00 Violeta Georgieva :

> The proposed Apache Tomcat 8.0.44 release is now available for voting.
>
> It can be obtained from:
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-8/v8.0.44/
> The Maven staging repo is:
> https://repository.apache.org/content/repositories/orgapachetomcat-1136/
> The svn tag is:
> http://svn.apache.org/repos/asf/tomcat/tc8.0.x/tags/TOMCAT_8_0_44/
>
> The proposed 8.0.44 release is:
> [ ] Broken - do not release
> [X] Stable - go ahead and release as 8.0.44
>
> Rémy

Re: [VOTE] Release Apache Tomcat 7.0.78

2017-05-11 Thread Rémy Maucherat 
2017-05-10 17:47 GMT+02:00 Violeta Georgieva :

> The proposed Apache Tomcat 7.0.78 release is now available for voting.
>
> It can be obtained from:
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-7/v7.0.78/
> The Maven staging repo is:
> https://repository.apache.org/content/repositories/orgapachetomcat-1135/
> The svn tag is:
> http://svn.apache.org/repos/asf/tomcat/tc7.0.x/tags/TOMCAT_7_0_78/
>
> The proposed 7.0.78 release is:
> [ ] Broken - do not release
> [X] Stable - go ahead and release as 7.0.78 Stable
>
> Rémy

[Bug 44225] SSL connector tries to load the private keystore file after privileges have already been dropped by JSVC

2017-05-11 Thread bugzilla 
https://bz.apache.org/bugzilla/show_bug.cgi?id=44225

--- Comment #3 from Christopher Schultz  ---
(In reply to Mark Thomas from comment #2)
> Therefore, closing this as WONTFIX.

+1

It also prevents the keystore file from being re-read if the  is
re-initialized or if the keystore is intentionally changed for some reason
(e.g. new certificate issued).

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

[Bug 60461] SIGSEGV in SSLSocket.getInfos

2017-05-11 Thread bugzilla 
https://bz.apache.org/bugzilla/show_bug.cgi?id=60461

--- Comment #17 from matt...@cacorp.com ---
Another crash last night, please let me know what I can do to help.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

[Bug 61086] New: Some clients hang when HTTP responses give status 205 Reset Content

2017-05-11 Thread bugzilla 
https://bz.apache.org/bugzilla/show_bug.cgi?id=61086

Bug ID: 61086
   Summary: Some clients hang when HTTP responses give status 205
Reset Content
   Product: Tomcat 8
   Version: 8.5.15
  Hardware: All
OS: All
Status: NEW
  Severity: normal
  Priority: P2
 Component: Connectors
  Assignee: dev@tomcat.apache.org
  Reporter: mayeul.marg...@synchronoss.com
  Target Milestone: 

Created attachment 34992
  --> https://bz.apache.org/bugzilla/attachment.cgi?id=34992&action=edit
Exemple standalone servlet to give out HTTP 205 response

When a servlet running on Tomcat sends a response over HTTP with status 205
Reset Content, some clients hang with this response and just wait for it to
"complete" after Tomcat considers it fully done.

So far I've identified two clients:
- command line program curl, version 7.52.1,
- Jersey client, version 1.19.1.

Using Tomcat 8.5.15 (latest release), but the issue was here for as long as I
went back and it seems still here in Tomcat 9.

Debugging the HTTP communication shows it has to do with the fact that the
response has no body (which is correct, as mandated by RFC for status 205), and
no indication of content length to explicitly say that there is no body. That
last part is incorrect behavior according to RFC 7231 section 6.3.6:

   " Since the 205 status code implies that no additional content will be
provided, a server MUST NOT generate a payload in a 205 response.  In other
words, a server MUST do one of the following for a 205 response: a) indicate a
zero-length body for the response by including a Content-Length header field
with a value of 0; b) indicate a zero-length payload for the response by
including a Transfer-Encoding header field with a value of chunked and a
message body consisting of a single chunk of zero-length; or, c) close the
connection immediately after sending the blank line terminating the header
section. "

It seems the HTTP clients I've identified, do rely on this requirement stated
by RFC. Testing with servers that do add a Content-Length: 0 header or a
Transfer-encoding chunked with a zero-length chunk with a status 205, these
clients behave as expected. Also note, that Tomcat will typically eventually
reach its keep-alive timeout and close the connection. Which is actually a
valid way to end the response, and these clients do accept it when they don't
reach their own timeouts. It's just the response takes by default 20 seconds to
be finished, and is done with closing a perfectly re-usable connection.

Steps to reproduce:

 (1) Have a clean Tomcat install version 8.5.15

 (2) Deploy on it a root webapp that responds to requests with
 HTTP status 205.

 You can use the standalone servlet class I put in attachment.
 As can be seen, it responds to all requests with status 205,
 and it adds a custom header just to be sure the response comes
 from this servlet.

 (3) Make an HTTP request to it with curl.

 Response looks like:

$ curl -v http://localhost:8080
* STATE: INIT => CONNECT handle 0x6000578f0; line 1413 (connection #-5000)
* Rebuilt URL to: http://localhost:8080/
* Added connection 0. The cache now contains 1 members
*   Trying 127.0.0.1...
* TCP_NODELAY set
* STATE: CONNECT => WAITCONNECT handle 0x6000578f0; line 1466 (connection #0)
* Connected to localhost (127.0.0.1) port 8080 (#0)
* STATE: WAITCONNECT => SENDPROTOCONNECT handle 0x6000578f0; line 1583
(connection #0)
* Marked for [keep alive]: HTTP default
* STATE: SENDPROTOCONNECT => DO handle 0x6000578f0; line 1601 (connection #0)
> GET / HTTP/1.1
> Host: localhost:8080
> User-Agent: curl/7.52.1
> Accept: */*
>
* STATE: DO => DO_DONE handle 0x6000578f0; line 1680 (connection #0)
* STATE: DO_DONE => WAITPERFORM handle 0x6000578f0; line 1807 (connection #0)
* STATE: WAITPERFORM => PERFORM handle 0x6000578f0; line 1817 (connection #0)
* HTTP 1.1 or later with persistent connection, pipelining supported
< HTTP/1.1 205
< x-mmar-servletname: return205
< Date: Thu, 11 May 2017 15:43:26 GMT
* no chunk, no close, no size. Assume close to signal end
* Marked for [closure]: HTTP: No end-of-message indicator
<
* STATE: PERFORM => DONE handle 0x6000578f0; line 1981 (connection #0)
* multi_done
* Curl_http_done: called premature == 0
* Closing connection 0
* The cache now contains 0 members

 curl hangs for a while after "Marked for [closure]: HTTP: No
end-of-message indicator".
 Then after 20 seconds Tomcat reaches connection
 keep-alive timeout, closes the connection and curl
 accepts it as a valid way to finish the response.

Proposed (naive) patch:

I have located the cause for this behavior, in class
org.apache.coyote.http11.Http11Processor
in line 1144.
Status 205 is treated the same way as 204 and 304,
that is to say no body as mandated by RFC,
but also no content length information.

The naive patch attached just remove

[Bug 61086] Some clients hang when HTTP responses give status 205 Reset Content

2017-05-11 Thread bugzilla 
https://bz.apache.org/bugzilla/show_bug.cgi?id=61086

--- Comment #1 from Mayeul  ---
Created attachment 34993
  --> https://bz.apache.org/bugzilla/attachment.cgi?id=34993&action=edit
Naive patch to remove 205 from the status without content

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Exception while using JMXProxy in Tomcat 8.5.9

2017-05-11 Thread Ajay Patel 
I am using Tomcat 8.5.9, i am calling below url to get jmx statistics from
Tomcat.

http://10.10.24.10:60080/manager/jmxproxy?qry=*%3Atype%3DDataSource%2C*

It gives me output on browser, but at the same time it also shows traces in
catalina.out log

11-May-2017 14:51:58.935 SEVERE [http-nio-60080-exec-7]
org.apache.catalina.mbeans.MBeanDumper.dumpBeans Error getting
attribute 
Catalina:type=DataSource,host=localhost,context=/,class=javax.sql.DataSource,name="jdbc/mydb",connectionpool=connections,connection=2
Schema
 javax.management.RuntimeErrorException: java.lang.StackOverflowError
at 
com.sun.jmx.interceptor.DefaultMBeanServerInterceptor.rethrow(DefaultMBeanServerInterceptor.java:841)
at 
com.sun.jmx.interceptor.DefaultMBeanServerInterceptor.rethrowMaybeMBeanException(DefaultMBeanServerInterceptor.java:852)
at 
com.sun.jmx.interceptor.DefaultMBeanServerInterceptor.getAttribute(DefaultMBeanServerInterceptor.java:651)
at 
com.sun.jmx.mbeanserver.JmxMBeanServer.getAttribute(JmxMBeanServer.java:678)
at org.apache.catalina.mbeans.MBeanDumper.dumpBeans(MBeanDumper.java:84)
at 
org.apache.catalina.manager.JMXProxyServlet.listBeans(JMXProxyServlet.java:185)
at 
org.apache.catalina.manager.JMXProxyServlet.doGet(JMXProxyServlet.java:121)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:622)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:729)
at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:230)
at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:165)
at 
org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52)
at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:192)
at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:165)
at 
org.apache.catalina.filters.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:108)
at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:192)
at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:165)
at 
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:198)
at 
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:96)
at 
org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:591)
at 
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:140)
at 
org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:624)
at 
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:79)
at 
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:87)
at 
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:349)
at 
org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:783)
at 
org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:66)
at 
org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:789)
at 
org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1437)
at 
org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
at 
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
at 
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
at 
org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
at java.lang.Thread.run(Thread.java:745)Caused by:
java.lang.StackOverflowError
at java.lang.String.valueOf(String.java:2849)
at java.util.Arrays.toString(Arrays.java:3565)
at 
org.apache.tomcat.dbcp.pool2.impl.BaseGenericObjectPool$StatsStore.toString(BaseGenericObjectPool.java:1118)
at java.lang.String.valueOf(String.java:2849)
at java.lang.StringBuilder.append(StringBuilder.java:128)
at 
org.apache.tomcat.dbcp.pool2.impl.BaseGenericObjectPool.toStringAppendFields(BaseGenericObjectPool.java:1288)
at 
org.apache.tomcat.dbcp.pool2.impl.GenericKeyedObjectPool.toStringAppendFields(GenericKeyedObjectPool.java:1589)
at org.apache.tomcat.dbcp.pool2.BaseObject.toString(BaseObject.java:31)
at 
org.apache.tomcat.dbcp.dbcp2.PoolingConnection.toString(PoolingConnection.java:424)
at java.lang.String.valueOf(String.java:2849)
at java.lang.StringBuilder.append(StringBuilder.java:128)
at 
org.apache.tomcat.dbcp.pool2.impl.GenericKeyedObjectPool.toStringAppendFields(GenericKeyedObjectPool.java:1597)
at org.apache.tomcat.dbcp.pool2.BaseObject.toString(BaseObject.java:31)
at 
org.apache.tomcat.db