Re: AJP and PHP

2008-08-13 Thread Quintin Beukes
Hey, I once looked for an AJP implementation for Java, and what I found was that there is only one implementation, and that is for Apache. >From here, it's not a very complex protocol. It's basically a "compressed" http implementation. The concepts are very similar, with GET/POST requests, Header

Re: AJP and PHP

2008-08-13 Thread John G
Why scary,  all I am trying to acheive is persistant connections to a servlet from PHP..   The same interface is used from Apache to a servlet, both in mod_jk and mod_proxy_ajp. It seems less clumsy and more efficient than implementing a curl call and this same persistant interface could also

AJP and PHP

2008-08-13 Thread John G
I have a project where our presentation layer is in PHP and the business logic is Servlet based.. The interface is JSON via a CURL call..   I was thinking that I could gain some efficiencies if I created a native AJP implementation as a PHP PECL module using memcache and mod_jk as templates and

5.5.27

2008-08-13 Thread Filip Hanik - Dev Lists
How about cutting a release candidate on Monday, Aug 18th and if all is well, have a release towards end of next week? Filip - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

svn commit: r685761 - /tomcat/tc6.0.x/trunk/STATUS.txt

2008-08-13 Thread fhanik
Author: fhanik Date: Wed Aug 13 21:25:14 2008 New Revision: 685761 URL: http://svn.apache.org/viewvc?rev=685761&view=rev Log: vote Modified: tomcat/tc6.0.x/trunk/STATUS.txt Modified: tomcat/tc6.0.x/trunk/STATUS.txt URL: http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/STATUS.txt?rev=685761

Re: svn commit: r684559 - /tomcat/trunk/java/org/apache/tomcat/util/net/jsse/JSSESocketFactory.java

2008-08-13 Thread Filip Hanik - Dev Lists
the check would be as simple as boolean b = keystore.isKeyEntry(alias); Filip Filip Hanik - Dev Lists wrote: -1: this is a misconfigured keystore. Solution is to fix the keystore. The SSL-HOW-TO in tomcat is talking about this. There are a few cases, in this users case, the 'tomcat

Re: svn commit: r684559 - /tomcat/trunk/java/org/apache/tomcat/util/net/jsse/JSSESocketFactory.java

2008-08-13 Thread Filip Hanik - Dev Lists
-1: this is a misconfigured keystore. Solution is to fix the keystore. The SSL-HOW-TO in tomcat is talking about this. There are a few cases, in this users case, the 'tomcat' alias is not present The keystore in this case doesn't even contain a private key The bug report is inval

svn commit: r685758 - /tomcat/current/tc5.5.x/STATUS.txt

2008-08-13 Thread fhanik
Author: fhanik Date: Wed Aug 13 21:18:18 2008 New Revision: 685758 URL: http://svn.apache.org/viewvc?rev=685758&view=rev Log: votes Modified: tomcat/current/tc5.5.x/STATUS.txt Modified: tomcat/current/tc5.5.x/STATUS.txt URL: http://svn.apache.org/viewvc/tomcat/current/tc5.5.x/STATUS.txt?rev

Re: Exploiting Tomcat

2008-08-13 Thread Jim Manico
I can feel the love. Thanks for your constructive comment, William. - Jim Jim Manico wrote: This is a worthwhile post to read regarding path traversal attacks against tomcat. http://www.0x00.com/?i=630 Worthwhile? To note the community frustration against Tomcat parsers? Must be what y

svn commit: r685757 - in /tomcat: container/tc5.5.x/catalina/src/share/org/apache/catalina/startup/ container/tc5.5.x/webapps/docs/ container/tc5.5.x/webapps/manager/WEB-INF/classes/org/apache/catalin

2008-08-13 Thread fhanik
Author: fhanik Date: Wed Aug 13 20:10:28 2008 New Revision: 685757 URL: http://svn.apache.org/viewvc?rev=685757&view=rev Log: apply patches Modified: tomcat/container/tc5.5.x/catalina/src/share/org/apache/catalina/startup/ContextConfig.java tomcat/container/tc5.5.x/catalina/src/share/or

svn commit: r685756 - /tomcat/current/tc5.5.x/STATUS.txt

2008-08-13 Thread fhanik
Author: fhanik Date: Wed Aug 13 20:08:48 2008 New Revision: 685756 URL: http://svn.apache.org/viewvc?rev=685756&view=rev Log: votes Modified: tomcat/current/tc5.5.x/STATUS.txt Modified: tomcat/current/tc5.5.x/STATUS.txt URL: http://svn.apache.org/viewvc/tomcat/current/tc5.5.x/STATUS.txt?rev

svn commit: r685752 - in /tomcat: connectors/trunk/util/java/org/apache/tomcat/util/buf/ container/tc5.5.x/catalina/src/share/org/apache/catalina/connector/ container/tc5.5.x/webapps/docs/ current/tc5

2008-08-13 Thread fhanik
Author: fhanik Date: Wed Aug 13 19:54:59 2008 New Revision: 685752 URL: http://svn.apache.org/viewvc?rev=685752&view=rev Log: fix 44494 Modified: tomcat/connectors/trunk/util/java/org/apache/tomcat/util/buf/B2CConverter.java tomcat/connectors/trunk/util/java/org/apache/tomcat/util/buf/Ch

svn commit: r685751 - /tomcat/current/tc5.5.x/STATUS.txt

2008-08-13 Thread fhanik
Author: fhanik Date: Wed Aug 13 19:53:41 2008 New Revision: 685751 URL: http://svn.apache.org/viewvc?rev=685751&view=rev Log: vote Modified: tomcat/current/tc5.5.x/STATUS.txt Modified: tomcat/current/tc5.5.x/STATUS.txt URL: http://svn.apache.org/viewvc/tomcat/current/tc5.5.x/STATUS.txt?rev=

Re: Exploiting Tomcat

2008-08-13 Thread William A. Rowe, Jr.
Jim Manico wrote: This is a worthwhile post to read regarding path traversal attacks against tomcat. http://www.0x00.com/?i=630 Worthwhile? To note the community frustration against Tomcat parsers? Must be what you meant since the author adds nothing. New information is always welcome.

DO NOT REPLY [Bug 45618] Selector is not closed.

2008-08-13 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=45618 --- Comment #2 from Hao Zhong <[EMAIL PROTECTED]> 2008-08-13 18:17:39 PST --- (In reply to comment #1) > Have you observed a memory leak associated with these objects? If so, in what > circumstances? Actually, I am a PhD student in Com

Exploiting Tomcat

2008-08-13 Thread Jim Manico
This is a worthwhile post to read regarding path traversal attacks against tomcat. http://www.0x00.com/?i=630 -- Jim Manico, Senior Application Security Engineer [EMAIL PROTECTED] | [EMAIL PROTECTED] (301) 604-4882 (work) (808) 652-3805 (cell) Aspect Security™ Securing your applications at

svn commit: r685720 - in /tomcat/tc6.0.x/trunk: ./ STATUS.txt java/org/apache/catalina/realm/JAASCallbackHandler.java java/org/apache/catalina/realm/JAASMemoryLoginModule.java java/org/apache/catalina

2008-08-13 Thread markt
Author: markt Date: Wed Aug 13 15:50:40 2008 New Revision: 685720 URL: http://svn.apache.org/viewvc?rev=685720&view=rev Log: Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=45576 Add support for DIGEST to the JAASRealm Modified: tomcat/tc6.0.x/trunk/ (props changed) tomcat/tc6.0.

DO NOT REPLY [Bug 45576] JAASRealm not working with DigestAuthenticator

2008-08-13 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=45576 Mark Thomas <[EMAIL PROTECTED]> changed: What|Removed |Added Component|Catalina|Catalina

DO NOT REPLY [Bug 45585] Tomcat doesn't start when JULI is not used (NoClassDefFoundError)

2008-08-13 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=45585 Mark Thomas <[EMAIL PROTECTED]> changed: What|Removed |Added Status|NEW |RESOLVED

svn commit: r685718 - in /tomcat/tc6.0.x/trunk: ./ STATUS.txt java/org/apache/catalina/realm/JAASMemoryLoginModule.java webapps/docs/changelog.xml

2008-08-13 Thread markt
Author: markt Date: Wed Aug 13 15:47:09 2008 New Revision: 685718 URL: http://svn.apache.org/viewvc?rev=685718&view=rev Log: JAASMemoryLoginModule didn't conform to JAASRealm contract. This prevented any user from being assigned a role. Modified: tomcat/tc6.0.x/trunk/ (props changed) t

DO NOT REPLY [Bug 42565] jsp /expression language ternary expression without space before colon stopped working

2008-08-13 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=42565 Bug 42565 depends on bug 45511, which changed state. Bug 45511 Summary: EL "empty" keyword does not work https://issues.apache.org/bugzilla/show_bug.cgi?id=45511 What|Old Value |New Value -

DO NOT REPLY [Bug 45511] EL "empty" keyword does not work

2008-08-13 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=45511 Mark Thomas <[EMAIL PROTECTED]> changed: What|Removed |Added Status|NEW |RESOLVED

svn commit: r685715 - in /tomcat/tc6.0.x/trunk: ./ STATUS.txt bin/catalina.sh webapps/docs/changelog.xml

2008-08-13 Thread markt
Author: markt Date: Wed Aug 13 15:40:06 2008 New Revision: 685715 URL: http://svn.apache.org/viewvc?rev=685715&view=rev Log: Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=45585 Tomcat failed to start if using $CATALINA_BASE but not JULI. Patch based on a suggestion by Ian Ward Comfort M

DO NOT REPLY [Bug 45591] NullPointerException during shutdown in JKMain.pause()

2008-08-13 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=45591 --- Comment #3 from Mark Thomas <[EMAIL PROTECTED]> 2008-08-13 15:35:47 PST --- This has been fixed in 6.0.x and will be included in 6.0.19 onwards. -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email ---

svn commit: r685712 - in /tomcat/tc6.0.x/trunk: ./ STATUS.txt java/org/apache/jk/server/JkMain.java webapps/docs/changelog.xml

2008-08-13 Thread markt
Author: markt Date: Wed Aug 13 15:35:33 2008 New Revision: 685712 URL: http://svn.apache.org/viewvc?rev=685712&view=rev Log: Fix 45591. NPE on start-up failure in some cases. Based on a patch by Matt Passell Modified: tomcat/tc6.0.x/trunk/ (props changed) tomcat/tc6.0.x/trunk/STATUS.tx

svn commit: r685709 - in /tomcat/tc6.0.x/trunk: STATUS.txt webapps/docs/changelog.xml

2008-08-13 Thread markt
Author: markt Date: Wed Aug 13 15:27:06 2008 New Revision: 685709 URL: http://svn.apache.org/viewvc?rev=685709&view=rev Log: Document the new fix for 42565 Modified: tomcat/tc6.0.x/trunk/STATUS.txt tomcat/tc6.0.x/trunk/webapps/docs/changelog.xml Modified: tomcat/tc6.0.x/trunk/STATUS.txt

svn commit: r685708 - in /tomcat/tc6.0.x/trunk/java/org/apache/el/parser: ELParser.java ELParserConstants.java ELParserTokenManager.java

2008-08-13 Thread markt
Author: markt Date: Wed Aug 13 15:26:12 2008 New Revision: 685708 URL: http://svn.apache.org/viewvc?rev=685708&view=rev Log: Complete the new fix for 42565 by updated the auto-generated code. Modified: tomcat/tc6.0.x/trunk/java/org/apache/el/parser/ELParser.java tomcat/tc6.0.x/trunk/java/

svn commit: r685701 - /tomcat/tc6.0.x/trunk/java/org/apache/el/parser/ELParser.jjt

2008-08-13 Thread markt
Author: markt Date: Wed Aug 13 15:14:33 2008 New Revision: 685701 URL: http://svn.apache.org/viewvc?rev=685701&view=rev Log: Better fix for https://issues.apache.org/bugzilla/show_bug.cgi?id=42565 Modified: tomcat/tc6.0.x/trunk/java/org/apache/el/parser/ELParser.jjt Modified: tomcat/tc6.0.x/

svn commit: r685699 - /tomcat/tc6.0.x/trunk/java/org/apache/el/parser/ELParser.jjt

2008-08-13 Thread markt
Author: markt Date: Wed Aug 13 15:12:05 2008 New Revision: 685699 URL: http://svn.apache.org/viewvc?rev=685699&view=rev Log: Revert fix for https://issues.apache.org/bugzilla/show_bug.cgi?id=42565 since it caused https://issues.apache.org/bugzilla/show_bug.cgi?id=45511 A better fix for 42565 will

DO NOT REPLY [Bug 45453] JDBCRealm.getRoles bad synchronization causes hangs w/ DIGEST authentication

2008-08-13 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=45453 Mark Thomas <[EMAIL PROTECTED]> changed: What|Removed |Added Component|Catalina|Catalina

svn commit: r685696 - in /tomcat/tc6.0.x/trunk: STATUS.txt java/org/apache/catalina/realm/JDBCRealm.java webapps/docs/changelog.xml

2008-08-13 Thread markt
Author: markt Date: Wed Aug 13 15:04:52 2008 New Revision: 685696 URL: http://svn.apache.org/viewvc?rev=685696&view=rev Log: Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=45453 Additional syncs required. Based on a patch provided by Santtu Hyrkk. Modified: tomcat/tc6.0.x/trunk/STATUS

DO NOT REPLY [Bug 45628] ExtensionValidator doesn't handle wrapped lines in MANIFEST.MF

2008-08-13 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=45628 Larry Hartsook <[EMAIL PROTECTED]> changed: What|Removed |Added CC||[EMAIL PROTECT

DO NOT REPLY [Bug 45628] New: ExtensionValidator doesn't handle wrapped lines in MANIFEST.MF

2008-08-13 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=45628 Summary: ExtensionValidator doesn't handle wrapped lines in MANIFEST.MF Product: Tomcat 5 Version: 5.5.26 Platform: PC OS/Version: Windows XP Status: NEW

Re: Default error page generation logic in tomcat

2008-08-13 Thread Raghavendra Datt
sorry... wasn't sure whether the quesiton was related to development side or users side. Sorry for the inconvenience. On Wed, Aug 13, 2008 at 11:56 AM, Mark Thomas <[EMAIL PROTECTED]> wrote: > Raghavendra Datt wrote: > >> Hi Guys, >> I had a specific requirement related to tomcat error generatio

Re: Default error page generation logic in tomcat

2008-08-13 Thread Mark Thomas
Raghavendra Datt wrote: Hi Guys, I had a specific requirement related to tomcat error generation. When a default error page is generated like 404 error page, tomcat appends its version info at the bottom of the page. I don't want this version to be displayed on the error page. I am trying to un

Default error page generation logic in tomcat

2008-08-13 Thread Raghavendra Datt
Hi Guys, I had a specific requirement related to tomcat error generation. When a default error page is generated like 404 error page, tomcat appends its version info at the bottom of the page. I don't want this version to be displayed on the error page. I am trying to understand which part of the

svn commit: r685551 - /tomcat/tc6.0.x/trunk/STATUS.txt

2008-08-13 Thread markt
Author: markt Date: Wed Aug 13 06:51:28 2008 New Revision: 685551 URL: http://svn.apache.org/viewvc?rev=685551&view=rev Log: Put the right link in. Modified: tomcat/tc6.0.x/trunk/STATUS.txt Modified: tomcat/tc6.0.x/trunk/STATUS.txt URL: http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/STAT

svn commit: r685535 - /tomcat/tc6.0.x/trunk/STATUS.txt

2008-08-13 Thread funkman
Author: funkman Date: Wed Aug 13 06:22:14 2008 New Revision: 685535 URL: http://svn.apache.org/viewvc?rev=685535&view=rev Log: some votes Modified: tomcat/tc6.0.x/trunk/STATUS.txt Modified: tomcat/tc6.0.x/trunk/STATUS.txt URL: http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/STATUS.txt?rev

svn commit: r685530 - /tomcat/trunk/java/org/apache/catalina/core/StandardHost.java

2008-08-13 Thread funkman
Author: funkman Date: Wed Aug 13 05:58:47 2008 New Revision: 685530 URL: http://svn.apache.org/viewvc?rev=685530&view=rev Log: Let the user know why errorReportValveClass was not loaded. Since it could be ClassNotFound, invalid class version, (or other) Modified: tomcat/trunk/java/org/apache

DO NOT REPLY [Bug 45624] javax.servlet.ServletException exception

2008-08-13 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=45624 Mark Thomas <[EMAIL PROTECTED]> changed: What|Removed |Added Status|NEW |RESOLVED