https://issues.apache.org/bugzilla/show_bug.cgi?id=53376
Mark Thomas changed:
What|Removed |Added
Status|NEW |RESOLVED
Resolution|---
https://issues.apache.org/bugzilla/show_bug.cgi?id=53377
Alex Lee changed:
What|Removed |Added
CC||chinoise...@yahoo.com
--
You are recei
https://issues.apache.org/bugzilla/show_bug.cgi?id=53377
Alex Lee changed:
What|Removed |Added
Summary|Cookie JSESSIONID is not|Cookie JSESSIONID is not
https://issues.apache.org/bugzilla/show_bug.cgi?id=53377
Priority: P2
Bug ID: 53377
Assignee: dev@tomcat.apache.org
Summary: Cookie JSESSIONID is not secured
Severity: major
Classification: Unclassified
OS: Linux
Re
https://issues.apache.org/bugzilla/show_bug.cgi?id=53376
Priority: P2
Bug ID: 53376
Assignee: dev@tomcat.apache.org
Summary: Unable to load class for JSP - tomcat errors
Severity: major
Classification: Unclassified
OS: Linux
https://issues.apache.org/bugzilla/show_bug.cgi?id=53374
Konstantin Kolinko changed:
What|Removed |Added
Attachment #28897|0 |1
is obsolete|
https://issues.apache.org/bugzilla/show_bug.cgi?id=53374
Konstantin Kolinko changed:
What|Removed |Added
Attachment #28898|0 |1
is patch|
https://issues.apache.org/bugzilla/show_bug.cgi?id=53374
--- Comment #3 from Suresh Avadhanula ---
Created attachment 28898
--> https://issues.apache.org/bugzilla/attachment.cgi?id=28898&action=edit
Cleaned up Patch for the fix
Cleaned up the formatting changes. Including only the relevant cha
https://issues.apache.org/bugzilla/show_bug.cgi?id=53374
Konstantin Kolinko changed:
What|Removed |Added
Attachment #28897|0 |1
is patch|
https://issues.apache.org/bugzilla/show_bug.cgi?id=53374
--- Comment #1 from Suresh Avadhanula ---
Created attachment 28897
--> https://issues.apache.org/bugzilla/attachment.cgi?id=28897&action=edit
Patch for the fix.
Attaching the patch for the fix to support commitOnReturn in DataSourceFacto
https://issues.apache.org/bugzilla/show_bug.cgi?id=53374
Priority: P2
Bug ID: 53374
Assignee: dev@tomcat.apache.org
Summary: DataSourceFactory does not support commitOnReturn
property
Severity: normal
Classification: Uncl
Author: schultz
Date: Wed Jun 6 20:50:31 2012
New Revision: 1347113
URL: http://svn.apache.org/viewvc?rev=1347113&view=rev
Log:
Vote
Modified:
tomcat/tc6.0.x/trunk/STATUS.txt
Modified: tomcat/tc6.0.x/trunk/STATUS.txt
URL:
http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/STATUS.txt?rev=134
Author: schultz
Date: Wed Jun 6 20:47:42 2012
New Revision: 1347111
URL: http://svn.apache.org/viewvc?rev=1347111&view=rev
Log:
Backport of r1347108 and 1347109 from trunk: clean-up of test case.
Modified:
tomcat/tc7.0.x/trunk/ (props changed)
tomcat/tc7.0.x/trunk/test/org/apache/nami
Author: kkolinko
Date: Wed Jun 6 20:45:37 2012
New Revision: 1347110
URL: http://svn.apache.org/viewvc?rev=1347110&view=rev
Log:
proposal
Modified:
tomcat/tc6.0.x/trunk/STATUS.txt
Modified: tomcat/tc6.0.x/trunk/STATUS.txt
URL:
http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/STATUS.txt?re
Author: schultz
Date: Wed Jun 6 20:44:00 2012
New Revision: 1347109
URL: http://svn.apache.org/viewvc?rev=1347109&view=rev
Log:
Whitespace and curly-brace police.
Modified:
tomcat/trunk/test/org/apache/naming/resources/TestNamingContext.java
Modified: tomcat/trunk/test/org/apache/naming/res
Author: schultz
Date: Wed Jun 6 20:43:13 2012
New Revision: 1347108
URL: http://svn.apache.org/viewvc?rev=1347108&view=rev
Log:
Simplified test case for BaseDirContext.setAliases
Modified:
tomcat/trunk/test/org/apache/naming/resources/TestNamingContext.java
Modified: tomcat/trunk/test/org/a
2012/6/7 :
> Author: schultz
> Date: Wed Jun 6 20:05:05 2012
> New Revision: 1347087
>
> URL: http://svn.apache.org/viewvc?rev=1347087&view=rev
> Log:
> Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=53373
> Trim whitespace from around aliases delimiters (,=) to improve
> readability of
https://issues.apache.org/bugzilla/show_bug.cgi?id=53373
Christopher Schultz changed:
What|Removed |Added
Status|NEW |RESOLVED
Resolution|
Konstantin,
On 6/6/12 2:45 PM, Konstantin Kolinko wrote:
> # Merging:
>
> 1. Run "update" before merge.
Of course :)
> 2. Invoke merge from the root of the project, so that svn:merge-info
> on the project root directory is updated.
I think this is what I failed to do with the EchoServlet: sinc
Author: kkolinko
Date: Wed Jun 6 20:23:19 2012
New Revision: 1347100
URL: http://svn.apache.org/viewvc?rev=1347100&view=rev
Log:
Merged revision 1346885 from tomcat/trunk:
https://issues.apache.org/bugzilla/show_bug.cgi?id=48097#c7
https://issues.apache.org/bugzilla/show_bug.cgi?id=53366#c1
If _j
Author: schultz
Date: Wed Jun 6 20:17:43 2012
New Revision: 1347095
URL: http://svn.apache.org/viewvc?rev=1347095&view=rev
Log:
Back-port of r1347087 from trunk.
Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=53373
Trim whitespace from around aliases delimiters (,=) to improve
readabili
Author: schultz
Date: Wed Jun 6 20:05:05 2012
New Revision: 1347087
URL: http://svn.apache.org/viewvc?rev=1347087&view=rev
Log:
Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=53373
Trim whitespace from around aliases delimiters (,=) to improve
readability of many aliases.
Modified:
https://issues.apache.org/bugzilla/show_bug.cgi?id=53373
Christopher Schultz changed:
What|Removed |Added
CC||esmond.p...@bigpond.com
--
https://issues.apache.org/bugzilla/show_bug.cgi?id=53359
--- Comment #11 from Christopher Schultz ---
Replacement is bug 53373.
--
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail
https://issues.apache.org/bugzilla/show_bug.cgi?id=53373
Priority: P2
Bug ID: 53373
Assignee: dev@tomcat.apache.org
Summary: Allow whitespace around delimiters in
aliases for readability
Severity: enhancement
Classificat
https://issues.apache.org/bugzilla/show_bug.cgi?id=53359
Christopher Schultz changed:
What|Removed |Added
Status|NEW |RESOLVED
Resolution|
https://issues.apache.org/bugzilla/show_bug.cgi?id=53359
--- Comment #9 from Christopher Schultz ---
Looks like I can't avoid using String.trim() anyway, so I'm just going to use
that instead of modifying the regex.
--
You are receiving this mail because:
You are the assignee for the bug.
https://issues.apache.org/bugzilla/show_bug.cgi?id=53267
--- Comment #9 from Konstantin Kolinko ---
Fixed in 6.0 in r1347072 and will be in 6.0.36.
--
You are receiving this mail because:
You are the assignee for the bug.
-
To
Author: kkolinko
Date: Wed Jun 6 19:40:04 2012
New Revision: 1347072
URL: http://svn.apache.org/viewvc?rev=1347072&view=rev
Log:
Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=53267
Stop the JreMemoryLeakPreventionListener triggering a full GC every hour
Modified:
tomcat/tc6.0.x/trun
https://issues.apache.org/bugzilla/show_bug.cgi?id=53047
--- Comment #9 from Mark Thomas ---
s/No they do./No they don't./
--
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev
https://issues.apache.org/bugzilla/show_bug.cgi?id=53047
--- Comment #8 from Mark Thomas ---
(In reply to comment #7)
> I suggest we define the result of that call as:
> AUTH_ONLY_MODE => true
The use of AUTH_ONLY mode doe snot preclude the user from being assigned a role
and/or the web applica
https://issues.apache.org/bugzilla/show_bug.cgi?id=53368
Mark Thomas changed:
What|Removed |Added
Status|NEW |RESOLVED
Resolution|---
Author: markt
Date: Wed Jun 6 18:47:00 2012
New Revision: 1347048
URL: http://svn.apache.org/viewvc?rev=1347048&view=rev
Log:
Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=53368
Make WebSocket play nicely with a security manager (kkolinko)
Modified:
tomcat/tc7.0.x/trunk/ (props ch
Author: markt
Date: Wed Jun 6 18:45:50 2012
New Revision: 1347047
URL: http://svn.apache.org/viewvc?rev=1347047&view=rev
Log:
Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=53368
Make WebSocket play nicely with a security manager (kkolinko)
Modified:
tomcat/trunk/conf/catalina.policy
2012/6/6 Christopher Schultz :
> Konstantin,
>
> On 6/6/12 8:52 AM, kkoli...@apache.org wrote:
>> Author: kkolinko
>> Date: Wed Jun 6 12:52:20 2012
>> New Revision: 1346864
>>
>> URL: http://svn.apache.org/viewvc?rev=1346864&view=rev
>> Log:
>> Remove svn:merge-info property on EchoMessage.java, t
Author: markt
Date: Wed Jun 6 18:33:35 2012
New Revision: 1347043
URL: http://svn.apache.org/viewvc?rev=1347043&view=rev
Log:
Bugs should be in numerical order (as per the comment at the start of the
changelog).
Modified:
tomcat/tc7.0.x/trunk/webapps/docs/changelog.xml
Modified: tomcat/tc7
Author: markt
Date: Wed Jun 6 18:32:43 2012
New Revision: 1347036
URL: http://svn.apache.org/viewvc?rev=1347036&view=rev
Log:
Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=53366
New http header parser needs to be pre-loaded when running under a security
manager
Modified:
tomcat/tc7
https://issues.apache.org/bugzilla/show_bug.cgi?id=53366
Mark Thomas changed:
What|Removed |Added
Status|NEW |RESOLVED
Resolution|---
Author: markt
Date: Wed Jun 6 18:29:53 2012
New Revision: 1347034
URL: http://svn.apache.org/viewvc?rev=1347034&view=rev
Log:
Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=53366
New http header parser needs to be pre-loaded when running under a security
manager
Modified:
tomcat/tru
https://issues.apache.org/bugzilla/show_bug.cgi?id=53359
--- Comment #8 from Christopher Schultz ---
(In reply to comment #6)
> That is the only place this gets processed but you'll need to do the same
> with the split("=") two lines as well for completeness.
I'm happy to do that, but didn't wan
https://issues.apache.org/bugzilla/show_bug.cgi?id=53359
--- Comment #7 from Konstantin Kolinko ---
I think you should also beware of empty strings (produced by ',,' or by an
extra ',' at the end of values) and ignore them.
--
You are receiving this mail because:
You are the assignee for the bu
https://issues.apache.org/bugzilla/show_bug.cgi?id=53359
--- Comment #6 from Mark Thomas ---
That is the only place this gets processed but you'll need to do the same with
the split("=") two lines as well for completeness.
A test case would be nice too as would an update to the docs on hoe white
https://issues.apache.org/bugzilla/show_bug.cgi?id=53370
Christopher Schultz changed:
What|Removed |Added
Status|NEW |RESOLVED
Resolution|
https://issues.apache.org/bugzilla/show_bug.cgi?id=53281
--- Comment #6 from Christopher Schultz ---
No, I'm not saying that the issue is JSSE (though it may be). What I'm saying
is that responding to an HTTP request over HTTPS is not impossible under all
circumstances: httpd is an example of how
Konstantin,
On 6/6/12 8:52 AM, kkoli...@apache.org wrote:
> Author: kkolinko
> Date: Wed Jun 6 12:52:20 2012
> New Revision: 1346864
>
> URL: http://svn.apache.org/viewvc?rev=1346864&view=rev
> Log:
> Remove svn:merge-info property on EchoMessage.java, that was added in r1346684
>
> Note: Merge
https://issues.apache.org/bugzilla/show_bug.cgi?id=53359
--- Comment #5 from Christopher Schultz ---
I'm prepared to make this fix, but I want to be sure I can do it all in one
place. Mark, could you comment?
It looks like BaseDirContext.java:237 could just change from
String[] kvps = t
The Buildbot has detected a restored build on builder tomcat-7-trunk while
building ASF Buildbot.
Full details are available at:
http://ci.apache.org/builders/tomcat-7-trunk/builds/636
Buildbot URL: http://ci.apache.org/
Buildslave for this Build: bb-vm_ubuntu
Build Reason: scheduler
Build Sou
2012/6/6 Christopher Schultz :
> All,
>
> I just made an update to the Tomcat site project and was trying to
> publish it live following the instructions in README.txt. As such, I
> ssh'd to people.apache.org, cd /www/tomcat.apache.org and tried to do an
> 'svn up'. I got an invalid certificate err
The Buildbot has detected a restored build on builder tomcat-trunk while
building ASF Buildbot.
Full details are available at:
http://ci.apache.org/builders/tomcat-trunk/builds/3048
Buildbot URL: http://ci.apache.org/
Buildslave for this Build: bb-vm_ubuntu
Build Reason: scheduler
Build Source
Author: markt
Date: Wed Jun 6 15:31:14 2012
New Revision: 1346947
URL: http://svn.apache.org/viewvc?rev=1346947&view=rev
Log:
Fix (hopefully) persistent failure of Comet unit test for connector stop when
the END event is not received
Modified:
tomcat/tc7.0.x/trunk/ (props changed)
tom
On 06/06/2012 00:58, Mark Thomas wrote:
> On 05/06/2012 22:37, build...@apache.org wrote:
>> The Buildbot has detected a new failure on builder tomcat-trunk while
>> building ASF Buildbot.
>> Full details are available at:
>> http://ci.apache.org/builders/tomcat-trunk/builds/3039
>>
>> Buildbot U
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 06/06/2012 15:20, Christopher Schultz wrote:
> All,
>
> I just made an update to the Tomcat site project and was trying to
> publish it live following the instructions in README.txt. As such,
> I ssh'd to people.apache.org, cd /www/tomcat.apache.o
https://issues.apache.org/bugzilla/show_bug.cgi?id=53370
--- Comment #2 from Mark Thomas ---
The dates from my personal mail archive are:
- date notified 5th March 2009
- date CVE requested 6th March 2009
- date CVE assigned 6th Match 2009
- date published 6th March 2009
--
You are re
Author: markt
Date: Wed Jun 6 15:10:59 2012
New Revision: 1346932
URL: http://svn.apache.org/viewvc?rev=1346932&view=rev
Log:
Fix (hopefully) persistent failure of Comet unit test for connector stop when
the END event is not received
Modified:
tomcat/trunk/java/org/apache/tomcat/util/net/Ni
All,
I just made an update to the Tomcat site project and was trying to
publish it live following the instructions in README.txt. As such, I
ssh'd to people.apache.org, cd /www/tomcat.apache.org and tried to do an
'svn up'. I got an invalid certificate error from svn.apache.org:
schultz@minotaur
Author: schultz
Date: Wed Jun 6 14:17:47 2012
New Revision: 1346904
URL: http://svn.apache.org/viewvc?rev=1346904&view=rev
Log:
Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=53370
Update publication date for CVE-2009-0781.
Modified:
tomcat/site/trunk/docs/security-5.html
tomcat/
https://issues.apache.org/bugzilla/show_bug.cgi?id=53370
--- Comment #1 from Christopher Schultz ---
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0781 says CVS was
assigned 2009-03-04.
http://www.securityfocus.com/archive/1/501538/100/0/threaded is markt's post
from 2009-03-06
http://
https://issues.apache.org/bugzilla/show_bug.cgi?id=53366
--- Comment #2 from Konstantin Kolinko ---
I improved logging in r1346885
Stacktrace:
[[[
06-Jun-2012 17:28:01.640 SEVERE [http-bio-8080-exec-1]
org.apache.catalina.core.ApplicationContext.log jsp: access denied
(java.lang.RuntimePermissio
https://issues.apache.org/bugzilla/show_bug.cgi?id=53281
--- Comment #5 from saurabh ---
@Christopher Schultz - So if I understand you correctly, the issues lies with
JSSE and not Tomcat, may I right? And that, there is no way we can change the
behavior using Tomcat Configuration ?
--
You are
Author: kkolinko
Date: Wed Jun 6 13:34:54 2012
New Revision: 1346885
URL: http://svn.apache.org/viewvc?rev=1346885&view=rev
Log:
https://issues.apache.org/bugzilla/show_bug.cgi?id=48097#c7
https://issues.apache.org/bugzilla/show_bug.cgi?id=53366#c1
If _jspService() cannot properly handle an excep
https://issues.apache.org/bugzilla/show_bug.cgi?id=53281
--- Comment #4 from Christopher Schultz ---
My question isn't whether Tomcat can be configured to do that (it cannot
currently do it), but if JSSE will even allow that handling to occur. If JSSE
can't do it, Tomcat certainly can't do it usi
Author: kkolinko
Date: Wed Jun 6 12:52:20 2012
New Revision: 1346864
URL: http://svn.apache.org/viewvc?rev=1346864&view=rev
Log:
Remove svn:merge-info property on EchoMessage.java, that was added in r1346684
Note: Merges should be started from project root - tc7.0.x/trunk, and project
root has
Author: kkolinko
Date: Wed Jun 6 12:35:27 2012
New Revision: 1346851
URL: http://svn.apache.org/viewvc?rev=1346851&view=rev
Log:
Re-merge r1346683, r1346794
This only updates svn:merge-info, marking those revisions as merged.
Modified:
tomcat/tc7.0.x/trunk/ (props changed)
Propchange: tom
Author: kkolinko
Date: Wed Jun 6 12:27:01 2012
New Revision: 1346847
URL: http://svn.apache.org/viewvc?rev=1346847&view=rev
Log:
Merged revision r1346404 from tomcat/trunk:
Add a test for CharChunk.indexOf().
Added:
tomcat/tc7.0.x/trunk/test/org/apache/tomcat/util/buf/TestCharChunk.java
Author: kkolinko
Date: Wed Jun 6 12:18:15 2012
New Revision: 1346845
URL: http://svn.apache.org/viewvc?rev=1346845&view=rev
Log:
Remove trailing whitespace, as nagged by Checkstyle.
Modified:
tomcat/trunk/java/org/apache/catalina/session/TooManyActiveSessionsException.java
Modified:
tomca
Author: kkolinko
Date: Wed Jun 6 12:13:41 2012
New Revision: 1346844
URL: http://svn.apache.org/viewvc?rev=1346844&view=rev
Log:
votes
Modified:
tomcat/tc6.0.x/trunk/STATUS.txt
Modified: tomcat/tc6.0.x/trunk/STATUS.txt
URL:
http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/STATUS.txt?rev=1
[
https://issues.apache.org/jira/browse/MTOMCAT-158?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13290042#comment-13290042
]
Olivier Lamy (*$^¨%`£) commented on MTOMCAT-158:
So applying and quickly
Author: kfujino
Date: Wed Jun 6 09:08:36 2012
New Revision: 1346795
URL: http://svn.apache.org/viewvc?rev=1346795&view=rev
Log:
Add support for SecureRandom to cluster manager template.
Modified:
tomcat/tc7.0.x/trunk/java/org/apache/catalina/ha/session/ClusterManagerBase.java
tomcat/tc
https://issues.apache.org/bugzilla/show_bug.cgi?id=47612
Zbigniew changed:
What|Removed |Added
CC||lis...@wp.pl
--
You are receiving this
Author: kfujino
Date: Wed Jun 6 09:06:36 2012
New Revision: 1346794
URL: http://svn.apache.org/viewvc?rev=1346794&view=rev
Log:
Add support for SecureRandom to cluster manager template.
Modified:
tomcat/trunk/java/org/apache/catalina/ha/session/ClusterManagerBase.java
tomcat/trunk/java/o
70 matches
Mail list logo
