svn commit: r1586227 - /tomcat/native/branches/1.1.x/xdocs/miscellaneous/changelog.xml

Author: mturk Date: Thu Apr 10 06:55:27 2014 New Revision: 1586227 URL: http://svn.apache.org/r1586227 Log: Resolve 56363 bug Modified: tomcat/native/branches/1.1.x/xdocs/miscellaneous/changelog.xml Modified: tomcat/native/branches/1.1.x/xdocs/miscellaneous/changelog.xml URL: http://svn.apa

[Bug 56363] OpenSSL security advisory - Heartbleed bug

https://issues.apache.org/bugzilla/show_bug.cgi?id=56363 Jani Similä changed: What|Removed |Added CC||jani.sim...@gmail.com -- You are re

[Bug 56363] OpenSSL security advisory - Heartbleed bug

https://issues.apache.org/bugzilla/show_bug.cgi?id=56363 Tomi Korkalainen changed: What|Removed |Added CC||tomi.korkalai...@gmail.com --

svn commit: r1586221 - /tomcat/native/branches/1.1.x/native/include/ssl_private.h

Author: mturk Date: Thu Apr 10 05:44:09 2014 New Revision: 1586221 URL: http://svn.apache.org/r1586221 Log: Revert NO_SSL_INTERN define. We need direct struct access for sslinfo Modified: tomcat/native/branches/1.1.x/native/include/ssl_private.h Modified: tomcat/native/branches/1.1.x/native/

Tagging Tomcat Native 1.1.30

I plan to tag 1.1.30 either later today or tomorrow and push for a quick release vote. Comments? Regards -- ^TM - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache

buildbot success in ASF Buildbot on tomcat-trunk

The Buildbot has detected a restored build on builder tomcat-trunk while building ASF Buildbot. Full details are available at: http://ci.apache.org/builders/tomcat-trunk/builds/5668 Buildbot URL: http://ci.apache.org/ Buildslave for this Build: bb-vm_ubuntu Build Reason: scheduler Build Source

[Bug 55943] Provide a way prevent looking at the System classloader before the webapp classloaders

https://issues.apache.org/bugzilla/show_bug.cgi?id=55943 --- Comment #11 from hifisoftw...@gmail.com --- Thank Mark for the link. I have trouble understanding how to configure to follow the old behaviour. Are you suggesting to override the WebappClassLoader class? -- You are receiving this mail

buildbot failure in ASF Buildbot on tomcat-trunk

The Buildbot has detected a new failure on builder tomcat-trunk while building ASF Buildbot. Full details are available at: http://ci.apache.org/builders/tomcat-trunk/builds/5667 Buildbot URL: http://ci.apache.org/ Buildslave for this Build: bb-vm_ubuntu Build Reason: scheduler Build Source St

svn commit: r1586177 - in /tomcat/trunk: java/org/apache/coyote/http11/upgrade/AbstractServletOutputStream.java java/org/apache/coyote/http11/upgrade/Nio2ServletOutputStream.java test/org/apache/tomca

Author: remm Date: Wed Apr 9 23:57:09 2014 New Revision: 1586177 URL: http://svn.apache.org/r1586177 Log: Does not fix the testsuite run, so revert. Modified: tomcat/trunk/java/org/apache/coyote/http11/upgrade/AbstractServletOutputStream.java tomcat/trunk/java/org/apache/coyote/http11/

[Bug 56363] OpenSSL security advisory - Heartbleed bug

https://issues.apache.org/bugzilla/show_bug.cgi?id=56363 Keith Davis changed: What|Removed |Added CC||keithdavis@solidtechservice

[Bug 56363] OpenSSL security advisory - Heartbleed bug

https://issues.apache.org/bugzilla/show_bug.cgi?id=56363 Klemen Novak changed: What|Removed |Added CC||klemen.no...@mikrocop.com -- You a

svn commit: r1586150 - in /tomcat/trunk: java/org/apache/coyote/http11/ java/org/apache/coyote/http11/upgrade/ test/org/apache/tomcat/websocket/

Author: remm Date: Wed Apr 9 21:21:16 2014 New Revision: 1586150 URL: http://svn.apache.org/r1586150 Log: - Add possibly missing notification. - Try again the SSL websocket test, will revert the commit if not fixed. Modified: tomcat/trunk/java/org/apache/coyote/http11/InternalNio2InputBuffer

Re: Tagging JK 1.2.40

On 04/09/2014 07:38 PM, Rainer Jung wrote: On 08.04.2014 09:56, Mladen Turk wrote: Hi, I plan to tag JK 1.2.40 pretty soon (probably end of this week) We have few bugs in the latest release which requires a new version. I'm all for it, to many bugs which might affect many users. Just now fixe

svn propchange: r1586044 - svn:log

Author: rjung Revision: 1586044 Modified property: svn:log Modified: svn:log at Wed Apr 9 17:39:54 2014 -- --- svn:log (original) +++ svn:log Wed Apr 9 17:39:54 2014 @@ -1,4 +1,4 @@ Fix forwarding of chunked requests, w

Re: Tagging JK 1.2.40

On 08.04.2014 09:56, Mladen Turk wrote: > Hi, > > I plan to tag JK 1.2.40 pretty soon (probably end of this week) > We have few bugs in the latest release which requires a new version. I'm all for it, to many bugs which might affect many users. Just now fixed another one (chunked requests broken)

Re: ErrorValve enhancement

Hi for this kind of reason we included in tomee http://svn.apache.org/repos/asf/tomee/tomee/trunk/tomee/tomee-catalina/src/main/java/org/apache/tomee/catalina/valve/MinimumErrorReportValve.java would be great to get it in tomcat OOTB. Romain Manni-Bucau Twitter: @rmannibucau Blog: http://rmannib

svn commit: r1586044 - in /tomcat/jk/trunk: native/common/jk_ajp_common.c xdocs/miscellaneous/changelog.xml

Author: rjung Date: Wed Apr 9 17:26:13 2014 New Revision: 1586044 URL: http://svn.apache.org/r1586044 Log: Fix forwarding of chunked requests, which is broken in version 1.2.37. Bug was introduced by refactoring in r1555413. Modified: tomcat/jk/trunk/native/common/jk_ajp_common.c tomcat

ErrorValve enhancement

Good Day, As i'm sure you are all aware when the default error valve returns its report it publishes the tomcat version and some other troubleshooting data. This of course breaks one of my securities teams rules and also is published as a item that needs to be remediated when hardening tomcat(OWASP

[jira] [Commented] (MTOMCAT-266) The attribute crashes Tomcat on startup

[ https://issues.apache.org/jira/browse/MTOMCAT-266?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13964332#comment-13964332 ] M. R. commented on MTOMCAT-266: --- I'm using 3.2.1. Do you have a suggestion about which vers

[Bug 56378] Cert load fails if cert is located in path with non-ASCII characters

https://issues.apache.org/bugzilla/show_bug.cgi?id=56378 Mladen Turk changed: What|Removed |Added OS||All --- Comment #1 from Mladen Turk

[Bug 56283] Add support for Java 8 to Jasper

https://issues.apache.org/bugzilla/show_bug.cgi?id=56283 --- Comment #4 from Mark Thomas --- Patch applied to 6.0.x for 6.0.40 onwards. -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe

svn commit: r1585997 - in /tomcat/tc6.0.x/trunk: STATUS.txt java/org/apache/catalina/startup/TldConfig.java java/org/apache/jasper/compiler/JDTCompiler.java java/org/apache/jasper/compiler/TldLocation

Author: markt Date: Wed Apr 9 15:41:28 2014 New Revision: 1585997 URL: http://svn.apache.org/r1585997 Log: Fix http://issues.apache.org/bugzilla/show_bug.cgi?id=56283 Add support for running Tomcat 6 with ecj-P20140317-1600.jar (as drop-in replacement for ecj-4.3.1.jar). Add support for value "1

[Bug 56378] New: Cert load fails if cert is located in path with non-ASCII characters

https://issues.apache.org/bugzilla/show_bug.cgi?id=56378 Bug ID: 56378 Summary: Cert load fails if cert is located in path with non-ASCII characters Product: Tomcat Native Version: 1.1.29 Hardware: PC Status: NE

[Bug 46179] apr ssl client authentication

https://issues.apache.org/bugzilla/show_bug.cgi?id=46179 Mark Thomas changed: What|Removed |Added Status|REOPENED|RESOLVED Resolution|---

[Bug 56374] Page in wrong language - getting lower rank Accept-Language in request header

https://issues.apache.org/bugzilla/show_bug.cgi?id=56374 Steve Root changed: What|Removed |Added Status|NEW |RESOLVED Resolution|---

svn commit: r1585966 - /tomcat/native/branches/1.1.x/xdocs/miscellaneous/changelog.xml

Author: mturk Date: Wed Apr 9 13:38:42 2014 New Revision: 1585966 URL: http://svn.apache.org/r1585966 Log: Change patch author Modified: tomcat/native/branches/1.1.x/xdocs/miscellaneous/changelog.xml Modified: tomcat/native/branches/1.1.x/xdocs/miscellaneous/changelog.xml URL: http://svn.a

Re: svn commit: r1585898 - in /tomcat/native/branches/1.1.x: native/src/sslcontext.c xdocs/miscellaneous/changelog.xml

On 9.4.2014 9:32, mt...@apache.org wrote: Log: Apply Ognjen's patch for bz55915 For the record, I am an issue reporter, but patch was provided by Mike Noordermeer. -Ognjen - To unsubscribe, e-mail: dev-unsubscr...@tomcat.a

Re: JDK 9 build 06 is available on java.net

https://bugs.openjdk.java.net/browse/JDK-8039751 Dalibor has written a blog on how to track your issues in the JDK bug system. I hope this helps. Rgds,Rory On 04/ 9/14 01:25 PM, Mark Thomas wrote: On 09/04/2014 05:59, Mark Thomas wrote: On 09/04/

svn commit: r1585960 - /tomcat/tc6.0.x/trunk/STATUS.txt

Author: kkolinko Date: Wed Apr 9 13:02:45 2014 New Revision: 1585960 URL: http://svn.apache.org/r1585960 Log: vote Modified: tomcat/tc6.0.x/trunk/STATUS.txt Modified: tomcat/tc6.0.x/trunk/STATUS.txt URL: http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/STATUS.txt?rev=1585960&r1=1585959&r2

svn commit: r1585957 - /tomcat/native/branches/1.1.x/native/src/sslcontext.c

Author: mturk Date: Wed Apr 9 12:54:25 2014 New Revision: 1585957 URL: http://svn.apache.org/r1585957 Log: Ensure we have the needed ECDH with the OpenSSL used Modified: tomcat/native/branches/1.1.x/native/src/sslcontext.c Modified: tomcat/native/branches/1.1.x/native/src/sslcontext.c URL:

Re: svn commit: r1585898 - in /tomcat/native/branches/1.1.x: native/src/sslcontext.c xdocs/miscellaneous/changelog.xml

On 04/09/2014 02:03 PM, Konstantin Kolinko wrote: 2014-04-09 11:32 GMT+04:00 : Author: mturk Date: Wed Apr 9 07:32:29 2014 New Revision: 1585898 URL: http://svn.apache.org/r1585898 Log: Apply Ognjen's patch for bz55915 Modified: tomcat/native/branches/1.1.x/native/src/sslcontext.c

[Bug 56374] Page in wrong language - getting lower rank Accept-Language in request header

https://issues.apache.org/bugzilla/show_bug.cgi?id=56374 --- Comment #7 from Steve Root --- Good question; On Debian 7 (wheezy) I used: # apt-get install tomcat7 tomcat7-admin and I got Apache Tomcat/7.0.28 I'll go create a new server and try it on 7.0.53 and report back. Thanks -- You are rec

[Bug 56372] Which API is referenced in comment above public Iterator getFeatureDescriptors in javax.el.ResourceBundleELResolver

https://issues.apache.org/bugzilla/show_bug.cgi?id=56372 Mark Thomas changed: What|Removed |Added Status|NEW |RESOLVED Resolution|---

Re: JDK 9 build 06 is available on java.net

On 09/04/2014 05:59, Mark Thomas wrote: > On 09/04/2014 05:14, Rory O'Donnell Oracle, Dublin ireland wrote: >> Hi Mark, >> >> If you log a bug, send me the incident number, I will follow >> it up. > > I'll see if I can find the incident number for the bug I already > reported but I think I deleted

[jira] [Commented] (MTOMCAT-266) The attribute crashes Tomcat on startup

[ https://issues.apache.org/jira/browse/MTOMCAT-266?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13964081#comment-13964081 ] Olivier Lamy (*$^¨%`£) commented on MTOMCAT-266: Are you using maven 3.1+

[Bug 56374] Page in wrong language - getting lower rank Accept-Language in request header

https://issues.apache.org/bugzilla/show_bug.cgi?id=56374 --- Comment #6 from Konstantin Kolinko --- > A fresh install of Tomcat7 on Debian. Last time when I was looking, a "fresh" Tomcat on Debian was actually X years old, where X was ~2 or 3. 1. What exactly x.y.z version are you using? 2. Is

Re: svn commit: r1585898 - in /tomcat/native/branches/1.1.x: native/src/sslcontext.c xdocs/miscellaneous/changelog.xml

2014-04-09 11:32 GMT+04:00 : > Author: mturk > Date: Wed Apr 9 07:32:29 2014 > New Revision: 1585898 > > URL: http://svn.apache.org/r1585898 > Log: > Apply Ognjen's patch for bz55915 > > Modified: > tomcat/native/branches/1.1.x/native/src/sslcontext.c > tomcat/native/branches/1.1.x/xdocs/

[Bug 56373] CompilerOptions.VERSION_1_8 only makes sense when running java8

https://issues.apache.org/bugzilla/show_bug.cgi?id=56373 Mark Thomas changed: What|Removed |Added Status|NEW |RESOLVED Resolution|---

Re: JDK 9 build 06 is available on java.net

On 09/04/2014 05:14, Rory O'Donnell Oracle, Dublin ireland wrote: > Hi Mark, > > If you log a bug, send me the incident number, I will follow > it up. I'll see if I can find the incident number for the bug I already reported but I think I deleted the e-mail after 6 or so months of no response. If

[Bug 56374] Page in wrong language - getting lower rank Accept-Language in request header

https://issues.apache.org/bugzilla/show_bug.cgi?id=56374 Steve Root changed: What|Removed |Added Summary|Page in wrong language -|Page in wrong language -

[Bug 56374] Page in wrong language - getting lowest rank Accept-Language in request header

https://issues.apache.org/bugzilla/show_bug.cgi?id=56374 --- Comment #5 from Steve Root --- Created attachment 31497 --> https://issues.apache.org/bugzilla/attachment.cgi?id=31497&action=edit EN-FR-ES_getES screenshot showing header request and result page -- You are receiving this mail becau

[Bug 56374] Page in wrong language - getting lowest rank Accept-Language in request header

https://issues.apache.org/bugzilla/show_bug.cgi?id=56374 --- Comment #4 from Steve Root --- Created attachment 31496 --> https://issues.apache.org/bugzilla/attachment.cgi?id=31496&action=edit EN-FR_getFR screenshot showing header request and result page -- You are receiving this mail because:

[Bug 56374] Page in wrong language - getting lowest rank Accept-Language in request header

https://issues.apache.org/bugzilla/show_bug.cgi?id=56374 --- Comment #3 from Steve Root --- Created attachment 31495 --> https://issues.apache.org/bugzilla/attachment.cgi?id=31495&action=edit EN-ES-FR_getES screenshot showing header request and result page -- You are receiving this mail becau

[Bug 56374] Page in wrong language - getting lowest rank Accept-Language in request header

https://issues.apache.org/bugzilla/show_bug.cgi?id=56374 --- Comment #2 from Steve Root --- Created attachment 31494 --> https://issues.apache.org/bugzilla/attachment.cgi?id=31494&action=edit EN-ES_getES screenshot showing header request and result page -- You are receiving this mail because:

[Bug 56374] Page in wrong language - getting lowest rank Accept-Language in request header

https://issues.apache.org/bugzilla/show_bug.cgi?id=56374 Steve Root changed: What|Removed |Added Attachment #31493|screenshot showing header |EN_getEN screenshot showing de

[Bug 56374] Page in wrong language - getting lowest rank Accept-Language in request header

https://issues.apache.org/bugzilla/show_bug.cgi?id=56374 --- Comment #1 from Steve Root --- Created attachment 31493 --> https://issues.apache.org/bugzilla/attachment.cgi?id=31493&action=edit screenshot showing header request and result page -- You are receiving this mail because: You are the

[Bug 56374] New: Page in wrong language - getting lowest rank Accept-Language in request header

https://issues.apache.org/bugzilla/show_bug.cgi?id=56374 Bug ID: 56374 Summary: Page in wrong language - getting lowest rank Accept-Language in request header Product: Tomcat 7 Version: unspecified Hardware: Macintosh

[Bug 56373] New: CompilerOptions.VERSION_1_8 only makes sense when running java8

https://issues.apache.org/bugzilla/show_bug.cgi?id=56373 Bug ID: 56373 Summary: CompilerOptions.VERSION_1_8 only makes sense when running java8 Product: Tomcat 7 Version: trunk Hardware: PC OS: Linux

Re: JDK 9 build 06 is available on java.net

Thanks Henri! On 04/ 8/14 01:22 PM, Henri Gomez wrote: OpenJDK 8 and 9 have also their continuous build via Obuildfactory (https://github.com/hgomez/obuildfactory) and hosted in Bintray for many Linux flavor ie : * http://dl.bintray.com/hgomez/obuildfactory-fedora18-x86-64/ * http://dl.bintray

Re: JDK 9 build 06 is available on java.net

Hi Mark, If you log a bug, send me the incident number, I will follow it up. Rgds, Rory On 04/ 9/14 12:00 PM, Mark Thomas wrote: On 09/04/2014 04:36, Rory O'Donnell Oracle, Dublin ireland wrote: Hi Mark, I suggest you send an email to core-libs-...@openjdk.java.net or log a bug. I've alread

[Bug 56372] New: Which API is referenced in comment above public Iterator getFeatureDescriptors in javax.el.ResourceBundleELResolver

https://issues.apache.org/bugzilla/show_bug.cgi?id=56372 Bug ID: 56372 Summary: Which API is referenced in comment above public Iterator getFeatureDescriptors in javax.el.ResourceBundleELResolver Product: Tomcat 7

Re: JDK 9 build 06 is available on java.net

On 09/04/2014 04:36, Rory O'Donnell Oracle, Dublin ireland wrote: > Hi Mark, > > I suggest you send an email to core-libs-...@openjdk.java.net > or log a bug. I've already filed the bug against Java. As far as I recall I never received any response - not unusual in my experience of reporting bug

Re: JDK 9 build 06 is available on java.net

Hi Mark, I suggest you send an email to core-libs-...@openjdk.java.net or log a bug. Rgds, Rory On 04/ 8/14 12:49 PM, Mark Thomas wrote: On 08/04/2014 02:25, Rory O'Donnell Oracle, Dublin Ireland wrote: Hi Mladen, JDK 9 Build 06 Early Access Build is now available for download

Re: [Bug 55915] Add ECDHE support to tcnative-1.dll

On 04/09/2014 10:27 AM, Tim Whittington wrote: Does this need a SSL_CTX_set_options(c->ctx, SSL_OP_SINGLE_ECDH_USE) as well? Seems it does. Just committed a code found in mod_ssl. Regards -- ^TM - To unsubscribe, e-mail: de

svn commit: r1585923 - in /tomcat/native/branches/1.1.x/native: include/ssl_private.h src/sslcontext.c

Author: mturk Date: Wed Apr 9 09:52:40 2014 New Revision: 1585923 URL: http://svn.apache.org/r1585923 Log: As per Tom's suggestion. Set SSL_OP_SINGLE_ECDH_USE to context Modified: tomcat/native/branches/1.1.x/native/include/ssl_private.h tomcat/native/branches/1.1.x/native/src/sslcontext

svn commit: r1585903 - /tomcat/native/branches/1.1.x/native/srclib/VERSIONS

Author: mturk Date: Wed Apr 9 08:31:42 2014 New Revision: 1585903 URL: http://svn.apache.org/r1585903 Log: Update OpenSSL version Modified: tomcat/native/branches/1.1.x/native/srclib/VERSIONS Modified: tomcat/native/branches/1.1.x/native/srclib/VERSIONS URL: http://svn.apache.org/viewvc/to

Re: [Bug 55915] Add ECDHE support to tcnative-1.dll

Does this need a SSL_CTX_set_options(c->ctx, SSL_OP_SINGLE_ECDH_USE) as well? The API docs are pretty sparse, but it looks like mod_ssl does this (as well as nginx etc.) The description in ssl.h is “If set, always create a new key when using tmp_ecdh parameters” Reading the docs for the equival

Re: Tagging JK 1.2.40

On 8/04/2014, at 11:56 pm, Konstantin Kolinko wrote: > 2014-04-08 11:56 GMT+04:00 Mladen Turk : >> Hi, >> >> I plan to tag JK 1.2.40 pretty soon (probably end of this week) >> We have few bugs in the latest release which requires a new version. > > +1 > > There is also a need for a tc-native

[Bug 55915] Add ECDHE support to tcnative-1.dll

https://issues.apache.org/bugzilla/show_bug.cgi?id=55915 Mladen Turk changed: What|Removed |Added Status|NEW |RESOLVED Resolution|---

Re: CVE-2014-0160

On 04/09/2014 01:43 AM, Andrew Carr wrote: http://www.openssl.org/news/secadv_20140407.txt Hi Tomcat Devs, I have been on the dev list for a few years, and a tomcat developer longer than that. While I haven't contributed yet, I was curious if this cve needs a contribution. As far as I can tel

svn commit: r1585898 - in /tomcat/native/branches/1.1.x: native/src/sslcontext.c xdocs/miscellaneous/changelog.xml

Author: mturk Date: Wed Apr 9 07:32:29 2014 New Revision: 1585898 URL: http://svn.apache.org/r1585898 Log: Apply Ognjen's patch for bz55915 Modified: tomcat/native/branches/1.1.x/native/src/sslcontext.c tomcat/native/branches/1.1.x/xdocs/miscellaneous/changelog.xml Modified: tomcat/nati

[Bug 55915] Add ECDHE support to tcnative-1.dll

https://issues.apache.org/bugzilla/show_bug.cgi?id=55915 --- Comment #3 from Mladen Turk --- New versions will be configured at build time using perl Configure enable-ecdh enable-ec enable-ecdsa ... -- You are receiving this mail because: You are the assignee for the bug. -

[Bug 56363] OpenSSL security advisory - Heartbleed bug

https://issues.apache.org/bugzilla/show_bug.cgi?id=56363 --- Comment #1 from Mladen Turk --- Working on it. -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail: dev-unsubscr...@to

[Bug 56363] OpenSSL security advisory - Heartbleed bug

https://issues.apache.org/bugzilla/show_bug.cgi?id=56363 r.schilpero...@greenvalley.nl changed: What|Removed |Added CC||r.schilperoort@green