[Bug 57892] Log once a warning if a symbolic link is ignored (e.g. to web.xml )

2015-05-05 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=57892 Ralf Hauser changed: What|Removed |Added Summary|Log a warning if web.xml is |Log once a warning if a

buildbot exception in ASF Buildbot on tomcat-trunk

2015-05-05 Thread buildbot
The Buildbot has detected a build exception on builder tomcat-trunk while building ASF Buildbot. Full details are available at: http://ci.apache.org/builders/tomcat-trunk/builds/1191 Buildbot URL: http://ci.apache.org/ Buildslave for this Build: silvanus_ubuntu Build Reason: The AnyBranchSc

svn commit: r1677930 - /tomcat/trunk/webapps/docs/config/ajp.xml

2015-05-05 Thread markt
Author: markt Date: Wed May 6 06:22:14 2015 New Revision: 1677930 URL: http://svn.apache.org/r1677930 Log: Remove another socketWrapperCache identified in a kkolinko review Modified: tomcat/trunk/webapps/docs/config/ajp.xml Modified: tomcat/trunk/webapps/docs/config/ajp.xml URL: http://svn

Re: svn commit: r1677840 - in /tomcat/trunk: java/org/apache/tomcat/util/net/SocketProperties.java webapps/docs/config/http.xml

2015-05-05 Thread Mark Thomas
On 06/05/2015 03:03, Konstantin Kolinko wrote: > 2015-05-05 18:36 GMT+03:00 : >> Author: markt >> Date: Tue May 5 15:36:31 2015 >> New Revision: 1677840 >> >> URL: http://svn.apache.org/r1677840 >> Log: >> Remove unused property (SocketWrappers are no longer reused) >> >> Modified: >> tomcat/

Re: svn commit: r1677840 - in /tomcat/trunk: java/org/apache/tomcat/util/net/SocketProperties.java webapps/docs/config/http.xml

2015-05-05 Thread Konstantin Kolinko
2015-05-05 18:36 GMT+03:00 : > Author: markt > Date: Tue May 5 15:36:31 2015 > New Revision: 1677840 > > URL: http://svn.apache.org/r1677840 > Log: > Remove unused property (SocketWrappers are no longer reused) > > Modified: > tomcat/trunk/java/org/apache/tomcat/util/net/SocketProperties.java

Re: svn commit: r1677884 - in /tomcat/trunk: java/org/apache/coyote/http11/ java/org/apache/tomcat/util/net/ java/org/apache/tomcat/util/net/jsse/ webapps/docs/config/

2015-05-05 Thread Konstantin Kolinko
2015-05-05 22:48 GMT+03:00 : > Author: markt > Date: Tue May 5 19:48:53 2015 > New Revision: 1677884 > > URL: http://svn.apache.org/r1677884 > Log: > Move alias, keystoreType and keystoreProvider to SSlHostConfig > > Modified: > tomcat/trunk/java/org/apache/coyote/http11/AbstractHttp11JssePro

Re: svn commit: r1675198 - in /tomcat/trunk: java/org/apache/tomcat/util/net/AprEndpoint.java java/org/apache/tomcat/util/net/SSLHostConfig.java webapps/docs/config/http.xml

2015-05-05 Thread Konstantin Kolinko
2015-04-21 23:56 GMT+03:00 : > Author: markt > Date: Tue Apr 21 20:56:14 2015 > New Revision: 1675198 > > URL: http://svn.apache.org/r1675198 > Log: > Document the protocols attribute for SSLHostConfig and align the > implementation with it. > > Modified: > tomcat/trunk/java/org/apache/tomcat

svn commit: r1677915 - /tomcat/trunk/webapps/docs/config/http.xml

2015-05-05 Thread kkolinko
Author: kkolinko Date: Wed May 6 01:12:54 2015 New Revision: 1677915 URL: http://svn.apache.org/r1677915 Log: Rename sections to make it more clear that these configuration attributes belong to Connector element, as opposed to SSLHostConfig. Modified: tomcat/trunk/webapps/docs/config/http.x

svn commit: r1677914 - /tomcat/trunk/webapps/docs/config/http.xml

2015-05-05 Thread kkolinko
Author: kkolinko Date: Wed May 6 00:59:40 2015 New Revision: 1677914 URL: http://svn.apache.org/r1677914 Log: Correct a pair of typos noted when reviewing SSLHostConfig documentation. Modified: tomcat/trunk/webapps/docs/config/http.xml Modified: tomcat/trunk/webapps/docs/config/http.xml URL

[Bug 57892] Log a warning if web.xml is a symbolic link that is ignored

2015-05-05 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=57892 Konstantin Kolinko changed: What|Removed |Added Summary|warn to stderr if web.xml |Log a warning if web.xml is

svn commit: r1677912 - /tomcat/tc6.0.x/trunk/STATUS.txt

2015-05-05 Thread kkolinko
Author: kkolinko Date: Tue May 5 23:48:25 2015 New Revision: 1677912 URL: http://svn.apache.org/r1677912 Log: votes Modified: tomcat/tc6.0.x/trunk/STATUS.txt Modified: tomcat/tc6.0.x/trunk/STATUS.txt URL: http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/STATUS.txt?rev=1677912&r1=1677911&r

svn commit: r1677910 - in /tomcat/site/trunk: docs/security-6.html docs/security-7.html docs/security-8.html xdocs/security-6.xml xdocs/security-7.xml xdocs/security-8.xml

2015-05-05 Thread markt
Author: markt Date: Tue May 5 23:08:44 2015 New Revision: 1677910 URL: http://svn.apache.org/r1677910 Log: Announce CVE-2014-0230 Modified: tomcat/site/trunk/docs/security-6.html tomcat/site/trunk/docs/security-7.html tomcat/site/trunk/docs/security-8.html tomcat/site/trunk/xdocs

[Bug 57892] warn to stderr if web.xml is a symbolic link that is ignore

2015-05-05 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=57892 --- Comment #2 from Ralf Hauser --- Agreed such warnings need not be restricted to web.xml Also agreed that not every attempted access needs to be warned. But I would warn once per attempted distinct path as there is sometimes quite some log o

[SECURITY] CVE-2014-0230: Apache Tomcat DoS

2015-05-05 Thread Mark Thomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 CVE-2014-0230 Denial of Service Severity: Low Vendor: The Apache Software Foundation Versions Affected: - - Apache Tomcat 8.0.0-RC1 to 8.0.8 - - Apache Tomcat 7.0.0 to 7.0.54 - - Apache Tomcat 6.0.0 to 6.0.43 Description: When a response for a re

Time for a 6.0.x release

2015-05-05 Thread Mark Thomas
It has been about 6 months since the last release, the changelog is reasonably long so I think it is time for 6.0.44. To top the above, RedHat recently published information on an undisclosed security vulnerability that is fixed in 6.0.x but isn't yet in a release[1]. It would be good to get 6.0.4

Re: Tomcat Grid

2015-05-05 Thread Christopher Schultz
Chris, On 5/5/15 4:39 PM, Chris Aguirre wrote: > I actually use Windows Powershell to execute commands on remote machines, > including stopping/starting Tomcat (and other Windows Services). > > This works well for me - but in this case, I have complete control of all > the VMs - and they are not

Re: Tomcat Grid

2015-05-05 Thread Chris Aguirre
I actually use Windows Powershell to execute commands on remote machines, including stopping/starting Tomcat (and other Windows Services). This works well for me - but in this case, I have complete control of all the VMs - and they are not Production Servers. I used the following articles as refe

Re: Tomcat Grid

2015-05-05 Thread Christopher Schultz
Alarcón, On 5/5/15 1:55 PM, Alarcón Vladimir wrote: > Hi, for a few months I was wondering about an extension for Tomcat > but I'm not sure if there would be interest from the part of the > Tomcat team. > > It's about managing multiple Tomcat servers across multiple machines, > from one (or more)

svn commit: r1677884 - in /tomcat/trunk: java/org/apache/coyote/http11/ java/org/apache/tomcat/util/net/ java/org/apache/tomcat/util/net/jsse/ webapps/docs/config/

2015-05-05 Thread markt
Author: markt Date: Tue May 5 19:48:53 2015 New Revision: 1677884 URL: http://svn.apache.org/r1677884 Log: Move alias, keystoreType and keystoreProvider to SSlHostConfig Modified: tomcat/trunk/java/org/apache/coyote/http11/AbstractHttp11JsseProtocol.java tomcat/trunk/java/org/apache/coyo

[Bug 57887] IllegalStateException: zip file closed

2015-05-05 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=57887 Rafael Mattos changed: What|Removed |Added Status|RESOLVED|REOPENED Resolution|WORKSFORME

[Bug 57894] IllegalStateException - BINARY_FULL_WRITING

2015-05-05 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=57894 --- Comment #3 from Chuck Caldarale --- (In reply to Chuck Caldarale from comment #2) > (In reply to Mark Thomas from comment #1) > > Note the Javadoc for RemoteEndpoint.Basic: > > file:///D:/specs/tc8/ws/ws-jsr-356-1.1-final-javadoc/javax/webs

[Bug 57894] IllegalStateException - BINARY_FULL_WRITING

2015-05-05 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=57894 --- Comment #2 from Chuck Caldarale --- (In reply to Mark Thomas from comment #1) > Note the Javadoc for RemoteEndpoint.Basic: > file:///D:/specs/tc8/ws/ws-jsr-356-1.1-final-javadoc/javax/websocket/ > RemoteEndpoint.Basic.html This link might

svn commit: r1677881 - in /tomcat/trunk: java/org/apache/coyote/http11/ java/org/apache/tomcat/util/net/ java/org/apache/tomcat/util/net/jsse/ webapps/docs/config/

2015-05-05 Thread markt
Author: markt Date: Tue May 5 19:23:55 2015 New Revision: 1677881 URL: http://svn.apache.org/r1677881 Log: Move crlFile/SSLCARevocationFile & SSLCARevocationPath to SSLHostConfig Modified: tomcat/trunk/java/org/apache/coyote/http11/AbstractHttp11JsseProtocol.java tomcat/trunk/java/org/ap

[Bug 57894] IllegalStateException - BINARY_FULL_WRITING

2015-05-05 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=57894 Mark Thomas changed: What|Removed |Added Status|NEW |RESOLVED Resolution|---

Re: Tomcat Grid

2015-05-05 Thread Mark Thomas
On 05/05/2015 18:55, Alarcón Vladimir wrote: > Hi, for a few months I was wondering about an extension for Tomcat but I'm > not sure if there would be interest from the part of the Tomcat team. > > It's about managing multiple Tomcat servers across multiple machines, from > one (or more) central

Tomcat Grid

2015-05-05 Thread Alarcón Vladimir
Hi, for a few months I was wondering about an extension for Tomcat but I'm not sure if there would be interest from the part of the Tomcat team. It's about managing multiple Tomcat servers across multiple machines, from one (or more) centralized location, something like a "Grid Admin". Anyway, t

[Bug 57887] IllegalStateException: zip file closed

2015-05-05 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=57887 --- Comment #2 from Rafael Mattos --- Created attachment 32717 --> https://bz.apache.org/bugzilla/attachment.cgi?id=32717&action=edit test case The problem happens when you have a recursive call inside a tag, created this test case just to p

[Bug 57894] New: IllegalStateException - BINARY_FULL_WRITING

2015-05-05 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=57894 Bug ID: 57894 Summary: IllegalStateException - BINARY_FULL_WRITING Product: Tomcat 8 Version: 8.0.21 Hardware: All OS: All Status: NEW Severity: critica

svn commit: r1677840 - in /tomcat/trunk: java/org/apache/tomcat/util/net/SocketProperties.java webapps/docs/config/http.xml

2015-05-05 Thread markt
Author: markt Date: Tue May 5 15:36:31 2015 New Revision: 1677840 URL: http://svn.apache.org/r1677840 Log: Remove unused property (SocketWrappers are no longer reused) Modified: tomcat/trunk/java/org/apache/tomcat/util/net/SocketProperties.java tomcat/trunk/webapps/docs/config/http.xml

svn commit: r1677839 - in /tomcat/trunk: java/org/apache/coyote/http11/ java/org/apache/tomcat/util/net/ webapps/docs/config/

2015-05-05 Thread markt
Author: markt Date: Tue May 5 15:29:49 2015 New Revision: 1677839 URL: http://svn.apache.org/r1677839 Log: Remove the oomParachute as discissed on the dev list Modified: tomcat/trunk/java/org/apache/coyote/http11/Http11Nio2Protocol.java tomcat/trunk/java/org/apache/coyote/http11/Http11Ni

svn commit: r1677837 - /tomcat/trunk/webapps/docs/config/http.xml

2015-05-05 Thread markt
Author: markt Date: Tue May 5 15:20:02 2015 New Revision: 1677837 URL: http://svn.apache.org/r1677837 Log: Fix typos. Modified: tomcat/trunk/webapps/docs/config/http.xml Modified: tomcat/trunk/webapps/docs/config/http.xml URL: http://svn.apache.org/viewvc/tomcat/trunk/webapps/docs/config/h

buildbot success in ASF Buildbot on tomcat-trunk

2015-05-05 Thread buildbot
The Buildbot has detected a restored build on builder tomcat-trunk while building ASF Buildbot. Full details are available at: http://ci.apache.org/builders/tomcat-trunk/builds/1184 Buildbot URL: http://ci.apache.org/ Buildslave for this Build: silvanus_ubuntu Build Reason: The AnyBranchSch

[Bug 57892] warn to stderr if web.xml is a symbolic link that is ignore

2015-05-05 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=57892 Mark Thomas changed: What|Removed |Added Severity|normal |enhancement --- Comment #1 from Mark Tho

[Bug 57892] New: warn to stderr if web.xml is a symbolic link that is ignore

2015-05-05 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=57892 Bug ID: 57892 Summary: warn to stderr if web.xml is a symbolic link that is ignore Product: Tomcat 7 Version: 7.0.56 Hardware: PC OS: Linux St

Re: Tomcat 9 connector refactoring: NIO vs NIO2

2015-05-05 Thread Rémy Maucherat
2015-05-04 21:54 GMT+02:00 Mark Thomas : > Looking some time further ahead where NIO2 is as stable as NIO and there > is an OpenSSL option for SSL/TLS with NIO2 I don't see any advantages of > NIO or APR/native over NIO2 which raises the possibility - at that point > - of just having NIO2. > > At

svn commit: r1677820 - /tomcat/tc8.0.x/trunk/webapps/docs/changelog.xml

2015-05-05 Thread markt
Author: markt Date: Tue May 5 13:14:53 2015 New Revision: 1677820 URL: http://svn.apache.org/r1677820 Log: Release vote passed today Modified: tomcat/tc8.0.x/trunk/webapps/docs/changelog.xml Modified: tomcat/tc8.0.x/trunk/webapps/docs/changelog.xml URL: http://svn.apache.org/viewvc/tomcat/

[Bug 57887] IllegalStateException: zip file closed

2015-05-05 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=57887 Mark Thomas changed: What|Removed |Added Status|NEW |RESOLVED Resolution|---

[Bug 57802] Compatibility with ICEfaces 1.8 over JSF 1.1 apps

2015-05-05 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=57802 Mark Thomas changed: What|Removed |Added Status|NEW |RESOLVED Resolution|---

buildbot exception in ASF Buildbot on tomcat-8-trunk

2015-05-05 Thread buildbot
The Buildbot has detected a build exception on builder tomcat-8-trunk while building ASF Buildbot. Full details are available at: http://ci.apache.org/builders/tomcat-8-trunk/builds/238 Buildbot URL: http://ci.apache.org/ Buildslave for this Build: silvanus_ubuntu Build Reason: The AnyBranc

svn commit: r1677810 - in /tomcat/tc8.0.x/trunk: ./ java/javax/el/ELResolver.java test/javax/el/TestELResolver.java webapps/docs/changelog.xml

2015-05-05 Thread markt
Author: markt Date: Tue May 5 12:51:02 2015 New Revision: 1677810 URL: http://svn.apache.org/r1677810 Log: Fix https://bz.apache.org/bugzilla/show_bug.cgi?id=57802 Correct the default implementation of ELResolver.convertToType() Modified: tomcat/tc8.0.x/trunk/ (props changed) tomcat/tc

svn commit: r1677802 - in /tomcat/trunk: java/javax/el/ELResolver.java test/javax/el/TestELResolver.java

2015-05-05 Thread markt
Author: markt Date: Tue May 5 12:39:31 2015 New Revision: 1677802 URL: http://svn.apache.org/r1677802 Log: Fix https://bz.apache.org/bugzilla/show_bug.cgi?id=57802 Correct the default implementation of ELResolver.convertToType() Modified: tomcat/trunk/java/javax/el/ELResolver.java tomcat

Time for 7.0.62

2015-05-05 Thread Violeta Georgieva
Hi, I plan to start preparing Tomcat 7.0.62. If you want to add something in addition to this release, reply here. Regards, Violeta

[Bug 57865] session.invalidate does not work when during startup war file is deployed

2015-05-05 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=57865 Violeta Georgieva changed: What|Removed |Added Status|REOPENED|RESOLVED Resolution|---

[Bug 57865] session.invalidate does not work when during startup war file is deployed

2015-05-05 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=57865 Alessandro Trolli changed: What|Removed |Added Status|RESOLVED|REOPENED Resolution|INVALI

svn commit: r8820 - /dev/tomcat/tomcat-8/v8.0.22/ /release/tomcat/tomcat-8/v8.0.22/

2015-05-05 Thread markt
Author: markt Date: Tue May 5 07:52:27 2015 New Revision: 8820 Log: Release Apache Tomcat 8.0.22 Added: release/tomcat/tomcat-8/v8.0.22/ - copied from r8746, dev/tomcat/tomcat-8/v8.0.22/ Removed: dev/tomcat/tomcat-8/v8.0.22/ ---

svn commit: r8819 - /release/tomcat/tomcat-8/v8.0.20/

2015-05-05 Thread markt
Author: markt Date: Tue May 5 07:51:45 2015 New Revision: 8819 Log: Remove the old release Removed: release/tomcat/tomcat-8/v8.0.20/ - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-ma

Re: [VOTE] Release Apache Tomcat 8.0.22

2015-05-05 Thread Mark Thomas
The following votes were cast: +1 (binding) : remm, markt, schultz, violetagg -1 (non-binding) : Ognjen Blagojevic The -1 vote was due to the regression of the NIO2 connector with TLS. Given the votes above, we have enough votes for the release. I intend to go ahead with the release and inc

Re: [VOTE] Release Apache Tomcat 8.0.22

2015-05-05 Thread Rémy Maucherat
2015-05-05 2:32 GMT+02:00 Christopher Schultz : > Hmm... I thought that NIO2 was listed as "experimental" in Tomcat 8.0.x, > but the configuration guide doesn't say anything to that effect. > > How much *more* broken in 8.0.22 is it than 8.0.21? I would say that > failing spectacularly is better

Re: [VOTE] Release Apache Tomcat 8.0.22

2015-05-05 Thread Rémy Maucherat
2015-05-04 21:58 GMT+02:00 Mark Thomas : > They are both broken, it is just more obvious with 8.0.22. I'll make my > mind up finally tomorrow but I am leaning towards releasing 8.0.22 > making it clear that there is a known issue with NIO2 + TLS and then > looking at 8.0.23 almost immediately (I w