[GUMP@vmgump]: Project tomcat-tc8.0.x-test-nio (in module tomcat-8.0.x) failed

To whom it may engage... This is an automated request, but not an unsolicited one. For more information please visit http://gump.apache.org/nagged.html, and/or contact the folk at gene...@gump.apache.org. Project tomcat-tc8.0.x-test-nio has an issue affecting its community integration.

[GUMP@vmgump]: Project tomcat-trunk-test-nio (in module tomcat-trunk) failed

To whom it may engage... This is an automated request, but not an unsolicited one. For more information please visit http://gump.apache.org/nagged.html, and/or contact the folk at gene...@gump.apache.org. Project tomcat-trunk-test-nio has an issue affecting its community integration. Th

[GUMP@vmgump]: Project tomcat-tc8.0.x-test-apr (in module tomcat-8.0.x) failed

To whom it may engage... This is an automated request, but not an unsolicited one. For more information please visit http://gump.apache.org/nagged.html, and/or contact the folk at gene...@gump.apache.org. Project tomcat-tc8.0.x-test-apr has an issue affecting its community integration.

[GUMP@vmgump]: Project tomcat-tc8.0.x-test-bio (in module tomcat-8.0.x) failed

To whom it may engage... This is an automated request, but not an unsolicited one. For more information please visit http://gump.apache.org/nagged.html, and/or contact the folk at gene...@gump.apache.org. Project tomcat-tc8.0.x-test-bio has an issue affecting its community integration.

Re: Tomcat 8.next

2016-03-03 21:20 GMT+01:00 Mark Thomas : > One thought I had for BIO support was that we could add something like > this to handle the case where the user has explicitly selected BIO > > public class Http11Protocol extends Http11NioProtocol { > > public Http11Protocol() { > super(); >

Re: Tomcat Configuration Hardening

Le 3/03/2016 16:36, Christopher Schultz a écrit : > 2. Many people use OS-package-managed versions of Tomcat, and we have no > control over what goes on, there. Whatever we may do may be undone by > the package manager(s). FWIW I'm in a position to change the packaging of Tomcat in Debian (and in

Re: Tomcat Configuration Hardening

On 03/03/2016 15:36, Christopher Schultz wrote: > Dylan, > > This might be a better discussion for the users' list, but I'll keep it > on dev for the time being. > > On 2/28/16 2:28 PM, Dylan Ayrey wrote: >> I'm a security analyst at a company named Praetorian. When doing internal >> network pent

Re: Tomcat 8.next

On 03/03/2016 16:41, Mark Thomas wrote: > On 03/03/2016 15:41, Christopher Schultz wrote: >> Mark, >> >> On 3/1/16 5:12 PM, Mark Thomas wrote: >>> To summarise where I think this discussion is going: >>> >>> - Create 8.5.x from 9.0.x with the following changes >>> - revert all changes to spec API

[GUMP@vmgump]: Project tomcat-trunk-test-nio (in module tomcat-trunk) failed

mons/daemon/dist/bin/commons-daemon-20160303-native-src.tar.gz -Dexamples.sources.skip=true -Dbase.path=/srv/gump/public/workspace/tomcat-trunk/tomcat-build-libs -Djdt.jar=/srv/gump/packages/eclipse/plugins/R-4.5-201506032000/ecj-4.5.jar -Dtest.relaxTiming=true -Dcommons-daemon.jar=/srv/gump/pub

[Bug 56966] AccessLogValve's elapsed time has 15ms precision on Windows

https://bz.apache.org/bugzilla/show_bug.cgi?id=56966 --- Comment #7 from Mark Thomas --- Hmm. Both methods around 40μs on may newer laptop which would make this change pretty much zero perofromnace impact. There are a few too many variables here. H/W, OS, JVM etc. I'm going to do some wider test

[Bug 56966] AccessLogValve's elapsed time has 15ms precision on Windows

https://bz.apache.org/bugzilla/show_bug.cgi?id=56966 --- Comment #6 from Mark Thomas --- System.nanoTime() is approximately 40x slower than System.currentTimeMillis(). On my machine the equates to the difference between ~600ns and ~15ns per call. Duration requires a start and an end time. So tha

Re: Tomcat 8.next

On 03/03/2016 15:41, Christopher Schultz wrote: > Mark, > > On 3/1/16 5:12 PM, Mark Thomas wrote: >> To summarise where I think this discussion is going: >> >> - Create 8.5.x from 9.0.x with the following changes >> - revert all changes to spec APIs > > I would argue that anything that has been

svn commit: r1733494 - in /tomcat/trunk/java/org/apache/catalina/authenticator: AuthenticatorBase.java LocalStrings.properties

Author: markt Date: Thu Mar 3 16:21:38 2016 New Revision: 1733494 URL: http://svn.apache.org/viewvc?rev=1733494&view=rev Log: Fix some JASPIC logging TODOs Modified: tomcat/trunk/java/org/apache/catalina/authenticator/AuthenticatorBase.java tomcat/trunk/java/org/apache/catalina/authentic

svn commit: r1733493 - in /tomcat/trunk: java/org/apache/catalina/authenticator/AuthenticatorBase.java java/org/apache/catalina/authenticator/jaspic/AuthConfigFactoryImpl.java webapps/docs/config/jasp

Author: markt Date: Thu Mar 3 16:17:12 2016 New Revision: 1733493 URL: http://svn.apache.org/viewvc?rev=1733493&view=rev Log: Handling parallel deployment looks possible but messy. Document it as a limitation. We can always revisit it if there is user demand. Modified: tomcat/trunk/java/org

Re: Tomcat 8.next

2016-03-03 16:41 GMT+01:00 Christopher Schultz : > Mark, > > On 3/1/16 5:12 PM, Mark Thomas wrote: > > To summarise where I think this discussion is going: > > > > - Create 8.5.x from 9.0.x with the following changes > > - revert all changes to spec APIs > > I would argue that anything that has

Re: Tomcat 8.next

Mark, On 3/1/16 5:12 PM, Mark Thomas wrote: > To summarise where I think this discussion is going: > > - Create 8.5.x from 9.0.x with the following changes > - revert all changes to spec APIs I would argue that anything that has been added (in TC9) can stay; only revert the removals and possib

Re: Tomcat Configuration Hardening

Dylan, This might be a better discussion for the users' list, but I'll keep it on dev for the time being. On 2/28/16 2:28 PM, Dylan Ayrey wrote: > I'm a security analyst at a company named Praetorian. When doing internal > network pentesting it is extremely common to find tomcat instances with >

[GUMP@vmgump]: Project tomcat-tc8.0.x-test-bio (in module tomcat-8.0.x) failed

space/apache-commons/daemon/dist/bin/commons-daemon-20160303-native-src.tar.gz -Dexamples.sources.skip=true -Dbase.path=/srv/gump/public/workspace/tomcat-8.0.x/tomcat-build-libs -Djdt.jar=/srv/gump/packages/eclipse/plugins/R-4.5-201506032000/ecj-4.5.jar -Dcommons-daemon.jar=/srv/gump/public/work

[Bug 59110] Classloader generates string index out of bound exception

https://bz.apache.org/bugzilla/show_bug.cgi?id=59110 Violeta Georgieva changed: What|Removed |Added Resolution|--- |DUPLICATE Status|NEW

[Bug 58999] StringIndexOutOfBoundsException WebAppClassLoaderBase.filter()

https://bz.apache.org/bugzilla/show_bug.cgi?id=58999 Violeta Georgieva changed: What|Removed |Added CC||tfilt...@flexgroup.com --- Comment

[Bug 59110] New: Classloader generates string index out of bound exception

https://bz.apache.org/bugzilla/show_bug.cgi?id=59110 Bug ID: 59110 Summary: Classloader generates string index out of bound exception Product: Tomcat 8 Version: 8.0.32 Hardware: All OS: All Statu

buildbot failure in on tomcat-8-trunk

The Buildbot has detected a new failure on builder tomcat-8-trunk while building . Full details are available at: https://ci.apache.org/builders/tomcat-8-trunk/builds/483 Buildbot URL: https://ci.apache.org/ Buildslave for this Build: silvanus_ubuntu Build Reason: The AnyBranchScheduler sch

[Bug 58816] additional jdbc pool mbean attributes - CreatedCount, BorrowedCount

https://bz.apache.org/bugzilla/show_bug.cgi?id=58816 Mark Thomas changed: What|Removed |Added Target Milestone||--- Version|trunk

[Bug 59089] ArrayIndexOutOfBoundsException if header name contains byte values > 127

https://bz.apache.org/bugzilla/show_bug.cgi?id=59089 Mark Thomas changed: What|Removed |Added Status|NEW |RESOLVED Resolution|---

svn commit: r1733450 - in /tomcat/tc8.0.x/trunk: ./ java/org/apache/coyote/http11/ test/org/apache/coyote/http11/ webapps/docs/

Author: markt Date: Thu Mar 3 11:47:50 2016 New Revision: 1733450 URL: http://svn.apache.org/viewvc?rev=1733450&view=rev Log: Fix https://bz.apache.org/bugzilla/show_bug.cgi?id=59089 Correctly ignore HTTP headers that include non-token characters in the header name. Modified: tomcat/tc8.0.x

svn commit: r1733448 - in /tomcat/trunk: java/org/apache/coyote/http11/Http11InputBuffer.java test/org/apache/coyote/http11/TestHttp11InputBuffer.java webapps/docs/changelog.xml

Author: markt Date: Thu Mar 3 11:41:53 2016 New Revision: 1733448 URL: http://svn.apache.org/viewvc?rev=1733448&view=rev Log: Fix https://bz.apache.org/bugzilla/show_bug.cgi?id=59089 Correctly ignore HTTP headers that include non-token characters in the header name. Modified: tomcat/trunk/j

[GUMP@vmgump]: Project tomcat-tc7.0.x-test-nio (in module tomcat-7.0.x) failed

lic/workspace/apache-commons/daemon/dist/commons-daemon-20160303.jar -Dtomcat-dbcp-src.jar=/srv/gump/public/workspace/tomcat-7.0.x/tomcat-deps/tomcat-dbcp-src.jar -Dtomcat-dbcp.home=/srv/gump/public/workspace/tomcat-7.0.x/tomcat-deps -Dtest.excludePerformance=true -Dhamcrest.jar=/srv/gump/packag

[Bug 59081] Cipher ordering not working

https://bz.apache.org/bugzilla/show_bug.cgi?id=59081 Mark Thomas changed: What|Removed |Added Resolution|--- |FIXED Status|NEW

svn commit: r1733446 - /tomcat/tc8.0.x/trunk/test/org/apache/tomcat/util/net/jsse/openssl/TestOpenSSLCipherConfigurationParserOnly.java

Author: markt Date: Thu Mar 3 11:07:48 2016 New Revision: 1733446 URL: http://svn.apache.org/viewvc?rev=1733446&view=rev Log: Add some additional tests based on recent bugs and Gump failures Modified: tomcat/tc8.0.x/trunk/test/org/apache/tomcat/util/net/jsse/openssl/TestOpenSSLCipherConfigu

svn commit: r1733445 - /tomcat/tc8.0.x/trunk/test/org/apache/tomcat/util/net/jsse/openssl/TestOpenSSLCipherConfigurationParser.java

Author: markt Date: Thu Mar 3 11:07:26 2016 New Revision: 1733445 URL: http://svn.apache.org/viewvc?rev=1733445&view=rev Log: Simplify the tests by only supporting supported OpenSSL versions. Modified: tomcat/tc8.0.x/trunk/test/org/apache/tomcat/util/net/jsse/openssl/TestOpenSSLCipherConfig

svn commit: r1733444 - in /tomcat/tc8.0.x/trunk: java/org/apache/tomcat/util/net/jsse/openssl/OpenSSLCipherConfigurationParser.java webapps/docs/changelog.xml

Author: markt Date: Thu Mar 3 11:06:58 2016 New Revision: 1733444 URL: http://svn.apache.org/viewvc?rev=1733444&view=rev Log: Fix https://bz.apache.org/bugzilla/show_bug.cgi?id=59081 Retain the user defined cipher order when defining ciphers with OpenSSL format Modified: tomcat/tc8.0.x/trun

svn commit: r1733442 - /tomcat/trunk/test/org/apache/tomcat/util/net/openssl/ciphers/TestOpenSSLCipherConfigurationParser.java

Author: markt Date: Thu Mar 3 10:57:41 2016 New Revision: 1733442 URL: http://svn.apache.org/viewvc?rev=1733442&view=rev Log: Restore the original checks Modified: tomcat/trunk/test/org/apache/tomcat/util/net/openssl/ciphers/TestOpenSSLCipherConfigurationParser.java Modified: tomcat/trunk

svn commit: r1733440 - /tomcat/trunk/test/org/apache/tomcat/util/net/openssl/ciphers/TestOpenSSLCipherConfigurationParser.java

Author: markt Date: Thu Mar 3 10:54:34 2016 New Revision: 1733440 URL: http://svn.apache.org/viewvc?rev=1733440&view=rev Log: Remove incorrect ordering check Modified: tomcat/trunk/test/org/apache/tomcat/util/net/openssl/ciphers/TestOpenSSLCipherConfigurationParser.java Modified: tomcat/t

svn commit: r1733438 - /tomcat/trunk/test/org/apache/tomcat/util/net/openssl/ciphers/TestOpenSSLCipherConfigurationParserOnly.java

Author: markt Date: Thu Mar 3 10:48:59 2016 New Revision: 1733438 URL: http://svn.apache.org/viewvc?rev=1733438&view=rev Log: Remove the test this time Modified: tomcat/trunk/test/org/apache/tomcat/util/net/openssl/ciphers/TestOpenSSLCipherConfigurationParserOnly.java Modified: tomcat/tru

svn commit: r1733437 - in /tomcat/trunk: java/org/apache/tomcat/util/net/openssl/ciphers/OpenSSLCipherConfigurationParser.java test/org/apache/tomcat/util/net/openssl/ciphers/TestOpenSSLCipherConfigur

Author: markt Date: Thu Mar 3 10:47:30 2016 New Revision: 1733437 URL: http://svn.apache.org/viewvc?rev=1733437&view=rev Log: Revert 1733435. Fix was incorrect. Failign test committed to early Modified: tomcat/trunk/java/org/apache/tomcat/util/net/openssl/ciphers/OpenSSLCipherConfigurationP

[GUMP@vmgump]: Project tomcat-tc7.0.x-test-apr (in module tomcat-7.0.x) failed

lic/workspace/apache-commons/daemon/dist/commons-daemon-20160303.jar -Dtomcat-dbcp-src.jar=/srv/gump/public/workspace/tomcat-7.0.x/tomcat-deps/tomcat-dbcp-src.jar -Dtomcat-dbcp.home=/srv/gump/public/workspace/tomcat-7.0.x/tomcat-deps -Dtest.excludePerformance=true -Dhamcrest.jar=/srv/gump/packag

svn commit: r1733435 - /tomcat/trunk/java/org/apache/tomcat/util/net/openssl/ciphers/OpenSSLCipherConfigurationParser.java

Author: markt Date: Thu Mar 3 10:39:11 2016 New Revision: 1733435 URL: http://svn.apache.org/viewvc?rev=1733435&view=rev Log: Partial fix for ordering issues with OPenSSL master Modified: tomcat/trunk/java/org/apache/tomcat/util/net/openssl/ciphers/OpenSSLCipherConfigurationParser.java Mod

[GUMP@vmgump]: Project tomcat-trunk-test-apr (in module tomcat-trunk) failed

mons/daemon/dist/bin/commons-daemon-20160303-native-src.tar.gz -Dexamples.sources.skip=true -Dbase.path=/srv/gump/public/workspace/tomcat-trunk/tomcat-build-libs -Djdt.jar=/srv/gump/packages/eclipse/plugins/R-4.5-201506032000/ecj-4.5.jar -Dtest.apr.loc=/srv/gump/public/workspace/tomcat-native-tru

[Bug 59062] Failed to close the ServletOutputStream connection cleanly

https://bz.apache.org/bugzilla/show_bug.cgi?id=59062 --- Comment #2 from hugo.lar...@yahoo.com --- Hello, Thanks for the info. Do you think that calling ClientManager.shutdown() in the client is a good idea to avoid the exception? BR, -- You are receiving this mail because: You are the assign

svn commit: r1733427 - /tomcat/trunk/java/org/apache/tomcat/util/net/openssl/ciphers/OpenSSLCipherConfigurationParser.java

Author: markt Date: Thu Mar 3 09:21:49 2016 New Revision: 1733427 URL: http://svn.apache.org/viewvc?rev=1733427&view=rev Log: Ensure COMPLEMENTOFDEAULT is correctly ordered with OpenSSL master Modified: tomcat/trunk/java/org/apache/tomcat/util/net/openssl/ciphers/OpenSSLCipherConfigurationP

[GUMP@vmgump]: Project tomcat-tc7.0.x-test-bio (in module tomcat-7.0.x) failed

lic/workspace/apache-commons/daemon/dist/commons-daemon-20160303.jar -Dtomcat-dbcp-src.jar=/srv/gump/public/workspace/tomcat-7.0.x/tomcat-deps/tomcat-dbcp-src.jar -Dtomcat-dbcp.home=/srv/gump/public/workspace/tomcat-7.0.x/tomcat-deps -Dtest.excludePerformance=true -Dhamcrest.jar=/srv/gump/packag

[GUMP@vmgump]: Project tomcat-trunk-test-nio2 (in module tomcat-trunk) failed

pache-commons/daemon/dist/bin/commons-daemon-20160303-native-src.tar.gz -Dexamples.sources.skip=true -Dbase.path=/srv/gump/public/workspace/tomcat-trunk/tomcat-build-libs -Djdt.jar=/srv/gump/packages/eclipse/plugins/R-4.5-201506032000/ecj-4.5.jar -Dtest.relaxTiming=true -Dcommons-daemon.