https://bz.apache.org/bugzilla/show_bug.cgi?id=60014
--- Comment #5 from Andrea Vettori ---
I must add an information that may be important. The server where I did the
testing and the production server are both CentOS7 linux installation with
OpenSSL version 'OpenSSL 1.0.1e-fips 11 Feb 2013'.
To
https://bz.apache.org/bugzilla/show_bug.cgi?id=60014
--- Comment #4 from Andrea Vettori ---
Ok so I attached a test case. It's a simple Servlet that prints the request
body and a stripped down version of my form that calls the servlet.
With Apr connector I get the full string of (encoded) parame
https://bz.apache.org/bugzilla/show_bug.cgi?id=60014
--- Comment #2 from Andrea Vettori ---
Created attachment 34163
--> https://bz.apache.org/bugzilla/attachment.cgi?id=34163&action=edit
Test Case Sources
--
You are receiving this mail because:
You are the assignee for the bug.
https://bz.apache.org/bugzilla/show_bug.cgi?id=60014
--- Comment #3 from Andrea Vettori ---
Created attachment 34164
--> https://bz.apache.org/bugzilla/attachment.cgi?id=34164&action=edit
Test Case War
--
You are receiving this mail because:
You are the assignee for the bug.
https://bz.apache.org/bugzilla/show_bug.cgi?id=60014
Mark Thomas changed:
What|Removed |Added
Status|NEW |NEEDINFO
--- Comment #1 from Mark Thomas
Author: markt
Date: Fri Aug 19 17:00:18 2016
New Revision: 1756943
URL: http://svn.apache.org/viewvc?rev=1756943&view=rev
Log:
Add a new initialisation parameter, envHttpHeaders, to the CGI Servlet to
mitigate httpoxy (CVE-2016-5388) by default and to provide a mechanism that can
be used to miti
Author: markt
Date: Fri Aug 19 16:57:53 2016
New Revision: 1756942
URL: http://svn.apache.org/viewvc?rev=1756942&view=rev
Log:
Add a new initialisation parameter, envHttpHeaders, to the CGI Servlet to
mitigate httpoxy (CVE-2016-5388) by default and to provide a mechanism that can
be used to miti
Author: markt
Date: Fri Aug 19 16:57:16 2016
New Revision: 1756941
URL: http://svn.apache.org/viewvc?rev=1756941&view=rev
Log:
Add a new initialisation parameter, envHttpHeaders, to the CGI Servlet to
mitigate httpoxy (CVE-2016-5388) by default and to provide a mechanism that can
be used to miti
Author: markt
Date: Fri Aug 19 16:56:33 2016
New Revision: 1756940
URL: http://svn.apache.org/viewvc?rev=1756940&view=rev
Log:
Add a new initialisation parameter, envHttpHeaders, to the CGI Servlet to
mitigate httpoxy (CVE-2016-5388) by default and to provide a mechanism that can
be used to miti
Author: markt
Date: Fri Aug 19 16:38:47 2016
New Revision: 1756939
URL: http://svn.apache.org/viewvc?rev=1756939&view=rev
Log:
Add a new initialisation parameter, envHttpHeaders, to the CGI Servlet to
mitigate httpoxy (CVE-2016-5388) by default and to provide a mechanism that can
be used to miti
Author: markt
Date: Fri Aug 19 15:17:54 2016
New Revision: 1756922
URL: http://svn.apache.org/viewvc?rev=1756922&view=rev
Log:
Changes to allowLinking now invalidate the cache if caching is enabled.
Modified:
tomcat/tc8.0.x/trunk/ (props changed)
tomcat/tc8.0.x/trunk/java/org/apache/cat
Author: markt
Date: Fri Aug 19 15:17:09 2016
New Revision: 1756921
URL: http://svn.apache.org/viewvc?rev=1756921&view=rev
Log:
Changes to allowLinking now invalidate the cache if caching is enabled.
Modified:
tomcat/tc8.5.x/trunk/ (props changed)
tomcat/tc8.5.x/trunk/java/org/apache/cat
https://bz.apache.org/bugzilla/show_bug.cgi?id=60014
Christopher Schultz changed:
What|Removed |Added
Summary|Nio2 Connector with SLL |NIO2 Connector with SSL
Author: markt
Date: Fri Aug 19 10:14:28 2016
New Revision: 1756898
URL: http://svn.apache.org/viewvc?rev=1756898&view=rev
Log:
Changes to allowLinking now invalidate the cache if caching is enabled.
Modified:
tomcat/trunk/java/org/apache/catalina/webresources/StandardRoot.java
tomcat/trun
https://bz.apache.org/bugzilla/show_bug.cgi?id=59708
--- Comment #5 from Mark Thomas ---
Yes, authentication is now always checked so Tomcat can vary the behaviour
during a lock out depending on whether the authentication credentials provided
were valid or not.
For more details, you can always l
https://bz.apache.org/bugzilla/show_bug.cgi?id=60012
Violeta Georgieva changed:
What|Removed |Added
Resolution|--- |FIXED
Status|NEW
Author: violetagg
Date: Fri Aug 19 07:49:53 2016
New Revision: 1756879
URL: http://svn.apache.org/viewvc?rev=1756879&view=rev
Log:
Fix https://bz.apache.org/bugzilla/show_bug.cgi?id=60012
Improvements in the log messages. Based on suggestions by Nemo Chen.
Modified:
tomcat/tc8.5.x/trunk/ (p
https://bz.apache.org/bugzilla/show_bug.cgi?id=60013
santhanapreeth...@gmail.com changed:
What|Removed |Added
CC||santhanapreeth...@gmail.co
Author: violetagg
Date: Fri Aug 19 07:45:06 2016
New Revision: 1756878
URL: http://svn.apache.org/viewvc?rev=1756878&view=rev
Log:
Fix https://bz.apache.org/bugzilla/show_bug.cgi?id=60012
Improvements in the log messages. Based on suggestions by Nemo Chen.
Modified:
tomcat/trunk/java/org/apac
19 matches
Mail list logo
