Re: Slides for ApacheCon EU Roadshow 2018

2018-06-30 Thread Huxing Zhang
>From the youtube playlist[1] of Apache EU roadshow, I can see Rainer's topic about Apache Web Server[2]. But I did not find any tomcat related topics there. So I guess not every talk is getting recorded? [1] https://www.youtube.com/playlist?list=PLU2OcwpQkYCyuV8Fza7dVAEg5FW2Pzg-8 [2] https://w

svn commit: r1834765 - /tomcat/tc8.5.x/trunk/build.xml

2018-06-30 Thread markt
Author: markt Date: Sat Jun 30 20:45:26 2018 New Revision: 1834765 URL: http://svn.apache.org/viewvc?rev=1834765&view=rev Log: Switch back to http for Javadoc as https causes build failures. Modified: tomcat/tc8.5.x/trunk/build.xml Modified: tomcat/tc8.5.x/trunk/build.xml URL: http://svn.ap

svn commit: r1834763 - in /tomcat/tc7.0.x/trunk: java/org/apache/naming/resources/VirtualDirContext.java test/org/apache/naming/resources/TestVirtualDirContext.java webapps/docs/changelog.xml

2018-06-30 Thread markt
Author: markt Date: Sat Jun 30 20:40:20 2018 New Revision: 1834763 URL: http://svn.apache.org/viewvc?rev=1834763&view=rev Log: Fix https://bz.apache.org/bugzilla/show_bug.cgi?id=62498 Correct a regression in the fix for CVE-2017-12617 that caused request failures for some requests when using the

[Bug 62498] FileDirContext validate not working properly for directories

2018-06-30 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62498 Mark Thomas changed: What|Removed |Added Resolution|--- |FIXED Status|NEEDINFO

svn commit: r1834761 - /tomcat/tc8.5.x/trunk/java/org/apache/catalina/authenticator/BasicAuthenticator.java

2018-06-30 Thread markt
Author: markt Date: Sat Jun 30 20:27:18 2018 New Revision: 1834761 URL: http://svn.apache.org/viewvc?rev=1834761&view=rev Log: Trivial whitespace clean-up to trigger CI build Modified: tomcat/tc8.5.x/trunk/java/org/apache/catalina/authenticator/BasicAuthenticator.java Modified: tomcat/tc8.

[Bug 62501] Race condition (?) in session attribute replication

2018-06-30 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62501 Mark Thomas changed: What|Removed |Added Status|NEW |RESOLVED Resolution|---

Re: Dynamic reloading of SSL certificates

2018-06-30 Thread Mark Thomas
On 30/06/18 16:27, Christopher Schultz wrote: > On 6/29/18 5:06 PM, Mark Thomas wrote: >> Ah! Those are only in 9.0.x. Are you looking at 8.5.x? It looks like a >> back-port is required. > > Yes, sorry, I am indeed looking at 8.5.x. Back-ports would be greatly > appreciated. Done. > As for th

[Bug 61565] Manager interface for reloading TLS config

2018-06-30 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=61565 --- Comment #4 from Mark Thomas --- Added to 8.5.x for 8.5.32 onwards. -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail: dev

svn commit: r1834760 - in /tomcat/tc8.5.x/trunk: ./ java/org/apache/catalina/manager/ java/org/apache/coyote/http11/ webapps/docs/

2018-06-30 Thread markt
Author: markt Date: Sat Jun 30 20:02:38 2018 New Revision: 1834760 URL: http://svn.apache.org/viewvc?rev=1834760&view=rev Log: Fix https://bz.apache.org/bugzilla/show_bug.cgi?id=61565 Add the ability to trigger a reloading of TLS host configuration (certificate and key files, server.xml is not re

[Bug 62273] Add support for alternate URL specification

2018-06-30 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62273 --- Comment #25 from remmeier --- no, just good to have that statement in terms of security for other people because this thing here causes a gigantic amount of issues since it affects in our case two dozen application with some beeing a bit la

Re: Plans for AJP

2018-06-30 Thread Mark Thomas
On 27/06/18 18:09, Mark Thomas wrote: > On 27/06/18 17:50, Rainer Jung wrote: >> So what do people think about: >> >> 1) adding a statement to the mod_jk docs, that we don't plan any feature >> enhancements and suggest users to migrate to mod_proxy_http and the TC >> HTTP connectors (but what ab

svn commit: r1834747 - in /tomcat/site/trunk/docs/connectors-doc/webserver_howto: apache.html printer/apache.html

2018-06-30 Thread kkolinko
Author: kkolinko Date: Sat Jun 30 16:03:02 2018 New Revision: 1834747 URL: http://svn.apache.org/viewvc?rev=1834747&view=rev Log: Fix a broken link in documentation. Modified: tomcat/site/trunk/docs/connectors-doc/webserver_howto/apache.html tomcat/site/trunk/docs/connectors-doc/webserver

svn commit: r1834746 - /tomcat/jk/trunk/xdocs/webserver_howto/apache.xml

2018-06-30 Thread kkolinko
Author: kkolinko Date: Sat Jun 30 16:00:51 2018 New Revision: 1834746 URL: http://svn.apache.org/viewvc?rev=1834746&view=rev Log: Fix a broken link in documentation. Modified: tomcat/jk/trunk/xdocs/webserver_howto/apache.xml Modified: tomcat/jk/trunk/xdocs/webserver_howto/apache.xml URL: ht

[Bug 62273] Add support for alternate URL specification

2018-06-30 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62273 --- Comment #24 from Christopher Schultz --- (In reply to remmeier from comment #21) > are there any security implications when relaxing a char like [ and ]? > Because there are other specifications like JSON API making heavy use these > two ch

[Bug 62500] Add Shell Script to Create CATALINA_BASE Directories

2018-06-30 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62500 --- Comment #15 from Christopher Schultz --- (In reply to Igal Sapir from comment #13) > While I could live with `ant`, I'd hate to make `Subversion` a requirement > here (or anywhere, for that matter). Oh, sure. I wasn't suggesting that /any/

Re: Dynamic reloading of SSL certificates

2018-06-30 Thread Christopher Schultz
Mark, On 6/29/18 5:06 PM, Mark Thomas wrote: > On 29/06/18 21:58, Christopher Schultz wrote: >> On 6/27/18 4:59 PM, Mark Thomas wrote: >>> On 27/06/18 17:21, Christopher Schultz wrote: > > > any objection to taking this code and putting it into the Connector under the public method re

Re: Slides for ApacheCon EU Roadshow 2018

2018-06-30 Thread Mark Thomas
On 29/06/18 10:27, Leon Rosenberg wrote: > This is not a wiki page, is it? So how do I add stuff there? ;-) If you have somewhere you can host it, post the link here and one of the committers will add it. If you prefer, post the PDF (or whatever) and it can be hosted on the Tomcat site. Mark >