Discouraging Rogue Users In Tomcat

2020-08-03 Thread Alan Basche
Hello, I have recently developed code for Tomcat 8.5 that defends against black-hats probing Tomcat and the website apps for vulnerabilities. This coding effort started a year ago, and the latest code has been running successfully on Tomcat 8.5.49 (Linux server) for about 3 months. I feel that To

Re: First impressions from OpenSSL 3.0.0 and TC 10.0.0-M7 plus tcnative 1.2.24

2020-08-03 Thread Felix Schumacher
Chris, Am 03.08.20 um 18:26 schrieb Christopher Schultz: > Rainer, > > On 8/3/20 07:03, Rainer Jung wrote: > > Hi Chris, hi all, > > > I ran build and tests for TC 10.0.0-M7 plus tcnative 1.2.24 and > > compared them between OpenSSL 3.0.0alpha5 and 1.1.1g plus patches. > > APR was always 1.7.0. >

Re: First impressions from OpenSSL 3.0.0 and TC 10.0.0-M7 plus tcnative 1.2.24

2020-08-03 Thread Rainer Jung
Hi Chris, hi all, I can't currently analyze the observed few failures that also happen in 1.1.1 due to time constraints. The patches for 1.1.1 I mentioned are just that I typically use a slightly newer version than the released one, because OpenSSL often accumulates quite a few patches befor

Re: First impressions from OpenSSL 3.0.0 and TC 10.0.0-M7 plus tcnative 1.2.24

2020-08-03 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Rainer, On 8/3/20 07:03, Rainer Jung wrote: > Hi Chris, hi all, > > I ran build and tests for TC 10.0.0-M7 plus tcnative 1.2.24 and > compared them between OpenSSL 3.0.0alpha5 and 1.1.1g plus patches. > APR was always 1.7.0. Thanks for trying this

First impressions from OpenSSL 3.0.0 and TC 10.0.0-M7 plus tcnative 1.2.24

2020-08-03 Thread Rainer Jung
Hi Chris, hi all, I ran build and tests for TC 10.0.0-M7 plus tcnative 1.2.24 and compared them between OpenSSL 3.0.0alpha5 and 1.1.1g plus patches. APR was always 1.7.0. - build warnings for tcnative using OpenSSL 3.0.0alpha5: src/ssl.c:422:5: warning: 'ENGINE_by_id' is deprecated [-Wdepre

svn commit: r1880531 - in /tomcat/site/trunk: docs/whoweare.html xdocs/whoweare.xml

2020-08-03 Thread remm
Author: remm Date: Mon Aug 3 09:19:16 2020 New Revision: 1880531 URL: http://svn.apache.org/viewvc?rev=1880531&view=rev Log: Fix Rajiv's first name. Modified: tomcat/site/trunk/docs/whoweare.html tomcat/site/trunk/xdocs/whoweare.xml Modified: tomcat/site/trunk/docs/whoweare.html URL: h