Re: svn commit: r1608840 [1/2] - in /tomcat/trunk: java/org/apache/tomcat/util/net/jsse/ java/org/apache/tomcat/util/net/jsse/openssl/ java/org/apache/tomcat/util/net/jsse/res/ webapps/docs/

2014-08-04 Thread Falco Schwarz
On that note I thought I'd share the cipher suites we have been using: kEECDH+ECDSA:kEECDH:kEDH:+SHA:-3DES:kRSA+3DES:!aNULL:!eNULL:!LOW:!MD5:!EXP:!DSS:!PSK:!SRP:!RC4:!SEED:!kECDH:!CAMELLIA - avoids using RC4 - prefers forward secrecy for all browsers except those, which do not support it - no se

Re: [VOTE] Release Apache Tomcat 8.0.10

2014-07-10 Thread Falco Schwarz
I am seeing NPEs after reloading a web application with a custom . Just downloaded the sample.war, added the following block in web.xml and thus reloaded the web application: /404.jsp Accessing a nonexisting page now results in NPE instead of error page being shown. After tomcat