DO NOT REPLY [Bug 48192] Allow to specify the SSLSocket class in connector tag of server.xml

2009-11-20 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=48192 Ralf Hauser changed: What|Removed |Added Status|RESOLVED|REOPENED Resolution|WONTFIX

Re: SSL MITM status update

2009-11-20 Thread Rainer Jung
Sounds good to me, thanks! Info not yet ready for users@: On d...@httpd there is discusion, whether to fix request splicing attacks by dropping the buffer, therefore effectively not allowing to combine a partial request before reneg with the request coming after the reneg. Although we don't know y

Re: SSL MITM status update

2009-11-20 Thread Mark Thomas
Rainer Jung wrote: > Sounds good to me, thanks! > > Info not yet ready for users@: On d...@httpd there is discusion, whether > to fix request splicing attacks by dropping the buffer, therefore > effectively not allowing to combine a partial request before reneg with > the request coming after the

Re: svn commit: r882320 - in /tomcat/trunk/java/org/apache/tomcat/util/net/jsse: JSSESocketFactory.java JSSESupport.java

2009-11-20 Thread Mark Thomas
Bill Barker wrote: > This looks like it should work (haven't tested it yet), but hoping that > there are people that can test on non-Sun JVMs to see if there could be > problems. This patch is a little heavy on knowing how the JVM implements > things :(. Yes, I was testing on a recent Sun 1.6

DO NOT REPLY [Bug 48236] another workaround for CVE-2009-3555 for the BIO connector

2009-11-20 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=48236 --- Comment #5 from Mark Thomas 2009-11-20 01:48:50 GMT --- Nothing formal, and the nature of the tests is such it might take a little longer than usual to set up something with the Tomcat JUnit tests. My testing uses a simple webapp that

DO NOT REPLY [Bug 48248] New: tribes.group.interceptors.MessageDispatchInterceptor.run should be volatile

2009-11-20 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=48248 Summary: tribes.group.interceptors.MessageDispatchInterceptor.r un should be volatile Product: Tomcat 7 Version: trunk Platform: PC OS/Version: Windows XP Sta

DO NOT REPLY [Bug 48248] tribes.group.interceptors.MessageDispatchInterceptor.run should be volatile

2009-11-20 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=48248 --- Comment #1 from Sebb 2009-11-20 05:02:32 UTC --- Ditto for: org.apache.catalina.tribes.group.interceptors.TcpPingInterceptor.running org.apache.catalina.tribes.group.GroupChannel.HeartbeatThread.doRun org.apache.catalina.tribes.members

DO NOT REPLY [Bug 48249] New: org.apache.tomcat.util.net.NioBlockingSelector.BlockPoller.run <= volatile

2009-11-20 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=48249 Summary: org.apache.tomcat.util.net.NioBlockingSelector.BlockPo ller.run <= volatile Product: Tomcat 7 Version: trunk Platform: PC OS/Version: Windows XP Stat

DO NOT REPLY [Bug 48250] New: Character Encoding on HTTP Conector

2009-11-20 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=48250 Summary: Character Encoding on HTTP Conector Product: Tomcat 5 Version: Unknown Platform: PC OS/Version: Linux Status: NEW Severity: blocker Priority: P2

svn commit: r882547 - /tomcat/trunk/java/org/apache/tomcat/util/http/fileupload/ParameterParser.java

2009-11-20 Thread markt
Author: markt Date: Fri Nov 20 13:42:34 2009 New Revision: 882547 URL: http://svn.apache.org/viewvc?rev=882547&view=rev Log: Fix error in previous commit Modified: tomcat/trunk/java/org/apache/tomcat/util/http/fileupload/ParameterParser.java Modified: tomcat/trunk/java/org/apache/tomcat/ut

svn commit: r882550 - in /tomcat/trunk: java/org/apache/catalina/ java/org/apache/catalina/connector/ java/org/apache/catalina/core/ java/org/apache/catalina/deploy/ java/org/apache/catalina/manager/

2009-11-20 Thread markt
Author: markt Date: Fri Nov 20 13:46:21 2009 New Revision: 882550 URL: http://svn.apache.org/viewvc?rev=882550&view=rev Log: Start to hook-up the commons-file upload port to the Servlet3 file upload API - Make sure the upload config is available when required - Start to migrate the HTML manager

DO NOT REPLY [Bug 48252] New: StackOverflowError in NioEndpoint.setProperty when setting jkHome

2009-11-20 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=48252 Summary: StackOverflowError in NioEndpoint.setProperty when setting jkHome Product: Tomcat 6 Version: 6.0.20 Platform: PC OS/Version: Windows Vista Status: NE

Re: SSL MITM status update

2009-11-20 Thread Filip Hanik - Dev Lists
On 11/19/2009 04:20 PM, Mark Thomas wrote: and 5.5.28 does not don't think there is a HTTP NIO in 5.5.x Filip - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apa

DO NOT REPLY [Bug 48252] StackOverflowError in NioEndpoint.setProperty when setting jkHome

2009-11-20 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=48252 --- Comment #1 from Filip Hanik 2009-11-20 08:47:26 UTC --- Created an attachment (id=24573) --> (https://issues.apache.org/bugzilla/attachment.cgi?id=24573) Tomcat 6.0 patch -- Configure bugmail: https://issues.apache.org/bugzilla/userp

svn commit: r882638 - /tomcat/tc6.0.x/trunk/STATUS.txt

2009-11-20 Thread fhanik
Author: fhanik Date: Fri Nov 20 16:48:29 2009 New Revision: 882638 URL: http://svn.apache.org/viewvc?rev=882638&view=rev Log: bugfix Modified: tomcat/tc6.0.x/trunk/STATUS.txt Modified: tomcat/tc6.0.x/trunk/STATUS.txt URL: http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/STATUS.txt?rev=8826

svn commit: r882640 - in /tomcat/trunk/java/org/apache/tomcat/util: IntrospectionUtils.java net/AbstractEndpoint.java

2009-11-20 Thread fhanik
Author: fhanik Date: Fri Nov 20 16:57:31 2009 New Revision: 882640 URL: http://svn.apache.org/viewvc?rev=882640&view=rev Log: https://issues.apache.org/bugzilla/show_bug.cgi?id=48252 Fix potential recursion Modified: tomcat/trunk/java/org/apache/tomcat/util/IntrospectionUtils.java tomcat

Re: SSL MITM status update

2009-11-20 Thread Mark Thomas
Filip Hanik - Dev Lists wrote: > On 11/19/2009 04:20 PM, Mark Thomas wrote: >> and 5.5.28 does not >> > don't think there is a HTTP NIO in 5.5.x There isn't. I'll remove that reference. Mark - To unsubscribe, e-mail: dev-

DO NOT REPLY [Bug 48252] StackOverflowError in NioEndpoint.setProperty when setting jkHome

2009-11-20 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=48252 --- Comment #2 from James Dobson 2009-11-20 09:26:52 UTC --- Works for me, thanks! -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee

DO NOT REPLY [Bug 48191] Problem with mod_jk 1.2.28 - Can not render up the page on browser after a long wait

2009-11-20 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=48191 --- Comment #3 from thomas200...@yahoo.de 2009-11-20 09:28:10 UTC --- Further infomation: I took out the socket_timeout and reply_timeout. Here again my workers.properties: worker.worker_portfolio_son1.connection_pool_timeout=600 worker.wo

DO NOT REPLY [Bug 48191] Problem with mod_jk 1.2.28 - Can not render up the page on browser after a long wait

2009-11-20 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=48191 --- Comment #4 from Rainer Jung 2009-11-20 10:57:11 UTC --- OK, so we know, that this problem here (errno=11 during read) comes from the socket_timeout. Concerning your other observation: that is a totally different problem, even if it lo

svn commit: r882690 - in /tomcat/trunk/java: javax/servlet/http/ org/apache/catalina/connector/ org/apache/catalina/core/ org/apache/catalina/manager/ org/apache/catalina/startup/ org/apache/tomcat/ut

2009-11-20 Thread markt
Author: markt Date: Fri Nov 20 19:27:11 2009 New Revision: 882690 URL: http://svn.apache.org/viewvc?rev=882690&view=rev Log: Complete the FileUpload implementation and use it for the html manager app. Added: tomcat/trunk/java/org/apache/catalina/core/StandardPart.java (with props) Modified:

[SECURITY] CVE-2009-3555 SSL Man-In-The-Middle attack - Status update

2009-11-20 Thread Mark Thomas
Overview The purpose of this update is provide information on the current understanding so users are better informed when making decisions regarding risk mitigation for this issue in their environment. Work on the root cause is progressing but is still in a state of flux. Discussion is f

svn commit: r882723 - in /tomcat/trunk/modules/jdbc-pool: ./ doc/ java/org/apache/tomcat/jdbc/pool/ java/org/apache/tomcat/jdbc/pool/jmx/

2009-11-20 Thread fhanik
Author: fhanik Date: Fri Nov 20 21:39:36 2009 New Revision: 882723 URL: http://svn.apache.org/viewvc?rev=882723&view=rev Log: Add in DataSource supprot Add in XA support Modified: tomcat/trunk/modules/jdbc-pool/.classpath tomcat/trunk/modules/jdbc-pool/doc/jdbc-pool.xml tomcat/trunk/

DO NOT REPLY [Bug 48253] New: Tomcat Native patch - adding dynamic locking callbacks for openssl engines

2009-11-20 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=48253 Summary: Tomcat Native patch - adding dynamic locking callbacks for openssl engines Product: Tomcat Native Version: unspecified Platform: All OS/Version: All