https://bz.apache.org/bugzilla/show_bug.cgi?id=59220
--- Comment #7 from Scott Nicklous ---
Hi Violeta,
That would be a potential workaround for the timeout case. I would have to
ensure that the Pluto listener runs after all AsyncListeners registered by the
portlet applications.
It would be a l
https://bz.apache.org/bugzilla/show_bug.cgi?id=59220
--- Comment #8 from Violeta Georgieva ---
If you wait for Tomcat to invoke a complete(), then this will be an error
situation and as it is per spec Tomcat will set the response code to 500. Isn't
that a problem from application point of view?
https://bz.apache.org/bugzilla/show_bug.cgi?id=59220
--- Comment #9 from Scott Nicklous ---
In the specific case addressed by this bug report, both onTimeout() and
onComplete() are correctly called as long as the buffer is not flushed.
The problem occurs only when the buffer was flushed at leas
https://bz.apache.org/bugzilla/show_bug.cgi?id=59220
--- Comment #10 from Violeta Georgieva ---
(In reply to Scott Nicklous from comment #9)
> In the specific case addressed by this bug report, both onTimeout() and
> onComplete() are correctly called as long as the buffer is not flushed.
>
> Th
https://bz.apache.org/bugzilla/show_bug.cgi?id=59243
--- Comment #7 from Mark Thomas ---
Bugzilla is not a support forum. Your questions belong on the users mailing
list.
--
You are receiving this mail because:
You are the assignee for the bug.
-
https://bz.apache.org/bugzilla/show_bug.cgi?id=59220
--- Comment #11 from Mark Thomas ---
It is worth taking a look to see if we can get consistent behaviour with and
without flush. The client won't see the same result but hopefully the app will
be able to see a consistent set of events.
--
You
Author: markt
Date: Wed Mar 30 09:42:21 2016
New Revision: 1737088
URL: http://svn.apache.org/viewvc?rev=1737088&view=rev
Log: (empty)
Modified:
tomcat/trunk/webapps/docs/config/ajp.xml
tomcat/trunk/webapps/docs/config/http.xml
Modified: tomcat/trunk/webapps/docs/config/ajp.xml
URL:
htt
The Buildbot has detected a build exception on builder tomcat-trunk while
building . Full details are available at:
https://ci.apache.org/builders/tomcat-trunk/builds/1210
Buildbot URL: https://ci.apache.org/
Buildslave for this Build: silvanus_ubuntu
Build Reason: The AnyBranchScheduler sc
https://bz.apache.org/bugzilla/show_bug.cgi?id=59220
--- Comment #12 from Scott Nicklous ---
I would not see a problem in handling the SC=500 as long as onComplete() is
called. It would seem to me to be the specified behavior.
In the case of Pluto, the SC=500 along with any Tomcat-generated err
Author: markt
Revision: 1737088
Modified property: svn:log
Modified: svn:log at Wed Mar 30 10:09:55 2016
--
--- svn:log (original)
+++ svn:log Wed Mar 30 10:09:55 2016
@@ -0,0 +1 @@
+No need to specify default format
---
Author: markt
Date: Wed Mar 30 10:10:31 2016
New Revision: 1737089
URL: http://svn.apache.org/viewvc?rev=1737089&view=rev
Log:
Better format for the comparison table headings
Align HTTP and AJP row descriptions
Be more explicit about Headers and Bodies
Modified:
tomcat/trunk/webapps/docs/conf
The Buildbot has detected a restored build on builder tomcat-trunk while
building . Full details are available at:
https://ci.apache.org/builders/tomcat-trunk/builds/1211
Buildbot URL: https://ci.apache.org/
Buildslave for this Build: silvanus_ubuntu
Build Reason: The AnyBranchScheduler sch
Author: markt
Date: Wed Mar 30 10:40:54 2016
New Revision: 1737095
URL: http://svn.apache.org/viewvc?rev=1737095&view=rev
Log:
No need to specify default format
Better format for the comparison table headings
Align HTTP and AJP row descriptions
Be more explicit about Headers and Bodies
Modified:
Author: markt
Date: Wed Mar 30 10:53:30 2016
New Revision: 1737097
URL: http://svn.apache.org/viewvc?rev=1737097&view=rev
Log:
No need to specify default format
Better format for the comparison table headings
Align HTTP and AJP row descriptions
Be more explicit about Headers and Bodies
Modified:
Author: markt
Date: Wed Mar 30 10:58:45 2016
New Revision: 1737099
URL: http://svn.apache.org/viewvc?rev=1737099&view=rev
Log:
Clarify which Java based connector will be used.
Modified:
tomcat/tc7.0.x/trunk/webapps/docs/config/ajp.xml
Modified: tomcat/tc7.0.x/trunk/webapps/docs/config/ajp.xm
Author: markt
Date: Wed Mar 30 11:01:02 2016
New Revision: 1737100
URL: http://svn.apache.org/viewvc?rev=1737100&view=rev
Log:
Fix https://bz.apache.org/bugzilla/show_bug.cgi?id=59229
Fix regression in r1704287
Align/improve row titles
Modified:
tomcat/tc7.0.x/trunk/webapps/docs/changelog.xml
https://bz.apache.org/bugzilla/show_bug.cgi?id=59229
Mark Thomas changed:
What|Removed |Added
Resolution|--- |FIXED
Status|NEW
Author: markt
Date: Wed Mar 30 11:38:38 2016
New Revision: 1737104
URL: http://svn.apache.org/viewvc?rev=1737104&view=rev
Log:
Log key APRListener config values at start.
Modified:
tomcat/trunk/java/org/apache/catalina/core/AprLifecycleListener.java
tomcat/trunk/java/org/apache/catalina/c
Author: markt
Date: Wed Mar 30 11:39:11 2016
New Revision: 1737105
URL: http://svn.apache.org/viewvc?rev=1737105&view=rev
Log:
Include TLS implementation name in connector
Modified:
tomcat/trunk/java/org/apache/coyote/http11/AbstractHttp11JsseProtocol.java
tomcat/trunk/java/org/apache/coy
On 30/03/2016 12:39, ma...@apache.org wrote:
> Author: markt
> Date: Wed Mar 30 11:39:11 2016
> New Revision: 1737105
>
> URL: http://svn.apache.org/viewvc?rev=1737105&view=rev
> Log:
> Include TLS implementation name in connector
I thought about adding -none- to the HTTP and AJP connectors for a
The Buildbot has detected a new failure on builder tomcat-7-trunk while
building . Full details are available at:
https://ci.apache.org/builders/tomcat-7-trunk/builds/369
Buildbot URL: https://ci.apache.org/
Buildslave for this Build: silvanus_ubuntu
Build Reason: The AnyBranchScheduler sch
2016-03-30 6:41 GMT-05:00 Mark Thomas :
> On 30/03/2016 12:39, ma...@apache.org wrote:
> > Author: markt
> > Date: Wed Mar 30 11:39:11 2016
> > New Revision: 1737105
> >
> > URL: http://svn.apache.org/viewvc?rev=1737105&view=rev
> > Log:
> > Include TLS implementation name in connector
>
> I thoug
On 30/03/2016 14:14, Rémy Maucherat wrote:
> 2016-03-30 6:41 GMT-05:00 Mark Thomas :
>
>> On 30/03/2016 12:39, ma...@apache.org wrote:
>>> Author: markt
>>> Date: Wed Mar 30 11:39:11 2016
>>> New Revision: 1737105
>>>
>>> URL: http://svn.apache.org/viewvc?rev=1737105&view=rev
>>> Log:
>>> Include
Author: markt
Date: Wed Mar 30 13:18:39 2016
New Revision: 1737112
URL: http://svn.apache.org/viewvc?rev=1737112&view=rev
Log:
Fix typo
Modified:
tomcat/trunk/java/org/apache/coyote/http11/Http11Nio2Protocol.java
Modified: tomcat/trunk/java/org/apache/coyote/http11/Http11Nio2Protocol.java
UR
Author: markt
Date: Wed Mar 30 14:52:41 2016
New Revision: 1737117
URL: http://svn.apache.org/viewvc?rev=1737117&view=rev
Log:
Chnage honorCipherOrder default to false.
Modified:
tomcat/trunk/conf/server.xml
tomcat/trunk/java/org/apache/coyote/http2/Http2UpgradeHandler.java
tomcat/tru
Author: markt
Date: Wed Mar 30 15:05:18 2016
New Revision: 1737120
URL: http://svn.apache.org/viewvc?rev=1737120&view=rev
Log:
Align with file name patterns used elsewhere
Modified:
tomcat/trunk/conf/server.xml
Modified: tomcat/trunk/conf/server.xml
URL:
http://svn.apache.org/viewvc/tomcat/
Dear Wiki user,
You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change
notification.
The "Security/Ciphers" page has been changed by markt:
https://wiki.apache.org/tomcat/Security/Ciphers?action=diff&rev1=7&rev2=8
Comment:
Add some newer Tomcat 9 results.
== JSSE
Author: markt
Date: Wed Mar 30 14:56:10 2016
New Revision: 1737119
URL: http://svn.apache.org/viewvc?rev=1737119&view=rev
Log:
Enable strong DH keys by default
Modified:
tomcat/trunk/bin/catalina.bat
tomcat/trunk/bin/catalina.sh
tomcat/trunk/webapps/docs/changelog.xml
Modified: tomca
I'm currently looking (again) at Tomcat's default TLS configuration with
SSLLabs. The initial results are promising. A few tweaks has got the
default Tomcat 9 + NIO with JSSE to a grade A.
I'm currently looking at Tomcat 9 + NIO with OpenSSL. The grade is
capped at B because we don't send the full
2016-03-28 12:59 GMT+03:00 Mark Thomas :
> On 28/03/2016 10:51, ma...@apache.org wrote:
>> Author: markt
>> Date: Mon Mar 28 09:51:14 2016
>> New Revision: 1736849
>>
>> URL: http://svn.apache.org/viewvc?rev=1736849&view=rev
>> Log:
>> TLSv1 is not exactly the same as SSLv3. Some ciphers are only a
2016-03-30 10:38 GMT-05:00 Mark Thomas :
> I'm currently looking (again) at Tomcat's default TLS configuration with
> SSLLabs. The initial results are promising. A few tweaks has got the
> default Tomcat 9 + NIO with JSSE to a grade A.
>
> I'm currently looking at Tomcat 9 + NIO with OpenSSL. The
In addition to the object array size restoration made in 1731735, I think
that another erroneous change that I submitted slipped in to your patch. I
noticed it while poking around at tomcat-8.5.0.Beta. Now when you add a
host you get a button that just contains {5} where the persist button that
I p
Author: remm
Date: Wed Mar 30 18:19:13 2016
New Revision: 1737140
URL: http://svn.apache.org/viewvc?rev=1737140&view=rev
Log:
Remove code that was mistakenly added when implementing 48674.
Modified:
tomcat/trunk/java/org/apache/catalina/manager/host/HTMLHostManagerServlet.java
tomcat/tru
Author: remm
Date: Wed Mar 30 18:21:06 2016
New Revision: 1737142
URL: http://svn.apache.org/viewvc?rev=1737142&view=rev
Log:
Remove code that was mistakenly added when implementing 48674.
Modified:
tomcat/tc8.5.x/trunk/java/org/apache/catalina/manager/host/HTMLHostManagerServlet.java
to
https://bz.apache.org/bugzilla/show_bug.cgi?id=59253
Bug ID: 59253
Summary: Read/Write errors
Product: Tomcat 8
Version: 8.0.32
Hardware: All
OS: Linux
Status: NEW
Severity: normal
Priority: P2
https://bz.apache.org/bugzilla/show_bug.cgi?id=59247
--- Comment #3 from Remy Maucherat ---
There's nothing about the webapp in the stacktrace, so it shouldn't be added in
that section, which is the most sensitive.
The permission can be added to the following section instead:
grant codeBase "fil
https://bz.apache.org/bugzilla/show_bug.cgi?id=59247
--- Comment #4 from Coty Sutherland ---
Yes, testing confirms that adding the permission to the tomcat-juli.jar section
resolves the issue as well.
--
You are receiving this mail because:
You are the assignee for the bug.
---
To whom it may engage...
This is an automated request, but not an unsolicited one. For
more information please visit http://gump.apache.org/nagged.html,
and/or contact the folk at gene...@gump.apache.org.
Project tomcat-native-trunk-make has an issue affecting its community
integration
Author: remm
Date: Wed Mar 30 19:08:33 2016
New Revision: 1737149
URL: http://svn.apache.org/viewvc?rev=1737149&view=rev
Log:
59247: Add loader package access permission to JULI. Based on a patch submitted
by Coty Sutherland.
Modified:
tomcat/trunk/conf/catalina.policy
tomcat/trunk/webap
Author: remm
Date: Wed Mar 30 19:15:01 2016
New Revision: 1737150
URL: http://svn.apache.org/viewvc?rev=1737150&view=rev
Log:
59247: Add loader package access permission to JULI. Based on a patch submitted
by Coty Sutherland.
Modified:
tomcat/tc8.5.x/trunk/conf/catalina.policy
tomcat/tc8
Author: remm
Date: Wed Mar 30 19:15:14 2016
New Revision: 1737151
URL: http://svn.apache.org/viewvc?rev=1737151&view=rev
Log:
59247: Add loader package access permission to JULI. Based on a patch submitted
by Coty Sutherland.
Modified:
tomcat/tc8.0.x/trunk/conf/catalina.policy
tomcat/tc8
Author: remm
Date: Wed Mar 30 19:16:52 2016
New Revision: 1737153
URL: http://svn.apache.org/viewvc?rev=1737153&view=rev
Log:
59247: Add loader package access permission to JULI. Based on a patch submitted
by Coty Sutherland.
Modified:
tomcat/tc6.0.x/trunk/conf/catalina.policy
tomcat/tc6
Author: remm
Date: Wed Mar 30 19:16:41 2016
New Revision: 1737152
URL: http://svn.apache.org/viewvc?rev=1737152&view=rev
Log:
59247: Add loader package access permission to JULI. Based on a patch submitted
by Coty Sutherland.
Modified:
tomcat/tc7.0.x/trunk/conf/catalina.policy
tomcat/tc7
https://bz.apache.org/bugzilla/show_bug.cgi?id=59247
Remy Maucherat changed:
What|Removed |Added
Status|NEW |RESOLVED
Resolution|---
Author: markt
Date: Wed Mar 30 19:27:29 2016
New Revision: 1737154
URL: http://svn.apache.org/viewvc?rev=1737154&view=rev
Log:
Add support for obtaining the certificate chain from a Java keystore
Modified:
tomcat/native/trunk/native/src/sslcontext.c
tomcat/native/trunk/xdocs/miscellaneous
Author: markt
Date: Wed Mar 30 19:28:05 2016
New Revision: 1737155
URL: http://svn.apache.org/viewvc?rev=1737155&view=rev
Log:
Add the new method for setting the certificate chain from a keystore
Modified:
tomcat/trunk/java/org/apache/tomcat/jni/SSLContext.java
Modified: tomcat/trunk/java/or
Author: markt
Date: Wed Mar 30 19:30:20 2016
New Revision: 1737157
URL: http://svn.apache.org/viewvc?rev=1737157&view=rev
Log:
Add the code (commented out else it will cause problems on systems without the
method) to set the certificate chain when using NIO/NIO2 + OpenSSL + JSSE config
Modified:
On 30/03/2016 20:27, ma...@apache.org wrote:
> Author: markt
> Date: Wed Mar 30 19:27:29 2016
> New Revision: 1737154
>
> URL: http://svn.apache.org/viewvc?rev=1737154&view=rev
> Log:
> Add support for obtaining the certificate chain from a Java keystore
This needs a review by someone who knows C
Dear Wiki user,
You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change
notification.
The "Security/Ciphers" page has been changed by markt:
https://wiki.apache.org/tomcat/Security/Ciphers?action=diff&rev1=8&rev2=9
Comment:
Update Tomcat 9 results
|| Tomcat 7 (JSSE)
The Buildbot has detected a new failure on builder tomcat-8-trunk while
building . Full details are available at:
https://ci.apache.org/builders/tomcat-8-trunk/builds/524
Buildbot URL: https://ci.apache.org/
Buildslave for this Build: silvanus_ubuntu
Build Reason: The AnyBranchScheduler sch
https://bz.apache.org/bugzilla/show_bug.cgi?id=59247
--- Comment #6 from Coty Sutherland ---
Created attachment 33712
--> https://bz.apache.org/bugzilla/attachment.cgi?id=33712&action=edit
stack trace for tomcat6 denial
I accidentally neglected to test tomcat6 earlier, but the addition to the
https://bz.apache.org/bugzilla/show_bug.cgi?id=59247
--- Comment #7 from Coty Sutherland ---
Created attachment 33713
--> https://bz.apache.org/bugzilla/attachment.cgi?id=33713&action=edit
patch proposal to resolve the tomcat6 denial
And here is a patch that seemingly resolves the issue for re
https://bz.apache.org/bugzilla/show_bug.cgi?id=59247
--- Comment #8 from Konstantin Kolinko ---
>From "java.security.debug stack trace" attachment,
[[[
java.lang.Exception: Stack trace
at java.security.AccessController.throwACE(AccessController.java:144)
at
java.security.AccessController
2016-03-30 22:33 GMT+03:00 Mark Thomas :
> On 30/03/2016 20:27, ma...@apache.org wrote:
>> Author: markt
>> Date: Wed Mar 30 19:27:29 2016
>> New Revision: 1737154
>>
>> URL: http://svn.apache.org/viewvc?rev=1737154&view=rev
>> Log:
>> Add support for obtaining the certificate chain from a Java key
The Buildbot has detected a restored build on builder tomcat-7-trunk while
building . Full details are available at:
https://ci.apache.org/builders/tomcat-7-trunk/builds/370
Buildbot URL: https://ci.apache.org/
Buildslave for this Build: silvanus_ubuntu
Build Reason: The AnyBranchScheduler
> From: Mark Thomas [mailto:ma...@apache.org]
> Subject: Re: svn commit: r1737154 - in /tomcat/native/trunk:
> native/src/sslcontext.c xdocs/miscellaneous/changelog.xml
> The implementation is essentially a copy/paste of setCertificateRaw with
> what looked to be the right changes to remove the
2016-03-30 22:27 GMT+03:00 :
> Author: markt
> Date: Wed Mar 30 19:27:29 2016
> New Revision: 1737154
>
> URL: http://svn.apache.org/viewvc?rev=1737154&view=rev
> Log:
> Add support for obtaining the certificate chain from a Java keystore
>
> Modified:
> tomcat/native/trunk/native/src/sslconte
On 30/03/2016 21:31, Caldarale, Charles R wrote:
>> From: Mark Thomas [mailto:ma...@apache.org]
>> Subject: Re: svn commit: r1737154 - in /tomcat/native/trunk:
>> native/src/sslcontext.c xdocs/miscellaneous/changelog.xml
>
>> The implementation is essentially a copy/paste of setCertificateRaw wi
On 30/03/2016 21:41, Konstantin Kolinko wrote:
> 2016-03-30 22:27 GMT+03:00 :
>> Author: markt
>> Date: Wed Mar 30 19:27:29 2016
>> New Revision: 1737154
>>
>> URL: http://svn.apache.org/viewvc?rev=1737154&view=rev
>> Log:
>> Add support for obtaining the certificate chain from a Java keystore
>>
2016-03-30 15:43 GMT-05:00 Mark Thomas :
> > This implementation matches the code of setCertificateRaw(), I see no
> > obvious errors (just high-level review comparing the two methods).
>
> Thanks. I'll look at implementing these tomorrow.
>
> > I wonder about "idx" argument in setCertificateRaw(
Mark,
On 3/30/16 3:33 PM, Mark Thomas wrote:
> On 30/03/2016 20:27, ma...@apache.org wrote:
>> Author: markt
>> Date: Wed Mar 30 19:27:29 2016
>> New Revision: 1737154
>>
>> URL: http://svn.apache.org/viewvc?rev=1737154&view=rev
>> Log:
>> Add support for obtaining the certificate chain from a Jav
https://bz.apache.org/bugzilla/show_bug.cgi?id=59247
--- Comment #9 from Remy Maucherat ---
Evidently there's a "bug" somewhere if only the IBM JDK does this. However,
since this is only added to JULI, adding it is probably not a big issue [which
is why I did it], so having a workaround sounds ac
> From: Christopher Schultz
> Subject: RE: svn commit: r1737154 - in /tomcat/native/trunk:
> native/src/sslcontext.c xdocs/miscellaneous/changelog.xml
> Since bufferPtr is the byte array you want to use, you can probably just
> use that directly for the call to d2i_x509(). I think the
> malloc/me
Chuck,
On 3/30/16 5:10 PM, Caldarale, Charles R wrote:
>> From: Christopher Schultz
>> Subject: RE: svn commit: r1737154 - in /tomcat/native/trunk:
>> native/src/sslcontext.c xdocs/miscellaneous/changelog.xml
>
>> Since bufferPtr is the byte array you want to use, you can probably just
>> use th
https://bz.apache.org/bugzilla/show_bug.cgi?id=59229
--- Comment #10 from Huxing Zhang ---
Thanks for clarifying AJP is blocking for NIO connector for reading http
headers and request.
My bad not digging into the AJP code. I will take care from next time.
--
You are receiving this mail because
https://bz.apache.org/bugzilla/show_bug.cgi?id=59254
Bug ID: 59254
Summary: testWsCloseThenTcpResetWhenOnMessageSends failed for
APR
Product: Tomcat 7
Version: trunk
Hardware: PC
OS: Mac OS X 10.1
https://bz.apache.org/bugzilla/show_bug.cgi?id=59254
--- Comment #1 from Huxing Zhang ---
Created attachment 33715
--> https://bz.apache.org/bugzilla/attachment.cgi?id=33715&action=edit
Patch to fix the test case
--
You are receiving this mail because:
You are the assignee for the bug.
-
Hi,
I am wondering that is there any plan on setting up github mirror for tomcat
9.0.x/8.5.x branch?
If so, what is the ETA of it?
Thanks,
Huxing
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional comm
Sorry, 9.0.x mirror is already there, I mean the 8.5.x mirror.
--
From:Huxing Zhang
Time:2016 Mar 31 (Thu) 11:03
To:dev
Subject:tomcat 9.0.x/8.5.x github mirror
Hi,
I am wondering that is there any plan on setting up github mirro
69 matches
Mail list logo
