Re: How-to disable SSL V3 on Tomcat 6.0.18.0

2015-01-29 Thread Terence M. Bandoian
On 1/29/2015 10:02 AM, Jammy Chen wrote: Hello Chuck, Thanks for replying, I understood this is old, our product has already upgraded to latest version, but somehow, some of our users are still in such old stage, they do not plan uptake now but they want disable SSL V3 as everybody know this is

Re: FIPS Mode enabling on Tomcat 7.00.057

2015-01-29 Thread Geett Chanddra Singha
Thanks Chris! Please find the inline comments from my side On 1/29/15 12:45 AM, Geett Chanddra Singha wrote: > I'm getting the following error when enabling FIPS mode on Apache > Tomcat: > > Jan 28, 2015 5:02:33 PM > org.apache.catalina.core.AprLifecycleListener lifecycleEvent > > SEVERE: Failed

Re: mod_jk and session stickiness

2015-01-29 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Rainer, On 7/23/14 5:14 PM, Christopher Schultz wrote: > Rainer, > > On 7/23/14, 4:10 PM, Rainer Jung wrote: >> Am 23.07.2014 um 21:03 schrieb Christopher Schultz: > >>> On 7/23/14, 1:49 PM, Rainer Jung wrote: > The other case, a request wit

Re: Tomcat sending 411 "Length Required" due to Chunked Transfer Encoding

2015-01-29 Thread Mark Thomas
On 29/01/2015 22:29, Jeff Kohut wrote: > My first post to Tomcat list, pardon me if I make any mistakes, > > Any help you can provide would be greatly appreciated. > > I have a Tomcat Server (V 7.0.54) running under Windows 2008 R2 With > Service Pack 1 (and up to date on Security as well as OS p

Re: Tomcat sending 411 "Length Required" due to Chunked Transfer Encoding

2015-01-29 Thread Konstantin Kolinko
2015-01-30 1:29 GMT+03:00 Jeff Kohut : > My first post to Tomcat list, pardon me if I make any mistakes, > > Any help you can provide would be greatly appreciated. > > I have a Tomcat Server (V 7.0.54) running under Windows 2008 R2 With > Service Pack 1 (and up to date on Security as well as OS pat

Tomcat sending 411 "Length Required" due to Chunked Transfer Encoding

2015-01-29 Thread Jeff Kohut
My first post to Tomcat list, pardon me if I make any mistakes, Any help you can provide would be greatly appreciated. I have a Tomcat Server (V 7.0.54) running under Windows 2008 R2 With Service Pack 1 (and up to date on Security as well as OS patches). That server is running a vendor supplied g

Re: How-to disable SSL V3 on Tomcat 6.0.18.0

2015-01-29 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jammy, On 1/29/15 11:02 AM, Jammy Chen wrote: > Thanks for replying, I understood this is old, our product has > already upgraded to latest version, but somehow, some of our users > are still in such old stage, they do not plan uptake now but they >

Re: How-to disable SSL V3 on Tomcat 6.0.18.0

2015-01-29 Thread Jammy Chen
Hello Chuck, Thanks for replying, I understood this is old, our product has already upgraded to latest version, but somehow, some of our users are still in such old stage, they do not plan uptake now but they want disable SSL V3 as everybody know this is big security vulnerability. *so now the i

Re: AJP connector address vs. IPv4/6

2015-01-29 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Andy, On 1/28/15 3:21 PM, Wang, Andy wrote: > On Fri, 2015-01-23 at 16:05 -0500, Christopher Schultz wrote: > >>> >>> If only one address per Connector can be specified, can you >>> not just use 2 s, one for each ? They should not >>> conflict. >>

Re: How to use Jasper to Parse JSP

2015-01-29 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Zhang, On 1/29/15 7:22 AM, t-zhang wrote: > I need a JSP codecheck tool (like PMD) But PMD's JSP parser is not > enouth. So I need a better JSPparser and I want to try Jasper as a > parser. What do you want your checker to do? Anything more than ma

Re: FIPS Mode enabling on Tomcat 7.00.057

2015-01-29 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Geett, On 1/29/15 12:45 AM, Geett Chanddra Singha wrote: > I'm getting the following error when enabling FIPS mode on Apache > Tomcat: > > Jan 28, 2015 5:02:33 PM > org.apache.catalina.core.AprLifecycleListener lifecycleEvent > > SEVERE: Failed to

Re: [ Tomcat8 ] [ SingleSignOn ] > 2 Webapplications

2015-01-29 Thread Leonid Rozenblyum
I wonder if it's possible in HttpSessionListener implementation get access to actual Tomcat's StandardSession? HttpSessionEvent contains reference to StandardSessionFacade. Otherwise I cannot access Manager, Context etc which should led me to SingleSignOn. Should I go through dangerous reflection

RE: How-to disable SSL V3 on Tomcat 6.0.18.0

2015-01-29 Thread Caldarale, Charles R
> From: Jammy Chen [mailto:jamm...@gmail.com] > Subject: How-to disable SSL V3 on Tomcat 6.0.18.0 > Do everybody knows how-to disable SSL v3 in older tomcat version > Server version: Apache Tomcat/6.0.18 > Server built: Jul 22 2008 02:00:36 Yes - move up to a current level and read the docs.

Re: How to use Jasper to Parse JSP

2015-01-29 Thread t-zhang
Thanks for your reply. I need a JSP codecheck tool (like PMD) But PMD's JSP parser is not enouth. So I need a better JSPparser and I want to try Jasper as a parser. Best Regards Tao Zhang On Tue, 27 Jan 2015 11:56:42 + Mark Thomas wrote: > On 27/01/2015 11:36, t-zhang wrote: > > Hi guys >

Re: [ Tomcat8 ] [ SingleSignOn ] > 2 Webapplications

2015-01-29 Thread Leonid Rozenblyum
Thanks for the great advice! On Thu, Jan 29, 2015 at 12:57 PM, Mark Thomas wrote: > On 29/01/2015 10:54, Leonid Rozenblyum wrote: >> Hello! I'm trying to extend the SingleSignOn valve and if possible >> could you point me how can I create a global session listener >> without modifying configurati

Re: [ Tomcat8 ] [ SingleSignOn ] > 2 Webapplications

2015-01-29 Thread Mark Thomas
On 29/01/2015 10:54, Leonid Rozenblyum wrote: > Hello! I'm trying to extend the SingleSignOn valve and if possible > could you point me how can I create a global session listener > without modifying configurations of web applications? > > The idea is that I should catch all 'session create' events

Re: [ Tomcat8 ] [ SingleSignOn ] > 2 Webapplications

2015-01-29 Thread Leonid Rozenblyum
Hello! I'm trying to extend the SingleSignOn valve and if possible could you point me how can I create a global session listener without modifying configurations of web applications? The idea is that I should catch all 'session create' events from all webapps, and if they have the 'custom SSO valv

How-to disable SSL V3 on Tomcat 6.0.18.0

2015-01-29 Thread Jammy Chen
Hello team, Do everybody knows how-to disable SSL v3 in older tomcat version, I have tried to variety solution including sslProtocols or sslEnabledProtocols but it both did not work well, the Firefox I am using to test is only select TLS 1 and result is that I were not able to access the site.