Re: Can i use Tomcat 7 catalina-ws.jar in Tomcat 8???

2015-06-24 Thread agharta
On 06/24/2015 06:04 PM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Agharta, On 6/24/15 11:17 AM, agharta wrote: Hi all, A rapid question: colud i place the tomcat 7 catalina-ws.jar inside a new tomcat 8 installation ? Why would you want to do something like th

Is Tomcat 7.0.62 vulnerable to these issues: CVE-2007-6750/CVE-2009-5111

2015-06-24 Thread Nikitha Benny
Hi, I am confused regarding the 2 security issues CVE-2007-6750 and CVE-2009-5111. Can they be tracked to CVE-2012-5568? According to CVE-2012-5568, I understand that this is not a vulnerability in Tomcat. Please confirm. When Tomcat 7.0.62 was scanned using McAfee Vulnerability Manager Tool, i

Disabling Naggle's algorithm / Setting tcpNoDelay programatically for web sockets

2015-06-24 Thread Ganesh Bms
Hi, As per tomcat's performance tuning doc, 'tcpNoDelay' can be enabled/disabled at connector level. Is there a programmatic way to set 'tcpNoDelay' to true for web socket connections ? I am using tomcat's proprietary web socket APIs in my application. I have gone though the API documentation of

Re: Tomcat 6 : saerching for a bug fix between 6.0.24 and 6.0.44

2015-06-24 Thread Pascal Abaziou
> Le 25 juin 2015 à 00:23, Mark Eggers a écrit : > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On 6/24/2015 2:40 PM, André Warnier wrote: >> Pascal Abaziou wrote: >>> Hello, >>> >>> I’m searching for the version that fixes a bug I’ve on a tomcat >>> 6.0.24 (on redhat). As I do not r

Re: Tomcat 6 : saerching for a bug fix between 6.0.24 and 6.0.44

2015-06-24 Thread Mark Eggers
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 6/24/2015 2:40 PM, André Warnier wrote: > Pascal Abaziou wrote: >> Hello, >> >> I’m searching for the version that fixes a bug I’ve on a tomcat >> 6.0.24 (on redhat). As I do not reproduce it on my windows >> workstation with tomcat 6.0.44, I nee

Re: Tomcat 6 : saerching for a bug fix between 6.0.24 and 6.0.44

2015-06-24 Thread André Warnier
Pascal Abaziou wrote: Hello, I’m searching for the version that fixes a bug I’ve on a tomcat 6.0.24 (on redhat). As I do not reproduce it on my windows workstation with tomcat 6.0.44, I need elements to argue to upgrade to the sys admin. So the bug : with a REST resource service implemented w

Tomcat 6 : saerching for a bug fix between 6.0.24 and 6.0.44

2015-06-24 Thread Pascal Abaziou
Hello, I’m searching for the version that fixes a bug I’ve on a tomcat 6.0.24 (on redhat). As I do not reproduce it on my windows workstation with tomcat 6.0.44, I need elements to argue to upgrade to the sys admin. So the bug : with a REST resource service implemented with Jersey, if there’s

Re: useServerCipherSuitesOrder in 7.0.62

2015-06-24 Thread Mark Thomas
On 24/06/2015 17:57, Christopher Schultz wrote: > Mark, > > On 6/24/15 12:45 PM, Mark Thomas wrote: >> On 24/06/2015 16:55, Christopher Schultz wrote: > >>> There are some related files (like Cipher.java), but start in >>> that class right there. I think a simple driver class could take >>> an Op

Re: useServerCipherSuitesOrder in 7.0.62

2015-06-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 6/24/15 12:45 PM, Mark Thomas wrote: > On 24/06/2015 16:55, Christopher Schultz wrote: > >> There are some related files (like Cipher.java), but start in >> that class right there. I think a simple driver class could take >> an OpenSSL-sty

Re: useServerCipherSuitesOrder in 7.0.62

2015-06-24 Thread Mark Thomas
On 24/06/2015 16:55, Christopher Schultz wrote: > There are some related files (like Cipher.java), but start in that > class right there. I think a simple driver class could take an > OpenSSL-style cipher string and dump-out the JSSE-compatible > (expanded) cipher suites string. The key mapping i

Re: Can i use Tomcat 7 catalina-ws.jar in Tomcat 8???

2015-06-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Agharta, On 6/24/15 11:17 AM, agharta wrote: > Hi all, > > A rapid question: colud i place the tomcat 7 catalina-ws.jar inside > a new tomcat 8 installation ? Why would you want to do something like that? > Is it compatibile? Probably not. > I'

Re: useServerCipherSuitesOrder in 7.0.62

2015-06-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 George, On 6/24/15 11:31 AM, George Stanchev wrote: > (Apologies for top posting, I cannot find a way to switch to ">" > quote for Outook) No problem. > Having an utility is interesting idea but it will not address the > regular expression rules

Re: Settings when SSL terminates on the front-end

2015-06-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jeff, On 6/24/15 11:39 AM, Jeffrey Janner wrote: >> -Original Message- From: Mark Thomas >> [mailto:ma...@apache.org] Sent: Tuesday, June 23, 2015 3:18 PM >> To: Tomcat Users List Subject: Re: Settings when SSL terminates >> on the front-en

RE: Settings when SSL terminates on the front-end

2015-06-24 Thread Jeffrey Janner
> -Original Message- > From: Mark Thomas [mailto:ma...@apache.org] > Sent: Tuesday, June 23, 2015 3:18 PM > To: Tomcat Users List > Subject: Re: Settings when SSL terminates on the front-end > > On 17/06/2015 19:08, Jeffrey Janner wrote: > > I've been deploying letting Tomcat do it all whe

RE: useServerCipherSuitesOrder in 7.0.62

2015-06-24 Thread George Stanchev
Hi Christopher, (Apologies for top posting, I cannot find a way to switch to ">" quote for Outook) Having an utility is interesting idea but it will not address the regular expression rules that OpenSSL support. For example, I was porting Mozilla's Server Side TLS ciphers [1] to our 7.0.62 the

Can i use Tomcat 7 catalina-ws.jar in Tomcat 8???

2015-06-24 Thread agharta
Hi all, A rapid question: colud i place the tomcat 7 catalina-ws.jar inside a new tomcat 8 installation ? Is it compatibile? I' ve not found any topic about it. If this qestion was already made, give me the link and sorry for my bad search. Thanks a lot, Agharta

Re: useServerCipherSuitesOrder in 7.0.62

2015-06-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 George, On 6/15/15 10:08 AM, George Stanchev wrote: > Is there any chance for the OpenSSL-style ciphers to be backported > to the 7 release line? I'm not sure. The biggest problem with the OpenSSL-style ciphers is maintaining the mapping, which mi

Re: the session tracking of tomcat 6 and tomcat 7 behaves strangely

2015-06-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Tim, On 6/24/15 7:15 AM, Tim Watts wrote: > On Wed, 2015-06-24 at 11:55 +0200, André Warnier wrote: >> Hi. >> >> Hi. >> >> The recommendation on this forum is to not use "top posting", but >> to keep the flow of conversation natural, and respond b

Re: persistance cache

2015-06-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Kaouthar, On 6/24/15 3:49 AM, Kaouthar Ghorbel wrote: > hello, I think it is a cache problem , because when I restart > tomcat the resulting list is correct, the problem lies only for > this method. Tomcat doesn't handle anything with persistence,

Re: the session tracking of tomcat 6 and tomcat 7 behaves strangely

2015-06-24 Thread Tim Watts
On Wed, 2015-06-24 at 11:55 +0200, André Warnier wrote: > Hi. > > Hi. > > The recommendation on this forum is to not use "top posting", but to keep the > flow of > conversation natural, and respond below the question to which your question > refers. > See http://tomcat.apache.org/lists.html, "

Re: the session tracking of tomcat 6 and tomcat 7 behaves strangely

2015-06-24 Thread André Warnier
Hi. Hi. The recommendation on this forum is to not use "top posting", but to keep the flow of conversation natural, and respond below the question to which your question refers. See http://tomcat.apache.org/lists.html, "Important", 6) I have modified you latest post accordingly below. chedana

Re: persistance cache

2015-06-24 Thread André Warnier
Hi. The recommendation on this forum is to not use "top posting", but to keep the flow of conversation natural, and respond below the question to which your question refers. See http://tomcat.apache.org/lists.html, "Important", 6) Kaouthar Ghorbel wrote: 2015-06-23 12:00 GMT+01:00 André Warn

Re: persistance cache

2015-06-24 Thread Kaouthar Ghorbel
hello, I think it is a cache problem , because when I restart tomcat the resulting list is correct, the problem lies only for this method. i use tomcat 8.0.2 2015-06-23 12:00 GMT+01:00 André Warnier : > hello. > > > Kaouthar Ghorbel wrote: > >> hello, >> I have a method that returns a list of it