Re: NullPointerExceptions from Coyote over SSL

2016-07-26 Thread Rémy Maucherat
2016-07-25 23:25 GMT+02:00 Peter Robbins : > > If you also have tomcat-native installed… > No tomcat-native in any environment I saw, but I’ll make sure we check on > that config. > > We’re not knowingly plugging Bouncy Castle into the Tomcat SSL mix at all. > We only use it in application logic a

Re: How to disable CSRF checks?

2016-07-26 Thread Mark Thomas
On 26/07/2016 11:18, Robert Alsdorff wrote: > Hey folks, > > during some tests I had several 403 Validation of CSRF security token > failed errors. Since it's only a testing system I'd like to disable > the CSRF checks but I don't find any information on how to do that. > Has anybody already done

How to disable CSRF checks?

2016-07-26 Thread Robert Alsdorff
Hey folks, during some tests I had several 403 Validation of CSRF security token failed errors. Since it's only a testing system I'd like to disable the CSRF checks but I don't find any information on how to do that. Has anybody already done that and can help me out?

Custom Key Manager

2016-07-26 Thread Amit Pande
In Tomcat (7.x+), there is a provision to hook in a custom implementation for trust manager by mentioning class name in connector's trustManagerClassName attribute. https://bz.apache.org/bugzilla/show_bug.cgi?id=48208 https://tomcat.apache.org/tomcat-7.0-doc/config/http.html I need to imple