RE: [OT] issues with Tomcat to Siteminder communication post mod-proxy setup

2022-07-13 Thread jonmcalexander
Could this potentially be caused by But not using Tomcat Native? Thanks, Dream * Excel * Explore * Inspire Jon McAlexander Senior Infrastructure Engineer Asst. Vice President He/His Middleware Product Engineering Enterprise CIO | EAS | Middleware | Infrastructure Solutions 8080 Cobbl

AW: [OT] issues with Tomcat to Siteminder communication post mod-proxy setup

2022-07-13 Thread Thomas Hoffmann (Speed4Trade GmbH)
Hello, > -Ursprüngliche Nachricht- > Von: jonmcalexan...@wellsfargo.com.INVALID > > Gesendet: Mittwoch, 13. Juli 2022 18:17 > An: users@tomcat.apache.org > Betreff: RE: [OT] issues with Tomcat to Siteminder communication post mod- > proxy setup > > Here is the error we are getting. The l

RE: [OT] issues with Tomcat to Siteminder communication post mod-proxy setup

2022-07-13 Thread jonmcalexander
Here is the error we are getting. The login form, hosted by Tomcat, does a POST to the /login/login.fcc for siteminder which is on the HTTPD server and is not behind the proxypass or proxypassreverse. javax.net.ssl|DEBUG|96|https-jsse-nio-8305-exec-1|2022-07-12 13:12:49.399 PDT|SSLSocketImpl.ja

Re: Apache Tomcat 8.5.82 Release Date

2022-07-13 Thread Mark Thomas
On 13/07/2022 10:46, Wai Siang, Chu wrote: Dear Apache Tomcat Team, We are aware there is a vulnerability found in the latest 8.5.xx version. *Low: Apache Tomcat XSS in examples web application* CVE-2022-34305 Hence, may we check i

Apache Tomcat 8.5.82 Release Date

2022-07-13 Thread Wai Siang, Chu
Dear Apache Tomcat Team, We are aware there is a vulnerability found in the latest 8.5.xx version. *Low: Apache Tomcat XSS in examples web application* CVE-2022-34305 Hence, may we check is there an estimated timeline for the *Apache

[ANN] Apache Tomcat Native 2.0.1 released

2022-07-13 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat Native 2.0.1 stable. The key features of this release are: - JNI API has been reduced to just that required to support Tomcat's OpenSSL based TLS implementation. The APR/native connector is no longer supported in th