How to comment out JSP directives

2024-07-02 Thread Aryeh Friedman
When I do the following the include is still done short of rewriting it to not be a include how do I comment it out correctly: -- Aryeh M. Friedman, Lead Developer, http://www.PetiteCloud.org - To unsubscribe, e-mail: users-u

Rotating/archiving catalina.out

2024-01-29 Thread Aryeh Friedman
We need to shrink the size of catalina.out but looking at the logging documentation I do not see any way to do this with the standard logging.properties (or else where). Due to the nature of the production site we never bring it completely down unless we must (life critical 24/7/365) Specificall

Re: EOL - Tomcat versions

2024-01-26 Thread Aryeh Friedman
On Fri, Jan 26, 2024 at 1:57 PM Christopher Schultz wrote: > > Aryeh, > > On 1/20/24 4:19 AM, Aryeh Friedman wrote: > > Top posting since my comments are not 100% relevant to the issue in > > the thread (i.e. related but not in detail). > > > > It would be

Re: EOL - Tomcat versions

2024-01-20 Thread Aryeh Friedman
On Sat, Jan 20, 2024 at 4:29 AM Simon Matter wrote: > > > Top posting since my comments are not 100% relevant to the issue in > > the thread (i.e. related but not in detail). > > > > It would be nice if Tomcat published EOL's since there are > > applications (like HIPAA webapps [I do remote cardia

Re: EOL - Tomcat versions

2024-01-20 Thread Aryeh Friedman
Top posting since my comments are not 100% relevant to the issue in the thread (i.e. related but not in detail). It would be nice if Tomcat published EOL's since there are applications (like HIPAA webapps [I do remote cardiac monitoring]) that are automatically declared to be insecure if the under

Re: Problems with cross app uploads (migrating from 9.0.35 to 9.0.84)

2024-01-11 Thread Aryeh Friedman
TL;DR (see inline for details): Problem found and worked around (root cause still unknown but likely a bug in OpenJDK 21's standard lib [see below]) On Thu, Jan 11, 2024 at 8:43 AM Christopher Schultz wrote: > > Aryeh, > > On 1/10/24 17:48, Aryeh Friedman wrote: > > Afte

Problems with cross app uploads (migrating from 9.0.35 to 9.0.84)

2024-01-10 Thread Aryeh Friedman
After upgrading the machine (brand new VM) from FreeBSD 12.X to 14.0-RELEASE, OpenJDK 8 to OpenJdk 21 and Tomcat 9.0.35 to 9.0.84 (copied the existing server.xml over) I am having problems with a servlet that has worked in the past that uploaded images from one app (which is re-installed on each ve

Fwd: Servlet-Mapping having %-sign

2023-12-29 Thread Aryeh Friedman
-- Forwarded message - From: Aryeh Friedman Date: Fri, Dec 29, 2023 at 8:08 AM Subject: Re: Servlet-Mapping having %-sign To: On Fri, Dec 29, 2023 at 7:57 AM Peter Rader wrote: > https://localhost:8443/@rm%2fmodel.ts No idea on the original question but the URL ab

Re: Servlet-Mapping having %-sign

2023-12-29 Thread Aryeh Friedman
No idea on the original question but the URL above mightiest well read: http://dear.hacker.please/hack-me.jsp - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.

Re: I forget: does Tomcat have any problems with *not* having a ROOT context?

2023-09-25 Thread Aryeh Friedman
On Mon, Sep 25, 2023 at 12:20 PM James H. H. Lampert wrote: > > I probably asked the question before, but does Tomcat have any problems > with not having a ROOT context? Not that I can tell and have been running in this mode for about 5 years now. -- Aryeh M. Friedman, Lead Developer, http://w

Re: page extends not working???

2023-09-14 Thread Aryeh Friedman
On Wed, Sep 13, 2023 at 8:21 AM Christopher Schultz wrote: > > Aryeh, > > On 9/12/23 17:50, Aryeh Friedman wrote: > > On Tue, Sep 12, 2023 at 1:51 PM Christopher Schultz > > wrote: > >> > >> Aryeh, > >> > >> On 9/12/23 12:42,

Re: page extends not working???

2023-09-12 Thread Aryeh Friedman
On Tue, Sep 12, 2023 at 1:51 PM Christopher Schultz wrote: > > Aryeh, > > On 9/12/23 12:42, Aryeh Friedman wrote: > > On Tue, Sep 12, 2023 at 11:42 AM Christopher Schultz > > wrote: > >> > >> Aryeh, > >> > >> On 9/11/23 10:05,

Re: page extends not working???

2023-09-12 Thread Aryeh Friedman
On Tue, Sep 12, 2023 at 11:42 AM Christopher Schultz wrote: > > Aryeh, > > On 9/11/23 10:05, Aryeh Friedman wrote: > > On Mon, Sep 11, 2023 at 9:47 AM Christopher Schultz > > wrote: > >> > >> Aryeh, > >> > >> On 9/9/23 19:36, Aryeh Frie

Re: page extends not working???

2023-09-11 Thread Aryeh Friedman
On Mon, Sep 11, 2023 at 9:47 AM Christopher Schultz wrote: > > Aryeh, > > On 9/9/23 19:36, Aryeh Friedman wrote: > > On Sat, Sep 9, 2023 at 1:23 PM Mark Thomas wrote: > >> > >> On 09/09/2023 11:52, Aryeh Friedman wrote: > >>> Every other jsp in

Re: page extends not working???

2023-09-09 Thread Aryeh Friedman
On Sat, Sep 9, 2023 at 1:23 PM Mark Thomas wrote: > > On 09/09/2023 11:52, Aryeh Friedman wrote: > > Every other jsp in my webapp (and other webapps on the same tomcat > > instance [9.0.75]) works and I am using a the default container but as > > curl/catalina.out show B

Re: page extends not working???

2023-09-09 Thread Aryeh Friedman
; > -Ursprüngliche Nachricht- > > Von: Aryeh Friedman > > Gesendet: Samstag, 9. September 2023 12:57 > > An: Tomcat Users List > > Betreff: Re: page extends not working??? > > > > Oops forgot to include the full log see below replaced inline >

Re: page extends not working???

2023-09-09 Thread Aryeh Friedman
Oops forgot to include the full log see below replaced inline On Sat, Sep 9, 2023 at 6:52 AM Aryeh Friedman wrote: > > Every other jsp in my webapp (and other webapps on the same tomcat > instance [9.0.75]) works and I am using a the default container but as > curl/catalina.out show

page extends not working???

2023-09-09 Thread Aryeh Friedman
Every other jsp in my webapp (and other webapps on the same tomcat instance [9.0.75]) works and I am using a the default container but as curl/catalina.out show BasePage is *NEVER* being called (either the _jspService() or the getX()): package dashboard.web.pages; import java.io.IOException; imp

Re: Receiving HTTP (any version but 3 prefered) over UDP

2022-12-10 Thread Aryeh Friedman
On Sat, Dec 10, 2022 at 4:59 PM Shawn Heisey wrote: > > On 12/9/2022 2:12 PM, Aryeh Friedman wrote: > > For example the following code works against port 7 (UDP echo service) > > but not against 8080 (my local tomcat): > > I suspect that you are running into the fact t

Re: Receiving HTTP (any version but 3 prefered) over UDP

2022-12-09 Thread Aryeh Friedman
On Fri, Dec 9, 2022 at 4:02 AM Mark Thomas wrote: > > On 08/12/2022 21:55, Aryeh Friedman wrote: > > I just tried the following command to test if tomcat does in fact listen on > > UDP: > > > > aryeh@sarek1024% nc -u localhost 8080 > > GET / HTTP/1.1 > >

Receiving HTTP (any version but 3 prefered) over UDP

2022-12-08 Thread Aryeh Friedman
I just tried the following command to test if tomcat does in fact listen on UDP: aryeh@sarek1024% nc -u localhost 8080 GET / HTTP/1.1 aryeh@sarek1024% Which is nice to see tomcat is listening but it is not apparently processing any requests since doing the same on TCP yields: aryeh@sarek1024%

Re: Publishing Tomcat webapp

2022-07-18 Thread Aryeh Friedman
: > > Hi, > > Wouldn’t this setup be easier to deploy as a Docker container? > We have an image with SSL server cert support: > https://github.com/AtomGraph/letsencrypt-tomcat > > > On Mon, 18 Jul 2022 at 16.09, Aryeh Friedman > wrote: > > > Here are the st

Re: Publishing Tomcat webapp

2022-07-18 Thread Aryeh Friedman
ccessfully. > > Best regards > > JC > > > > ned, 17. srp 2022. u 09:08 Thomas Hoffmann (Speed4Trade GmbH) > > napisao je: > > > >> Hello, > >> > >> > -Ursprüngliche Nachricht- > >> > Von: Aryeh Fried

Re: Publishing Tomcat webapp

2022-07-16 Thread Aryeh Friedman
On Sun, Jul 17, 2022 at 2:39 AM Aryeh Friedman wrote: > Once you have it pointing to that domain just upload the war file to it and give people the link. Small wording correction... I mean upload the war file as being a part of the webapp and/or a part of an other webapp you have for download

Re: Publishing Tomcat webapp

2022-07-16 Thread Aryeh Friedman
1:58 AM Jasmin Ćatić wrote: > Okay, I understand this part and I have done this already. > My question was how to publish on the internet, to be accessed by everyone > via certain domain name > (for example https://mydomain.com/webapp) > > ned, 17. srp 2022. u 03:44 Aryeh Frie

Re: Publishing Tomcat webapp

2022-07-16 Thread Aryeh Friedman
The standard way I use for doing this is the following: 1. Create a .war of the app 2. Copy it to the right machine and place it in the webapps dir (on Unix likely something like /usr/local/apache-tomcat-9.0/webapps) 3. The tomcat on the remote machine (by default config but this can be changed) w

Re: CVE-2021-44228 Log4j 2 Vulnerability -- How does this affect Tomcat?

2021-12-11 Thread Aryeh Friedman
On Sat, Dec 11, 2021 at 5:11 PM Sebastian Hennebrüder wrote: > Hi all, > > I reproduced the attack against Tomcat 9.0.56 with latest Java 8 and Java > 11. Actually the Java path version is not relevant. > > It is possible with a deployed Tomcat 9 and Spring Boot with Tomcat > embedded. > Does th

Bug report: Default TLS version needs to be greater then 1.1

2021-01-12 Thread Aryeh Friedman
As of the latest upgrade of Safari Apple now gives a warning dialog if a site uses https with TLS 1.0 or 1.1 (as per the NSA directive to discontinue all use of said versions). Tomcat 9.0.35 (the latest available via ports on FreeBSD) defaults to TLS 1.1 when SSLProtocol="TLS". As per the above

Re: Allowing dir listing of root (/) dir of the machine

2020-08-24 Thread Aryeh Friedman
On Mon, Aug 24, 2020 at 12:34 PM Olaf Kock wrote: > > On 24.08.20 16:41, Aryeh Friedman wrote: > > On Mon, Aug 24, 2020 at 4:27 AM Mark Thomas wrote: > > > >> On 23/08/2020 22:05, Aryeh Friedman wrote: > >>> In order to allow my developers to quick

Re: Allowing dir listing of root (/) dir of the machine

2020-08-24 Thread Aryeh Friedman
On Mon, Aug 24, 2020 at 1:03 PM Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Aryeh, > > On 8/24/20 10:41, Aryeh Friedman wrote: > > On Mon, Aug 24, 2020 at 4:27 AM Mark Thomas > > wrote:

Re: Allowing dir listing of root (/) dir of the machine

2020-08-24 Thread Aryeh Friedman
On Mon, Aug 24, 2020 at 4:27 AM Mark Thomas wrote: > On 23/08/2020 22:05, Aryeh Friedman wrote: > > In order to allow my developers to quickly access any temporarily > produced > > html files created/stored outside of webapps (such as those created by > the > > jacoco

Allowing dir listing of root (/) dir of the machine

2020-08-23 Thread Aryeh Friedman
In order to allow my developers to quickly access any temporarily produced html files created/stored outside of webapps (such as those created by the jacoco test coverage tool) I want to allow read only access to the root directory of the development server (firewalled and all access outside of the

Re: Best practices for profiling

2020-08-01 Thread Aryeh Friedman
On Sat, Aug 1, 2020 at 3:28 PM calder wrote: > On Sat, Aug 1, 2020 at 12:53 PM Aryeh Friedman > wrote: > > > > What are the best practices for (open source) profiling a JSP (no taglibs > > There's no "one rule" for this > > > or any EE outside of

Best practices for profiling

2020-08-01 Thread Aryeh Friedman
What are the best practices for (open source) profiling a JSP (no taglibs or any EE outside of JSP and JDBC) webapp running on a remote machine all the way down the method level (our main user is complaining about performance and we have done all the easy fixes that can be done without profiling).

context destroy method only be called once

2019-01-21 Thread Aryeh Friedman
Platform / tomcat version: Tomcat 9.0.13 / FreeBSD 11.2-RELEASE (amd64) [from ports collection without modification] I have 3 ServletContextListener concrete classes and on tomcat start all 3 contextInitalized() methods are called, and complete,but on tomcat stop only one of the three contextDest

How to prevent tomcat from deleting a webapp on restart

2017-09-11 Thread Aryeh Friedman
I have setup a webapp (main app) that is uploaded with a war file and second one ("images") that is just a dir in the webapp dir, no war file. Sometimes (not always) on tomcat restart/system reboot images gets deleted. How can I prevent this. -- Aryeh M. Friedman, Lead Developer, http://www.Pet

making all pages to fo index.jsp

2014-07-30 Thread Aryeh Friedman
I want to make it so every page that does not have a actual .jsp file gets sent back index.jsp. I am doing it with but that also sends a 404 I want zero clue they landed on a non-existent page -- Aryeh M. Friedman, Lead Developer, http://www.PetiteCloud.org

Re: preserving content not in the war

2014-07-07 Thread Aryeh Friedman
Forgot to mention I *DO* want to update the java and such in the war though On Mon, Jul 7, 2014 at 5:48 AM, Aryeh Friedman wrote: > I have auto deploy on (and want to keep it that way) but I also have > content that is not a part of the war and do not want it deleted on a new &g

preserving content not in the war

2014-07-07 Thread Aryeh Friedman
I have auto deploy on (and want to keep it that way) but I also have content that is not a part of the war and do not want it deleted on a new reploy... namely I have xxx/content/ and I do not want that erased on war deployment I tried symlinks and it nuked all the sym linked data on deploy

how to always return 200

2014-03-03 Thread Aryeh Friedman
404 /index.jsp I need the above to return 200 not 404 how? -- Aryeh M. Friedman, Lead Developer, http://www.PetiteCloud.org

Re: how to best launch a jnlp from and then return to a different jsp

2014-02-25 Thread Aryeh Friedman
1. Your use case is correct except that it is entire SD cards (including the file system structure) 1. For security reasons that is a bad idea (essentially it is not HIPAA complaint) to have the server know before hand what data it will be receiving and for whom (besides the filenames themselves

Re: how to best launch a jnlp from and then return to a different jsp

2014-02-25 Thread Aryeh Friedman
:57, Aryeh Friedman wrote: > >> Even if there is a way for the jnlp to leave a cookie on the server? >> > > You're wrong. Jnlp won't leave a cookie on the server. Server may ask > client to store the cookie. > > Jnlp is just a file. It tells JVM what jars are r

Re: how to best launch a jnlp from and then return to a different jsp

2014-02-25 Thread Aryeh Friedman
wants almost everything else in the web app... the idea is when the upload is complete the server creates a sential file that the web app detects and acts accordingly then erases the sential On Tue, Feb 25, 2014 at 7:57 AM, Aryeh Friedman wrote: > Even if there is a way for the jnlp to leav

Re: how to best launch a jnlp from and then return to a different jsp

2014-02-25 Thread Aryeh Friedman
Even if there is a way for the jnlp to leave a cookie on the server? On Tue, Feb 25, 2014 at 7:48 AM, Mikolaj Rydzewski wrote: > On 25.02.2014 13:40, Aryeh Friedman wrote: > >> since this is an intranet application the two are one in the same (assume >> they have alread

Re: how to best launch a jnlp from and then return to a different jsp

2014-02-25 Thread Aryeh Friedman
since this is an intranet application the two are one in the same (assume they have already accepted the jar signings and such) On Tue, Feb 25, 2014 at 7:32 AM, Mikolaj Rydzewski wrote: > On 25.02.2014 13:18, Aryeh Friedman wrote: > >> We need to launch (via a jsp page) a JNL

how to best launch a jnlp from and then return to a different jsp

2014-02-25 Thread Aryeh Friedman
We need to launch (via a jsp page) a JNLP from a jsp template (already in production) and do some task of some long time (filling out a form and then uploading via non-JSP mechanisms a large file [between 5MB and 50MB]... this is also in production) what we do not have and want to add is when the J

OT: How to use JSP outside of tomcat

2013-07-24 Thread Aryeh Friedman
I have a number of documents that are very template like and ideal for JSP that are 1) not intended for the web and 2) need to be automatically batch processed (the output stored in output files). How do I call the JSP processor from them command line? (it takes tomcat too long to see updated files

Fwd: help using JspC from the command line in 7

2012-08-17 Thread Aryeh Friedman
-- Forwarded message -- From: Aryeh Friedman Date: Fri, Aug 17, 2012 at 5:33 PM Subject: help using JspC from the command line in 7 To: tomcat-u...@tomcat.apache.org I have figured out most of how to compile JSP from the command line but I am now stuck on this: % java -cp /usr

public_html config not working

2010-01-30 Thread Aryeh Friedman
I took following from cutting and pasting from O'Reilly's Defenative Tomcat and put it inside each of my virtual hosts (as shown the default Host) and then I get resource unavaible for any request to ~user but the rest of the (virtual) host works: Any help? ---