Re: elasticsearch-7.17.13 jar file Download

2025-06-29 Thread Chuck Caldarale
> On 2025 Jun 29, at 23:10, Pramod Kumar Adhi > wrote: > > Hi Team, > > Could you share me the jar file for the elasticsearch-7.17.13 or higher. In a word, no. You’ll need to get that from the elastic.co web site - it is not part of the Tomcat distribution. - Chuck > C:\Program Files

Re: Adding a CRL to certificate client authentication causes connector to stop responding to all requests having a client certificate.

2025-05-07 Thread Chuck Caldarale
> On 2025 May 7, at 11:43, My Subs wrote: > > I'm setting up certificate client authentication on Tomcat 10.0.0 > running on Java 16+36. Before doing anything else, you need to upgrade. That version of Tomcat is over 4 years old, and no 10.0.x version is currently supported. Move up to the

Re: Help with Cluster Setup on Tomcat 9

2025-04-23 Thread Chuck Caldarale
> On 2025 Apr 23, at 20:02, Zoran Avtarovski wrote: > > We have a cluster of tomcat servers on AWS EC2 which operate behind an AWS > load balancer with sticky sessions. > > We have our session storage on a DB using a JDBC store which for the most > part is working well, but we occasionally se

Re: Problem when put a one-byte file partially

2025-04-15 Thread Chuck Caldarale
> On 2025 Apr 15, at 09:32, Christopher Schultz > wrote: > > Chenjp, > > On 4/14/25 5:46 AM, Justin Chen wrote: >> Main branch: Receive unexpected 400 for curl put with content-range header >> value "bytes 0-0/1" and >> -d c. >> PR submitted. > > I think HTTP 400 is the correct response for

Re: Classpath confusion between webapps

2025-04-14 Thread Chuck Caldarale
> On 2025 Apr 14, at 15:57, Thad Humphries wrote: > > Thank you, Mark. Copying both jai-imageio jars into $CATALINA_BASE/lib > works. Hopefully, you moved the jars (as Mark suggested) rather than just copying them. Putting the same jar in multiple places in a branch of the class loader tree

Re: Headless Mode

2025-04-07 Thread Chuck Caldarale
> On 2025 Apr 7, at 13:28, William Crowell > wrote: > > I am running Apache Tomcat 9.0.97 on Windows Server 2022 using Oracle’s JDK > 1.8.0_441-b07. Anytime I generate a thread dump I see an AWT-Windows thread. > Should this thread not be there when I am specifying the JVM to run in > hea

Re: Question About Tomcat 11.0.5

2025-04-05 Thread Chuck Caldarale
-doc/config/http.html#SSL_Support_-_SSLHostConfig> element is not explicitly defined, it will be created. Is that not clear that you should now be using certificateVerification within SSLHostConfig? - Chuck > On Sat, 5 Apr 2025, 19:13 Chuck Caldarale, wrote: > >> >>> On 2

Re: Question About Tomcat 11.0.5

2025-04-05 Thread Chuck Caldarale
> On 2025 Apr 5, at 10:55, juan wrote: > > Hi > > I'm migrating from tomcat 9 to tomcat 11.0.5 > > I need a client cert validation. Mi server.xml in tomcat 9 : > > > *keyAlias="karun-tomcat-server-cert" > > > keystoreFile="/home/german/Developement/eclipseAngular/tomcat-server.jks" > keys

Re: Tomcat Clustering Roadmap And Max Node Limit

2025-04-03 Thread Chuck Caldarale
> On 2025 Apr 3, at 19:57, Tim N wrote: > > For a long time up to the latest version 11 documentation, there has been a > recommended maximum limit of 4 nodes per cluster. > > https://tomcat.apache.org/tomcat-11.0-doc/cluster-howto.html > "This works great for smaller clusters, but we don't re

Re: Question Regarding Incorrect Cache Size Calculation Issue

2025-03-27 Thread Chuck Caldarale
> On 2025 Mar 27, at 16:06, Yuta Akiya > wrote: > > I am using Tomcat 9.0.78 on a machine running Windows Server 2019 Standard. > > I am experiencing an issue with an instance of > `org.apache.catalina.webresources.Cache`, where `Cache.size` is out of sync > with the actual size of `Cache.r

Re: Tomcat 9 on Debian 12

2025-03-11 Thread Chuck Caldarale
things out. You always have the option of downloading and deploying the current version from tomcat.apache.org <http://tomcat.apache.org/>. - Chuck > On 3/10/25 6:45 PM, Chuck Caldarale wrote: >>> On 2025 Mar 10, at 18:06, Jason Bailey >>> wrote: >>> >

Re: Tomcat 9 on Debian 12

2025-03-10 Thread Chuck Caldarale
> On 2025 Mar 10, at 18:06, Jason Bailey > wrote: > > I'm running Tomcat 9 on Debian 12 to run Apache Guacamole and am trying > to get the tomcat-users.xml file to take so that I can manage the > service from the Tomcat Manager. So far I have not had luck getting the > login dialog to the manag

Re: Tomcat 9.0.98 Performance hits AWS 100% CPU

2025-03-07 Thread Chuck Caldarale
> On 2025 Mar 7, at 16:06, Timothy Resh wrote: > > Dear Apache Support Team, > > I'm running Tomcat 9.0.98 in the AWS Cloud. After several days of use, we > see that the CPU utilization eventually reaches 100% in the Cloud, but when > we RDP into the Server and look at the Task Manager, we do

Re: Subject: Issue with Non-Printable Characters in Java API Response

2025-03-03 Thread Chuck Caldarale
> On 2025 Mar 3, at 04:18, Ramavtar Pareek > wrote: > > Thanks for your response and the insights. > > Regarding your questions: > > - *Core API:* This refers to our internal Java-based API, which we have > independently tested by logging the response before it reaches the Ensemble > A

Re: The future of Tomcat 9

2025-02-25 Thread Chuck Caldarale
> On 2025 Feb 25, at 11:31, Chuck Caldarale wrote: > > >> On 2025 Feb 25, at 10:59, James H. H. Lampert >> wrote: >> >> On 2/25/25 8:26 AM, Chuck Caldarale wrote: >> >>> Jakarta EE - all the related javax classes have been renamed to jakarta.

Re: The future of Tomcat 9

2025-02-25 Thread Chuck Caldarale
> On 2025 Feb 25, at 10:59, James H. H. Lampert > wrote: > > On 2/25/25 8:26 AM, Chuck Caldarale wrote: > >> Jakarta EE - all the related javax classes have been renamed to jakarta. >> https://tomcat.apache.org/whichversion.html > > Thanks. I've just as

Re: The future of Tomcat 9

2025-02-25 Thread Chuck Caldarale
> On 2025 Feb 25, at 10:19, James H. H. Lampert > wrote: > > On 2/25/25 2:45 AM, Mark Thomas wrote: >> Tomcat 9 is the last major Tomcat version supporting Java EE. > > What does 10 use instead? Jakarta EE - all the related javax classes have been renamed to jakarta. https://tomcat.apache.o

Re: HTTP/2 support in Tomcat

2025-02-11 Thread Chuck Caldarale
> On 2025 Feb 11, at 19:21, Amit Pande wrote: > > Am planning to update the Tomcat configuration to support HTTP/2. > > Wanted to understand the difference between > > nested > within the HTTP/1.1 connector > > Vs > > Supporting protocol=org.apache.coyote.http2.Http2Protocol in the conne

Re: Periodic Immediate 408 on Supposedly Successful Login

2025-02-01 Thread Chuck Caldarale
> On 2025 Feb 1, at 23:03, Jerry Malcolm wrote: > > I'm running TC 9.0.53 on my Windows 11 dev environment. What happens if you run a version of Tomcat that’s not more than 3 years old? Preferably the current one, which is 9.0.98. > I do not need to have SSL/TLS implemented locally. So al

Re: Sporadic NPEs from CoyoteOutputStream and their surprising effect

2025-01-22 Thread Chuck Caldarale
> On Jan 20, 2025, at 14:44, Michael wrote: > > On Fri, Jan 17, 2025 at 7:45 PM Michael wrote: >> >> On Fri, Jan 17, 2025 at 3:51 PM Chuck Caldarale wrote: >>> >>>> In various logs from nightly(?) Tomcat test runs, I've been able to >

Re: Sporadic NPEs from CoyoteOutputStream and their surprising effect

2025-01-17 Thread Chuck Caldarale
> On Jan 17, 2025, at 12:45, Michael wrote: > > Thanks a lot for your comments, Chuck! > > On Fri, Jan 17, 2025 at 3:51 PM Chuck Caldarale wrote: >> >> >>> On Jan 17, 2025, at 04:05, Michael wrote: >>> >>> I have two applications, A

Re: Sporadic NPEs from CoyoteOutputStream and their surprising effect

2025-01-17 Thread Chuck Caldarale
> On Jan 17, 2025, at 04:05, Michael wrote: > > I have two applications, A and B, running in Tomcat 10.1.28 on RHEL > 8.10 with Java 21 (OpenJDK Runtime Environment Red_Hat-21.0.5.0.10-1). You may want to try a newer version of 10.1; there have been several changes to the Catalina and Coyote

Re: Javadoc search is broken

2025-01-09 Thread Chuck Caldarale
> On Jan 9, 2025, at 23:09, Maxim Solodovnik wrote: > > Hello All, > > just have noticed Javadoc search is broken :( > my steps: > - open Javadoc main page at > https://tomcat.apache.org/tomcat-10.0-doc/api/index.html > - paste 'SSLHostConfig' into search box (at top-right) > - hit Enter key >

Re: Setting sun.io.useCanonCaches to flase

2024-12-30 Thread Chuck Caldarale
> On Dec 30, 2024, at 07:15, Carl Wick wrote: > > -Original Message- > From: Christopher Schultz > Sent: Friday, December 27, 2024 12:00 PM > To: users@tomcat.apache.org > Subject: Re: Setting sun.io.useCanonCaches to flase > > On 12/27/24 9:49 AM, Carl Wick wrote: >> Running Tomcat a

Re: RemoteIpValve populates the remote address with ip:port instead of ip only

2024-11-27 Thread Chuck Caldarale
> On Nov 27, 2024, at 17:08, Balazs Jantek wrote: > > I am debugging a scenario where Tomcat 10.1.26 is working behind an > Application Gateway on Microsoft Azure. > > The webpage makes a request to /favicon.ico which goes through the > RemoteIpValve, which correctly identifies that the request

Re: Shutting Down Tomcat (9.0.97) Service Throws System Error 1067

2024-11-19 Thread Chuck Caldarale
> On Nov 19, 2024, at 08:16, Kostyantyn Krakovych > wrote: > > Hi Team, > > Could you please suggest or advice regarding the following? > > 1. We use Tomcat 9.0.87 as a windows service. It works fine with our > application. > 2. To fix security vulnerabilities we are upgrading Tomcat to ver

Re: EOF exception in DEBUG mode

2024-11-12 Thread Chuck Caldarale
t java.base/java.lang.Thread.run(Thread.java:840) > > > Please let me know what is causing this issue. > Are there any changes required in the Tomcat or Spring Boot configuration > to avoid this exception occurring in the logs? > > Thanks, > Sathya. > > On Tue, Nov 12

Re: EOF exception in DEBUG mode

2024-11-12 Thread Chuck Caldarale
> On Nov 12, 2024, at 08:19, Sathya Selvakumar > wrote: > > Hi Team, > > I am using Springboot v3.x application,which is on Azure cloud and the Tomcat > version is 10.1.30. > > Issue : Application requests are processed successfully with 200, but > sometimes EOF exceptions pop up randomly

Re: Tomcat logging.properties AsyncFileHandler

2024-11-06 Thread Chuck Caldarale
> On Nov 6, 2024, at 17:12, Mcalexander, Jon J. > wrote: > > Question kind people, > > Is there ANY AsyncFileHandler property that can handle a MaxSize directive to > specify the size of the Catalina.out file for log rotation purposes? I see > that there appears to be a MaxDays, but we woul

Re: [EXTERNAL] Tomcat stderr/stdout to console

2024-10-23 Thread Chuck Caldarale
should be able to use something like tail to echo the access log file to a terminal window. - Chuck > > From: Chuck Caldarale > Sent: Tuesday, October 22, 2024 9:34 PM > To: Tomcat Users List > Subject: [EXTERNAL] Re: Tomcat stderr/stdout to console > > > > O

Re: Tomcat stderr/stdout to console

2024-10-22 Thread Chuck Caldarale
> On Oct 22, 2024, at 19:19, Amit Pande wrote: > > Hello all, > > I am looking for way to print certain logs from Tomcat to actual console > (stdout) instead of getting those redirected to Catalina.out (default). > > e.g. messages like below (and errors failed to deploy any application) if ca

Re: Help with tomcat 11 failure

2024-10-21 Thread Chuck Caldarale
> On Oct 21, 2024, at 12:19, > wrote: > > Fellow user here. > > I am guessing that you need to migrate your application to Java 17+ and make > all the necessary changes to move from the javax.* to the Jakarta EE > jakarta.* packages. This includes all servlet stuff. Yes, Tomcat 11 requir

Re: stack trace from tomcat when I try to start my webpage on my LAN

2024-10-18 Thread Chuck Caldarale
> On Oct 18, 2024, at 02:33, Rob Sargent wrote: > > Did you not see my reply? Jim likely didn’t see it because e-mails sent to his purported address are bouncing. - Chuck > In tomcat 10 and above idont think you should see reference to javax in > stacks. I suspect your tags library is

Re: Tomcat 11.0

2024-10-17 Thread Chuck Caldarale
> On Oct 17, 2024, at 11:45, Mcalexander, Jon J. > wrote: > > Question. > > With the latest release, is Tomcat 11.0.0 still Alpha, or is it now in Stable > mode? Stable. - Chuck - To unsubscribe, e-mail: users-unsubsc

Re: stack trace from tomcat when I try to start my webpage on my LAN

2024-10-17 Thread Chuck Caldarale
> On Oct 17, 2024, at 11:38, Jim Anderson wrote: > > I am re-posting a post that I thought I made yesterday. It did not show up in > my mail from users@tomcat.apache.org, hence I am trying again. My apologies > if anyone receives both of my posts. Everyone on the list has received both of y

Re: Supportability of Tomcat 9.0.90 and above with JDK 8

2024-10-17 Thread Chuck Caldarale
> On Oct 17, 2024, at 04:01, Thomas Hoffmann (Speed4Trade GmbH) > wrote: > > Hello Joseph, > >> -Ursprüngliche Nachricht- >> Von: Xavier, Joseph >> Gesendet: Donnerstag, 17. Oktober 2024 10:59 >> An: rainer.j...@kippdata.de >> Cc: Tomcat Users List >> Betreff: RE: Supportability of

Re: Connection reset by peer: socket write error

2024-10-14 Thread Chuck Caldarale
> On Oct 14, 2024, at 11:15, Kenaw, Seretseab > wrote: > > We have an application hosted on Azure VM that runs on a Tomcat server and > has a backend of Azure SQL database . There is a job that purges old data > from the backend database and keeps failing after it runs for a few hours > bec

Re: Occasional 400 errors for static resources in Tomcat 9.0.40

2024-10-14 Thread Chuck Caldarale
> On Oct 11, 2024, at 12:48, Izek Hornbeck wrote: > > My team has a Java web app (java v17.0.2) running on a Tomcat 9.0.40 > server. Which is almost 4 years old. You really, really need to catch up. > When we upgraded to Tomcat 9, we found that occasionally, some css > files and images woul

Re: At start up, my web pages prints as text, not as a web page

2024-10-06 Thread Chuck Caldarale
> On Oct 6, 2024, at 13:15, Jim Anderson wrote: > > I am using apache-tomcat-8.0.53 Ouch. As Sebastian said, 8.0.x has not been supported for over six years. Your first step should be updating to version 9.0.x, then think about 10.1 or 11. Look at the following for guidance: https://tomcat.

Re: Tomcat 10.1.30 and Many Timed Waiting threads

2024-09-30 Thread Chuck Caldarale
> On Sep 30, 2024, at 12:15, John Williams > wrote: > > I had an executor defined before and it had the exact same behavior/problem. > Moved to the below model for the connector only after that. The OP didn’t mention the real problem in his original message; it only showed up as almost an

Re: Question about upgrading tomcat-embed-core from 10.1.20 to 10.1.25

2024-09-15 Thread Chuck Caldarale
> On Sep 15, 2024, at 17:03, KARR, DAVID wrote: > > Thanks for that. Could you give me more info on those problems in 10.1.24-29, > like links to the issues? Look at the Coyote component in the 10.1 changelog for the details: https://tomcat.apache.org/tomcat-10.1-doc/changelog.html The 10.1.

Re: Trying to Resolve a Java Version Vulnerability I'm Using for Tomcat

2024-09-11 Thread Chuck Caldarale
> On Sep 11, 2024, at 08:13, Ferrick, Michael > wrote: > > The powers above have notified me that the Java version 9.0.1.0 (x64) that I > am using with Apache Tomcat 9.0.84 has a vulnerability on my Windows servers > (OS 2019) and MUST be remediated. That means use another Java version! > >

Re: Tomcat migration tool for .war file going to 10.1x from 9x.

2024-08-29 Thread Chuck Caldarale
> On Aug 29, 2024, at 14:46, Mcalexander, Jon J. > wrote: > > I hate asking this question, but I'm not finding the documentation I'm > looking for. I remember reading that if you DON'T want to migrate your .war > file when moving from 9x to 10.1x, you can put the .war file in a different > w

Re: Tomcat 9.0.93 and java.sql.SQLException: ResultSet closed.

2024-08-28 Thread Chuck Caldarale
> On Aug 28, 2024, at 15:16, Mcalexander, Jon J. > wrote: > > We upgraded a number of non-production servers starting last night to Tomcat > 9.0.93 from 9.0.91. We are now receiving complaints from application teams > with issues around: java.sql.SQLException: ResultSet closed. This should

Re: Might switching to Tomcat 9 solve this?

2024-08-15 Thread Chuck Caldarale
> On Aug 15, 2024, at 11:20, James H. H. Lampert > wrote: > > In the wake of my recently switching a customer over from 8.5 to 9.0, a > question came up about another customer installation. > > They are quite possibly the most heavily loaded customer installation we have > (and they also ha

Re: Refresh my memory: Any "gotchas" in going from Tomcat 8.5 to Tomcat 9?

2024-08-14 Thread Chuck Caldarale
> On Aug 14, 2024, at 19:52, James H. H. Lampert > wrote: > > I ran into a "gotcha" that I probably ran into when we did our cloud box. > >> 14-Aug-2024 19:19:31.245 SEVERE [main] >> org.apache.catalina.connector.Connector. Protocol handler >> instantiation failed java.lang.ClassNotFoundEx

Re: Refresh my memory: Any "gotchas" in going from Tomcat 8.5 to Tomcat 9?

2024-08-12 Thread Chuck Caldarale
> On Aug 12, 2024, at 19:02, James H. H. Lampert > wrote: > > I know I have at least one Tomcat 9 installation running on an IBM Midrange > box (namely our cloud box). > > But I can't remember whether there are any "gotchas" for going from 8.5 to 9, > with Tomcat handling the HTTPS itself, u

Re: Tomcat deploying war file for every restart on Red Hat Linux 8.6

2024-08-11 Thread Chuck Caldarale
> On Aug 11, 2024, at 11:03, Channa Puchakayala > wrote: > > I tested on VM, storage is in Local. > > I will try to test in Ubuntu and provide update. > > Problem observed on Rethat and Rocky Linux 8.6, but not on Redhat 8.8, 8.9 > and 8.10 This would certainly seem to indicate a problem w

Re: Issue with Chunked Transfer Encoding in Tomcat 10.1.25-10.1.28 with Spring

2024-08-11 Thread Chuck Caldarale
> On Aug 11, 2024, at 07:50, Itzhak Fadida > wrote: > > I’m reaching out to see if anyone else has encountered an issue with > chunked transfer encoding in Tomcat versions 10.1.25 to 10.1.28 when > used with a Spring-based application. > > Issue Summary: > > • Problem: Chunked transfer encod

Re: Upgraded Tomcat 9.0.82 to 10.1.23 getting HTTP response 400 for pipe characters in URL

2024-08-08 Thread Chuck Caldarale
> On Aug 8, 2024, at 08:46, Christopher Schultz > wrote: > > On 8/8/24 05:20, Patil, Tushar wrote: >> In older version [9.0.82]: >> > secure="false" requiredSecret="388438" address="127.0.0.1" >>tomcatAuthentication="false" enableLookups="false" >> maxPostSize="-1" maxSaveP

Re: module-info.class missing in tomcat-servlet-api v10.1.26

2024-08-06 Thread Chuck Caldarale
> On Aug 6, 2024, at 07:50, Georg Kunkemöller > wrote: > > i upgraded my tomcat-servlet-api from 10.1.25 to 10.1.26 and noticed that > between those 2 the module-info.class went missing which breaks my > application which requires the jakarta.servlet module. I could also not > find it i a subd

Re: Deprecated API's removal

2024-08-04 Thread Chuck Caldarale
> On Aug 4, 2024, at 12:10, Nitish Chitta > wrote: > > After removing the deprecated API calls from httpcore-nio-4.4.9, I observed > that the *handle(**Object paramT, HttpAsyncExchange paramHttpAsyncExchange, > HttpContext paramHttpContext)* method of *HttpAsyncRequestHandler *is not > returni

Re: How to Call a Java Class in JSP

2024-08-03 Thread Chuck Caldarale
> On Aug 3, 2024, at 11:51, Sebastian Trost > wrote: > > On 03.08.2024 18:19, Alan Masters wrote: >> >> This is the extract from the logs: >> >>03-Aug-2024 15:15:16.500 SEVERE [http-nio-8080-exec-10] >>org.apache.catalina.startup.ExpandWar.copy Error copying >>[C:\Program >>

Re: Apache Tomcat Plain Password

2024-08-03 Thread Chuck Caldarale
> On Aug 3, 2024, at 06:28, MOHAMMED Bahauddin N > wrote: > > I have a request related to the Keystore password in Apache Tomcat's > 'server.xml' file. Currently, the password under the Connector port is > displayed in plain text, Displayed to whom? > which is a security concern. No, it

Re: Tomcat 9.0.80 Server Issues.

2024-07-25 Thread Chuck Caldarale
> On Jul 25, 2024, at 20:45, venkatd...@hotmail.com Shanthisowjanyadama9 > wrote: > > My Java Spring MVC application works great with Tomcat 9.0.50, when I moved > Tomcat version from 9.0.50 to 9.0.80 my spring MVC java web application was > broken, So you moved from a 3-year old version o

Re: Win10 installation progress

2024-07-17 Thread Chuck Caldarale
> On Jul 16, 2024, at 18:45, DdC wrote: > > Link to catalina log is below Which shows this error: Caused by: java.lang.IllegalArgumentException: Invalid [com.ZAjax] in servlet mapping > Thanks for all your advice.Progress here.The port regards hck app (for > medical diagnosis) with 6.1Mb

Re: Win10 installation progress

2024-07-16 Thread Chuck Caldarale
> On Jul 16, 2024, at 15:57, DdC wrote: > > Dear Christopher, > > Thanks for all your advice. > Progress here. > The port regards hck app (for medical diagnosis) with 6.1Mb source of > which 4.6Mb java code. > Have been able to compile without using j2ee.jar (with a dos .bat > script tackling

Re: CVE-2019-0232 & CVE-2020-1938

2024-07-15 Thread Chuck Caldarale
> On Jul 15, 2024, at 12:24, Jurevich, Aidan > wrote: > > My organization has a few devices that have the file tomcat-juli-8.5.57.jar > installed on them via the program Altair and are showing up as vulnerable to > CVE-2019-0232 and CVE-2020-1938, which according to your documentation seems

Re: Reg: tomcat CPU spikes

2024-07-10 Thread Chuck Caldarale
> On Jul 10, 2024, at 17:02, Jalaj Asher > wrote: > > Sharing another stack to see if this can give any more insights.this thread > is the tomcat main thread was loading about 65MB of data. > > "main" #1 prio=5 os_prio=0 > java.lang.Thread.State: RUNNABLE > at java.util.zip.Zi

Re: Reg: tomcat CPU spikes

2024-07-10 Thread Chuck Caldarale
> On Jul 10, 2024, at 15:19, Jalaj Asher > wrote: > > We are using tomcat version 9.0.80. > > We are seeing intermittent CPU spikes with the requests having the following > stack and it is also causing disk spikes on our end because of this call > stack . > > at java.util.zip.ZipFile.getEn

Re: Apache Tomcat Default Files - TEN-12085

2024-07-08 Thread Chuck Caldarale
ck > From: Chuck Caldarale mailto:n82...@gmail.com>> > Sent: Tuesday, July 9, 2024 12:31 AM > To: Tomcat Users List <mailto:users@tomcat.apache.org>> > Subject: Re: Apache Tomcat Default Files - TEN-12085 > > [External Email] > > > > On Jul 8, 2024,

Re: Apache Tomcat Default Files - TEN-12085

2024-07-08 Thread Chuck Caldarale
> On Jul 8, 2024, at 13:56, Pramod Kumar Adhi > wrote: > > We have one vulnerability related to the TEN-12085.Could you please advise on > the below on how can we remediate this vulnerability. > > Vulnerability Description > > The server is not configured to return a custom page in the eve

Re: Many CLOSE_WAIT connections causing the app not available

2024-06-26 Thread Chuck Caldarale
> On Jun 26, 2024, at 00:18, Stephen Stevie wrote: > > We are using Apache Tomcat 8.5.49 Stop right there. Tomcat 8.5.x reached end-of-life earlier this year and is no longer supported. The particular version you’re running is over 4.5 years old, and many, many security and correctness fixe

Re: Isolating the Root Cause of "Connection Refused"

2024-06-25 Thread Chuck Caldarale
> On Jun 25, 2024, at 13:12, Eric Robinson wrote: > > I'm obviously not getting something. If I understand correctly, the purpose > of the acceptCount param is to allow tomcat to reject connections even after > the TCP stack has passed them to the java process. At that point, the request > ha

Re: Isolating the Root Cause of "Connection Refused"

2024-06-25 Thread Chuck Caldarale
> On Jun 25, 2024, at 12:55, Eric Robinson wrote: > >> You might still be running into the acceptCount limit on the . The >> default value is 100, so if more connection requests arrive in between the >> TCP/IP stack passing them on to the listening process, some could still be >> getting rejecte

Re: Isolating the Root Cause of "Connection Refused"

2024-06-24 Thread Chuck Caldarale
> On Jun 24, 2024, at 16:40, Eric Robinson wrote: > > I wrote a script that checks the FD counts for every java pid on the server. > Just looking at these results, I don't think we're hitting an FD limit at the > moment, but I'll try it again tomorrow while the problem is presenting. Quite

Re: Isolating the Root Cause of "Connection Refused"

2024-06-24 Thread Chuck Caldarale
> On Jun 24, 2024, at 15:47, Eric Robinson wrote: > >> -Original Message----- >> From: Chuck Caldarale >> Sent: Monday, June 24, 2024 1:40 PM >> To: Tomcat Users List >> Subject: Re: Isolating the Root Cause of "Connection Refused" >&g

Re: Isolating the Root Cause of "Connection Refused"

2024-06-24 Thread Chuck Caldarale
> On Jun 24, 2024, at 15:36, Eric Robinson wrote: > >> -Original Message----- >> From: Chuck Caldarale >> Sent: Monday, June 24, 2024 1:29 PM >> To: Tomcat Users List >> Subject: Re: Isolating the Root Cause of "Connection Refused" >&g

Re: Isolating the Root Cause of "Connection Refused"

2024-06-24 Thread Chuck Caldarale
> On Jun 24, 2024, at 15:19, Eric Robinson wrote: > > We have a tomcat server that is not that busy. It has 100 tomcat instances > running, but it handles a few hundred connections per second total, across > all of them. It intermittently rejects connection attempts to listening > tomcats. T

Re: Tomcat 9 symlinks ?

2024-06-19 Thread Chuck Caldarale
4 at 4:17 PM Stephen Tenberg > wrote: > >> Thank you. Do we just rename the existing ROOT to something else so the >> admin stuff is available? The path="" was appealing as we want this >> existing large application to be available as "/". Is renaming RO

Re: Tomcat 9 symlinks ?

2024-06-19 Thread Chuck Caldarale
> On Jun 19, 2024, at 15:16, Stephen Tenberg wrote: > > Thank you. Do we just rename the existing ROOT to something else so the > admin stuff is available? The default ROOT application does not have any admin purpose itself, but it does have links to admin functions that are separate from t

Re: Tomcat 9 symlinks ?

2024-06-19 Thread Chuck Caldarale
> On Jun 19, 2024, at 14:42, Stephen Tenberg wrote: > > You asked why path="" instead of path="foo" in context at server.xml? > > That was our attempt to mount this application at "/" instead of at "/foo" > which is a requirement here. Just deploy the application as ROOT (case matters) rath

Re: Tomcat MySQL Connection Pooling JNDI lookup

2024-06-19 Thread Chuck Caldarale
> On Jun 19, 2024, at 10:09, Daniel Schwartz wrote: > > Dear Thomas, > > Your email came with no content. Please try again. Thomas’ message looked fine here as well. Check your e-mail client. - Chuck - To unsubscribe,

Re: Changes between Tomcat 9.0.86 and 9.0.88?

2024-06-13 Thread Chuck Caldarale
> On Jun 13, 2024, at 12:45, Mcalexander, Jon J. > wrote: > > I have an application team that started having problems with their > application when they were updgraded from 9.0.86 to 9.0.88 version of Tomcat. > The base cause of their stack-trace is: > > java.lang.NoSuchMethodError: > org.a

Re: Tomcat 9: Java 11 to Java 17

2024-06-10 Thread Chuck Caldarale
> On Jun 10, 2024, at 14:48, Paul Leo wrote: > > I could be wrong, but I don't think you need jakarta for Tomcat 9. You need > it for TomEE 9 and Tomcat 10. But please someone verify. Not sure about TomEE, but Tomcat 9 certainly expects javax.* classes, not jakarta.* ones; the use of jaka

Re: Embedded Tomcat common classloader

2024-06-07 Thread Chuck Caldarale
> On Jun 7, 2024, at 08:11, Christopher Schultz > wrote: > > On 6/7/24 01:49, Mark Thomas wrote: >> On 06/06/2024 18:48, Dave Breeze wrote: >>> Thanks Mark >>> appreciate that the url was for 8.0 >>> >>> With regards to classpath that was my first attempt - unfortunately it >>> would seem tha

Re: Invalid character found in the request target

2024-06-04 Thread Chuck Caldarale
> On Jun 4, 2024, at 06:07, Christopher Schultz > wrote: >> 04-Jun-2024 09:49:11.448 INFO [http-nio-8080-exec-6] >> org.apache.coyote.http11.Http11Processor.service Error parsing HTTP request >> header >> Note: further occurrences of HTTP request parsing errors will be logged at >> DEBU

Re: Write listener question

2024-05-30 Thread Chuck Caldarale
> On May 30, 2024, at 12:53, > wrote: > > isFirst is initialized to 'true' when the class is instantiated, so that > piece of code is just executed the first time the execution enters the ' > onWritePossible' method. Later, within the same 'if', 'isFirst' is set to > false, (not shown in the

Re: Write listener question

2024-05-30 Thread Chuck Caldarale
> On May 30, 2024, at 08:47, > wrote: > > I have a NIO connector with an asynchronous servlet with its write listener > (working in both tomcat 8.5 and tomcat 10.1.20). > > @Override > public void onWritePossible() throws IOException { > > if (this.isFirst) { >this.os = this.asyncCont

Re: Database Connection Requests Initiated but Not Sent on the Wire (Some, Not All)

2024-05-26 Thread Chuck Caldarale
> On May 25, 2024, at 20:58, Eric Robinson wrote: > > One of our hosting customers is a medical practice using a commercial EMR > running on tomcat+mysql. It has operated well for over a year, but users have > suddenly begun experiencing slowness for about an hour at the same time every > da

Re: Tomcat Console - 401 Unauthorized

2024-05-22 Thread Chuck Caldarale
> On May 22, 2024, at 13:31, Garber, Frank > wrote: > > Not knowing how it’s supposed to behave, here’s another clue. When I click on > the “Server Status” button, I never get prompted for credentials. This sounds like a browser configuration problem. On the first attempt to access a protec

Re: Tomcat Console - 401 Unauthorized

2024-05-22 Thread Chuck Caldarale
> On May 22, 2024, at 10:51, Garber, Frank > wrote: > > I've just installed Tomcat 9.0.89. > Tomcat runs, and I can get to the console at http://localhost:8080/ but, when > I click on "Server Status" I get the 401 Unauthorized page. > I've been editing the conf\tomcat-users.xml file

Re: Win10 installation progress

2024-05-18 Thread Chuck Caldarale
> On May 18, 2024, at 22:40, DdC wrote: > > Gave up on installing 9.0.88. on Win10. Some of us have just given up on Windows entirely… > Succeeded with 10.1.23 andjdk-18.0.2.1.The lib directory has j2ee.jar, which > I have used in earliertomcat versions. Not lately. I can’t recall when

Re: Logrotation throu CATALINA_OUT_CMD in Tomcat9

2024-05-15 Thread Chuck Caldarale
> On May 15, 2024, at 12:43, Peter Rader wrote: > > my catalina.out is getting bigger and bigger. (I should Insert a philosophical discussion on not using stdout for application logging here, but I’ll leave that for some other time.) > In order to have smaller catalina.out I noticed this en

Re: FileUpload class not working with Tomcat 10.1

2024-05-09 Thread Chuck Caldarale
> On May 9, 2024, at 01:25, Mark Foley wrote: > >> Does the JSP need to reference the "program" (servlet?) at all? > The program, as shown above didn'twork at all until I put that servlet > definition on WEB-INF/web.xml, so I suppose the answer is "yes". As to why, I > have not a clue. A re

Re: FileUpload class not working with Tomcat 10.1

2024-04-23 Thread Chuck Caldarale
>>> >>> uploadfile >>> >>> >>> uploadfile >>> /schDistImportResults.jsp >>> The first servlet is named “uploadfile”. > On Apr 23, 2024, at 12:42, Mark Foley wrote: > > Now I need to add another program to the system that does file uploads. I > created another definition in WEB-

Re: [EXT]Re: [EXT]Re: Tomcat 10 skipping state transfer. No members active in cluster group

2024-04-22 Thread Chuck Caldarale
> On Apr 22, 2024, at 18:48, Rick Noel wrote: > > So you mean we use the VM's IP as the address value below > Instead or using the value of auto ? > > address="auto" >port="4001" > autoBind="100" >

Re: [EXT]Re: Tomcat 10 skipping state transfer. No members active in cluster group

2024-04-22 Thread Chuck Caldarale
> On Apr 22, 2024, at 16:33, Rick Noel wrote: > > Tomcats are two different VMs Which explains why they can’t talk to each other over 127.0.0.1. > What do you mean each containers published IP Each VM or container will have an assigned, individual IP address so it can communicate with net

Re: Tomcat 10 skipping state transfer. No members active in cluster group

2024-04-22 Thread Chuck Caldarale
> On Apr 22, 2024, at 09:54, Rick Noel wrote: > > Could someone please explain why I am getting the error > > skipping state transfer. No members active in cluster group Need a bit more information. > On one sever the reciever is bound to > 127.0.0.1

Re: [EXT]Re: Tomcat 10 session replication fails

2024-04-13 Thread Chuck Caldarale
> On Apr 11, 2024, at 09:07, Rick Noel wrote: > > We are getting closer > Changing ports from the 5000 range to the 4000 range stopped two errors > But now I get this.. > > INFO: Manager [##0001]: skipping state transfer. No members active in cluster > group > > How to I make the me

Re: [OT] Tomcat 9.0.83 - SSL handshake stops working for Google API calls after a while

2024-04-11 Thread Chuck Caldarale
> On Apr 11, 2024, at 07:28, Marcos Peña wrote: > > I am looking for help with a strange issue we are experiencing when trying to > use Google APIs from a web application that is deployed on Tomcat 9.0.83. As Chris noted, this has nothing to do with Tomcat. The stack trace shows that the fa

Re: Tomcat 10 session replication fails

2024-04-11 Thread Chuck Caldarale
> On Apr 11, 2024, at 07:56, Rick Noel wrote: > > We have our app running on Tomcat10 and doing clustering,but are getting the > following errors seen int the Catalina log... > > Apr 11, 2024 8:14:43 AM org.apache.catalina.ha.session.DeltaManager > waitForSendAllSessions > SEVERE: Manager

Re: Turning on the Invoker Servlet

2024-04-06 Thread Chuck Caldarale
> On Apr 6, 2024, at 13:30, Alain Lemay wrote: > > Java version: 1.8.0_401 > Tomcat version: 9.0.87 > Operating system: macOS Big Sur > System Version: macOS 11.7.10 (20G1427) BTW, macOS 11 reached end-of-life some months ago. > Kernel Version: Darwin 20.6.0 > > I want to familiarize myself

Re: [EXT]Re: Tomcat 10 waning that expireSessionsOnShutdown is not set

2024-03-21 Thread Chuck Caldarale
> On Mar 21, 2024, at 14:50, Rick Noel wrote: > > Do you have a feel if DeltaManager is better than BackupManager? Depends on what your needs are. There are some presentations on the subject that you might want to look at: https://tomcat.apache.org/presentations.html ApacheCon 2018 NA: Deep

Re: Tomcat 10 waning that expireSessionsOnShutdown is not set

2024-03-21 Thread Chuck Caldarale
> On Mar 21, 2024, at 14:23, Rick Noel wrote: > > Could someone tell me why I would get the below waning about > expireSessionsOnShutdown not being set > > WARNING [main] org.apache.tomcat.util.digester.SetPropertiesRule.begin Match > [Server/Service/Engine/Host/Cluster/Manager] failed to set

Re: Tomcat 9 returning 404 for audio files

2024-03-12 Thread Chuck Caldarale
> On Mar 12, 2024, at 13:15, Sam wrote: > > As I said earlier, 404 error is only returned 1st time. > > Subsequent requests work fine. What triggers the creation of the audio file? Is it possible that the trigger creates a file-not-found state in the Tomcat resource cache, and that’s what i

Re: how to reload SSL certificates without restarting Tomcat

2024-03-10 Thread Chuck Caldarale
> On Mar 10, 2024, at 15:00, Jerry Lin wrote: > > Hi Chuck, > > Presumably, you mean “not behind https", since “Apache” refers to the >> organization that develops and maintains a plethora of software products. >> > Spell checker got me - I meant “httpd”, not “https”. - Chuck -

Re: how to reload SSL certificates without restarting Tomcat

2024-03-10 Thread Chuck Caldarale
> On Mar 10, 2024, at 12:39, Jerry Lin wrote: > > For those of us with a publicly accessible instance of Tomcat (e.g. not > behind Apache), is there a good way of having a renewed SSL/HTTPS > certificate take effect without restarting Tomcat? Presumably, you mean “not behind https", since “Apac

Re: configuring Tomcat 9.0.85 for debugging

2024-02-26 Thread Chuck Caldarale
> On Feb 26, 2024, at 16:18, Mark Caruso wrote: > > If anyone has guidance for configuring Tomcat 9.0.85 for debugging please > send it along. I am running the program under Ubuntu 20.04. I am not sure the > guidance on the internet for modifying catalina.sh is right. My goal is to > then at

Re: A curious case of Tomcat 10.1.x NIO(1) acceptor not stopping clearly on some setups

2024-02-25 Thread Chuck Caldarale
> On Feb 23, 2024, at 10:18, Michał Szymborski > wrote: > > Hi, I've encountered an issue where the acceptor doesn't stop cleanly when > shutting Tomcat down on some machines. I'm using tomcat-embed-core 10.1.19, > I've tested it on Ubuntu 22.04 and MacOs Sonoma 14.3.1. > > Here is a minimum

  1   2   >