Tomcat 8 tar.gz file sizes and signatures.

2015-07-16 Thread Glen Peterson
Earlier today I downloaded tomcat 8.0.24. 2015-07-16_15:26:53 wget http://mirror.cogentco.com/pub/apache/tomcat/tomcat-8/v8.0.24/bin/apache-tomcat-8.0.24.tar.gz It was about 9MB and the MP3 signature matched what it said on the site. I just tried twice on another machine (the latest says I was us

Re: OpenSSL, Cipher-Suites, and Tomcat standalone vs. native vs. Tomcat behind apache-httpd

2015-05-20 Thread Glen Peterson
OS: Linux i386 2.6.18-404.el5 Java: Oracle Corporation Java HotSpot(TM) Server VM 1.8.0_45 Tomcat: Apache Tomcat/8.0.21 On Wed, May 20, 2015 at 7:12 PM, Glen Peterson wrote: > I've been using Tomcat as a stand-alone web server for years. Last > year, I started testing my site he

OpenSSL, Cipher-Suites, and Tomcat standalone vs. native vs. Tomcat behind apache-httpd

2015-05-20 Thread Glen Peterson
I've been using Tomcat as a stand-alone web server for years. Last year, I started testing my site here: https://www.ssllabs.com/ssltest I notice that there are only 3 fully secure cipher-suites left (there were 6 left 2 months ago). Also, I only get an A, not an A+ due to "TLS_­FALLBACK_­SCSV n

Re: Debugging a Webapp in Eclipse running Tomcat as a stand-alone JVM process

2014-11-20 Thread Glen Peterson
I never looked into jsvc. It sounds very interesting! To use a < 1024 port as a non-root user, I've always used iptables to redirect traffic to a higher-numbered port. When experimenting with iptables on a remote server, I actually like to schedule a reboot for 10 or 15 minutes, so that if I loc

Re: Remote resources

2014-11-18 Thread Glen Peterson
If it's mounted, does it count as a symlink? If so, this may help, I don't know: http://stackoverflow.com/a/26413018/1128668 On Tue, Nov 18, 2014 at 11:38 AM, Mark Thomas wrote: > On 18/11/2014 17:22, Ed Rouse wrote: >> >> >>> -Original Message- >>> From: phi...@free.fr [mailto:phi...@f

Re: Feature suggestion: excludeCiphers

2014-11-13 Thread Glen Peterson
On Thu, Nov 13, 2014 at 2:23 PM, Christopher Schultz wrote: > Patches are always welcome, including patches to the documentation. > Let me know if you'd like to provide one, and I can give you > instructions (they are pretty simple). Yes please. -- Glen K. Peterson (828) 393-0081 -

Re: Feature suggestion: excludeCiphers

2014-11-13 Thread Glen Peterson
the server has no preference." Also note, that the new configuration doesn't support IE8 on Windows XP, but we currently support IE8/Vista and forward. Qualys says IE7 on Vista still works, so presumably IE8 would work there too. On Thu, Nov 13, 2014 at 9:16 AM, Mark Thomas wrote: >

Feature suggestion: excludeCiphers

2014-11-12 Thread Glen Peterson
Tomcat has been one of my favorite pieces of software for about a decade. Thanks to all your generous contributions it just keeps getting better! I appreciate the focus on security in Tomcat 8. Suggestion: = Instead of specifying allowed ciphers in the Connector node of server.xml, I'd l

Re: tomcat 6, ubuntu, mysql connection

2009-01-27 Thread Glen Peterson
Some applications have the connection information inside the WAR file. For instance, in tomcat/webapps/WEB-INF/classes/hibernate-config.xml If that's the case, you need to get the database information from the developer - the tables and users particularly. On Tue, Jan 27, 2009 at 2:37 AM, Mihami

Running while logged off of Windows WITHOUT using the .exe version of tomcat...

2009-01-26 Thread Glen Peterson
Is there a way to get the OS-neutral zip-file version of tomcat to run under Windows when you are logged off - and stay running if you log in and log off again? I'm not able to run the tomcat5.exe version of tomcat with the Sun Access Manager Agent because I get: ClassNotFoundException: com.sun.id