Re: Apache Tomcat 9.x end of life

2023-06-09 Thread Osipov, Michael (SMD IT IN)
On 2023-06-08 18:17, Mark Thomas wrote: On 08/06/2023 16:32, Zoltan Balogh wrote: Dear Apache Team, I just would like to ask is there any planned EOL for Tomcat 9? Best guess at the moment (and it is only a guess - no decisions have been made) is 3 years after 8.5.x is EOL which gives a date

Re: AbstractEndpoint#logCertificate() prints incorrect information

2023-06-08 Thread Osipov, Michael (SMD IT IN)
On 2023-06-08 15:36, Mark Thomas wrote: On 08/06/2023 14:22, Osipov, Michael (SMD IT IN) wrote: On 2023-06-08 14:45, Mark Thomas wrote: On 08/06/2023 12:25, Osipov, Michael (SMD IT IN) wrote: Folks, I am running of 8.5.88 and noticed these lines in my catalina.out: 2023-06-08T12:38:54.938

Re: AbstractEndpoint#logCertificate() prints incorrect information

2023-06-08 Thread Osipov, Michael (SMD IT IN)
On 2023-06-08 14:45, Mark Thomas wrote: On 08/06/2023 12:25, Osipov, Michael (SMD IT IN) wrote: Folks, I am running of 8.5.88 and noticed these lines in my catalina.out: 2023-06-08T12:38:54.938 INFORMATION [main] org.apache.tomcat.util.net.AbstractEndpoint.logCertificate Connector [https

AbstractEndpoint#logCertificate() prints incorrect information

2023-06-08 Thread Osipov, Michael (SMD IT IN)
Folks, I am running of 8.5.88 and noticed these lines in my catalina.out: 2023-06-08T12:38:54.938 INFORMATION [main] org.apache.tomcat.util.net.AbstractEndpoint.logCertificate Connector [https-openssl-apr-8444], TLS virtual host [deblndw024v.ad001.siemens.net], certificate type [RSA] configur

Re: JNDIRealm does not retry on read timeouts or closed connections

2021-09-07 Thread Osipov, Michael (LDA IT PLM)
Am 2021-09-06 um 11:21 schrieb Mark Thomas: On 06/09/2021 09:52, Osipov, Michael (LDA IT PLM) wrote: My question is: Mark, you have direct access to JBS, would you be willing to file this issue directly or do you want me to file through bugreport.java.com first and when it arrives in JBS

Re: JNDIRealm does not retry on read timeouts or closed connections

2021-09-06 Thread Osipov, Michael (LDA IT PLM)
Am 2021-09-06 um 11:21 schrieb Mark Thomas: On 06/09/2021 09:52, Osipov, Michael (LDA IT PLM) wrote: My question is: Mark, you have direct access to JBS, would you be willing to file this issue directly or do you want me to file through bugreport.java.com first and when it arrives in JBS

JNDIRealm does not retry on read timeouts or closed connections

2021-09-06 Thread Osipov, Michael (LDA IT PLM)
Hi, disclaimer: this has not been explicitly verified on the JNDIRealm, but the code is very similar to my ActiveDirectoryRealm wich exposes the same behavior. The code in question: try { // Authenticate the specified username if possible principa

Re: maxSwallowSize and misbehaving clients (e.g., mod_proxy_http)

2020-05-27 Thread Osipov, Michael
Am 2020-05-27 um 12:35 schrieb Mark Thomas: > This then opens up an interesting question of whether to bother reading > *any* of the request body if Tomcat knows it is going to close the > connection before reading all of it. Based on what you have observed, > would earlier closure of the connecti

Re: maxSwallowSize and misbehaving clients (e.g., mod_proxy_http)

2020-05-27 Thread Osipov, Michael
Am 2020-05-27 um 12:35 schrieb Mark Thomas: On 27/05/2020 10:59, Osipov, Michael wrote: Am 2020-05-27 um 10:51 schrieb Mark Thomas: On 22/05/2020 22:59, Osipov, Michael wrote: I found one issue with HttpClient and Tomcat via HTTP/1.1. I have decrypted the TLS traffic [1]. I can see

Re: maxSwallowSize and misbehaving clients (e.g., mod_proxy_http)

2020-05-27 Thread Osipov, Michael
Am 2020-05-27 um 10:51 schrieb Mark Thomas: On 22/05/2020 22:59, Osipov, Michael wrote: I found one issue with HttpClient and Tomcat via HTTP/1.1. I have decrypted the TLS traffic [1]. I can see that HttpClient sends the headers also with a 4 KiB large chunk of the ZIP file. In return a

Re: maxSwallowSize and misbehaving clients (e.g., mod_proxy_http)

2020-05-26 Thread Osipov, Michael
Am 2020-05-22 um 13:26 schrieb Mark Thomas: On 21/05/2020 23:30, Osipov, Michael wrote: Output will be sent privately. Got it. Tx. Looking at the direct case. It looks like you have debug logging enabled for everything. You only need it for the org.apache.coyote.http2 package. grep

Re: maxSwallowSize and misbehaving clients (e.g., mod_proxy_http)

2020-05-22 Thread Osipov, Michael
Am 2020-05-22 um 18:51 schrieb [ext] Osipov, Michael: Am 2020-05-22 um 13:26 schrieb Mark Thomas: On 21/05/2020 23:30, Osipov, Michael wrote: Output will be sent privately. Got it. Tx. Looking at the direct case. It looks like you have debug logging enabled for everything. You only

Re: maxSwallowSize and misbehaving clients (e.g., mod_proxy_http)

2020-05-22 Thread Osipov, Michael
Am 2020-05-22 um 13:26 schrieb Mark Thomas: On 21/05/2020 23:30, Osipov, Michael wrote: Output will be sent privately. Got it. Tx. Looking at the direct case. It looks like you have debug logging enabled for everything. You only need it for the org.apache.coyote.http2 package. grep

Re: maxSwallowSize and misbehaving clients (e.g., mod_proxy_http)

2020-05-21 Thread Osipov, Michael
Am 2020-05-21 um 23:36 schrieb Mark Thomas: On 21/05/2020 21:45, Osipov, Michael wrote: Am 2020-05-21 um 11:02 schrieb Mark Thomas: On 20/05/2020 17:57, Osipov, Michael wrote: Is there an option to proxy via HTTP/2? That should be able to handle these sorts of situations more gracefully

Re: maxSwallowSize and misbehaving clients (e.g., mod_proxy_http)

2020-05-21 Thread Osipov, Michael
Am 2020-05-21 um 11:02 schrieb Mark Thomas: On 20/05/2020 17:57, Osipov, Michael wrote: Is there an option to proxy via HTTP/2? That should be able to handle these sorts of situations more gracefully. This seems to be broken for some reason in another way: What now? Turn on debug

Re: maxSwallowSize and misbehaving clients (e.g., mod_proxy_http)

2020-05-20 Thread Osipov, Michael
Am 2020-05-20 um 15:07 schrieb Mark Thomas: On 20/05/2020 11:05, Osipov, Michael wrote: My questions are: * Why is parseRequestLine printing the request body? Because it is the contents of the input buffer that is being logged, not just the headers. * Can someone confirm the erratic

maxSwallowSize and misbehaving clients (e.g., mod_proxy_http)

2020-05-20 Thread Osipov, Michael
Hi folks, I am experiencing an issue which I believe is an already reported bug in HTTPd, but I am not 100% sure. I first observed this with py-requests which does not support the Expect header, but was also able to reproduce with curl too. My setup is running several Tomcat instances behind

Re: Trouble with ServiceLoader from common.loader

2020-04-15 Thread Osipov, Michael
Am 2020-04-16 um 00:01 schrieb [ext] Osipov, Michael: Seekings advise whether it is me/my understanding or some flaw in Tomcat's class loader hierarchy. The test happens on Tomcat 8.5.54 with Java 13 for JDK-8160768. My implementation of javax.naming.ldap.spi.LdapDnsProvider is packed

Trouble with ServiceLoader from common.loader

2020-04-15 Thread Osipov, Michael
Seekings advise whether it is me/my understanding or some flaw in Tomcat's class loader hierarchy. The test happens on Tomcat 8.5.54 with Java 13 for JDK-8160768. My implementation of javax.naming.ldap.spi.LdapDnsProvider is packed along with the META-INF/services/javax.naming.ldap.spi.LdapDns

Re: Accessing server cert from valve

2020-04-15 Thread Osipov, Michael
Added as https://bz.apache.org/bugzilla/show_bug.cgi?id=64353 - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Accessing server cert from valve

2020-04-15 Thread Osipov, Michael
Mark, Am 2020-04-15 um 13:44 schrieb Mark Thomas: > On 15/04/2020 12:06, Osipov, Michael wrote: >> Folks, >> >> is there any way to access the server certififace from a valve which has >> been used to establish the TLS context? I haven't found an easy

Accessing server cert from valve

2020-04-15 Thread Osipov, Michael
Folks, is there any way to access the server certififace from a valve which has been used to establish the TLS context? I haven't found an easy way. I don't want to traverse request.getConnector().findSslHostConfigs() because it would make it more complex than necessary or even unreliable, es

Re: Sporadic proxy timeouts between HTTPd and Tomcat

2019-07-08 Thread Osipov, Michael
Christopher, Am 2019-07-08 um 19:55 schrieb Christopher Schultz: Michael, On 7/8/19 03:58, Osipov, Michael wrote: Christopher, Am 2019-07-05 um 19:07 schrieb Christopher Schultz: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Michael, On 7/5/19 11:00, Osipov, Michael wrote: Hi

Re: Sporadic proxy timeouts between HTTPd and Tomcat

2019-07-08 Thread Osipov, Michael
Christopher, Am 2019-07-05 um 19:07 schrieb Christopher Schultz: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Michael, On 7/5/19 11:00, Osipov, Michael wrote: Hi Christopher, Am 2019-07-02 um 17:49 schrieb [ext] Osipov, Michael: [...] During your ~1min stall, Tomcat is still waiting

Re: Sporadic proxy timeouts between HTTPd and Tomcat

2019-07-05 Thread Osipov, Michael
Hi Christopher, Am 2019-07-02 um 17:49 schrieb [ext] Osipov, Michael: [...] During your ~1min stall, Tomcat is still waiting for data, right? When the connection fails, Tomcat drops its error message at the same time, right? Can you post a stack trace of what the Tomcat thread is doing at

Re: Sporadic proxy timeouts between HTTPd and Tomcat

2019-07-02 Thread Osipov, Michael
Am 2019-07-02 um 17:18 schrieb Christopher Schultz: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Michael, On 7/2/19 10:40, Osipov, Michael wrote: Hi folks, I am trying to understand a sporadic failure (several times a day) where a request proxied by HTTPd takes so long that the default

Sporadic proxy timeouts between HTTPd and Tomcat

2019-07-02 Thread Osipov, Michael
Hi folks, I am trying to understand a sporadic failure (several times a day) where a request proxied by HTTPd takes so long that the default timeout of mod_proxy drops the request with 503. The Tomcat: VersionLoggerListener.log Server version:Apache Tomcat/8.5.38 VersionLoggerListene

Re: Slow startup of webapps (e.g., manager) after migration

2019-06-21 Thread Osipov, Michael
Am 2019-06-21 um 14:33 schrieb Mark Thomas: On 21/06/2019 13:13, Osipov, Michael wrote: Folks, we're migrating off old hosts to new ones, but remain at 8.5.x (.34 to .42 at the moment) and Java 8. Surprisingly, an empty Tomcat wih just manager installed takes way too long too start.

Slow startup of webapps (e.g., manager) after migration

2019-06-21 Thread Osipov, Michael
Folks, we're migrating off old hosts to new ones, but remain at 8.5.x (.34 to .42 at the moment) and Java 8. Surprisingly, an empty Tomcat wih just manager installed takes way too long too start. More precisely, the Tomcat is fast, deploying manager app is horribly slow: 2019-06-21T13:50:35

Expect: 100-continue not working with curl and HTTP/2

2019-03-28 Thread Osipov, Michael
Hi folks, right away, I don't know whether it is us (Tomcat) or curl. I'd lke to narrow down the cause. I am trying to enable HTTP/2 for some upload services via Tomcat directly (HTTPd is currently out of scope here). I am running off: Server version:Apache Tomcat/8.5.38 > Server b

RE: Clarification on roles "*" and "**" in Tomcat 8.5.x

2016-11-21 Thread Osipov, Michael
> On 21/11/2016 10:45, Osipov, Michael wrote: > > Hi folks, > > > > I am currently porting our custom Tomcat components from 6.0 to 8.5.8+ > and need > > to clarify some possible inconsistencies for new/changed roles "*" and > "**" > &

Clarification on roles "*" and "**" in Tomcat 8.5.x

2016-11-21 Thread Osipov, Michael
Hi folks, I am currently porting our custom Tomcat components from 6.0 to 8.5.8+ and need to clarify some possible inconsistencies for new/changed roles "*" and "**" from Servlet 3.1, section 13 how Tomcat implements this behavior. org.apache.catalina.connector.Request#isUserInRole(String) proper

RE: Receiving HTTP 505 on Expect: 100-continue

2014-12-08 Thread Osipov, Michael
> On 08/12/2014 08:35, Osipov, Michael wrote: > > Hi Mark, > > > >> On 06/12/2014 18:48, Christopher Schultz wrote: > >>> Michael, > >>> > >>> On 12/4/14 4:27 AM, Osipov, Michael wrote: > >>>> Hi folks, > >>>

RE: Receiving HTTP 505 on Expect: 100-continue

2014-12-08 Thread Osipov, Michael
> 2014-12-06 21:53 GMT+03:00 Mark Thomas : > > On 06/12/2014 18:48, Christopher Schultz wrote: > >> Michael, > >> > >> On 12/4/14 4:27 AM, Osipov, Michael wrote: > >>> Hi folks, > >> > >>> we are experiencing a popular issue

RE: Receiving HTTP 505 on Expect: 100-continue

2014-12-08 Thread Osipov, Michael
Hi Mark, > On 06/12/2014 18:48, Christopher Schultz wrote: > > Michael, > > > > On 12/4/14 4:27 AM, Osipov, Michael wrote: > >> Hi folks, > > > >> we are experiencing a popular issue with MS .NET clients sending > >> "Expect: 100-con

Re: Re: Receiving HTTP 505 on Expect: 100-continue

2014-12-08 Thread Osipov, Michael
Hi Christopher, > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Michael, > > On 12/4/14 4:27 AM, Osipov, Michael wrote: > > Hi folks, > > > > we are experiencing a popular issue with MS .NET clients sending > > "Expect: 100-continue"

Receiving HTTP 505 on Expect: 100-continue

2014-12-04 Thread Osipov, Michael
Hi folks, we are experiencing a popular issue with MS .NET clients sending "Expect: 100-continue" and Tomcat failing with HTTP 505. We use Apache Tomcat 6.0.41 with APR connector on a corporate network. The request look like this in Wireshark: 1. Client sends empty request with one TCP packet 2

RE: Application Remediation - Warren Restack

2012-06-05 Thread Osipov, Michael
Mehta, Hardik Jayesh wrote: > Hi, > > I am from Citi - Application Management Team. We are currently in the > process of migrating all our desktops from Vista to Win7. In order > to migrate these users to Windows 7 the application mentioned below > may need remediation. In that regards I have fe

Connecting to Tomcat APR Connector with TLSv1 fails with Java HttpsURLConnection

2012-06-01 Thread Osipov, Michael
Hi folks, I am on Tomcat 6.0.35, Java 6, HP-UX, Tomcat Native 1.1.22. Recenly, I had to switch my Http11AprProtocol connector to TLSv1 due to a security scans in our company. After that a CLI client with Java's HttpsURLConnection failed to connect to that server: Exception in thread "main" jav

RE: Availability of a resource in a realm

2012-04-19 Thread Osipov, Michael
Konstantin Kolinko wrote: > 2012/4/18 Osipov, Michael : >> Konstantin Kolinko wrote: >>> 2012/4/17 Osipov, Michael : >>>> Hi folks, >>>> >>>> I have a resource declared in my context.xml (not a resource link). >>>> I want to re

RE: dbcp datasource encryption

2012-04-19 Thread Osipov, Michael
이재만 wrote: > and i used dbcp as datasource on tomcat7 so i want to encrypt dbcp > datasource > > how do i encrypt my dbcp datasource .. plase give me some samples.. > thanks. This should probably go to the DBCP pool but you should evaluate SSL with your database. With best regards, Michael O

RE: Availability of a resource in a realm

2012-04-18 Thread Osipov, Michael
Konstantin Kolinko wrote: > 2012/4/17 Osipov, Michael : >> Hi folks, >> >> I have a resource declared in my context.xml (not a resource link). >> I want to retrieve that resource as soon as possible in my realm. I >> tried start() and init() but it

Availability of a resource in a realm

2012-04-17 Thread Osipov, Michael
Hi folks, I have a resource declared in my context.xml (not a resource link). I want to retrieve that resource as soon as possible in my realm. I tried start() and init() but it seems like that at this time the InitialContext is not available. So at what time can I expect the context being "com

RE: StandardHostValve kills custom error message

2012-04-13 Thread Osipov, Michael
Konstantin Kolinko wrote: >> The message is not diplayed because in line 282 to 286 the message >> is killed by: >> else { >>            // A custom error-page has not been defined for the >> exception >>            // that was thrown during request processing. Check if an >>            // erro

RE: StandardHostValve kills custom error message

2012-04-12 Thread Osipov, Michael
Konstantin Kolinko wrote: > 2012/4/12 Osipov, Michael : >> Hi folks, >> >> I am sending a custom error message in my authenticator but it gets >> removed by the StandardHostValve. >> This is what I do in my authenticator: >> >> catch (PrivilegedActi

StandardHostValve kills custom error message

2012-04-12 Thread Osipov, Michael
Hi folks, I am sending a custom error message in my authenticator but it gets removed by the StandardHostValve. This is what I do in my authenticator: catch (PrivilegedActionException e) { logger.error("Unable to login as the service principal", e.getException()); response.sendError(HttpS

RE: Enabling Manager

2012-04-03 Thread Osipov, Michael
pawan.kuma...@wipro.com wrote: > Hi guys, > > > Can any body explain, how to enable Manager in Tomcat? > We are using tomcat-6.0.32.B.RELEASE. By reading he documentation! - To unsubscribe, e-mail: users-unsubscr...@tomcat.apach

RE: Chasing a SocketTimeoutException with APR

2012-03-30 Thread Osipov, Michael
Konstantin Kolinko wrote: > 2012/3/30 Osipov, Michael : >> Konstantin Kolinko wrote: >>> 2012/3/29 Osipov, Michael : >>>> Hi folks, >>>> >>>> I am trying to narrow down an exception which is happening >>>> occasionally in certain s

RE: Chasing a SocketTimeoutException with APR

2012-03-30 Thread Osipov, Michael
Konstantin Kolinko wrote: > 2012/3/29 Osipov, Michael : >> Hi folks, >> >> I am trying to narrow down an exception which is happening >> occasionally in certain spots of your code: >> >> SCHWERWIEGEND: Servlet.service() for servlet default threw excep

RE: [JDBC Pool] PoolCleaner creates some sort of memory

2012-03-30 Thread Osipov, Michael
Konstantin Kolinko wrote: > 2012/3/30 Osipov, Michael : >> Filip Hanik (mailing lists) wrote: >>> http://svn.apache.org/viewvc?view=revision&revision=1306946 >> >> Thanks for the patch, I am having trouble to build from source. I do >> have some test

RE: [JDBC Pool] PoolCleaner creates some sort of memory

2012-03-30 Thread Osipov, Michael
Filip Hanik (mailing lists) wrote: > http://svn.apache.org/viewvc?view=revision&revision=1306946 Thanks for the patch, I am having trouble to build from source. I do have some test failures, should I ignore them and go on? Another one, can we have a clearer name for the thread, e.g. like the I ha

RE: Chasing a SocketTimeoutException with APR

2012-03-30 Thread Osipov, Michael
Pid * wrote: > On 29 Mar 2012, at 12:57, "Osipov, Michael" > wrote: > >> Hi folks, >> >> I am trying to narrow down an exception which is happening >> occasionally in certain spots of your code: >> >> SCHWERWIEGEND

Chasing a SocketTimeoutException with APR

2012-03-29 Thread Osipov, Michael
Hi folks, I am trying to narrow down an exception which is happening occasionally in certain spots of your code: SCHWERWIEGEND: Servlet.service() for servlet default threw exception Java.net.SocketTimeoutException at org.apache.coyote.http11.InternalAprInputBuffer.fill(InternalAprInputB

RE: [JDBC Pool] PoolCleaner creates some sort of memory

2012-03-29 Thread Osipov, Michael
Filip Hanik (mailing lists) wrote: > PoolCleaner is a static singleton. The pool cleaner thread will not > be removed until all JDBC pools have been stopped. > So, yes, one application can be the one that starts the thread, but > not necessarily the one that stops it Filip, I have already notic

RE: [JDBC Pool] PoolCleaner creates some sort of memory

2012-03-28 Thread Osipov, Michael
Konstantin Kolinko wrote: > 2012/3/28 Osipov, Michael : >> Hi folks, >> >> Recently this started to pop up in my logs: >> 23.03.2012 14:12:28 org.apache.catalina.loader.WebappClassLoader >> clearReferencesThreads >> SCHWERWIEGEND: The web application [/k

[JDBC Pool] PoolCleaner creates some sort of memory

2012-03-28 Thread Osipov, Michael
Hi folks, Recently this started to pop up in my logs: 23.03.2012 14:12:28 org.apache.catalina.loader.WebappClassLoader clearReferencesThreads SCHWERWIEGEND: The web application [/ket] appears to have started a thread named [PoolCleaner[18291494:1332172047553]] but has failed to stop it. This is