Re: Tomcat 7 SSL Session ID

2012-12-17 Thread Vincent Goelen
If you run the test.jsp page.. When you send a request and interrupt it while it's processing.. For example by pressing the stop loading button immediatly after sending the request or by pressing the refresh button fast enough.. When you look what happens then: the SSL connection sends close notif

Re: Tomcat 7 SSL Session ID

2012-12-17 Thread Vincent Goelen
Hey, http://users.telenet.be/goelenv/SSLTomcat.zip in this link you can find a netbeans project that will generate the fault.. The index.html page will send requests to the index.jsp page, the thread sleep is just to emulate a long process of a request (like database things, etc) Kind regards, V

Re: Tomcat 7 SSL Session ID

2012-12-10 Thread Vincent Goelen
; > > > Vincent > > > > > > RST always terminates a TCP connection. The question is really why was > it > > > *sent.* The usual reason is writing to a connection that has already > been > > > closed by the peer. Is there an incoming close_noti

Re: Tomcat 7 SSL Session ID

2012-12-06 Thread Vincent Goelen
ption would have been thrown. > > Re loss of the SSL session, I suppose it is plausible that SSL discards it > on security grounds because of the broken connection. > > EJP > > _ > > From: Vincent Goelen [mailto:goel...@gmail.com] > Sent: Wednesday, 5 December 2012

Re: Tomcat 7 SSL Session ID

2012-12-04 Thread Vincent Goelen
many thanks! Vincent 2012/12/4 Christopher Schultz > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Vincent, > > On 12/4/12 9:15 AM, Vincent Goelen wrote: > > To be clear, I do not want a 0ms timeout... I'm doing research > > about how "usable" th

Re: Tomcat 7 SSL Session ID

2012-12-04 Thread Vincent Goelen
... At this moment my session gets invalidates making the next SSL handshake a full one with new ID (pckt 40361, ...) 2012/11/29 Christopher Schultz > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Vincent, > > On 11/28/12 3:14 AM, Vincent Goelen wrote: > > When

Tomcat 7 SSL Session ID

2012-11-28 Thread Vincent Goelen
fter alot of quick requests to the server since this gives a problem with my SSL Session tracking since the id changes then. I can provide a sample jsp project where the Invalidation occurs if wanted.. PS. I'm running Tomcat 7 on a mac osx Lion 10.7.4 server.xml settings: Thanks in advance, Vincent Goelen