Hassan,
On 7/17/25 1:04 PM, Jacobs, Hassan wrote:
I am reaching out in regards to multiple vulnerabilities that we have
found in our servers with you all. Is there a representative that we
could speak with?
You're speaking to the whole community. The ASF does not provide support
through any
appreciated.
If Red Hat drops support for Apache httpd, I'll eat my (red) hat.
-chris
From: Christopher Schultz
Date: Monday, 14 July 2025 at 19:34
To: users@tomcat.apache.org
Subject: Re: RHEL 10 Compatibility for Apache Tomcat 8.x, 9.x, 10.x, and 11.x
Bharath,
On 7/14/25 9:17 AM, Cheruku
Bharath,
On 7/14/25 9:17 AM, Cheruku, B.R. (Bharath) wrote:
I would like to ask if anyone in the community has experience running
Apache Tomcat versions 8.x, 9.x, 10.x, or 11.x on Red Hat Enterprise
Linux 10 (RHEL 10).
Are there any known issues, limitations, or recommendations for these
ver
their support
for the various specification versions. Where their (Tomcats') features
overlap, they should be implemented identically.
-chris
On Thu, Jul 10, 2025 at 1:54 PM Christopher Schultz <
ch...@christopherschultz.net> wrote:
Hrvoje,
On 7/10/25 6:52 AM, Hrvoje Lončar wrote:
Daniel,
On 7/11/25 11:57 AM, Daniel Sheridan wrote:
>
> [snip]
>
Correct, almost the entire delay is during the JAR scanning when the
files are being accessed.
We are using expanded-WAR deployment.
Good. That fixes at least one known performance issue (scanning WAR
files is inefficient regar
Mark,
Oops, I'm sorry I didn't see this correction and just sent one of my own. :(
-chris
On 7/10/25 3:18 PM, Mark Thomas wrote:
Correcting typo in fixed versions
CVE-2025-52520 Apache Tomcat - DoS in multipart upload
Severity: Low
Vendor: The Apache Software Foundation
Versions Affected:
CVE-2025-52520 Apache Tomcat - DoS in multipart upload
Severity: Low
Vendor: The Apache Software Foundation
Versions Affected:
Apache Tomcat 11.0.0-M1 to 11.0.8
Apache Tomcat 10.1.0-M1 to 10.1.42
Apache Tomcat 9.0.0.M1 to 9.0.106
Description:
For some unlikely configurations of multipart uploa
Joey,
On 7/10/25 3:14 PM, Joey Cochran wrote:
Is this accurate?
Versions Affected:
Apache Tomcat 10.1.0-M1 to 10.1.42
Mitigation:
- Upgrade to Apache Tomcat 10.1.32 or later
Nope, this should be "Upgrade to 10.1.43 or later".
Thanks for noticing; we'll get this corrected anywhere it needs t
Hrvoje,
On 7/10/25 6:52 AM, Hrvoje Lončar wrote:
Currently it's 10.1.39 as I wanted to avoid 10.1.42 but I get the same
unpredictable behaviour from both.
Oh, that's interesting. Of course, upon your first report I had assumed
it was the "maxPartCount" but then you posted your configuration w
Fab,
On 7/9/25 2:27 PM, Fab Stz wrote:
Le mercredi 9 juillet 2025, 16:20:56 CEST Christopher Schultz a écrit :
Fab,
On 7/9/25 9:12 AM, Fab Stz wrote:
I'm packaging upstream software (css-validator) for Debian so your
suggestions won't really fit to ship a package working out
Alan,
On 7/9/25 1:04 PM, Alan Masters wrote:
I have successfully developed a WAR file with Eclipse Version: 2024-06
(4.32.0) which has JRE System Library Java SE-17 and tested using
Tomcat 9.0.91 as a local host on Windows 11.
I had started work on this around a year ago and do not recall
.
Which exact version of Tomcat is being used?
Thanks,
-chris
On Wed, 9 Jul 2025, 16:14 Christopher Schultz,
wrote:
Hrvoje,
On 7/6/25 7:33 AM, Hrvoje Lončar wrote:
> After recent Tomcat security changes, my POST request are failing
> but not all the time. The problem is that th
.en from a
directory. But do you need support for type-map files? Do you need
support for Accept-Encoding and Accept-Charset?
-chris
Le mardi 8 juillet 2025, 21:21:53 CEST Christopher Schultz a écrit :
Fab,
On 7/6/25 6:58 AM, Fab Stz wrote:
Does tomcat support content negotiation like apache htt
Hrvoje,
On 7/6/25 7:33 AM, Hrvoje Lončar wrote:
> After recent Tomcat security changes, my POST request are failing
> but not all the time. The problem is that the same request sometimes
> ends up with an error and sometimes not.
>
> Tomcat is 10.0.42 protected by nginx which handles SSL certific
Fab,
On 7/6/25 6:58 AM, Fab Stz wrote:
Does tomcat support content negotiation like apache httpd does [1]
for the Accept-Language header?
No.
How to configure this for a webapp context?
You'll have to build this capability into your own web application.
> Use case is *serving static pages
Daniel,
On 7/8/25 11:15 AM, Daniel Sheridan wrote:
On 7/2/25 10:22 AM, Daniel Sheridan wrote:
Hi folks,
We're using Tomcat 10.1.40, but also seeing this issue with multiple Tomcat 9
versions, running on Windows Server 2019 and Server 2022 machines. We're
hosting a web app with a REST API, an
The Apache Tomcat team announces the immediate availability of Apache
Tomcat 10.1.43.
Apache Tomcat 10 is an open source software implementation of the
Jakarta Servlet, Jakarta Pages, Jakarta Expression Language, Jakarta
WebSocket, Jakarta Authentication and Jakarta Annotations specifications.
Dan,
On 7/2/25 10:22 AM, Daniel Sheridan wrote:
Hi folks,
We're using Tomcat 10.1.40, but also seeing this issue with multiple Tomcat 9
versions, running on Windows Server 2019 and Server 2022 machines. We're
hosting a web app with a REST API, and encounter delays on requests when they
hit o
Mark,
On 6/25/25 9:58 AM, Mark Thomas wrote:
On 25/06/2025 14:07, Mark Thomas wrote:
I think I need to look at the rules for merging welcome resources.
That might prompt some changes to the PR.
At the moment, a is almost certain to match since it
will likely be using extension mapping ma
Amit,
On 6/20/25 11:32 AM, Amit Pande wrote:
Thank you Mark for the feedback.
Reason to ask for shutdown port availability was that, configtest already check
that for connector ports. E.g.
SEVERE: Failed to initialize component
[Connector["nbhttps-jsse-nio-127.0.0.1-12345"]]
org.apache.catal
Konstantin,
On 6/18/25 6:08 PM, Konstantin Kolinko wrote:
A quick review of all Filters that are running tells me that there are a
few that can set response headers, but mostly are not in this particular
case. The list of headers coming back in the response are:
HTTP/1.1 200
Via: HTTP/1.1
Mark,
On 6/18/25 11:02 AM, Christopher Schultz wrote:
Mark,
On 6/18/25 3:08 AM, Mark Thomas wrote:
On 17/06/2025 21:13, Christopher Schultz wrote:
All,
I recently wrote a relatively simple Servlet (which is less and less
common these days with frameworks, etc.) and I was surprised that I
Mark,
On 6/18/25 3:08 AM, Mark Thomas wrote:
On 17/06/2025 21:13, Christopher Schultz wrote:
All,
I recently wrote a relatively simple Servlet (which is less and less
common these days with frameworks, etc.) and I was surprised that I
got a chunked response.
It's not interfering
All,
I recently wrote a relatively simple Servlet (which is less and less
common these days with frameworks, etc.) and I was surprised that I got
a chunked response.
Here is the entirety of the servlet code:
public class HtlloWorldServlet
extends HttpServlet
{
@Override
public vo
Alex,
On 6/10/25 6:54 PM, Alex O'Ree wrote:
Greetings
I'm running tomcat v9.0.105 with a CXF based SOAP service (you know, the
old school JAXWS services). Within that service, I had a need to retrieve a
specific http header and i've been running into some inconsistent results.
The tomcat server
James,
On 6/9/25 11:53 AM, James H. H. Lampert wrote:
Our customer Tomcat installations are, without exception, set up to use
a Java Keystore file (mainly because that appeared to be the only option
back when we started setting them up)
I think this has come up before, but we have a customer
The Apache Tomcat team announces the immediate availability of Apache
Tomcat 10.1.42.
Apache Tomcat 10 is an open source software implementation of the
Jakarta Servlet, Jakarta Pages, Jakarta Expression Language, Jakarta
WebSocket, Jakarta Authentication and Jakarta Annotations specifications.
Mark,
On 6/4/25 1:43 PM, Timothy Resh wrote:
I have a production server with JMX enabled. However, we cannot install
any additional software to do performance monitoring. We can, however,
extract data from the MBeans and transfer it elsewhere for analysis.
I saw the ant tasks in the Tomcat do
Jerome,
On 5/31/25 5:53 PM, Jerome A. Wendell wrote:
The problem has been resolved. My server hosting company provides
an interface to make changes on the firewall, so being a Windows
server, we don't use the Windows Defender firewall (it is
disabled). It appears that someone at the server hos
Jerome,
On 5/30/25 10:04 AM, Jerome A. Wendell wrote:
I am in the process of setting up a new server to replace our existing
server. I run Tomcat 9.0.73 with Geoserver 2.22.2 for the mapping on our
web site. It is a Windows server running Windows Server 2019. I have been
using this setup on o
x27;m working on some updates.
I'll also start a discussion on dev@ about switching the convenience
builds to use OpenSSL 3.5 since that is the new LTS version.
Looks like we are heading towards consensus to do that - assuming I can
get the build working.
Mark
Mark
Fed
Michael,
On 5/26/25 9:14 AM, Michael Osipov wrote:
Hi folks,
I seek guidance on a larger problem I need to solve where I do have a few ideas,
but am also considering to what degree it would make sense to add code to the
Tomcat codebase for the common good:
I have a realm impl called MyRealm wh
Ivano,
On 5/28/25 4:17 AM, Ivano Luberti wrote:
Thanks for all the responses. I try to be more clear.
My server.xml configuration contains a few SSLHostConfig configurations
like this
certificateKeystoreFile="/etc/ssl/LetsEncrypt/host domain.it/host
domain.it.pfx"
certificateKeystoreP
William,
On 4/9/25 11:09 AM, William Crowell wrote:
Is there any current up-to-date documentation on how to setup Apache
Tomcat 9 with SAML and Active Directory that is not AI generated?
I know you can do Keycloak IdP with Tomcat, but I was trying to
avoid setting up an identity provider.
I am
me to duplicate your setup.
Guess the finger
increasingly points to the CRL checking code.
Agreed, at least in theory.
-chris
On Wed, 21 May 2025 16:29:10 -0500 Christopher Schultz
wrote ---
Alex,
On 5/21/25 1:26 PM, My Subs wrote:
To test this, I set
certificateRevocationListPath to
ificate, and use ONLY that self-signed
certificate in your trust store, and have the client send that to the
server?
It will be easier for me if I just have to deal with a single cert on
either side of the connection rather than set up a whole signing
authority, etc. before I'm able to
chris
On Wed, May 21, 2025, 13:35 Christopher Schultz <
ch...@christopherschultz.net> wrote:
Federico,
On 5/21/25 12:27 PM, Christopher Schultz wrote:
Federico,
On 5/21/25 10:58 AM, federico bustamante wrote:
Hi!
Did anyone have any luck building tcnative-2.dll with Openssl 3.5 to add
P
Federico,
On 5/21/25 12:27 PM, Christopher Schultz wrote:
Federico,
On 5/21/25 10:58 AM, federico bustamante wrote:
Hi!
Did anyone have any luck building tcnative-2.dll with Openssl 3.5 to add
Post Quantum Cryptography support?
I tried following the steps in the wiki, but didn't have any
Federico,
On 5/21/25 10:58 AM, federico bustamante wrote:
Hi!
Did anyone have any luck building tcnative-2.dll with Openssl 3.5 to add
Post Quantum Cryptography support?
I tried following the steps in the wiki, but didn't have any luck (tried
with cmake and nmake).
Have you been able to compil
clear, this is my current :
Thanks for posting the whole thing.
-chris
On Fri, 09 May 2025 13:46:35 -0500 Christopher Schultz
wrote ---
Alex,
On 5/9/25 2:11 PM, My Subs wrote:
I have tested on Tomcat 10.1.40 with
Alex,
On 5/19/25 9:44 AM, My Subs wrote:
Ten days ago, I wrote reporting that CRL verification is not working
on Tomcat 10.1.40. But I have not heard back, since. Is this
feature expected to remain broken? It is not working either on
11.0.6.
Did you see my reply?
-chris
Hello Chuck,
I
David,
On 5/14/25 3:50 PM, KARR, DAVID wrote:
I've tried several times to configure tomcat-embed-core in SpringBoot to give
me better log info when Tomcat fails to start up. I thought I had this
working, but apparently I was mistaken. I figured out how to get this
information by stepping th
Alex,
On 5/9/25 2:11 PM, My Subs wrote:
I have tested on Tomcat 10.1.40 with Native
Library 1.3.1 running on JDK 21.0.7+6. The result is exactly the
same as described before. The connector below works well with client
authentication, until I add the caCertificatePath attribute. There
are no e
James,
On 5/9/25 1:49 PM, James H. H. Lampert wrote:
On 5/9/25 10:21 AM, Christopher Schultz wrote:
. . .
A lot of this comes from the fact that Tomcat is written in Java which
does not use null-terminated strings. A null byte in a string in Java
is not special in any way, and so it can'
James,
On 5/9/25 11:43 AM, James H. H. Lampert wrote:
One of the customers whose Tomcat installation we manage brought up the
possible threat of null byte injection.
Is there anything within Tomcat itself that can mitigate this?
Or is it purely something I need to take up with our webapp peop
Jakub,
On 5/7/25 3:26 PM, Jakub Królikowski wrote:
On Sat, Apr 29, 2017 at 12:01 PM Mark Thomas wrote:
On 28/04/17 17:00, Matt Cosentino wrote:
Yes, it's other folders within WEB-INF. I turned on the TldScanner
logging and it is definitely what is causing the delay. My situation
probably isn
Thorsten,
On 5/2/25 2:49 PM, Thorsten Heit wrote:
please excuse the long delay in answering (unplanned holidays...)
Tomcat is never going to figure out what MIME type should be used for
a request like "/my/servlet/app?version=!!1.22.32-4-g8a3c060!!"
So I think Mark is probably right (well, h
Ernesto,
On 5/1/25 8:51 PM, Ernesto Reinaldo Barreiro wrote:
We have an Apache Wicket application that I just ported to wicket 10. The
application works as expected with the latest Tomcat 10.1.40. But our
application does not work with Tomcat 11.0.6 because file upload (multipart
processing is b
g a default
session configuration?
-chris
On 26/4/2025 5:29 am, Christopher Schultz wrote:
Zoran,
On 4/24/25 4:21 AM, Zoran Avtarovski wrote:
Thanks Chuck,
I missed that and will implement. Bigger problem is that
PersistentManager is incompatible with Clusters so we have to migrate
back to m
Rainer and Doug,
On 4/30/25 12:47 PM, Rainer Jung wrote:
Am 30.04.25 um 15:59 schrieb Doug Whitfield:
Hi folks,
This feature was added in 9.0.90:
The system property org.apache.catalina.connector.RECYCLE_FACADES will
now default to true if not specified, which will in turn set the
default va
ABT,
On 4/29/25 11:25 AM, A Name wrote:
On Tue, Apr 29, 2025 at 10:54 AM Christopher Schultz <
ch...@christopherschultz.net> wrote:
Are you able to view the sources of the application? Are you (or your
team) knowledgeable enough about the code to make such changes? IMHO, I
would take th
ABT,
On 4/29/25 8:23 AM, A Name wrote:
On Mon, Apr 28, 2025 at 1:07 PM Mark Thomas wrote:
On 28/04/2025 16:35, Christopher Schultz wrote:
ABT,
On 4/28/25 9:05 AM, A Name wrote:
We are looking at adding a second instance of our app (named
differently --
myappA and myappB) to our Tomcat 9
William,
On 4/29/25 7:04 AM, William Crowell wrote:
Just for my clarification: When was the first stable GA release of
Apache Tomcat 11.0.x?
I believe it was October 9th, 2024, but I did see the Jakarta EE
Platform Web Profile 11 was released on March 30th, 2025:
https://projects.eclipse.org/p
ABT,
On 4/28/25 9:05 AM, A Name wrote:
We are looking at adding a second instance of our app (named differently --
myappA and myappB) to our Tomcat 9. We currently have the app installed at
a number of customer locations, we are looking at dropping 1 app
Currently, our database connections are
Ramesh,
On 4/28/25 7:00 AM, Ramesh B R wrote:
The application hosted on tomcat9 exposes soap api which is consumed by SAP.
On a daily basis we are getting 200 thousands transactions and out of that
we could see around 1000 to 2000 failed transactions due to CONNECTION
REFUSED, CONNECTION CLOSED
Zoran,
On 4/24/25 4:21 AM, Zoran Avtarovski wrote:
Thanks Chuck,
I missed that and will implement. Bigger problem is that
PersistentManager is incompatible with Clusters so we have to migrate
back to memory based sessions and use clusters to share sessions.
I would have thought that cluster
Rick,
On 4/24/25 10:47 AM, Rick Noel wrote:
Hello,
When I upgraded to tomcat 11.0.5 and Java 24,
Tomcat log gives this warning..
WARNING: A terminally deprecated method in sun.misc.Unsafe has been called
WARNING: sun.misc.Unsafe::invokeCleaner has been called by
org.apache.tomcat.util
Mark,
On 4/22/25 3:38 AM, Mark Thomas wrote:
On 21/04/2025 17:49, Christopher Schultz wrote:
Ramesh,
On 4/21/25 1:06 AM, Ramesh B R wrote:
How to decide on heap memory size?
is it 25% of total memory? or 50% total memory?
What is the ideal value (in %) for heap memory ?
Only you can
Ramesh,
On 4/21/25 1:06 AM, Ramesh B R wrote:
How to decide on heap memory size?
is it 25% of total memory? or 50% total memory?
What is the ideal value (in %) for heap memory ?
Only you can answer that question about your own application environment.
The percentage of total memory is comple
Mark,
On 4/17/25 4:56 PM, Mark Thomas wrote:
On 17/04/2025 20:32, RAY, DAVID wrote:
I updated from Tomcat 9.0.102 to 9.0.104 on two RHEL servers. Both
are 'crashing' at startup after the update. Version 9.0.102 and
prior versions ran fine. No issues. Version 9.0.104 is crashing at
start
Rémy,
On 4/17/25 11:47 AM, Rémy Maucherat wrote:
On Thu, Apr 17, 2025 at 5:16 PM William Crowell
wrote:
Hi,
A few questions on the future direction of the project.
It seems like Project Panama is still in preview mode as of JDK 24. Is that
correct?
No, it's a stable regular part of Java
Thorsten,
On 4/17/25 1:54 AM, Thorsten Heit wrote:
Hi Chris,
That definitely sounds odd. Do you have anything on the network
between the client (browser) and the server (Tomcat)? Specifically,
anything like a load-balancer, proxy, or similar?
I just want to remove other possible causes befo
Thorsten,
On 4/16/25 2:35 PM, Thorsten Heit wrote:
long time Tomcat user, but first time I'm posting, so hi to you all :-)
I'm suffering a strange phenomenon after I upgraded Tomcat on one of our
virtual machines from 10.1.39 to 10.1.40:
When I open the link to an application being served by
Chenjp,
On 4/14/25 5:46 AM, Justin Chen wrote:
Main branch: Receive unexpected 400 for curl put with content-range header value
"bytes 0-0/1" and
-d c.
PR submitted.
I think HTTP 400 is the correct response for this. You are saying "I'd
like to update bytes 0-0 (a zero-width update) with th
Charles,
On 4/9/25 6:57 PM, Charles Slivkoff wrote:
I noticed this in February and have attempted multiple times to
contact the list owners and have received no response.
There are no posts for Tomcat 10.1.x to tomcat-announce after 33 on 2024-11-11.
https://lists.apache.org/thread/pbovsrrm11j
Uday,
On 4/10/25 2:44 AM, Uday Upadhyay wrote:
I'm experiencing an issue when accessing the production web servers without using the
.xxx.com domain. The browser displays a message stating, "Your connection is not
private."
This problem occurs in Edge, Chrome, and Firefox, while the developmen
Greg,
On 4/9/25 7:22 AM, Greg Huber wrote:
I have noticed that seems I have alot of sessions open, when looking in
the application manager. It was was 800+. I don't remember seeing it
this high before. If I refresh the screen I can see the number going up
slowly. I have not made any chang
Mark,
On 4/8/25 5:40 PM, Mark Thomas wrote:
8 Apr 2025 21:45:50 Christopher Schultz :
Justin,
On 4/8/25 3:16 AM, Justin Chen wrote:
Dear users and supporters,
Currently I have two CGI scripts:
1. "/cgi-bin/update" //an administrative command, required role="admin"
2. &
Justin,
On 4/8/25 3:16 AM, Justin Chen wrote:
Dear users and supporters,
Currently I have two CGI scripts:
1. "/cgi-bin/update" //an administrative command, required role="admin"
2. "/cgi-bin/updateOrder" //update order, required role="biz"
In order to protect above endpoints via web.xml secur
Juan,
On 4/6/25 9:36 AM, juan wrote:
I read it
But couldn't make it work
After hours i got it :
This configuration looks acceptable at first glance. When you use this
configuration, you said you "couldn't make it work". Can you be more
spec
William,
On 4/7/25 2:28 PM, William Crowell wrote:
I am running Apache Tomcat 9.0.97 on Windows Server 2022 using Oracle’s JDK
1.8.0_441-b07. Anytime I generate a thread dump I see an AWT-Windows thread.
Should this thread not be there when I am specifying the JVM to run in headless
mode?
-
Lei,
On 4/3/25 3:37 AM, 2428694096 wrote:
It is a Windows Server running on a laptop.
How did you install Tomcat?
-chris
发件人：Christopher Schultz
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For
William,
On 3/31/25 3:59 PM, William Crowell wrote:
Oracle’s ojdbc8.jar version 19.25.0.0.0 which should support JDBC 4.2:
They I don't think you are experiencing what was reported in DBCP-599.
-chris
From: Christopher Schultz
Date: Monday, March 31, 2025 at 3:50 PM
To:
omcat Users List
Subject: Re: NIO Thread Madness
Very good idea Chriis. Thank you.
Regards,
William Crowell
From: Christopher Schultz
Date: Friday, March 28, 2025 at 12:05 PM
To: users@tomcat.apache.org
Subject: Re: NIO Thread Madness
William,
On 3/26/25 7:06 PM, William Crowell wrote:
That max
arate pool.
-chris
From: Christopher Schultz
Date: Wednesday, March 26, 2025 at 6:57 PM
To: users@tomcat.apache.org
Subject: Re: NIO Thread Madness
William,
On 3/25/25 2:51 PM, William Crowell wrote:
Mark,
I think we might have found something. I think the DBCP2 connection pool is
retur
William, Sebastian, and Mark,
On 3/27/25 12:00 PM, Mark Thomas wrote:
On 27/03/2025 14:54, William Crowell wrote:
Sebastian,
Thanks for your reply. I did know about environment variables. I
would be concerned about someone doing a “ps -ef” on the box and
getting the password from the comma
To whom it may concern,
On 3/27/25 4:05 AM, 2428694...@qq.com wrote:
How to start the tomcat server?
What kinda server?
-chris
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: u
.
Which port/protocol are you using to connect to Tomcat? HTTP and 8080?
Are you connecting directly to Tomcat or is there a proxy involved at all?
Mark
Regards,
William Crowell
From: Christopher Schultz
Date: Tuesday, March 25, 2025 at 7:20 AM
To: users@tomcat.apache.org
Subject: Re: NIO Th
William,
On 3/24/25 2:56 PM, William Crowell wrote:
I am running Apache Tomcat 9.0.97 on Windows Server 2022. I’m running Oracle
JDK 1.8.0_371-b11 with a 4GB min heap and a 16GB max heap.
I have an application deployed on this server that is hitting an Oracle
database server. I have noticed
William,
On 3/24/25 2:56 PM, William Crowell wrote:
I am running Apache Tomcat 9.0.97 on Windows Server 2022. I’m running Oracle
JDK 1.8.0_371-b11 with a 4GB min heap and a 16GB max heap.
Might I suggest that you stick with both min and max heap sizes set to
16GiB? If you expect to run for
All,
Anyone who has ever considered doing a presentation at a Community over
Code Conference (formerly ApacheCon), please head over to the Call for
Presentations page and submit a proposal:
https://communityovercode.org/call-for-presentations/
You do NOT need to have anything ready to submit
Maucherat with key
fingerprint
48F8E69F6390C9F25CFEDCD268248959359E722B
Present in the file.
---
I tried also to check for the keys mentioned in the KEYS file for tomcat10:
https://downloads.apache.org/tomcat/tomcat-10/KEYS
Yor old key here is no more mentioned.
The actual key (associate
Jason,
On 3/19/25 1:53 PM, Jason Countryman wrote:
Hello,
I'm using Tomcat 10.1.34 on Debian Bookworm. I have a multiple CATALINA_HOME
one CATALINA_BASE configuration, which works perfectly, most of the time.
There are 4 CATALINA_HOME setups.
The issue is that one of these CATALINA_BASE se
Азат,
On 3/17/25 8:53 AM, Усманов Азат Анварович wrote:
Hi everyone! is it possible to display current version number in a jsp page or
servlet when using parallel deployment . using some property.
Currently when building an app war we use git to calculate last revision
number, store it in
Konstantin,
On 3/14/25 9:58 AM, Konstantin Kolinko wrote:
чт, 13 мар. 2025 г. в 20:37, Christopher Schultz :
Konstantin,
On 3/13/25 12:34 PM, Christopher Schultz wrote:
Konstantin,
On 3/13/25 10:55 AM, Konstantin Kolinko wrote:
чт, 13 мар. 2025 г. в 16:42, Christopher Schultz
:
All,
I
Konstantin,
On 3/13/25 12:34 PM, Christopher Schultz wrote:
Konstantin,
On 3/13/25 10:55 AM, Konstantin Kolinko wrote:
чт, 13 мар. 2025 г. в 16:42, Christopher Schultz
:
All,
I really should be able to figure this out for myself but I'm frustrated
and might just need someone to sh
Konstantin,
On 3/13/25 10:55 AM, Konstantin Kolinko wrote:
чт, 13 мар. 2025 г. в 16:42, Christopher Schultz :
All,
I really should be able to figure this out for myself but I'm frustrated
and might just need someone to show me that I'm spelling something wrong.
I'm trying
All,
I really should be able to figure this out for myself but I'm frustrated
and might just need someone to show me that I'm spelling something wrong.
I'm trying to get all logs from the CsrfPReventionFilter. I know it's
working because I get 403 responses when it's enabled and don't get the
Darryl,
On 3/12/25 1:23 PM, Darryl Baker wrote:
For us the CVSS score is a way to determine how deeply to
investigate and more importantly to describe the criticality to
management in a way they understand.
If you haven't changed the default configuration for the DefaultServlet
from readonly="t
or. Right-click the process, select
Properties, and then select the Threads tab. Sort by CPU column and note
thread ID. Note top CPU consuming thread IDs. Convert those numbers to hex
values and search it in the thread dumps.
On Sat, Mar 8, 2025, 5:31 AM Christopher Schultz <
ch...@christopher
Chuck,
On 3/7/25 5:38 PM, Chuck Caldarale wrote:
On 2025 Mar 7, at 16:06, Timothy Resh wrote:
Dear Apache Support Team,
I'm running Tomcat 9.0.98 in the AWS Cloud. After several days of use, we
see that the CPU utilization eventually reaches 100% in the Cloud, but when
we RDP into the Serve
François,
On 3/4/25 10:32 AM, François Rajotte wrote:
Hi,
I'm looking for advice on how to properly synchronize asynchronous
servlets that use the Java servlet 3.0 async APIs.
Especially, I'm trying to avoid having the servlet experience
IllegalStateExceptions when accessing HttpServletRequest
Robert,
On 2/25/25 5:59 PM, Robert Turner wrote:
Tomcat 10.x uses the jakarta versions of the API, and I believe all the
attributes have been renamed:
"javax.servlet.request.X509Certificate" ->
"jakarta.servlet.request.X509Certificate"
+1
This is documented in Jakarta Servlet Specification[1
James,
On 2/25/25 11:59 AM, James H. H. Lampert wrote:
On 2/25/25 8:26 AM, Chuck Caldarale wrote:
Jakarta EE - all the related javax classes have been renamed to jakarta.
https://tomcat.apache.org/whichversion.html
Thanks. I've just asked the Java list over at Midrange.com about how
this a
Ramavtar,
On 2/20/25 6:46 AM, Ramavtar Pareek wrote:
I am facing an issue where some specific keys in my API response
contain non-printable
characters instead of the expected Hindi characters. The issue occurs in
our production environment, which has the following architecture:
System Flow:
with the release as-is.
Those dates and headers will be updated automatically with future releases.
If it's really bothering you, I can update it on the web site right no.
-chris
From: Christopher Schultz
Sent: Tuesday, February 18, 2025 8:32 AM
To: T
Азат,
On 2/15/25 4:36 PM, Усманов Азат Анварович wrote:
Hi everyone! I'm not sure if this is an appropriate place to ask, but here is
my Problem
I have an old oracle 10g server with 2 schemas/sid, moon and moonutf8. tomcat
is also installed as a webserver on the same physical server .
1-st sc
The Apache Tomcat team announces the immediate availability of Apache
Tomcat 10.1.36.
Apache Tomcat 10 is an open source software implementation of the
Jakarta Servlet, Jakarta Pages, Jakarta Expression Language,
Jakarta WebSocket, Jakarta Authentication and Jakarta Annotations
specifications.
A
Abirami,
On 2/10/25 6:14 AM, S Abirami wrote:
We are deploying webservices SOAP using embedded tomcat. It worked fine with JDK 8
& tomcat 10.
After upgrading to JDK 17 with tomcat 11, webservices generate source failed
first then I utilized Metrowebservices and Jax-ws related jars to solve the
Jack,
On 2/11/25 5:56 AM, Jack Green wrote:
When you try to start `11.0.3` via:
```
new Tomcat();
```
An error is thrown:
```
Exception in thread "main" java.lang.ExceptionInInitializerError
at TomcatReproducer.main(TomcatReproducer.java:6)
Caused by: java.lang.reflect.InaccessibleObjec
1 - 100 of 1178 matches
Mail list logo
