[SECURITY] CVE-2025-52434 Apache Tomcat -APR/native Connector crash leading to DoS

2025-07-10 Thread Mark Thomas
CVE-2025-49125 Apache Tomcat - APR/Native Connector crash leading to DoS Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 9.0.0.M1 to 9.0.105 Description: A race condition on connection close could trigger a JVM crash when using the APR/Native

Reminder: Community Over Code Asia 2024 CFP closes on Apr 22nd

2024-04-18 Thread Huxing Zhang
Hi All, The CFP for Community Over Code Asia, including the Web server and Tomcat track, is closing very soon - at 4:00 PM on 22 Apr 2024 Beijing time. Details: https://sessionize.com/communityovercode-asia-2024 Please do not wait until the last minute. We hope to see you in Hangzhou

Re: How to install the APR for Tomcat9 version in Linux OS with out internet access

2021-01-19 Thread Christopher Schultz
Naga, On 1/17/21 23:31, Naga Ramesh wrote: I am trying to install the APR for tomcat 9 version in my local linux (RHEL-6 OS version) server but don't have the internet access and keep on asking many dependencies and tried multiple ways. Can you please let me know, where can I download th

How to install the APR for Tomcat9 version in Linux OS with out internet access

2021-01-17 Thread Naga Ramesh
Team, I am trying to install the APR for tomcat 9 version in my local linux (RHEL-6 OS version) server but don't have the internet access and keep on asking many dependencies and tried multiple ways. Can you please let me know, where can I download the all dependencies rpm files or if an

Re: APR connector questions

2020-05-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Daniel, On 5/9/20 12:34, daniel@dell.com wrote: > We want to use APR to call openssl also do with native to support FIPS mode in tomcat. > > Software info Tomcat/9.0.34 libtcnative-1-0-1.2.23-15.30.x86_64 Where did you get that? Is it

RE: APR connector questions

2020-05-09 Thread Daniel.Sun
We want to use APR to call openssl also do with native to support FIPS mode in tomcat. Software info Tomcat/9.0.34 libtcnative-1-0-1.2.23-15.30.x86_64 configuration as below: When enable debug info in tomcat will see 09-May-2020 00:51:35.358 FINE [https-openssl-apr-8443-exec-1

Re: APR connector questions

2020-05-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Daniel, On 5/8/20 04:25, daniel@dell.com wrote: > We are changing from Nio connector to APR connector to enable FIPS > mode in tomcat. But we hit tomcat hang issue, ssl handshake no > response when run long time. So many close_wait i

RE: APR connector questions

2020-05-08 Thread Daniel.Sun
Dear experts: Nowadays, we are changing from Nio connector to APR connector to enable FIPS mode in tomcat. But we hit tomcat hang issue, ssl handshake no response when run long time. So many close_wait in netstat output. Do you have any advises about that issue? BRs Dan

Re: APR libs present but not found

2019-09-12 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 John, On 9/10/19 14:20, John Beaulaurier -X (jbeaulau - ADVANCED NETWORK INFORMATION INC at Cisco) wrote: > I needed to build the APR libs from source as there was no rpm in > yum, but the default directory where the libs were place was no

RE: APR libs present but not found

2019-09-10 Thread John Beaulaurier -X (jbeaulau - ADVANCED NETWORK INFORMATION INC at Cisco)
Hi Christopher, I needed to build the APR libs from source as there was no rpm in yum, but the default directory where the libs were place was not in the Java path, and so once I noticed that and added that directory to the path in setenv.sh APR is found and used. Thanks -John

Re: APR libs present but not found

2019-09-06 Thread Christopher Schultz
> 1.4.8-3.el7_4.1 apr-devel.i686 > 1.4.8-3.el7_4.1 apr-devel.x86_64 > 1.4.8-3.el7_4.1 > > When I test with Tomcat 7.x or 9.x the log notes the APR native > libs could not be found in the java library path, when they are in > the java library path located at /lib64 and /lib

APR libs present but not found

2019-09-06 Thread John Beaulaurier -X (jbeaulau - ADVANCED NETWORK INFORMATION INC at Cisco)
Hello, I installed the following RPMs via Yum for OpenSSL support RHEL 7.4 apr.i6861.4.8-3.el7_4.1 apr.x86_64 1.4.8-3.el7_4.1 apr-devel.i6861.4.8-3.el7_4.1 apr-devel.x86_64

Re: how to use separate shared dlls for OpenSSL, APR, and libtcnative-1...

2019-02-11 Thread John Palmer
> For Windows, you are better off using the all-in-one statically-linked > DLL provided by the Tomcat team. ... > In general, the Tomcat team tries to keep on top of the latest news > and releases from both APR and OpenSSL, so you shouldn't have to wait > too long betwe

Re: how to use separate shared dlls for OpenSSL, APR, and libtcnative-1...

2019-02-11 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 John, On 2/11/19 10:46, John Palmer wrote: > (I'm new to using TC-native, interested in how to accomplish "In > security conscious production environments, it is recommended to > use separate shared dlls for OpenSSL, APR, and

how to use separate shared dlls for OpenSSL, APR, and libtcnative-1...

2019-02-11 Thread John Palmer
(I'm new to using TC-native, interested in how to accomplish "In security conscious production environments, it is recommended to use separate shared dlls for OpenSSL, APR, and libtcnative-1, and update them as needed according to security bulletins. " Apparently I need a concret

Re: session caching on tomcat 7 with APR

2019-02-11 Thread Mark Thomas
On 09/02/2019 19:32, Усманов Азат Анварович wrote: > Hello everyone! I have a webapp running on tomcat 7.0.92 with java 7 with > APR/tomcat native 1.2.19 on RHEL 6 > > I've tested website(debug.ieml.ru) on which my webapp is running on ssllabs > server test and one thing

session caching on tomcat 7 with APR

2019-02-09 Thread Усманов Азат Анварович
Hello everyone! I have a webapp running on tomcat 7.0.92 with java 7 with APR/tomcat native 1.2.19 on RHEL 6 I've tested website(debug.ieml.ru) on which my webapp is running on ssllabs server test and one thing I've noticed is the orange warning line saying Session resumption (cach

Re: APR 1.2.21 with Apache Tomcat 8.5.37

2019-02-04 Thread Mark Thomas
On 04/02/2019 09:37, M. Manna wrote: > Hello, > > Is it okay to replace 1.2.19 (packed with Tomcat 8.5.37 Windows 64 bit) > with the newly released version 1.2.21? Yes. Mark - To unsubscribe, e-mail: users-unsubscr...@tomcat.ap

APR 1.2.21 with Apache Tomcat 8.5.37

2019-02-04 Thread M. Manna
Hello, Is it okay to replace 1.2.19 (packed with Tomcat 8.5.37 Windows 64 bit) with the newly released version 1.2.21? I know that tomcat checks some mandatory version compatibility during Bootstrap, but not sure if this is the only check. I am referring to the windows download here. http://mirr

Re: tomcat 8.5.35 warning using NIO 2 (or NIO) connector w APR: An unknown setting with identifier [2147483647] and value [2] was ignored

2018-12-20 Thread Rémy Maucherat
On Thu, Dec 20, 2018 at 9:37 PM John Palmer wrote: > I'm working with tomcat 8.5.35 to configure SSL > (current system is tomcat 7.5 using JKS keystore and truststore).. > > I finally have the certificate parts working with the default (commented > out) APR connect

tomcat 8.5.35 warning using NIO 2 (or NIO) connector w APR: An unknown setting with identifier [2147483647] and value [2] was ignored

2018-12-20 Thread John Palmer
I'm working with tomcat 8.5.35 to configure SSL (current system is tomcat 7.5 using JKS keystore and truststore).. I finally have the certificate parts working with the default (commented out) APR connector.. it bothers me (doesn't seem intuitive) that the logging shows "

Re: OCSP stapling in tomcat 7 with APR

2018-10-23 Thread Усманов Азат Анварович
. 23:28:14 Кому: users@tomcat.apache.org Тема: Re: OCSP stapling in tomcat 7 with APR -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Усманов, On 10/23/18 13:04, Усманов Азат Анварович wrote: > Hi everyone! I did manage to run ocsp check manually without a > proxy (some network issue),st

Re: OCSP stapling in tomcat 7 with APR

2018-10-23 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Усманов, On 10/23/18 13:04, Усманов Азат Анварович wrote: > Hi everyone! I did manage to run ocsp check manually without a > proxy (some network issue),still no success with tomcat ocsp or > ssllabs however. > > openssl ocsp -no_nonce -header Hos

Re: OCSP stapling in tomcat 7 with APR

2018-10-23 Thread Усманов Азат Анварович
dea how to identify which command tomcat sends to ocsp_responder ? От: Усманов Азат Анварович Отправлено: 19 октября 2018 г. 15:29:54 Кому: Tomcat Users List Тема: Re: OCSP stapling in tomcat 7 with APR Hi !turns out to be a proxy issue because once I modify the opens

Re: OCSP stapling in tomcat 7 with APR

2018-10-19 Thread Усманов Азат Анварович
omcat Users List Тема: Re: OCSP stapling in tomcat 7 with APR On 17/10/18 15:02, Усманов Азат Анварович wrote: > Unfortunately, I still got the same issue with the slash > openssl ocsp -issuer /home/idis/authorities.crt -cert > /home/idis/STAR_ieml_ru.crt -text -url http://ocsp.comodo

Re: OCSP stapling in tomcat 7 with APR

2018-10-17 Thread Mark Thomas
Wireshark or similar to do a network trace and see exactly what is going on there. Mark > > > > > От: Rainer Jung > Отправлено: 17 октября 2018 г. 16:41:27 > Кому: Tomcat Users List; Усманов Азат Анварович > Тема: Re: OCSP stapling in to

Re: OCSP stapling in tomcat 7 with APR

2018-10-17 Thread Усманов Азат Анварович
in tomcat 7 with APR Redirect when accessing http://ocsp.comodoca.com could simply be a trailing slash redirect (Location: http://ocsp.comodoca.com/). You better use http://ocsp.comodoca.com/ (note the slash at the end of the URL). Regards, Rainer Am 17.10.2018 um 15:09 schrieb Усманов Азат

Re: OCSP stapling in tomcat 7 with APR

2018-10-17 Thread Rainer Jung
org Тема: Re: OCSP stapling in tomcat 7 with APR how do I make sure ocsp is enabled on tomcat native when I try to pass --enable-ocsp to tomcat native configure i get unrecognized option warning ./configure --with-apr=/usr/local/apr --with-java-home=/usr/java/jdk1.7.0_79 -with-ssl=/usr/local

Re: OCSP stapling in tomcat 7 with APR

2018-10-17 Thread Усманов Азат Анварович
org Тема: Re: OCSP stapling in tomcat 7 with APR how do I make sure ocsp is enabled on tomcat native when I try to pass --enable-ocsp to tomcat native configure i get unrecognized option warning ./configure --with-apr=/usr/local/apr --with-java-home=/usr/java/jdk1.7.0_79 -with-ssl=/usr/local/ope

Re: OCSP stapling in tomcat 7 with APR

2018-10-15 Thread Coty Sutherland
t; As far as I can tell, you'd need to explicitly define OPENSSL_NO_OCSP to > disable OCSP when building on Linux so you should be good with a > standard build. > +1, just build it and as long as the openssl version you're using supports it you're good. > > Mark >

Re: OCSP stapling in tomcat 7 with APR

2018-10-15 Thread Mark Thomas
disable OCSP when building on Linux so you should be good with a standard build. Mark > > > ./configure --with-apr=/usr/local/apr > --with-java-home=/usr/java/jdk1.7.0_79 -with-ssl=/usr/local/openssl > --enable-ocsp > configure: WARNING: unrecognized options: --enabl

Re: OCSP stapling in tomcat 7 with APR

2018-10-15 Thread Усманов Азат Анварович
how do I make sure ocsp is enabled on tomcat native when I try to pass --enable-ocsp to tomcat native configure i get unrecognized option warning ./configure --with-apr=/usr/local/apr --with-java-home=/usr/java/jdk1.7.0_79 -with-ssl=/usr/local/openssl --enable-ocsp configure: WARNING

Re: OCSP stapling in tomcat 7 with APR

2018-10-15 Thread Mark Thomas
On 14/10/18 18:45, Усманов Азат Анварович wrote: > Hello everyone! I have an java 7 web app running on tomcat 7 with > APR/tomcat-native ON Linux .(OpenSSL 1.1.1) I would like to enable OCSP > stapling on tomcat > so that > When OCSP is enabled, a server will pre-fetch the OCSP r

OCSP stapling in tomcat 7 with APR

2018-10-14 Thread Усманов Азат Анварович
Hello everyone! I have an java 7 web app running on tomcat 7 with APR/tomcat-native ON Linux .(OpenSSL 1.1.1) I would like to enable OCSP stapling on tomcat so that When OCSP is enabled, a server will pre-fetch the OCSP response for its own certificate and deliver the response to the user&#

Re: TLS1.3 support for tomcat 7 with APR/tomcat-native

2018-10-11 Thread Rémy Maucherat
is to get the > > latest patch backported to tomcat 7 > > For APR, it shouldn't be too much of an issue; it's just about getting > a qualifying tcnative build into tc7 and a little plumbing code. > > My *guess* right now is that Tomcat 7 will not get any back-ports f

Re: TLS1.3 support for tomcat 7 with APR/tomcat-native

2018-10-11 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Усманов, On 10/10/18 11:12 AM, Усманов Азат Анварович wrote: > Thanks Cristopher, I already did. All that´s left is to get the > latest patch backported to tomcat 7 For APR, it shouldn't be too much of an issue; it's just

Re: TLS1.3 support for tomcat 7 with APR/tomcat-native

2018-10-10 Thread Усманов Азат Анварович
Thanks Cristopher, I already did. All that´s left is to get the latest patch backported to tomcat 7 От: Christopher Schultz Отправлено: 10 октября 2018 г. 17:47:47 Кому: users@tomcat.apache.org Тема: Re: TLS1.3 support for tomcat 7 with APR/tomcat-native

Re: TLS1.3 support for tomcat 7 with APR/tomcat-native

2018-10-10 Thread Christopher Schultz
at the recent bug comments, especially Rainer's comment about Chrome/ff versions. - -chris > От: Усманов Азат Анварович > Отправлено: 25 сентября 2018 г. 11:39 Кому: > Tomcat Users List Тема: Re: TLS1.3 support for tomcat 7 with > APR/tomcat-native >

Re: TLS1.3 support for tomcat 7 with APR/tomcat-native

2018-10-06 Thread Усманов Азат Анварович
with APR/tomcat-native Do I need to file a separate feature request for Tomcat itself? The one I already filed(https://bz.apache.org/bugzilla/show_bug.cgi?id=62748) is for tomcat-native component. I looked through Tomcat changelog, I've found that previously TLS1.2 support was added via e

Re: Tuning parameters in APR/Standard connectors

2018-09-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 M, On 9/27/18 05:30, M. Manna wrote: > Hello, > > We have a some SQL statements (Insert, Update) which comes to a few > MBs in size. We are currently using APR 1.2.16. What we observed > that sometimes, the connection hangs

Tuning parameters in APR/Standard connectors

2018-09-27 Thread M. Manna
Hello, We have a some SQL statements (Insert, Update) which comes to a few MBs in size. We are currently using APR 1.2.16. What we observed that sometimes, the connection hangs out because of extremely large SQL text blocks being sent to SQL Server. Is there any parameter in APR or Standard

Re: TLS1.3 support for tomcat 7 with APR/tomcat-native

2018-09-25 Thread Усманов Азат Анварович
omcat native . (https://bz.apache.org/bugzilla/show_bug.cgi?id=53952) От: Усманов Азат Анварович Отправлено: 20 сентября 2018 г. 12:05:07 Кому: users@tomcat.apache.org Тема: Re: TLS1.3 support for tomcat 7 with APR/tomcat-native I did file a feature -enhancemen

Re: TLS1.3 support for tomcat 7 with APR/tomcat-native

2018-09-20 Thread Усманов Азат Анварович
I did file a feature -enhancement in bugzilla https://bz.apache.org/bugzilla/show_bug.cgi?id=62748 От: Christopher Schultz Отправлено: 19 сентября 2018 г. 23:31:28 Кому: users@tomcat.apache.org Тема: Re: TLS1.3 support for tomcat 7 with APR/tomcat-native

Re: TLS1.3 support for tomcat 7 with APR/tomcat-native

2018-09-19 Thread Усманов Азат Анварович
Bugzilla? I'm a newbie to the tomcat users list От: Christopher Schultz Отправлено: 19 сентября 2018 г. 23:31:28 Кому: users@tomcat.apache.org Тема: Re: TLS1.3 support for tomcat 7 with APR/tomcat-native -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Усманов

Re: TLS1.3 support for tomcat 7 with APR/tomcat-native

2018-09-19 Thread Christopher Schultz
so my guess is that more work > is required for tls.1.3 to work in my case Yes, you will definitely have to mention the TLSv1.3 ciphers in order to allow a TLSv1.3 handshake to succeed. But yes, it does indeed look like Tomcat requires some work. Can you please file an enhancement request

Re: TLS1.3 support for tomcat 7 with APR/tomcat-native

2018-09-19 Thread Усманов Азат Анварович
2018 г. 23:27 Кому: users@tomcat.apache.org Тема: Re: TLS1.3 support for tomcat 7 with APR/tomcat-native -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Усманов, On 9/18/18 6:43 AM, Усманов Азат Анварович wrote: > I have a java7 web application that runs on tomcat 7.0.70 I'm > using

Re: TLS1.3 support for tomcat 7 with APR/tomcat-native

2018-09-18 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Усманов, On 9/18/18 6:43 AM, Усманов Азат Анварович wrote: > I have a java7 web application that runs on tomcat 7.0.70 I'm > using Apr/tomcat-native w OpenSSL for TLS connections > .(Tomcat-native 1.2.17 APR 1.6,OpenSSL 1.1.1 RH

TLS1.3 support for tomcat 7 with APR/tomcat-native

2018-09-18 Thread Усманов Азат Анварович
Hi everyone! I have a java7 web application that runs on tomcat 7.0.70 I'm using Apr/tomcat-native w OpenSSL for TLS connections .(Tomcat-native 1.2.17 APR 1.6,OpenSSL 1.1.1 RHEL 6 ) Latest stable OpenSSL release (1.1.1) has TLS 1.3 support ,I have upgraded to it successfully. My que

Re: AJP-APR versus AJP-NIO and AJP-NIO2

2018-08-31 Thread Rémy Maucherat
On Fri, Aug 31, 2018 at 7:18 PM Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > James, > > On 8/31/18 09:27, recai james wrote: > > What is the biggest difference about these connectors? Which one > > performs the best? Is anybody

Re: AJP-APR versus AJP-NIO and AJP-NIO2

2018-08-31 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 James, On 8/31/18 09:27, recai james wrote: > What is the biggest difference about these connectors? Which one > performs the best? Is anybody shed a light on this? Have a look at: http://tomcat.apache.org/tomcat-9.0-doc/config/http.html#Connector

AJP-APR versus AJP-NIO and AJP-NIO2

2018-08-31 Thread recai james
Hello, What is the biggest difference about these connectors? Which one performs the best? Is anybody shed a light on this? Thanks. Rec.

Tomcat 7.0.88 APR/Native with PKCS11 support

2018-05-19 Thread shanthi thomas
Hi,   I'm attempting to use Tomcat APR/Native SSL connectors with openssl and a custom engine corresponding to an HSM provider (AWS CLoudHSM)  TOmcat version :7.0.88APR Version: 1.5.2Tomcat Native  Library Version:1.2.16OS: Linux (Amazon Linux) 4.14.33-51.34.amzn1.x86_64Java Version :  1.8.

Re: APR/native error on tomcat 8.5.16

2018-04-26 Thread Mark Thomas
I think you need to look at the application's exception handling. Mark > > INFO | jvm 1| 2018/04/25 05:37:38 | > org.apache.catalina.connector.ClientAbortException: java.io.IOException: > Unexpected error [730,054] writing data to the APR/native so

Re: APR/native error on tomcat 8.5.16

2018-04-25 Thread M. Manna
4/25 05:37:38 | org.apache.catalina.connector.ClientAbortException: java.io.IOException: Unexpected error [730,054] writing data to the APR/native socket [953,181,632] with wrapper [org.apache.tomcat.util.net.AprEndpoint$AprSocketWrapper@3685e06d :953181632]. INFO | jvm 1| 2018/04/25 05:37:3

Re: APR/native error on tomcat 8.5.16

2018-04-25 Thread Mark Thomas
gt; We did a controlled restart of individual servers to remove any possibility > for IO contention, but that didn't result into anything better. > > Has anyone seen this behaviour or remediated it ? Also, will this issue > occur with Tomcat 8.5.28 and APR 1.2.16 ? You should upgrade reg

APR/native error on tomcat 8.5.16

2018-04-25 Thread M. Manna
Hello, We have been getting the error stack on our production servers quite frequently over the past few days: java.io.IOException: Unexpected error [730,054] writing data to the APR/native socket [950,585,024] with wrapper [org.apache.tomcat.util.net.AprEndpoint$AprSocketWrapper@c5f5747

RE: Infinite loop in Poller run - Tomcat 8.5.16 with APR native 1.2.10

2018-03-05 Thread Prakash Saraf
Thanks Mark!! -Original Message- From: Mark Thomas [mailto:ma...@apache.org] Sent: Monday, March 05, 2018 1:39 PM To: Tomcat Users List Subject: Re: Infinite loop in Poller run - Tomcat 8.5.16 with APR native 1.2.10 On 05/03/18 21:29, Mark Thomas wrote: > On 05/03/18 16:42, Prak

Re: Infinite loop in Poller run - Tomcat 8.5.16 with APR native 1.2.10

2018-03-05 Thread Mark Thomas
On 05/03/18 21:29, Mark Thomas wrote: > On 05/03/18 16:42, Prakash Saraf wrote: >> Hi Team, >> >> We are observing the high CPU utilization often in our sandbox and >> production environment. We are using Tomcat 8.5.16 with APR native 1.2.10. >> >> It looks,

Re: Infinite loop in Poller run - Tomcat 8.5.16 with APR native 1.2.10

2018-03-05 Thread Mark Thomas
On 05/03/18 16:42, Prakash Saraf wrote: > Hi Team, > > We are observing the high CPU utilization often in our sandbox and > production environment. We are using Tomcat 8.5.16 with APR native 1.2.10. > > It looks, the Poller thread is going in infinite loop while adding s

Re: Infinite loop in Poller run - Tomcat 8.5.16 with APR native 1.2.10

2018-03-05 Thread Mark Thomas
Please do not cross-post. If you aren't sure where to post a question, use the users list. Mark On 05/03/18 16:42, Prakash Saraf wrote: > Hi Team, > > > > We are observing the high CPU utilization often in our sandbox and > production environment. We are using Tomcat

Infinite loop in Poller run - Tomcat 8.5.16 with APR native 1.2.10

2018-03-05 Thread Prakash Saraf
Hi Team, We are observing the high CPU utilization often in our sandbox and production environment. We are using Tomcat 8.5.16 with APR native 1.2.10. It looks, the Poller thread is going in infinite loop while adding sockets which are waiting to the poller. java/org/apache/tomcat/util/ net

RE: Activating Tomcat 8.5 APR on RHEL7

2018-01-16 Thread Jean Pierre Urkens
Thanks, this worked. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Activating Tomcat 8.5 APR on RHEL7

2018-01-15 Thread Peter Kreuser
Hi Jean-Pierre, > Am 15.01.2018 um 15:45 schrieb Jean Pierre Urkens > : > > I am having problems getting the apr library discovered by Tomcat 8.5. This > is what I tried: > > 1. I installed Tomcat-8.5 on RHEL-7. > 2. As the native tomcat apr libraries wher

Activating Tomcat 8.5 APR on RHEL7

2018-01-15 Thread Jean Pierre Urkens
I am having problems getting the apr library discovered by Tomcat 8.5. This is what I tried: 1. I installed Tomcat-8.5 on RHEL-7. 2. As the native tomcat apr libraries wheren't available on RHEL I made them myself as instructed by http://tomcat.apache.org/tomcat-8.5-doc/apr

Re: apr

2017-11-01 Thread Christopher Schultz
0) + APR_OS_ERRSPACE_SIZE (5) + 23 which is likely the "real error" here[1]. APR error 23 is "APR_EABOVEROOT" which has no documentation[2], but which points to this definition[3]: " #define APR_STATUS_IS_EABOVEROOT (s) ((s) == APR_EABOVEROOT) The given path

RE: apr

2017-10-31 Thread Cheltenham, Chris
lphia Work # 215-400-5025 Cell # 215-301-6571 -Original Message- From: Mark Thomas [mailto:ma...@apache.org] Sent: Tuesday, October 31, 2017 12:47 PM To: Tomcat Users List Subject: Re: apr On 31/10/17 14:41, Cheltenham, Chris wrote: > Thanks Mark , but where in the error logs do you

Re: apr

2017-10-31 Thread Mark Thomas
On 31/10/17 14:41, Cheltenham, Chris wrote: > Thanks Mark , but where in the error logs do you see I am building against > 1.0.1? > 31-Oct-2017 10:40:15.250 SEVERE [main] > org.apache.catalina.core.AprLifecycleListener.lifecycleEvent Failed to > initialize the SSLEngine. > org.apache.tomcat.

RE: apr

2017-10-31 Thread Cheltenham, Chris
# 215-301-6571 -Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: Tuesday, October 31, 2017 11:48 AM To: users@tomcat.apache.org Subject: Re: apr -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Chris, On 10/31/17 10:41 AM, Cheltenham, Chris wrote

RE: apr

2017-10-31 Thread Cheltenham, Chris
District of Philadelphia Work # 215-400-5025 Cell # 215-301-6571 -Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: Tuesday, October 31, 2017 11:48 AM To: users@tomcat.apache.org Subject: Re: apr -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Chris, On

Re: apr

2017-10-31 Thread Christopher Schultz
.lifecycleEvent Loaded > APR based Apache Tomcat Native library [1.2.14] using APR version > [1.6.3]. Thanks for posting this. It was missing from your initial post. It's always best to confirm that the software agrees with your expectations : ) > 31-Oct

RE: apr

2017-10-31 Thread Cheltenham, Chris
Thanks Mark , but where in the error logs do you see I am building against 1.0.1? 31-Oct-2017 10:40:15.243 INFO [main] org.apache.catalina.core.AprLifecycleListener.lifecycleEvent Loaded APR based Apache Tomcat Native library [1.2.14] using APR version [1.6.3]. 31-Oct-2017 10:40:15.243 INFO

Re: apr

2017-10-31 Thread Mark Thomas
On 31/10/17 12:19, Cheltenham, Chris wrote: > Mark, > > I am not sure what you are saying. > > I tried apr 1.4.8 through 1.6.2 > With > Tnative 1.1.16 through 1.2.14 > > I get the same openssl error every time. > > I am using CentOS's install and its 1

RE: apr

2017-10-31 Thread Cheltenham, Chris
Mark, I am not sure what you are saying. I tried apr 1.4.8 through 1.6.2 With Tnative 1.1.16 through 1.2.14 I get the same openssl error every time. I am using CentOS's install and its 1.0.2k FIPS I appreciate your help but I don't understand what you are trying

Re: apr

2017-10-31 Thread Mark Thomas
On 30/10/2017 17:49, Cheltenham, Chris wrote: > Hello Everyone, > > Using OpenSSL 1.0.2k-fips > > I am trying to install the apr. > > I used several different versions of APR 1.4 through 1.6 > > Then I compiled tnative 1.1.16, 1.2.x The latest release of the 1.1.x l

RE: apr

2017-10-30 Thread Cheltenham, Chris
, 2017 3:17 PM To: users@tomcat.apache.org Subject: Re: apr Hi Chris, Did you recompile APR with FIPS? You must completely compile tcnative.dll. Marcus From: Cheltenham, Chris Sent: Monday, October 30, 2017 1:49 PM To: users@tomcat.apache.org Subject: apr

Re: apr

2017-10-30 Thread marcus presley
Hi Chris, Did you recompile APR with FIPS? You must completely compile tcnative.dll. Marcus From: Cheltenham, Chris Sent: Monday, October 30, 2017 1:49 PM To: users@tomcat.apache.org Subject: apr Hello Everyone, Using OpenSSL 1.0.2k-fips I am trying to

apr

2017-10-30 Thread Cheltenham, Chris
Hello Everyone, Using OpenSSL 1.0.2k-fips I am trying to install the apr. I used several different versions of APR 1.4 through 1.6 Then I compiled tnative 1.1.16, 1.2.x When I start tomcat I get the same message each time. 30-Oct-2017 12:51:14.602 INFO [main

Re: Tomcat 8 APR/openSSL Issue

2017-10-12 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Syam, On 10/8/17 2:27 PM, Syam Pillai wrote: > Thanks Chris, yes you are right they messed it up. I will also file > a complaint with them. https://forums.aws.amazon.com/thread.jspa?messageID=809159 https://forums.aws.amazon.com/thread.jspa?message

Re: Tomcat APR / openssl

2017-10-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jennifer, On 10/9/17 10:22 AM, Wang, Jennifer wrote: > I am looking openssl's SSL_CTX_set_psk_server_callback in APR & > did not found it. Just wonder if there is way to set it. We need to > use TLS-PSK. I don't believe ther

Tomcat APR / openssl

2017-10-09 Thread Wang, Jennifer
NONCONFIDENTIAL // EXTERNAL Hi I am looking openssl's SSL_CTX_set_psk_server_callback in APR & did not found it. Just wonder if there is way to set it. We need to use TLS-PSK. Thanks! Jennifer

Tomcat APR / openssl

2017-10-09 Thread Wang, Jennifer
NONCONFIDENTIAL // EXTERNAL Hi I am looking openssl's SSL_CTX_set_psk_server_callback in APR & did not found it. Just wonder if there is way to set it. We need to use TLS-PSK. Thanks! Jennifer

Re: Tomcat 8 APR/openSSL Issue

2017-10-08 Thread Syam Pillai
Thanks Chris, yes you are right they messed it up. I will also file a complaint with them. On Sun, Oct 8, 2017 at 9:44 PM, Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Syam, > > On 10/5/17 5:10 PM, Syam Pillai wrote: > > On my

Re: Tomcat 8 APR/openSSL Issue

2017-10-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Syam, On 10/5/17 5:10 PM, Syam Pillai wrote: > On my AMI (Amazon Linux) server, tomcat 8 was running happily but > today, after an upgrade (Version is now 8.5.16.0), the server is > failing to start with the following message: > > INFO [main] org.a

Re: Tomcat 8 APR/openSSL Issue

2017-10-06 Thread Syam Pillai
Dear Mark, Thanks for the response. I already have the following installed: Tomcat Native: 1.2.10-1.18.amzn1 OpenSSL 1.0.2k-fips 26 Jan 2017 Also, please see this: ld /usr/lib64/libtcnative-1.so.0.2.10 ld: warning: cannot find entry symbol _start; not setting start address /usr/lib64/libtcnativ

Re: Tomcat 8 APR/openSSL Issue

2017-10-06 Thread Mark Thomas
On 05/10/17 22:10, Syam Pillai wrote: > On my AMI (Amazon Linux) server, tomcat 8 was running happily but today, > after an upgrade (Version is now 8.5.16.0), the server is failing to start > with the following message: > > INFO [main] org.apache.coyote.AbstractProtocol.init Initializing > Protoco

Tomcat 8 APR/openSSL Issue

2017-10-05 Thread Syam Pillai
On my AMI (Amazon Linux) server, tomcat 8 was running happily but today, after an upgrade (Version is now 8.5.16.0), the server is failing to start with the following message: INFO [main] org.apache.coyote.AbstractProtocol.init Initializing ProtocolHandler ["https-openssl-nio-8443"] /usr/share/soe

Re: apr library

2017-07-22 Thread Christopher Schultz
n ARP que permite un > rendimiento óptimo en entornos de desarrollo no ha sido hallada en > java.library.path: > /usr/java/packages/lib/amd64:/usr/lib64:/lib64:/lib:/usr/lib>> > > How can I set this path *"/usr/share/apr/lib"* into the > *java.library.path*? >

apr library

2017-07-22 Thread Anibal Alvarez Alvarez
Hi. When I run a .jsp file, in the console I can read <> How can I set this path *"/usr/share/apr/lib"* into the *java.library.path*? I've tried to add it up at eclipse.ini like: ... -vm -Djava.library.path="${workspace_loc:project}/lib;${env_var:PATH};/usr/local/

Re: Tomcat 8.5.16 - APR version mismatch error upon startup

2017-07-18 Thread M. Manna
l 18, 2017 5:53:14 PM org.apache.catalina.core.AprLifecycleListener > init > > > > SEVERE: An incompatible version [1.1.33] of the APR based Apache Tomcat > > Native library is installed, while Tomcat requires version [1.2.6] > > > [...] > > > We copied and pasted t

Re: Tomcat 8.5.16 - APR version mismatch error upon startup

2017-07-18 Thread Konstantin Kolinko
g the following error: > > Listening for transport dt_socket at address: 5005 > > Jul 18, 2017 5:53:14 PM org.apache.catalina.core.AprLifecycleListener init > > SEVERE: An incompatible version [1.1.33] of the APR based Apache Tomcat > Native library is installed, while Tomcat req

Re: Tomcat 8.5.16 - APR version mismatch error upon startup

2017-07-18 Thread Mark Thomas
On 18/07/17 15:42, M. Manna wrote: > Hello, > > We have recently upgraded our tomcat from 8.0.29 to 8.5.16. As part of > standard upgrade we have cleaned up all our bin/conf/lib folder contents > and removed any older jars (e.g. ecj jars). That sounds like you have been installing new versions on

Tomcat 8.5.16 - APR version mismatch error upon startup

2017-07-18 Thread M. Manna
: 5005 Jul 18, 2017 5:53:14 PM org.apache.catalina.core.AprLifecycleListener init SEVERE: An incompatible version [1.1.33] of the APR based Apache Tomcat Native library is installed, while Tomcat requires version [1.2.6] Jul 18, 2017 5:53:14 PM org.apache.catalina.core.AprLifecycleListener init

Re: Upgrade to APR 1.5 with Tomcat 8.0.39 distro

2017-05-27 Thread Mark Thomas
On 27/05/17 08:16, Mohammed Manna wrote: > Hi, > > I understand that there were some notable security upgrades made for 1.5 > APR. For tomcat 8.0.39 i belive the distro is still using 1.2.12. > > Does anyone know if upgrading to 1.5.2 will cause any complications? You appe

Upgrade to APR 1.5 with Tomcat 8.0.39 distro

2017-05-27 Thread Mohammed Manna
Hi, I understand that there were some notable security upgrades made for 1.5 APR. For tomcat 8.0.39 i belive the distro is still using 1.2.12. Does anyone know if upgrading to 1.5.2 will cause any complications? KR,

Re: Tomcat 8.5.3 with Apr Connector throws NullPointerException

2017-03-20 Thread linbo liao
): And none of these feature used in our application, only 2181 port (Apr) used ( SSL/AJP isn't used). Application is a simple Restful API, received POST json data and send to Kafka. - HTTP/2 - Servlet async - send file - web socket Thanks, Linbo 2017-03-20 17:10 G

Re: Tomcat 8.5.3 with Apr Connector throws NullPointerException

2017-03-20 Thread Mark Thomas
On 20/03/17 03:15, linbo liao wrote: > Hi, > > My tomcat throws NullPointerException sometimes. Here is environment: > > Linux VM: RedHat Enterprise Linux Server release 6.7 x86_64 > Tomcat: 8.5.3 > JVM: HotSpot 64-Bit Server VM 1.8.0_65 > APR: 1.5.2-1 > Tomcat N

Tomcat 8.5.3 with Apr Connector throws NullPointerException

2017-03-19 Thread linbo liao
Hi, My tomcat throws NullPointerException sometimes. Here is environment: Linux VM: RedHat Enterprise Linux Server release 6.7 x86_64 Tomcat: 8.5.3 JVM: HotSpot 64-Bit Server VM 1.8.0_65 APR: 1.5.2-1 Tomcat Native: 1.2.7 The exception show in catalina.log : 18-Mar-2017 03:36:01.135 WARNING

Re: JMX currentThreadsBusy less than connections/requests when use APR connector

2017-03-11 Thread linbo liao
ith only 2 cores, you can only actually do 2 things at once. Perhaps > you need more load-generating computers. > > > 2、Can I use currentThreadsBusy to monitor the performance of Tomcat > > using APR connector? > > Yes, you can use that with any connector. The threads are Ja

Re: JMX currentThreadsBusy less than connections/requests when use APR connector

2017-03-10 Thread Christopher Schultz
or the performance of Tomcat > using APR connector? Yes, you can use that with any connector. The threads are Java threads. Only the underlying file descriptors are being managed by APR versus Java's BIO/NIO/2 stream managers. - -chris > 2017-03-10 0:42 GMT+08:00 Christopher Schult

Re: JMX currentThreadsBusy less than connections/requests when use APR connector

2017-03-09 Thread linbo liao
1、The load-generating vm has 2 cores. 2、Can I use currentThreadsBusy to monitor the performance of Tomcat using APR connector? 2017-03-10 0:42 GMT+08:00 Christopher Schultz : > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Linbo, > > On 3/8/17 8:13 PM, linbo liao wrot

  1   2   3   4   5   6   7   8   9   10   >