Re: Regarding Tomcat url redirection

2024-04-24 Thread Christopher Schultz
ttps://example.lbg.com/towl/login.jsp) I don't think you need any use of the RewriteValve unless you want to handle sending HTTP 302 redirect responses to insecure requests without specifying the CONFIDENTIAL transport-guarantee in your application's web.xml file. But I don't see any rea

Re: Tomcat closes connections on unexpected status codes

2024-04-24 Thread Christopher Schultz
Stefan, On 4/24/24 13:58, Stefan Ansing wrote: Op do 18 apr 2024 om 17:42 schreef Mark Thomas : On 18/04/2024 15:18, Stefan Ansing wrote: Hi Rémy, Mark, I just want to make sure that we’re understanding each other. I can see that the connection needs to be closed in certain conditions to p

Re: Regarding Tomcat url redirection

2024-04-24 Thread Christopher Schultz
Wednesday, April 24, 2024, Christopher Schultz < ch...@christopherschultz.net> wrote: Lavanya, On 4/24/24 07:37, lavanya tech wrote: Sorry I understood wrongly here with regards to my environment, Let me start from the beginning. I donot want to use redirect at all. I simply wanted to for

Re: Regarding Tomcat url redirection

2024-04-26 Thread Christopher Schultz
Apr 24, 2024 at 11:12 PM Christopher Schultz < ch...@christopherschultz.net> wrote: Lavanya, On 4/24/24 15:39, lavanya tech wrote: Local host means the machine i am logged in to server.lbg.com You are right, example.lbg.com is CNAME record. Okay, thanks for clearing that up. I dont ha

Re: Regarding Tomcat url redirection

2024-04-26 Thread Christopher Schultz
: Hi Chris, Thanks I will request new certificate with SANs and I will try to fix the things from our end. Best Regards, Lavanya On Wed, Apr 24, 2024 at 11:12 PM Christopher Schultz < ch...@christopherschultz.net> wrote: Lavanya, On 4/24/24 15:39, lavanya tech wrote: Local host

Re: Regarding Tomcat url redirection

2024-04-30 Thread Christopher Schultz
iguration changes. Please clarify I am not able to figure this out and I have this issue many days pending. How to make it work with port 8443 and with out port Also I wanted to use weburl with alias name permanently instead of the hostname. How can I achieve both Thanks, Lavanya --> On

Re: Monitoring and Tuning Tomcat

2024-05-01 Thread Christopher Schultz
Mark and Jerry, On 5/1/24 04:00, Mark Thomas wrote: On 30/04/2024 21:24, Jerry Malcolm wrote: I'm trying to optimize my instance, CPU, tuning, and size requirements for Tomcat.  It's easy to see CPU usage.  But this TC instance is running a lot of microservices that are often in and out fairly

Re: FileUpload class not working with Tomcat 10.1

2024-05-07 Thread Christopher Schultz
ition (for schDistImportResults.jsp) was based on the XML suggestion from Christopher Schultz back in November, 2023. Since only the one jsp program was involved, there was no discussion of how to specify more than one program in web.xml. So, I can (and will) give the servlets different names i

Re: [EXTERNAL] RE: After Windows Server Restart, tomcat generating New JSESSIONID even with <%@ page session="false" %>

2024-05-07 Thread Christopher Schultz
Joey, On 5/7/24 10:50, Joey Cochran wrote: Coud this be the culprit ? ${CATALINA_BASE}/conf/context.xml Possible, but the report was that every single request generates a new JSESSIONID, not that every session seems to have expired and needs to be re-initialized. -chr

Re: Regarding Tomcat url redirection

2024-05-08 Thread Christopher Schultz
elps, -chris On Tue, Apr 30, 2024 at 5:44 PM Christopher Schultz < ch...@christopherschultz.net> wrote: Lavanya, On 4/30/24 07:10, lavanya tech wrote: Can you tell me how to do the below ? How should I setup Tomcat in server.xml ? If you want to use port 443 (the default port for HTTP

Re: Regarding Tomcat url redirection

2024-05-09 Thread Christopher Schultz
g like a rewrite valve/filter/whatever. Take care to redirect relative to the SERVER and not to the application. 5b. Write your own servlet to do a specific redirect. I hope that helps, -chris On Wednesday, May 8, 2024, Christopher Schultz wrote: Lavanya, On 5/8/24 06:48, lavanya tech w

Re: FileUpload class not working with Tomcat 10.1

2024-05-09 Thread Christopher Schultz
Mark and Chuck, On 5/9/24 09:35, Chuck Caldarale wrote: You need the web.xml entries because you have extra configuration items (the settings) that aren’t part of the default JSP servlet definition. +1 If you didn't need to upload files to your JSP, you wouldn't have needed any of this in yo

Re: Regarding Tomcat url redirection

2024-05-09 Thread Christopher Schultz
ite valve/filter/whatever. Take care to redirect relative to the SERVER and not to the application. 5b. Write your own servlet to do a specific redirect. I hope that helps, -chris On Wednesday, May 8, 2024, Christopher Schultz < ch...@christopherschultz.net> wrote: Lavanya, On 5/8/24

Re: Regarding Tomcat url redirection

2024-05-10 Thread Christopher Schultz
nd nothing else? This should allow you to reach the application at both https://example.lbg.com/ and https://server.lbg.com/ as well as both of those with port 8443. Then use the applications and make sure they are working as expected. Then, we'll add the /towl handling. -chris

Re: Regarding Tomcat url redirection

2024-05-10 Thread Christopher Schultz
Lavanya, On 5/10/24 06:03, lavanya tech wrote: If we create new java.filter as below then we can redirect the urls ? import javax.servlet.*; import javax.servlet.annotation.WebFilter; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import java.io.IO

Re: Upgrade query

2024-05-13 Thread Christopher Schultz
Kalaivani, On 5/13/24 06:13, GANESAN, Kalaivani wrote: I have a question regarding upgrading to 9.0.86. The current version is 9.0.8 and needs to be upgraded to 9.0.86. We have apache tomcat running in our openptk servers. Do you have any detailed steps on the process? We have downloaded apache

Re: Regarding Tomcat url redirection

2024-05-13 Thread Christopher Schultz
deleting the work/ directory and restarting. --> I have this wierd behavior for some reason, thoudh index.jsp is located no changes were made to file. After deleting cookies url works where Am I going wrong. Thanks, Lavanya On Fri, May 10, 2024 at 6:50 PM Christopher Schultz < ch...@christophe

Re: Regarding Tomcat url redirection

2024-05-14 Thread Christopher Schultz
13, 2024 at 10:17 PM lavanya tech wrote: Hi Chris, Sorry, If I did confuse. It’s important that https://server.lbg.com:8443/towl is always working. Goal is not to disable /towl, but just redirect or aliasing https//example.lbg.com/ to https://server.lbg.com:8443/towl Thanks, Lavanya On

Re: Regarding Tomcat url redirection

2024-05-14 Thread Christopher Schultz
or you. -chris On Mon, May 13, 2024 at 10:17 PM lavanya tech wrote: Hi Chris, Sorry, If I did confuse. It’s important that https://server.lbg.com:8443/towl is always working. Goal is not to disable /towl, but just redirect or aliasing https//example.lbg.com/ to https://server.lbg.com:8443/towl

Re: JVM crashing with caCertificatePath in server.xml

2024-05-14 Thread Christopher Schultz
On 5/14/24 15:23, Andy Arismendi wrote: Sure thing - ADDITIONAL ENVIRONMENT INFO: libtcnative: tcnative-1.dll is included in the Tomcat 9.0.89 64-bit Windows zip download, not sure about the version... OpenSSL version: 3.0.13 30 Jan 2024 (Library: OpenSSL 3.0.13 30 Jan 2024) (with FIPS 140

Re: Regarding Tomcat url redirection

2024-05-14 Thread Christopher Schultz
the base URL and all kinds of things like that. -chris On Tuesday, May 14, 2024, Christopher Schultz wrote: Lavanya, On 5/14/24 09:12, lavanya tech wrote: IMHO removing the port number is always the preferred solution — I never did it can we achieve this with tomcat or we need to setup a

Re: Regarding Tomcat url redirection

2024-05-15 Thread Christopher Schultz
example.lbg.com/towl> Unfortunately aliasing still doesnot work https://example.lbg.com <https://example.lbg.com> --> https://server.lbg.com:8443/towl <https://server.lbg.com:8443/towl> and many urls works The "aliasing" will always be weird. IMO it's better to r

Re: JVM crashing with caCertificatePath in server.xml

2024-05-16 Thread Christopher Schultz
Michael, On 5/16/24 12:00, Michael Osipov wrote: On 2024/05/16 15:55:04 Andy Arismendi wrote: Ok great! Thank you for taking the time and making the effort to look into this Michael, much appreciated! Here is a dynamically linked, patched version until there is an official release: http://h

Re: Regarding Tomcat url redirection

2024-05-16 Thread Christopher Schultz
given arbitrary and weird requirements almost as a game. I'm not sure I can help you any further at this point. -chris On Wed, May 15, 2024 at 2:16 PM Christopher Schultz < ch...@christopherschultz.net> wrote: Lavanya, On 5/15/24 04:43, lavanya tech wrote: Though to write you priv

Re: Regarding Tomcat url redirection

2024-05-16 Thread Christopher Schultz
given arbitrary and weird requirements almost as a game. I'm not sure I can help you any further at this point. -chris On Wed, May 15, 2024 at 2:16 PM Christopher Schultz < ch...@christopherschultz.net> wrote: Lavanya, On 5/15/24 04:43, lavanya tech wrote: Though to write you priv

Re: JVM crashing with caCertificatePath in server.xml

2024-05-17 Thread Christopher Schultz
Michael, On 5/17/24 03:42, Michael Osipov wrote: On 2024/05/16 21:37:34 Christopher Schultz wrote: Michael, On 5/16/24 12:00, Michael Osipov wrote: On 2024/05/16 15:55:04 Andy Arismendi wrote: Ok great! Thank you for taking the time and making the effort to look into this Michael, much

Re: JVM crashing with caCertificatePath in server.xml

2024-05-20 Thread Christopher Schultz
Michael, On 5/20/24 06:52, Michael Osipov wrote: On 2024/05/17 15:11:58 Christopher Schultz wrote: Michael, On 5/17/24 03:42, Michael Osipov wrote: On 2024/05/16 21:37:34 Christopher Schultz wrote: Michael, On 5/16/24 12:00, Michael Osipov wrote: On 2024/05/16 15:55:04 Andy Arismendi

Re: Win10 installation progress

2024-05-21 Thread Christopher Schultz
Hello, On 5/18/24 23:40, DdC wrote: Gave up on installing 9.0.88. on Win10. Why did you give up? ZIP installation is a single command (either via CMD or UI shell). EXE installer is pretty straightforward, too. There's also a third-party installer that has a few more features including the a

Re: JVM crashing with caCertificatePath in server.xml

2024-05-21 Thread Christopher Schultz
Michael, On 5/21/24 03:32, Michael Osipov wrote: On 2024/05/20 13:30:43 Christopher Schultz wrote: Michael, On 5/20/24 06:52, Michael Osipov wrote: On 2024/05/17 15:11:58 Christopher Schultz wrote: Michael, On 5/17/24 03:42, Michael Osipov wrote: On 2024/05/16 21:37:34 Christopher Schultz

Re: PersistentManager and ClassNotFoundException

2024-05-28 Thread Christopher Schultz
Jakub, On 5/24/24 09:31, Jakub Królikowski wrote: On Fri, May 24, 2024 at 11:23 AM Mark Thomas wrote: Can you provide the simplest web application (with source) that replications the problem? Mark On 23/05/2024 23:45, Jakub Królikowski wrote: Hi, I'm working with Tomcat 10.1. When a use

Re: Database Connection Requests Initiated but Not Sent on the Wire (Some, Not All)

2024-05-30 Thread Christopher Schultz
Eric, On 5/29/24 12:10, Eric Robinson wrote: -Original Message- From: Mark Thomas Sent: Wednesday, May 29, 2024 10:19 AM To: users@tomcat.apache.org Subject: Re: Database Connection Requests Initiated but Not Sent on the Wire (Some, Not All) On 29/05/2024 16:08, Eric Robinson wrote:

Re: PersistentManager and ClassNotFoundException

2024-05-30 Thread Christopher Schultz
Jakub, On 5/30/24 05:25, Jakub Królikowski wrote: Where is your configuration located? It *should* be inside your located in META-INF/context.xml in your web application. If it's in there, then everything it does should be in the context (and ClassLoader) of your web application -- where your

Re: Write listener question

2024-05-30 Thread Christopher Schultz
Joan, Please don't hijack threads. Start a new message to the list without replying to an existing one. -chris On 5/30/24 06:03, joan.balagu...@ventusproxy.com wrote: Sorry, this issue happens with both Tomcat 8.5.x and 10.1.x. -Original Message- From: joan.balagu...@ventusproxy.com

Re: context.xml file location

2024-05-30 Thread Christopher Schultz
Hello, On 5/30/24 10:12, firstName lastName wrote: Renaming my context.xml to ROOT.xml (without changing the folder) fixed the problem. Thanks for the help! The best practice would be to put your context.xml file into your WAR file's META-INF/context.xml path. That way, it will be deployed fr

Re: Database Connection Requests Initiated but Not Sent on the Wire (Some, Not All)

2024-05-31 Thread Christopher Schultz
Eric, On 5/31/24 11:09, Eric Robinson wrote: The results are looking great so far. Here's what we know: Before the patch, we had 2 load-balanced tomcats in production for this customer. Due to the driver search bottleneck, we were seeing hundreds of stuck threads during the slowdown periods.

Re: Database Connection Requests Initiated but Not Sent on the Wire (Some, Not All)

2024-05-31 Thread Christopher Schultz
Mark, On 5/31/24 12:44, Mark Thomas wrote: On 31/05/2024 16:09, Eric Robinson wrote: The results are looking great so far. Excellent. Here's what we know: Before the patch, we had 2 load-balanced tomcats in production for this customer. Due to the driver search bottleneck, we were seeing

Re: Database Connection Requests Initiated but Not Sent on the Wire (Some, Not All)

2024-05-31 Thread Christopher Schultz
Eric, On 5/31/24 13:44, Eric Robinson wrote: -Original Message- From: Christopher Schultz Sent: Friday, May 31, 2024 12:38 PM To: users@tomcat.apache.org Subject: Re: Database Connection Requests Initiated but Not Sent on the Wire (Some, Not All) Mark, On 5/31/24 12:44, Mark Thomas

Re: Need help installing SSL certificate in tomcat keystore

2024-05-31 Thread Christopher Schultz
Mark, On 5/30/24 08:46, Fung-A-Fat, Mark wrote: I am running a java web app on windows 2019 server and need some help getting the SSL certificate installed into my keystore. I am running tomcat 9.x and java 11 I am able to generate a certificate request using both keytool and/or openssl Fo

Re: Tomcat 9 memory leak message

2024-05-31 Thread Christopher Schultz
Jenny, On 5/31/24 14:52, Ying Jin wrote: We removed the ojdbc8 driver jar from web-inf/lib from the web application and kept the ojdbc8 jar file in the Tomcat/lib folder, but we still can see the following memory link warning message whenever we redeploy the web application. We use the Tomcat

Re: Tomcat 9 memory leak message

2024-06-01 Thread Christopher Schultz
ot sure if this is correct > or not. > > Please advise, > > Many thanks! > Jenny > >> On Fri, May 31, 2024 at 3:50 PM Christopher Schultz < >> ch...@christopherschultz.net> wrote: >> >> Jenny, >> >>> On 5/31/24 14:52, Ying Jin wrote:

Re: Cannot invoke "org.apache.tomcat.util.net.SSLHostConfig.getProtocols()" because "this.sslHostConfig" is null

2024-06-04 Thread Christopher Schultz
Adam, On 6/3/24 04:16, Adam Danischewski wrote: Using Embedded Tomcat 10 in SpringBoot, trying to manually configure a new HTTPS/SSL port. I've got the following SSL bundle set in my application properties (fairly sure this part is working fine): > > [snip] Note: I am new to Tomcat and most o

Re: Tomcat 9 memory leak message

2024-06-04 Thread Christopher Schultz
) your driver to CATALINA_BASE/lib Hope that helps, -chris On Sun, Jun 2, 2024 at 1:57 AM Christopher Schultz < ch...@christopherschultz.net> wrote: Jenny, (Apologies for top-posting) “Safely ignored” can mean many things. You are only in danger of running out of heap space. So if you

Re: Webapp Getting redirected to an external IP Address

2024-06-04 Thread Christopher Schultz
Mark, On 6/4/24 01:50, Mark Thomas wrote: On 04/06/2024 05:07, Tom Robinson wrote: Hi, We are running a tomcat7 application You do realise that support for Tomcat 7 ended on 31 March 2021 don't you? on our LAN which gets redirected from a private, internal IP Address to an external ip addr

Re: Invalid character found in the request target

2024-06-04 Thread Christopher Schultz
Christoph, On 6/4/24 05:49, Christoph Kukulies wrote: I'm getting these when startig tomcat9: This is a request, not startup. But it's not important. 04-Jun-2024 09:49:11.448 INFO [http-nio-8080-exec-6] org.apache.coyote.http11.Http11Processor.service Error parsing HTTP request header No

Re: Invalid character found in the request target

2024-06-04 Thread Christopher Schultz
Chuck, On 6/4/24 09:10, Chuck Caldarale wrote: On Jun 4, 2024, at 06:07, Christopher Schultz wrote: 04-Jun-2024 09:49:11.448 INFO [http-nio-8080-exec-6] org.apache.coyote.http11.Http11Processor.service Error parsing HTTP request header Note: further occurrences of HTTP request

Re: Tomcat 9.0.xx JDK Version Support and EOL

2024-06-05 Thread Christopher Schultz
Chaitanya, On 6/5/24 08:47, Chaitanya Gopisetti wrote: It was mentioned that Tomcat 9.0.x supports java 8 and later. So wanted to know whether it supports Jdk 21? Also wanted to know the End of life expected date for Tomcat 9.0.x version. Tomcat 9 should run jut fine on any Java version from 8

Re: Tomcat 9.0.xx JDK Version Support and EOL

2024-06-05 Thread Christopher Schultz
Chaitanya, On 6/5/24 09:11, Chaitanya Gopisetti wrote: Also can you update on the End of life expected date for Tomcat 9.0.x version -Original Message- From: Christopher Schultz Sent: Wednesday, June 5, 2024 6:37 PM To: users@tomcat.apache.org Subject: Re: Tomcat 9.0.xx JDK Version

Re: 8443 connector configuration (tomcat9)

2024-06-07 Thread Christopher Schultz
Christoph, On 6/6/24 08:33, Christoph Kukulies wrote: I have the following configuration: |HAPROXY TOMCAT9 https://cms.site.org/ ==> https://cms.site.org:8443/ | Haproxy is passing the https-request through to tomcat. So far the request se

Re: Embedded Tomcat common classloader

2024-06-07 Thread Christopher Schultz
Mark, On 6/7/24 01:49, Mark Thomas wrote: On 06/06/2024 18:48, Dave Breeze wrote: Thanks Mark appreciate that the url was for 8.0 With regards to classpath that was my first attempt - unfortunately it would seem that Tomcat does not support wildcards in the classpath - for example dirpath/lib/

Re: PersistentManager and ClassNotFoundException

2024-06-07 Thread Christopher Schultz
Jakub, On 5/30/24 08:08, Jakub Królikowski wrote: Hi Christopher, On Thu, May 30, 2024 at 1:40 PM Christopher Schultz < ch...@christopherschultz.net> wrote: Jakub, On 5/30/24 05:25, Jakub Królikowski wrote: Where is your configuration located? It *should* be inside your located i

Re: Embedded Tomcat common classloader

2024-06-07 Thread Christopher Schultz
Chuck, On 6/7/24 10:02, Chuck Caldarale wrote: On Jun 7, 2024, at 08:11, Christopher Schultz wrote: On 6/7/24 01:49, Mark Thomas wrote: On 06/06/2024 18:48, Dave Breeze wrote: Thanks Mark appreciate that the url was for 8.0 With regards to classpath that was my first attempt

Re: PKCS#8 encryption algorithm unrecognized

2024-06-11 Thread Christopher Schultz
Mark, On 6/10/24 14:56, Timothy Resh wrote: After much debugging, I have found the issue in my situation. In the server.xml file, you must put keystoreType="PKCS12" for it to recognize the keystore properly. That doesn't make any sense to me. Not a single one of your previous posts has been u

Re: Tomcat 9: Java 11 to Java 17

2024-06-11 Thread Christopher Schultz
Ryan, Word-wrapping didn't help on this one... On 6/10/24 15:44, Ryan Esch wrote: Hi folks,I have a webapp running Apache Tomcat 9.0.67 with Java 11, using JASPIC for authentication. For reference, using these:             org.apache.tomcat            tomcat-catalina            9.0.85      

Re: Excluding specific files when creating WAR files?

2024-06-11 Thread Christopher Schultz
James, On 6/10/24 13:09, James H. H. Lampert wrote: Please forgive me if this is a RTFM issue, or if it's outside the scope of this List (and this isn't exactly the first time I've imposed upon the friendly nature of this List, knowing that it's a much more forgiving environment than a lot of

Re: Changes between Tomcat 9.0.86 and 9.0.88?

2024-06-13 Thread Christopher Schultz
Jon, On 6/13/24 14:27, Mcalexander, Jon J. wrote: Thanks Chuck! Here is the full stack-trace Jun 11, 2024 3:21:28 PM org.apache.catalina.startup.HostConfig deployDirectory SEVERE: Error deploying web application directory [/prod/app/bankr/ist_bankr_4.0_a/webapps/digitalbranchservices] java.lan

Re: Configuration of Certificate Verification on Tomcat 10

2024-06-18 Thread Christopher Schultz
Izek, On 6/18/24 13:49, Izek Hornbeck wrote: I am creating a Java web app (Java v17, 2021-09-14) that runs on a Tomcat 10.1.23 server. I need to authenticate users by verifying their certificate from a smart card. (This Stack Overflow question I posted gives some good context: " https://stackove

Re: Configuration of Certificate Verification on Tomcat 10

2024-06-19 Thread Christopher Schultz
Mark, On 6/19/24 10:14, Mark Thomas wrote: On 18/06/2024 23:30, Christopher Schultz wrote: Izek, On 6/18/24 13:49, Izek Hornbeck wrote: I am creating a Java web app (Java v17, 2021-09-14) that runs on a Tomcat 10.1.23 server. I need to authenticate users by verifying their certificate from

Re: Tomcat MySQL Connection Pooling JNDI lookup

2024-06-19 Thread Christopher Schultz
Daniel, On 6/19/24 11:09, Daniel Schwartz wrote: Dear Thomas, Your email came with no content. Please try again. His reply email looks fine to me. -chris - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org

Re: Tomcat MySQL Connection Pooling JNDI lookup

2024-06-19 Thread Christopher Schultz
Daniel, On 6/19/24 11:40, Daniel Schwartz wrote: Dear Felix, Thank you for your reply. The connector jar file is at C:\Program Files\apache-tomcat-10.1.24\lib\mysql-connector-j-8.4.0.jar The latest entry in catalina.2024-06-17.log is copied below. The latest entry in localhost.2024-06-

Re: Tomcat 9 symlinks ?

2024-06-19 Thread Christopher Schultz
Stephen, On 6/19/24 13:55, Stephen Tenberg wrote: Hello I have scoured the web trying to get symlinks working for jsp pages or folders in Tomcat 9 using Ubuntu 20.04. Here is how to repeat the issue, and what I have tried. 1. Create a new folder in webapps, say "foo" 2. Put HelloWorld.jsp ther

Re: Not able to start WebApp on JDK 11

2024-06-19 Thread Christopher Schultz
Shivaanand, On 6/18/24 13:29, Shivaanand Verma wrote: We are having a Jersey Servlet application running on the 9.0.80 version of Apache Tomcat. Recently we've been trying to migrate our application from JDK 8 to JDK 11. The application used to run smoothly on JDK 8, but when compiled against J

Re: Tomcat 9 symlinks ?

2024-06-19 Thread Christopher Schultz
Chuck, On 6/19/24 15:49, Chuck Caldarale wrote: On Jun 19, 2024, at 14:42, Stephen Tenberg wrote: You asked why path="" instead of path="foo" in context at server.xml? That was our attempt to mount this application at "/" instead of at "/foo" which is a requirement here. Just deploy the

Re: Tomcat MySQL Connection Pooling JNDI lookup

2024-06-19 Thread Christopher Schultz
rror messages. Is it possible that the files you are editing aren't the ones being deployed into the container? Are you using anything that might take control of any JNDI namespaces in the JVM? For me, this always "just works" and so no configurator-style tool is necessary :/ -ch

Re: Errors after upgrading to Tomcat 9.0.90

2024-06-20 Thread Christopher Schultz
Francesco, On 6/20/24 09:03, Francesco Chicchiriccò wrote: On 2024/06/20 12:18:15 Konstantin Kolinko wrote: чт, 20 июн. 2024 г. в 13:25, Francesco Chicchiriccò : Hi there, at Syncope we usually use the latest Tomcat versions to run a large chunk of our integration tests. In our master branc

Re: Errors after upgrading to Tomcat 9.0.90

2024-06-26 Thread Christopher Schultz
Francesco, On 6/21/24 06:02, Francesco Chicchiriccò wrote: On 2024/06/20 15:52:16 Christopher Schultz wrote: Francesco, On 6/20/24 09:03, Francesco Chicchiriccò wrote: On 2024/06/20 12:18:15 Konstantin Kolinko wrote: чт, 20 июн. 2024 г. в 13:25, Francesco Chicchiriccò : Hi there, at

Re: Errors after upgrading to Tomcat 9.0.90

2024-06-27 Thread Christopher Schultz
Rainer, On 6/21/24 07:55, Rainer Jung wrote: Am 20.06.24 um 17:52 schrieb Christopher Schultz: Francesco, On 6/20/24 09:03, Francesco Chicchiriccò wrote: On 2024/06/20 12:18:15 Konstantin Kolinko wrote: чт, 20 июн. 2024 г. в 13:25, Francesco Chicchiriccò : Hi there, at Syncope we usually

Re: Possible penetration attempt or DOS attack: any suggestions on what can be done?

2024-06-27 Thread Christopher Schultz
James, On 6/24/24 17:57, James H. H. Lampert wrote: On 6/24/24 12:03 PM, Tim Funk wrote: Conversely, this is a good time for the developers to review their server logging and tune it to be less verbose for these normal exceptions. As well as implementing logging frameworks and logging at the ap

Re: [OT] ldap administration tool and error LDAP: error code 49 - Invalid Credentials

2024-06-27 Thread Christopher Schultz
Shekhar, On 6/25/24 01:40, Shekhar Dhotre wrote: Is there any DLap admin tool available ? I want to manage IBM and openldap with it . trying to reset users password in IBM ldap but it fails with "[root@camttvpws002 app]# ldapsearch -x -h //102.85.9.23 -D "ldap@seth.local

Re: PKCS#8 encryption algorithm unrecognized

2024-06-27 Thread Christopher Schultz
Timothy, On 6/25/24 10:39, Timothy Resh wrote: In the SSLPassword="${KSENC(6qkaMErQ==; C:\Certificate\Keystore\Vessel.p12)}" we defined a Class to convert the Encrypted password and set the following properties: public class MyPropertySource implements org.apache.tomcat.util.IntrospectionUti

Re: How to configure Tomcat with a Managed Service Account when using LocalMachine certificates for TLS

2024-06-27 Thread Christopher Schultz
Gavioto, On 6/25/24 13:51, Gavioto 🕵 wrote: Finally, I got a configuration that works with Certificate Storage. It is very specific, and I couldn't find any other until date. It works, but in our environment there is a required manual step yet. I think it should be configured in Windows and is

Re: Isolating the Root Cause of "Connection Refused"

2024-06-27 Thread Christopher Schultz
Eric, On 6/25/24 14:22, Chuck Caldarale wrote: On Jun 25, 2024, at 13:12, Eric Robinson wrote: I'm obviously not getting something. If I understand correctly, the purpose of the acceptCount param is to allow tomcat to reject connections even after the TCP stack has passed them to the java

Re: Isolating the Root Cause of "Connection Refused"

2024-06-27 Thread Christopher Schultz
Eric, On 6/25/24 20:10, Eric Robinson wrote: No - Tomcat passes the acceptCount value to the TCP/IP stack of the OS as part of listener socket initialization. I thought of that after I sent my previous message. the OS won't log this, since it's considered to be an application error. Assum

Re: Isolating the Root Cause of "Connection Refused"

2024-06-27 Thread Christopher Schultz
Eric, On 6/26/24 01:43, Eric Robinson wrote: What is impact on memory utilization if we increase the acceptCount value? There are 100 tomcat instances on the server. And would maxThreads have to be increased to accommodate the extra connections? After reading more, I guess that's a dumb questi

Re: Many CLOSE_WAIT connections causing the app not available

2024-06-27 Thread Christopher Schultz
Stephen, On 6/26/24 09:31, Chuck Caldarale wrote: On Jun 26, 2024, at 00:18, Stephen Stevie wrote: We are using Apache Tomcat 8.5.49 Stop right there. Tomcat 8.5.x reached end-of-life earlier this year and is no longer supported. The particular version you’re running is over 4.5 years old

Re: Many CLOSE_WAIT connections causing the app not available

2024-06-27 Thread Christopher Schultz
Stephen, On 6/26/24 01:18, Stephen Stevie wrote: We are using Apache Tomcat 8.5.49 and sometimes in a day, we see the application is going unresponsive though the service is up and running and giving 503 (service unavailable error). When netstat for the port is run, we see many CLOSE_WAIT connec

Re: Possible penetration attempt or DOS attack: any suggestions on what can be done?

2024-06-27 Thread Christopher Schultz
James, On 6/27/24 11:36, James H. H. Lampert wrote: On 6/27/24 8:01 AM, Christopher Schultz wrote: Why aren't you seeing the source-IP in your own logs? Because our webapp developer hadn't thought to put them into the log messages we generate. He did, however, direct

Re: Possible penetration attempt or DOS attack: any suggestions on what can be done?

2024-06-27 Thread Christopher Schultz
James, On 6/27/24 11:47, James H. H. Lampert wrote: On 6/27/24 8:01 AM, Christopher Schultz wrote: "100 404s in a minute per-IP" Actually, what I was seeing, once the webapp developer pointed me in the right direction, was several dozen 404s per *second* from a single IP. N

Re: Compatibility Check Tomcat 10.1.x with IBM MQ 9.3.0.20

2024-06-28 Thread Christopher Schultz
Mohit, On 6/27/24 14:31, Chaudhary, Mohit wrote: We have installed Tomcat 10.1.1 in RHEL 8 server so we needed to check if tomcat 10.1.1 is compatible with IBM MQ 9.3.0.20. Tomcat doesn't have any message-queue-related components out of the box, so I would say "maybe?" Is Google Chrome or A

Re: Many CLOSE_WAIT connections causing the app not available

2024-07-03 Thread Christopher Schultz
the usage pattern of your application changed at all? More users, etc.? -chris On Thu, Jun 27, 2024 at 9:58 PM Christopher Schultz < ch...@christopherschultz.net> wrote: Stephen, On 6/26/24 01:18, Stephen Stevie wrote: We are using Apache Tomcat 8.5.49 and sometimes in a day, we s

Re: Errors after upgrading to Tomcat 9.0.90

2024-07-03 Thread Christopher Schultz
Francesco, On 7/2/24 05:44, Francesco Chicchiriccò wrote: On 2024/06/27 14:47:48 Christopher Schultz wrote: Rainer, On 6/21/24 07:55, Rainer Jung wrote: Am 20.06.24 um 17:52 schrieb Christopher Schultz: Francesco, On 6/20/24 09:03, Francesco Chicchiriccò wrote: On 2024/06/20 12:18:15

Re: Tomcat silently shuts down after 10 minutes - SOLVED

2024-07-06 Thread Christopher Schultz
Bryan, On 7/5/24 17:08, Bryan Buchanan wrote: Thanks all for the replies. Turns out I needed to execute my "C" program with a "nohup" i.e. $ nohup /usr/local/bin/ManageTomcat START Tomcat was only stopping after about 10 mins because that's when I logged out. Doh ! In the business app code

Re: Inquiry about CVE-2024-5535 Vulnerability in Tomcat 10.1.20 Version

2024-07-06 Thread Christopher Schultz
Peyton, On 7/6/24 00:08, Zhong, Peyton wrote: I am writing to inquire about the potential impact of the recently detected critical vulnerability: CVE-2024-5535 (9.1 CRITICAL / CVSS v3), in OpenSSL 3.0.13 on the Tomcat 10.1.20 version. According

Re: Inquiry about CVE-2024-5535 Vulnerability in Tomcat 10.1.20 Version

2024-07-08 Thread Christopher Schultz
Peyton, On 7/7/24 23:50, Zhong, Peyton wrote: Because OpenSSL is one of the most widely used open-source cryptographic libraries for implementing secure communications on the internet, it is essential for us to upgrade to secure versions to mitigate various threats, especially for software su

Re: Persistent Manager Implementation Question

2024-07-08 Thread Christopher Schultz
session = request.getSession(false); // Do not create session if it doesn't exist if (session != null && session.getId() != null) { // Session is valid, proceed with the request filterChain.doFilter(request, response); } else { // Session is inval

Re: Win10 installation progress

2024-07-09 Thread Christopher Schultz
ux-ebook/dp/B09MHJ5W48    Even if not true::https://www.amazon.com/-/es/Dennis-Champeaux-ebook/dp/B09Y4WR9J7   9/11:: They had the Sun in their Eyeshttps://www.amazon.com/11-They-had-their-Eyes-ebook/dp/B0CMQ2WSK9https://www.amazon.nl/dp/B0CMQ2WSK9 On Tuesday, May 21, 2024 at 08:38:02 AM PDT

Re: Reg: tomcat CPU spikes

2024-07-12 Thread Christopher Schultz
Jalaj, On 7/12/24 10:19, Jalaj Asher wrote: Thank you Chuck and John for the responses. Just a few points from the things you highlighted and wanted me to check 1. unpackwar is set to true. I checked and was informed that we need that to be true for a specific war file. 2. cachingAllowed=fal

Re: Ubuntu Tomcat package maintenance

2024-07-12 Thread Christopher Schultz
Joel, On 7/11/24 16:13, Joel Griffith wrote: A year and a half ago I had to stop updating Tomcat because a Ubuntu packaging bug force-changes file ownership of the Tomcat installation. I'm trying to get in touch with the package maintainers to have that fixed. `apt-cache show tomcat` gives ubu

Re: Reg: tomcat CPU spikes

2024-07-15 Thread Christopher Schultz
to do this" but I may be wrong. The long answer might be "maybe, but you will have to play games with and and maybe some other things to get it working. I would save yourself some complexity and simply enable caching. -chris -Original Message- From: Christopher Schult

Re: CVE-2019-0232 & CVE-2020-1938

2024-07-15 Thread Christopher Schultz
Aiden, On 7/15/24 13:24, Jurevich, Aidan wrote: My organization has a few devices that have the file tomcat-juli-8.5.57.jar installed on them via the program Altair and are showing up as vulnerable to CVE-2019-0232 and CVE-2020-1938, which according to your documentation seems to be fixed for th

Re: CVE-2019-0232 & CVE-2020-1938

2024-07-15 Thread Christopher Schultz
Aiden, On 7/15/24 16:36, Christopher Schultz wrote: Aiden, On 7/15/24 13:24, Jurevich, Aidan wrote: My organization has a few devices that have the file tomcat-juli-8.5.57.jar installed on them via the program Altair and are showing up as vulnerable to CVE-2019-0232 and CVE-2020-1938, which

Re: [OT] CVE-2019-0232 & CVE-2020-1938

2024-07-15 Thread Christopher Schultz
All, On 7/15/24 13:24, Jurevich, Aidan wrote: Hi, My organization has a few devices that have the file tomcat-juli-8.5.57.jar installed on them via the program Altair and are showing up as vulnerable to CVE-2019-0232 and CVE-2020-1938, which according to your documentation seems to be fixed f

Re: Reg: tomcat CPU spikes

2024-07-16 Thread Christopher Schultz
ng latency concerns. Also interesting. Can you post one of those messages here? Was there a stack trace shown or just the warning? -chris -Original Message----- From: Christopher Schultz Sent: Monday, July 15, 2024 4:19 PM To: users@tomcat.apache.org Subject: Re: Reg: tomcat CPU spikes Attenti

Re: Issue with JDK 11 and tomcat-embed-core 9.0.91

2024-07-18 Thread Christopher Schultz
Greg, On 7/15/24 5:01 PM, Greg Eschbacher wrote: Hi all, I'm hoping you all can help me: Our JDK 11 application uses tomcat-embed-core, and we're upgrading from 9.0.88 to 9.0.91 and we can no longer compile. After some investigation, I believe the issue is that the tomcat-embed-core jar fil

Re: Reg: tomcat CPU spikes

2024-07-22 Thread Christopher Schultz
ent issue once it happens it takes sometime for the stack to go away as well as post tomcat reboots the problem goes away with the same settings and we do see that the wars are getting deployed during tomcat startup as well. Regards Jalaj P Asher -Original Message- From: Christopher Sch

Re: Intermittent Missing Content-Type

2024-07-22 Thread Christopher Schultz
Simon, On 7/18/24 14:54, Simon Arame wrote: Greetings folks, According to JavaServer Pages™ specs v2.3 #JSP4.2, when a JSP page does not provide the TYPE value of the contentType attribute, "the initial content type is “text/html” for JSP pages in standard syntax" With our relatively big web a

Re: Reg: tomcat CPU spikes

2024-07-23 Thread Christopher Schultz
Mark, On 7/23/24 03:36, Mark Thomas wrote: On 22/07/2024 17:35, Christopher Schultz wrote: Jalaj, On 7/19/24 14:28, Jalaj Asher wrote: This is the warning message we get when cachingAllowed is not set to false org.apache.catalina.webresources.Cache.getResource Unable to add the resource

Re: Problems with the most problematic of our Tomcat installations on IBM Midrange (cross-posted to Midrange and Tomcat Lists)

2024-07-23 Thread Christopher Schultz
Thomas, On 7/23/24 13:44, James H. H. Lampert wrote: Ladies and Gentlemen: We still have a chronic Tomcat crashing problem at one of our installations. The weirdest thing about this is that while this is certainly *one* of our heaviest-usage installations, it's not *the* heaviest. We alre

Re: Problems with the most problematic of our Tomcat installations on IBM Midrange (cross-posted to Midrange and Tomcat Lists)

2024-07-24 Thread Christopher Schultz
James, On 7/23/24 16:54, James H. H. Lampert wrote: On 7/23/24 1:25 PM, Christopher Schultz wrote: Thomas, Uh, "James." Thomas was someone who answered earlier. :| 2. What has to fit into that 7GiB private memory pool? Does it include any OS, or is it just the JVM itself?

Re: Problems with the most problematic of our Tomcat installations on IBM Midrange (cross-posted to Midrange and Tomcat Lists)

2024-07-24 Thread Christopher Schultz
James, On 7/24/24 18:07, James H. H. Lampert wrote: So what jobs are in the subsystem? You said "the Catalina job and its associated JVM job" but to me those are just a single job/process. Are they separate things in the IBM world? Thanks for your insights, Mr. Schultz. And yours, too, Herr H

Re: java code cache size question

2024-07-25 Thread Christopher Schultz
Ivano, On 7/25/24 09:43, Ivano Luberti wrote: Hi, I have a tomcat 9 instance  that runs without specifying options for the code cache. Good. If you don't know what you are doing, leaving options at their defaults is the best policy. Looking at the servet status I see Code Cache Non-he

<    1   2   3   4   5   6   7   8   9   10   >