Was there a change to the addSslHostConfig JMX mbean operation between
9.0.82 and 9.0.83? I have some code that works in 82, but fails with an
MBeanException: Cannot find operation [addSslHostConfig] in 9.0.83.
When I attempt to look at the available operations on ProtocolHandler in
jconsole, it
Thanks for taking a look. My lightly scrubbed connector example is
attached.
On Tue, Nov 21, 2023 at 6:45 AM Michael Osipov wrote:
> On 2023/11/21 11:25:11 Michael Osipov wrote:
> > On 2023/11/20 22:14:14 Daniel Skiles wrote:
> > > Was there a change to the addSslHostConfig J
I've had no success digging into this.
Is this a regression, or was this an intentional change?
On Mon, Nov 27, 2023 at 8:56 AM Daniel Skiles wrote:
> Thanks for taking a look. My lightly scrubbed connector example is
> attached.
>
> On Tue, Nov 21, 2023 at 6:45 AM Michae
I found the source of the problem
9.0.82 accepts the simple class name as a type parameter for the operation.
9.0.83 requires the canonical class name.
On Wed, Dec 6, 2023 at 3:06 PM Daniel Skiles wrote:
> I've had no success digging into this.
>
> Is this a regression,
(DefaultMBeanServerInterceptor.java:814)
~[?:?]
at com.sun.jmx.mbeanserver.JmxMBeanServer.invoke(JmxMBeanServer.java:802)
~[?:?]
Any ideas here?
On Wed, Dec 6, 2023 at 4:45 PM Daniel Skiles wrote:
> I found the source of the problem
>
> 9.0.82 accepts the simple class name as a type paramete
All,
I've been doing some testing, and I'm pretty sure the addSslHostConfig
operation on ProtocolHandler is busted in 9.0.83.
In versions prior to 9.0.82, you can call the operation with a single
argument of type SSLHostConfig.
In 9.0.82, that contract seems to have been broken, and you had to ca
tion e) {
throw new RuntimeException("Error invoking " + method + " with params " +
Arrays.toString(params) + " and signature " + Arrays.toString(signature),
e);
}
}
}
On Fri, Dec 8, 2023 at 4:55 PM Christopher Schultz <
ch...@christopherschultz.net> wrote:
> Dan
0.83 might have to do
with the fact that the catalina java code now has a one argument and two
argument variant of the same method.
On Wed, Dec 13, 2023 at 10:27 AM Christopher Schultz <
ch...@christopherschultz.net> wrote:
> Daniel,
>
> On 12/12/23 19:45, Daniel Skiles wrote:
>
ethod. I'm not familiar with the code, but it appears that there might be
an issue with how that map is constructed.
On Thu, Dec 14, 2023 at 4:25 AM Rémy Maucherat wrote:
> On Wed, Dec 13, 2023 at 9:43 PM Daniel Skiles
> wrote:
> >
> > The object and opera
t; Daniel,
>
> On 12/14/23 09:43, Daniel Skiles wrote:
> > Do you have any pointers on how to do that using JMX? So far as I can
> tell
> > from what little documentation I can find on the tomcat site, this is how
> > it's done.
> >
> > I'
Is it possible to change the keystore alias of the _default_
SSLHostConfig's certificate while tomcat is running?
At present, I'm trying to move the _default_ certificate from one
certificate in my keystore, to another. I modify the server.xml, then I
call the reloadSslHostConfigs MBean operation
; wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
>
> Daniel,
>
> On 9/10/20 09:09, Daniel Skiles wrote:
> > Is it possible to change the keystore alias of the _default_
> > SSLHostConfig's certificate while tomcat is running?
> >
> > At present,
lem. Do you know which MBean and operation that
is?
On Thu, Sep 10, 2020 at 4:00 PM Christopher Schultz <
ch...@christopherschultz.net> wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
>
> Daniel,
>
> On 9/10/20 13:33, Daniel Skiles wrote:
> > In this case,
x27;ll give that a try.
On Fri, Sep 11, 2020 at 9:44 AM Christopher Schultz <
ch...@christopherschultz.net> wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
>
> Daniel,
>
> On 9/10/20 16:39, Daniel Skiles wrote:
> >> Also note that calling reloadSslHostCon
be better.
If the server.xml isn't actually read during the reloadSslHostConfigs
operation, is there a way to add an SSLHostConfig at runtime? I see
addSslHostConfig on ProtocolHandler, but I'm not certain that it will do
what I think it will do.
On Fri, Sep 11, 2020 at 9:52 AM Daniel Skil
-BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
>
> Daniel,
>
> On 9/11/20 17:06, Daniel Skiles wrote:
> > I've gotten my _default_ SNI SSLHostConfig working. Thank you for
> > the help.
>
> Excellent.
>
> >> Perhaps that method could have a bet
Daniel Skiles wrote:
> > Did you try it?
>
> I've been unable to try it through JConsole or Visual VM. JConsole throws
> an error indicating that it can't load the remote class, and Visual VM
> disables the method. It looks like it takes a complex object, and I do
This is a bit of a long shot, but are you running on VMWare ESX by chance?
A few years ago, I had a problem where Tomcat would send data down the
socket, but about half the message wouldn't actually arrive at the client.
On Fri, Oct 16, 2020 at 5:05 AM Eric Robinson
wrote:
> Hi Mark --
>
> Those
I'm currently running into some peculiar behavior with SNI, and I'm
wondering if any of you might be able to offer suggestions. I'm not sure
if it's a bad config, a bug, or a limitation of the software.
I have a Tomcat instance that has two SSLHostConfig elements applied.
The first is the defaul
opher Schultz <
ch...@christopherschultz.net> wrote:
> Daniel,
>
> On 1/27/21 14:37, Daniel Skiles wrote:
> > I'm currently running into some peculiar behavior with SNI, and I'm
> > wondering if any of you might be able to offer suggestions. I'm not sure
> >
I have not uncovered. I am not
intimately familiar with the Tomcat internals.
On Wed, Jan 27, 2021 at 3:36 PM Mark Thomas wrote:
> On 27/01/2021 19:42, Christopher Schultz wrote:
> > On 1/27/21 14:37, Daniel Skiles wrote:
>
>
>
> >> Are SSLHostConfig.hostName attribut
sure the code for choosing the certificate is actually in
> JSSE. Once we hand the key store and socket over to JSSE, it picks
> everything. But surely there is no such case-sensitivity bug in JSSE,
> right?
>
> -chris
>
> On 1/27/21 17:25, Christopher Schultz wrote:
> >
I'm seeing the same thing in tomcat 10.1.35 with openjdk version "17.0.13"
2024-10-15
On Tue, Feb 11, 2025 at 8:00 AM Christopher Schultz <
ch...@christopherschultz.net> wrote:
> Jack,
>
> On 2/11/25 5:56 AM, Jack Green wrote:
> > When you try to start `11.0.3` via:
> > ```
> > new Tomcat();
> >
I was able to work around it on 17.0.13 by adding --add-opens=java.base/
java.io=ALL-UNNAMED to my startup script.
On Tue, Feb 11, 2025 at 11:23 AM Daniel Skiles
wrote:
> I'm seeing the same thing in tomcat 10.1.35 with openjdk version "17.0.13"
> 2024-10-15
>
> On T
24 matches
Mail list logo
