Hi,
I have an application which is built on top of Tomcat, currently 10.1.
The part of the application that interfaces with Tomcat is a single custom
class that extends jakarta.servlet.GenericServlet[1]:
This servlet implements the abstract void "service" method, which
1. reads the request head
Hello,
I have some questions about HTTP request smuggling in the context of Tomcat
with Apache httpd as its reverse proxy.
First of all, a few words about my current setup: At the moment I have a few
applications that are deployed this way:
I use Tomcat 10.1 as my backend server. It only activa
Hey Jerry,
> Caused by: java.lang.SecurityException: Can not initialize cryptographic
> mechanism
> at
> java.base/javax.crypto.JceSecurity.(JceSecurity.java:120) ... 86 mo
> Caused by: java.lang.SecurityException: Can't read cryptographic policy
> directory: unlimited
Does this help?
Hi Tim,
If you have an HTTP load balancer that supports "sticky sessions", you can have
a cluster of as many Tomcat instances as you like as backend, without having to
rely on any clustering feature of Tomcat.
Yours,
Reg
> Gesendet: Freitag, den 04.04.2025 um 02:57 Uhr
> Von: "Tim N"
> An: "