from:"christopher"

cbaines pushed a commit to branch master
in repository data-service.

commit 5d50a0e3e17945ee4d4745ff382b3d58e23db5a0
Author: Christopher Baines 
AuthorDate: Wed May 22 10:45:12 2024 +0100

Support regexes for included and excluded branches
---
 guix-data-service/branch-updated-emails.scm |  4 ++--
 guix-data-service/model/git-repository.scm  | 28 ++--
 guix-data-service/poll-git-repository.scm   |  4 ++--
 3 files changed, 30 insertions(+), 6 deletions(-)

diff --git a/guix-data-service/branch-updated-emails.scm 
b/guix-data-service/branch-updated-emails.scm
index 8b5290b..aeb1570 100644
--- a/guix-data-service/branch-updated-emails.scm
+++ b/guix-data-service/branch-updated-emails.scm
@@ -59,9 +59,9 @@
  conn
  git-repository-id)))
 (let ((excluded-branch?
-   (member branch-name excluded-branches string=?))
+   (branch-in-list? excluded-branches branch-name))
   (included-branch?
-   (member branch-name included-branches string=?)))
+   (branch-in-list? included-branches branch-name)))
   (when (and (not excluded-branch?)
  (or (null? included-branches)
  included-branch?))
diff --git a/guix-data-service/model/git-repository.scm 
b/guix-data-service/model/git-repository.scm
index feae290..5c605f8 100644
--- a/guix-data-service/model/git-repository.scm
+++ b/guix-data-service/model/git-repository.scm
@@ -16,6 +16,7 @@
 ;;; <http://www.gnu.org/licenses/>.
 
 (define-module (guix-data-service model git-repository)
+  #:use-module (srfi srfi-1)
   #:use-module (ice-9 match)
   #:use-module (json)
   #:use-module (squee)
@@ -25,6 +26,7 @@
 git-repository-query-substitutes?
 git-repository-id->url
 select-includes-and-excluded-branches-for-git-repository
+branch-in-list?
 count-git-repositories-with-x-git-repo-header-values
 git-repository-x-git-repo-header->git-repository-id
 git-repository-url->git-repository-id
@@ -84,6 +86,17 @@ WHERE id = $1"
 (((url)) url)))
 
 (define (select-includes-and-excluded-branches-for-git-repository conn id)
+  (define (make-regexes lst)
+(map
+ (lambda (item)
+   (if (string-prefix? "/" item)
+   (make-regexp
+(string-drop
+ (string-drop-right item 1)
+ 1))
+   item))
+ lst))
+
   (match (exec-query
   conn
   "
@@ -95,11 +108,22 @@ FROM git_repositories WHERE id = $1"
   (if (or (eq? #f included_branches)
   (string-null? included_branches))
   '()
-  (parse-postgresql-array-string included_branches))
+  (make-regexes
+   (parse-postgresql-array-string included_branches)))
   (if (or (eq? excluded_branches #f)
   (string-null? excluded_branches))
   '()
-  (parse-postgresql-array-string excluded_branches))
+  (make-regexes
+   (parse-postgresql-array-string excluded_branches)))
+
+(define (branch-in-list? lst branch)
+  (any
+   (lambda (item)
+ (->bool
+  (if (string? item)
+  (string=? item branch)
+  (regexp-exec item branch
+   lst))
 
 (define (count-git-repositories-with-x-git-repo-header-values conn)
   (match (exec-query
diff --git a/guix-data-service/poll-git-repository.scm 
b/guix-data-service/poll-git-repository.scm
index 124c559..2ed5644 100644
--- a/guix-data-service/poll-git-repository.scm
+++ b/guix-data-service/poll-git-repository.scm
@@ -170,9 +170,9 @@
   (filter
(lambda (branch-name)
  (let ((excluded-branch?
-(member branch-name excluded-branches string=?))
+(branch-in-list? excluded-branches branch-name))
(included-branch?
-(member branch-name included-branches string=?)))
+(branch-in-list? included-branches branch-name)))
(and (not excluded-branch?)
 (or (null? included-branches)
 included-branch?

01/04: Fix WAL threshold

cbaines pushed a commit to branch master
in repository data-service.

commit 2043a4ef6f85ea943f6b1d0ab453c5b9c716f824
Author: Christopher Baines 
AuthorDate: Mon May 13 17:20:25 2024 +0100

Fix WAL threshold

As it was too small.
---
 guix-data-service/jobs/load-new-guix-revision.scm | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/guix-data-service/jobs/load-new-guix-revision.scm 
b/guix-data-service/jobs/load-new-guix-revision.scm
index 5c2744c..d821157 100644
--- a/guix-data-service/jobs/load-new-guix-revision.scm
+++ b/guix-data-service/jobs/load-new-guix-revision.scm
@@ -1485,7 +1485,7 @@
   (match-lambda
 ((system . target)
  (let loop ((wal-bytes (stat:size (stat 
"/var/guix/db/db.sqlite-wal"
-   (when (> wal-bytes 2)
+   (when (> wal-bytes (* 2048 (expt 2 20)))
  (simple-format #t "debug: guix-daemon WAL is large (~A), 
waiting\n"
 wal-bytes)

03/04: Guard against trying to delete an empty list of commits

cbaines pushed a commit to branch master
in repository data-service.

commit f7ada4bf1f423573c409513c824a6f0675ab75ec
Author: Christopher Baines 
AuthorDate: Wed May 22 11:46:18 2024 +0100

Guard against trying to delete an empty list of commits
---
 guix-data-service/data-deletion.scm | 9 +
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/guix-data-service/data-deletion.scm 
b/guix-data-service/data-deletion.scm
index c9dc631..e75fe42 100644
--- a/guix-data-service/data-deletion.scm
+++ b/guix-data-service/data-deletion.scm
@@ -255,10 +255,11 @@ WHERE git_repository_id = $1
  (list (number->string git-repository-id)
branch-name
 
-  (delete-revisions-from-branch conn
-git-repository-id
-branch-name
-commits)
+  (unless (null? commits)
+(delete-revisions-from-branch conn
+  git-repository-id
+  branch-name
+  commits))
 
   (exec-query
conn

04/04: Add more logging around polling git repositories

cbaines pushed a commit to branch master
in repository data-service.

commit d74422c2686890c7df26dd52104d65bfd042e7bd
Author: Christopher Baines 
AuthorDate: Thu May 23 09:38:24 2024 +0100

Add more logging around polling git repositories
---
 guix-data-service/poll-git-repository.scm | 12 
 1 file changed, 12 insertions(+)

diff --git a/guix-data-service/poll-git-repository.scm 
b/guix-data-service/poll-git-repository.scm
index 2ed5644..8dfd13d 100644
--- a/guix-data-service/poll-git-repository.scm
+++ b/guix-data-service/poll-git-repository.scm
@@ -99,6 +99,9 @@
conn
'latest-channel-instances
(lambda ()
+ (simple-format (current-error-port)
+"polling git repository ~A\n"
+git-repository-id)
  ;; This was using update-cached-checkout, but it wants to checkout
  ;; refs/remotes/origin/HEAD by default, and that can fail for some reason
  ;; on some repositories:
@@ -158,6 +161,15 @@
  oid->string)
 (branch-list repository BRANCH-REMOTE)
 
+   (simple-format (current-error-port)
+  "git repository ~A: excluded branches: ~A\n"
+  git-repository-id
+  excluded-branches)
+   (simple-format (current-error-port)
+  "git repository ~A: included branches: ~A\n"
+  git-repository-id
+  included-branches)
+
(with-postgresql-transaction
 conn
 (lambda (conn)

branch master updated (f4be647 -> d74422c)

cbaines pushed a change to branch master
in repository data-service.

from f4be647  Use a separate fiber to send pool stats
 new 2043a4e  Fix WAL threshold
 new 5d50a0e  Support regexes for included and excluded branches
 new f7ada4b  Guard against trying to delete an empty list of commits
 new d74422c  Add more logging around polling git repositories

The 4 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.


Summary of changes:
 guix-data-service/branch-updated-emails.scm   |  4 ++--
 guix-data-service/data-deletion.scm   |  9 
 guix-data-service/jobs/load-new-guix-revision.scm |  2 +-
 guix-data-service/model/git-repository.scm| 28 +--
 guix-data-service/poll-git-repository.scm | 16 +++--
 5 files changed, 48 insertions(+), 11 deletions(-)

libgcov on a standalone platform embedded controller

2024-06-06 Thread Christopher Campbell via Gcc

Guy,

I have been trying to get libgcov working.
Will you please give me some guidance with a working example?
I could really use some good old fashion hand holding to gcov to work in a
standalone environment.




I have tried the following
1. invoke __gcov_dump()
 but then i get this error libgcov profiling error::Version
mismatch - expected 10.3 (experimental) (B03r) got (unknown) (ð)
 this is a know bug. There is no actual mismatch

2.
https://gcc.gnu.org/onlinedocs/gcc/gcov/profiling-and-test-coverage-in-freestanding-environments.html
This only work with the two file included.   When introduced into .cpp and
more file then compiler give
undefined  __gcov_filename_to_gcfn (f, dump, arg);

3. Tried different versions

#"C:/Program Files (x86)/GNU Tools ARM Embedded/5.3
2016q1/lib/gcc/arm-none-eabi/5.3.1/thumb/libgcov.a"
#"C:/Program Files (x86)/GNU Tools ARM Embedded/6.2
2016q4/lib/gcc/arm-none-eabi/6.2.1/thumb/v7e-m/fpv4-sp/hard/libgcov.a"
#"C:/Program Files (x86)/GNU Arm Embedded Toolchain/10
2021.10/lib/gcc/arm-none-eabi/10.3.1/libgcov.a"
#"C:/Program Files (x86)/GNU Arm Embedded Toolchain/10
2021.10/lib/gcc/arm-none-eabi/10.3.1/thumb/v7e-m+fp/softfp/libgcov.a"
"C:/Program Files (x86)/GNU Arm Embedded Toolchain/10
2021.10/lib/gcc/arm-none-eabi/10.3.1/thumb/v7e-m+fp/hard/libgcov.a"

#"C:/Program Files (x86)/GNU Arm Embedded Toolchain/10
2021.10/lib/gcc/arm-none-eabi/10.3.1/thumb/v6-m/nofp/libgcov.a"

Will someone please contact me?

Chris Campbell
-- 
A life well lived is its own reward

[PROPOSAL] Implement additional security checks in SecurityLifecycleListener


All,

Tomcat's SecurityLifecycleListener currently checks the current working 
user's name, the umask and not much else at the moment.


I'd like to add "administrator" as another username to look for. (The 
documentation says that "root" is the only current username checked.)


I would also like to add several items from the DISA STIG document found 
here:

https://www.stigviewer.com/stig/apache_tomcat_application_sever_9/2021-12-27/

I haven't decided exactly which items to implement, but I will probably 
do this as a PR with separate commits for each item.


Are there any objections to be starting this work?

Thanks,
-chris

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

[PROPOSAL] Enable SecureLifecycleListener by default


All,

I'd like to remove the  around the SecureLifecycleListener 
in conf/server.xml that we bundle with Tomcat distributions.


Before I do so, are there any objections to making this change?

Thanks,
-chris

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

[PROPOSAL] Remove JSP file from ROOT web application


All,

I'd like to change the existing webapps/ROOT/index.jsp to index.html and 
remove the dynamic elements. Currently, the only truly dynamic element 
in the whole file is this:


"
Copyright 1999-${year} Apache Software 
Foundation.  All Rights Reserved

"

I don't see any particular reason that the Copyright information must 
always show the "current year". We can simply set this to "the current 
year" during the release process.


This will mean that the default application will be completely static. 
Not much of an upgrade, *but* if a user would prefer to completely 
remove Jasper, it means that the default home page will be readable.


-chris

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Re: [PROPOSAL] Tomcat 10: Remove CGI Servlet


All,

Resurrecting this thread from 2019.

I will be proceeding with this 4.5-year-old plan to extract the CGI 
servlet to a separate JAR file to make it easy to "remove" from Tomcat 
if operators would prefer to do such things.


I think I'll also move the configuration from conf/web.xml to 
webapps/docs/cgi-howto.html while I'm at it so those vestiges are gone.


Thanks,
-chris

On 10/28/19 09:55, Christopher Schultz wrote:

All,

Note: this was not a vote.

There was very little feedback, and responses were mixed. We got
exactly one response on the users@ list about real-world usage of CGI,
so we cannot draw any conclusions about real-world uses.

Otherwise, the consensus seems to be that CGIs should stay a part of
the main Tomcat distribution, but that perhaps separating it out into
a distinct JAR file and/or separate distribution might be advantageous.

It appears that the CGIServlet is completely self-contained. It makes
use of the following internal(ish) Tomcat APIs:

org.apache.catalina.util.IOTools
org.apache.juli.logging.Log
org.apache.juli.logging.LogFactory
org.apache.tomcat.util.compat.JrePlatform
org.apache.tomcat.util.res.StringManager

All of these could be replaced if necessary to make a standalone,
container-agnostic package.

It looks like it would be fairly easy to separate-out the CGIServlet
into a separate JAR file packaging if there's utility in that. For
example, security-conscious environments may want to remove that JAR
file entirely from the Tomcat deployment to be absolutely sure that
Runtime.exec() isn't available in the deployed Java code (from the
container; yet I realize that SSIServlet/SSIFilter has this, too).

I'd like to go ahead and move the CGIServlet from the general
catalina.jar file into catalina-cgi.jar. That should only require a
small change to the build.xml script.

Any objections?

-chris

On 10/7/19 10:59, Christopher Schultz wrote:

All,



I recently gave a presentation on locking-down Apache Tomcat[1] and
I briefly discussed the "sharp edges" present in Tomcat. Some of
them are unnecessarily sharp and may be actually unnecessary. I'm
going to make a few proposals to remove functions from Tomcat.



Proposal: Remove CGI Servlet



Justification:



The CGIServlet is another component, like server-side-includes,
which is a remote-code execution (RCE) vulnerability as a feature.
It is very easy to misconfigure. It is arguably not possible to
secure it on Windows[2]. There are better solutions if you want to
run Perl, Python, PHP, or whatever on your server in the form of
the many fine web-server products out there.



-chris




[1]
http://tomcat.apache.org/presentations.html#latest-locking-down-tomc



at

[2]
https://blogs.msdn.microsoft.com/twistylittlepassagesallalike/2011/04/

23


/everyone-quotes-command-line-arguments-the-wrong-way/



-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Re: [PROPOSAL] Tomcat 10: Remove Server-Side Includes (SSI)


All,

Resurrecting this thread from 2019.

I'd like to remove the SSI configuration from conf/web.xml and put it 
into webapps/docs/ssi-howto.html.


Are there any objections?

Thanks,
-chris

On 10/29/19 05:05, Konstantin Kolinko wrote:

пн, 28 окт. 2019 г. в 16:34, Christopher Schultz :


[...]

The stock conf/web.xml contains a sample configuration for the SSI
servlet. We will have to decide what to do with that. I can think of
at least two options:

   a. Remove it from the stock conf/web.xml entirely
   b. Add comments to conf/web.xml indicating that the SSI component is
a separate download

I think I like #2 better.


The correct way to enable this feature is to copy those fragments into
one's own WEB-INF/web.xml.  Uncommenting them in the default web.xml
file will have [un]expected consequences.

Thus I am in favor of moving those configuration fragments to documentation.

Best regards,
Konstantin Kolinko

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Re: [RE-wrenches] Sol-Ark 15k solar panel frame grounding

2024-06-06 Thread Christopher Warfel via RE-wrenches

GFDI fault. The manual doesn't 
say anything about the DC side with respect to this error. It suggests 
it is an AC current leakage to ground. But Sol-Ark tech support 
suggested that I disconnect the PV to rule it out as a source of the 
fault.


Jason Szumlanski

Florida Solar Design Group


___
List sponsored by Redwood Alliance

Pay optional member dues here:http://re-wrenches.org

List Address:RE-wrenches@lists.re-wrenches.org

Change listserver email address & settings:
http://lists.re-wrenches.org/options.cgi/re-wrenches-re-wrenches.org

There are two list archives for searching. When one doesn't work, try the other:
https://www.mail-archive.com/re-wrenches@lists.re-wrenches.org/
http://lists.re-wrenches.org/pipermail/re-wrenches-re-wrenches.org

List rules & etiquette:
http://www.re-wrenches.org/etiquette.htm

Check out or update participant bios:
http://www.members.re-wrenches.org


--
Christopher Warfel
          ENTECH Engineering Inc.
   PO Box 871, Block Island, RI 02807
              401-477-5773
EE Logo <https://entech-engineering.com/Home/default.php>
BEGIN:VCARD
VERSION:4.0
N:Warfel;Christopher;;;
TEL;VALUE=TEXT:401-447-5773 (c)
NOTE:Use the cell phone number for all communications.  Thank you.
URL:https://www.entech-engineering.com
END:VCARD
___
List sponsored by Redwood Alliance

Pay optional member dues here: http://re-wrenches.org

List Address: RE-wrenches@lists.re-wrenches.org

Change listserver email address & settings:
http://lists.re-wrenches.org/options.cgi/re-wrenches-re-wrenches.org

There are two list archives for searching. When one doesn't work, try the other:
https://www.mail-archive.com/re-wrenches@lists.re-wrenches.org/
http://lists.re-wrenches.org/pipermail/re-wrenches-re-wrenches.org

List rules & etiquette:
http://www.re-wrenches.org/etiquette.htm

Check out or update participant bios:
http://www.members.re-wrenches.org

RE: Relabeling a control

2024-06-06 Thread Christopher Chaltain

Try a two finger double tap and hold.

--
Christopher (AKA CJ) =>÷
Chaltain at Outlook, USA

From: viphone@googlegroups.com  On Behalf Of Bill 
Gallik
Sent: Thursday, June 6, 2024 12:04 AM
To: viPhone  
Subject: Relabeling a control

On the Dexcom G7 iOS app, the main screen has a very obscure control label at 
the bottom which should read something similar to calibration. Unfortunately, 
I’ve completely forgotten how to relabel a control. Can anybody remind me, 
please?

- Sent from Ino Squire's iPhone SE (iOS 17.5.1) via Google Mail

--
The following information is important for all members of the V iPhone list.

If you have any questions or concerns about the running of this list, or if you 
feel that a member's post is inappropriate, please contact the owners or 
moderators directly rather than posting on the list itself.

Your V iPhone list moderator is Mark Taylor. Mark can be reached at: 
mk...@ucla.edu. Your list owner is Cara Quinn - you can reach Cara at 
caraqu...@caraquinn.com

The archives for this list can be searched at:
http://www.mail-archive.com/viphone@googlegroups.com/
---
You received this message because you are subscribed to the Google Groups 
"VIPhone" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to 
viphone+unsubscr...@googlegroups.com<mailto:viphone+unsubscr...@googlegroups.com>.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/viphone/1CE14E23-221D-4A01-95DA-7B2724B0DFAB%40gmail.com<https://groups.google.com/d/msgid/viphone/1CE14E23-221D-4A01-95DA-7B2724B0DFAB%40gmail.com?utm_medium=email_source=footer>.

-- 
The following information is important for all members of the V iPhone list.

If you have any questions or concerns about the running of this list, or if you 
feel that a member's post is inappropriate, please contact the owners or 
moderators directly rather than posting on the list itself.

Your V iPhone list moderator is Mark Taylor.  Mark can be reached at:  
mk...@ucla.edu.  Your list owner is Cara Quinn - you can reach Cara at 
caraqu...@caraquinn.com

The archives for this list can be searched at:
http://www.mail-archive.com/viphone@googlegroups.com/
--- 
You received this message because you are subscribed to the Google Groups 
"VIPhone" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to viphone+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/viphone/SJ0PR14MB4298454D35DDFAE66D29AB41C8FA2%40SJ0PR14MB4298.namprd14.prod.outlook.com.

branch master updated: hydra: Reorder some NGinx configuration lines.

This is an automated email from the git hooks/post-receive script.

cbaines pushed a commit to branch master
in repository maintenance.

The following commit(s) were added to refs/heads/master by this push:
 new e1f8f99b hydra: Reorder some NGinx configuration lines.
e1f8f99b is described below

commit e1f8f99b4a05f6c075dfa9f0b47a7ea973b1aaff
Author: Christopher Baines 
AuthorDate: Wed Jun 5 14:37:30 2024 +0100

hydra: Reorder some NGinx configuration lines.

I think that having set before rewrite might be important for it to
work.

* hydra/bayfront.scm (%bordeaux.guix.gnu.org-nginx-servers): Reorder
some NGinx configuration lines.
* hydra/deploy-node-129.scm (%nginx-server-blocks): Reorder some NGinx
configuration lines.
---
 hydra/bayfront.scm| 8 
 hydra/deploy-node-129.scm | 8 
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/hydra/bayfront.scm b/hydra/bayfront.scm
index 2916e0b2..552665a6 100644
--- a/hydra/bayfront.scm
+++ b/hydra/bayfront.scm
@@ -833,18 +833,18 @@ add_header Content-Type text/plain;")))
(body '("proxy_pass https://nar-storage;;)))
   (nginx-named-location-configuration
(name "nar-storage")
-   (body '("rewrite /internal/(.*) /$1 break;"
-   "proxy_pass https://nar-storage;;
+   (body '("proxy_http_version 1.1;"
"
 if ($http_via) {
 set $via  \"$http_via, $via\";
 }
 proxy_set_header  Via  $via;"
"proxy_cache bordeaux-nar;"
-   "proxy_http_version 1.1;"
"proxy_set_header Connection \"\";"
"proxy_cache_valid 200 28d;"
-   "proxy_ignore_client_abort on;")))
+   "proxy_ignore_client_abort on;"
+   "rewrite /internal/(.*) /$1 break;"
+   "proxy_pass https://nar-storage;;)))
   (nginx-location-configuration
(uri "= /latest-database-dump")
(body '("proxy_pass http://nar-herder;;
diff --git a/hydra/deploy-node-129.scm b/hydra/deploy-node-129.scm
index 989d1b14..f8f9c3df 100644
--- a/hydra/deploy-node-129.scm
+++ b/hydra/deploy-node-129.scm
@@ -82,14 +82,14 @@
(body '("proxy_pass http://nar-herder;;)))
   (nginx-named-location-configuration
(name "nar-storage-location")
-   (body '("rewrite /internal/(.*) /$1 break;"
-   "proxy_pass https://nar-storage;;
-   "
+   (body '("
 if ($http_via) {
 set $via  \"$http_via, $via\";
 }
 proxy_set_header  Via  $via;"
-   "proxy_set_header Host bordeaux.guix.gnu.org:443;")))
+   "proxy_set_header Host bordeaux.guix.gnu.org:443;"
+   "rewrite /internal/(.*) /$1 break;"
+   "proxy_pass https://nar-storage;;)))
   (nginx-location-configuration
(uri "= /latest-database-dump")
(body '("proxy_pass http://nar-herder;;)))

Re: Tomcat 9.0.xx JDK Version Support and EOL

2024-06-05 Thread Christopher Schultz


Chaitanya,

On 6/5/24 09:11, Chaitanya Gopisetti wrote:

Also can you update on the End of life expected date for Tomcat 9.0.x version

-Original Message-
From: Christopher Schultz 
Sent: Wednesday, June 5, 2024 6:37 PM
To: users@tomcat.apache.org
Subject: Re: Tomcat 9.0.xx JDK Version Support and EOL

Chaitanya,

On 6/5/24 08:47, Chaitanya Gopisetti wrote:

It was mentioned that Tomcat 9.0.x supports java 8 and later. So
wanted to know whether it supports Jdk 21? Also wanted to know the End
of life expected date for Tomcat 9.0.x version.


Tomcat 9 should run jut fine on any Java version from 8 up through the latest 
release (currently Java 21).


Sorry, that's the latest LTS version. The latest released version is 
Java 22 and Tomcat should continue to work there as well.


The supported Java version is "8 *or later*" (emphasis mine) which 
pretty much means that we should support any version after Java 8 as well.


We have a minimum Java version only because (1) The Servlet Spec 
includes a minimum supported Java version and (2) we use features which 
require that version of Java as well.


Note that Tomcat 9 must be /built/ using Java 17 or later, but targets 
Java 8 for class file format, etc.


-chris

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Tomcat 9.0.xx JDK Version Support and EOL

2024-06-05 Thread Christopher Schultz


Chaitanya,

On 6/5/24 08:47, Chaitanya Gopisetti wrote:

It was mentioned that Tomcat 9.0.x supports java 8 and later. So
wanted to know whether it supports Jdk 21? Also wanted to know the
End of life expected date for Tomcat 9.0.x version.


Tomcat 9 should run jut fine on any Java version from 8 up through the 
latest release (currently Java 21).


-chris

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

02/04: hydra: bayfront: Rework the build success hook.

cbaines pushed a commit to branch master
in repository maintenance.

commit 8be72be27d12e7935fc687d9c0ddd76ebeaefe80
Author: Christopher Baines 
AuthorDate: Wed Jun 5 11:57:51 2024 +0100

hydra: bayfront: Rework the build success hook.

Publish to a temporary directory, then import the narinfos and nars
with the nar-herder. This avoids parallel hooks from conflicting.

* hydra/bayfront.scm (%guix-build-coordinator-configuration): Rework
the build success hook.
---
 hydra/bayfront.scm | 25 +++--
 1 file changed, 19 insertions(+), 6 deletions(-)

diff --git a/hydra/bayfront.scm b/hydra/bayfront.scm
index b97c1c6d..500538f1 100644
--- a/hydra/bayfront.scm
+++ b/hydra/bayfront.scm
@@ -1151,15 +1151,24 @@ proxy_set_header  Via  $via;"
'build-started-send-event-to-guix-data-service-hook)))
 (build-success
  . ,#~(lambda args
-(use-modules (gcrypt pk-crypto) ; for read-file-sexp
+(use-modules (srfi srfi-1)
+ (guix build utils)
+ (gcrypt pk-crypto) ; for read-file-sexp
  (web uri)
  (web client)
  (web response))
 
 #$recompress-log-file-hook
+
+(define temporary-publish-directory
+  (string-append "/tmp/bordeaux-nars/" (second args)))
+(mkdir-p temporary-publish-directory)
 (apply ((@ (guix-build-coordinator hooks)
build-success-publish-hook)
-#$publish-directory
+;; Use a temporary directory unique to the
+;; build here to avoid different builds for
+;; the same outputs conflicting
+temporary-publish-directory
 ;; These should be the same as
 ;; /etc/guix/... but are copied here so that
 ;; they can be read by the Guix Build
@@ -1180,15 +1189,18 @@ proxy_set_header  Via  $via;"
"http://localhost:8734/;
narinfo-filename))
 #:combined-post-publish-hook
-(lambda (directory narinfos-and-nars)
+(lambda (directory narinfos)
   (let* ((narinfos
   (map
(lambda (narinfo-filename)
  (string-append directory "/" 
narinfo-filename))
-   (map car narinfos-and-nars)))
+   narinfos))
  (command
-  (cons* #$(file-append nar-herder 
"/bin/nar-herder")
+  (cons* #$(file-append my-nar-herder 
"/bin/nar-herder")
  "import"
+ ;; Set --storage so the
+ ;; nar-herder moves the nars
+ "--storage=/var/lib/nars"
  "--tag=unknown-if-for-master=true"
  ;; "--ensure-references-exist"
  
"--database=/var/lib/nar-herder/nar_herder.db"
@@ -1209,7 +1221,8 @@ proxy_set_header  Via  $via;"
   "deleting ~A\n"
   narinfo)
(delete-file narinfo))
- narinfos)))
+ narinfos)
+(delete-file-recursively 
temporary-publish-directory)))
 #:derivation-substitute-urls
 '("https://data.guix.gnu.org; 
"https://data.qa.guix.gnu.org;))
args)

03/04: hydra: Change set $via in bayfront and hydra-guix-129 NGinx config.

cbaines pushed a commit to branch master
in repository maintenance.

commit 25dea0601e1dbe6e9396c9e0c119f09d452a5a49
Author: Christopher Baines 
AuthorDate: Wed Jun 5 12:07:57 2024 +0100

hydra: Change set $via in bayfront and hydra-guix-129 NGinx config.

As I think it needs to be set initially outside the location.

* hydra/bayfront.scm (%bordeaux.guix.gnu.org-nginx-servers): Move set
$via to the raw-content.
* hydra/deploy-node-129.scm (%nginx-server-blocks): Move set $via to
the raw-content.
---
 hydra/bayfront.scm| 12 ++--
 hydra/deploy-node-129.scm | 12 ++--
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/hydra/bayfront.scm b/hydra/bayfront.scm
index 500538f1..837e6df2 100644
--- a/hydra/bayfront.scm
+++ b/hydra/bayfront.scm
@@ -836,11 +836,10 @@ add_header Content-Type text/plain;")))
(body '("rewrite /internal/(.*) /$1 break;"
"proxy_pass https://nar-storage;;
"
-set  $via  \"1.1 bayfront\";
-if ($http_via) {
-set $via  \"$http_via, $via\";
-}
-proxy_set_header  Via  $via;"
+if ($http_via) {
+set $via  \"$http_via, $via\";
+}
+proxy_set_header  Via  $via;"
"proxy_cache bordeaux-nar;"
"proxy_http_version 1.1;"
"proxy_set_header Connection \"\";"
@@ -937,7 +936,8 @@ proxy_set_header  Via  $via;"
   (raw-content
(list
 %common-tls-options
-"access_log /var/log/nginx/bordeaux.access.log.gz combined gzip 
flush=1m;"))
+"access_log /var/log/nginx/bordeaux.access.log.gz combined gzip 
flush=1m;"
+"set  $via  \"1.1 bayfront\";"))
   (locations common-locations)
 
 (define %qa.guix.gnu.org-nginx-servers
diff --git a/hydra/deploy-node-129.scm b/hydra/deploy-node-129.scm
index 7b20a100..6baf788b 100644
--- a/hydra/deploy-node-129.scm
+++ b/hydra/deploy-node-129.scm
@@ -85,11 +85,10 @@
(body '("rewrite /internal/(.*) /$1 break;"
"proxy_pass https://nar-storage;;
"
-set  $via  \"1.1 hydra-guix-129\";
-if ($http_via) {
-set $via  \"$http_via, $via\";
-}
-proxy_set_header  Via  $via;"
+if ($http_via) {
+set $via  \"$http_via, $via\";
+}
+proxy_set_header  Via  $via;"
"proxy_set_header Host bordeaux.guix.gnu.org:443;")))
   (nginx-location-configuration
(uri "= /latest-database-dump")
@@ -159,7 +158,8 @@ proxy_set_header  Via  $via;"
 
  # Disable weak cipher suites.
  ssl_ciphers HIGH:!aNULL:!MD5;
- ssl_prefer_server_ciphers on;"))
+ ssl_prefer_server_ciphers on;"
+  "set  $via  \"1.1 hydra-guix-129\";"))
(locations common-locations)
 
 (define %btrfs-san-uuid "3bd8e3fb-2ad1-41ff-ac80-4ca3e17950ea")

01/04: hydra: bayfront: Start rotating NGinx logs.

cbaines pushed a commit to branch master
in repository maintenance.

commit c69964246903c1870f9e7d7c6bd49baae27f8c5a
Author: Christopher Baines 
AuthorDate: Wed Jun 5 11:53:54 2024 +0100

hydra: bayfront: Start rotating NGinx logs.

More configuration is needed, but this is the big one.

* hydra/bayfront.scm (%nginx-log-rotation): New variable.
[services]: Add %nginx-log-rotation.
---
 hydra/bayfront.scm | 16 
 1 file changed, 16 insertions(+)

diff --git a/hydra/bayfront.scm b/hydra/bayfront.scm
index fe16f0e3..b97c1c6d 100644
--- a/hydra/bayfront.scm
+++ b/hydra/bayfront.scm
@@ -1074,6 +1074,20 @@ proxy_set_header  Via  $via;"
  (raw-content
   (list "return 308 https://$host$request_uri;;)
 
+(define %nginx-log-rotation
+  (simple-service
+   'nginx-log-rotation
+   rottlog-service-type
+   (list (log-rotation
+  (files (list "/var/log/nginx/bordeaux.access.log.gz"))
+  (options
+   '("storefile @FILENAME"
+ "nocompress"
+ "notifempty"))
+  (post-rotate #~(let ((pid (call-with-input-file "/var/run/nginx/pid"
+  read)))
+   (kill pid SIGUSR1)))
+
 
 (define %guix-build-coordinator-configuration
   (let* ((data.guix.gnu.org-build-event-destination
@@ -1609,6 +1623,8 @@ proxy_set_header  Via  $via;"
%coordinator.bayfront.guix.gnu.org-nginx-servers
%coordinator.bordeaux.guix.gnu.org-nginx-servers
 
+%nginx-log-rotation
+
 (service nar-herder-service-type
  (nar-herder-configuration
   ;; To make it easy for the guix-build-coordinator hooks

branch master updated (67195e5a -> 3638c83e)

cbaines pushed a change to branch master
in repository maintenance.

from 67195e5a doc: No longer suggest using 'degraded' mount options with 
Btrfs.
 new c6996424 hydra: bayfront: Start rotating NGinx logs.
 new 8be72be2 hydra: bayfront: Rework the build success hook.
 new 25dea060 hydra: Change set $via in bayfront and hydra-guix-129 NGinx 
config.
 new 3638c83e hydra: Increase the NGinx log level from 'error to 'warn.

The 4 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.


Summary of changes:
 hydra/bayfront.scm| 54 ---
 hydra/deploy-node-129.scm | 13 ++--
 2 files changed, 49 insertions(+), 18 deletions(-)

04/04: hydra: Increase the NGinx log level from 'error to 'warn.

cbaines pushed a commit to branch master
in repository maintenance.

commit 3638c83e624f88c8469d9e6a7fc7fd2d44d8022d
Author: Christopher Baines 
AuthorDate: Wed Jun 5 12:12:09 2024 +0100

hydra: Increase the NGinx log level from 'error to 'warn.

As otherwise things like uninitialised variable warnings are omitted.

* hydra/bayfront.scm : Set log-level to 'warn.
* hydra/deploy-node-129.scm (node-129-os): Set log-level to 'warn.
---
 hydra/bayfront.scm| 1 +
 hydra/deploy-node-129.scm | 1 +
 2 files changed, 2 insertions(+)

diff --git a/hydra/bayfront.scm b/hydra/bayfront.scm
index 837e6df2..2916e0b2 100644
--- a/hydra/bayfront.scm
+++ b/hydra/bayfront.scm
@@ -1591,6 +1591,7 @@ add_header Content-Type text/plain;")))
   (global-directives
'((events . ((use . epoll)))
  (worker_processes . 16)))
+  (log-level 'warn)
   (modules
(list
 ;; Module to redirect users to the localized pages of their 
choice.
diff --git a/hydra/deploy-node-129.scm b/hydra/deploy-node-129.scm
index 6baf788b..989d1b14 100644
--- a/hydra/deploy-node-129.scm
+++ b/hydra/deploy-node-129.scm
@@ -355,6 +355,7 @@ devices {
 
   (service nginx-service-type
(nginx-configuration
+(log-level 'warn)
 (upstream-blocks
  (list (nginx-upstream-configuration
 (name "nar-herder")

Tapestry-hibernate module seemingly leaking connections

2024-06-04 Thread Christopher Dodunski (Tapestry)


Hi,

My application's DAO class is employing an injected Hibernate Session 
for accessing a MySQL DB.  Connection pooling is provided by C3PO.


My understanding is that the Tapestry Hibernate IoC (per thread) service 
takes care of closing DB connections under the hood, releasing them back 
to the pool, without any explicit requirements inside the DAO.  However, 
in some cases connections are not being released and eventually MySQL 
kills them (after 8 hours or so).  This then results in broken pipe 
errors within the application which C3PO resolves by recreating the 
pool.  Obviously not ideal.


One solution is to have C3PO check connections are live when checking 
them out from the pool, but before heading down this path I thought it 
worth exploring options from a programmatic point of view.  Possibly 
there is a recommended practice that I'm not following in my DAO class.


In the below DB query you can see two likely leaked connections that 
haven't timed out at 300 seconds as configured in C3PO.



MariaDB [mydb]> show full processlist;

++-+-+-+-+--+---+---+--+
| Id | User| Host| db  | Command | Time | 
State | Info  | Progress |

++-+-+-+-+--+---+---+--+
| 298177 | user| localhost:41638 | mydb| Sleep   | 2286 |
   | NULL  |0.000 |
| 298178 | user| localhost:41640 | mydb| Sleep   | 1858 |
   | NULL  |0.000 |
| 298179 | root| localhost   | mydb| Query   |0 | 
init  | show full processlist |0.000 |
| 298232 | user| localhost:42014 | mydb| Sleep   |7 |
   | NULL  |0.000 |
| 298233 | user| localhost:42016 | mydb| Sleep   |7 |
   | NULL  |0.000 |
| 298234 | user| localhost:42018 | mydb| Sleep   |7 |
   | NULL  |0.000 |
| 298235 | user| localhost:42020 | mydb| Sleep   |7 |
   | NULL  |0.000 |
| 298236 | user| localhost:42022 | mydb| Sleep   |7 |
   | NULL  |0.000 |
| 298237 | user| localhost:42024 | mydb| Sleep   |7 |
   | NULL  |0.000 |
| 298238 | user| localhost:42026 | mydb| Sleep   |7 |
   | NULL  |0.000 |
| 298239 | user| localhost:42028 | mydb| Sleep   |7 |
   | NULL  |0.000 |

++-+-+-+-+--+---+---+--+

11 rows in set (0.00 sec)


Kind regards,

Chris.

-
To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org
For additional commands, e-mail: users-h...@tapestry.apache.org

Re: Update sysutils/opam to 2.1.6

2024-06-04 Thread Christopher Zimmermann


It's been some time... Opam really needs an update.

On Fri, Dec 31, 2021 at 01:41:44PM -0500, Daniel Dickman wrote:

On Fri, Dec 31, 2021 at 2:36 AM Christopher Zimmermann
 wrote:


Hi,

this update of opam changes to the build-utils shipped with opam and
drops dependencies on our ports utils. This makes ports dune version
independent of opam. OK?

Christopher


1) I get a bunch of failures like this when running "make test". we
probably have to neuter "-- strip-trailing-cr" usage?

var-optiondiff: unknown option -- strip-trailing-cr
usage: diff [-abdipTtw] [-c | -e | -f | -n | -q | -u] [-I pattern] [-L label]
   file1 file2
  diff [-abdipTtw] [-I pattern] [-L label] -C number file1 file2
  diff [-abditw] [-I pattern] -D string file1 file2
  diff [-abdipTtw] [-I pattern] [-L label] -U number file1 file2
  diff [-abdiNPprsTtw] [-c | -e | -f | -n | -q | -u] [-I pattern]
   [-L label] [-S name] [-X file] [-x pattern] dir1 dir2
[FAIL]


This is now dealt with by using gdiff for tests.


2) Running portcheck resulted in:

C++ libraries in WANTLIB with default COMPILER (most ports need
'COMPILER=base-clang ports-gcc' or 'COMPILER=base-clang ports-gcc
base-gcc')


I also made some tests more posix compliant, which helps them to succeed 
on OpenBSD. I will try to get those fixes upstream.


OK?

Christopher

Re: Update sysutils/opam to 2.1.6

2024-06-04 Thread Christopher Zimmermann


It's been some time... Opam really needs an update.

On Fri, Dec 31, 2021 at 01:41:44PM -0500, Daniel Dickman wrote:

On Fri, Dec 31, 2021 at 2:36 AM Christopher Zimmermann
 wrote:


Hi,

this update of opam changes to the build-utils shipped with opam and
drops dependencies on our ports utils. This makes ports dune version
independent of opam. OK?

Christopher


1) I get a bunch of failures like this when running "make test". we
probably have to neuter "-- strip-trailing-cr" usage?

var-optiondiff: unknown option -- strip-trailing-cr
usage: diff [-abdipTtw] [-c | -e | -f | -n | -q | -u] [-I pattern] [-L label]
   file1 file2
  diff [-abdipTtw] [-I pattern] [-L label] -C number file1 file2
  diff [-abditw] [-I pattern] -D string file1 file2
  diff [-abdipTtw] [-I pattern] [-L label] -U number file1 file2
  diff [-abdiNPprsTtw] [-c | -e | -f | -n | -q | -u] [-I pattern]
   [-L label] [-S name] [-X file] [-x pattern] dir1 dir2
[FAIL]


This is now dealt with by using gdiff for tests.


2) Running portcheck resulted in:

C++ libraries in WANTLIB with default COMPILER (most ports need
'COMPILER=base-clang ports-gcc' or 'COMPILER=base-clang ports-gcc
base-gcc')


I also made some tests more posix compliant, which helps them to succeed 
on OpenBSD. I will try to get those fixes upstream.


OK?

Christopher


... and here is the diff:


Index: Makefile
===
RCS file: /cvs/ports/sysutils/opam/Makefile,v
retrieving revision 1.28
diff -u -p -r1.28 Makefile
--- Makefile24 Apr 2024 17:10:39 -  1.28
+++ Makefile4 Jun 2024 19:01:12 -
@@ -2,10 +2,9 @@ COMMENT =  OCaml source-based package ma
 
 CATEGORIES =		sysutils devel
 
-V =			2.0.10

+V =2.1.6
 PKGNAME =  opam-${V}
 DISTNAME = opam-full-${V}
-REVISION = 1
 
 SITES =			https://github.com/ocaml/opam/releases/download/${V}/
 
@@ -16,14 +15,12 @@ MAINTAINER =		Christopher Zimmermann 
 # LGPLv3
 PERMIT_PACKAGE =   Yes
 
-WANTLIB =		${COMPILER_LIBCXX} c m

+WANTLIB =  ${LIBCXX} c m
+
+COMPILER = base-clang base-gcc
 
 BUILD_DEPENDS =		lang/ocaml \

-   sysutils/findlib \
-   devel/dune \
-   devel/ocaml-cppo \
-   archivers/bzip2 \
-   net/curl
+   archivers/bzip2
 
 RUN_DEPENDS =		archivers/unzip \

archivers/bzip2 \
@@ -32,11 +29,16 @@ RUN_DEPENDS =   archivers/unzip \
devel/gmake \
net/curl
 
+TEST_DEPENDS =		textproc/gdiff \

+   net/wget
+
 USE_GMAKE =Yes
 
 CONFIGURE_ENV +=	CFLAGS="${CFLAGS}" \

LDFLAGS="${LDFLAGS}"
-CONFIGURE_STYLE =  gnu
+CONFIGURE_STYLE =  gnu autoreconf no-autoheader
+AUTOCONF_VERSION = 2.69
+AUTOMAKE_VERSION = 1.16
 
 ALL_TARGET =		lib-ext all

 INSTALL_TARGET =   install
@@ -52,5 +54,8 @@ post-install:
${docdir}/
${INSTALL_DATA_DIR} ${docdir}/pages
${INSTALL_DATA} ${WRKSRC}/doc/pages/*.md ${docdir}/pages
+
+pre-test:
+   ln -fs ${LOCALBASE}/bin/gdiff ${WRKDIR}/bin/diff
 
 .include 

Index: distinfo
===
RCS file: /cvs/ports/sysutils/opam/distinfo,v
retrieving revision 1.9
diff -u -p -r1.9 distinfo
--- distinfo16 Jan 2023 19:03:18 -  1.9
+++ distinfo4 Jun 2024 19:01:12 -
@@ -1,2 +1,2 @@
-SHA256 (opam-full-2.0.10.tar.gz) = O1dAuOHBvGXc+KohxOjNgc1qv+G/UuosxDZ8P4nVvkA=
-SIZE (opam-full-2.0.10.tar.gz) = 8173617
+SHA256 (opam-full-2.1.6.tar.gz) = 0q9e3IX1UuDPXsDdzJSdlPLcVQ3F31lRdKBqTq+K9ig=
+SIZE (opam-full-2.1.6.tar.gz) = 11704198
Index: patches/patch-Makefile_config_in
===
RCS file: patches/patch-Makefile_config_in
diff -N patches/patch-Makefile_config_in
--- /dev/null   1 Jan 1970 00:00:00 -
+++ patches/patch-Makefile_config_in4 Jun 2024 19:01:12 -
@@ -0,0 +1,13 @@
+don't use system wide installed ocaml packages
+
+Index: Makefile.config.in
+--- Makefile.config.in.orig
 Makefile.config.in
+@@ -17,7 +17,6 @@ OCAMLFIND = @OCAMLFIND@
+ OCAML = @OCAML@
+ OCAMLC = @OCAMLC@
+ OCAMLOPT = @OCAMLOPT@
+-DUNE = @DUNE@
+ DUNE_SECONDARY = @DUNE_SECONDARY@
+ LN_S = @LN_S@
+ 
Index: patches/patch-configure_ac

===
RCS file: patches/patch-configure_ac
diff -N patches/patch-configure_ac
--- /dev/null   1 Jan 1970 00:00:00 -
+++ patches/patch-configure_ac  4 Jun 2024 19:01:12 -
@@ -0,0 +1,14 @@
+don't use system wide installed ocaml packages
+
+Index: configure.ac
+--- configure.ac.orig
 configure.ac
+@@ -255,8 +255,6 @@ AS_IF([te

Re: Invalid character found in the request target


Chuck,

On 6/4/24 09:10, Chuck Caldarale wrote:



On Jun 4, 2024, at 06:07, Christopher Schultz  
wrote:







04-Jun-2024 09:49:11.448 INFO [http-nio-8080-exec-6] 
org.apache.coyote.http11.Http11Processor.service Error parsing HTTP request 
header
  Note: further occurrences of HTTP request parsing errors will be logged at 
DEBUG level.
 java.lang.IllegalArgumentException: Invalid character found in the 
request target [/sra_{xxx0---yy}/ ]. The valid 
characters are defined in RFC 7230 and RFC 3986


The problem is the { and } characters.

My reading of RFC 7230 is that { and } /should/ be allowed, but Tomcat's code 
rejects them by default.



I think it depends on which part of RFC 3986 one looks at. Appendix A should 
have the precise URI syntax, where the reserved and unreserved sets are defined 
as follows:

unreserved= ALPHA / DIGIT / "-" / "." / "_" / "~"
reserved  = gen-delims / sub-delims
gen-delims= ":" / "/" / "?" / "#" / "[" / "]" / "@"
sub-delims= "!" / "$" / "&" / "'" / "(" / ")"
  / "*" / "+" / "," / ";" / "="

Some ASCII characters, notably braces, are simply left out of either set here. 
However, section 2.3 declares:

Characters that are allowed in a URI but do not have a reserved
purpose are called unreserved.  These include uppercase and lowercase
letters, decimal digits, hyphen, period, underscore, and tilde.

The use of “include” would seem to imply “not limited to”, but that’s not 
explicitly stated here.

Nothing like a little ambiguity to keep things interesting…


Yup. RFC 3986 does not include the { character anywhere in the text. RFC 
7230 mentions it as a character not allowed in "field values" which I 
think only applies to headers unless you consider the "request line" 
to be "header 0" or somesuch.


At any rate, characters such as { and } could be considered "dangerous" 
and so, while I would argue the RFC doesn't prohibit them, Tomcat's 
refusal to accept them under a default configuration is a reasonable 
one... especially because you can simply re-enable them if your 
application needs them.


-chris

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: [RE-wrenches] IRS Audit

2024-06-04 Thread Christopher Warfel via RE-wrenches

Qualified equipment I think would be it's UL certification.  I have 
never run into this issue though.  Chris


On 6/3/2024 4:53 PM, pieter offgridenterprises.org via RE-wrenches wrote:


Yes and no,  We had the IRS send an agent to one of our clients Ranch, 
and they asked to see the equipment but did not request any further 
documentation.


Pieter Huebner

*From:*RE-wrenches  *On 
Behalf Of *rick--- via RE-wrenches

*Sent:* Monday, June 3, 2024 2:23 PM
*To:* RE-wrenches 
*Cc:* r...@solshineenergy.com
*Subject:* [RE-wrenches] IRS Audit

Wrenches,

Has anyone had a customer that was being audited and requesting a 
manufacturers’ certification statement for their PV equipment?  The 
only manufacturer that has been able to provide a statement has been 
REC. I’m attaching a copy for reference. Is there an assumption that 
most equipment qualifies? The IRS definition for “qualified solar 
electric property” is pretty vague -


 "/Qualified solar electric property expenditure. The term "qualified 
solar electric property expenditure" means an expenditure for property 
which uses solar energy to generate electricity for use in a dwelling 
unit located in the United States and used as a residence by the 
taxpayer/."


Thanks,

,

rick brown
SolShine Energy Alternatives, LLC
Electrical & Solar Contracting Services
www.SolShineEnergy.com <http://www.SolShineEnergy.com>
Roanoke, VA

Office: 540.235.3095
Mobile: 540.808.9502

VA Class A Contractor Lic# 2705147660
VA Master Electrician Lic# 2710062762
VA Alternative Energy Systems Installer
NABCEP Certified PV Installation Professional 110112-21


CONFIDENTIALITY NOTICE -- This email is intended only for the 
person(s) named in
the message header. Unless otherwise indicated, it contains 
information that is
confidential, privileged and/or exempt from disclosure under 
applicable law. If you have
received this message in error, please notify the sender of the error 
and delete the

message. Thank you.”


___
List sponsored by Redwood Alliance

Pay optional member dues here:http://re-wrenches.org

List Address:RE-wrenches@lists.re-wrenches.org

Change listserver email address & settings:
http://lists.re-wrenches.org/options.cgi/re-wrenches-re-wrenches.org

There are two list archives for searching. When one doesn't work, try the other:
https://www.mail-archive.com/re-wrenches@lists.re-wrenches.org/
http://lists.re-wrenches.org/pipermail/re-wrenches-re-wrenches.org

List rules & etiquette:
http://www.re-wrenches.org/etiquette.htm

Check out or update participant bios:
http://www.members.re-wrenches.org


--
Christopher Warfel
          ENTECH Engineering Inc.
   PO Box 871, Block Island, RI 02807
              401-477-5773
EE Logo <https://entech-engineering.com/Home/default.php>
BEGIN:VCARD
VERSION:4.0
N:Warfel;Christopher;;;
TEL;VALUE=TEXT:401-447-5773 (c)
NOTE:Use the cell phone number for all communications.  Thank you.
URL:https://www.entech-engineering.com
END:VCARD
___
List sponsored by Redwood Alliance

Pay optional member dues here: http://re-wrenches.org

List Address: RE-wrenches@lists.re-wrenches.org

Change listserver email address & settings:
http://lists.re-wrenches.org/options.cgi/re-wrenches-re-wrenches.org

There are two list archives for searching. When one doesn't work, try the other:
https://www.mail-archive.com/re-wrenches@lists.re-wrenches.org/
http://lists.re-wrenches.org/pipermail/re-wrenches-re-wrenches.org

List rules & etiquette:
http://www.re-wrenches.org/etiquette.htm

Check out or update participant bios:
http://www.members.re-wrenches.org

Re: Invalid character found in the request target


Christoph,

On 6/4/24 05:49, Christoph Kukulies wrote:

I'm getting these when startig tomcat9:


This is a request, not startup. But it's not important.


04-Jun-2024 09:49:11.448 INFO [http-nio-8080-exec-6] 
org.apache.coyote.http11.Http11Processor.service Error parsing HTTP request 
header
  Note: further occurrences of HTTP request parsing errors will be logged at 
DEBUG level.
 java.lang.IllegalArgumentException: Invalid character found in the 
request target [/sra_{xxx0---yy}/ ]. The valid 
characters are defined in RFC 7230 and RFC 3986
 at 
org.apache.coyote.http11.Http11InputBuffer.parseRequestLine(Http11InputBuffer.java:502)
 at 
org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:271)
 at 
org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:65)
 at 
org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:889)
 at 
org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1735)
 at 
org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
 at 
org.apache.tomcat.util.threads.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1191)
 at 
org.apache.tomcat.util.threads.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:659)
 at 
org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
 at java.base/java.lang.Thread.run(Thread.java:829)

Any clues?


The problem is the { and } characters.

My reading of RFC 7230 is that { and } /should/ be allowed, but Tomcat's 
code rejects them by default.


You can override this behavior by using the relaxedPathChars 
configuration attribute on your [1].


-chris

[1] https://tomcat.apache.org/tomcat-9.0-doc/config/http.html

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Webapp Getting redirected to an external IP Address


Mark,

On 6/4/24 01:50, Mark Thomas wrote:

On 04/06/2024 05:07, Tom Robinson wrote:

Hi,

We are running a tomcat7 application


You do realise that support for Tomcat 7 ended on 31 March 2021 don't you?


on our LAN which gets redirected from
a private, internal IP Address to an external ip address at which 
point it

fails. I can't find where this is happening.


Is it an actual redirect - i.e. a 30x response? Or do you mean something 
else?


If a redirect, does it redirect on the first request?


Where and what can I check for this redirect and how to control it or
switch it off all together.


Tomcat doesn't do this by default.

Tomcat 7 doesn't have the redirect valve so it won't be that.

Are you sure that the redirect is being issued by Tomcat? Might there be 
a reverse proxy in mix somewhere?


Other than that, it would have to be in the application code somewhere.


Or a server.xml  with a wildly incorrect set of proxy 
configuration attribute values.



I browse to here on our LAN:

https://myinternalhost.mydomain.com.au:8443


Check what myinternalhost.mydomain.com.au resolves to in terms of an IP 
address.


Try requesting a page that won't trigger a directory redirect. Something 
like:


https://myinternalhost.mydomain.com.au:8443/index.html

You may need to adjust that for your application.


And upgrade, for sure.

7.0: EOL
8.0: EOL
8.5: EOL

-chris

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Tomcat 9 memory leak message

Jenny,

On 6/3/24 12:35, Ying Jin wrote:

Chris,

Thanks for your suggestion!

Another question I would like to confirm with you is if we have to remove
the ojdbc jar file from our web application’s web-inf/lib folder or not.

The reason of our concern is that we need to use the same code base to
create a jar file and deploy it to stone branch which needs to have the
ojdbc jar file included in the application.

Therefore, we prefer to include the ojdbc jar file in the application to
avoid confusion, however, we’re not sure if this will cause any issues for
the web application’s deployment or not on tomcat server.

Using WEB-INF/lib for your JDBC driver should work, but your JDBC driver
map have a bug which causes leaks. If you cannot get the driver to
de-register properly, you have two choices:

1. Ignore the warning messages and eventually run out or memory

2. Move (not copy) your driver to CATALINA_BASE/lib

Hope that helps,
-chris

On Sun, Jun 2, 2024 at 1:57 AM Christopher Schultz <
ch...@christopherschultz.net> wrote:

Jenny,

(Apologies for top-posting)

“Safely ignored” can mean many things. You are only in danger of running
out of heap space. So if you aren’t worried about that, feel free to ignore
the error message.

If it were my system, I would want to ensure a clean unload of the driver
when the application shuts down.

But I don’t think it will harm anything besides your memory usage.

-chris

On Jun 1, 2024, at 00:18, Ying Jin wrote:

Chris,

Thanks for your reply!

We already removed the ojdbc8.jar file from the application's Web-inf/lib
folder as suggested in the following post, however, we still got the
warning messages below after the application is deployed to the Tomcat 9
server.

https://stackoverflow.com/questions/6981564/why-must-the-jdbc-driver-be-put-in-tomcat-home-lib-folder

WARNING: The web application [Our Web Application Name] appears to have
started a thread named [InterruptTimer] but has failed to stop it. This

very likely to create a memory leak. Stack trace of thread:

WARNING: The web application [Our Web Application Name] appears to have
started a thread named [oracle.jdbc.diagnostics.Diagnostic.CLOCK] but has
failed to stop it. This is very likely to create a memory leak. Stack

trace

of thread:

I also read some posts saying these warning messages can be safely

ignored

if the Tomcat version is greater than 7.0. I'm not sure if this is

correct

or not.

Please advise,

Many thanks!
Jenny

On Fri, May 31, 2024 at 3:50 PM Christopher Schultz <
ch...@christopherschultz.net> wrote:

Jenny,

On 5/31/24 14:52, Ying Jin wrote:
We removed the ojdbc8 driver jar from web-inf/lib from the web
application and kept the ojdbc8 jar file in the Tomcat/lib folder, but
we still can see the following memory link warning message whenever we
redeploy the web application. We use the Tomcat 9 server in the Linux
environment.

This list strips attachments. Can you re-post with text-only?

The other warning message is about the "validateFile Problem with jar
file /tomcat/lib/jolokia.jar. My question is if we can safely ignore
these warning messages or not.

It would be great if you can shed some light on this issue.

If the message is something like "driver cannot be unloaded" then check
Tomcat with a debugger or even something like JVisualVM to see how many
WebappClassLoaders you have in memory.

If the driver causes the web application ClassLoader to be "pinned" in
memory, then it will never be removed and all those classes will
continue to use-up heap space until you restart the JVM. This gets worse
every time you reload your application without restarting the JVM. The
Manager application web UI can help you diagnose these a little.

The validation problem with the Jolokia JAR file will depend upon
exactly what it says. I would first get a replacement copy of the
Jolokia JAR file before bothering to try to diagnose it any further.

-chris

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Cannot invoke "org.apache.tomcat.util.net.SSLHostConfig.getProtocols()" because "this.sslHostConfig" is null

Adam,

On 6/3/24 04:16, Adam Danischewski wrote:

Using Embedded Tomcat 10 in SpringBoot, trying to manually configure a new
HTTPS/SSL port. I've got the following SSL bundle set in my application
properties (fairly sure this part is working fine):

>
> [snip]

Note: I am new to Tomcat and most of these concepts, also side note if
anyone could chime in to why setCertificateFile

disappeared from SSLHostConfig in the Tomcat API from 9 to 10, it didn't
look like it was deprecated and many

This is an internal API. Those related functions have moved from the 
SSLHostConfig -> Certificate and you have to know which certificate to 
check to use it. SSLHostConfig really can't just forward the call to 
some random Certificate.

This move happened in 8.5, was present in 9.0 and 10.0 and has not been 
removed in 10.1. It's time to update your code. :)

Perhaps we could have explicitly marked it as deprecated. I can do this 
for Tomcat 9.0.

-chris

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: 600,000 routers bricked

2024-06-03 Thread Christopher Morrow

On Mon, Jun 3, 2024 at 1:40 PM Matt Erculiani  wrote:
>
> It's important to note though that if you quietly (or even publicly) patch 
> 600k devices to fix a bug, nobody cares. Plus, doing so is still a crime: 
> it's 600k instances of accessing a computer system without permission. It's 
> also far, FAR easier to write a stream of 0s to the bootloader than it is to 
> decompile and debug bad firmware.
>

Lumen USED TO HAVE a walled-garden they dropped people into when their
links/network ran amok.. at least in legacy-qwest/century-link
consumer connectivity situations.
maybe that's gone now?
maybe the part of the affected network for this incident didn't have
that capability?

[Flying-squirrel-members] Fan for Upstairs

2024-06-03 Thread Christopher Snyder

Good afternoon all,

Thank you to everyone who came to the documentary showing yesterday. We
have started looking into installing a new fan upstairs to help keep the
room cool in the summer. I have included a link here.
<https://www.amazon.com/Automatic-Thermostat-Variable-controller-ILG8SF20V-ST/dp/B0BVY8VCNZ/ref=mp_s_a_1_1?crid=28YB397P71YZ0=eyJ2IjoiMSJ9.FGsqTeqEwxv5b9lqjROl8g.SRaS_KTHW6PB1vf6j_dLY9KiJDFviszQw2rZlGyEeb4_tag=se=ILG8SF20V-ST=1717251492=ilg8sf20v-st%2Caps%2C130=8-1>
Cost
$176.77. If we have no objections we have a volunteer ready to move ahead
with installation. Let me know if you have any questions or concerns.

Thank you

Christopher
-- 
Christopher Snyder
he/him
585-815-3749
___
Flying-squirrel-members mailing list
Flying-squirrel-members@lists.rocus.org
https://lists.mayfirst.org/mailman/listinfo/flying-squirrel-members

To unsubscribe, send an email to:
flying-squirrel-members-unsubscr...@lists.rocus.org
(The subject and body of the email don't matter)

Re: [OE-core] [PATCH 2/4] autotools/libtool: Drop libtool sysroot patch as not needed

2024-06-03 Thread Christopher Larson

AM_INIT_AUTOMAKE([foreign])
> - AC_PROG_CC
> - AC_CONFIG_SRCDIR([lib2.c])
> - LT_INIT
> --sysroot=$with_sysroot
> -+sysroot=$with_libtool_sysroot
> - AC_SUBST([sysroot])
> - AC_OUTPUT(Makefile)
> - _ATEOF
> -@@ -50230,7 +50230,7 @@ AM_INIT_AUTOMAKE([foreign])
> - AC_PROG_CC
> - AC_CONFIG_SRCDIR([prog.c])
> - LT_INIT
> --sysroot=$with_sysroot
> -+sysroot=$with_libtool_sysroot
> - AC_SUBST([sysroot])
> - AC_OUTPUT(Makefile)
> - _ATEOF
> -@@ -50588,7 +50588,7 @@ $at_traceon; }
> -
> -
> - LDFLAGS="$LDFLAGS --sysroot=$sysroot -no-undefined"
> --configure_options="$configure_options --with-sysroot=$sysroot
> --prefix=$prefix"
> -+configure_options="$configure_options --with-libtool-sysroot=$sysroot
> --prefix=$prefix"
> -
> - #???
> - if test PATH = "$shlibpath_var"; then
> -@@ -50803,7 +50803,7 @@ AM_INIT_AUTOMAKE([foreign])
> - AC_PROG_CC
> - AC_CONFIG_SRCDIR([lib2.c])
> - LT_INIT
> --sysroot=$with_sysroot
> -+sysroot=$with_libtool_sysroot
> - AC_SUBST([sysroot])
> - AC_OUTPUT(Makefile)
> - _ATEOF
> -@@ -50997,7 +50997,7 @@ AM_INIT_AUTOMAKE([foreign])
> - AC_PROG_CC
> - AC_CONFIG_SRCDIR([prog.c])
> - LT_INIT
> --sysroot=$with_sysroot
> -+sysroot=$with_libtool_sysroot
> - AC_SUBST([sysroot])
> - AC_OUTPUT(Makefile)
> - _ATEOF
> diff --git
> a/meta/recipes-devtools/libtool/libtool/0006-libtool.m4-Handle-as-a-sysroot-correctly.patch
> b/meta/recipes-devtools/libtool/libtool/0006-libtool.m4-Handle-as-a-sysroot-correctly.patch
> index 435c52c7301..feb1048b554 100644
> ---
> a/meta/recipes-devtools/libtool/libtool/0006-libtool.m4-Handle-as-a-sysroot-correctly.patch
> +++
> b/meta/recipes-devtools/libtool/libtool/0006-libtool.m4-Handle-as-a-sysroot-correctly.patch
> @@ -17,7 +17,7 @@ Index: libtool-2.5.0/m4/libtool.m4
>  @@ -1253,18 +1253,18 @@ dnl lt_sysroot will always be passed unq
>   dnl in case the user passed a directory name.
>   lt_sysroot=
> - case $with_libtool_sysroot in #(
> + case $with_sysroot in #(
>  - yes)
>  + no)
>  if test yes = "$GCC"; then
> @@ -29,10 +29,10 @@ Index: libtool-2.5.0/m4/libtool.m4
>  + yes|''|/)
>  +   ;; #(
>/*)
> -lt_sysroot=`echo "$with_libtool_sysroot" | $SED -e "$sed_quote_subst"`
> +lt_sysroot=`echo "$with_sysroot" | $SED -e "$sed_quote_subst"`
>  ;; #(
>  - no|'')
>  -   ;; #(
>*)
> -AC_MSG_RESULT([$with_libtool_sysroot])
> +AC_MSG_RESULT([$with_sysroot])
>  AC_MSG_ERROR([The sysroot must be an absolute path.])
>
> 
>
>

-- 
Christopher Larson
chris_lar...@mentor.com, chris.lar...@siemens.com, kerg...@gmail.com
Principal Software Engineer, Embedded Linux Solutions, Siemens Digital
Industries Software

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#200268): 
https://lists.openembedded.org/g/openembedded-core/message/200268
Mute This Topic: https://lists.openembedded.org/mt/106461688/21656
Group Owner: openembedded-core+ow...@lists.openembedded.org
Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub 
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-

Re: [VOTE] ActiveMQ Artemis 2.34.0 release

2024-06-03 Thread Christopher Shannon

+1 (binding)

* Built the tag from source and ran the fast tests
* Validated signatures and checksums
* Verified license and notice files in archives
* Checked source for license headers with 'mvn apache-rat:check'
* Ran the broker from the binary and checked the web console

On Sat, Jun 1, 2024 at 4:02 PM Havret  wrote:

> Hi,
>
> I've re-evaluated the process since it's been a while since I last built an
> Artemis Docker image. It appears that I used the incorrect command.
> Initially, I used:
>
> docker build -t
> havret/dotnet-activemq-artemis-client-test-broker:2.34.0-rc1 .
>
> Instead of the correct:
>
> docker buildx build --platform linux/amd64,linux/arm64 -t
> havret/dotnet-activemq-artemis-client-test-broker:2.34.0-rc1 --push .
>
> As a result, I was running the broker in Docker via emulation on my M1
> chip. With the proper arm64 build, it stopped crashing.
>
> I apologize for any confusion caused and for the premature concern.
>
> I would like to reinstate my "+1 (binding)" vote.
>
> Best regards,
>
> Krzysztof
>
> On Sat, Jun 1, 2024 at 9:35 PM Clebert Suconic 
> wrote:
>
> > Not necessarily an issue.
> >
> > I for instance increased the possible throughout of paging by
> > https://issues.apache.org/jira/browse/ARTEMIS-4773
> >
> > if you don't configure the max-read-pages while fetching from page you
> > might endup with more messages than you can handle in memory.
> >
> >
> > The VM should be issuing an OME on that case.. but a crash / core dump is
> > definitely not a broker issue.
> >
> > try including max-read-page-messages to 2000 and prefetch-page-messages
> to
> > 100 and tell me the results.
> >
> >
> > I do test adding millions of messages on the broker by some of the soak
> > tests I added (I can tweak numbers) and it's definitely not an issue.
> >
> >
> > If you reproduce the issue and provide me info I can check better.
> >
> >
> > Clebert Suconic
> >
> >
> > On Sat, Jun 1, 2024 at 6:40 AM Havret  wrote:
> >
> > > Hi Clebert, Justin,
> > >
> > > I've checked the previous version (2.33.0), as Justin suggested, and
> it's
> > > working fine. However, with the current release candidate, it keeps
> > > crashing every single time on a simple throughput benchmark (I'm
> sending
> > > 100k messages with 1KB of payload each). This issue occurs with both
> AMQP
> > > and CORE protocols.
> > >
> > > Having said that, I'm changing my vote to:
> > >
> > > -1 (binding)
> > >
> > > Thanks,
> > > Krzysztof
> > >
> > > On Sat, Jun 1, 2024 at 07:07 Clebert Suconic <
> clebert.suco...@gmail.com>
> > > wrote:
> > >
> > > > I would take it separately from the Vote thread" I don't see anything
> > > > wrong with the release itself.
> > > >
> > > > if you could start a separate thread about the issue, how to
> reproduce
> > > > it. When it started to fail? configurations.. etc?
> > > >
> > > >
> > > > this error here:
> > > > G1ParScanThreadState::copy_to_survivor_space(G1HeapRegionAttr,
> > oopDesc*,
> > > >
> > > >
> > > > Suggests me it's a memory issue? I would start by looking at paging
> > > > and its configurations? but lets do that on a separate thread?
> > > >
> > > > On Fri, May 31, 2024 at 6:54 PM Havret  wrote:
> > > > >
> > > > > I just noticed that when I run my performance benchmark against
> > version
> > > > > 2.34.0, it crashes with the following error:
> > > > >
> > > > > activemq-artemis  | [thread 14 also had an error]
> > > > > activemq-artemis  | #
> > > > > activemq-artemis  | # A fatal error has been detected by the Java
> > > Runtime
> > > > > Environment:
> > > > > activemq-artemis  | #
> > > > > activemq-artemis  | #  SIGSEGV (0xb) at pc=0x7e73b0d3,
> pid=1,
> > > > tid=37
> > > > > activemq-artemis  | #
> > > > > activemq-artemis  | # JRE version: OpenJDK Runtime Environment
> > > > > Zulu14.29+23-CA (14.0.2+12) (build 14.0.2+12)
> > > > > activemq-artemis  | # Java VM: OpenJDK 64-Bit Server VM
> > Zulu14.29+23-CA
> > > > > (14.0.2+12, mixed mode, sharing, tiered, compressed oops, g1 gc,
> > > > > linux-amd64)
> > > > > activemq-artemis  | # Problematic frame:
> > > > > activemq-artemis  | # V  [libjvm.so+0x6ee0d3][thread 40 also had an
> > > > error]
> > > > > activemq-artemis  | [thread 36 also had an error]
> > > > > activemq-artemis  | [thread 39 also had an error]
> > > > > activemq-artemis  | [thread 34 also had an error]
> > > > > activemq-artemis  | [thread 33 also had an error]
> > > > > activemq-artemis  | [thread 35 also had an error]
> > > > > activemq-artemis  | [thread 38 also had an error]
> > > > > activemq-artemis  |
> > > > > G1ParScanThreadState::copy_to_survivor_space(G1HeapRegionAttr,
> > > oopDesc*,
> > > > > markWord)+0x283
> > > > > activemq-artemis  | #
> > > > > activemq-artemis  | # No core dump will be written. Core dumps have
> > > been
> > > > > disabled. To enable core dumping, try "ulimit -c unlimited" before
> > > > starting
> > > > > Java again
> > > > > activemq-artemis  | #
> > > > > activemq-artemis  | # An error report file

RE: Transferring Files to a New Phone

2024-06-02 Thread Christopher Chaltain

Yes, I suspect you’re right. I went into the list of apps  you can backup, and 
I don’t see BARD listed. I’m assuming apps have to register themselves somehow 
to get backed up. Oh well, it’s not a big deal to me since the only books I 
have downloaded are those I’m currently reading or about to read.

--
Christopher (AKA CJ) =>÷
Chaltain at Outlook, USA

From: viphone@googlegroups.com  On Behalf Of Richard 
Turner
Sent: Sunday, June 2, 2024 5:04 PM
To: viphone@googlegroups.com
Subject: Re: Transferring Files to a New Phone

I do not believe BARD books get backed up. I've always had to download them 
after restoring a backup on a new phone.


Richard, USA
“Grandma always told us, “Be careful when you pray for patience. God stores it 
on the other side of Hell and you will have to go through Hell to get it.”
-- Cedrick Bridgeforth

My web site: https://www.turner42.com/





On Jun 2, 2024, at 2:13 PM, Christopher Chaltain 
mailto:chalt...@outlook.com>> wrote:

Is this true? If you have enough space then you can include BARD in your 
backup. I assume when you restore your iPhone then you’d get your BARD books 
back again. Obviously, I won’t be testing this until I get a new iPhone. BTW, 
when you get a new iPhone, Apple will temporarily give you enough storage to 
back up your iPhone.

--
Christopher (AKA CJ) =>÷
Chaltain at Outlook, USA

From: viphone@googlegroups.com<mailto:viphone@googlegroups.com> 
mailto:viphone@googlegroups.com>> On Behalf Of Joshua 
Hendrickson
Sent: Sunday, June 2, 2024 11:32 AM
To: viphone@googlegroups.com<mailto:viphone@googlegroups.com>
Subject: Re: Transferring Files to a New Phone

Hi Steve. Bard books is something that won’t transfer over to a new mhone. The 
only thing you can do, is to redownload your books onto your new phone again. I 
know how annoying this is. Hoefully this will change sometime in the future.
Sent from My totally awesome iPhone!!



On Jun 2, 2024, at 3:19 AM, Arnold Schmidt 
mailto:als5...@gmail.com>> wrote:
When I did it last, in December 2022, neither my bard nor my kindle books 
transferred. My Voice Dream library did.

Arnold Schmidt

Sent from  Arnold's  iPhone S E 3

On Jun 1, 2024, at 5:06 PM, Steve Matzura 
mailto:number6...@gmail.com>> wrote:


It's that time once again, and several iOS versions have gone by since last I 
even thought about this problem, but I am now in the process of getting data 
transferred to a new phone. Some applications, specifically BARD, have files 
that cannot be accessed through user-level applications like File or File 
Browser. So, is it possible to move lots and lots of BARD books from one device 
to another without having to re-download them? If so, can a user do it, or must 
it be done by an iOS technician at a store?
--
The following information is important for all members of the V iPhone list.

If you have any questions or concerns about the running of this list, or if you 
feel that a member's post is inappropriate, please contact the owners or 
moderators directly rather than posting on the list itself.

Your V iPhone list moderator is Mark Taylor. Mark can be reached at: 
mk...@ucla.edu<mailto:mk...@ucla.edu>. Your list owner is Cara Quinn - you can 
reach Cara at caraqu...@caraquinn.com<mailto:caraqu...@caraquinn.com>

The archives for this list can be searched at:
http://www.mail-archive.com/viphone@googlegroups.com/
---
You received this message because you are subscribed to the Google Groups 
"VIPhone" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to 
viphone+unsubscr...@googlegroups.com<mailto:viphone+unsubscr...@googlegroups.com>.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/viphone/7380518c-d69d-4456-8fd5-04828206b01d%40gmail.com<https://groups.google.com/d/msgid/viphone/7380518c-d69d-4456-8fd5-04828206b01d%40gmail.com?utm_medium=email_source=footer>.
--
The following information is important for all members of the V iPhone list.

If you have any questions or concerns about the running of this list, or if you 
feel that a member's post is inappropriate, please contact the owners or 
moderators directly rather than posting on the list itself.

Your V iPhone list moderator is Mark Taylor. Mark can be reached at: 
mk...@ucla.edu<mailto:mk...@ucla.edu>. Your list owner is Cara Quinn - you can 
reach Cara at caraqu...@caraquinn.com<mailto:caraqu...@caraquinn.com>

The archives for this list can be searched at:
http://www.mail-archive.com/viphone@googlegroups.com/
---
You received this message because you are subscribed to the Google Groups 
"VIPhone" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to 
viphone+unsubscr...@googlegroups.com<mailto:viphone+unsubscr...@googlegroups.com>.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/viphone/399D6D8C-417B-449E-8CA2

RE: Transferring Files to a New Phone

2024-06-02 Thread Christopher Chaltain

Is this true? If you have enough space then you can include BARD in your 
backup. I assume when you restore your iPhone then you’d get your BARD books 
back again. Obviously, I won’t be testing this until I get a new iPhone. BTW, 
when you get a new iPhone, Apple will temporarily give you enough storage to 
back up your iPhone.

--
Christopher (AKA CJ) =>÷
Chaltain at Outlook, USA

From: viphone@googlegroups.com  On Behalf Of Joshua 
Hendrickson
Sent: Sunday, June 2, 2024 11:32 AM
To: viphone@googlegroups.com
Subject: Re: Transferring Files to a New Phone

Hi Steve. Bard books is something that won’t transfer over to a new mhone. The 
only thing you can do, is to redownload your books onto your new phone again. I 
know how annoying this is. Hoefully this will change sometime in the future.
Sent from My totally awesome iPhone!!


On Jun 2, 2024, at 3:19 AM, Arnold Schmidt 
mailto:als5...@gmail.com>> wrote:
When I did it last, in December 2022, neither my bard nor my kindle books 
transferred. My Voice Dream library did.

Arnold Schmidt

Sent from  Arnold's  iPhone S E 3

On Jun 1, 2024, at 5:06 PM, Steve Matzura 
mailto:number6...@gmail.com>> wrote:


It's that time once again, and several iOS versions have gone by since last I 
even thought about this problem, but I am now in the process of getting data 
transferred to a new phone. Some applications, specifically BARD, have files 
that cannot be accessed through user-level applications like File or File 
Browser. So, is it possible to move lots and lots of BARD books from one device 
to another without having to re-download them? If so, can a user do it, or must 
it be done by an iOS technician at a store?
--
The following information is important for all members of the V iPhone list.

If you have any questions or concerns about the running of this list, or if you 
feel that a member's post is inappropriate, please contact the owners or 
moderators directly rather than posting on the list itself.

Your V iPhone list moderator is Mark Taylor. Mark can be reached at: 
mk...@ucla.edu<mailto:mk...@ucla.edu>. Your list owner is Cara Quinn - you can 
reach Cara at caraqu...@caraquinn.com<mailto:caraqu...@caraquinn.com>

The archives for this list can be searched at:
http://www.mail-archive.com/viphone@googlegroups.com/
---
You received this message because you are subscribed to the Google Groups 
"VIPhone" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to 
viphone+unsubscr...@googlegroups.com<mailto:viphone+unsubscr...@googlegroups.com>.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/viphone/7380518c-d69d-4456-8fd5-04828206b01d%40gmail.com<https://groups.google.com/d/msgid/viphone/7380518c-d69d-4456-8fd5-04828206b01d%40gmail.com?utm_medium=email_source=footer>.
--
The following information is important for all members of the V iPhone list.

If you have any questions or concerns about the running of this list, or if you 
feel that a member's post is inappropriate, please contact the owners or 
moderators directly rather than posting on the list itself.

Your V iPhone list moderator is Mark Taylor. Mark can be reached at: 
mk...@ucla.edu<mailto:mk...@ucla.edu>. Your list owner is Cara Quinn - you can 
reach Cara at caraqu...@caraquinn.com<mailto:caraqu...@caraquinn.com>

The archives for this list can be searched at:
http://www.mail-archive.com/viphone@googlegroups.com/
---
You received this message because you are subscribed to the Google Groups 
"VIPhone" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to 
viphone+unsubscr...@googlegroups.com<mailto:viphone+unsubscr...@googlegroups.com>.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/viphone/399D6D8C-417B-449E-8CA2-4AE678B4AB21%40gmail.com<https://groups.google.com/d/msgid/viphone/399D6D8C-417B-449E-8CA2-4AE678B4AB21%40gmail.com?utm_medium=email_source=footer>.
--
The following information is important for all members of the V iPhone list.

If you have any questions or concerns about the running of this list, or if you 
feel that a member's post is inappropriate, please contact the owners or 
moderators directly rather than posting on the list itself.

Your V iPhone list moderator is Mark Taylor. Mark can be reached at: 
mk...@ucla.edu<mailto:mk...@ucla.edu>. Your list owner is Cara Quinn - you can 
reach Cara at caraqu...@caraquinn.com<mailto:caraqu...@caraquinn.com>

The archives for this list can be searched at:
http://www.mail-archive.com/viphone@googlegroups.com/
---
You received this message because you are subscribed to the Google Groups 
"VIPhone" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to 
viphone+unsubscr...@googlegroups.com<mailto:viphone+unsubscr...@googlegroups.com>.
To view this discussion on

Re: Headline is massively indented

2024-06-02 Thread Christopher Menzel

> I have selected my font in the settings. I don't know how else to do it. A 
> package called texlive-full does not exist on my MikTex console. I don't know 
> how to install this package without using manual installation. Maybe with 
> \usepackage? That doesn't work.

Ah, I didn’t realize you were on Windows; TeX Live is a completely different 
implementation of TeX. As a recent thread indicated, MikTeX is not recommended 
for use with LyX — maybe this is Yet Another MikTeX Issue? So maybe try 
removing it and installing TeX Live  
instead. That’s all I can think of, as your documents seem to compile just fine 
under both MacOS and Linux for me (on both of which I have versions of TeX 
Live).

-chris

-- 
lyx-users mailing list
lyx-users@lists.lyx.org
http://lists.lyx.org/mailman/listinfo/lyx-users

Re: LyX 2.4 & MikTeX problem

2024-06-02 Thread Christopher Menzel

On Jun 2, 2024, at 9:12 AM, markhsalmon  wrote:
> 
>> It's because of this sort of problem, which seems to arise constantly, that 
>> we stopped recommending MiKTeX.
> 
> [S]o what do you recommend please? If not MikTek?

TeX Live 

-cm

-- 
lyx-users mailing list
lyx-users@lists.lyx.org
http://lists.lyx.org/mailman/listinfo/lyx-users

Re: Tomcat 9 memory leak message

2024-06-02 Thread Christopher Schultz

Jenny,

(Apologies for top-posting)

“Safely ignored” can mean many things. You are only in danger of running out of 
heap space. So if you aren’t worried about that, feel free to ignore the error 
message.

If it were my system, I would want to ensure a clean unload of the driver when 
the application shuts down.

But I don’t think it will harm anything besides your memory usage.

-chris

> On Jun 1, 2024, at 00:18, Ying Jin  wrote:
> 
> Chris,
> 
> Thanks for your reply!
> 
> We already removed the ojdbc8.jar file from the application's Web-inf/lib
> folder as suggested in the following post, however, we still got the
> warning messages below after the application is deployed to the Tomcat 9
> server.
> 
> https://stackoverflow.com/questions/6981564/why-must-the-jdbc-driver-be-put-in-tomcat-home-lib-folder
> 
> WARNING: The web application [Our Web Application Name] appears to have
> started a thread named [InterruptTimer] but has failed to stop it. This is
> very likely to create a memory leak. Stack trace of thread:
> 
> WARNING: The web application [Our Web Application Name] appears to have
> started a thread named [oracle.jdbc.diagnostics.Diagnostic.CLOCK] but has
> failed to stop it. This is very likely to create a memory leak. Stack trace
> of thread:
> 
> I also read some posts saying these warning messages can be safely ignored
> if the Tomcat version is greater than 7.0. I'm not sure if this is correct
> or not.
> 
> Please advise,
> 
> Many thanks!
> Jenny
> 
>> On Fri, May 31, 2024 at 3:50 PM Christopher Schultz <
>> ch...@christopherschultz.net> wrote:
>> 
>> Jenny,
>> 
>>> On 5/31/24 14:52, Ying Jin wrote:
>>> We removed the ojdbc8 driver jar from web-inf/lib from the web
>>> application and kept the ojdbc8 jar file in the Tomcat/lib folder, but
>>> we still can see the following memory link warning message whenever we
>>> redeploy the web application. We use the Tomcat 9 server in the Linux
>>> environment.
>> 
>> This list strips attachments. Can you re-post with text-only?
>> 
>>> The other warning message is about the "validateFile Problem with jar
>>> file /tomcat/lib/jolokia.jar. My question is if we can safely ignore
>>> these warning messages or not.
>>> 
>>> It would be great if you can shed some light on this issue.
>> 
>> If the message is something like "driver cannot be unloaded" then check
>> Tomcat with a debugger or even something like JVisualVM to see how many
>> WebappClassLoaders you have in memory.
>> 
>> If the driver causes the web application ClassLoader to be "pinned" in
>> memory, then it will never be removed and all those classes will
>> continue to use-up heap space until you restart the JVM. This gets worse
>> every time you reload your application without restarting the JVM. The
>> Manager application web UI can help you diagnose these a little.
>> 
>> The validation problem with the Jolokia JAR file will depend upon
>> exactly what it says. I would first get a replacement copy of the
>> Jolokia JAR file before bothering to try to diagnose it any further.
>> 
>> -chris
>> 
>> -
>> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>> For additional commands, e-mail: users-h...@tomcat.apache.org
>> 
>> 

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Transferring Files to a New Phone

2024-06-01 Thread Christopher Chaltain

I recently restored my iPhone back to factory settings. I was able to get 
everything back by backing everything up to the cloud and then restoring it. 
Apple provides a temporary increase in iCloud storage to support things like 
this or setting up a new phone.

There's also Quick Start which transfers everything over via Bluetooth.

You can read up on these as well as the option to use your computer,, at How to 
Transfer Data From iPhone to iPhone 
(lifewire.com)<https://www.lifewire.com/transfer-data-from-iphone-to-iphone-8550825>

--
Christopher (AKA CJ) =>÷
Chaltain at Outlook, USA

From: viphone@googlegroups.com  On Behalf Of Steve 
Matzura
Sent: Saturday, June 1, 2024 4:06 PM
To: viphone@googlegroups.com
Subject: Transferring Files to a New Phone


It's that time once again, and several iOS versions have gone by since last I 
even thought about this problem, but I am now in the process of getting data 
transferred to a new phone. Some applications, specifically BARD, have files 
that cannot be accessed through user-level applications like File or File 
Browser. So, is it possible to move lots and lots of BARD books from one device 
to another without having to re-download them? If so, can a user do it, or must 
it be done by an iOS technician at a store?
--
The following information is important for all members of the V iPhone list.

If you have any questions or concerns about the running of this list, or if you 
feel that a member's post is inappropriate, please contact the owners or 
moderators directly rather than posting on the list itself.

Your V iPhone list moderator is Mark Taylor. Mark can be reached at: 
mk...@ucla.edu<mailto:mk...@ucla.edu>. Your list owner is Cara Quinn - you can 
reach Cara at caraqu...@caraquinn.com<mailto:caraqu...@caraquinn.com>

The archives for this list can be searched at:
http://www.mail-archive.com/viphone@googlegroups.com/
---
You received this message because you are subscribed to the Google Groups 
"VIPhone" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to 
viphone+unsubscr...@googlegroups.com<mailto:viphone+unsubscr...@googlegroups.com>.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/viphone/7380518c-d69d-4456-8fd5-04828206b01d%40gmail.com<https://groups.google.com/d/msgid/viphone/7380518c-d69d-4456-8fd5-04828206b01d%40gmail.com?utm_medium=email_source=footer>.

-- 
The following information is important for all members of the V iPhone list.

If you have any questions or concerns about the running of this list, or if you 
feel that a member's post is inappropriate, please contact the owners or 
moderators directly rather than posting on the list itself.

Your V iPhone list moderator is Mark Taylor.  Mark can be reached at:  
mk...@ucla.edu.  Your list owner is Cara Quinn - you can reach Cara at 
caraqu...@caraquinn.com

The archives for this list can be searched at:
http://www.mail-archive.com/viphone@googlegroups.com/
--- 
You received this message because you are subscribed to the Google Groups 
"VIPhone" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to viphone+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/viphone/PH0PR14MB42961D21BD95128102AAFAABC8FD2%40PH0PR14MB4296.namprd14.prod.outlook.com.

Re: (tomcat-native) branch 1.1.x updated: Use ERR_error_string_n instead of ERR_error_string.

2024-06-01 Thread Christopher Schultz


Konstantin,

On 6/1/24 10:12, Konstantin Kolinko wrote:

пт, 31 мая 2024 г. в 20:33, Christopher Schultz :


All,

I don't think my commit broke the build. Re-winding to
fe07505146b7573f36a0d01ba0d2b847af7c9914 shows that the 1.1.x build does
not work on my machine.

$ sh buildconf --with-apr=apr-1.7.4

(This path is correct)

$ cat config.nice
#! /bin/sh
#
# Created by configure

"./configure" \
"--with-apr=/usr/local/Cellar/apr/1.7.4/bin/apr-1-config" \
"--with-ssl=/usr/local/Cellar/openssl@1.1/1.1.1w/" \
"$@"

$ ./config.nice
[... no errors...]

$ make clean
$ make

/bin/sh /usr/local/Cellar/apr/1.7.4/build-1/libtool --silent
--mode=compile --tag=CC clang -g -O2 -Wall   -DHAVE_CONFIG_H  -DDARWIN
-DSIGPROCMASK_SETS_THREAD_MASK   -g -O2 -DHAVE_OPENSSL
-DHAVE_POOL_PRE_CLEANUP
-I/Users/christopherschultz/git/tomcat-native/native/include
-I/Library/Java/JavaVirtualMachines/temurin-21.jdk/Contents/Home/include
-I/Library/Java/JavaVirtualMachines/temurin-21.jdk/Contents/Home/include/darwin
-I/usr/local/Cellar/openssl@1.1/1.1.1w//include
-I/usr/local/opt/apr/include/apr-1   -o src/ssl.lo -c src/ssl.c && touch
src/ssl.lo
src/ssl.c:201:7: error: incomplete definition of type 'struct dh_st'
  dh->p = prime(NULL);
  ~~^
/usr/local/Cellar/openssl@1.1/1.1.1w//include/openssl/ossl_typ.h:104:16:
note: forward declaration of 'struct dh_st'
typedef struct dh_st DH;
 ^


[...]



The full code in that area is:

static DH *make_dh_params(BIGNUM *(*prime)(BIGNUM *), const char *gen)
{
  DH *dh = DH_new();

  if (!dh) {
  return NULL;
  }
  dh->p = prime(NULL); // Line 201
  BN_dec2bn(>g, gen);
  if (!dh->p || !dh->g) {
  DH_free(dh);
  return NULL;
  }
  return dh;
}

Is this just a bad setup on my end?

Building the main branch in this environment (but with OpenSSL 3.0)
works with some warnings but no errors.

Can anyone confirm they can build 1.1.x HEAD?


The code in src/ssl.c of Tomcat-Native 1.1.1 cited above is not
compatible with "openssl@1.1/1.1.1w".

Essentially:
- "openssl@1.1/1.1.1w//include/openssl/ossl_typ.h:104:16:" declares an alias:


typedef struct dh_st DH;


I.e. it declares the name "DH", but the actual definition of "struct
dh_st" is elsewhere, not in public include files. (but in some
"internal" parts of OpenSSL). Thus the structure can only be used
opaquely. The error is that


  dh->p = prime(NULL); // Line 201


tries to access "p", which is not possible without knowing the
internal structure of DH.

Note that this is fixed in Tomcat Native 1.3.x:
There it calls "DH_set0_pqg()" to set the value of p.

Looking at the commit history of OpenSSL 1.1.x, there is the following commit:

https://github.com/openssl/openssl/commit/6db7fadf0975c75bfba01dd939063b4bdcb1a0fe
"DH: add simple getters for commonly used DH struct members"

It is not exactly on topic, but gives references where to look for.

Other links:
https://github.com/openssl/openssl/blob/OpenSSL_1_1_1-stable/include/openssl/ossl_typ.h
(declares "typedef struct dh_st DH"
https://github.com/openssl/openssl/blob/OpenSSL_1_1_1-stable/include/openssl/dh.h
(declares "DH_set0_pqg" and other DH_set / DH_get methods)

https://github.com/apache/tomcat-native/blob/1.1.x/native/src/ssl.c#L194
https://github.com/apache/tomcat-native/blob/1.3.x/native/src/ssl.c#L197
(Tomcat Native 1.1 vs 1.3)

https://stackoverflow.com/questions/45416806/missing-definitions-in-headerfile-dh-h-openssl-1-1-0f
(The same issue encountered by somebody else)

Note that the last release of Tomcat Native 1.1.x was 1.1.34 of 2015-12-15
https://tomcat.apache.org/oldnews-2015.html#Tomcat_Native_1.1.34_Released

It was built with
- APR 1.5.1
- OpenSSL 1.0.1m
(as mentioned in VERSIONS file in tomcat-native-1.1.34-win32-bin.zip)


Oops. I had meant to patch the 1.3.x branch, but I did not see it in 
git. I had to specifically check it out to see it.


I will remove the patch from 1.1.x which should not be there. I will 
re-do the patch for 1.3.x.


Apologies for the confusion.

Thanks,
-chris

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Re: LyX 2.4 - Emph keyboard shortcut not working in OS X 14.4.1

2024-06-01 Thread Christopher Menzel

On Jun 1, 2024, at 8:14 PM, Artemy Kolchinsky  wrote:
> I didn't know about ctlr-c e -- that works, thanks.
> 
> cmd-i doesn't work for me.

You should be able to set it in Preferences → Editing → Shortcuts.

-chris

> On Sat, Jun 1, 2024 at 7:34 PM Christopher Menzel  <mailto:chris.men...@gmail.com>> wrote:
>> 
>> > On Jun 1, 2024, at 6:51 PM, Artemy Kolchinsky > > <mailto:arte...@gmail.com>> wrote:
>> > 
>> > Thank you for releasing this amazing piece of software!
>> > 
>> > However, I am running into an annoying bug in Lyx 2.4 on OS X 14.4.1 (I 
>> > cannot post to the bug tracker due to lack of privileges). The cmd+e 
>> > command no longer works to turn emphasis on/off. cmd+b (bold) and cmd+u 
>> > (underline) still work as expected.
>> 
>> Cmd-i (“italic”) has always done the trick for me. ("Ctrl-c e” as well, 
>> FWIW!)
>> 
>> -chris

-- 
lyx-users mailing list
lyx-users@lists.lyx.org
http://lists.lyx.org/mailman/listinfo/lyx-users

Re: LyX 2.4.0 Released!

2024-06-01 Thread Christopher Menzel

I compiled 2.4.0 on Kali LInux 2024.2 with Qt6 (in a Parallels VM), no issues. 
Under MacOS I renamed RC4 just in case and then just copied 2.4.0 into the 
Applications folder as usual. Again, smooth sailing.

I can’t begin to express my gratitude to the LyX developers for this fabulous 
program. It’s been my constant companion for over 15 years now! :-)

Chris Menzel

> On Jun 1, 2024, at 6:20 PM, Rich Shepard  wrote:
> 
> On Sat, 1 Jun 2024, Murat Yildizoglu wrote:
> 
>> On OSX, I have copied it over the RC4 as proposed by the OS and it seems
>> to work without any problem.
> 
> On Slackware linux upgrading the existing version to a new one has no
> issues.
> 
> Rich
-- 
lyx-users mailing list
lyx-users@lists.lyx.org
http://lists.lyx.org/mailman/listinfo/lyx-users

Re: LyX 2.4 - Emph keyboard shortcut not working in OS X 14.4.1

2024-06-01 Thread Christopher Menzel



> On Jun 1, 2024, at 6:51 PM, Artemy Kolchinsky  wrote:
> 
> Thank you for releasing this amazing piece of software!
> 
> However, I am running into an annoying bug in Lyx 2.4 on OS X 14.4.1 (I 
> cannot post to the bug tracker due to lack of privileges). The cmd+e command 
> no longer works to turn emphasis on/off. cmd+b (bold) and cmd+u (underline) 
> still work as expected.

Cmd-i (“italic”) has always done the trick for me. ("Ctrl-c e” as well, FWIW!)

-chris
-- 
lyx-users mailing list
lyx-users@lists.lyx.org
http://lists.lyx.org/mailman/listinfo/lyx-users

Re: [VOTE] ActiveMQ Artemis 2.34.0 release

2024-06-01 Thread Christopher Shannon

I would suggest using the git bisect command to try and find the commit
that is causing the crash, if it is indeed a recent regression.

On Sat, Jun 1, 2024 at 6:40 AM Havret  wrote:

> Hi Clebert, Justin,
>
> I've checked the previous version (2.33.0), as Justin suggested, and it's
> working fine. However, with the current release candidate, it keeps
> crashing every single time on a simple throughput benchmark (I'm sending
> 100k messages with 1KB of payload each). This issue occurs with both AMQP
> and CORE protocols.
>
> Having said that, I'm changing my vote to:
>
> -1 (binding)
>
> Thanks,
> Krzysztof
>
> On Sat, Jun 1, 2024 at 07:07 Clebert Suconic 
> wrote:
>
> > I would take it separately from the Vote thread" I don't see anything
> > wrong with the release itself.
> >
> > if you could start a separate thread about the issue, how to reproduce
> > it. When it started to fail? configurations.. etc?
> >
> >
> > this error here:
> > G1ParScanThreadState::copy_to_survivor_space(G1HeapRegionAttr, oopDesc*,
> >
> >
> > Suggests me it's a memory issue? I would start by looking at paging
> > and its configurations? but lets do that on a separate thread?
> >
> > On Fri, May 31, 2024 at 6:54 PM Havret  wrote:
> > >
> > > I just noticed that when I run my performance benchmark against version
> > > 2.34.0, it crashes with the following error:
> > >
> > > activemq-artemis  | [thread 14 also had an error]
> > > activemq-artemis  | #
> > > activemq-artemis  | # A fatal error has been detected by the Java
> Runtime
> > > Environment:
> > > activemq-artemis  | #
> > > activemq-artemis  | #  SIGSEGV (0xb) at pc=0x7e73b0d3, pid=1,
> > tid=37
> > > activemq-artemis  | #
> > > activemq-artemis  | # JRE version: OpenJDK Runtime Environment
> > > Zulu14.29+23-CA (14.0.2+12) (build 14.0.2+12)
> > > activemq-artemis  | # Java VM: OpenJDK 64-Bit Server VM Zulu14.29+23-CA
> > > (14.0.2+12, mixed mode, sharing, tiered, compressed oops, g1 gc,
> > > linux-amd64)
> > > activemq-artemis  | # Problematic frame:
> > > activemq-artemis  | # V  [libjvm.so+0x6ee0d3][thread 40 also had an
> > error]
> > > activemq-artemis  | [thread 36 also had an error]
> > > activemq-artemis  | [thread 39 also had an error]
> > > activemq-artemis  | [thread 34 also had an error]
> > > activemq-artemis  | [thread 33 also had an error]
> > > activemq-artemis  | [thread 35 also had an error]
> > > activemq-artemis  | [thread 38 also had an error]
> > > activemq-artemis  |
> > > G1ParScanThreadState::copy_to_survivor_space(G1HeapRegionAttr,
> oopDesc*,
> > > markWord)+0x283
> > > activemq-artemis  | #
> > > activemq-artemis  | # No core dump will be written. Core dumps have
> been
> > > disabled. To enable core dumping, try "ulimit -c unlimited" before
> > starting
> > > Java again
> > > activemq-artemis  | #
> > > activemq-artemis  | # An error report file with more information is
> saved
> > > as:
> > > activemq-artemis  | # /artemis/hs_err_pid1.log
> > > activemq-artemis  | #
> > > activemq-artemis  | # If you would like to submit a bug report, please
> > > visit:
> > > activemq-artemis  | #   http://www.azulsystems.com/support/
> > > activemq-artemis  | #
> > >
> > > With 2.30.0 It's working fine.
> > >
> > > Thanks,
> > > Krzysztof
> > >
> > >
> > > On Fri, May 31, 2024 at 8:16 PM Havret  wrote:
> > >
> > > > +1 (binding)
> > > >
> > > > I've run the tests against ArtemisNetClient[1] 2.12.0 and
> > > > ArtemisNetCoreClient 1.0.0-alpha.1[2]. It's all green.
> > > >
> > > > To make the testing easier, I've created a docker image[3] with the
> > > > release candidate binaries. Feel free to use it to run your tests.
> > > >
> > > > Cheers,
> > > > Krzysztof
> > > >
> > > > [1]
> https://github.com/Havret/dotnet-activemq-artemis-client/pull/490
> > > > [2]
> > https://github.com/Havret/dotnet-activemq-artemis-core-client/pull/115
> > > > [3] docker pull
> > > > havret/dotnet-activemq-artemis-client-test-broker:2.34.0-rc1
> > > >
> > > > On Fri, May 31, 2024 at 6:56 PM Domenico Francesco Bruscino <
> > > > bruscin...@gmail.com> wrote:
> > > >
> > > >> +1 (binding)
> > > >>
> > > >> * Checked parent version in pom.xml files using `grep -LPrz
> --include
> > > >> pom.xml "(.|\n)*2.34.0<\/version>(.|\n)*<\/parent>"
> > ./`
> > > >> * Ran binary broker instance on Fedora 38 using OpenJDK 17
> > > >> * Checked the web console using `Google Chrome`
> > > >> * Checked producing, browsing and consuming messages from a queue
> > using
> > > >> `artemis check queue --name TEST --produce 1000 --browse 1000
> > --consume
> > > >> 1000`
> > > >>
> > > >> Connection brokerURL = tcp://localhost:61616
> > > >> Running QueueCheck
> > > >> Checking that a producer can send 1000 messages to the queue TEST
> ...
> > > >> success
> > > >> Checking that a consumer can browse 1000 messages from the queue
> TEST
> > ...
> > > >> success
> > > >> Checking that a consumer can consume 1000 messages from the queue
> > TEST ...
> > > >> success
> > > >> Checks run: 3,

Re: Tomcat 9 memory leak message


Jenny,

On 5/31/24 14:52, Ying Jin wrote:
We removed the ojdbc8 driver jar from web-inf/lib from the web 
application and kept the ojdbc8 jar file in the Tomcat/lib folder, but 
we still can see the following memory link warning message whenever we 
redeploy the web application. We use the Tomcat 9 server in the Linux 
environment.


This list strips attachments. Can you re-post with text-only?

The other warning message is about the "validateFile Problem with jar 
file /tomcat/lib/jolokia.jar. My question is if we can safely ignore 
these warning messages or not.


It would be great if you can shed some light on this issue.


If the message is something like "driver cannot be unloaded" then check 
Tomcat with a debugger or even something like JVisualVM to see how many 
WebappClassLoaders you have in memory.


If the driver causes the web application ClassLoader to be "pinned" in 
memory, then it will never be removed and all those classes will 
continue to use-up heap space until you restart the JVM. This gets worse 
every time you reload your application without restarting the JVM. The 
Manager application web UI can help you diagnose these a little.


The validation problem with the Jolokia JAR file will depend upon 
exactly what it says. I would first get a replacement copy of the 
Jolokia JAR file before bothering to try to diagnose it any further.


-chris

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Need help installing SSL certificate in tomcat keystore


Mark,

On 5/30/24 08:46, Fung-A-Fat, Mark wrote:
I am running a java web app on windows 2019 server and need some help 
getting the SSL certificate installed into my keystore.


I am running tomcat 9.x and java 11

I am able to generate a certificate request using both keytool and/or 
openssl


For both the CSR file looks like this, but the openssl also generates a 
private key xxx.


-BEGIN NEW CERTIFICATE REQUEST-

MIIC2TCCAcECAQAwZDELMAkGA1UEBhMCdXMxCzAJBgNVBAgTAm1hMRAwDgYDVQQH

-END NEW CERTIFICATE REQUEST-

Private key from OPENSSL

-BEGIN PRIVATE KEY-
MIIJQgIBADANBgkqhkiG9w0BAQEFAASCCSwwggkoAgEAAoICAQC5EqmuGM9nRQ5n
-END PRIVATE KEY-


You may have compromised your private key by posting it like this. I 
would start everything over again from scratch, starting with generating 
a new private key and CSR.


I use the CSR to submit a request to my company’s certificate server and 
I am able to download 2 files in DER format


The downloaded certificate has a name certnew.cer, the downloaded chain 
certificate has a name cernew.p7b and both appear to be binary because 
when I open them in notepad++ they are unreadable


.p12 and .p7 files are always binary. Are you able to get the files as 
PEM? That is, IMHO, the most convenient package format.


Not sure how I go about importing converting and importing these into my 
keystore using keytool.


The documenation is confusing to me as to what needs to be done.

https://tomcat.apache.org/tomcat-9.0-doc/ssl-howto.html 
the section on 
importing the certificate does nto go into how to convert or merge the 
certificate or the certificate chain and also does not say anyting about 
a private keyfile


Has anyone out there done this consistenly and successfully.


You should be able to use keytool -importcert as described here:

https://stackoverflow.com/questions/15814569/import-pkcs7-chained-certificate-using-keytool-command-to-jks

When you do all of this start-to-finish, basically you do the following:

1. $ keytool -genkeypair -alias 'mykey' (creates key + self-signed cert 
in keystore, plus CSR)


2. Send CSR to CA for signing, get signed cert in return

3. $ keytool -importcert -alias 'mykey'

This will UPDATE THE CERT in your keystore with the one signed by the 
CA. Now, you are ready to use the signed certificate with Tomcat.


But definitely start over with a new private key. The one you posted 
shouldn't be trusted anymore.


Hope that helps,
-chris

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Database Connection Requests Initiated but Not Sent on the Wire (Some, Not All)

Eric,

On 5/31/24 13:44, Eric Robinson wrote:

-Original Message-
From: Christopher Schultz 
Sent: Friday, May 31, 2024 12:38 PM
To: users@tomcat.apache.org
Subject: Re: Database Connection Requests Initiated but Not Sent on the Wire
(Some, Not All)

Mark,

On 5/31/24 12:44, Mark Thomas wrote:

On 31/05/2024 16:09, Eric Robinson wrote:

The results are looking great so far.

Excellent.

Here's what we know:

Before the patch, we had 2 load-balanced tomcats in production for
this customer. Due to the driver search bottleneck, we were seeing
hundreds of stuck threads during the slowdown periods. To work around
this problem, we threw more tomcats at it. With 6 tomcats, the load
was spread around enough to keep the bottleneck condition from
manifesting badly, and users did not complain as much. We were still
seeing dozens of stuck threads, but not hundreds.

After the patch, we went back to 2 tomcats.

I appreciate the show of faith! I think that is braver than I would
have been but it does rather confirm both the problem and the fix.

During the same timeframe today, there have been 1 stuck thread on
Tomcat A and 6 on Tomcat B.

That is great news.

If the numbers hold, this works out to roughly a 10,000% improvement.

Not bad for free support ;)

Seriously, I am glad that we seem to have tracked down the root cause
and that you have a temporary fix that works until such time (probably
the July releases) that we can figure out how we want to address
caching of "not found" classes.

Yeah... this doesn't seem like a great default policy for a few reasons:

1. Maybe the classes will appear in the future? JSPs? Plugins that 
speculatively-
load, then fail, then download/update, then try again? I'm grasping at straws a
little, here.

2. Huge numbers of cache misses will cause huge numbers of cached "not
found" entries. Potential DOS? I guess that would be an application bug if it's
allowing huge numbers of random class-loading requests. Again, grasping at
straws.

Would it, though? I don't know what a negative cache entry would look like, but 
it seems to me that it would not have to create duplicates.

I was thinking of cache entries for large numbers of different classes, 
all of which were "not found". Not one class being requested over and 
over again. It's just lots of String keys in a hash map or whatever. Not 
horrific, but can get out of control of Something Goes Wrong.

-chris

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Database Connection Requests Initiated but Not Sent on the Wire (Some, Not All)


Mark,

On 5/31/24 12:44, Mark Thomas wrote:

On 31/05/2024 16:09, Eric Robinson wrote:

The results are looking great so far.


Excellent.


Here's what we know:

Before the patch, we had 2 load-balanced tomcats in production for 
this customer. Due to the driver search bottleneck, we were seeing 
hundreds of stuck threads during the slowdown periods. To work around 
this problem, we threw more tomcats at it. With 6 tomcats, the load 
was spread around enough to keep the bottleneck condition from 
manifesting badly, and users did not complain as much. We were still 
seeing dozens of stuck threads, but not hundreds.


After the patch, we went back to 2 tomcats.


I appreciate the show of faith! I think that is braver than I would have 
been but it does rather confirm both the problem and the fix.


During the same timeframe today, there have been 1 stuck thread on 
Tomcat A and 6 on Tomcat B.


That is great news.


If the numbers hold, this works out to roughly a 10,000% improvement.


Not bad for free support ;)

Seriously, I am glad that we seem to have tracked down the root cause 
and that you have a temporary fix that works until such time (probably 
the July releases) that we can figure out how we want to address caching 
of "not found" classes.


Yeah... this doesn't seem like a great default policy for a few reasons:

1. Maybe the classes will appear in the future? JSPs? Plugins that 
speculatively-load, then fail, then download/update, then try again? I'm 
grasping at straws a little, here.


2. Huge numbers of cache misses will cause huge numbers of cached "not 
found" entries. Potential DOS? I guess that would be an application bug 
if it's allowing huge numbers of random class-loading requests. Again, 
grasping at straws.


But my spidey-sense it tingling at this one.

Maybe (a) default-off option and (b) limit the total number of cached 
"not found" items to something "smallish" like 100? 1000? 1? Just 
enough to not fill the heap if something goes terribly wrong.


-chris

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Database Connection Requests Initiated but Not Sent on the Wire (Some, Not All)


Eric,

On 5/31/24 11:09, Eric Robinson wrote:

The results are looking great so far.

Here's what we know:

Before the patch, we had 2 load-balanced tomcats in production for this 
customer. Due to the driver search bottleneck, we were seeing hundreds of stuck 
threads during the slowdown periods. To work around this problem, we threw more 
tomcats at it. With 6 tomcats, the load was spread around enough to keep the 
bottleneck condition from manifesting badly, and users did not complain as 
much. We were still seeing dozens of stuck threads, but not hundreds.

After the patch, we went back to 2 tomcats. During the same timeframe today, 
there have been 1 stuck thread on Tomcat A and 6 on Tomcat B.

If the numbers hold, this works out to roughly a 10,000% improvement.


This deserves a bonus, much of which you should share with markt. ;)

-chris


-Original Message-
From: Eric Robinson 
Sent: Friday, May 31, 2024 5:54 AM
To: Tomcat Users List 
Subject: RE: Database Connection Requests Initiated but Not Sent on the Wire
(Some, Not All)

Mark,


-Original Message-
From: Mark Thomas 
Sent: Thursday, May 30, 2024 9:30 AM
To: users@tomcat.apache.org
Subject: Re: Database Connection Requests Initiated but Not Sent on
the Wire (Some, Not All)

OK.

This is an interim binary patch for 9.0.80 only.

The purpose is to:
- confirm the proposed change fixes the problem
- provide you with a workaround in the short term

This is the binary patch:

https://people.apache.org/~markt/dev/classloader-not-found-cache-9.0.8
0-
v1.zip

Extract the contents into $CATALINA_HOME/lib

You should end up with:

$CATALINA_HOME/lib/org/apache/...

Usual caveats apply. This is not an official release. Use it at your
own risk. Don't blame either me or the ASF it is results in alien
invasion, a tax bill, the server catching fire or anything else unexpected

and/or unwanted.


Longer term, I'm not sure this is exactly how I want to fix it in
Tomcat. I am convinced of the need to cache classes that don't exist
but exactly where / how to do that and what degree of control the user should

have is very much TBD.


I suspect this will be a topic of discussion at Community Over Code at
Bratislava next week.

I am expecting that any fix won't be in the June release round but
should be in the July release round.

Let us know how you get on and good luck.



The changes have been applied. We'll know at around 9:30 am EST if they have
had the desired effect. Fingers crossed!



Mark


On 30/05/2024 10:16, Mark Thomas wrote:

On 29/05/2024 17:03, Eric Robinson wrote:




One of the webapps is related to voice reminder messages that go
out to people. The reminders go out sometime after 9 am, which
tracks with the slowdowns.


Ack.

Something to try while I work on a patch is setting
archiveIndexStrategy="bloom" on the resources.

You'd configure that in META-INF/context.xml something like this:


 

Mark


- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


Disclaimer : This email and any files transmitted with it are confidential and
intended solely for intended recipients. If you are not the named addressee you
should not disseminate, distribute, copy or alter this email. Any views or
opinions presented in this email are solely those of the author and might not
represent those of Physician Select Management. Warning: Although Physician
Select Management has taken reasonable precautions to ensure no viruses are
present in this email, the company cannot accept responsibility for any loss or
damage arising from the use of this email or attachments.
B

CB  [  X  ܚX KK[XZ[

  \ \  ][  X  ܚX P X ]
  \X K ܙ B  ܈Y][ۘ[  [X[  K[XZ[

  \ \  Z[ X ]
  \X K ܙ B

Disclaimer : This email and any files transmitted with it are confidential and 
intended solely for intended recipients. If you are not the named addressee you 
should not disseminate, distribute, copy or alter this email. Any views or 
opinions presented in this email are solely those of the author and might not 
represent those of Physician Select Management. Warning: Although Physician 
Select Management has taken reasonable precautions to ensure no viruses are 
present in this email, the company cannot accept responsibility for any loss or 
damage arising from the use of this email or attachments.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: (tomcat-native) branch 1.1.x updated: Use ERR_error_string_n instead of ERR_error_string.

d declaration of 'struct bio_st'

typedef struct bio_st BIO;
   ^
src/ssl.c:867:37: error: incomplete definition of type 'struct bio_st'
BIO_JAVA *j = (BIO_JAVA *)bi->ptr;
  ~~^
/usr/local/Cellar/openssl@1.1/1.1.1w//include/openssl/ossl_typ.h:79:16: 
note: forward declaration of 'struct bio_st'

typedef struct bio_st BIO;
   ^
src/ssl.c:881:7: error: incomplete definition of type 'struct bio_st'
bi->shutdown = 1;
~~^
/usr/local/Cellar/openssl@1.1/1.1.1w//include/openssl/ossl_typ.h:79:16: 
note: forward declaration of 'struct bio_st'

typedef struct bio_st BIO;
   ^
src/ssl.c:882:7: error: incomplete definition of type 'struct bio_st'
bi->init = 0;
~~^
/usr/local/Cellar/openssl@1.1/1.1.1w//include/openssl/ossl_typ.h:79:16: 
note: forward declaration of 'struct bio_st'

typedef struct bio_st BIO;
   ^
src/ssl.c:883:7: error: incomplete definition of type 'struct bio_st'
bi->num  = -1;
~~^
/usr/local/Cellar/openssl@1.1/1.1.1w//include/openssl/ossl_typ.h:79:16: 
note: forward declaration of 'struct bio_st'

typedef struct bio_st BIO;
   ^
src/ssl.c:884:7: error: incomplete definition of type 'struct bio_st'
bi->ptr  = (char *)j;
~~^
/usr/local/Cellar/openssl@1.1/1.1.1w//include/openssl/ossl_typ.h:79:16: 
note: forward declaration of 'struct bio_st'

typedef struct bio_st BIO;
   ^
src/ssl.c:893:11: error: incomplete definition of type 'struct bio_st'
if (bi->ptr != NULL) {
~~^
/usr/local/Cellar/openssl@1.1/1.1.1w//include/openssl/ossl_typ.h:79:16: 
note: forward declaration of 'struct bio_st'

typedef struct bio_st BIO;
   ^
src/ssl.c:894:37: error: incomplete definition of type 'struct bio_st'
BIO_JAVA *j = (BIO_JAVA *)bi->ptr;
  ~~^
/usr/local/Cellar/openssl@1.1/1.1.1w//include/openssl/ossl_typ.h:79:16: 
note: forward declaration of 'struct bio_st'

typedef struct bio_st BIO;
   ^
src/ssl.c:895:15: error: incomplete definition of type 'struct bio_st'
if (bi->init) {
~~^
/usr/local/Cellar/openssl@1.1/1.1.1w//include/openssl/ossl_typ.h:79:16: 
note: forward declaration of 'struct bio_st'

typedef struct bio_st BIO;
   ^
fatal error: too many errors emitted, stopping now [-ferror-limit=]
1 warning and 20 errors generated.
make[1]: *** [src/ssl.lo] Error 1
make: *** [all-recursive] Error 1

I get roughly the same behavior when compiling against OpenSSL 3.0 as 
well. The first error in ssl.c doesn't look like an error to me:


src/ssl.c:201:7: error: incomplete definition of type 'struct dh_st'
dh->p = prime(NULL);
~~^

The full code in that area is:

static DH *make_dh_params(BIGNUM *(*prime)(BIGNUM *), const char *gen)
{
DH *dh = DH_new();

if (!dh) {
return NULL;
}
dh->p = prime(NULL); // Line 201
BN_dec2bn(>g, gen);
if (!dh->p || !dh->g) {
DH_free(dh);
return NULL;
}
return dh;
}

Is this just a bad setup on my end?

Building the main branch in this environment (but with OpenSSL 3.0) 
works with some warnings but no errors.


Can anyone confirm they can build 1.1.x HEAD?

Thanks,
-chris

On 5/31/24 13:11, schu...@apache.org wrote:

This is an automated email from the ASF dual-hosted git repository.

schultz pushed a commit to branch 1.1.x
in repository https://gitbox.apache.org/repos/asf/tomcat-native.git


The following commit(s) were added to refs/heads/1.1.x by this push:
  new 0ab6bdd39 Use ERR_error_string_n instead of ERR_error_string.
0ab6bdd39 is described below

commit 0ab6bdd3973c702a46a9564266d1f4848bd05b01
Author: Christopher Schultz 
AuthorDate: Fri May 31 13:10:27 2024 -0400

 Use ERR_error_string_n instead of ERR_error_string.
 
 Use header-defined constant for error message buffer sizes.

---
  native/include/ssl_private.h |  5 +
  native/src/ssl.c |  8 
  native/src/sslcontext.c  | 32 
  native/src/sslnetwork.c  |  4 ++--
  4 files changed, 27 insertions(+), 22 deletions(-)

diff --git a/native/include/ssl_private.h b/native/include/ssl_private.h
index 68fc8a877..ede9ae94f 100644
--- a/native/include/ssl_private.h
+++ b/native/include/ssl_private.h
@@ -63,6 +63,11 @@
  #define SSL_AIDX_ECC (3)
  #define SSL_AIDX_MAX (4)
  
+/*

+ * The length of error message strings. MUST BE AT LEAST 256.
+ */
+#define TCN_OPENSSL_ERROR_STRING_LENGTH 256
+
  /*
   * Define the SSL options
   */
diff --git a/native/src/ssl.c b/native/src/ssl.c
index d6fdaee55..782de1139 100644
--- a/native/src/ssl.c
+++ b/native/src/ssl.c
@@ -806,11 +806,11 @@ TCN_IMPLEMENT_CALL(jint, SSL, fipsModeSet)(TCN_STDARGS, 
jint mode)
  if(1 != (r = (jint)FIPS_mode_set((int)mode))) {
/* arrange to get a human-readable error message */
unsigned long err = ERR_get_error(

Re: (tomcat-native) branch 1.1.x updated: Use ERR_error_string_n instead of ERR_error_string.


All,

Uh, oh. This may have broken the build.

Investigating...

-chris


On 5/31/24 13:11, schu...@apache.org wrote:

This is an automated email from the ASF dual-hosted git repository.

schultz pushed a commit to branch 1.1.x
in repository https://gitbox.apache.org/repos/asf/tomcat-native.git


The following commit(s) were added to refs/heads/1.1.x by this push:
  new 0ab6bdd39 Use ERR_error_string_n instead of ERR_error_string.
0ab6bdd39 is described below

commit 0ab6bdd3973c702a46a9564266d1f4848bd05b01
Author: Christopher Schultz 
AuthorDate: Fri May 31 13:10:27 2024 -0400

 Use ERR_error_string_n instead of ERR_error_string.
 
 Use header-defined constant for error message buffer sizes.

---
  native/include/ssl_private.h |  5 +
  native/src/ssl.c |  8 
  native/src/sslcontext.c  | 32 
  native/src/sslnetwork.c  |  4 ++--
  4 files changed, 27 insertions(+), 22 deletions(-)

diff --git a/native/include/ssl_private.h b/native/include/ssl_private.h
index 68fc8a877..ede9ae94f 100644
--- a/native/include/ssl_private.h
+++ b/native/include/ssl_private.h
@@ -63,6 +63,11 @@
  #define SSL_AIDX_ECC (3)
  #define SSL_AIDX_MAX (4)
  
+/*

+ * The length of error message strings. MUST BE AT LEAST 256.
+ */
+#define TCN_OPENSSL_ERROR_STRING_LENGTH 256
+
  /*
   * Define the SSL options
   */
diff --git a/native/src/ssl.c b/native/src/ssl.c
index d6fdaee55..782de1139 100644
--- a/native/src/ssl.c
+++ b/native/src/ssl.c
@@ -806,11 +806,11 @@ TCN_IMPLEMENT_CALL(jint, SSL, fipsModeSet)(TCN_STDARGS, 
jint mode)
  if(1 != (r = (jint)FIPS_mode_set((int)mode))) {
/* arrange to get a human-readable error message */
unsigned long err = ERR_get_error();
-  char msg[256];
+  char msg[TCN_OPENSSL_ERROR_STRING_LENGTH];
  
/* ERR_load_crypto_strings() already called in initialize() */
  
-  ERR_error_string_n(err, msg, 256);

+  ERR_error_string_n(err, msg, TCN_OPENSSL_ERROR_STRING_LENGTH);
  
tcn_ThrowException(e, msg);

  }
@@ -1105,9 +1105,9 @@ TCN_IMPLEMENT_CALL(jboolean, SSL, 
loadDSATempKey)(TCN_STDARGS, jint idx,
  
  TCN_IMPLEMENT_CALL(jstring, SSL, getLastError)(TCN_STDARGS)

  {
-char buf[256];
+char buf[TCN_OPENSSL_ERROR_STRING_LENGTH];
  UNREFERENCED(o);
-ERR_error_string(ERR_get_error(), buf);
+ERR_error_string_n(ERR_get_error(), buf, TCN_OPENSSL_ERROR_STRING_LENGTH);
  return tcn_new_string(e, buf);
  }
  
diff --git a/native/src/sslcontext.c b/native/src/sslcontext.c

index c632fc7cf..e2d341c30 100644
--- a/native/src/sslcontext.c
+++ b/native/src/sslcontext.c
@@ -136,8 +136,8 @@ TCN_IMPLEMENT_CALL(jlong, SSLContext, make)(TCN_STDARGS, 
jlong pool,
  }
  
  if (!ctx) {

-char err[256];
-ERR_error_string(ERR_get_error(), err);
+char err[TCN_OPENSSL_ERROR_STRING_LENGTH];
+ERR_error_string_n(ERR_get_error(), err, 
TCN_OPENSSL_ERROR_STRING_LENGTH);
  tcn_Throw(e, "Invalid Server SSL Protocol (%s)", err);
  goto init_failed;
  }
@@ -327,8 +327,8 @@ TCN_IMPLEMENT_CALL(jboolean, SSLContext, 
setCipherSuite)(TCN_STDARGS, jlong ctx,
  #else
  if (!SSL_CTX_set_cipher_list(c->ctx, J2S(ciphers))) {
  #endif
-char err[256];
-ERR_error_string(ERR_get_error(), err);
+char err[TCN_OPENSSL_ERROR_STRING_LENGTH];
+ERR_error_string_n(ERR_get_error(), err, 
TCN_OPENSSL_ERROR_STRING_LENGTH);
  tcn_Throw(e, "Unable to configure permitted SSL ciphers (%s)", err);
  rv = JNI_FALSE;
  }
@@ -348,7 +348,7 @@ TCN_IMPLEMENT_CALL(jboolean, SSLContext, 
setCARevocation)(TCN_STDARGS, jlong ctx
  TCN_ALLOC_CSTRING(path);
  jboolean rv = JNI_FALSE;
  X509_LOOKUP *lookup;
-char err[256];
+char err[TCN_OPENSSL_ERROR_STRING_LENGTH];
  
  UNREFERENCED(o);

  TCN_ASSERT(ctx != 0);
@@ -362,7 +362,7 @@ TCN_IMPLEMENT_CALL(jboolean, SSLContext, 
setCARevocation)(TCN_STDARGS, jlong ctx
  if (J2S(file)) {
  lookup = X509_STORE_add_lookup(c->crl, X509_LOOKUP_file());
  if (lookup == NULL) {
-ERR_error_string(ERR_get_error(), err);
+ERR_error_string_n(ERR_get_error(), err, 
TCN_OPENSSL_ERROR_STRING_LENGTH);
  X509_STORE_free(c->crl);
  c->crl = NULL;
  tcn_Throw(e, "Lookup failed for file %s (%s)", J2S(file), err);
@@ -373,7 +373,7 @@ TCN_IMPLEMENT_CALL(jboolean, SSLContext, 
setCARevocation)(TCN_STDARGS, jlong ctx
  if (J2S(path)) {
  lookup = X509_STORE_add_lookup(c->crl, X509_LOOKUP_hash_dir());
  if (lookup == NULL) {
-ERR_error_string(ERR_get_error(), err);
+ERR_error_string_n(ERR_get_error(), err, 
TCN_OPENSSL_ERROR_STRING_LENGTH);
  X509_STORE_free(c->crl);
  c->crl = NULL;
  tcn_Throw(e, "Lookup failed for path %s (%s)", J2S

Stus-List Re: C 40 custom pilothouse

2024-05-31 Thread John Christopher via CnC-List

The specs state the LWL is 29.83 feet at and the 40-2 is 31.50. The landfall 38 has a LWL of 30.17.The description says; They started with the hull from a C 40, arguably one of their best performing hulls, and modified it to have a more traditional cruising stern. They took the bow and cockpit sections from the Landfall 38 series and put a pilothouse, fashioned after the Landfall 48, over the salon. The result was a unique, stiff and fast cruiser with an amazing amount of living space for a very demanding cruising couple/JohnOn May 31, 2024, at 8:47 AM, Richard Bush via CnC-List wrote:This looks more like a Landfall 39 than an altered 40; check out the spec and photos on the photo album...RichardRichard N. Bush Law Offices2950 Breckenridge Lane, Suite NineLouisville, Kentucky 40220(502) 584-7255

On Thursday, May 30, 2024 at 03:57:49 PM EDT, Della Barba, Joe via CnC-List wrote:

I think I posted about this before:
1983 C 40 Custom Pilothouse Cruiser for sale - YachtWorld
www.yachtworld.com/yacht/1983-c$c-40-custom-pilothouse-9302868/
This has to be one of the most unusual C ever. I am 50/50 on if it is great or a hot mess.
Has anyone ever seen this boat?
Two things come to mind that might be negatives, can you see over the pilothouse or do you look through it?
Second, thinking about being healed way over in 20 foot seas and coming down the companionway ladder on a port tack, that could be challenge and then some. Maybe that isn’t a thing on Lake Ontario?
OTOH don’t rig it and you have on hell of a Great Loop boat!

Joe Della Barba Coquina C 35 MK I

Please show your appreciation for this list and the Photo Album site and help me pay the associated bills. Make a contribution at:https://www.paypal.me/stumurrayThanks for your help.Stu

Please show your appreciation for this list and the Photo Album site and help me pay the associated bills. Make a contribution at:https://www.paypal.me/stumurrayThanks for your help.StuPlease show your appreciation for this list and the Photo Album site and help
me pay the associated bills. Make a contribution at:
https://www.paypal.me/stumurray
Thanks for your help.
Stu

[Flying-squirrel-members] Clarissa Uprooted and Yard sale

2024-05-30 Thread Christopher Snyder

Hey All,

We have two events coming up that I wanted everyone to be aware of.

This coming Sunday June 3rd we will have a showing of Clarissa Uprooted, it
features the history of the Corn Hill 3rd Ward area and how it was impacted
by urban renewal and gentrification.  We will start the showing at 3pm and
have a discussion afterwards.

The documentary is about 25 minutes long so the whole event should be done
before 5pm. This would be a great event to have all active squirrel members
to attend since it tied  with the history of the building.

Also we are hosting a yard sale in the parking lot 12-5 on the following
Sunday June 9th. There are still spaces available if anyone would like to
put out some items. If that interests you let me know and I can put you in
touch with Gabrielle.

Thank you

Christopher
___
Flying-squirrel-members mailing list
Flying-squirrel-members@lists.rocus.org
https://lists.mayfirst.org/mailman/listinfo/flying-squirrel-members

To unsubscribe, send an email to:
flying-squirrel-members-unsubscr...@lists.rocus.org
(The subject and body of the email don't matter)

Stus-List Re: C 40 custom pilothouse

2024-05-30 Thread John Christopher via CnC-List

I was docked next to this boat a few years back at Collin’s Bay Marina. It was a well maintained, beautiful boat inside and out. I am 5’10” and could see over the coach roof, the owner also had a step of sorts for smaller people (wife)./JohnOn May 30, 2024, at 3:57 PM, Della Barba, Joe via CnC-List  wrote:







I think I posted about this before:
1983 C 40 Custom Pilothouse Cruiser for sale - YachtWorld
www.yachtworld.com/yacht/1983-c$c-40-custom-pilothouse-9302868/
 
This has to be one of the most unusual C ever. I am 50/50 on if it is great or a hot mess.
Has anyone ever seen this boat?
Two things come to mind that might be negatives, can you see over the pilothouse or do you look through it?
Second, thinking about being healed way over in 20 foot seas and coming down the companionway ladder on a port tack, that could be challenge and then some. Maybe that isn’t a thing on Lake Ontario?
OTOH don’t rig it and you have on hell of a Great Loop boat!
 
 

Joe Della Barba Coquina C 35 MK I




Please show your appreciation for this list and the Photo Album site and help me pay the associated bills.  Make a contribution at:https://www.paypal.me/stumurrayThanks for your help.StuPlease show your appreciation for this list and the Photo Album site and help 
me pay the associated bills.  Make a contribution at:
https://www.paypal.me/stumurray
Thanks for your help.
Stu

[Flying-squirrel-members] Play rehearsal requests.

2024-05-30 Thread Christopher Snyder

Hey All,

We have a request for two rehearsals coming up. The play group is called
valid girls and we have worked with them before:

June 8th ,12pm-2:30pm
June 15th, 10am-12:30pm

Let me know if there are any questions or objections.

Thank you

Christopher
___
Flying-squirrel-members mailing list
Flying-squirrel-members@lists.rocus.org
https://lists.mayfirst.org/mailman/listinfo/flying-squirrel-members

To unsubscribe, send an email to:
flying-squirrel-members-unsubscr...@lists.rocus.org
(The subject and body of the email don't matter)

Re: Correcting national address databases?

2024-05-30 Thread Christopher Paul via NANOG


On 5/30/24 08:53, Mike Lewinski via NANOG wrote:

Another issue is that Amazon (and possibly other online retailers) are charging 
me and my neighbors excess sales tax based on the ZIP code associated with a 
town I do not live in. There's a way to complain and have it reversed for 
every single purchase.

I know this is out of our hands as network operators, but maybe some day one of 
you will be in a position to help.

I propose that there be a national LDAP service, with OUs for each 
zipcode (|ou=20500,dc=us,dc=gov)|. A household could register at 
USPS.gov and then be given write access to a household OU ("ou=1600 
Pennsylvania Ave NW,|ou=20500,dc=us,dc=gov|"). The household OU could 
then create inetOrgPersons under that, each of which would have 
self-write access.


--
Chris Paul | Rex Consulting |https://www.rexconsulting.net

Re: context.xml file location


Hello,

On 5/30/24 10:12, firstName lastName wrote:

Renaming my context.xml to ROOT.xml (without changing the folder) fixed the
problem. Thanks for the help!


The best practice would be to put your context.xml file into your WAR 
file's META-INF/context.xml path. That way, it will be deployed from the 
WAR file and you don't have to keep a separate file around.


If you need to override the contents of the WAR-packaged file, then you 
will need to use conf/[Engine]/[Host]/[App].xml


https://tomcat.apache.org/tomcat-10.1-doc/config/context.html#Defining_a_context

-chris


On Thu, May 30, 2024 at 8:42 AM David Rush  wrote:


I don't know about any docker-related differences, but

I think that if you put a context config file under Catalina/localhost you
need to name the .xml file the same as your .war file.  So if you have
foo.war, then you'd have Catalina/localhost/foo.xml

You can also put a file named context.xml into the .war file itself, under
META-INF directory.

David

On Thu, May 30, 2024 at 7:35 AM firstName lastName <
nouser...@gmail.com>
wrote:


I am trying to setup JNDI for tomcat with a java webapp. I am using the
official tomcat docker image (version 10.1.24-jdk21-temurin-jammy).
However, I'm a bit confused about where to put the context.xml file. I
tried putting it in /usr/local/tomcat/conf/Catalina/localhost/context.xml
but tomcat refuses to start with the error "The main resource set

specified

[/usr/local/tomcat/webapps/context] is not a directory or war file, or is
not readable'. I put my war file in /usr/local/tomcat/webapps/ROOT.war

Are these paths correct or should I have put the context.xml or war file

in

a different directory? My hosting provider does not want me to edit the
server.xml file (I have found google articles suggesting defining the

JNDI

 tag in the server.xml and then using a  in the
context.xml, but my hosting provider wants me to define the 

tag

in the context.xml file instead of the server.xml file).

Thanks for your help!



--

E-Mail to and from me, in connection with the transaction
of public
business, is subject to the Wyoming Public Records
Act and may be
disclosed to third parties.





-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

[cctalk] Re: Video/keyboard mono cable for Sun 386i

2024-05-30 Thread Christopher Zach via cctalk

Am at a conference just do a search on 386i and I should pop up

On May 30, 2024 9:06:48 AM EDT, Stefano Sanna via cctalk 
 wrote:
>Hi.
>
>I thought about using the serial connection (which should be enabled only if 
>the video card is removed).
>
>Thank you for the advice about the battery: usual issue with SGI, Sony 
>News :-)
>
>Unfortunately, the hard disk was been removed before I collected the 
>workstation.
>
>Could you please share the link to your post on the VCF Forum?
>
>Thank you.
>-s
>
>On 30/05/24 11:53, cz via cctalk wrote:
>> I have one around here somewhere. Sun built two cables, one was for the 
>> color boards (CGThree and CGFive) and the other was for monochrome systems 
>> (the D15).
>> 
>> In the meantime you can hook a computer to the RS232 port and start running 
>> the thing headless to see what's there. Note, you're going to have to 
>> replace the timekeeper chip (or hack a new battery into it, there's docs on 
>> how I did that 30 years ago). I recommend wiring in a dual AAA adapter, that 
>> way you can replace the batteries every 15 or so years.
>> 
>> Last time I fired up my three 386i's, two of the power supplies had blown up 
>> and one of the boards would not pass diagnostics. Of the supplies, one was 
>> hopeless so I hacked in a standard PC-AT supply board and got everything 
>> running (you don't NEED the -15 volts, but heck some ISA board you plug in 
>> will want it :-) and I figured out how to fix the other one by wiring in a 
>> new 12 volt kick starter supply to get the main supply up and running.
>> 
>> I wrote up all of this on the vcf forum. Worth a read.
>> 
>> If it's got a hard disk and it spins I'd recommend hooking it up to a SCSI 
>> adapter and doing a dd image of it first. Then you can figure out the 
>> partitions by whacking away at the image (I did this), then mount the 
>> volumes on another system, grab /etc/passwd, and crack the passwords in 
>> about 4 hours with john or a related tool.
>> 
>> Once up, put it on the public internet and confuse the hell out of hackers.
>> 
>> Have fun!
>> CZ
>> 
>> 
>> On 5/30/2024 4:59 AM, Stefano Sanna via cctalk wrote:
>>> Hi.
>>> 
>>> I recently bought a Sun Microsystems 386i and I discovered (too late...) 
>>> that monitor and keyboard are connected to the same D15 connector on the 
>>> back using a "Y" cable (I had experience with other Sun workstations, this 
>>> was first contact with Intel-based hardware).
>>> 
>>> Unfortunately, I have not such a cable neither I was able to find any info 
>>> on the web about the pinout/wiring; probably it would be possible to create 
>>> the cable from scratch (assuming that no other circuitry was inside the 
>>> original Y cable). Moreover, I discovered that there is more than one 
>>> option for video boards (mono and color): therefore, there is more than a 
>>> single Y cable to connect monitor and keyboard.
>>> 
>>> Looking at the official Sun's hardware list, I found this item:
>>> 
>>> 630-1621 386i video/keyboard cable
>>> 
>>> but it does not specify whether it is the mono or the color cable. In any 
>>> case, it seems impossible to buy it on eBay or similar.
>>> 
>>> Does anybody have some information on how to rebuild it?
>>> 
>>> Thank you.
>>> -s

Re: Write listener question


Joan,

Please don't hijack threads. Start a new message to the list without 
replying to an existing one.


-chris

On 5/30/24 06:03, joan.balagu...@ventusproxy.com wrote:

Sorry, this issue happens with both Tomcat 8.5.x and 10.1.x.

-Original Message-
From: joan.balagu...@ventusproxy.com 
Sent: Thursday, May 30, 2024 11:57 AM
To: 'Tomcat Users List' 
Subject: Write listener question

Hello,

I have a NIO connector with an asynchronous servlet with its write listener.

@Override
  public void onWritePossible() throws IOException {

   if (this.isFirst) {
 this.os = this.asyncContext.getResponse().getOutputStream();
 this.startIdx = 0;
 this.endIdx = WRITE_BUFFER_SIZE;
   }
  
  while (this.startIdx < this.endIdx && this.os.isReady()) {

  this.os.write(this.response, this.startIdx, this.endIdx - this.startIdx);

  this.startIdx = this.endIdx;
  this.endIdx += WRITE_BUFFER_SIZE;
  if (this.endIdx > this.response.length) this.endIdx = 
this.response.length;
   }

   if (this.startIdx == this.endIdx) {
 this.ac.complete();
   }
}

Only when the response to return is bigger than 32K then:
1. Writing the response in chunks of WRITE_BUFFER_SIZE  = 32K, sometimes our 
client receives the response in wrong order (complete, all bytes written, but 
in different order).
2. Setting a WRITE_BUFFER_SIZE  = 8K seems to fix this issue.

But it's weird, this is only happening in this client, we have other 
installations returning responses of megabytes with no issues.

So just a couple of questions:

1. Do you think the implementation of the onWritePossible method above is 
correct?
2. Is it worth to provide a buffered implementation of the ServletOuputStream 
to write the response?


Thanks,

Joan.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org




-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: PersistentManager and ClassNotFoundException


Jakub,

On 5/30/24 05:25, Jakub Królikowski wrote:

Where is your  configuration located? It *should* be inside
your  located in META-INF/context.xml in your web application.
If it's in there, then everything it does should be in the context (and
ClassLoader) of your web application -- where your classes should be
locatable.

If you have it anywhere else, it probably won't work the way you expect
it to work.


Yes, you are right! Thank you for this hint!
I have configured  in /conf/server.xml.
And indeed - interestingly, StandardManager, works correctly even there!
PersistentManager, however, does not.
After moving the configuration to /META-INF/context.xml, both
managers work fine.
It may be worth mentioning this in the documentation:
https://tomcat.apache.org/tomcat-10.1-doc/config/manager.html#Persistence_Across_Restarts


Would you like to provide a documentation patch/PR that works for you?

-chris

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Database Connection Requests Initiated but Not Sent on the Wire (Some, Not All)