Re: [Resin-interest] Disabling HTTP Methods

2011-07-21 Thread Aaron Freeman
I could use some help on this, even if it's just a hint or some ideas what else to try. Thanks, Aaron I'd like to disabled the HTTP CONNECT method. I don't know the best way to do that, but I tried this and it's not working: resin:Forbidden regexp='.*' resin:IfMethod value=CONNECT/

Re: [Resin-interest] Disabling HTTP Methods

2011-07-21 Thread Aaron Freeman
On 7/21/2011 12:27 PM, Scott Ferguson wrote: On 07/20/2011 10:39 AM, Aaron Freeman wrote: I'd like to disabled the HTTP CONNECT method. I don't know the best way to do that, but I tried this and it's not working: resin:Forbidden regexp='.*' resin:IfMethod value=CONNECT/ /resin:Forbidden

Re: [Resin-interest] Disabling HTTP Methods

2011-07-21 Thread Aaron Freeman
On 7/21/2011 4:12 PM, Scott Ferguson wrote: On 07/21/2011 02:01 PM, Aaron Freeman wrote: On 7/21/2011 12:27 PM, Scott Ferguson wrote: On 07/20/2011 10:39 AM, Aaron Freeman wrote: I'd like to disabled the HTTP CONNECT method. I don't know the best way to do that, but I tried this and it's

[Resin-interest] Resin 4.0 equivalent for notfound

2011-08-09 Thread Aaron Freeman
I know this is obvious and I am just overlooking it, but what would be the Resin 4.0 equivalent to the Resin 3.0 rewrite-dispatch not-found regexp=^.*/\.svn/.*$//not-found /rewrite-dispatch syntax? I don't see a resin:NotFound option. I don't want to resin:Deny because I don't even want

Re: [Resin-interest] Resin 4.0 equivalent for notfound

2011-08-09 Thread Aaron Freeman
On 8/9/2011 11:09 AM, Scott Ferguson wrote: resin:SendError code=404/ Oh cool, I'll give that a go. I should have updated to teh Resin 4.0 equivalents long ago! An interesting point ... if you still have rewrite-dispatch.../rewrite-dispatch it can completely take precedence over the

Re: [Resin-interest] Something interesting for People using Resin with Oracle

2011-09-30 Thread Aaron Freeman
We are currently experiencing a problem when we restart where the ConnectionPools to Oracle take a long time to be established and cause a long delay for our production machine to start. It almost feels like the old ConnectionPools have to timeout, even though we have shut the entire Resin

Re: [Resin-interest] Something interesting for People using Resin with Oracle

2011-10-03 Thread Aaron Freeman
as a solution, or just to more clearly isolate the problem. Regards Alan On 30/09/2011 19:49, Aaron Freeman wrote: We are currently experiencing a problem when we restart where the ConnectionPools to Oracle take a long time to be established and cause a long delay for our

[Resin-interest] Resin 4.0 Questions

2011-10-17 Thread Aaron Freeman
We are on the latest and greatest Resin 4.0, and would like to have a single resin.xml file that: 1) imports host.xml, which defines: - a keystore to use and the passwords for the keystore 2) on different servers we would like to overwrite the host.xml so we can change:

[Resin-interest] Possible Bug Fix?

2011-10-17 Thread Aaron Freeman
In AbstractHttpRequest I am seeing that the global variable _contentLength it appropriately a long. Love that. Been a thorn in our side for a long time. However in looking at this method (also inside of AbstractHttpRequest): protected void setContentLength(CharSegment value) {

Re: [Resin-interest] Resin 4.0 Questions

2011-10-19 Thread Aaron Freeman
Is anybody using resin:import successfully that could advise on this? I am still struggling with it. Thanks, Aaron From: resin-interest-boun...@caucho.com [mailto:resin-interest-boun...@caucho.com] On Behalf Of Aaron Freeman Sent: Monday, October 17, 2011 3:53 PM To: General

Re: [Resin-interest] Resin 4.0 Questions

2011-10-19 Thread Aaron Freeman
4.0 Questions On 10/19/2011 08:19 AM, Aaron Freeman wrote: Is anybody using resin:import successfully that could advise on this? I am still struggling with it. You can use EL variables like resin:import path=host-${ext}.xml/ where you've defined -Dext=foo. Is that what you're looking

Re: [Resin-interest] Possible Bug Fix?

2011-10-20 Thread Aaron Freeman
Of Aaron Freeman Sent: Monday, October 17, 2011 5:09 PM To: General Discussion for the Resin application server Subject: [Resin-interest] Possible Bug Fix? In AbstractHttpRequest I am seeing that the global variable _contentLength it appropriately a long. Love that. Been a thorn in our side

Re: [Resin-interest] Possible Bug Fix?

2011-10-20 Thread Aaron Freeman
, Aaron Freeman wrote: If there is agreement that this is a bug, and the fix can be rolled into a snapshot, I can test further to find out where the next gotcha is with large valued contentLengths. Thanks. I've filed this as http://bugs.caucho.com/view.php?id=4819. There's a little bit of a bug

[Resin-interest] Obfuscating Password in resin.xml

2011-10-26 Thread Aaron Freeman
The following password xmlns ... technique works great for database definitions: database jndi-namejdbc/oracle/jndi-name driver typeoracle.jdbc.pool.OracleConnectionPoolDataSource/type urljdbc:oracle:thin:@${com.database.server}:${com.database.port}:${com.dat

[Resin-interest] Database Conflict

2011-11-21 Thread Aaron Freeman
With the latest resin-pro-4.0.23 plugin we are now getting an error when trying to start multiple instances of Resin within a single Eclipse environment: java.sql.SQLException: CREATE for path 'C:\opt\project\ext\resin-pro-4.0.23\resin-data\default\tmp\temp_file' failed, because the file

Re: [Resin-interest] 4.0.24 configuration notes

2011-11-21 Thread Aaron Freeman
-Original Message- If you look at the new default resin.xml, it has a resin:properties path=${__DIR__}/resin.properties and several uses of rvar like http port=${rvar('http')}/. The resin:properties is similar to the resin:import, but loads a properties file and saves the

Re: [Resin-interest] 4.0.24 configuration notes

2011-11-22 Thread Aaron Freeman
I hope so. Since it's new, this is a great time for feedback For the first time, Resin 4.0.24 doesn't work out of the box when added to Eclipse as a new server. I go through this process pain free for each new release, but now immediately see the message 'default' is an unknown server in

Re: [Resin-interest] Single Signon Questions

2011-12-09 Thread Aaron Freeman
[mailto:resin-interest-boun...@caucho.com] On Behalf Of Aaron Freeman Sent: Friday, December 09, 2011 12:19 AM To: General Discussion for the Resin application server Subject: [Resin-interest] Single Signon Questions Using Resin 4.0.23 we are trying to get single sign-on working per this link

[Resin-interest] Resin 4.0 Clustering and HTTP MULTIPART

2012-02-22 Thread Aaron Freeman
Does Resin 4.0 have any notion of handling a situation where a large HTTP MULTIPART POST request has come in (a large file transfer for example), and then when one of the nodes of the cluster that is handling that MULTIPART POST were to go offline, another node would take over with no interruption

Re: [Resin-interest] Resin 4.0 Clustering and HTTP MULTIPART

2012-02-22 Thread Aaron Freeman
/22/2012 11:08 AM, Aaron Freeman wrote: Does Resin 4.0 have any notion of handling a situation where a large HTTP MULTIPART POST request has come in (a large file transfer for example), and then when one of the nodes of the cluster that is handling that MULTIPART POST were to go offline

[Resin-interest] Resin 4 stability

2012-07-19 Thread Aaron Freeman
I just want to query the user community for what seems to be the most stable version of resin 4.0 out there? We have been developing and using Rein 4.0.23 and are pretty satisfied. Has anybody been using a later version in production and development and find it to be nice and stable? Thanks,

Re: [Resin-interest] Resin 4 stability

2012-07-19 Thread Aaron Freeman
Sent: Thursday, July 19, 2012 12:39 PM To: resin-interest@caucho.com Subject: Re: [Resin-interest] Resin 4 stability - Original Message - Subject: [Resin-interest] Resin 4 stability Date: Thu, 19 Jul 2012 09:53:47 -0500 From: Aaron Freeman aaron.free...@layerz.com I just want

[Resin-interest] EclipseLink Upgrade Question

2012-08-24 Thread Aaron Freeman
We are using EclipseLink and cannot use the version that ships with resin-4.0.x due to a bug in that version. So we are having to install resin and then delete the jar file that's in the resin lib folder, which is less than desirable. We really don't want to have to modify the resin install at

Re: [Resin-interest] JSP encoding issues

2012-08-28 Thread Aaron Freeman
We had that issue when using jsp:include (jsp:include content wouldn't get UTF-8 encoded), but switching it out for c:import worked. Not sure if this applies in your case, but if the copyright is jsp:include'd you might try to c:import and see if you get different results. No matter what you did

[Resin-interest] BEAST SSL Attack

2012-12-03 Thread Aaron Freeman
For PCI compliance we are supposed to address the SSL BEAST attack by prioritizing SSL cipher suites. Any clue how to do that with JSSE? We are using JSSE because we run Resin uncompiled. Am I correct in thinking that in order to run OpenSSL we HAVE to compile Resin? Or is there a way to

Re: [Resin-interest] BEAST SSL Attack

2012-12-05 Thread Aaron Freeman
/JsseSSLFactory.java I suspect you could get it going again if you have the fortitude to play around with Resin's source code and build your own. Good luck, Knut Forkalsrud On Mon, Dec 3, 2012 at 7:53 AM, Aaron Freeman aaron.free...@layerz.com wrote: SSL BEAST

Re: [Resin-interest] BEAST SSL Attack

2013-01-02 Thread Aaron Freeman
Attack On 1/2/13 11:58 AM, Aaron Freeman wrote: We have now been scanned and been found to be non-compliant due to lack of the ability to order ciphers. Is there any timeframe we might expect even a snapshot to have this capability? I'll see if I can get a snapshot this week. -- Scott

Re: [Resin-interest] BEAST SSL Attack

2013-01-10 Thread Aaron Freeman
wrote: Hi Scott, We need this too. Can you try http://caucho.com/download/resin-pro-4_0-snap.tar.gz The configuration is honor-cipher-ordertrue/honor-cipher-order in openssl. -- Scott Thanks, Keith On 1/2/2013 1:36 PM, Scott Ferguson wrote: On 1/2/13 11:58 AM, Aaron Freeman wrote: We

Re: [Resin-interest] BEAST SSL Attack

2013-01-18 Thread Aaron Freeman
We're getting scanned today. Any hope on this? Thanks, Aaron From: resin-interest-boun...@caucho.com [mailto:resin-interest-boun...@caucho.com] On Behalf Of Aaron Freeman Sent: Monday, January 14, 2013 2:01 PM To: 'General Discussion for the Resin application server' Subject: Re

Re: [Resin-interest] BEAST SSL Attack

2013-01-18 Thread Aaron Freeman
Attack On Jan 18, 2013, at 10:18 AM, Aaron Freeman aaron.free...@layerz.com wrote: We're getting scanned today. Any hope on this? I just tested that Resin snapshot - the honor-cipher-order is not in that jar. I think there was a mistake in the SCM checkin or Scott may have built

Re: [Resin-interest] BEAST SSL Attack

2013-02-12 Thread Aaron Freeman
and then we will roll it out. Thanks a bunch! Aaron From: resin-interest-boun...@caucho.com [mailto:resin-interest-boun...@caucho.com] On Behalf Of Aaron Freeman Sent: Friday, January 18, 2013 10:09 AM To: 'General Discussion for the Resin application server' Subject: Re: [Resin-interest

[Resin-interest] Non-pro Question

2013-04-10 Thread Aaron Freeman
In resin-4.0.35 I am spinning on a typical BufferedInputStream read loop to read from a multipart stream. It works great, but for some reason a large percent of the connections hang at some point on the blocked read call. I thought that the default SocketTimeout setting in Resin would cause

[Resin-interest] Resin 4.0.37 via Eclipse Plugin

2013-09-30 Thread Aaron Freeman
Within Eclipse I did the following: 1) Went to New -- Dynamic Web Project 2) Selected Resin 4.0 as my Target runtime on the dialog that pops up 3) Left Default Configuration for Resin 4.0 selected under Configuration 4) Selected Generate web.xml deployment descriptor 5) On the Server tab, I

Re: [Resin-interest] Resin 4.0.37 via Eclipse Plugin

2013-09-30 Thread Aaron Freeman
: resin-interest-boun...@caucho.com [mailto:resin-interest- boun...@caucho.com] On Behalf Of Aaron Freeman Sent: Monday, September 30, 2013 3:28 PM To: 'General Discussion for the Resin application server' Subject: [Resin-interest] Resin 4.0.37 via Eclipse Plugin Within Eclipse I did

<    1   2