Re: Tomcat9 not listening to ipv4 port 8080, only ipv6

2023-11-28 Thread Shawn Heisey
On 11/28/23 05:24, Christoph Kukulies wrote: root@mail:/var/lib/tomcat9/logs# lsof -i :8080 COMMAND   PID   USER   FD   TYPE DEVICE SIZE/OFF NODE NAME java    58986 tomcat   37u  IPv6 571175      0t0  TCP *:http-alt (LISTEN) root@mail:/var/lib/tomcat9/logs# On my local desktop (running Ubuntu

Re: AW: HSTS on 401 / error pages

2023-09-14 Thread Shawn Heisey
On 9/14/23 08:03, Thomas Hoffmann (Speed4Trade GmbH) wrote: Sorry, I thought removing all content and subject is sufficient. Maybe the message-id header is used internally(?) TL;DR: technical details about message threading. Not about Tomcat. This is what happens when you reply to an

Re: AW: Solution to "Invalid keystore format" (cross-posted to Tomcat Users List at Apache, and Java 400 List at Midrange)

2023-09-13 Thread Shawn Heisey
On 9/12/23 01:06, Thomas Hoffmann (Speed4Trade GmbH) wrote: I moved away from using the proprietary java keystore format. I switched to using Base64 PEM format. This is usually also the format you get from the certificate issuer. No need to convert it into Java format any more and you can also

Re: Problem with the redirect after j_security_check

2023-07-22 Thread Shawn Heisey
On 7/22/23 12:03, Mark Thomas wrote: Your target URL is invalid. No user agent should be sending the fragment (#index) part of the URL. At best Tomcat will ignore it. Later versions may even reject it (I have a memory of that but don't have easy acces to the source code to check right now).

Re: AW: AW: Having trouble with Tomcat crashes. Interesting memory numbers in Manager

2023-02-11 Thread Shawn Heisey
On 2/11/23 08:17, Thad Humphries wrote: Finally I profiled our Java utility with VisualVM, all on my Mac Mini, and quickly found a leak from java.util.zip. This was a surprise because we were not using java.util.zip anywhere, nor could I find any reference to java.util.zip when I looked at the

Re: AW: AW: Having trouble with Tomcat crashes. Interesting memory numbers in Manager

2023-02-09 Thread Shawn Heisey
On 2/9/23 12:54, Christopher Schultz wrote: It would be unusual for the OS to reclaim any of that memory from the JVM process. Are you looking at OS heap usage, or "JVM heap" usage? From your description above, it's tough to tell. The tool is called WRKJVMJOB so presumably it knows what the

Re: Is it possible to add hsts header over http response ?

2023-01-12 Thread Shawn Heisey
On 1/12/23 01:34, Mark Thomas wrote: On 12/01/2023 08:26, Hiran CHAUDHURI wrote: In that case the Connector would need to be configured with secure="true" to work correctly/securely and the HttpHeaderSecurityFilter would add the HSTS header if configured to do so. My personal opinion is that

Re: Tomcat 10 on Windows 11 error

2022-12-30 Thread Shawn Heisey
On 12/30/22 17:03, Carles Franquesa wrote: Once downloaded, installed, and configured in the settings of the netbeans project, the error has changed, what always is very hopeful. Now, the thing is that the compiler gives this new output: image.png Tried to modify the compiler options in the

Re: Tomcat 10 on Windows 11 error

2022-12-30 Thread Shawn Heisey
On 12/30/22 09:07, Carles Franquesa wrote: I am trying to run a web app made with Netbeans 16 using Apache-Tomcat 10.0.27 on Windows 11. It worked fine on Windows 10 with the same tomcat. Everything goes fine when starting the server (it takes just 625ms!) but after that, when I try to debug

Re: Receiving HTTP (any version but 3 prefered) over UDP

2022-12-11 Thread Shawn Heisey
On 12/10/22 15:15, Aryeh Friedman wrote: Is there any browser support for direct UDP sockets in any browser besides Chrome? I know WebRTC and Websockets force TCP. I know Chrome does support UDP but can find no evidence one way for the other browsers. I'm sure you know that if Chrome is doing

Re: Receiving HTTP (any version but 3 prefered) over UDP

2022-12-10 Thread Shawn Heisey
On 12/9/2022 2:12 PM, Aryeh Friedman wrote: For example the following code works against port 7 (UDP echo service) but not against 8080 (my local tomcat): I suspect that you are running into the fact that HTTP/3 *always* uses TLS.  It's baked into the protocol and NOT optional as with earlier

Re: How to set Ciphers in Server.xml Tomcat 10.1.zz

2022-11-23 Thread Shawn Heisey
On 11/23/22 14:46, Chuck Caldarale wrote: On Nov 23, 2022, at 22:41, Shawn Heisey wrote: I am betting that Java is just refusing to use those ciphers because they are known to be weak. Hopefully an expert can tell me if I am giving incorrect information here. The reported error

Re: How to set Ciphers in Server.xml Tomcat 10.1.zz

2022-11-23 Thread Shawn Heisey
On 11/23/22 14:12, Edwin Mwangi wrote: I need help with the correct parameter for setting Ciphers in Apache Tomcat 10.1.2, in the previous version 9 i would use the parameter below ciphers="TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA" However when I set the same in Apache Tomcat

Re: [Tomcat9][Linux]listening all local addresses by default is not security best practice

2022-11-23 Thread Shawn Heisey
On 11/23/22 12:43, Robert Turner wrote: My 2 cents: I think that it would be a very strange change to make to a generic product and a "sample" configuration file. If Tomcat was packaged in a distribution, that might be a more reasonable suggestion. I don't think Tomcat is insecure because of

Re: Compatibility, 32 bit ..

2022-10-25 Thread Shawn Heisey
On 10/24/22 13:16, Mark Thomas wrote: On 24/10/2022 20:04, John Dale (DB2DOM) wrote: Mark and Chris - do you guys have a favorite flavor of Linux that has yielded good results? I use Ubuntu for my various test environments and the servers I run at home. Stuff I know well (Tomcat, Java, etc)

Re: SSLLabs scan shows TLSv1.0 and TLSv1.1 even though I have sslProtocol="TLSv1.2"

2022-08-09 Thread Shawn Heisey
On 8/9/22 16:13, James H. H. Lampert wrote: On customer box #1, I have: protocol="org.apache.coyote.http11.Http11Protocol" address=""    maxThreads="400" SSLEnabled="true" scheme="https" secure="true"    keystoreFile="/tomcat/wttomcat.ks" keyAlias=""

Re: Enable HTTP Strict Transport Security (HSTS) in Tomcat 9.0.x

2022-04-29 Thread Shawn Heisey
On 4/29/22 12:14, Kaushal Shriyan wrote: Thanks Peter for the link and it worked like a charm. I am running the tomcat version 9.0.56 on CentOS Linux release 7.9.2009 (Core). I have enabled the TLSv1.3 protocol as per the below block but when I ran the scan

Re: What is "h2c"? What is CVE-2021-25329? Re: Most recent security-related update to 8.5

2021-07-01 Thread Shawn Heisey
On 7/1/2021 6:10 PM, James H. H. Lampert wrote: On 7/1/21 4:55 PM, Shawn Heisey wrote: In that case, you don't need h2c, and probably don't want it. O. . . . k. That makes sense, so far, but how is it even enabled? Is there some way I could have h2c enabled, with the situation I described

Re: What is "h2c"? What is CVE-2021-25329? Re: Most recent security-related update to 8.5

2021-07-01 Thread Shawn Heisey
On 7/1/2021 3:24 PM, James H. H. Lampert wrote: On 6/21/21 9:42 AM, Christopher Schultz wrote: If you are using h2c, you'll definitely want to 8.5.63 or later, as there is a critical fix there. My understanding, based on what I looked up a week and a half ago, is that we're not using h2c,

Re: 500 instances of tomcat on the same server

2021-06-26 Thread Shawn Heisey
On 6/25/2021 8:58 PM, Eric Robinson wrote: We can run 75 to 125 instances of tomcat on a single Linux server with 12 cores and 128GB RAM. It works great. CPU is around 25%, our JVMs are not throwing OOMEs, iowait is minimal, and network traffic is about 30Mbps. We're happy with the results.

Re: Out of memory exception

2021-02-18 Thread Shawn Heisey
On 2/18/2021 12:11 PM, Niranjan Rao wrote: Thank you the response. This is not a web application, but a standalone java program. Hence I said it's not a tomcat question, but a generic JVM question. I have been researching about this a lot and based on many mails on this list, lot of people

Re: Out of memory exception

2021-02-18 Thread Shawn Heisey
On 2/18/2021 11:36 AM, Niranjan Rao wrote: First apologies for non tomcat question. I have seen that there is enough expertise here to provide hints and hints are what I am looking for to solve the problem and question is generic enough. I have tried researching problem to best of my

Re: error 0 issue

2019-06-26 Thread Shawn Heisey
On 6/26/2019 11:18 AM, Mark Thomas wrote: On 26/06/2019 18:10, Kumar R wrote: Hi Team, Is it possible to go for higher version of JDK(64 bit) and Tomcat(64bit) on 32 bit window 2003 architecture. No. A tiny bit more detail: 64-bit software requires a 64-bit operating system. A 64-bit

Re: Anyway to set more max ram to Tomcat 32bit?

2019-01-04 Thread Shawn Heisey
On 1/4/2019 10:44 AM, John Dale wrote: Interesting note: "likely includes memory that Java requires beyond the Java heap size itself" Can you expound on this? In the majority of cases, most of the memory that Java allocates from the system is its heap. But there are other memory structures

Re: Anyway to set more max ram to Tomcat 32bit?

2019-01-04 Thread Shawn Heisey
On 1/3/2019 6:40 PM, ark...@tutanota.com wrote: The strange part is I was able to set a max memory in the tomcat9w.exe configuration tool to about 1600 Megabytes and that was the hitting of the wall on that setup (the original physical one that I p2v'd to a VM), I can set less ram, but I

Re: [slightly OT] Re: Tomcat 9 does not work with Java 11

2018-11-27 Thread Shawn Heisey
On 11/27/2018 3:08 AM, Andi Meister wrote: What I did now: - removed Tomcat services by service.bat - uninstalled all Tomcats (7 and 9) - uninstalled all Java (was only Version 11) - server reboot - Installed Java 11 (File: jdk-11.0.1_windows-x64_bin.exe) That filename tells me you're

Re: tomcat redirects to http instead of https

2018-11-19 Thread Shawn Heisey
On 11/19/2018 6:16 AM, Dino Edwards wrote: I'm not using Named-Based Virtual Hosts Yes, you are. :) I didn't think I was. How do you figure? The first line in the config you shared was "". Thanks, Shawn - To unsubscribe,

Re: Tomcat embedded with Apache Solr

2018-10-19 Thread Shawn Heisey
On 10/18/2018 8:55 AM, Christopher Schultz wrote: Actually, my goal was to convince the Solr team that switching from Jetty to Tomcat was (a) possible and (b) possibly attractive. Over on lucene-dev, I had said that I removed jetty from solr's ivy config and found only two classes with errors

Re: Tomcat embedded with Apache Solr

2018-10-18 Thread Shawn Heisey
On 10/15/2018 2:15 AM, Jäkel, Guido wrote: I have no experience with embedded tomcat, but it should be also straight forward. Said that, I can't imagine the advantage of such an approach against the currently used, which just start the Web Application Server (Jetty, Tomcat or whatever) with

Re: WebSockets and JSPs

2018-10-15 Thread Shawn Heisey
On 10/15/2018 9:16 PM, Jerry Malcolm wrote: I have several webapps that do a significant amount of recursive loads of snippits of HTML utilizing XHR/http/ajax requests. These apps are all debugged and in production.   The server has no problem whatsoever in keeping up with the multiple

Re: tomcat manager gui hangs on web-app reload for one web-app not others

2018-09-20 Thread Shawn Heisey
On 9/20/2018 8:30 AM, Bill Harrelson wrote: Looking back through my sent folder I realize that I have been replying directly to people that posted directly to me instead of the list. I see from message headers that you're using Thunderbird. In Options/Advanced, open the config editor and

Re: End of Support for Tomcat versions

2018-08-06 Thread Shawn Heisey
On 8/6/2018 7:47 AM, gaurav.kuma...@wipro.com wrote: > Could you please let us know End of Support/Life for the below mentioned > Tomcat Version: > > Tomcat 7.0 > Tomcat 8.5 > Tomcat 9.0 > > We want to use it with RHEL 7.4 OS . Please let me know if you need any > further info to answer the

Re: problem in starting tomcat

2018-06-28 Thread Shawn Heisey
On 6/25/2018 9:20 PM, Prateek wrote: > My configuration: > OS:REDHAT 7.5 (64 bit) > Tomcat: 8.5.31 > Jdk- jdk-11(Early-Access) +1 to everything else you've been told on this thread. More stuff inline below. > When I am trying to start my server I got following error as: > A fatal error has been

Re: Alias name does not identify a key entry

2018-06-27 Thread Shawn Heisey
On 6/26/2018 11:42 AM, Mark Thomas wrote: > On 26/06/18 18:32, Cybulski, Adam M wrote: >> Can you aim me at a guide to this? The steps I've been following are just >> from whatever I've found online. Most of the articles seem pretty dated. > http://tomcat.apache.org/presentations.html > > Look

Re: Apache Tomcat 9.0.8 install check

2018-06-19 Thread Shawn Heisey
On 6/18/2018 6:15 AM, Shailendra Kumar Verma wrote: > I am trying to find out through registry checking whether or not Apache > Tomcat 9.0.8 is already installed or not. If the below registry is not there, > then my program installs Apache Tomcat 9.0.8 installer otherwise it moves on > to other

Re: Amazon EC2 Tomcat 7.0.85 not starting up due to some memory issue .Please mask if

2018-05-16 Thread Shawn Heisey
On 5/16/2018 11:13 AM, Kiran Badi wrote: > Yes tomcat is not starting up. I am also suspecting that EC2 instance was > > probably compromised. Not sure as how but I see some rogue programs were > running under tomcat user. I use putty with private keys to login and those > keys are not in public

Re: How to update new JDK version in apache-tomcat-7.0.84 windows service

2018-04-18 Thread Shawn Heisey
On 4/18/2018 10:18 AM, Somu Sundar Reddy.Y wrote: > Hi,  Recently I installed Tomcat windows service using > apache-tomcat-7.0.84.exe  installation file and during installation, I was > using JDK 1.8 Update 162 in my computer.  With this installation file , > windows service is automatically

Re: ClassNotFoundException: org.apache.tomcat.dbcp.dbcp2.BasicDataSourceFactory starting in 7.0.86

2018-04-17 Thread Shawn Heisey
On 4/17/2018 10:25 AM, Adam Rauch wrote: > According to the tomcat70 GitHub mirror, a recent change to > Constants.java switched DBCP_DATASOURCE_FACTORY to > "org.apache.tomcat.dbcp.dbcp2.BasicDataSourceFactory", which seems > suspicious. See >

Re: Getting all JDBC configs from the context

2018-03-30 Thread Shawn Heisey
On 3/30/2018 11:38 AM, Christopher Schultz wrote: > No. In Java, the "class" is defined by the ClassLoader (which loaded > it) plus the fully-qualified class name. It's entirely possible in The subtleties of classloader-related problems make my head hurt. :) > If objects a and b were

Re: Getting all JDBC configs from the context

2018-03-29 Thread Shawn Heisey
On 3/29/2018 10:00 AM, Christopher Schultz wrote: > I don't bother with any of that garbage. I use Tomcat's Manager > application and the JMXProxyServlet. It's an HTTP-to-JMX bridge, so > your client just has to speak HTTP. I'm not sure that the manager application is active on our install.  The

Re: Getting all JDBC configs from the context

2018-03-29 Thread Shawn Heisey
On 3/28/2018 1:18 PM, Christopher Schultz wrote: Don't forget to terminate the thread (or ExecutorService) when the application is shutting-down, of you'll have a ClassLoader (and a a huge memory) leak. Here's a new paste, that I think addresses the thread leak problem.

Re: Is the thread status of tomcat 8.0.44 normal?

2018-03-28 Thread Shawn Heisey
On 3/28/2018 6:28 PM, 이의준 wrote: Test sequence and inquiry contents 1. In the local test, the same load (hp-jmeter) for tomcat 7, 8 5 minutes, 2. Thread dump generated after 5 minutes of load termination 3. Most Thread in Tomcat 7 is in TIME_WAITING state (normally OK) 4. Thread in Tomcat 8

Re: Getting all JDBC configs from the context

2018-03-28 Thread Shawn Heisey
On 3/28/2018 1:18 PM, Christopher Schultz wrote: > > I would like to write a logging thread that can get ALL of the > > datasource objects from the context, and for types that it knows, > > cast them to the appropriate object to log the active/idle > > connection counts. > > It might be easier to

Getting all JDBC configs from the context

2018-03-27 Thread Shawn Heisey
This is what the code in our application looks like that gets a datasource object from the context:   Context initContext = new InitialContext();   Context envContext  = (Context)initContext.lookup("java:/comp/env");   DataSource ds = (DataSource)envContext.lookup("jdbc/REDACTED"); I would like

Re: Trying to chase down "too many connection" problems with DB

2018-03-27 Thread Shawn Heisey
On 3/27/2018 11:03 AM, Phil Steitz wrote: > Not exactly, if what you are using is the DBCP pool.  To see the The factory in use right now is "org.apache.tomcat.dbcp.dbcp.BasicDataSourceFactory".  Information gathered previously in this thread told me that this is DBCP code, repackaged into the

Re: Trying to chase down "too many connection" problems with DB

2018-03-26 Thread Shawn Heisey
On 3/26/2018 2:39 PM, André Warnier (tomcat) wrote: > Just a question, more to satisfy my curiosity : when you have these > hundreds of "pending" connections, in what state are they, TCP/IP-wise ? Not sure where you got "pending".  I don't recall mentioning anything like that. The TCP state is

Re: Trying to chase down "too many connection" problems with DB

2018-03-26 Thread Shawn Heisey
On 3/26/2018 11:28 AM, Christopher Schultz wrote: > The pool doesn't kill abandoned connections. It simply removes them > from the pool. Otherwise, you're right: you'd have torches and > pitchforks everywhere. That is a key piece of information.  And it should have perhaps been obvious from the

Re: Trying to chase down "too many connection" problems with DB

2018-03-25 Thread Shawn Heisey
On 3/25/2018 3:15 AM, Olaf Kock wrote: * Liferay comes (optionally) bundled with Tomcat to ease installation, however, the tomcat in there will be your own and is up to you to upgrade. Yes, new versions of Liferay will come with new versions of Tomcat, but new versions of Liferay won't be

Re: Trying to chase down "too many connection" problems with DB

2018-03-24 Thread Shawn Heisey
On 3/24/2018 5:04 PM, Mark Thomas wrote: Regarding your configuration: Generally, that looks OK but I'd strongly recommend that you use "autoReconnect=false" in the URL. autoReconnect is known to be problematic with connection pools. The removeAbandonedTimeout looks low but if all the queries

Re: Trying to chase down "too many connection" problems with DB

2018-03-24 Thread Shawn Heisey
On 3/24/2018 5:04 PM, Mark Thomas wrote: There are two pools available. org.apache.tomcat.jdbc.pool.DataSourceFactory is a different pool developed in the Tomcat project (generally called JDBC pool). OK, so that means that the currently active config is using dbcp.  The *new* config that

Re: Trying to chase down "too many connection" problems with DB

2018-03-24 Thread Shawn Heisey
On 3/24/2018 3:34 PM, Christopher Schultz wrote: Before we go too far, you have said: 1. You have 5 prod servers 2. They have several pools defined 3. The above is an example of a defined pool Just above, that configuration says maxActive=60. 5 * 60 = 300 connections. And that's just for one

Re: Trying to chase down "too many connection" problems with DB

2018-03-24 Thread Shawn Heisey
On 3/24/2018 5:36 AM, Filippo Machi wrote: Hello Shawn, about this question, are you sure that none of the webapps running on those tomcats are connecting to the database without using the pools configured in the context.xml? Creating other pools or performing direct connections? That could

Trying to chase down "too many connection" problems with DB

2018-03-23 Thread Shawn Heisey
This message is long.  Lots of details, a fair amount of history. The primary Tomcat version we've got is 7.0.42. Specifically, it is the Tomcat that's included with Liferay 6.2. This is why we haven't attempted an upgrade even though the version we're running is five years old -- we don't