Re: tomcat 8.5.16 silent exit without any error logs on ubuntu 16.04.2

[Guang Chao]

Can you try "grep -i 'killed process' /var/log/messages"

On Tue, Jul 11, 2017 at 12:49 PM, 李员外 <281170...@qq.com> wrote:

> Yes,  I have done that in fact. I download zip file, and unzip, then chmod
> 777 startup.sh.  Problems love me still. I am trying to monitor tomcat
> remotely.
>
>
> --
> 做自己
>
>
>
>
>
>
>
> -- 原始邮件 --
> 发件人: "Guang Chao";;
> 发送时间: 2017年7月11日(星期二) 中午12:34
> 收件人: "Tomcat Users List";
>
> 主题: Re: tomcat 8.5.16 silent exit without any error logs on ubuntu 16.04.2
>
>
>
> On Sun, Jul 9, 2017 at 7:10 PM, 李员外 <281170...@qq.com> wrote:
>
> > There is any file name started with hs_err_, also has no any dumps under
> > the /tmp folder. Really helplessness...
> >
> >
> Can you try not using Tomcat from the package manager?  Just download for
> example
> http://www-us.apache.org/dist/tomcat/tomcat-8/v8.5.16/bin/
> apache-tomcat-8.5.16.zip
> put your app in the webapps directory and execute bin/startup.sh
>
>
> >
> > --
> > 做自己
> >
> >
> >
> >
> >
> >
> >
> > -- 原始邮件 --
> > 发件人: "Greg Huber";;
> > 发送时间: 2017年7月7日(星期五) 下午4:08
> > 收件人: "Tomcat Users List";
> >
> > 主题: Re: tomcat 8.5.16 silent exit without any error logs on ubuntu
> 16.04.2
> >
> >
> >
> > Check /tmp for any dumps,  hs_err_pid.log if there is a jdk issue.
> >
> > Sometimes jsvc restarts for me :
> >
> > V  [libjvm.so+0x98f752]  oopDesc*
> > PSPromotionManager::copy_to_survivor_space(oopDesc*)+0x162
> >
> >
> > On 7 July 2017 at 02:22, 李员外 <281170...@qq.com> wrote:
> >
> > > Will try that. The RAM of machine is 8 GigaByte, 4-core CPU, even if
> > > silent exit is caused by Insufficient  memory, at least, tomcat would
> > > record error info to log file, right?
> > >
> > >
> > > Thanks in advance!
> > > --
> > > 做自己
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > > -- 原始邮件 --
> > > 发件人: "Guang Chao";;
> > > 发送时间: 2017年7月7日(星期五) 上午8:26
> > > 收件人: "Tomcat Users List";
> > >
> > > 主题: Re: tomcat 8.5.16 silent exit without any error logs on ubuntu
> > 16.04.2
> > >
> > >
> > >
> > > How much RAM your hardware have?  Have you tried installing Tomcat from
> > > download and make it  a service through your own init scripts?  (E.g.
> > > https://gist.github.com/miglen/5590986)
> > >
> > > On Fri, Jul 7, 2017 at 12:40 AM, 李员外 <281170...@qq.com> wrote:
> > >
> > > > Hi, guys
> > > >
> > > >
> > > > I use tomcat 8.5.16, and I found at least 5 times tomcat silent exit
> > > > without any error logs after keep running 2-3 days, that means
> > > catalina.out
> > > > has no error info located in /opt/apache-tomcat-8.5.16/logs/.
> > > > And application log file also has no error info.
> > > > I do not know why? How should I to find out reason?
> > > >
> > > >
> > > > Please help me!
> > > > Thanks in advance!
> > > >
> > > >
> > > >
> > > >
> > > > --
> > > > 做自己
> > >
> > >
> > >
> > >
> > > --
> > > Guang 
> >
>
>
>
> --
> Guang 




-- 
Guang 

RE: Errors establishing secure connections with tomcat 8.5.15

[Kevin Mango]

-Original Message-
From: Christopher Schultz [mailto:ch...@christopherschultz.net]
Sent: Tuesday, July 11, 2017 1:58 PM
To: users@tomcat.apache.org
Subject: Re: Errors establishing secure connections with tomcat 8.5.15

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Kevin,

On 7/7/17 12:40 PM, Kevin Mango wrote:
> I was able to resolve this by using
> "-Dcom.sun.net.ssl.enableECC=false" when starting tomcat to disable
> the use of Elliptic Curves, the only issue now is that Google Chrome
> is having issues finding a common cipher suite to use, giving the
> error ERR_SSL_VERSION_OR_CIPHER_MISMATCH.

Your configuration does not include any specification for cipher suites:

>>> Here is the connector in our server.xml file:
>>>
>>> >> protocol="org.apache.coyote.http11.Http11NioProtocol"
>>> maxThreads="200" scheme="https" secure="true"
>>> SSLEnabled="true" defaultSSLHostConfigName=" "

>>> >> sslProtocol="TLSv1.2"> >> certificateKeystoreFile=">> name>" certificateKeystorePassword=""
>>> certificateKeystoreType="PKCS12" type="RSA"/> 
>>>
>>> 

So it would be unusual for a client and server not to be able to agree on a 
cipher suite.

Are you adjusting the available cipher suites any other way (e.g.
system property that affects JSSE, edits to $JAVA_HOME/jre/security/*.policy, 
etc.)?

What kind of certificate are you using? Is it an ECC certificate (rather than 
the more common RSA certificates)?

- -chris
-BEGIN PGP SIGNATURE-
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=0o+S
-END PGP SIGNATURE-
-
Hi Chris,

I 'm not adjusting the cipher suites in any way. My *.policy files are the 
default ones that came with the JDK installation, same with the .security file. 
The only thing I changed in that directory was adding the Unlimited Strength 
policy JAR's.

As for the certificates, we are using self-signed RSA certificates.

On our older machines that are running Tomcat 7 and JDK 7, these certificates 
work fine for our purposes and are still working. In these cases the handshake 
uses the cipher ECDHE-RSA-AES128-GCM-SHA256. But with Tomcat 8.5.15 and JDK 8 
we have been getting error's with unsupported elliptic curve, even when it uses 
the same or similar cipher suites.

Additionally I have tried debugging this with OpenSSL, but when trying to 
connect it gives an error message "SSL routines:tls_process_ske_ecdhe:wrong 
curve:ssl\statem\statem_clnt.c:2057:". Even when specifying curves and cipher 
suites into the OpenSSL client connection, I continue to get this error.

The only thing that has come close to working for us is by using 
"-Dcom.sun.net.ssl.enableECC=false" when starting Tomcat to disable all EC 
ciphers, but Google Chrome won't accept the connection due to being unable to 
find a common cipher suite.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



This e-mail transmission contains confidential information that is the property 
of the sender. If you are not the intended recipient, you are notified that any 
retention, disclosure, reproduction or distribution of the contents of this 
e-mail transmission, or the taking of any action in reliance thereon or 
pursuant thereto, is strictly prohibited. No warranty is given by NYSIF that 
this e-mail is free of viruses, interception or interference. NYSIF disclaims 
liability for any unauthorized opinion, representation, statement, offer or 
contract made by the sender on behalf of NYSIF. NYSIF's delegation of 
authorities, setting out who may make representations or contract on behalf of 
NYSIF, is available by contacting NYSIF at mail...@nysif.com. Jurisdiction for 
all actions arising out of dealings with NYSIF shall lie only in a court of 
competent jurisdiction of the State of New York

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: 回复： tomcat 8.5.16 silent exit without any error logs on ubuntu 16.04.2

[Christopher Schultz]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

李员外,

On 7/11/17 12:49 AM, 李员外 wrote:
> Yes,  I have done that in fact. I download zip file, and unzip,
> then chmod 777 startup.sh.  Problems love me still. I am trying to
> monitor tomcat remotely.
Mark's reply from July 6th is most likely given your observations.

Try "sudo grep oom /var/log/syslog" (or wherever your system logger
drops things).

- -chris

-BEGIN PGP SIGNATURE-
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=HmJg
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Issue with static file in Tomcat 8.5.17

[Christopher Schultz]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Mark,

On 7/8/17 3:06 PM, Mark Thomas wrote:
> On 07/07/17 23:05, George Stanchev wrote:
>>  On 07/07/2017 20:56, George Stanchev wrote:
>>> Sorry, I didn't realize there is a -d option that gives you the
>>> full request and response. Here is the dump:
>> 
>> Thanks for the extra information.
>> 
>> I can't reproduce this yet. I'm going to hold off on closing the
>> currently running votes until I get to the bottom of this.
>> 
>> Which version of Windows is this?
>> 
>> Mark
>> 
>> 
>> 
>> We've reproduced it on Windows 7 and various versions of Windows
>> Server (2016, 2012 R2, etc). All times Tomcat runs through the
>> service wrapper. I happen to run it in the command line via
>> 
>> start /b /wait %comspec% /c "%TOMCAT_EXE%"
>> //TS//%TOMCAT_SERVICE_NAME%
>> 
>> 
>> command. Here are more details. Since you cannot reproduce it,
>> perhaps I can package up the tomcat + the test app in a zip and
>> upload it somewhere...
> 
> That would be helpful. I've tested this in multiple environments
> and I can't reproduce it.

Try creating a file with a mismatched character encoding so that the
number of bytes sent over the wire doesn't match the number of bytes
reported by File.length().

That jQuery file might do it on its own.

- -chris
-BEGIN PGP SIGNATURE-
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQIcBAEBCAAGBQJZZR74AAoJEBzwKT+lPKRYsbEP/AiEd9LXkLHdDXbTdR7o1o2b
+c4m2aGnE9QLo1fatL8YXznTkVZonP+jBHU134buZgPkRJ0b/3ceXvmqK0hZJouJ
UtmPWoLqMfb7m93zuE0Gi/GoI0OsnssW/awgGrY9EjF3LljCuAomUyHvcclTBo8r
irv9hD3LnoZMA1hY9vDcHBnsCUsye/WtRpV1pifn0WE6UJOaygi7EUUcK8M5XCde
ZGH7p7EVoiWTXLOSvOegzFysoxz5NktMaDrLn9A4hbe71EBvlBoctl7oLUAMylPn
q2eLMDhxIABXJKLMJRXq0SqkyFgVC3gqyJhRQ39Lj9Hk4I/7aON+I2ty1aJ88Mjz
UAPJ6L7u4d4EnmTCQN9hbhQ2cCeHr3bDTqJDIba3G+DDZ3/+UnACZMkzNMK8odrt
j6qXVnjJut/Bk5I9md5sE2v4XM+6z6YLL+QtNeNRxDncES6OHJagENQdxCZqI+7f
q9hQbWAnPvxROI3npqhR6rMJIHXrrx88DZLXPmOE5Vgy6bqo5FgOZkn6FuPUSQOh
44eMZPJbWV9H/6jtjx0fuYOSR/YGjCEjxEOjQfjzUm9mEgOqfxONkX5Z5B9q31x9
4N7JEcNIW2DuZzX6uFDciWSs57PRnY3I9d5nRydGuXaU7xilJ/G0eSmAchdt7e7h
XIO7bR27JtAxImrPWVlN
=ziQj
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Errors establishing secure connections with tomcat 8.5.15

[Christopher Schultz]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Kevin,

On 7/7/17 12:40 PM, Kevin Mango wrote:
> I was able to resolve this by using 
> "-Dcom.sun.net.ssl.enableECC=false" when starting tomcat to disable
> the use of Elliptic Curves, the only issue now is that Google
> Chrome is having issues finding a common cipher suite to use,
> giving the error ERR_SSL_VERSION_OR_CIPHER_MISMATCH.

Your configuration does not include any specification for cipher suites:

>>> Here is the connector in our server.xml file:
>>> 
>>> >> protocol="org.apache.coyote.http11.Http11NioProtocol" 
>>> maxThreads="200" scheme="https" secure="true"
>>> SSLEnabled="true" defaultSSLHostConfigName=" "
 
>>> >> sslProtocol="TLSv1.2"> >> certificateKeystoreFile=">> name>" certificateKeystorePassword="" 
>>> certificateKeystoreType="PKCS12" type="RSA"/> 
>>> 
>>> 

So it would be unusual for a client and server not to be able to agree
on a cipher suite.

Are you adjusting the available cipher suites any other way (e.g.
system property that affects JSSE, edits to
$JAVA_HOME/jre/security/*.policy, etc.)?

What kind of certificate are you using? Is it an ECC certificate
(rather than the more common RSA certificates)?

- -chris
-BEGIN PGP SIGNATURE-
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=0o+S
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Response cut off after 10 seconds when using NIO2 connector

[Matt Cosentino]

I'm using Tomcat 8.5.16 with the NIO2 connector and OpenSSL. It seems that if a 
request runs for more than 10 seconds, Tomcat simply cuts off the response. 
This does not happen with either the NIO or APR connectors. I'm using all 
default settings. Is this expected behavior or am I missing a setting 
somewhere? Here are links showing the behavior with identical settings except 
for the connector:

NIO2: https://www.arclearn.com/sleep.jsp
NIO: https://www.arclearn.com:8443/sleep.jsp

- Matt

Re: tomcat 8.5.16 silent exit without any error logs on ubuntu 16.04.2

[Suvendu Sekhar Mondal]

>> >
>> > On Fri, Jul 7, 2017 at 12:40 AM, 李员外 <281170...@qq.com> wrote:
>> >
>> > > Hi, guys
>> > >
>> > >
>> > > I use tomcat 8.5.16, and I found at least 5 times tomcat silent exit
>> > > without any error logs after keep running 2-3 days, that means
>> > catalina.out
>> > > has no error info located in /opt/apache-tomcat-8.5.16/logs/.
>> > > And application log file also has no error info.
>> > > I do not know why? How should I to find out reason?
>> > >
>> > >
>> > > Please help me!
>> > > Thanks in advance!
>> > >
>> > >
>> > >
>> > >
>> > > --
>> > > 做自己
>> >

Hi,

What is the JRE version? I hope you are not using
ExitOnOutOfMemoryError option [1]. If this is not the case, then my
hunch is some external process is killing the Tomcat and you need to
find it out. In Windows, whenever something like that happens, one
eventlog gets created. I am pretty sure there will be similar thing in
Ubuntu. I just Googled and saw this [2].

Another thing I would suggest, please monitor the memory usage of the
Tomcat process using some tool. Try to identify if it is getting
crashed after reaching to a certain threshold.

Thanks!
Suvendu

[1]http://www.oracle.com/technetwork/java/javase/8u92-relnotes-2949471.html
[2]http://www.oracle.com/technetwork/articles/servers-storage-dev/oom-killer-1911807.html

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org