Re: too many "CLOSE_WAIT" states on Tomcat 80 port and Tomcat does not responding requests to port 80 anymore

[Jason Zhang]

Thank you Mark, I appreciate it!

On Sun, Jul 10, 2022 at 2:03 PM Mark Thomas  wrote:

> On 10/07/2022 14:25, Jason Zhang wrote:
> > Hi Mark,
> >
> > Thank you for your response. We are currently working with the Alfresco
> > team on this issue. No updates so far.
> >
> > Does this configuration help to mitigate the issue (temporary
> workaround)?
> >
> > keepAliveTimeout = "0"
>
> Given that that is a setting for Tomcat's HTTP connector for incoming
> HTTP connections and you are seeing issues with the completely separate,
> nothing to do with Tomcat, application provided pool for outgoing HTTP
> connections I'd be surprised if that had any effect.
>
> That said, without knowing anything about how Alfresco works or the root
> cause of the problem you are seeing, anything is possible.
>
> Mark
>
>
> >
> > Thank you
> >
> > On Sun, Jul 10, 2022 at 4:49 AM Mark Thomas  wrote:
> >
> >> On 10/07/2022 05:40, Jason Zhang wrote:
> >>> Hello Tomcat Support team,
> >>>
> >>> The Tomcat is not responding to requests to port 80 in our system, I
> >> would
> >>> like to know:
> >>> 1. If this is an issue with Tomcat or outside the Tomcat
> >>> 2. If it is an issue with Tomcat, how to fix it
> >>> 3. If it is outside the Tomcat, can you give some suggestions/paths
> that
> >> we
> >>> can look into?
> >>>
> >>> Any suggestions are appreciated.
> >>
> >> This is definitely not a Tomcat issue.
> >>
> >> You have an applciation issue. Possibly some sort of HTTP connection
> >> leak. That may be related to using a 14+ year old HTTP client library.
> >>
> >> Alfresco support is probably where you need to be asking for help.
> >>
> >> Mark
> >>
> >> -
> >> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> >> For additional commands, e-mail: users-h...@tomcat.apache.org
> >>
> >>
> >
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
>

-- 
Jason Zhang
Application Developer
Spatial Front (SFI), Inc.
6550 Rock Spring Dr, Bethesda, MD 20817 #485
Cell: 972-839-8318

Getting SSL Working on Tomcat9

[George Sexton]

I'm trying to configure SSL for Tomcat 9 and I'm not having any luck.

My config is:








This was constructed using this page as a reference:

https://tomcat.apache.org/tomcat-9.0-doc/config/http.html

I've tried the two shown Certificate configs. They both give the error:

SEVERE: Failed to initialize component [Connector[HTTP/1.1-443]]
org.apache.catalina.LifecycleException: Protocol handler initialization failed
at 
org.apache.catalina.connector.Connector.initInternal(Connector.java:1051)
at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:136)
at 
org.apache.catalina.core.StandardService.initInternal(StandardService.java:556)
at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:136)
.
Caused by: java.lang.IllegalArgumentException: SSLHostConfig attribute 
certificateFile must be defined when using an SSL connector
at 
org.apache.tomcat.util.net.AbstractJsseEndpoint.createSSLContext(AbstractJsseEndpoint.java:107)
at 
org.apache.tomcat.util.net.AbstractJsseEndpoint.initialiseSsl(AbstractJsseEndpoint.java:71)
at org.apache.tomcat.util.net.NioEndpoint.bind(NioEndpoint.java:234)
at 
org.apache.tomcat.util.net.AbstractEndpoint.bindWithCleanup(AbstractEndpoint.java:1227)
at 
org.apache.tomcat.util.net.AbstractEndpoint.init(AbstractEndpoint.java:1240)
.
Caused by: java.io.IOException: SSLHostConfig attribute certificateFile must be 
defined when using an SSL connector
at 
org.apache.tomcat.util.net.SSLUtilBase.getKeyManagers(SSLUtilBase.java:312)
at 
org.apache.tomcat.util.net.SSLUtilBase.createSSLContext(SSLUtilBase.java:247)
at 
org.apache.tomcat.util.net.AbstractJsseEndpoint.createSSLContext(AbstractJsseEndpoint.java:105)
... 25 more

Looking at the docs, it doesn't appear that certificateFile is an 
attribute of SSLHostConfig. I've looked at this page:


https://tomcat.apache.org/tomcat-9.0-doc/ssl-howto.html#Certificates

but it's configuring everything on the Connector, which the Connector 
page says is deprecated:


/The following NIO and NIO2 SSL configuration attributes have been 
deprecated in favor of the default //SSLHostConfig 
//element 
with the //|hostName|//of //|_default_|//. If this //SSLHostConfig 
//element 
is not explicitly defined, it will be created.. /


Additionally, I'd like to use SNI for multiple certs, so that will 
require an SSLHostConfig I think. Can anyone give me an idea of what I'm 
doing wrong?


Thanks.


--
George Sexton
(303) 438 9585 x102
MH Software, Inc.

Re: too many "CLOSE_WAIT" states on Tomcat 80 port and Tomcat does not responding requests to port 80 anymore

[Mark Thomas]

On 10/07/2022 14:25, Jason Zhang wrote:

Hi Mark,

Thank you for your response. We are currently working with the Alfresco
team on this issue. No updates so far.

Does this configuration help to mitigate the issue (temporary workaround)?

keepAliveTimeout = "0"


Given that that is a setting for Tomcat's HTTP connector for incoming 
HTTP connections and you are seeing issues with the completely separate, 
nothing to do with Tomcat, application provided pool for outgoing HTTP 
connections I'd be surprised if that had any effect.


That said, without knowing anything about how Alfresco works or the root 
cause of the problem you are seeing, anything is possible.


Mark




Thank you

On Sun, Jul 10, 2022 at 4:49 AM Mark Thomas  wrote:


On 10/07/2022 05:40, Jason Zhang wrote:

Hello Tomcat Support team,

The Tomcat is not responding to requests to port 80 in our system, I

would

like to know:
1. If this is an issue with Tomcat or outside the Tomcat
2. If it is an issue with Tomcat, how to fix it
3. If it is outside the Tomcat, can you give some suggestions/paths that

we

can look into?

Any suggestions are appreciated.


This is definitely not a Tomcat issue.

You have an applciation issue. Possibly some sort of HTTP connection
leak. That may be related to using a 14+ year old HTTP client library.

Alfresco support is probably where you need to be asking for help.

Mark

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org






-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: too many "CLOSE_WAIT" states on Tomcat 80 port and Tomcat does not responding requests to port 80 anymore

[Jason Zhang]

Hi Mark,

Thank you for your response. We are currently working with the Alfresco
team on this issue. No updates so far.

Does this configuration help to mitigate the issue (temporary workaround)?

keepAliveTimeout = "0"

Thank you

On Sun, Jul 10, 2022 at 4:49 AM Mark Thomas  wrote:

> On 10/07/2022 05:40, Jason Zhang wrote:
> > Hello Tomcat Support team,
> >
> > The Tomcat is not responding to requests to port 80 in our system, I
> would
> > like to know:
> > 1. If this is an issue with Tomcat or outside the Tomcat
> > 2. If it is an issue with Tomcat, how to fix it
> > 3. If it is outside the Tomcat, can you give some suggestions/paths that
> we
> > can look into?
> >
> > Any suggestions are appreciated.
>
> This is definitely not a Tomcat issue.
>
> You have an applciation issue. Possibly some sort of HTTP connection
> leak. That may be related to using a 14+ year old HTTP client library.
>
> Alfresco support is probably where you need to be asking for help.
>
> Mark
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
>

Re: too many "CLOSE_WAIT" states on Tomcat 80 port and Tomcat does not responding requests to port 80 anymore

[Mark Thomas]

On 10/07/2022 05:40, Jason Zhang wrote:

Hello Tomcat Support team,

The Tomcat is not responding to requests to port 80 in our system, I would
like to know:
1. If this is an issue with Tomcat or outside the Tomcat
2. If it is an issue with Tomcat, how to fix it
3. If it is outside the Tomcat, can you give some suggestions/paths that we
can look into?

Any suggestions are appreciated.


This is definitely not a Tomcat issue.

You have an applciation issue. Possibly some sort of HTTP connection 
leak. That may be related to using a 14+ year old HTTP client library.


Alfresco support is probably where you need to be asking for help.

Mark

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org