DO NOT REPLY [Bug 50887] New: Enhancement to set security-provider within AjpAprProcessor

https://issues.apache.org/bugzilla/show_bug.cgi?id=50887 Summary: Enhancement to set security-provider within AjpAprProcessor Product: Tomcat 6 Version: 6.0.32 Platform: PC OS/Version: Linux Status: NEW

DO NOT REPLY [Bug 50887] Enhancement to set security-provider within AjpAprProcessor

https://issues.apache.org/bugzilla/show_bug.cgi?id=50887 --- Comment #1 from pkn...@mtg.de 2011-03-08 05:19:58 EST --- Mark Thomas has commented by email: The patch raises a couple of questions for me. - Security providers are normally configured at the JVM level. - Patches that change one of

DO NOT REPLY [Bug 50872] Intermittent SSL failure - client certificate not found

https://issues.apache.org/bugzilla/show_bug.cgi?id=50872 --- Comment #2 from Clive Nicholson clive.nichol...@brent.gov.uk 2011-03-08 05:28:04 EST --- (In reply to comment #1) Without the connector configuration and a reproducible test case, this is likely to get resolved as WORKSFORME The

Re: svn commit: r1078595 - /tomcat/trunk/java/org/apache/naming/resources/DirContextURLStreamHandler.java

On 08/03/2011 01:56, Konstantin Kolinko wrote: 2011/3/7 ma...@apache.org: Author: markt Date: Sun Mar 6 22:02:28 2011 New Revision: 1078595 URL: http://svn.apache.org/viewvc?rev=1078595view=rev Log: Clean-up, mainly unused code Modified:

DO NOT REPLY [Bug 50872] Intermittent SSL failure - client certificate not found

https://issues.apache.org/bugzilla/show_bug.cgi?id=50872 Mark Thomas ma...@apache.org changed: What|Removed |Added Status|NEW |RESOLVED

svn commit: r1079320 - in /tomcat/trunk/java/org/apache/naming/resources: Constants.java DirContextURLStreamHandler.java jndi/ jndi/Handler.java

Author: markt Date: Tue Mar 8 11:04:38 2011 New Revision: 1079320 URL: http://svn.apache.org/viewvc?rev=1079320view=rev Log: Restore the ability to register the Tomcat jndi URL handler via the java.protocol.handler.pkgs system property. Added:

DO NOT REPLY [Bug 26701] Enabling web applications to register their own stream handlers

https://issues.apache.org/bugzilla/show_bug.cgi?id=26701 --- Comment #2 from Mark Thomas ma...@apache.org 2011-03-08 06:05:33 EST --- I would add that adding stream handlers via the java.protocol.handler.pkgs system property was and remains an alternative option. -- Configure bugmail:

svn commit: r1079323 - /tomcat/trunk/java/org/apache/tomcat/util/net/jsse/JSSESocketFactory.java

Author: markt Date: Tue Mar 8 11:15:37 2011 New Revision: 1079323 URL: http://svn.apache.org/viewvc?rev=1079323view=rev Log: Refactor to address https://issues.apache.org/bugzilla/show_bug.cgi?id=48208#c13 Don't configure a TrustManagerFactory instance if it isn't going to be used. Modified:

svn commit: r1079329 - /tomcat/trunk/java/org/apache/coyote/http11/LocalStrings.properties

Author: markt Date: Tue Mar 8 11:28:15 2011 New Revision: 1079329 URL: http://svn.apache.org/viewvc?rev=1079329view=rev Log: Add missing message Modified: tomcat/trunk/java/org/apache/coyote/http11/LocalStrings.properties Modified:

[Tomcat Wiki] Trivial Update of PoweredBy by robdean

Dear Wiki user, You have subscribed to a wiki page or wiki category on Tomcat Wiki for change notification. The PoweredBy page has been changed by robdean. http://wiki.apache.org/tomcat/PoweredBy?action=diffrev1=321rev2=322 -- #pragma

svn commit: r1079337 - /tomcat/trunk/test/org/apache/tomcat/util/net/TestCustomSsl.java

Author: markt Date: Tue Mar 8 12:10:44 2011 New Revision: 1079337 URL: http://svn.apache.org/viewvc?rev=1079337view=rev Log: Don't swallow exceptions when they are not expected Modified: tomcat/trunk/test/org/apache/tomcat/util/net/TestCustomSsl.java Modified:

DO NOT REPLY [Bug 48208] allow to configure a custom client certificate Trust Manager in server.xml per connector attribute trustManagerClassName

https://issues.apache.org/bugzilla/show_bug.cgi?id=48208 --- Comment #14 from Mark Thomas ma...@apache.org 2011-03-08 08:41:45 EST --- (In reply to comment #12) Regarding implementation in 7.0.x: the tests added in r1078436 in TestCustomSsl do work with BIO connector, but fail with NIO. I

svn commit: r1079354 - in /tomcat/trunk/java/org/apache/tomcat/util/net/jsse: JSSEFactory.java JSSEImplementation.java

Author: markt Date: Tue Mar 8 13:50:07 2011 New Revision: 1079354 URL: http://svn.apache.org/viewvc?rev=1079354view=rev Log: Remove JSSEFactory. Now we no longer need to support older JSSE versions, this layer of abstraction is not required. Removed:

svn commit: r1079355 - /tomcat/trunk/java/org/apache/tomcat/util/net/SSLSupport.java

Author: markt Date: Tue Mar 8 13:50:46 2011 New Revision: 1079355 URL: http://svn.apache.org/viewvc?rev=1079355view=rev Log: Better Javadoc Modified: tomcat/trunk/java/org/apache/tomcat/util/net/SSLSupport.java Modified: tomcat/trunk/java/org/apache/tomcat/util/net/SSLSupport.java URL:

buildbot failure in ASF Buildbot on tomcat-trunk

The Buildbot has detected a new failure of tomcat-trunk on ASF Buildbot. Full details are available at: http://ci.apache.org/builders/tomcat-trunk/builds/1408 Buildbot URL: http://ci.apache.org/ Buildslave for this Build: bb-vm_ubuntu Build Reason: Build Source Stamp: [branch tomcat/trunk]

svn commit: r1079359 - /tomcat/trunk/java/org/apache/coyote/http11/Http11NioProcessor.java

Author: markt Date: Tue Mar 8 14:02:03 2011 New Revision: 1079359 URL: http://svn.apache.org/viewvc?rev=1079359view=rev Log: Fix build failure and don't tie NIO connector to a single SSL implementation Modified: tomcat/trunk/java/org/apache/coyote/http11/Http11NioProcessor.java Modified:

svn commit: r1079360 - in /tomcat/trunk/java/org/apache/tomcat/util/net: NioEndpoint.java SSLImplementation.java SSLUtil.java jsse/JSSEImplementation.java jsse/JSSESocketFactory.java

Author: markt Date: Tue Mar 8 14:03:20 2011 New Revision: 1079360 URL: http://svn.apache.org/viewvc?rev=1079360view=rev Log: Add the hooks (no implementation yet) for BIO and NIO to share the code that is currently in JSSESocketFactory Added:

DO NOT REPLY [Bug 50890] New: Provide onStartup and onShutdown scripts that run on every scenario Tomcat starts up or shuts down

https://issues.apache.org/bugzilla/show_bug.cgi?id=50890 Summary: Provide onStartup and onShutdown scripts that run on every scenario Tomcat starts up or shuts down Product: Tomcat 7 Version: 7.0.8 Platform: PC Status: NEW

DO NOT REPLY [Bug 50890] Provide onStartup and onShutdown scripts that run on every scenario Tomcat starts up or shuts down

https://issues.apache.org/bugzilla/show_bug.cgi?id=50890 Evgeny Goldin evge...@gmail.com changed: What|Removed |Added URL|

buildbot success in ASF Buildbot on tomcat-trunk

The Buildbot has detected a restored build of tomcat-trunk on ASF Buildbot. Full details are available at: http://ci.apache.org/builders/tomcat-trunk/builds/1409 Buildbot URL: http://ci.apache.org/ Buildslave for this Build: bb-vm_ubuntu Build Reason: Build Source Stamp: [branch tomcat/trunk]

svn commit: r1079367 - /tomcat/trunk/java/org/apache/tomcat/util/net/jsse/JSSESocketFactory.java

Author: markt Date: Tue Mar 8 14:21:41 2011 New Revision: 1079367 URL: http://svn.apache.org/viewvc?rev=1079367view=rev Log: Remove some unused code Modified: tomcat/trunk/java/org/apache/tomcat/util/net/jsse/JSSESocketFactory.java Modified:

[GUMP@vmgump]: Project tomcat-taglibs-standard (in module tomcat-taglibs) failed

To whom it may engage... This is an automated request, but not an unsolicited one. For more information please visit http://gump.apache.org/nagged.html, and/or contact the folk at gene...@gump.apache.org. Project tomcat-taglibs-standard has an issue affecting its community

Re: [GUMP@vmgump]: Project tomcat-taglibs-standard (in module tomcat-taglibs) failed

On 2011-03-08, Gump wrote: -ERROR- Circular Dependency. Path: [Project:jetty-security, Project:jetty-servlet, Project:jetty-webapp, Project:jetty-jmx, Project:jetty-server, Project:jetty-ajp, Project:jetty-all, Project:jetty, Project:cargo, Project:cactus,

svn commit: r1079387 - in /tomcat/trunk/java/org/apache/tomcat/util/net: NioEndpoint.java SSLUtil.java jsse/JSSESocketFactory.java

Author: markt Date: Tue Mar 8 15:19:19 2011 New Revision: 1079387 URL: http://svn.apache.org/viewvc?rev=1079387view=rev Log: Align SSL init for BIO and NIO. Fixes https://issues.apache.org/bugzilla/show_bug.cgi?id=48208 for NIO. Adds support for keyPass, truststoreProvider keystoreProvider

svn commit: r1079398 - /tomcat/trunk/webapps/docs/changelog.xml

Author: markt Date: Tue Mar 8 15:37:36 2011 New Revision: 1079398 URL: http://svn.apache.org/viewvc?rev=1079398view=rev Log: Add the CVE info for 7.0.10 Modified: tomcat/trunk/webapps/docs/changelog.xml Modified: tomcat/trunk/webapps/docs/changelog.xml URL:

svn commit: r1079399 - /tomcat/trunk/webapps/docs/changelog.xml

Author: markt Date: Tue Mar 8 15:39:29 2011 New Revision: 1079399 URL: http://svn.apache.org/viewvc?rev=1079399view=rev Log: Add release dates Modified: tomcat/trunk/webapps/docs/changelog.xml Modified: tomcat/trunk/webapps/docs/changelog.xml URL:

svn propchange: r1076586 - svn:log

Author: markt Revision: 1076586 Modified property: svn:log Modified: svn:log at Tue Mar 8 15:42:13 2011 -- --- svn:log (original) +++ svn:log Tue Mar 8 15:42:13 2011 @@ -1,4 +1,4 @@ -[SECURITY] +CVE-2011-1088 Start of

svn propchange: r1076587 - svn:log

Author: markt Revision: 1076587 Modified property: svn:log Modified: svn:log at Tue Mar 8 15:42:34 2011 -- --- svn:log (original) +++ svn:log Tue Mar 8 15:42:34 2011 @@ -1 +1,2 @@ +CVE-2011-1088 Fix typo

svn propchange: r1077995 - svn:log

Author: markt Revision: 1077995 Modified property: svn:log Modified: svn:log at Tue Mar 8 15:43:01 2011 -- --- svn:log (original) +++ svn:log Tue Mar 8 15:43:01 2011 @@ -1,2 +1,3 @@ +CVE-2011-1088 @ServletSecurity

svn commit: r1079405 - in /tomcat/trunk/java/org/apache/catalina: Server.java core/StandardServer.java manager/ManagerServlet.java realm/DataSourceRealm.java realm/UserDatabaseRealm.java

Author: markt Date: Tue Mar 8 15:58:53 2011 New Revision: 1079405 URL: http://svn.apache.org/viewvc?rev=1079405view=rev Log: Expose the global naming context for all Server implementations Modified: tomcat/trunk/java/org/apache/catalina/Server.java

svn commit: r1079444 - in /tomcat/trunk: java/org/apache/catalina/ java/org/apache/catalina/connector/ java/org/apache/catalina/core/ java/org/apache/coyote/ java/org/apache/coyote/ajp/ java/org/apach

Author: rjung Date: Tue Mar 8 17:18:16 2011 New Revision: 1079444 URL: http://svn.apache.org/viewvc?rev=1079444view=rev Log: New context attribute swallowAbortedUploads allows to make request data swallowing configurable for requests that are too large. Added:

DO NOT REPLY [Bug 50893] New: Extras etc documentation not easy to find

https://issues.apache.org/bugzilla/show_bug.cgi?id=50893 Summary: Extras etc documentation not easy to find Product: Tomcat 7 Version: 7.0.10 Platform: PC OS/Version: Windows XP Status: NEW Severity: normal

Re: [RESULT] [VOTE] Release Apache Tomcat 7.0.10

Changelog (http://tomcat.apache.org/tomcat-7.0-doc/changelog.html) still reports 7.0.8, time for sync between sites ? 2011/3/7 Mark Thomas ma...@apache.org: The result of the vote is that 7.0.10 should be released as stable. I'll make the changes shortly, with a plan to announce early

DO NOT REPLY [Bug 50895] New: JSP compiler initializes classes during compile which can result in failures

https://issues.apache.org/bugzilla/show_bug.cgi?id=50895 Summary: JSP compiler initializes classes during compile which can result in failures Product: Tomcat 6 Version: 6.0.32 Platform: PC OS/Version: Linux

DO NOT REPLY [Bug 50890] Provide onStartup and onShutdown scripts that run on every scenario Tomcat starts up or shuts down

https://issues.apache.org/bugzilla/show_bug.cgi?id=50890 --- Comment #1 from Konstantin Kolinko knst.koli...@gmail.com 2011-03-08 15:51:01 EST --- (In reply to comment #0) 1) The service wrapper used by Tomcat is not a part of Tomcat project. We are using the one provided by the Daemon project

Re: svn commit: r1079444 - in /tomcat/trunk: java/org/apache/catalina/ java/org/apache/catalina/connector/ java/org/apache/catalina/core/ java/org/apache/coyote/ java/org/apache/coyote/ajp/ java/org/a

On 8 March 2011 17:18, rj...@apache.org wrote: Author: rjung Date: Tue Mar  8 17:18:16 2011 New Revision: 1079444 URL: http://svn.apache.org/viewvc?rev=1079444view=rev Log: New context attribute swallowAbortedUploads allows to make request data swallowing configurable for requests that

svn commit: r1079553 - /tomcat/trunk/java/org/apache/tomcat/util/net/jsse/JSSESocketFactory.java

Author: markt Date: Tue Mar 8 21:32:58 2011 New Revision: 1079553 URL: http://svn.apache.org/viewvc?rev=1079553view=rev Log: r1079367 was a little too enthusiastic. The if (!initialized) tests weren't required by the init() call are Modified:

svn commit: r1079575 - in /tomcat/trunk: java/org/apache/catalina/core/StandardContext.java java/org/apache/catalina/deploy/LocalStrings.properties java/org/apache/catalina/deploy/NamingResources.java

Author: markt Date: Tue Mar 8 22:15:34 2011 New Revision: 1079575 URL: http://svn.apache.org/viewvc?rev=1079575view=rev Log: Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=25060 When stopping naming resources look for DataSource resources with a zero-arg close() method and call it if

DO NOT REPLY [Bug 25060] Reloading context orphans currently open jndi datasource connections

https://issues.apache.org/bugzilla/show_bug.cgi?id=25060 Mark Thomas ma...@apache.org changed: What|Removed |Added Status|NEW |RESOLVED

svn commit: r1079584 - /tomcat/trunk/java/org/apache/catalina/core/StandardContext.java

Author: rjung Date: Tue Mar 8 22:27:45 2011 New Revision: 1079584 URL: http://svn.apache.org/viewvc?rev=1079584view=rev Log: Reduce visibility of field with public getter and setter. Modified: tomcat/trunk/java/org/apache/catalina/core/StandardContext.java Modified:

Re: svn commit: r1079444 - in /tomcat/trunk: java/org/apache/catalina/ java/org/apache/catalina/connector/ java/org/apache/catalina/core/ java/org/apache/coyote/ java/org/apache/coyote/ajp/ java/org/

On 08.03.2011 22:09, sebb wrote: On 8 March 2011 17:18,rj...@apache.org wrote: Author: rjung Date: Tue Mar 8 17:18:16 2011 New Revision: 1079444 URL: http://svn.apache.org/viewvc?rev=1079444view=rev Log: New context attribute swallowAbortedUploads allows to make request data swallowing

DO NOT REPLY [Bug 50895] JSP compiler initializes classes during compile which can result in failures

https://issues.apache.org/bugzilla/show_bug.cgi?id=50895 Mark Thomas ma...@apache.org changed: What|Removed |Added Status|NEW |RESOLVED

Re: svn commit: r1079444 - in /tomcat/trunk: java/org/apache/catalina/ java/org/apache/catalina/connector/ java/org/apache/catalina/core/ java/org/apache/coyote/ java/org/apache/coyote/ajp/ java/org/a

On 08/03/2011 17:18, rj...@apache.org wrote: snip/ Modified: tomcat/trunk/java/org/apache/catalina/connector/Request.java URL: http://svn.apache.org/viewvc/tomcat/trunk/java/org/apache/catalina/connector/Request.java?rev=1079444r1=1079443r2=1079444view=diff

DO NOT REPLY [Bug 50895] JSP compiler initializes classes during compile which can result in failures

https://issues.apache.org/bugzilla/show_bug.cgi?id=50895 --- Comment #2 from Andy Wang do...@moonteeth.com 2011-03-08 17:42:39 EST --- We have a tag that contructs a class that has runtime dependencies in it's constructor. When using the Jspc ant task to compile, these runtime dependencies don't

DO NOT REPLY [Bug 50895] JSP compiler initializes classes during compile which can result in failures

https://issues.apache.org/bugzilla/show_bug.cgi?id=50895 Andy Wang do...@moonteeth.com changed: What|Removed |Added Status|RESOLVED|REOPENED

svn commit: r1079616 - in /tomcat/site/trunk: docs/migration.html xdocs/migration.xml

Author: kkolinko Date: Wed Mar 9 00:28:43 2011 New Revision: 1079616 URL: http://svn.apache.org/viewvc?rev=1079616view=rev Log: Changed preambula chapter of the Migration Guide: Recommended to start with a blank configuration. Mentioned that Java 6 is fine. Modified:

svn commit: r1079636 - in /tomcat/site/trunk: docs/migration.html xdocs/migration.xml

Author: kkolinko Date: Wed Mar 9 01:38:16 2011 New Revision: 1079636 URL: http://svn.apache.org/viewvc?rev=1079636view=rev Log: Rewrote the Modified directory structure and Modified classloading subsections of 5.5-6.0 migration in the Migration Guide. Modified:

svn commit: r1079640 - in /tomcat/site/trunk: docs/migration.html xdocs/migration.xml

Author: kkolinko Date: Wed Mar 9 02:03:38 2011 New Revision: 1079640 URL: http://svn.apache.org/viewvc?rev=1079640view=rev Log: In the Migration Guide for 5.5 6.0 migration, Provide more details on the logging package being renamed. Explicitly mention commons-logging.jar is a separate section.

DO NOT REPLY [Bug 50883] StackOverflowError

https://issues.apache.org/bugzilla/show_bug.cgi?id=50883 Ashish dashashishku...@gmail.com changed: What|Removed |Added Keywords||ErrorMessage

svn commit: r1079665 - /tomcat/trunk/java/org/apache/catalina/connector/Request.java

Author: rjung Date: Wed Mar 9 05:05:36 2011 New Revision: 1079665 URL: http://svn.apache.org/viewvc?rev=1079665view=rev Log: Rename new method. Modified: tomcat/trunk/java/org/apache/catalina/connector/Request.java Modified: tomcat/trunk/java/org/apache/catalina/connector/Request.java URL:

Re: svn commit: r1079444 - in /tomcat/trunk: java/org/apache/catalina/ java/org/apache/catalina/connector/ java/org/apache/catalina/core/ java/org/apache/coyote/ java/org/apache/coyote/ajp/ java/org/

On 08.03.2011 23:37, Mark Thomas wrote: On 08/03/2011 17:18, rj...@apache.org wrote: snip/ Modified: tomcat/trunk/java/org/apache/catalina/connector/Request.java URL:

svn commit: r1079666 - /tomcat/trunk/java/org/apache/catalina/Context.java

Author: rjung Date: Wed Mar 9 05:21:34 2011 New Revision: 1079666 URL: http://svn.apache.org/viewvc?rev=1079666view=rev Log: Consistent Ordering. No functional change. Modified: tomcat/trunk/java/org/apache/catalina/Context.java Modified: tomcat/trunk/java/org/apache/catalina/Context.java

svn commit: r1079667 - /tomcat/trunk/webapps/docs/config/context.xml

Author: rjung Date: Wed Mar 9 05:24:04 2011 New Revision: 1079667 URL: http://svn.apache.org/viewvc?rev=1079667view=rev Log: Fix alphabetic order. Modified: tomcat/trunk/webapps/docs/config/context.xml Modified: tomcat/trunk/webapps/docs/config/context.xml URL:

svn commit: r1079670 - /tomcat/tc6.0.x/trunk/STATUS.txt

Author: kfujino Date: Wed Mar 9 05:36:55 2011 New Revision: 1079670 URL: http://svn.apache.org/viewvc?rev=1079670view=rev Log: my votes Modified: tomcat/tc6.0.x/trunk/STATUS.txt Modified: tomcat/tc6.0.x/trunk/STATUS.txt URL:

svn commit: r1079671 - /tomcat/trunk/webapps/docs/config/context.xml

Author: rjung Date: Wed Mar 9 05:38:23 2011 New Revision: 1079671 URL: http://svn.apache.org/viewvc?rev=1079671view=rev Log: Docs: Move allowCasualMultipartParsing, swallowAbortedUploads and swallowOutput from StandardContext to Context. Modified:

Some remarks and observations from implementing disable swallowAbortedUploads

Hi all, some things I noticed while implementing the new switch: - o.a.c.connector.Request and Response hav methods finishRequest() resp. finishResponse(). The mehod in the request seems not to be called. Although that's not a big issue, because the omplementation is empty, one would run

svn commit: r1079675 - /tomcat/tc5.5.x/trunk/STATUS.txt

Author: kfujino Date: Wed Mar 9 06:23:31 2011 New Revision: 1079675 URL: http://svn.apache.org/viewvc?rev=1079675view=rev Log: votes Modified: tomcat/tc5.5.x/trunk/STATUS.txt Modified: tomcat/tc5.5.x/trunk/STATUS.txt URL: