[Bug 56780] IBM Java: server.startup gives error java.lang.IllegalArgumentException: Only TLS1.2 protocol can be enabl ed in SP800_131 strict mode

2014-10-21 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=56780 --- Comment #6 from Hariharan, R cloakcaval...@gmail.com --- @Mark Thomas: I am able to see the bug fix in 7.0.56. @Karl Freburger: Can you mail a 64-bit IBM JRE for Windows to cloakcaval...@gmail.com? -- You are receiving this mail

[Bug 53952] Add support for TLS 1.1 and 1.2

2014-10-21 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=53952 --- Comment #43 from Ralf Hauser hau...@acm.org --- I guess comment 30 ff. refers to https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566 ? -- You are receiving this mail because: You are the assignee for the bug.

svn commit: r6809 - in /dev/tomcat/tomcat-connectors/native/1.1.32: ./ binaries/ source/

2014-10-21 Thread markt
Author: markt Date: Tue Oct 21 08:57:53 2014 New Revision: 6809 Log: Upload Tomcat native 1.1.32 for voting Added: dev/tomcat/tomcat-connectors/native/1.1.32/ dev/tomcat/tomcat-connectors/native/1.1.32/binaries/

[VOTE] Release Apache Tomcat Native 1.1.32

2014-10-21 Thread Mark Thomas
Version 1.1.32 includes the following changes: - Add support for TLS v1.1 and TLS v1.2 - Windows binaries built with APR 1.5.1 and OpenSSL 1.0.1j The proposed release artefacts can be found at [1], and the build was done using tag [2]. Since this release is primarily to address security issues,

Re: [VOTE] Release Apache Tomcat Native 1.1.32

2014-10-21 Thread Mark Thomas
On 21/10/2014 10:05, Mark Thomas wrote: Version 1.1.32 includes the following changes: - Add support for TLS v1.1 and TLS v1.2 - Windows binaries built with APR 1.5.1 and OpenSSL 1.0.1j The proposed release artefacts can be found at [1], and the build was done using tag [2]. Since this

svn commit: r1633342 - in /tomcat/trunk: java/org/apache/tomcat/websocket/WsRemoteEndpointImplBase.java test/org/apache/tomcat/websocket/pojo/TestEncodingDecoding.java webapps/docs/changelog.xml

2014-10-21 Thread markt
Author: markt Date: Tue Oct 21 11:16:17 2014 New Revision: 1633342 URL: http://svn.apache.org/r1633342 Log: Ensure that that an EncodeException is thrown by RemoteEndpoint.Basic.sendObject(Object) rather than an IOException when no suitable Encoder is configured for the given Object.

svn commit: r1633346 - /tomcat/trunk/webapps/docs/changelog.xml

2014-10-21 Thread kkolinko
Author: kkolinko Date: Tue Oct 21 11:35:35 2014 New Revision: 1633346 URL: http://svn.apache.org/r1633346 Log: Update changelog for BZ 47919 per r1630407 It logs not just key env vars, but all of them, and logs command line arguments. I am emphasizing CATALINA_OPTS, JAVA_OPTS, as that may be a

Early Access builds for JDK 9 b35 and JDK 8u40 b10 are available on java.net

2014-10-21 Thread Rory O'Donnell
Hi Mladen/Mark, Early Access build for JDK 9 b35 https://jdk9.java.net/download/ is available on java.net, summary of changes are listed here http://www.java.net/download/jdk9/changes/jdk9-b35.html Early Access build for JDK 8u40 b10 http://jdk8.java.net/download.html is available on

[Bug 57122] New: class loading during remote deployment not working (NoClassDefFoundError)

2014-10-21 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57122 Bug ID: 57122 Summary: class loading during remote deployment not working (NoClassDefFoundError) Product: Tomcat 7 Version: 7.0.53 Hardware: PC OS:

[Bug 57122] class loading during remote deployment not working (NoClassDefFoundError)

2014-10-21 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57122 --- Comment #1 from Konstantin Kolinko knst.koli...@gmail.com --- (In reply to michael.bauland from comment #0) SEVERE: Exception sending context destroyed event to listener instance of class x.y.z.InitListener

[Bug 57122] class loading during remote deployment not working (NoClassDefFoundError)

2014-10-21 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57122 --- Comment #2 from michael.baul...@knipp.de --- Created attachment 32132 -- https://issues.apache.org/bugzilla/attachment.cgi?id=32132action=edit error log -- You are receiving this mail because: You are the assignee for the bug.

[Bug 57122] class loading during remote deployment not working (NoClassDefFoundError)

2014-10-21 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57122 --- Comment #3 from michael.baul...@knipp.de --- Thanks for the quick response. 1. I have attached the full stack trace. There have been no preceding errors in the log, as you can see. 2. No, we do not use jBoss (just richfaces) and have

svn commit: r1633359 - in /tomcat/tc7.0.x/trunk: ./ java/org/apache/tomcat/websocket/WsRemoteEndpointImplBase.java test/org/apache/tomcat/websocket/pojo/TestEncodingDecoding.java webapps/docs/changelo

2014-10-21 Thread markt
Author: markt Date: Tue Oct 21 12:36:06 2014 New Revision: 1633359 URL: http://svn.apache.org/r1633359 Log: Ensure that that an EncodeException is thrown by RemoteEndpoint.Basic.sendObject(Object) rather than an IOException when no suitable Encoder is configured for the given Object.

[Bug 57118] Throw EncodeException from RemoteEndpoint.Basic.sendObject()

2014-10-21 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57118 Mark Thomas ma...@apache.org changed: What|Removed |Added Status|NEW |RESOLVED

[Bug 57122] class loading during remote deployment not working (NoClassDefFoundError)

2014-10-21 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57122 --- Comment #4 from Mark Thomas ma...@apache.org --- (In reply to michael.bauland from comment #3) Thanks for the quick response. 1. I have attached the full stack trace. There have been no preceding errors in the log, as you can see.

[Bug 57122] class loading during remote deployment not working (NoClassDefFoundError)

2014-10-21 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57122 Konstantin Kolinko knst.koli...@gmail.com changed: What|Removed |Added Status|NEW

[Bug 56321] ServletContextListener.contextDestroyed not completely executed when updating war

2014-10-21 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=56321 Konstantin Kolinko knst.koli...@gmail.com changed: What|Removed |Added CC|

[Bug 57122] class loading during remote deployment not working (NoClassDefFoundError)

2014-10-21 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57122 --- Comment #6 from Mark Thomas ma...@apache.org --- Looks like the classes are located in the web application. I was just about to mark this as a duplicate as well but Konstantin beat me to it. -- You are receiving this mail because: You

Re: [VOTE] Release Apache Tomcat Native 1.1.32

2014-10-21 Thread Konstantin Kolinko
2014-10-21 13:05 GMT+04:00 Mark Thomas ma...@apache.org: Version 1.1.32 includes the following changes: - Add support for TLS v1.1 and TLS v1.2 - Windows binaries built with APR 1.5.1 and OpenSSL 1.0.1j The proposed release artefacts can be found at [1], and the build was done using tag [2].

svn commit: r1633365 - in /tomcat/tc7.0.x/trunk: ./ webapps/docs/changelog.xml

2014-10-21 Thread kkolinko
Author: kkolinko Date: Tue Oct 21 12:59:35 2014 New Revision: 1633365 URL: http://svn.apache.org/r1633365 Log: Update changelog for BZ 47919 per r1630407 It logs not just key env vars, but all of them, and logs command line arguments. I am emphasizing CATALINA_OPTS, JAVA_OPTS, as that may be a

svn commit: r1633369 - in /tomcat/trunk/java/org/apache/tomcat/util/net/jsse: JSSESocketFactory.java res/LocalStrings.properties

2014-10-21 Thread markt
Author: markt Date: Tue Oct 21 13:07:55 2014 New Revision: 1633369 URL: http://svn.apache.org/r1633369 Log: Add some debug logging for excluded protocols Modified: tomcat/trunk/java/org/apache/tomcat/util/net/jsse/JSSESocketFactory.java

svn commit: r1633370 - in /tomcat/tc7.0.x/trunk: ./ java/org/apache/tomcat/util/net/jsse/JSSESocketFactory.java java/org/apache/tomcat/util/net/jsse/res/LocalStrings.properties

2014-10-21 Thread markt
Author: markt Date: Tue Oct 21 13:08:28 2014 New Revision: 1633370 URL: http://svn.apache.org/r1633370 Log: Add some debug logging for excluded protocols Modified: tomcat/tc7.0.x/trunk/ (props changed) tomcat/tc7.0.x/trunk/java/org/apache/tomcat/util/net/jsse/JSSESocketFactory.java

[Bug 57122] class loading during remote deployment not working (NoClassDefFoundError)

2014-10-21 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57122 --- Comment #7 from michael.baul...@knipp.de --- Yes, sorry, didn't see you question about the location of the classes. They are located in the WEB-INF/lib folder. -- You are receiving this mail because: You are the assignee for the bug.

svn commit: r1633386 - /tomcat/tc6.0.x/trunk/STATUS.txt

2014-10-21 Thread markt
Author: markt Date: Tue Oct 21 14:20:49 2014 New Revision: 1633386 URL: http://svn.apache.org/r1633386 Log: Update proposal Modified: tomcat/tc6.0.x/trunk/STATUS.txt Modified: tomcat/tc6.0.x/trunk/STATUS.txt URL:

[Bug 57116] Bio connector: Do not fallback to default protocol list if sslEnabledProtocols has no matches

2014-10-21 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57116 --- Comment #2 from Mark Thomas ma...@apache.org --- Updated patch proposed for 6.0.x to address this. -- You are receiving this mail because: You are the assignee for the bug.

Re: [VOTE] Release Apache Tomcat Native 1.1.32

2014-10-21 Thread Christopher Schultz
All, On 10/21/14 5:05 AM, Mark Thomas wrote: Version 1.1.32 includes the following changes: - Add support for TLS v1.1 and TLS v1.2 - Windows binaries built with APR 1.5.1 and OpenSSL 1.0.1j The proposed release artifacts can be found at [1], and the build was done using tag [2]. Since

Re: [VOTE] Release Apache Tomcat Native 1.1.32

2014-10-21 Thread Christopher Schultz
All, On 10/21/14 5:05 AM, Mark Thomas wrote: Version 1.1.32 includes the following changes: - Add support for TLS v1.1 and TLS v1.2 - Windows binaries built with APR 1.5.1 and OpenSSL 1.0.1j The proposed release artefacts can be found at [1], and the build was done using tag [2]. Since

svn commit: r1633393 - /tomcat/tc6.0.x/trunk/STATUS.txt

2014-10-21 Thread schultz
Author: schultz Date: Tue Oct 21 15:12:27 2014 New Revision: 1633393 URL: http://svn.apache.org/r1633393 Log: Revise vote Modified: tomcat/tc6.0.x/trunk/STATUS.txt Modified: tomcat/tc6.0.x/trunk/STATUS.txt URL:

[GUMP@vmgump]: Project tomcat-trunk-test-apr (in module tomcat-trunk) failed

2014-10-21 Thread Bill Barker
-Dobjenesis.jar=/srv/gump/public/workspace/objenesis/main/target/objenesis-2.2-SNAPSHOT.jar -Dtest.reports=output/logs-APR -Dtomcat-native.tar.gz=/srv/gump/public/workspace/apache-commons/daemon/dist/bin/commons-daemon-20141021-native-src.tar.gz -Dexamples.sources.skip=true -Djdt.jar=/srv/gump

[Bug 57123] New: Update to Eclipse ECJ 4.4.1

2014-10-21 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57123 Bug ID: 57123 Summary: Update to Eclipse ECJ 4.4.1 Product: Tomcat 8 Version: 8.0.14 Hardware: PC Status: NEW Severity: enhancement Priority: P2

[Bug 57123] Update to Eclipse ECJ 4.4.1

2014-10-21 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57123 --- Comment #1 from Konstantin Kolinko knst.koli...@gmail.com --- Created attachment 32133 -- https://issues.apache.org/bugzilla/attachment.cgi?id=32133action=edit 2014-10-21_tc8_57123_ecj441.patch Patch to update Tomcat 8 (trunk) to ECJ

Testing server SSL/TLS protocol and cipher support

2014-10-21 Thread Christopher Schultz
All, As part of my testing for the recent changes to Tomcat and tcnative, I wanted to use something like sslscan, but that tool does not support anything above TLSv1. One can use OpenSSL s_client but that's fairly tedious. I took the opportunity to write a Java client that mimics the important

[Bug 57123] Update to Eclipse ECJ 4.4.1

2014-10-21 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57123 Konstantin Kolinko knst.koli...@gmail.com changed: What|Removed |Added OS||All

Re: Testing server SSL/TLS protocol and cipher support

2014-10-21 Thread Konstantin Kolinko
2014-10-21 21:55 GMT+04:00 Christopher Schultz ch...@christopherschultz.net: All, As part of my testing for the recent changes to Tomcat and tcnative, I wanted to use something like sslscan, but that tool does not support anything above TLSv1. One can use OpenSSL s_client but that's fairly

Re: Testing server SSL/TLS protocol and cipher support

2014-10-21 Thread Christopher Schultz
Konstantin, On 10/21/14 2:18 PM, Konstantin Kolinko wrote: 2014-10-21 21:55 GMT+04:00 Christopher Schultz ch...@christopherschultz.net: All, As part of my testing for the recent changes to Tomcat and tcnative, I wanted to use something like sslscan, but that tool does not support anything

svn commit: r1633440 - in /tomcat/trunk: java/javax/el/ImportHandler.java test/javax/el/TestImportHandler.java webapps/docs/changelog.xml

2014-10-21 Thread markt
Author: markt Date: Tue Oct 21 19:26:01 2014 New Revision: 1633440 URL: http://svn.apache.org/r1633440 Log: Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=57113 Fix broken package imports in Expression Language when more than one package was imported and the desired class was not in the

[Bug 57113] ImportHandler not returning class properly from resolveClass()

2014-10-21 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57113 Mark Thomas ma...@apache.org changed: What|Removed |Added Status|NEW |RESOLVED

[Bug 53952] Add support for TLS 1.1 and 1.2

2014-10-21 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=53952 --- Comment #44 from Christopher Schultz ch...@christopherschultz.net --- (In reply to Ralf Hauser from comment #43) I guess comment 30 ff. refers to https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566 ? Yes. Patches are

svn commit: r1633447 - in /tomcat/trunk: java/org/apache/tomcat/util/descriptor/web/JspPropertyGroup.java webapps/docs/changelog.xml

2014-10-21 Thread markt
Author: markt Date: Tue Oct 21 20:21:08 2014 New Revision: 1633447 URL: http://svn.apache.org/r1633447 Log: Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=57105 When parsing web.xml do not limit the buffer element of the jsp-property-group element to integer values as the allowed values

svn commit: r1633448 - /tomcat/trunk/java/org/apache/tomcat/util/descriptor/web/JspPropertyGroupDescriptorImpl.java

2014-10-21 Thread markt
Author: markt Date: Tue Oct 21 20:21:46 2014 New Revision: 1633448 URL: http://svn.apache.org/r1633448 Log: Simplify. These values are already Strings. Modified: tomcat/trunk/java/org/apache/tomcat/util/descriptor/web/JspPropertyGroupDescriptorImpl.java Modified:

svn commit: r1633452 - in /tomcat/tc7.0.x/trunk: ./ java/org/apache/catalina/deploy/JspPropertyGroup.java webapps/docs/changelog.xml

2014-10-21 Thread markt
Author: markt Date: Tue Oct 21 20:33:51 2014 New Revision: 1633452 URL: http://svn.apache.org/r1633452 Log: Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=57105 When parsing web.xml do not limit the buffer element of the jsp-property-group element to integer values as the allowed values

[Bug 57105] buffer under jsp-property-group in web.xml only accept integer which doesn't follow spec and cause jsp compile fail

2014-10-21 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57105 Mark Thomas ma...@apache.org changed: What|Removed |Added Status|NEW |RESOLVED

[Bug 57103] Download page should provide details on how to verify the downloads

2014-10-21 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57103 Mark Thomas ma...@apache.org changed: What|Removed |Added Status|NEW |RESOLVED

svn commit: r1633457 - in /tomcat/site/trunk: docs/download-60.html docs/download-70.html docs/download-80.html xdocs/download-60.xml xdocs/download-70.xml xdocs/download-80.xml

2014-10-21 Thread markt
Author: markt Date: Tue Oct 21 20:43:00 2014 New Revision: 1633457 URL: http://svn.apache.org/r1633457 Log: Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=57103. Add verification link Modified: tomcat/site/trunk/docs/download-60.html tomcat/site/trunk/docs/download-70.html

svn commit: r1633474 - in /tomcat/site/trunk: docs/ xdocs/

2014-10-21 Thread kkolinko
Author: kkolinko Date: Tue Oct 21 21:58:26 2014 New Revision: 1633474 URL: http://svn.apache.org/r1633474 Log: Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=57103 Add verify link to other download pages and use HTTPS for it. (Followup to r1633457) Modified:

[Bug 53952] Add support for TLS 1.1 and 1.2

2014-10-21 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=53952 --- Comment #45 from Mark Woon markw...@gmail.com --- In reply to comment #43: yes. I also agree with comment #33 - SSLv2 and SSLv3 should just be removed from the options. So glad to see that this is moving forward. -- You are

Re: [VOTE] Release Apache Tomcat Native 1.1.32

2014-10-21 Thread Mark Thomas
On 21/10/2014 10:05, Mark Thomas wrote: Version 1.1.32 includes the following changes: - Add support for TLS v1.1 and TLS v1.2 - Windows binaries built with APR 1.5.1 and OpenSSL 1.0.1j The proposed release artefacts can be found at [1], and the build was done using tag [2]. Since this

svn commit: r1633478 - in /tomcat/tc7.0.x/trunk: ./ build.xml webapps/docs/changelog.xml

2014-10-21 Thread kkolinko
Author: kkolinko Date: Tue Oct 21 22:51:35 2014 New Revision: 1633478 URL: http://svn.apache.org/r1633478 Log: Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=57079 Use Tomcat version number for jdbc-pool module when building and shipping the module as part of Tomcat. It is backport of

[Bug 57079] Use Tomcat version number in jdbc-pool manifest when building it as part of Tomcat

2014-10-21 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57079 --- Comment #2 from Konstantin Kolinko knst.koli...@gmail.com --- Backported to Tomcat 7 in r1633478 and will be in 7.0.57 onwards. -- You are receiving this mail because: You are the assignee for the bug.

svn commit: r1633484 - in /tomcat/tc7.0.x/trunk: ./ build.xml webapps/docs/changelog.xml

2014-10-21 Thread kkolinko
Author: kkolinko Date: Tue Oct 21 23:25:17 2014 New Revision: 1633484 URL: http://svn.apache.org/r1633484 Log: Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=57079 When Eclipse Compiler JAR is updated, make sure to delete its old version from Tomcat lib directory. It is backport of

Re: [VOTE] Release Apache Tomcat Native 1.1.32

2014-10-21 Thread Christopher Schultz
Mark, On 10/21/14 6:11 PM, Mark Thomas wrote: On 21/10/2014 10:05, Mark Thomas wrote: Version 1.1.32 includes the following changes: - Add support for TLS v1.1 and TLS v1.2 - Windows binaries built with APR 1.5.1 and OpenSSL 1.0.1j The proposed release artefacts can be found at [1], and

svn commit: r1633489 - in /tomcat/tc7.0.x/trunk: ./ webapps/docs/changelog.xml webapps/examples/WEB-INF/web.xml webapps/examples/jsp/chat/ webapps/examples/jsp/index.html webapps/examples/servlets/cha

2014-10-21 Thread kkolinko
Author: kkolinko Date: Tue Oct 21 23:55:32 2014 New Revision: 1633489 URL: http://svn.apache.org/r1633489 Log: Move Async and Comet examples from JSP examples page to Servlets examples page, like it have already been done in Tomcat 8. Merged r1518578, r1518581, r1518589 from tomcat/trunk.

svn commit: r1633500 - in /tomcat/trunk: build.xml webapps/docs/changelog.xml

2014-10-21 Thread kkolinko
Author: kkolinko Date: Wed Oct 22 00:40:56 2014 New Revision: 1633500 URL: http://svn.apache.org/r1633500 Log: Suppress timestamp comment in generated Javadoc. Such as !-- Generated by javadoc (version 1.7.0_65) on Wed Oct 22 09:10:36 EST 2014 -- Those comments result in one changed line per

[GUMP@vmgump]: Project tomcat-trunk-validate (in module tomcat-trunk) failed

2014-10-21 Thread Bill Barker
To whom it may engage... This is an automated request, but not an unsolicited one. For more information please visit http://gump.apache.org/nagged.html, and/or contact the folk at gene...@gump.apache.org. Project tomcat-trunk-validate has an issue affecting its community integration.