Re: Documentation Contribution: Tomcat Container Managed Security

Thanks for your feedback Mark. Its been a while, but I made some updates to address your comments. And the updated dashboards are here: * https://design.codelytics.io/tomcat/security-login-form * https://design.codelytics.io/tomcat/security-login If I was to work with one of Tomcat's expert/senior

Re: Manager applications and the Security Manager

On Fri, Jun 2, 2017 at 4:41 PM, Mark Thomas wrote: > On 02/06/2017 21:29, Christopher Schultz wrote: >> Coty, >> >> On 6/2/17 2:15 PM, Coty Sutherland wrote: >>> Hi, >> >>> I'm sure this has been brought up before, but I can't find it so I >>> figured I'd ask... >> >>> A vanilla installation of to

[Bug 60461] SIGSEGV in SSLSocket.getInfos

https://bz.apache.org/bugzilla/show_bug.cgi?id=60461 --- Comment #24 from Christopher Schultz --- Are any of the reporters of this bug able to compile their own custom tcnative library if I provide a small instrumentation patch? -- You are receiving this mail because: You are the assignee for t

[Bug 60461] SIGSEGV in SSLSocket.getInfos

https://bz.apache.org/bugzilla/show_bug.cgi?id=60461 --- Comment #23 from Christopher Schultz --- Some initial investigation based upon the initial bug report + crash dump. 1. The call from Java is AprSSLSupport.getCipherSuite 2. AprSSLSupport.getCipherSuite calls SSLSocket.getInfoS [native] ...

Re: asyncError() is not valid while in Async state DISPATCHING

On 02/06/2017 10:46, Violeta Georgieva wrote: > 2017-06-02 12:37 GMT+03:00 Mark Thomas : >> >> On 02/06/2017 10:23, Violeta Georgieva wrote: >>> Hi Mark, >>> >>> 2017-05-22 14:28 GMT+03:00 Mark Thomas : >> >> >> I'm leaning towards thinking this is an application bug. If the applica

Re: Manager applications and the Security Manager

On 02/06/2017 21:29, Christopher Schultz wrote: > Coty, > > On 6/2/17 2:15 PM, Coty Sutherland wrote: >> Hi, > >> I'm sure this has been brought up before, but I can't find it so I >> figured I'd ask... > >> A vanilla installation of tomcat fails to start the admin webapps >> with the Security

Re: Manager applications and the Security Manager

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Coty, On 6/2/17 2:15 PM, Coty Sutherland wrote: > Hi, > > I'm sure this has been brought up before, but I can't find it so I > figured I'd ask... > > A vanilla installation of tomcat fails to start the admin webapps > with the Security Manager en

[Bug 61150] New: One of the session attributes on the [host-]manager application is disallowed by the Security Manager

https://bz.apache.org/bugzilla/show_bug.cgi?id=61150 Bug ID: 61150 Summary: One of the session attributes on the [host-]manager application is disallowed by the Security Manager Product: Tomcat 8 Version: 8.0.x-trunk Hardwa

Re: Manager applications and the Security Manager

On Fri, Jun 2, 2017 at 2:29 PM, Igal @ Lucee.org wrote: > Coty, > > On 6/2/2017 11:15 AM, Coty Sutherland wrote: >> >> If you guys think this is a bug I can file a BZ and fix it :D Or, mark >> it as "Beginner" since it's trivial. > > > If it's trivial then please mark it as a Beginner if you open

Re: Manager applications and the Security Manager

Coty, On 6/2/2017 11:15 AM, Coty Sutherland wrote: If you guys think this is a bug I can file a BZ and fix it :D Or, mark it as "Beginner" since it's trivial. If it's trivial then please mark it as a Beginner if you open a ticket. It will give new contributors like myself a chance to get bet

Manager applications and the Security Manager

Hi, I'm sure this has been brought up before, but I can't find it so I figured I'd ask... A vanilla installation of tomcat fails to start the admin webapps with the Security Manager enabled. This is because the manager and host-manager webapps ship with a context.xml. The behavior isn't documente

[Bug 61149] Tomcat 8.5.14 - Crash in [tcnative-1.dll+0x1091a0]

https://bz.apache.org/bugzilla/show_bug.cgi?id=61149 Remy Maucherat changed: What|Removed |Added Resolution|--- |DUPLICATE Status|NEW

[Bug 60461] SIGSEGV in SSLSocket.getInfos

https://bz.apache.org/bugzilla/show_bug.cgi?id=60461 Remy Maucherat changed: What|Removed |Added CC||t.reisin...@sisworld.com --- Comment

[Bug 61149] New: Tomcat 8.5.14 - Crash in [tcnative-1.dll+0x1091a0]

https://bz.apache.org/bugzilla/show_bug.cgi?id=61149 Bug ID: 61149 Summary: Tomcat 8.5.14 - Crash in [tcnative-1.dll+0x1091a0] Product: Tomcat Native Version: 1.2.10 Hardware: PC Status: NEW Severity: critical P

[Bug 61149] Tomcat 8.5.14 - Crash in [tcnative-1.dll+0x1091a0]

https://bz.apache.org/bugzilla/show_bug.cgi?id=61149 Thomas changed: What|Removed |Added CC||t.reisin...@sisworld.com OS|

Re: Things that we can do to increase contributor involvement?

On 2 June 2017 15:27:08 BST, Violeta Georgieva wrote: >Hi, > >2017-05-31 6:07 GMT+03:00 Coty Sutherland : >> >> Hi all, >> >> I've been thinking about things that we could do for Tomcat to help >> bring in new contributors and to be more appealing to new developers. >> Right now we have http://tom

Re: svn commit: r1797392 - in /tomcat/trunk/java: javax/el/Util.java org/apache/el/util/ReflectionUtil.java

On 2 June 2017 15:06:00 BST, schu...@apache.org wrote: >Author: schultz >Date: Fri Jun 2 14:06:00 2017 >New Revision: 1797392 > >URL: http://svn.apache.org/viewvc?rev=1797392&view=rev >Log: >Add equals() and hashCode() methods to Util.MatchResult for >completeness. > >Modified: >tomcat/trunk/j

[GitHub] tomcat issue #56: Convert Cluster Manager human-readable SendOptions names t...

Github user isapir commented on the issue: https://github.com/apache/tomcat/pull/56 That's fine. --- If your project is set up for it, you can reply to this email and have your reply appear on GitHub as well. If your project does not have this feature enabled and wishes so, or if the

Re: Things that we can do to increase contributor involvement?

On Fri, Jun 2, 2017 at 10:27 AM, Violeta Georgieva wrote: > Hi, > > 2017-05-31 6:07 GMT+03:00 Coty Sutherland : >> >> Hi all, >> >> I've been thinking about things that we could do for Tomcat to help >> bring in new contributors and to be more appealing to new developers. >> Right now we have http

Re: Things that we can do to increase contributor involvement?

Hi, 2017-05-31 6:07 GMT+03:00 Coty Sutherland : > > Hi all, > > I've been thinking about things that we could do for Tomcat to help > bring in new contributors and to be more appealing to new developers. > Right now we have http://tomcat.apache.org/getinvolved.html which has > a few bullet points

[GitHub] tomcat issue #56: Convert Cluster Manager human-readable SendOptions names t...

Github user ChristopherSchultz commented on the issue: https://github.com/apache/tomcat/pull/56 How would you like your name to appear in the changelog? "Patch provided by Igal Sapir"? --- If your project is set up for it, you can reply to this email and have your reply appear on Git

svn commit: r1797392 - in /tomcat/trunk/java: javax/el/Util.java org/apache/el/util/ReflectionUtil.java

Author: schultz Date: Fri Jun 2 14:06:00 2017 New Revision: 1797392 URL: http://svn.apache.org/viewvc?rev=1797392&view=rev Log: Add equals() and hashCode() methods to Util.MatchResult for completeness. Modified: tomcat/trunk/java/javax/el/Util.java tomcat/trunk/java/org/apache/el/util/Re

Re: Merging GitHub PR into svn

2017-06-02 16:52 GMT+03:00 Christopher Schultz : > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Violetta, > > On 6/2/17 9:43 AM, Violeta Georgieva wrote: > > 2017-06-02 16:23 GMT+03:00 Christopher Schultz > > >> : > >> > > All, > > > > I've never done this before, and my git-fu is not s

Re: Merging GitHub PR into svn

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Violetta, On 6/2/17 9:43 AM, Violeta Georgieva wrote: > 2017-06-02 16:23 GMT+03:00 Christopher Schultz > > : >> > All, > > I've never done this before, and my git-fu is not strong. > > What's the best way to take a GitHub PR and merge it into e.g

Re: Merging GitHub PR into svn

2017-06-02 16:23 GMT+03:00 Christopher Schultz : > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > All, > > I've never done this before, and my git-fu is not strong. > > What's the best way to take a GitHub PR and merge it into e.g. Tomcat > trunk? I can definitely do it like this: > > 1. G

[GitHub] tomcat pull request #:

Github user ChristopherSchultz commented on the pull request: https://github.com/apache/tomcat/commit/d91d7a802b67ab049b33df9db017ef31d3247450#commitcomment-22378483 @powerYao Because in the distant past, someone decided that having those extra parentheses was good coding style. ---

Re: Merging GitHub PR into svn

On 2 June 2017 14:23:30 BST, Christopher Schultz wrote: >All, > >I've never done this before, and my git-fu is not strong. > >What's the best way to take a GitHub PR and merge it into e.g. Tomcat >trunk? I can definitely do it like this: > >1. Grab the PR and convert it into a patch file Add .pa

Merging GitHub PR into svn

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, I've never done this before, and my git-fu is not strong. What's the best way to take a GitHub PR and merge it into e.g. Tomcat trunk? I can definitely do it like this: 1. Grab the PR and convert it into a patch file 2. Apply the patch to my

[GitHub] tomcat pull request #:

Github user powerYao commented on the pull request: https://github.com/apache/tomcat/commit/d91d7a802b67ab049b33df9db017ef31d3247450#commitcomment-22377283 why the origin code hava ( ) ? --- If your project is set up for it, you can reply to this email and have your reply appear on G

svn commit: r1797369 - in /tomcat/site/trunk: docs/lists.html xdocs/lists.xml

Author: violetagg Date: Fri Jun 2 11:07:15 2017 New Revision: 1797369 URL: http://svn.apache.org/viewvc?rev=1797369&view=rev Log: Update links to Nabble Modified: tomcat/site/trunk/docs/lists.html tomcat/site/trunk/xdocs/lists.xml Modified: tomcat/site/trunk/docs/lists.html URL: http:/

buildbot success in on tomcat-8-trunk

The Buildbot has detected a restored build on builder tomcat-8-trunk while building . Full details are available at: https://ci.apache.org/builders/tomcat-8-trunk/builds/1023 Buildbot URL: https://ci.apache.org/ Buildslave for this Build: silvanus_ubuntu Build Reason: The AnyBranchScheduler

Announcing: Early-Access builds of JDK 9 for Alpine Linux/musl at jdk.java.net/9/

Hi Mark, * * ** *Announcing: Early-Access builds of JDK 9 for Alpine Linux/musl at jdk.java.net/9/ [1] * * As of today there are pre-built Early-Access (EA) JDK binaries for Alpine Linux/musl at jdk.java.net/9/** o look for “Alpine Linux”. [1] * The Alpine Linux build is compatibl

[Bug 61146] javax.ejb.EJB doesn't contain lookup method

https://bz.apache.org/bugzilla/show_bug.cgi?id=61146 Mark Thomas changed: What|Removed |Added Status|NEW |RESOLVED Resolution|---

svn commit: r1797363 - in /tomcat/tc7.0.x/trunk: ./ java/javax/ejb/EJB.java webapps/docs/changelog.xml

Author: markt Date: Fri Jun 2 09:54:12 2017 New Revision: 1797363 URL: http://svn.apache.org/viewvc?rev=1797363&view=rev Log: Fix https://bz.apache.org/bugzilla/show_bug.cgi?id=61146 Add missing lookup() method to @EJB annotation in the annotations API. Patch provided by Katya Todorova. Modified

svn commit: r1797361 - in /tomcat/tc7.0.x/trunk/java/javax/annotation: Generated.java PostConstruct.java PreDestroy.java Resources.java security/DeclareRoles.java security/DenyAll.java security/Permit

Author: markt Date: Fri Jun 2 09:53:41 2017 New Revision: 1797361 URL: http://svn.apache.org/viewvc?rev=1797361&view=rev Log: Correct import order Modified: tomcat/tc7.0.x/trunk/java/javax/annotation/Generated.java tomcat/tc7.0.x/trunk/java/javax/annotation/PostConstruct.java tomcat/

svn commit: r1797360 - in /tomcat/tc8.0.x/trunk: ./ java/javax/ejb/EJB.java webapps/docs/changelog.xml

Author: markt Date: Fri Jun 2 09:51:59 2017 New Revision: 1797360 URL: http://svn.apache.org/viewvc?rev=1797360&view=rev Log: Fix https://bz.apache.org/bugzilla/show_bug.cgi?id=61146 Add missing lookup() method to @EJB annotation in the annotations API. Patch provided by Katya Todorova. Modified

svn commit: r1797359 - in /tomcat/tc8.0.x/trunk/java/javax/annotation: ./ security/

Author: markt Date: Fri Jun 2 09:51:13 2017 New Revision: 1797359 URL: http://svn.apache.org/viewvc?rev=1797359&view=rev Log: Correct import order Modified: tomcat/tc8.0.x/trunk/java/javax/annotation/Generated.java tomcat/tc8.0.x/trunk/java/javax/annotation/PostConstruct.java tomcat/

svn commit: r1797358 - in /tomcat/tc8.5.x/trunk: ./ java/javax/ejb/EJB.java webapps/docs/changelog.xml

Author: markt Date: Fri Jun 2 09:50:27 2017 New Revision: 1797358 URL: http://svn.apache.org/viewvc?rev=1797358&view=rev Log: Fix https://bz.apache.org/bugzilla/show_bug.cgi?id=61146 Add missing lookup() method to @EJB annotation in the annotations API. Patch provided by Katya Todorova. Modified

svn commit: r1797357 - in /tomcat/tc8.5.x/trunk/java/javax/annotation: ./ security/

Author: markt Date: Fri Jun 2 09:49:39 2017 New Revision: 1797357 URL: http://svn.apache.org/viewvc?rev=1797357&view=rev Log: Correct import order Modified: tomcat/tc8.5.x/trunk/java/javax/annotation/Generated.java tomcat/tc8.5.x/trunk/java/javax/annotation/PostConstruct.java tomcat/

svn commit: r1797355 - in /tomcat/trunk: java/javax/ejb/EJB.java webapps/docs/changelog.xml

Author: markt Date: Fri Jun 2 09:48:44 2017 New Revision: 1797355 URL: http://svn.apache.org/viewvc?rev=1797355&view=rev Log: Fix https://bz.apache.org/bugzilla/show_bug.cgi?id=61146 Add missing lookup() method to @EJB annotation in the annotations API. Patch provided by Katya Todorova. Modified

svn commit: r1797354 - in /tomcat/trunk/java/javax/annotation: ./ security/

Author: markt Date: Fri Jun 2 09:48:02 2017 New Revision: 1797354 URL: http://svn.apache.org/viewvc?rev=1797354&view=rev Log: Correct import order Modified: tomcat/trunk/java/javax/annotation/Generated.java tomcat/trunk/java/javax/annotation/PostConstruct.java tomcat/trunk/java/javax

Re: asyncError() is not valid while in Async state DISPATCHING

2017-06-02 12:37 GMT+03:00 Mark Thomas : > > On 02/06/2017 10:23, Violeta Georgieva wrote: > > Hi Mark, > > > > 2017-05-22 14:28 GMT+03:00 Mark Thomas : > > > > >> I'm leaning towards thinking this is an application bug. > >> > >> If the application has two non-container threads, A and B, then, as

[Bug 61146] javax.ejb.EJB doesn't contain lookup method

https://bz.apache.org/bugzilla/show_bug.cgi?id=61146 Mark Thomas changed: What|Removed |Added Attachment #35027|0 |1 is patch|

Re: asyncError() is not valid while in Async state DISPATCHING

On 02/06/2017 10:23, Violeta Georgieva wrote: > Hi Mark, > > 2017-05-22 14:28 GMT+03:00 Mark Thomas : >> I'm leaning towards thinking this is an application bug. >> >> If the application has two non-container threads, A and B, then, as per >> section 2.3.3.4 of the Servlet spec, the application

svn commit: r1797346 - in /tomcat/tc8.0.x/trunk: ./ java/org/apache/jasper/compiler/Compiler.java

Author: markt Date: Fri Jun 2 09:30:55 2017 New Revision: 1797346 URL: http://svn.apache.org/viewvc?rev=1797346&view=rev Log: Revert changes that should not have been included in 1797341 Modified: tomcat/tc8.0.x/trunk/ (props changed) tomcat/tc8.0.x/trunk/java/org/apache/jasper/compile

svn commit: r1797345 - in /tomcat/tc8.5.x/trunk: ./ java/org/apache/jasper/compiler/Compiler.java

Author: markt Date: Fri Jun 2 09:30:27 2017 New Revision: 1797345 URL: http://svn.apache.org/viewvc?rev=1797345&view=rev Log: Revert changes that should not have been included in 1797339 Modified: tomcat/tc8.5.x/trunk/ (props changed) tomcat/tc8.5.x/trunk/java/org/apache/jasper/compile

svn commit: r1797344 - /tomcat/trunk/java/org/apache/jasper/compiler/Compiler.java

Author: markt Date: Fri Jun 2 09:29:37 2017 New Revision: 1797344 URL: http://svn.apache.org/viewvc?rev=1797344&view=rev Log: Revert changes that should not have been included in 1797338 Modified: tomcat/trunk/java/org/apache/jasper/compiler/Compiler.java Modified: tomcat/trunk/java/org/apa

[Bug 61145] Missing @Documented annotation in some javax.annotation classes

https://bz.apache.org/bugzilla/show_bug.cgi?id=61145 Mark Thomas changed: What|Removed |Added Status|NEW |RESOLVED Resolution|---

Re: svn commit: r1797338 - in /tomcat/trunk: java/javax/annotation/ java/javax/annotation/security/ java/org/apache/jasper/compiler/ webapps/docs/

On 02/06/2017 10:19, ma...@apache.org wrote: > Author: markt > Date: Fri Jun 2 09:19:28 2017 > New Revision: 1797338 > > URL: http://svn.apache.org/viewvc?rev=1797338&view=rev > Log: > Fix https://bz.apache.org/bugzilla/show_bug.cgi?id=61145 > Add missing @Documented annotation to annotations in

svn commit: r1797343 - in /tomcat/tc7.0.x/trunk: ./ java/javax/annotation/ java/javax/annotation/security/ webapps/docs/

Author: markt Date: Fri Jun 2 09:23:40 2017 New Revision: 1797343 URL: http://svn.apache.org/viewvc?rev=1797343&view=rev Log: Fix https://bz.apache.org/bugzilla/show_bug.cgi?id=61145 Add missing @Documented annotation to annotations in the annotations API. Patch provided by Katya Todorova. Modi

Re: asyncError() is not valid while in Async state DISPATCHING

Hi Mark, 2017-05-22 14:28 GMT+03:00 Mark Thomas : > > On 10/05/17 20:50, Violeta Georgieva wrote: > > Hi, > > > > 2017-05-02 12:54 GMT+03:00 Violeta Georgieva : > >> > >> > >> 2017-05-02 12:25 GMT+03:00 Mark Thomas : > >>> > >>> On 02/05/17 09:52, Violeta Georgieva wrote: > Hi, > >

svn commit: r1797341 - in /tomcat/tc8.0.x/trunk: ./ java/javax/annotation/ java/javax/annotation/security/ java/org/apache/jasper/compiler/ webapps/docs/

Author: markt Date: Fri Jun 2 09:22:16 2017 New Revision: 1797341 URL: http://svn.apache.org/viewvc?rev=1797341&view=rev Log: Fix https://bz.apache.org/bugzilla/show_bug.cgi?id=61145 Add missing @Documented annotation to annotations in the annotations API. Patch provided by Katya Todorova. Modi

svn commit: r1797339 - in /tomcat/tc8.5.x/trunk: ./ java/javax/annotation/ java/javax/annotation/security/ java/org/apache/jasper/compiler/ webapps/docs/

Author: markt Date: Fri Jun 2 09:21:05 2017 New Revision: 1797339 URL: http://svn.apache.org/viewvc?rev=1797339&view=rev Log: Fix https://bz.apache.org/bugzilla/show_bug.cgi?id=61145 Add missing @Documented annotation to annotations in the annotations API. Patch provided by Katya Todorova. Modi

svn commit: r1797338 - in /tomcat/trunk: java/javax/annotation/ java/javax/annotation/security/ java/org/apache/jasper/compiler/ webapps/docs/

Author: markt Date: Fri Jun 2 09:19:28 2017 New Revision: 1797338 URL: http://svn.apache.org/viewvc?rev=1797338&view=rev Log: Fix https://bz.apache.org/bugzilla/show_bug.cgi?id=61145 Add missing @Documented annotation to annotations in the annotations API. Patch provided by Katya Todorova. Modi

[Bug 61145] Missing @Documented annotation in some javax.annotation classes

https://bz.apache.org/bugzilla/show_bug.cgi?id=61145 --- Comment #1 from Mark Thomas --- Confirmed. This also needs back-porting to 8.x and 7.x (less Priority which was introduced in Java EE 7). Working on this now... -- You are receiving this mail because: You are the assignee for the bug. -

[Bug 61145] Missing @Documented annotation in some javax.annotation classes

https://bz.apache.org/bugzilla/show_bug.cgi?id=61145 Violeta Georgieva changed: What|Removed |Added Attachment #35026|0 |1 is patch|

[Bug 61146] New: javax.ejb.EJB doesn't contain lookup method

https://bz.apache.org/bugzilla/show_bug.cgi?id=61146 Bug ID: 61146 Summary: javax.ejb.EJB doesn't contain lookup method Product: Tomcat 9 Version: unspecified Hardware: PC OS: Mac OS X 10.1 Status: NEW Sev

[Bug 61145] New: Missing @Documented annotation in some javax.annotation classes

https://bz.apache.org/bugzilla/show_bug.cgi?id=61145 Bug ID: 61145 Summary: Missing @Documented annotation in some javax.annotation classes Product: Tomcat 9 Version: unspecified Hardware: PC OS: Mac OS X 10

[Bug 60674] Allow subclassing of org.apache.catalina.filters.CorsFilter

https://bz.apache.org/bugzilla/show_bug.cgi?id=60674 --- Comment #5 from Ralf Hauser --- Tested in 8.5.14 --> works fine. Thx for the clarifications that make my comment obsolete - sorry. -- You are receiving this mail because: You are the assignee for the bug.