Re: appName for JAASRealm

2018-07-31 Thread Mark Thomas
On 31/07/18 19:39, Felix Schumacher wrote: > Hi all, > > while looking into the docs and code for JAASRealm I found that the docs > say that appName has to be set for the JAASRealm, while the code says > that it defaults to Catalina (well the Containers name to be exact). > > Is there any reason

svn commit: r1837177 - in /tomcat/tc8.5.x/trunk: ./ test/org/apache/tomcat/util/net/TestClientCert.java test/org/apache/tomcat/util/net/TesterSupport.java

2018-07-31 Thread markt
Author: markt Date: Tue Jul 31 21:16:59 2018 New Revision: 1837177 URL: http://svn.apache.org/viewvc?rev=1837177&view=rev Log: Make tests more robust and not dependent on order of individual test execution. Modified: tomcat/tc8.5.x/trunk/ (props changed) tomcat/tc8.5.x/trunk/test/org/ap

svn commit: r1837176 - in /tomcat/trunk/test/org/apache/tomcat/util/net: TestClientCert.java TesterSupport.java

2018-07-31 Thread markt
Author: markt Date: Tue Jul 31 21:16:28 2018 New Revision: 1837176 URL: http://svn.apache.org/viewvc?rev=1837176&view=rev Log: Make tests more robust and not dependent on order of individual test execution. Modified: tomcat/trunk/test/org/apache/tomcat/util/net/TestClientCert.java tomcat/

appName for JAASRealm

2018-07-31 Thread Felix Schumacher
Hi all, while looking into the docs and code for JAASRealm I found that the docs say that appName has to be set for the JAASRealm, while the code says that it defaults to Catalina (well the Containers name to be exact). Is there any reason that the doc says it has to be set? Regards,  Felix

svn commit: r1837171 - /tomcat/trunk/java/org/apache/catalina/realm/JAASRealm.java

2018-07-31 Thread fschumacher
Author: fschumacher Date: Tue Jul 31 18:27:48 2018 New Revision: 1837171 URL: http://svn.apache.org/viewvc?rev=1837171&view=rev Log: Give correct number of parameters to debug log message. Modified: tomcat/trunk/java/org/apache/catalina/realm/JAASRealm.java Modified: tomcat/trunk/java/org/ap

svn commit: r1837158 - in /tomcat/tc7.0.x/trunk: ./ java/org/apache/tomcat/util/MultiThrowable.java

2018-07-31 Thread markt
Author: markt Date: Tue Jul 31 15:30:34 2018 New Revision: 1837158 URL: http://svn.apache.org/viewvc?rev=1837158&view=rev Log: Make it clear the class is not threadsafe Modified: tomcat/tc7.0.x/trunk/ (props changed) tomcat/tc7.0.x/trunk/java/org/apache/tomcat/util/MultiThrowable.java

svn commit: r1837157 - in /tomcat/tc8.5.x/trunk: ./ java/org/apache/tomcat/util/MultiThrowable.java

2018-07-31 Thread markt
Author: markt Date: Tue Jul 31 15:30:13 2018 New Revision: 1837157 URL: http://svn.apache.org/viewvc?rev=1837157&view=rev Log: Make it clear the class is not threadsafe Modified: tomcat/tc8.5.x/trunk/ (props changed) tomcat/tc8.5.x/trunk/java/org/apache/tomcat/util/MultiThrowable.java

svn commit: r1837156 - /tomcat/trunk/java/org/apache/tomcat/util/MultiThrowable.java

2018-07-31 Thread markt
Author: markt Date: Tue Jul 31 15:29:41 2018 New Revision: 1837156 URL: http://svn.apache.org/viewvc?rev=1837156&view=rev Log: Make it clear the class is not threadsafe Modified: tomcat/trunk/java/org/apache/tomcat/util/MultiThrowable.java Modified: tomcat/trunk/java/org/apache/tomcat/util/M

JDK 11 Early Access build 22 & JDK 12 Early Access b02 are available.

2018-07-31 Thread Mark Thomas
On 31/07/18 15:19, Rory O'Donnell wrote: > Hi Mark, > > Does the latest JDK 11 EA build 24 also fail ? If yes, could you log a > bug as we are now > > in Rampdown Phase 2. > > Thanks,Rory I do see the failure with JDK 11 EA build 24 as well. I'm looking at this now. My instinct is that this is

Re: svn commit: r1837133 - in /tomcat/trunk: java/org/apache/catalina/core/ContainerBase.java java/org/apache/tomcat/util/MultiThrowable.java test/org/apache/catalina/startup/TestTomcat.java webapps/d

2018-07-31 Thread Mark Thomas
On 31/07/18 15:05, Christopher Schultz wrote: > Mark, > > On 7/31/18 8:03 AM, ma...@apache.org wrote: >> Author: markt Date: Tue Jul 31 12:03:26 2018 New Revision: 1837133 > >> URL: http://svn.apache.org/viewvc?rev=1837133&view=rev Log: >> Introduce a new class - MultiThrowable - to report excep

Re: JDK 11 Early Access build 22 & JDK 12 Early Access b02 are available.

2018-07-31 Thread Rory O'Donnell
Hi Mark, Does the latest JDK 11 EA build 24 also fail ? If yes, could you log a bug as we are now in Rampdown Phase 2. Thanks,Rory On 31/07/2018 15:10, Mark Thomas wrote: On 17/07/18 12:26, Rory O'Donnell wrote: *JDK 12 Early Access  Build 02 is available at **http://jdk.java.net/12/*

Re: JDK 11 Early Access build 22 & JDK 12 Early Access b02 are available.

2018-07-31 Thread Mark Thomas
On 17/07/18 12:26, Rory O'Donnell wrote: > *JDK 12 Early Access  Build 02 is available at **http://jdk.java.net/12/* I've just run the Tomcat 9 test suite with the JDK 12 EA4 build and I see a few TLS related failures: [concat] Testsuites with failed tests: [concat] TEST-org.apache.tomca

[Bug 62585] CorsFilter `supportsCredentials` and `anyOriginAllowed` cannot co-exist

2018-07-31 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62585 Mark Thomas changed: What|Removed |Added Resolution|--- |WONTFIX Status|NEW

Re: svn commit: r1837133 - in /tomcat/trunk: java/org/apache/catalina/core/ContainerBase.java java/org/apache/tomcat/util/MultiThrowable.java test/org/apache/catalina/startup/TestTomcat.java webapps/d

2018-07-31 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 7/31/18 8:03 AM, ma...@apache.org wrote: > Author: markt Date: Tue Jul 31 12:03:26 2018 New Revision: 1837133 > > URL: http://svn.apache.org/viewvc?rev=1837133&view=rev Log: > Introduce a new class - MultiThrowable - to report exceptions

[Bug 62582] Please add OWASP Dependency Check to the build for all Tomcat componets

2018-07-31 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62582 --- Comment #7 from Christopher Schultz --- For those interested, here is the dependency-check target I knocked-up in a few minutes. you can throw it onto the end of your build.xml in Tomcat and run it. You are responsible for downloading the "

[Bug 62582] Please add OWASP Dependency Check to the build for all Tomcat componets

2018-07-31 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62582 --- Comment #6 from Christopher Schultz --- (In reply to ABakerIII from comment #3) > Mark Thomas : I have seen several yr old, known vulnerabilities in many open > source projects. Many of those could be detected by OWASP D.C. and culled. > I

[Bug 60594] RFC 7230/3986 url requirement that prevents unencoded curly braces should be optional, since it breaks existing sites

2018-07-31 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=60594 --- Comment #32 from Christopher Schultz --- URLs can contain sensitive information. Access logs are expected to contains URLs and, if sensitive information is expected, those files can be cleansed. It may be surprising to find a URL in a log

[Bug 62582] Please add OWASP Dependency Check to the build for all Tomcat componets

2018-07-31 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62582 Mark Thomas changed: What|Removed |Added Status|NEW |RESOLVED Resolution|---

Re: Release Date for Samba 4.9.0rc2

2018-07-31 Thread Mark Thomas
On 31/07/18 14:44, Silambarasan Madhappan wrote: > Hi Team, > > Please let us know the release date for Samba *4.9.0rc2* ? Wrong list. Mark - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-

Release Date for Samba 4.9.0rc2

2018-07-31 Thread Silambarasan Madhappan
Hi Team, Please let us know the release date for Samba *4.9.0rc2* ? Thanks, Silam

[Bug 62558] Tomcat Russian localization

2018-07-31 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62558 --- Comment #8 from Christopher Schultz --- (In reply to Ivan Krasnov from comment #7) > For me as a student it's a big honor seeing that my project is not useless. This is how open-source communities work; we are happy to have you participate

buildbot success in on tomcat-trunk

2018-07-31 Thread buildbot
The Buildbot has detected a restored build on builder tomcat-trunk while building . Full details are available at: https://ci.apache.org/builders/tomcat-trunk/builds/3472 Buildbot URL: https://ci.apache.org/ Buildslave for this Build: silvanus_ubuntu Build Reason: The AnyBranchScheduler sch

svn commit: r1837135 - in /tomcat/tc7.0.x/trunk: ./ java/org/apache/catalina/core/ContainerBase.java java/org/apache/tomcat/util/MultiThrowable.java test/org/apache/catalina/startup/TestTomcat.java we

2018-07-31 Thread markt
Author: markt Date: Tue Jul 31 12:07:05 2018 New Revision: 1837135 URL: http://svn.apache.org/viewvc?rev=1837135&view=rev Log: Introduce a new class - MultiThrowable - to report exceptions when multiple actions are taken where each action may throw an exception but all actions are taken before a

svn commit: r1837134 - in /tomcat/tc8.5.x/trunk: ./ java/org/apache/catalina/core/ContainerBase.java java/org/apache/tomcat/util/MultiThrowable.java test/org/apache/catalina/startup/TestTomcat.java we

2018-07-31 Thread markt
Author: markt Date: Tue Jul 31 12:04:08 2018 New Revision: 1837134 URL: http://svn.apache.org/viewvc?rev=1837134&view=rev Log: Introduce a new class - MultiThrowable - to report exceptions when multiple actions are taken where each action may throw an exception but all actions are taken before a

svn commit: r1837132 - /tomcat/trunk/webapps/docs/config/cluster-membership.xml

2018-07-31 Thread markt
Author: markt Date: Tue Jul 31 12:03:15 2018 New Revision: 1837132 URL: http://svn.apache.org/viewvc?rev=1837132&view=rev Log: ws police Modified: tomcat/trunk/webapps/docs/config/cluster-membership.xml Modified: tomcat/trunk/webapps/docs/config/cluster-membership.xml URL: http://svn.apache

svn commit: r1837133 - in /tomcat/trunk: java/org/apache/catalina/core/ContainerBase.java java/org/apache/tomcat/util/MultiThrowable.java test/org/apache/catalina/startup/TestTomcat.java webapps/docs/

2018-07-31 Thread markt
Author: markt Date: Tue Jul 31 12:03:26 2018 New Revision: 1837133 URL: http://svn.apache.org/viewvc?rev=1837133&view=rev Log: Introduce a new class - MultiThrowable - to report exceptions when multiple actions are taken where each action may throw an exception but all actions are taken before a

[Bug 60594] RFC 7230/3986 url requirement that prevents unencoded curly braces should be optional, since it breaks existing sites

2018-07-31 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=60594 --- Comment #31 from Sven Schliesing --- Is there a reason why the error message does not log the URL? It's pretty hard to fix any calls if you do not know what exactly triggers this error. -- You are receiving this mail because: You are the

buildbot failure in on tomcat-trunk

2018-07-31 Thread buildbot
The Buildbot has detected a new failure on builder tomcat-trunk while building . Full details are available at: https://ci.apache.org/builders/tomcat-trunk/builds/3470 Buildbot URL: https://ci.apache.org/ Buildslave for this Build: silvanus_ubuntu Build Reason: The AnyBranchScheduler schedu

svn commit: r1837127 - in /tomcat/trunk/java/org/apache/catalina/tribes/membership: LocalStrings.properties StaticMembershipProvider.java

2018-07-31 Thread kfujino
Author: kfujino Date: Tue Jul 31 08:43:21 2018 New Revision: 1837127 URL: http://svn.apache.org/viewvc?rev=1837127&view=rev Log: remove Auto-generated catch blocks. Modified: tomcat/trunk/java/org/apache/catalina/tribes/membership/LocalStrings.properties tomcat/trunk/java/org/apache/cat

svn commit: r1837124 - in /tomcat/trunk/webapps/docs: changelog.xml config/cluster-membership.xml config/cluster.xml

2018-07-31 Thread kfujino
Author: kfujino Date: Tue Jul 31 08:23:36 2018 New Revision: 1837124 URL: http://svn.apache.org/viewvc?rev=1837124&view=rev Log: Add documents for Static Membership service. Modified: tomcat/trunk/webapps/docs/changelog.xml tomcat/trunk/webapps/docs/config/cluster-membership.xml tomca

[Bug 62585] CorsFilter `supportsCredentials` and `anyOriginAllowed` cannot co-exist

2018-07-31 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62585 Fuwei Chin changed: What|Removed |Added OS||All --- Comment #1 from Fuwei Chin --- S

[Bug 62585] New: CorsFilter `supportsCredentials` and `anyOriginAllowed` cannot co-exist

2018-07-31 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62585 Bug ID: 62585 Summary: CorsFilter `supportsCredentials` and `anyOriginAllowed` cannot co-exist Product: Tomcat 8 Version: 8.5.32 Hardware: PC Status: NEW

[Bug 62582] Please add OWASP Dependency Check to the build for all Tomcat componets

2018-07-31 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62582 --- Comment #4 from mgrigorov --- I have the same experience as Chris - the Maven plugin slowed down the build of our application so much that we had to find out how to tell Teamcity not to time it out. As Mark explained there is not much to c