Re: Tomcat 7.0.34 and ecj 3.7.2/4.2.1

2013-01-10 Thread Jess Holle
Stick with the older ecj -- the newer one is broken. On 1/10/2013 9:22 PM, Ralph Schaer wrote: Hi Tomcat 7.0.34 bumped ecj to version 4.2.1. But the pom file of tomcat-embed-jasper still points to version 3.7.2 of ecj. Is it safe to use ecj 3.7.2 with Tomcat 7.0.34? It's unfortunately not possi

RE: Restricting ciphers

2013-01-10 Thread Martin Gainty
http://security.stackexchange.com/questions/7440/what-ciphers-should-i-use-in-my-web-server-after-i-configure-my-ssl-certificate With a RSA key you can nominally use the "RSA" and "DHE_RSA" cipher suite. But if the server certificate has a Key Usage extension which does not include the "keyEncip

RE: Restricting ciphers

2013-01-10 Thread Martin Gainty
its a simple question what does ciphers parameter in Connector have anything to do with the supported ciphers from the key itself the 2 are disconnected please dont waste my time and anyone elses with insults when you are unable to answer this simple question Martin Gainty _

Re: Restricting ciphers

2013-01-10 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Martin, Honestly, I'm not sure why I'm feeding the troll at this point. Maybe I'm trying to atone for some horrible crime I can't remember. On 1/10/13 10:05 AM, Martin Gainty wrote: > terminology : Nobody was arguing about terminology. Next time,

Re: add database resource

2013-01-10 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Leon, On 1/10/13 2:37 PM, leon.m...@hccnet.nl wrote: > I've changed it to this, but still no result... I told you fixing this stuff wasn't going to fix your real problem. It's just going to make your software run better in general. > > > type="

Re: Converting JSSE configuation to APR/native

2013-01-10 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Soumya, On 1/10/13 3:37 AM, k.b.sou...@accenture.com wrote: > We don't have openSSL installed. Can't we configure APR/native > without openssl? To paraphrase Tom, you can configure it with a gold-plated Rolls Royce, as long as you pay for it. You

RE: JNDI setup oracle 11 g

2013-01-10 Thread Propes, Barry L
Oh ok, very good! -Original Message- From: tsidhu [mailto:tsidh...@yahoo.com] Sent: Thursday, January 10, 2013 3:20 PM To: users@tomcat.apache.org Subject: Re: JNDI setup oracle 11 g Thank you all for the help. I manged to resolve it. It was actually "human error" :(. I was initially d

Re: JNDI setup oracle 11 g

2013-01-10 Thread tsidhu
Thank you all for the help. I manged to resolve it.  It was actually "human error" :(. I was initially deploying the Oracle JAR file via Eclipse, and then switched to put it in the containers lib directory.  Well Eclipse thought I was still trying to deploy the Oracle JAR which was nio longer

RE: JNDI setup oracle 11 g

2013-01-10 Thread Propes, Barry L
And FWIW, Tony, I'm using this oracle jar. ojdbc6.jar -Original Message- From: Marco de Booij [mailto:marco.develo...@debooy.eu] Sent: Thursday, January 10, 2013 2:24 PM To: users@tomcat.apache.org Subject: Re: JNDI setup oracle 11 g If you get an error when you provide a wrong username

RE: JNDI setup oracle 11 g

2013-01-10 Thread Propes, Barry L
I was going to ask this, too. Which oracle jar are you using for this? -Original Message- From: Marco de Booij [mailto:marco.develo...@debooy.eu] Sent: Thursday, January 10, 2013 2:24 PM To: users@tomcat.apache.org Subject: Re: JNDI setup oracle 11 g If you get an error when you provide

RE: add database resource

2013-01-10 Thread Propes, Barry L
YES! Duh! Forgive me! LOL. Context!! -Original Message- From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] Sent: Thursday, January 10, 2013 1:35 PM To: Tomcat Users List Subject: RE: add database resource > From: Propes, Barry L [mailto:barry.l.pro...@citi.com] > Subject: RE:

Re: JNDI setup oracle 11 g

2013-01-10 Thread Marco de Booij
If you get an error when you provide a wrong username or password then the connection works. Also the ORA-00911 indicates to a connection with the database. Oracle works through JNDI (I use JNDI with Weblogic) and through JDBC. I do not know why you say that the "simple" URL cannot be used for

Re: Tomcat vs IIS download speed - configuration suggestions?

2013-01-10 Thread Daniel Mikusa
On Jan 10, 2013, at 3:10 PM, Linoma DevTeam wrote: > Thank you everyone for the responses/suggestions. > > I did ensure that those were the same during the tests, but had removed > that from the server.xml before sending. Both servers had negotiated the > equivalent of TLS_RSA_WITH_AES_128_CBC_SH

Re: Tomcat vs IIS download speed - configuration suggestions?

2013-01-10 Thread Linoma DevTeam
Thank you everyone for the responses/suggestions. I did ensure that those were the same during the tests, but had removed that from the server.xml before sending. Both servers had negotiated the equivalent of TLS_RSA_WITH_AES_128_CBC_SHA with the client during testing. Also, i've verified the JVM

Re: JNDI setup oracle 11 g

2013-01-10 Thread tsidhu
So the string works in that it connects to the DB. I just get an error when I try and use the connection.  I tested by providing an invalid password, and I did get a password invalid error from oracle in the stack trace.  I think the issue is in the get connection call it must make some call to

Re: Tomcat vs IIS download speed - configuration suggestions?

2013-01-10 Thread Howard W. Smith, Jr.
On Thu, Jan 10, 2013 at 9:31 AM, David kerber wrote: > On 1/10/2013 8:56 AM, Linoma DevTeam wrote: > >> Hi everyone, >> >> I'm running some comparison tests with tomcat 6.0.35 and IIS running in >> parallel on Windows Server 2008 R2. Now I would expect Tomcat to be >> somewhat slower, given the

RE: add database resource

2013-01-10 Thread leon . mail
I've changed it to this, but still no result... Op Do, 10 januari, 2013 8:34 pm schreef Caldarale, Charles R: >> From: Propes, Barry L [mailto:barry.l.pro...@citi.com] >> Subject: RE: add database resource >> > >> attributes sandwiched between XML tags > > Make that ... > > > - Chuck > >

RE: add database resource

2013-01-10 Thread Caldarale, Charles R
> From: Propes, Barry L [mailto:barry.l.pro...@citi.com] > Subject: RE: add database resource > attributes sandwiched between XML tags Make that ... - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient.

RE: JNDI setup oracle 11 g

2013-01-10 Thread Propes, Barry L
Hmmm. I didn't know that, I guess. Well, I wonder if that long string requires some kind of escape character to be inserted in it? -Original Message- From: tsidhu [mailto:tsidh...@yahoo.com] Sent: Thursday, January 10, 2013 1:22 PM To: users@tomcat.apache.org Subject: Re: JNDI setup ora

RE: add database resource

2013-01-10 Thread Propes, Barry L
Right! Like Chuck says, Leon, that is invalid. Within the context file itself (context.xml) you need the Resource attributes sandwiched between XML tags and no other attributes in the context tag itself. -Original Message- From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com]

Re: JNDI setup oracle 11 g

2013-01-10 Thread tsidhu
Thanks Barry, The reason for the long dburl string is that this is an Oracle RAC (Clustered database). My understanding is that the "simple" dburl cannot be used for RAC databases.  Also, I tried removing/adding the  validationQuery  from the context.xml, however that did not work either :(.

RE: add database resource

2013-01-10 Thread Caldarale, Charles R
> From: leon.m...@hccnet.nl [mailto:leon.m...@hccnet.nl] > Subject: RE: add database resource > Herewith the content of META-INF/context.xml > Well, that's invalid right off the bat, so the rest of it probably doesn't matter. Read the doc again. - Chuck THIS COMMUNICATION MAY CONTAIN C

RE: add database resource

2013-01-10 Thread leon . mail
Hi, Herewith the content of META-INF/context.xml Regards, Léon Op Do, 10 januari, 2013 7:10 pm schreef Propes, Barry L: > Did you remove the contents from the server.xml? Or just paste the same > contents to the META-INF/context.xml file? > > You might want

RE: JNDI setup oracle 11 g

2013-01-10 Thread Propes, Barry L
I might add, Tony, one other thing I noticed in my JNDI config. I'd removed the validationQuery attribute. It might have been regarding this, but I'd writtten a comment right below it that per Konstantin, there was a memory leak regarding the Eviction Timer. Try removing that attribute (valida

RE: add database resource

2013-01-10 Thread Propes, Barry L
Did you remove the contents from the server.xml? Or just paste the same contents to the META-INF/context.xml file? You might want to add the contents of the context.xml file to the thread message. -Original Message- From: Leon [mailto:leon.m...@hccnet.nl] Sent: Thursday, January 10, 201

RE: JNDI setup oracle 11 g

2013-01-10 Thread Propes, Barry L
Tony, I have a similar standalone Java app that hits Oracle 11g. At your line with the DBURL, I have something much more concise. Where you have public static final String DBURL = "jdbc:oracle:thin:@(DESCRIPTION = (ADDRESS = (PROTOCOL = TCP)(HOST = abc-def-scan.corp.xyz.com)(PORT = 1521)) (CONN

Re: add database resource

2013-01-10 Thread Leon
Unfortunately still same error Regards, Léon Op 10 jan. 2013 om 04:29 heeft Christopher Schultz het volgende geschreven: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Leon, > > On 1/9/13 5:37 PM, leon.m...@hccnet.nl wrote: >> Op Wo, 9 januari, 2013 10:37 pm schreef Christopher Sch

JNDI setup oracle 11 g

2013-01-10 Thread tsidhu
Hello, I am able to connect to my database from a stand alone java program, however the same connection information throws an exception when used via JNDI. My stand alone app: import java.sql.* ; // for standard JDBC programs public class TestCon { public static final String DBDRIVER

RE: Restricting ciphers

2013-01-10 Thread Martin Gainty
terminology : the X509 standard defines certificates, and RSA and DSA are two of the public key algorithms that can be used in those certificates; certificates are used to hold public keys, and never private keys. PKCS#12 is a standard for a container which holds an X509 client certificates and

Re: Tomcat vs IIS download speed - configuration suggestions?

2013-01-10 Thread David kerber
On 1/10/2013 8:56 AM, Linoma DevTeam wrote: Hi everyone, I'm running some comparison tests with tomcat 6.0.35 and IIS running in parallel on Windows Server 2008 R2. Now I would expect Tomcat to be somewhat slower, given the extra JVM layer, but in some situations, i'm seeing differences that ar

Re: Tomcat vs IIS download speed - configuration suggestions?

2013-01-10 Thread Konstantin Kolinko
2013/1/10 Linoma DevTeam : > Hi everyone, > > I'm running some comparison tests with tomcat 6.0.35 and IIS running in > parallel on Windows Server 2008 R2. Now I would expect Tomcat to be > somewhat slower, given the extra JVM layer, but in some situations, i'm > seeing differences that are tough

Re: Tomcat vs IIS download speed - configuration suggestions?

2013-01-10 Thread Mark Thomas
On 10/01/2013 14:02, David kerber wrote: > On 1/10/2013 8:56 AM, Linoma DevTeam wrote: >> Hi everyone, >> >> I'm running some comparison tests with tomcat 6.0.35 and IIS running in >> parallel on Windows Server 2008 R2. Now I would expect Tomcat to be >> somewhat slower, given the extra JVM layer,

Re: Tomcat vs IIS download speed - configuration suggestions?

2013-01-10 Thread David kerber
On 1/10/2013 8:56 AM, Linoma DevTeam wrote: Hi everyone, I'm running some comparison tests with tomcat 6.0.35 and IIS running in parallel on Windows Server 2008 R2. Now I would expect Tomcat to be somewhat slower, given the extra JVM layer, but in some situations, i'm seeing differences that ar

Re: Tomcat AutoDeploy Interval (Delay / Frequency)

2013-01-10 Thread Radek Szamrej
Thank you for the great tip, with your help I was able to find it (and confirmed it works): To summarize: Setting for the in "sever.xml" is called "backgroundProcessorDelay" (value expressed in seconds) In "server.xml": It makes Tomcat to auto-redeploy using 1s interval. Problem solved.

Re: Tomcat AutoDeploy Interval (Delay / Frequency)

2013-01-10 Thread Konstantin Kolinko
2013/1/10 Radek Szamrej : > Hi, > > I believe it's a generic Tomcat question: > > How can I configure / modify AutoDeploy interval (delay / frequency). > > It is taking too much time form WAR being copied until Tomcat recognizes it > and the application is redeployed / reinitialized. > > I would pr

Tomcat AutoDeploy Interval (Delay / Frequency)

2013-01-10 Thread Radek Szamrej
Hi, I believe it's a generic Tomcat question: How can I configure / modify AutoDeploy interval (delay / frequency). It is taking too much time form WAR being copied until Tomcat recognizes it and the application is redeployed / reinitialized. I would preferably like to reduce this delay to unde

Re: Converting JSSE configuation to APR/native

2013-01-10 Thread André Warnier
k.b.sou...@accenture.com wrote: We don't have openSSL installed. Can't we configure APR/native without openssl? The on-line documentation may help : https://tomcat.apache.org/tomcat-7.0-doc/config/http.html#SSL%20Support -Original Message- From: Konstantin Kolinko [mailto:knst.koli

RE: Converting JSSE configuation to APR/native

2013-01-10 Thread k.b.soumya
We don't have openSSL installed. Can't we configure APR/native without openssl? -Original Message- From: Konstantin Kolinko [mailto:knst.koli...@gmail.com] Sent: Thursday, January 10, 2013 1:36 PM To: Tomcat Users List Subject: Re: Converting JSSE configuation to APR/native 2013/1/10 : >

Re: Converting JSSE configuation to APR/native

2013-01-10 Thread Konstantin Kolinko
2013/1/10 : > > Hi All, > > We would like to convert our SSL connector from JSSE configuration to > APR/native. The tomcat version we are using is tomat7.0.27. > > We are finding difficulty in converting our .jks file to SSLCertificateFile > and SSLCertificateKeyFile attributes which are specifi