Altering ServerInfo.properties in Tomcat = ClassNotFoundException

2013-08-08 Thread Edao, Aliye
Dear all, Altering ${catalina_home}/lib/org/apache/catalina/util/ServerInfo.properties because of information disclosure concerns (TC version number) in apache-tomcat-6.0.37, apache-tomcat-7.0.40, apache-tomcat-7.0.42 and Apache Tomcat/8.0.0-RC1 as mentioned in the documentation

Re: Downgrade Tomcat7 to Tomcat6

2013-08-08 Thread Ognjen Blagojevic
Sumilang, On 8.8.2013 3:53, Sumilang Plucena wrote: I have a development server Ubuntu12.10 and Tomcat-7.0.30. But prior to upgrading Tomcat7 from Tomcat-6.0.29 we never had problem with our website. I would like to know how I can go about downgrading Tomcat7 without affecting applications

Re: Altering ServerInfo.properties in Tomcat = ClassNotFoundException

2013-08-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Aliye, On 8/8/13 7:05 AM, Edao, Aliye wrote: Dear all, Altering ${catalina_home}/lib/org/apache/catalina/util/ServerInfo.properties because of information disclosure concerns (TC version number) in apache-tomcat-6.0.37, apache-tomcat-7.0.40,

Re: Altering ServerInfo.properties in Tomcat = ClassNotFoundException

2013-08-08 Thread Daniel Mikusa
On Aug 8, 2013, at 7:05 AM, Edao, Aliye aliye.e...@atos.net wrote: Dear all, Altering ${catalina_home}/lib/org/apache/catalina/util/ServerInfo.properties because of information disclosure concerns (TC version number) in apache-tomcat-6.0.37, apache-tomcat-7.0.40, apache-tomcat-7.0.42 and

Re: [Probe]- Tomcat deployment

2013-08-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Vicky, On 8/4/13 4:20 PM, vicky007aggar...@yahoo.co.in wrote: Thanks Chris .. But is there any sample example which illustrates how to configure/use cluster deployer ?? Pls suggest Did you read the docs reference I already sent? Does this can

Re: Downgrade Tomcat7 to Tomcat6

2013-08-08 Thread Daniel Mikusa
On Aug 7, 2013, at 9:53 PM, Sumilang Plucena sumilangpluc...@yahoo.com.ph wrote: I have a development server Ubuntu12.10 and Tomcat-7.0.30. Are you installing from the Ubuntu repository or from the tomcat.apache.org download? If you're installing from an Ubuntu repository, I'd suggest that

Re: Altering ServerInfo.properties in Tomcat = ClassNotFoundException

2013-08-08 Thread Mark Eggers
On 8/8/2013 7:14 AM, Daniel Mikusa wrote: On Aug 8, 2013, at 7:05 AM, Edao, Aliye aliye.e...@atos.net wrote: Dear all, Altering ${catalina_home}/lib/org/apache/catalina/util/ServerInfo.properties because of information disclosure concerns (TC version number) in apache-tomcat-6.0.37,

Tomcat config question: 'compression' versus 'SSLDisableCompression'

2013-08-08 Thread David Landis
Hi, I was wondering if someone could clarify the difference between the configuration parameters mentioned in the subject of this email or point me to some documentation that explains it? Do they both refer to the same type of compression? Based on the Tomcat docs I know the former controls

Re: Tomcat config question: 'compression' versus 'SSLDisableCompression'

2013-08-08 Thread Mark Thomas
On 08/08/2013 18:14, David Landis wrote: Hi, I was wondering if someone could clarify the difference between the configuration parameters mentioned in the subject of this email or point me to some documentation that explains it? Do they both refer to the same type of compression? No.

RE: Any concrete timeline for JSR-356 in Tomcat 7?

2013-08-08 Thread Bob DeRemer
-Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: Wednesday, August 07, 2013 6:35 PM To: Tomcat Users List Subject: Re: Any concrete timeline for JSR-356 in Tomcat 7? -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Bob, On 8/7/13 1:40

RE: Any concrete timeline for JSR-356 in Tomcat 7?

2013-08-08 Thread Bob DeRemer
-Original Message- From: Mark Thomas [mailto:ma...@apache.org] Sent: Wednesday, August 07, 2013 1:40 PM To: Tomcat Users List Subject: Re: Any concrete timeline for JSR-356 in Tomcat 7? On 07/08/2013 18:59, Bob DeRemer wrote: Hi Mark, This is a follow-up to my previous

Re: Tomcat config question: 'compression' versus 'SSLDisableCompression'

2013-08-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 8/8/13 12:45 PM, Mark Thomas wrote: On 08/08/2013 18:14, David Landis wrote: Hi, I was wondering if someone could clarify the difference between the configuration parameters mentioned in the subject of this email or point me to some

Re: Tomcat config question: 'compression' versus 'SSLDisableCompression'

2013-08-08 Thread David Landis
On Thu, Aug 8, 2013 at 5:19 PM, Christopher Schultz ch...@christopherschultz.net wrote: ... and the SSLDisableCompression setting (when set to false) is intended to mitigate the CRIME attack against SSL/TLS compression. Feel free to read online all about the CRIME attack. That was what I

RE: Tomcat config question: 'compression' versus 'SSLDisableCompression'

2013-08-08 Thread Martin Gainty
as earlier mentioned chrome is the only browser that supports compression on SSL streams Martin __ Verzicht und Vertraulichkeitanmerkung Diese Nachricht ist vertraulich. Sollten Sie nicht der vorgesehene Empfaenger sein, so bitten wir hoeflich um

Tomcat shutdown behaviour

2013-08-08 Thread Vimal Jain
Hi, I am using tomcat-6 on my Ubuntu 13.10 desktop. My question is :- When i run shutdown script of tomcat , does tomcat wait for currently running threads to complete before shutting down ? -- Thanks and Regards, Vimal Jain