Container Provided ServletFilters

2015-03-27 Thread jieryn
Hello Apache Tomcat, Is there any hope to have Tomcat package the very useful ServletFilter's it has created ( src=java/org/apache/catalina/filters, web=https://tomcat.apache.org/tomcat-8.0-doc/config/filter.html ) into its own Apache Maven module? I see we have a lot of deployed modules already,

Re: ClassNotFoundError on context unload

2015-03-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Austin, On 3/26/15 7:33 PM, Austin Jones wrote: I believe I figured this part out in the debugger. When the WebappClassLoader attempts to load the class, the .class file (and the entire exploded directory) is not on the disk. First, let me

Re: Tomcat 7 upgrade from 7.0.28-4 to 7.0.56-1 causes application freeze

2015-03-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Thomas, On 3/26/15 12:16 PM, Thomas Boniface wrote: Following the update of the tomcat 7 version from 7.0.28-4 to 7.0.56-1 hoping to improve our application performances we experienced a quick freeze of the application under a standard load

SSL / TLS compression | SPDY service|CVE-2012-4929

2015-03-27 Thread Rahul Kumar Singh
Hello Tomcat support team, Thanks for your continuous support. Problem : Security issue | CVE-2012-4929 Overview: The TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, Qt, and other products, can encrypt compressed data without properly obfuscating the length of the

Re: Tomcat 8 on Solaris 10/11

2015-03-27 Thread Andrew Seales
Yes, we do, on Solaris 10. I don't know of any such problems, but I can't introduce the slow network condition here to test. Good to know. In case it wasn't clear, the network limiting is done on the client side, not on the server. Is the file really truncated, i.e. too short, or is it

Re: Tomcat 8 on Solaris 10/11

2015-03-27 Thread Andrew Seales
On 26/03/15 21:10, Aurélien Terrestris wrote: As suggested by Rainer, I would try with the blocking connector and compare. Otherwise, it could be that your file is using very long lines (only 5 lines for more than 800k of data). Maybe a tomcat-dev could have a look on this. $ wc

Re: SSL / TLS compression | SPDY service|CVE-2012-4929

2015-03-27 Thread Ognjen Blagojevic
Rahul, On 27.3.2015 14:42, Rahul Kumar Singh wrote: So how to disable compression and / or the SPDY service in tomcat6. If you are using JSSE connectors (BIO/NIO/NIO2), compression is already disabled because JSSE does not support it, and there is no support for SPDY protocol on those

Re: SSL / TLS compression | SPDY service|CVE-2012-4929

2015-03-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Ognjen, On 3/27/15 11:04 AM, Ognjen Blagojevic wrote: On 27.3.2015 14:42, Rahul Kumar Singh wrote: So how to disable compression and / or the SPDY service in tomcat6. If you are using JSSE connectors (BIO/NIO/NIO2), compression is already

Re: How to enable cookies in Apache Tomcat

2015-03-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Pavel, On 3/27/15 1:54 PM, Pavel Yermolenko wrote: In my default browser (Chrome) the cookies are enabled, the proof is: the .jsp page is correctly displayed in browser. In the meantime I've tried to access to Manager App page from main page

Re: How to enable cookies in Apache Tomcat

2015-03-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Pavel, On 3/27/15 1:07 PM, Pavel Yermolenko wrote: Trying to test jsp page in Apache Tomcat 8.0, I've met problems - opened page displays suggestions how to enable cookies in different browsers. Is there some option, allowing to setup/enable

RE: How to enable cookies in Apache Tomcat

2015-03-27 Thread Caldarale, Charles R
From: Pavel Yermolenko [mailto:py.oh...@sunrise.ch] Subject: How to enable cookies in Apache Tomcat Trying to test jsp page in Apache Tomcat 8.0, I've met problems - opened page displays suggestions how to enable cookies in different browsers. Is there some option, allowing to setup/enable

SSI Exec Command

2015-03-27 Thread Bem Lozano
Hello, I'm having problem running SSI in Tomcat using the exec command. Already did the needed configurations for this but it's giving me an error. I hope you can help me with this, as I already spent a week trying to make it run. Below are the details: *web.xml - ssi* filter

RE: SSI Exec Command

2015-03-27 Thread Caldarale, Charles R
From: Bem Lozano [mailto:bemloz...@gmail.com] Subject: SSI Exec Command I'm having problem running SSI in Tomcat using the exec command. Already did the needed configurations for this but it's giving me an error. Exactly what did you configure? Anything other than changing conf/web.xml?

Re: How to enable cookies in Apache Tomcat

2015-03-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Pavel, On 3/27/15 1:35 PM, Pavel Yermolenko wrote: What I want is display correctly .jsp page that I execute in Eclipse. Ok, I forgot to precise that I work in Eclipse. In WebContent subfolder I created .jsp page (47kB) and try to test it

RE: How to enable cookies in Apache Tomcat

2015-03-27 Thread Pavel Yermolenko
Hello Chuck, In my default browser (Chrome) the cookies are enabled, the proof is: the .jsp page is correctly displayed in browser. In the meantime I've tried to access to Manager App page from main page http://localhost:8080/, but access were refused (I tried username = tomcat, password =

How to enable cookies in Apache Tomcat

2015-03-27 Thread Pavel Yermolenko
Hello, Hello, Trying to test jsp page in Apache Tomcat 8.0, I've met problems - opened page displays suggestions how to enable cookies in different browsers. Is there some option, allowing to setup/enable cookies in Apache Tomcat. Thanks in advance Pavel --- L'absence de virus

RE: How to enable cookies in Apache Tomcat

2015-03-27 Thread Pavel Yermolenko
Hello Christopher, Thank you for response. What I want is display correctly .jsp page that I execute in Eclipse. Ok, I forgot to precise that I work in Eclipse. In WebContent subfolder I created .jsp page (47kB) and try to test it with tomcat. What you mean saying Can you post some of the code

Re: Tomcat 8 on Solaris 10/11

2015-03-27 Thread Rainer Jung
Am 27.03.2015 um 15:48 schrieb Andrew Seales: Yes, we do, on Solaris 10. I don't know of any such problems, but I can't introduce the slow network condition here to test. Good to know. In case it wasn't clear, the network limiting is done on the client side, not on the server. Is the file

RE: can't access to Manager Application in Eclipse

2015-03-27 Thread Caldarale, Charles R
From: Pavel Yermolenko [mailto:py.oh...@sunrise.ch] Subject: can't access to Manager Application in Eclipse After activating of management accounts in tomcat-users.xml I still can't access to Manager App page (please see extract from tomcat-users.xml below). Care to tell us the _exact_

Re: can't access to Manager Application in Eclipse

2015-03-27 Thread Eldon Olmstead
On 15-03-27 04:00 PM, Pavel Yermolenko wrote: Hello, After activating of management accounts in tomcat-users.xml I still can't access to Manager App page (please see extract from tomcat-users.xml below). Once the server stoped/run, the login window doesn't appear when clicking on Manager

Re: can't access to Manager Application in Eclipse

2015-03-27 Thread Mark Eggers
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Pavel, On 3/27/2015 1:05 PM, Pavel Yermolenko wrote: Tomcat version: 8.02 Hopefully you meant 8.0.20 . . . More at the end. JRE: 1.8 Platform: W7/64bit specific URI ...: here I don't know ... I try to access to Manager App by clicking on

RE: can't access to Manager Application in Eclipse

2015-03-27 Thread Pavel Yermolenko
Tomcat version: 8.02 JRE: 1.8 Platform: W7/64bit specific URI ...: here I don't know ... I try to access to Manager App by clicking on button ManagerA App on the page http://localhost:8080/ -Original Message- From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] Sent: vendredi

Re: can't access to Manager Application in Eclipse

2015-03-27 Thread David kerber
As Eldon said, you need to set the manager-gui role for the user you're trying to use. On 3/27/2015 4:19 PM, Pavel Yermolenko wrote: Here below – the content of error page. What I can't understand is: after uncommenting of the login parameters in tomcat-users.xml, the login window no more

JSP page exploration scenario

2015-03-27 Thread Pavel Yermolenko
Hello, For acceleration to getting articles (.pdf files) from some portal I'm trying to realize following scenario in Java application: 1. Initial page is read into a string object STRING1 2. STRING1 is analyzed and array ARR1 of links, associated to articles, is built 3.

RE: can't access to Manager Application in Eclipse

2015-03-27 Thread Pavel Yermolenko
Here below – the content of error page. What I can't understand is: after uncommenting of the login parameters in tomcat-users.xml, the login window no more appear. When all login parameters were commented in tomcat-users.xml, login window appeared, but what values specify for

Re: ClassNotFoundError on context unload

2015-03-27 Thread Austin Jones
Please file a bug in Bugzilla for this. If you're feeling enterprising, go ahead and attach a WAR (including source) that can reproduce the issue. Submitted as bug 57772 https://bz.apache.org/bugzilla/show_bug.cgi?id=57772. The example WAR is on github, and the steps to reproduce should be

Re: How to enable cookies in Apache Tomcat

2015-03-27 Thread André Warnier
Pavel Yermolenko wrote: Hello Chuck, In my default browser (Chrome) the cookies are enabled, the proof is: the .jsp page is correctly displayed in browser. In the meantime I've tried to access to Manager App page from main page http://localhost:8080/, but access were refused (I tried username

RE: How to enable cookies in Apache Tomcat

2015-03-27 Thread Caldarale, Charles R
From: Pavel Yermolenko [mailto:py.oh...@sunrise.ch] Subject: RE: How to enable cookies in Apache Tomcat In the meantime I've tried to access to Manager App page from main page This is a different issue, so should be discussed in a different thread. Read this first:

RE: How to enable cookies in Apache Tomcat

2015-03-27 Thread Pavel Yermolenko
Chris, Indeed, it was the case - after checking 2 other browsers (IE and Mozilla) I discovered that cookies weren't enable there. I enabled them in both (IE and Mozilla), but nothing changed in Eclipse when I run .jsp page. I can attach .jsp file (47kB), but not sure that it's supported by

Re: How to enable cookies in Apache Tomcat

2015-03-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Pavel, On 3/27/15 2:29 PM, Pavel Yermolenko wrote: Indeed, I forgot about comments ... but after removing them the issue persists - the pair tomcat/tomcat (for username/password) still doesn't work. Hmm. Can you post the full contents of the

RE: How to enable cookies in Apache Tomcat

2015-03-27 Thread Pavel Yermolenko
In attachment I've put the content of .jsp -Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: vendredi 27 mars 2015 18:58 To: Tomcat Users List Subject: Re: How to enable cookies in Apache Tomcat -BEGIN PGP SIGNED MESSAGE- Hash: SHA256

RE: How to enable cookies in Apache Tomcat

2015-03-27 Thread Pavel Yermolenko
Chris, Indeed, I forgot about comments ... but after removing them the issue persists - the pair tomcat/tomcat (for username/password) still doesn't work. Concerning authentication, probably I have a reason - but how to check if this is actually the case ? The final goal of my demarche -

can't access to Manager Application in Eclipse

2015-03-27 Thread Pavel Yermolenko
Hello, After activating of management accounts in tomcat-users.xml I still can't access to Manager App page (please see extract from tomcat-users.xml below). Once the server stoped/run, the login window doesn't appear when clicking on Manager App, but instead error window 403 Access denied.

RE: How to enable cookies in Apache Tomcat

2015-03-27 Thread Pavel Yermolenko
Ok Chuck, I'm sorry. I'll not repeat this error. -Original Message- From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] Sent: vendredi 27 mars 2015 19:01 To: Tomcat Users List Subject: RE: How to enable cookies in Apache Tomcat From: Pavel Yermolenko

Re: Chrome reports Tomcat hosted sites as using 'obsolete cryptography'

2015-03-27 Thread Egor Philippov
On Thu, Mar 26, 2015 at 2:32 PM, Ognjen Blagojevic ognjen.d.blagoje...@gmail.com wrote: Egor, On 26.3.2015 21:23, Mark Thomas wrote: On 26/03/2015 17:30, Egor Philippov wrote: Anyone familiar with the warning or know whether it represents a real security problem? That depends on your

RE: JSP page exploration scenario

2015-03-27 Thread Pavel Yermolenko
Hello André, Why do you make it so complicated ? Why do you not just request the link to the JSP page ? does that not return the PDF file that you want ? JSP page doesn't include link to .pdf. When I execute such JSP page in browser (e.g. Chrome) and then see its source, the link on .pdf

RE: can't access to Manager Application in Eclipse

2015-03-27 Thread Pavel Yermolenko
I forgot to mention that I added manager-gui role, but it didn't help - login window doesn't appear. Here is extract from tomcat-users.xml: role rolename=manager-gui/ user username=tomcat password=s3cret roles=manager-gui/ role rolename=tomcat/ role rolename=role1/ user

RE: can't access to Manager Application in Eclipse

2015-03-27 Thread Pavel Yermolenko
Hello Mark, 1st, I progressed a little in my investigations. After I closed/rerun Eclipse, problem with Login window disappeared – now it appears when I click on ManagerA App, but username/password issue still persists. Hopefully you meant 8.0.20 Of course A couple of things come to

Re: JSP page exploration scenario

2015-03-27 Thread André Warnier
Pavel Yermolenko wrote: Hello, For acceleration to getting articles (.pdf files) from some portal I'm trying to realize following scenario in Java application: 1. Initial page is read into a string object STRING1 2. STRING1 is analyzed and array ARR1 of links, associated to

Re: Container Provided ServletFilters

2015-03-27 Thread Mark Thomas
On 27/03/2015 13:09, jieryn wrote: Hello Apache Tomcat, Is there any hope to have Tomcat package the very useful ServletFilter's it has created ( src=java/org/apache/catalina/filters, web=https://tomcat.apache.org/tomcat-8.0-doc/config/filter.html ) into its own Apache Maven module? I see

Re: JSP page exploration scenario

2015-03-27 Thread André Warnier
Pavel Yermolenko wrote: Hello André, Why do you make it so complicated ? Why do you not just request the link to the JSP page ? does that not return the PDF file that you want ? JSP page doesn't include link to .pdf. When I execute such JSP page in browser (e.g. Chrome) and then see

[ANN] Apache Tomcat Native 1.1.33 released

2015-03-27 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat Native 1.1.33 stable. The key features of this release are: - Fixed a crash when the poller returned multiple events for the same socket. - Link Windows binaries with OpenSSL 1.0.1m and APR 1.5.1 Please refer to the

RE: JSP page exploration scenario

2015-03-27 Thread Pavel Yermolenko
According to page address, that contains suffix jsp after last point '.', it seems to be JSP page. Also the syntax of the content of the page correspond to syntax of a JSP page. When I type such address in browser, the jsp-code is executed on server side and return to client some content. This

[ANN] Apache Tomcat 8.0.21 available

2015-03-27 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat 8.0.21. Apache Tomcat 8 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language and Java WebSocket technologies. Apache Tomcat 8.0.21 includes numerous fixes for

RE: SPNEGO test configuration with Manager webapp

2015-03-27 Thread David Marsh
By the way Tomcat 8 was running on JDK  :- C:\Windows\system32java -version java version 1.8.0_40 Java(TM) SE Runtime Environment (build 1.8.0_40-b26) Java HotSpot(TM) Client VM (build 25.40-b25, mixed mode) Version update 40 should include some JRE fixes around GSS and SPNEGO, including

RE: SSL / TLS compression | SPDY service|CVE-2012-4929

2015-03-27 Thread Rahul Kumar Singh
Ok I understand, Is it mentioned somewhere in tomcat spec. That it is not being used in JSSE connector. Based on the above answer my next question: If any browser is affected with this CVE , then what happen, e.g IE-11. If user tries to open the web application from IE-11 , then what happen.