[ANN] Apache Tomcat 8.0.29 available

2015-11-25 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat 8.0.29. Apache Tomcat 8 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language and Java WebSocket technologies. Apache Tomcat 8.0.29 includes fixes for issues

TLS certificate configuration in Tomcat 9

2015-11-25 Thread Christopher Schultz
All, Is the PEM-based certificate configuration available for both JSSE-based and APR-based connectors in Tomcat 9 at this point? The documentation says e.g. the "certificateFile" attribute is for "OpenSSL Only", and when I try to launch Tomcat using the NIO connector and a PEM-based certificate

Re: TLS fails in Firefox and Chrome

2015-11-25 Thread Christopher Schultz
Mark, On 11/24/15 1:56 PM, Mark Robinson wrote: > My config is pretty vanilla. > > protocol="org.apache.coyote.http11.Http11NioProtocol" > port="8443" maxThreads="200" >

Re: TLS certificate configuration in Tomcat 9

2015-11-25 Thread Rémy Maucherat
2015-11-25 16:26 GMT+01:00 Christopher Schultz : > All, > > Is the PEM-based certificate configuration available for both JSSE-based > and APR-based connectors in Tomcat 9 at this point? The documentation > says e.g. the "certificateFile" attribute is for "OpenSSL

Re: Today's Tomcat 9 HTTP/2 webinar is now available on YouTube

2015-11-25 Thread Mark Thomas
On 25/11/2015 22:38, George Sexton wrote: > Mark, > > On 11/24/2015 4:11 PM, Mark Thomas wrote: >> All, >> >> As promised, today's webinar "Apache Tomcat 9: HTTP/2 Quick Start" is >> now available on the Apache Tomcat YouTube channel: >> >> https://www.youtube.com/channel/UCpqpJ0-G1lYfUBQ6_36Au_g

Re: Tomcat catalina.out log is not rolling using log4j DailyRollingFileAppender

2015-11-25 Thread Joleen Barker
Sorry. I all of a sudden noticed the swallowOutput="false" in the cfcc.xml I had. I changed this to be true and now it appears most of the messages are being written to the locahost file. I don't see any messages missing. I will leave it run over night and see what happens and report tomorrow.

Re: Tomcat hanging when acting as GWT server.

2015-11-25 Thread Christopher Schultz
Simon, On 11/25/15 12:55 PM, Simon Callan wrote: > The different versions of tomcat all show the same issue. We have this issue > on two systems, and only two systems. We have not been able to reproduce this > on any other system we have access to. > > Having investigated further, I appear to

Re: [ANN] Apache Tomcat 8.0.29 available

2015-11-25 Thread Christopher Schultz
Violeta, On 11/25/15 3:00 PM, Violeta Georgieva wrote: > 2015-11-25 21:38 GMT+02:00 Felix Schumacher < > felix.schumac...@internetallee.de>: >> >> >> >> Am 25. November 2015 20:24:17 MEZ, schrieb Violeta Georgieva < > miles...@gmail.com>: >>> Hi, >>> >>> 2015-11-25 20:42 GMT+02:00 David Balažic

Re: Tomcat catalina.out log is not rolling using log4j DailyRollingFileAppender

2015-11-25 Thread Joleen Barker
I changed it back to use the log4j setting as I liked it better and the boss wants the files to rollover at midnight each night. Now when I startup the catalina.out file is empty and the logs appear to be split between the catalina file (not catalina.out) and the localhost file. Some of the

Re: [ANNOUNCE] CFP open for ApacheCon North America 2016

2015-11-25 Thread Christopher Schultz
Tomcat Users, On 11/25/15 12:32 PM, Rich Bowen wrote: > Community growth starts by talking with those interested in your > project. ApacheCon North America is coming, are you? > > We are delighted to announce that the Call For Presentations (CFP) is > now open for ApacheCon North America. Okay,

Re: Today's Tomcat 9 HTTP/2 webinar is now available on YouTube

2015-11-25 Thread George Sexton
Mark, On 11/24/2015 4:11 PM, Mark Thomas wrote: All, As promised, today's webinar "Apache Tomcat 9: HTTP/2 Quick Start" is now available on the Apache Tomcat YouTube channel: https://www.youtube.com/channel/UCpqpJ0-G1lYfUBQ6_36Au_g I watched the video and I have two comments. First, I'm

Re: Today's Tomcat 9 HTTP/2 webinar is now available on YouTube

2015-11-25 Thread Christopher Schultz
Mark, On 11/25/15 6:44 PM, Mark Thomas wrote: > On 25/11/2015 22:38, George Sexton wrote: >> Mark, >> >> On 11/24/2015 4:11 PM, Mark Thomas wrote: >>> All, >>> >>> As promised, today's webinar "Apache Tomcat 9: HTTP/2 Quick Start" is >>> now available on the Apache Tomcat YouTube channel: >>> >>>

RE: Tomcat hanging when acting as GWT server.

2015-11-25 Thread Simon Callan
>>> Then, after the user logs-out (from the either completely responsive >>> or completely non-responsive web application), the web application becomes >>> (or remains) unresponsive? >> >> What I mean by this is: >> 1. User starts web-app, and uses it normally. >Do you mean that the user starts

Re: [ANN] Apache Tomcat 8.0.29 available

2015-11-25 Thread Felix Schumacher
Am 25. November 2015 20:24:17 MEZ, schrieb Violeta Georgieva : >Hi, > >2015-11-25 20:42 GMT+02:00 David Balažic : >> >> Typo on http://tomcat.apache.org/tomcat-8.0-doc/changelog.html >> >> "TLSv1.0 is no an alias" >> >> Should probably be "TLSv1.0

[ANNOUNCE] CFP open for ApacheCon North America 2016

2015-11-25 Thread Rich Bowen
Community growth starts by talking with those interested in your project. ApacheCon North America is coming, are you? We are delighted to announce that the Call For Presentations (CFP) is now open for ApacheCon North America. You can submit your proposed sessions at

Re: [ANN] Apache Tomcat 8.0.29 available

2015-11-25 Thread Violeta Georgieva
2015-11-25 21:38 GMT+02:00 Felix Schumacher < felix.schumac...@internetallee.de>: > > > > Am 25. November 2015 20:24:17 MEZ, schrieb Violeta Georgieva < miles...@gmail.com>: > >Hi, > > > >2015-11-25 20:42 GMT+02:00 David Balažic : > >> > >> Typo on

Re: [ANN] Apache Tomcat 8.0.29 available

2015-11-25 Thread Violeta Georgieva
Hi, 2015-11-25 20:42 GMT+02:00 David Balažic : > > Typo on http://tomcat.apache.org/tomcat-8.0-doc/changelog.html > > "TLSv1.0 is no an alias" > > Should probably be "TLSv1.0 is not an alias" I fixed it. Thanks, Violeta > Regards, > David Balažic > > > -Original

RE: [ANN] Apache Tomcat 8.0.29 available

2015-11-25 Thread David Balažic
Typo on http://tomcat.apache.org/tomcat-8.0-doc/changelog.html "TLSv1.0 is no an alias" Should probably be "TLSv1.0 is not an alias" Regards, David Balažic > -Original Message- > From: Mark Thomas [mailto:ma...@apache.org] > Sent: 25. November 2015 17:22 > To: users@tomcat.apache.org >

Re: Tomcat catalina.out log is not rolling using log4j DailyRollingFileAppender

2015-11-25 Thread Joleen Barker
I didn't get too far. For the option b and setting the swallowOutput=true in right place I need to get some clarification. I was looking up more information about the swallowOutput parm so I understood more. In Christopher's comments he spoke about updating the context xml. This is where I am

Re: Question related to Session management in Tomcat !

2015-11-25 Thread Christopher Schultz
Utkarsh, On 11/25/15 6:29 AM, Utkarsh Dave wrote: > Thank You Mark > > On Wed, Nov 25, 2015 at 4:39 PM, Mark Thomas wrote: > >> On 25/11/2015 10:50, Utkarsh Dave wrote: >>> Hello, >>> >>> I need inputs/answers on below points to implement a secure session >>> management

Re: Tomcat catalina.out log is not rolling using log4j DailyRollingFileAppender

2015-11-25 Thread Joleen Barker
Thank you for some direction. I'll go ahead and put back the logging as it was from the vendor using the logging.properties file, etc. etc. so as to minimize their lack of support due to me changing a lot in their product. Then I'll go on to try option b. I'll report back with how it goes.

Re: [ANN] Apache Tomcat 8.0.29 available

2015-11-25 Thread Violeta Georgieva
Chris, 2015-11-26 2:52 GMT+02:00 Christopher Schultz : > > Violeta, > > On 11/25/15 3:00 PM, Violeta Georgieva wrote: > > 2015-11-25 21:38 GMT+02:00 Felix Schumacher < > > felix.schumac...@internetallee.de>: > >> > >> > >> > >> Am 25. November 2015 20:24:17 MEZ,

Re: Today's Tomcat 9 HTTP/2 webinar is now available on YouTube

2015-11-25 Thread Martijn Bos
Mark, On 2015-11-24 23:11:34, Mark Thomas wrote: > All, > > As promised, today's webinar "Apache Tomcat 9: HTTP/2 Quick Start" is > now available on the Apache Tomcat YouTube channel: > > https://www.youtube.com/channel/UCpqpJ0-G1lYfUBQ6_36Au_g > > Mark > >

Re: Today's Tomcat 9 HTTP/2 webinar is now available on YouTube

2015-11-25 Thread Rémy Maucherat
2015-11-25 12:06 GMT+01:00 Johan Compagner : > thx, > > one question i have, is server push always code? > because for me it is > if this js file is hit (served by the default servlet of tomcat i guess). > also send in this set.. > > So its kind of a configuration, or

Re: Question related to Session management in Tomcat !

2015-11-25 Thread Mark Thomas
On 25/11/2015 10:50, Utkarsh Dave wrote: > Hello, > > I need inputs/answers on below points to implement a secure session > management application > Or if there is there any configuration that may need to be tuned to improve > below please point me to that > A) > Are Session IDs cryptographically

Question related to Session management in Tomcat !

2015-11-25 Thread Utkarsh Dave
Hello, I need inputs/answers on below points to implement a secure session management application Or if there is there any configuration that may need to be tuned to improve below please point me to that A) Are Session IDs cryptographically strong and do not reveal sensitive information so that

Re: Today's Tomcat 9 HTTP/2 webinar is now available on YouTube

2015-11-25 Thread Johan Compagner
thx, one question i have, is server push always code? because for me it is if this js file is hit (served by the default servlet of tomcat i guess). also send in this set.. So its kind of a configuration, or should i just use a filter for that? On 25 November 2015 at 00:11, Mark Thomas

Re: Today's Tomcat 9 HTTP/2 webinar is now available on YouTube

2015-11-25 Thread Mark Thomas
On 25/11/2015 11:06, Johan Compagner wrote: > thx, > > one question i have, is server push always code? At the moment, yes. > because for me it is > if this js file is hit (served by the default servlet of tomcat i guess). > also send in this set.. > > So its kind of a configuration, or should

Re: Question related to Session management in Tomcat !

2015-11-25 Thread Utkarsh Dave
Thank You Mark On Wed, Nov 25, 2015 at 4:39 PM, Mark Thomas wrote: > On 25/11/2015 10:50, Utkarsh Dave wrote: > > Hello, > > > > I need inputs/answers on below points to implement a secure session > > management application > > Or if there is there any configuration that may

Re: Tomcat catalina.out log is not rolling using log4j DailyRollingFileAppender

2015-11-25 Thread Joleen Barker
Alas, no luck. This is what I found in my directory: -rw-r--r--. root root 30694 Nov 25 22:49 catalina -rw-r--r--. root root 0 Nov 25 22:49 catalina.out -rw-r--r--. root root 0 Nov 25 22:49 host-manager -rw-r--r--. root root 31909 Nov 25 22:49 localhost -rw-r--r--.