Re: Tomcat APR protocol SSL certificate information.

2015-12-15 Thread Garcia Aparici, Carlos
In many of our tomcats we use the pfx directly on the conector. Its similar to a keystore Enviado de Samsung Mobile Mensaje original De: Nithesh Kb Fecha: 15/12/2015 16:21 (GMT+01:00) Para: Tomcat Users List Asunto: Re: Tomcat APR protocol SSL certificate information. *T

Re: Custom Connector class

2015-12-15 Thread Christopher Schultz
Roel, On 12/15/15 5:13 PM, Roel Storms wrote: > I don't believe that your suggestion works, but correct me if I'm wrong. > You aren't overwriting the getInputStream or getReader method. You are > wrapping them, which is a big difference. Since the internal > Request#parseParameter() won't use your

Re: CSRF errors after upgrade of tomcat 8

2015-12-15 Thread Baron Fujimoto
On Tue, Dec 15, 2015 at 09:37:45AM +0200, Violeta Georgieva wrote: >Hello, > >2015-12-15 4:35 GMT+02:00 Baron Fujimoto : >> >> On Mon, Dec 14, 2015 at 09:12:20PM +, Mark Thomas wrote: >> >On 14/12/2015 20:49, Baron Fujimoto wrote: >> >> On Fri, Dec 11, 2015 at 05:02:43PM -1000, Baron Fujimoto w

Re: Externalize properties file on tomcat 8

2015-12-15 Thread Christopher Schultz
Samanth, On 12/15/15 2:52 PM, samanth marisetty wrote: > I am trying to externalize the database properties config file. Are you using Tomcat to configure your database, or some other component (e.g. Spring, Hibernate, etc.)? > I have created a folder env-conf and set a -Dconfig property in the

Re: Custom Connector class

2015-12-15 Thread Roel Storms
I don't believe that your suggestion works, but correct me if I'm wrong. You aren't overwriting the getInputStream or getReader method. You are wrapping them, which is a big difference. Since the internal Request#parseParameter() won't use your wrapped version of the method but rather uses it's own

Externalize properties file on tomcat 8

2015-12-15 Thread samanth marisetty
Hi, I am trying to externalize the database properties config file. I have created a folder env-conf and set a -Dconfig property in the catalina.sh, to point to the config file. Tomcat does not pickup this file, instead it picks the properties file from the .war. How would I be able to pick up t

Re: Tomcat APR protocol SSL certificate information.

2015-12-15 Thread Nithesh Kb
*Thanks David,Thomas.* If my understanding is not wrong. Till tomcat version 8, we need to provide cert and key separately for openssl ssl APR, like *(SSLCertificateFile="/aa/server.crt"SSLCertificateKeyFile="/aa/server.key")* But tomcat 9 we can use keystore to store cert and key and configure it

Re: Tomcat APR protocol SSL certificate information.

2015-12-15 Thread Mark Thomas
On 15/12/2015 15:07, David Newman wrote: > When you use APR the SSL implementation is coming from openssl instead of > java. openssl has no use for java keystore files. So it becomes more like > an apache httpd config with separate files for keys and certificates. True, but as of Tomcat 9 (and w

Re: Tomcat APR protocol SSL certificate information.

2015-12-15 Thread David Newman
When you use APR the SSL implementation is coming from openssl instead of java. openssl has no use for java keystore files. So it becomes more like an apache httpd config with separate files for keys and certificates. On Tue, Dec 15, 2015 at 5:12 AM, Nithesh Kb wrote: > HI, > I have build APR

Tomcat APR protocol SSL certificate information.

2015-12-15 Thread Nithesh Kb
HI, I have build APR libraries Openssl and tc-native also i have created openssl libraries. both HTTP and HTTPS is working fine. *openssl genrsa -des3 -out server.key 2048 * *openssl req -new -key server.key -out server.csr* *cp server.key server.key.org * *openssl rsa -in s