Re: Tutorial: Configure Tomcat with HTTPS/SSL on Ubuntu 16.04 LTS (Xenial) using Letsencrypt

2016-10-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mladen, On 9/30/16 10:34 AM, Mladen Adamović wrote: > Hi all, > > I'm running 3 servers with Tomcat (migrated from Glassfish which is > not maintained well imo). But documentation is kind of not the best > for configuring HTTPS/SSL. > > I've

Re: add mapping for jsp servlet in web.xml?

2016-10-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Rob, On 10/1/16 8:59 AM, Rob Nikander wrote: > Hi, > > I’m upgrading from Tomcat 6 to Tomcat 8. The web.xml has a mapping > like this, to use the jsp servlet for all files in a certain > directory: > > jsp > /some-stuff/* > > In Tomcat 6 this

Re: Tomcat 8 HTTPS issue with old browser

2016-10-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 André, On 10/4/16 7:59 AM, André Warnier (tomcat) wrote: > On 04.10.2016 12:43, Garratt, Dave wrote: >> To elaborate, there is only this single application running on >> the server. All other web applications use Windows IIS. >> >> I have

Re: Tomcat 8 HTTPS issue with old browser

2016-10-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Dave, On 10/4/16 3:38 AM, Garratt, Dave wrote: > I have Apache Tomcat 8 working ok with https when I connect to my > web page using a recent browser (desktop) or iPhone for example. > However this specific application is designed to run on a

Re: Trigger sessionDestroyed event from custom ManagerBase

2016-10-04 Thread GOKULA KRISHNAN
Hi Mark, Thanks a lot for your reply. I'm trying to implement Redis valve (included in tomcat's context.xml) for custom session management by my own logic. Everything is working fine except the sessionDestroyed event. My sessionDestroyed is not called when session expires/timeout but it is

Re: Tomcat 8 HTTPS issue with old browser

2016-10-04 Thread tomcat
On 04.10.2016 12:43, Garratt, Dave wrote: To elaborate, there is only this single application running on the server. All other web applications use Windows IIS. I have mentioned that the problem is down to the old software on the scanner but it’s a huge international organisation and making a

Re: Tomcat 8 HTTPS issue with old browser

2016-10-04 Thread Olaf Kock
Am 04.10.2016 um 12:43 schrieb Garratt, Dave: > To elaborate, there is only this single application running on the server. > All other web applications use Windows IIS. > > I have mentioned that the problem is down to the old software on the scanner > but it’s a huge international

Re: Tomcat 8 HTTPS issue with old browser

2016-10-04 Thread Daniel Savard
Your challenge is much more with Java 8 as already mentioned above if you use a non-APR connector and with OpenSSL otherwise than with Tomcat itself. - Daniel Savard 2016-10-04 6:43 GMT-04:00 Garratt, Dave : > To elaborate, there is only this single

Re: Tomcat 8 HTTPS issue with old browser

2016-10-04 Thread Garratt, Dave
To elaborate, there is only this single application running on the server. All other web applications use Windows IIS. I have mentioned that the problem is down to the old software on the scanner but it’s a huge international organisation and making a upgrade to their entire line of devices

Re: Tomcat 8 HTTPS issue with old browser

2016-10-04 Thread tomcat
On 04.10.2016 09:53, Garratt, Dave wrote: On 4 Oct 2016, at 08:48, André Warnier (tomcat) wrote: On 04.10.2016 09:38, Garratt, Dave wrote: I have Apache Tomcat 8 working ok with https when I connect to my web page using a recent browser (desktop) or iPhone for example.

Re: Tomcat 8 HTTPS issue with old browser

2016-10-04 Thread Garratt, Dave
Thanks for that very comprehensive answer. I had not considered that but it sounds like it should give me the flexibility I need. I’m a Java programmer by profession rather then a web guru so it will no doubt take a fair bit of trial an error but that’s for pointing me in the right direction.

Re: Tomcat 8 HTTPS issue with old browser

2016-10-04 Thread Olaf Kock
Am 04.10.2016 um 11:23 schrieb Kreuser, Peter: > In my opinion weakening the security of the majority of users (there are > seemingly others) is a pretty bad thing to do. My suggestion would be a > different connector on a separate port for the handhelds. Configure this > either on HTTP or a

Re: Strange wait time in my application - Tomcat 7.0.67

2016-10-04 Thread Tullio Bettinazzi
Tks for Your help but : . problems comes out mainly in Db activities because are the longest one but I saw the same problem also in different operations like xsl parsing . I don't use a connection pool but only private connections one for each user Any further suggestion ? Tkls

AW: Tomcat 8 HTTPS issue with old browser

2016-10-04 Thread Kreuser, Peter
Dave, > The requirement for HTTPS is only a recent requirement and the application is > now heavily dependent on Java 8. At this point I don’t know just how old a > version of Tomcat I would need to make it work and I would have to make > significant changes to the code in order to make it

RE: Unable to access Global JNDI Resource

2016-10-04 Thread Chinoy Gupta
Ok. Thanks a lot Mark. Regards, Chinoy -Original Message- From: Mark Thomas [mailto:ma...@apache.org] Sent: Tuesday, October 04, 2016 2:37 PM To: Tomcat Users List Subject: Re: Unable to access Global JNDI Resource On 04/10/2016 09:33, Chinoy Gupta wrote: >

Re: ping websocket clients

2016-10-04 Thread Cristian Lorenzetto
Just a suggestion. Testing browsers saw they support automatic pong replying to ping, but developers can't ping programmatically because no ping API exists. So it suggests server might send ping automatically. In addition also for security reasons it is better server test about running

Re: Unable to access Global JNDI Resource

2016-10-04 Thread Mark Thomas
On 04/10/2016 09:33, Chinoy Gupta wrote: > Hi Mark, > > I verified with the changes you made and it is working now. Thanks a lot. Is > there any plan for next release in near future? I typically do releases monthly, starting the release process at the beginning of the month. I like to clear all

RE: Unable to access Global JNDI Resource

2016-10-04 Thread Chinoy Gupta
Hi Mark, I verified with the changes you made and it is working now. Thanks a lot. Is there any plan for next release in near future? Regards, Chinoy -Original Message- From: Mark Thomas [mailto:ma...@apache.org] Sent: Tuesday, October 04, 2016 12:27 PM To: Tomcat Users List

Re: Tomcat 8 HTTPS issue with old browser

2016-10-04 Thread Garratt, Dave
The requirement for HTTPS is only a recent requirement and the application is now heavily dependent on Java 8. At this point I don’t know just how old a version of Tomcat I would need to make it work and I would have to make significant changes to the code in order to make it Java 6/7

Re: Tomcat 8 HTTPS issue with old browser

2016-10-04 Thread tomcat
On 04.10.2016 09:38, Garratt, Dave wrote: I have Apache Tomcat 8 working ok with https when I connect to my web page using a recent browser (desktop) or iPhone for example. However this specific application is designed to run on a Motorola MC9090 hand held wireless barcode scanner running a

Tomcat 8 HTTPS issue with old browser

2016-10-04 Thread Garratt, Dave
I have Apache Tomcat 8 working ok with https when I connect to my web page using a recent browser (desktop) or iPhone for example. However this specific application is designed to run on a Motorola MC9090 hand held wireless barcode scanner running a relatively old version of Windows Mobile. The

Re: Trigger sessionDestroyed event from custom ManagerBase

2016-10-04 Thread Mark Thomas
On 03/10/2016 17:38, GOKULA KRISHNAN wrote: > Hi, > > I want to trigger the sessionDestroyed event from custom implementation of > ManagerBase. sessionDestroyed is not called when session expires but called > during session invalidate. I need to call sessionDestroyed during session > time out.

Re: Unable to access Global JNDI Resource

2016-10-04 Thread Mark Thomas
On 04/10/2016 04:54, Chinoy Gupta wrote: > Hi Mark, > > Thanks for the info. But I am afraid the custom loader directly > extends URLClassLoader. Actually my application is a generic web app > which can be deployed in any ApplciationServer like tomcat, JBoss, > etc. So I don't have any tomcat

Re: Is there a 6.0.x patch for CVE-2016-5388?

2016-10-04 Thread Vamsavardhana Reddy
Hi, Thanks for your reply. I meant to ask if Tomcat will be releasing a 6.0.x version (say 6.0.46?) addressing this CVE. If yes, what time frame may I expect this version out? Best regards, Vamsi

Re: Trigger sessionDestroyed event from custom ManagerBase

2016-10-04 Thread GOKULA KRISHNAN
Thanks Coty, for your intro :) Hi All, Is there any update for my query ? On Mon, Oct 3, 2016 at 10:16 PM, Coty Sutherland wrote: > I set Gokul here from #tomcat on freenode :) Just for a bit more > information (since it was excluded): > > Good UGT, i'm using java -