RE: FW: tomcat 8080 thread not reduced

2017-01-19 Thread smith
Hi, chris: >"busy" is the same as "active". When not use , our busy thread always keep under 10 while the currentThreadCount keeps high (these are get from tomcat manager), So we really don't know how many threads are truly free. How many are in keepAlivedStatus -Original Message-

Re: Can Tomcat act as an HTTPS proxy?

2017-01-19 Thread David P. Caldwell
On Thu, Jan 19, 2017 at 7:15 PM, Daniel Savard wrote: > 2017-01-19 12:21 GMT-05:00 David P. Caldwell > : > >> Chris, >> >> Good questions, I'll try to clarify. >> >> 1. The backend server serves files via HTTPS. (I control this, and may >>

Re: Can Tomcat act as an HTTPS proxy?

2017-01-19 Thread Daniel Savard
2017-01-19 12:21 GMT-05:00 David P. Caldwell : > Chris, > > Good questions, I'll try to clarify. > > 1. The backend server serves files via HTTPS. (I control this, and may > switch it to HTTP; see below.) > > 2. The proxy server has an HTTPS connector like this

Re: TomcatCon @ ApacheCon

2017-01-19 Thread Mark Thomas
On 17/01/2017 22:04, Mark Thomas wrote: > On 09/01/2017 11:57, Mark Thomas wrote: > > > >> I look forward to hearing your topic ideas. > > Thanks for all the great ideas so far. I've tried to pull them all > together here: > https://cwiki.apache.org/confluence/display/TOMCAT/TomcatCon+NA+2017

Re: Tcnative.dll apr-1.5.2-win32-src - unable to compile with openssl-1.0.2j-fips-x86_64

2017-01-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Marcus, On 1/19/17 4:30 PM, marcus presley wrote: > I'm able to compile FIPS as DLL's You mean APR and OpenSSL, right? Good. > but when attempting to compile and make tcnative.dll, I receive an > error during compilation: > >

Re: Tcnative.dll apr-1.5.2-win32-src - unable to compile with openssl-1.0.2j-fips-x86_64

2017-01-19 Thread marcus presley
Chris, I'm able to compile FIPS as DLL's, but when attempting to compile and make tcnative.dll, I receive an error during compilation: === libeay32.dll : fatal error LNK1107: invalid or corrupt file: cannot read at 0x390 NMAKE : fatal error U1077:

Re: TomcatCon @ ApacheCon

2017-01-19 Thread Mark Thomas
On 19/01/2017 17:35, Christopher Schultz wrote: > All, > > On 1/17/17 5:04 PM, Mark Thomas wrote: >> On 09/01/2017 11:57, Mark Thomas wrote: > >> > >>> I look forward to hearing your topic ideas. > >> Thanks for all the great ideas so far. I've tried to pull them all >> together here: >>

Re: TomcatCon @ ApacheCon

2017-01-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Coty, On 1/19/17 1:32 PM, Coty Sutherland wrote: >> That's a reasonable position to take IMO, it's just not the >> position that the Tomcat team took. > > I think so ;) > >> The result was Tomcat 8.5 which is essentially the best of both >>

RE: https redirect failed for POST request when behind a load balancer

2017-01-19 Thread Bin Chen
Konstantin: Thank you very much for your reply. To answer your question 1. The api-lb and lb-api was a typo. 2. I was able to reproduce this problem with a single server behind the load balancer. Where http://lb-test-api:8080 was set to forward to https://lb-test-api:8443 using

Re: TomcatCon @ ApacheCon

2017-01-19 Thread Coty Sutherland
> That's a reasonable position to take IMO, it's just not the position > that the Tomcat team took. I think so ;) > The result was Tomcat 8.5 which is essentially the best of both > worlds. One could argue that Tomcat 9 should have become Tomcat 10 and > Tomcat 8.5 should have instead been

Tomcat maintainer's ApacheCon NA presentation

2017-01-19 Thread Coty Sutherland
Hi all, My name is Coty and I'm the maintainer for RHEL tomcat and a co-maintainer for Fedora/EPEL tomcat. I'm reaching out to you all in response to the tomcat users list thread (subject: TomcatCon @ ApacheCon) to see if you're interested in doing a talk with me about linux packaging at the

Re: TomcatCon @ ApacheCon

2017-01-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Coty, On 1/19/17 12:57 PM, Coty Sutherland wrote: >> How about this: submit a topic to the Call for Papers[1] and >> choose "Panel Discussion" for the "Submission Type". If you can >> get some other maintainers coordinated, you can choose to

Re: TomcatCon @ ApacheCon

2017-01-19 Thread Coty Sutherland
> How about this: submit a topic to the Call for Papers[1] and choose > "Panel Discussion" for the "Submission Type". If you can get some > other maintainers coordinated, you can choose to prepare some slides > (maybe 5 mins each) and/or come with some conversation questions to > get things

Re: TomcatCon @ ApacheCon

2017-01-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, On 1/17/17 5:04 PM, Mark Thomas wrote: > On 09/01/2017 11:57, Mark Thomas wrote: > > > >> I look forward to hearing your topic ideas. > > Thanks for all the great ideas so far. I've tried to pull them all > together here: >

Re: Can Tomcat act as an HTTPS proxy?

2017-01-19 Thread David P. Caldwell
Chris, Good questions, I'll try to clarify. 1. The backend server serves files via HTTPS. (I control this, and may switch it to HTTP; see below.) 2. The proxy server has an HTTPS connector like this (but under my initial solution I wasn't thinking I should use it). var _https = new

ExtendedAccessLogValve

2017-01-19 Thread Farhan Tariq
Hello Team, we have tomcat 7.0.68 deployed on linux and start using ExtendedAccessLogValve.class. To capture the log in local system timezone we change the following line "currentTimestampFormat.setTimeZone(TimeZone.getTimeZone("GMT"))" into

Re: Can Tomcat act as an HTTPS proxy?

2017-01-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 David, On 1/19/17 10:38 AM, David P. Caldwell wrote: > I'm trying to forward HTTPS requests through a Tomcat HTTP (or > HTTPS) server to a backend HTTPS server. > > The requests are initiated by a Java HTTP client > (java.net.URLConnection-based).

Re: password prompt

2017-01-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jamie, On 1/19/17 6:21 AM, Jamie wrote: > What's the best way to prompt the user for a password and pass the > value securely to web app internals on Tomcat server startup > (Linux)? Which password? - -chris -BEGIN PGP SIGNATURE- Comment:

Re: FW: tomcat 8080 thread not reduced

2017-01-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Smith, On 1/18/17 8:25 PM, smith wrote: > I don't care if the threads will be reduced, I just want to know > why. Okay. > And we want to use the account to determine when the tomcat > capacity is not enough that we need to add max configuration

Re: Can Tomcat act as an HTTPS proxy?

2017-01-19 Thread David P. Caldwell
One clarification: when I wrote: "is there something configurable that will allow those requests to be forwarded rather than rejected?" ... what I really meant was, is there a way for the request to reach my servlet (which handles all requests), basically. I already have a server-side

Can Tomcat act as an HTTPS proxy?

2017-01-19 Thread David P. Caldwell
I'm trying to forward HTTPS requests through a Tomcat HTTP (or HTTPS) server to a backend HTTPS server. The requests are initiated by a Java HTTP client (java.net.URLConnection-based). So I have: backend HTTPS server (which works) Tomcat server running HTTP and HTTPS connectors Java

password prompt

2017-01-19 Thread Jamie
Hi All What's the best way to prompt the user for a password and pass the value securely to web app internals on Tomcat server startup (Linux)? Thanks Jamie - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For

Re: Tomcat embedded context: Unable to find [java:]

2017-01-19 Thread Tom Eugelink
Took a bit to find time again, but this indeed fixes the problem. Strange registering the ContextFactory didn't. Thanks! On 17-1-2017 20:56, Mark Thomas wrote: On 16/01/2017 09:13, Tom Eugelink wrote: Trying to launch Tomcat 8.0.39 embedded with a datasource configured, I get this error: