Missing TLS cipher suite definition

2021-10-08 Thread Farber, Ilja
Hi all, I noticed org.apache.tomcat.util.net.openssl.ciphers.Cipher does not define the cipher suites defined by rfc 6367 and 6209. The ciphers are listed https://docs.oracle.com/javase/9/docs/specs/security/standard-names.html and should be valid for TLS 1.2. For example

Re: Tomcat 9.0 async read becomes blocking with chunked transfer-encoding

2021-10-08 Thread Javateck
Thank you Mark Andrew > On Oct 8, 2021, at 1:44 AM, Mark Thomas wrote: > > On 07/10/2021 22:23, Javateck wrote: >> Hi Mark, >> Just wondering whether we have a radar to track this, will it be in release >> notes for next release? > > The fix is in 9.0.54 and is listed in the changelog. > >

Re: JASPIC Plugin for OIDC/JWT/OAuth

2021-10-08 Thread Michael Kolenda
Thanks Mark! Will take a look On Fri, Oct 8, 2021, 5:01 AM Mark Thomas wrote: > On 07/10/2021 18:37, Michael Kolenda wrote: > > Hey Tomcat Users, > > > > I've run into an interesting behavior with a custom JASPIC provider. When > > there is an existing session i.e. JSESSIONID cookie, It appears

Re: Test valve with tomcat-embed 9?

2021-10-08 Thread Mark Thomas
On 08/10/2021 11:43, Me Self wrote: I would like to test a custom tomcat valve with tomcat-embed and junit. Is that possible? Found a few tomcat-embed samples on the web but most seem to only deal with setting up a webapp - something along the lines: @BeforeAll public static void setup()

Test valve with tomcat-embed 9?

2021-10-08 Thread Me Self
I would like to test a custom tomcat valve with tomcat-embed and junit. Is that possible? Found a few tomcat-embed samples on the web but most seem to only deal with setting up a webapp - something along the lines: @BeforeAll public static void setup() throws LifecycleException { Tomcat tomcat

Re: JASPIC Plugin for OIDC/JWT/OAuth

2021-10-08 Thread Mark Thomas
On 07/10/2021 18:37, Michael Kolenda wrote: Hey Tomcat Users, I've run into an interesting behavior with a custom JASPIC provider. When there is an existing session i.e. JSESSIONID cookie, It appears the groups/roles are not checked again... even when the new groups are provided in the client

Re: Tomcat 9.0 async read becomes blocking with chunked transfer-encoding

2021-10-08 Thread Mark Thomas
On 07/10/2021 22:23, Javateck wrote: Hi Mark, Just wondering whether we have a radar to track this, will it be in release notes for next release? The fix is in 9.0.54 and is listed in the changelog. Mark Thanks, Andrew On Sep 27, 2021, at 8:54 AM, Mark Thomas wrote: On 27/09/2021