correct usage of properties to supply database port

2022-03-11 Thread Terence M. Bandoian
On 3/11/2022 9:40 AM, Rob Sargent wrote: On Mar 11, 2022, at 8:17 AM, Thomas Hoffmann (Speed4Trade GmbH) wrote:  -Ursprüngliche Nachricht- Von: Rob Sargent Gesendet: Freitag, 11. März 2022 15:14 An: Tomcat Users List Betreff: Re: correct usage of properties to supply database

Re: Tomcat 9.0.59 - TLS 1.3 cipher configuration ignored (TLS 1.2 ok)

2022-03-11 Thread Christopher Schultz
Torsten, On 3/11/22 06:03, Torsten Krah wrote: It seems to me you are listing a cipher that might be correct according to the OpenSSL documentation, but then whether that is available to your JVM may be different. That is for sure not the problem - just use the "ciphers.sh" from the binary

Connection Closed Errors From JDBC-Pool

2022-03-11 Thread Ryan Bergman
Greetings! I have a problem, possibly (or not) tied to the Tomcat-JDBC Pool. Here is the rundown: Application Server: Apache Tomcat 9.0.56 JDBC Connection Pool: org.apache.tomcat.jdbc.pool.DataSource; Tomcat-JDBC 9.0.56 Oracle Version: Oracle Database 19c Enterprise Edition Release 19.0.0.0.0

Re: correct usage of properties to supply database port

2022-03-11 Thread Rob Sargent
> On Mar 11, 2022, at 8:17 AM, Thomas Hoffmann (Speed4Trade GmbH) > wrote: > >  > >> -Ursprüngliche Nachricht- >> Von: Rob Sargent >> Gesendet: Freitag, 11. März 2022 15:14 >> An: Tomcat Users List >> Betreff: Re: correct usage of properties to supply database port >> >> >>

AW: correct usage of properties to supply database port

2022-03-11 Thread Thomas Hoffmann (Speed4Trade GmbH)
> -Ursprüngliche Nachricht- > Von: Rob Sargent > Gesendet: Freitag, 11. März 2022 15:14 > An: Tomcat Users List > Betreff: Re: correct usage of properties to supply database port > > > > > On Mar 11, 2022, at 6:50 AM, Mark H. Wood wrote: > > > > On Thu, Mar 10, 2022 at 09:40:48AM

Re: correct usage of properties to supply database port

2022-03-11 Thread Rob Sargent
> On Mar 11, 2022, at 6:50 AM, Mark H. Wood wrote: > > On Thu, Mar 10, 2022 at 09:40:48AM -0700, Rob Sargent wrote: >> About context/context/value: I have this context.xml. Is the value >> correctly inside the outer Context? >> >> >> >> > name="jdbc/sgsdb/tbar" >>

Re: correct usage of properties to supply database port

2022-03-11 Thread Mark H. Wood
On Thu, Mar 10, 2022 at 09:40:48AM -0700, Rob Sargent wrote: > About context/context/value:  I have this context.xml. Is the value > correctly inside the outer Context? > > > >     name="jdbc/sgsdb/tbar" >   url="jdbc:postgresql://localhost:5432:/tbar" >  

Re: Tomcat 9.0.59 - TLS 1.3 cipher configuration ignored (TLS 1.2 ok)

2022-03-11 Thread Torsten Krah
> It seems to me you are listing a cipher that might be correct > according to the OpenSSL documentation, but then whether that is > available to your JVM may be different. That is for sure not the problem - just use the "ciphers.sh" from the binary directory of tomcat which will list you all

RE: Tomcat 9.0.59 - TLS 1.3 cipher configuration ignored (TLS 1.2 ok)

2022-03-11 Thread Hiran CHAUDHURI
CONFIDENTIAL & RESTRICTED Hello Torsten. It seems to me you are listing a cipher that might be correct according to the OpenSSL documentation, but then whether that is available to your JVM may be different. Maybe you can run some small java application on the very same JVM to simply list the

AW: Tomcat 9.0.59 - TLS 1.3 cipher configuration ignored (TLS 1.2 ok)

2022-03-11 Thread Thomas Hoffmann (Speed4Trade GmbH)
> -Ursprüngliche Nachricht- > Von: Torsten Krah > Gesendet: Freitag, 11. März 2022 10:30 > An: users@tomcat.apache.org > Betreff: Re: Tomcat 9.0.59 - TLS 1.3 cipher configuration ignored (TLS 1.2 ok) > > Am Freitag, dem 11.03.2022 um 09:17 + schrieb Thomas Hoffmann > (Speed4Trade

Re: Tomcat 9.0.59 - TLS 1.3 cipher configuration ignored (TLS 1.2 ok)

2022-03-11 Thread Torsten Krah
Am Freitag, dem 11.03.2022 um 09:17 + schrieb Thomas Hoffmann (Speed4Trade GmbH): > The configuration which works for me is: > > protocol="org.apache.coyote.http11.Http11NioProtocol" > > > sslImplementationName="org.apache.tomcat.util.net.openssl.OpenSSLImpl > ementation" > >

Re: Tomcat 9.0.59 - TLS 1.3 cipher configuration ignored (TLS 1.2 ok)

2022-03-11 Thread Torsten Krah
Am Freitag, dem 11.03.2022 um 10:09 +0100 schrieb Torsten Krah: > So it seems like a bug to me, right? I had a quick look on the JNI SSLContext code + the native implementation: TCN_IMPLEMENT_CALL(jboolean, SSL, setCipherSuites)(TCN_STDARGS, jlong ssl,

AW: Tomcat 9.0.59 - TLS 1.3 cipher configuration ignored (TLS 1.2 ok)

2022-03-11 Thread Thomas Hoffmann (Speed4Trade GmbH)
> -Ursprüngliche Nachricht- > Von: Torsten Krah > Gesendet: Freitag, 11. März 2022 10:01 > An: users@tomcat.apache.org > Betreff: Re: Tomcat 9.0.59 - TLS 1.3 cipher configuration ignored (TLS 1.2 ok) > > Am Freitag, dem 11.03.2022 um 08:52 + schrieb Thomas Hoffmann > (Speed4Trade

Re: Tomcat 9.0.59 - TLS 1.3 cipher configuration ignored (TLS 1.2 ok)

2022-03-11 Thread Torsten Krah
Am Freitag, dem 11.03.2022 um 09:50 +0100 schrieb Torsten Krah: > (error:1410D0B9:SSL routines:SSL_CTX_set_cipher_list:no cipher match) Reading that message and looking at: https://wiki.openssl.org/index.php/TLS1.3#Ciphersuites there it is written that with TLS 1.3: Applications should use the

Re: Tomcat 9.0.59 - TLS 1.3 cipher configuration ignored (TLS 1.2 ok)

2022-03-11 Thread Torsten Krah
Am Freitag, dem 11.03.2022 um 08:52 + schrieb Thomas Hoffmann (Speed4Trade GmbH): > Hello, > > the protocol attribute looks a bit strange. > > I think it should be: > > protocols="+TLSv1.2,+TLSv1.3"> I tried standalone TLS 1.3 like you suggested: protocols="+TLSv1.3" still the same

AW: Tomcat 9.0.59 - TLS 1.3 cipher configuration ignored (TLS 1.2 ok)

2022-03-11 Thread Thomas Hoffmann (Speed4Trade GmbH)
> -Ursprüngliche Nachricht- > Von: Torsten Krah > Gesendet: Freitag, 11. März 2022 09:35 > An: users@tomcat.apache.org > Betreff: Tomcat 9.0.59 - TLS 1.3 cipher configuration ignored (TLS 1.2 ok) > > Hi, > > I am using Tomcat 9.0.59 and configured it like that: > > >

Re: Tomcat 9.0.59 - TLS 1.3 cipher configuration ignored (TLS 1.2 ok)

2022-03-11 Thread Torsten Krah
Interesting exception on startup when using TLS 1.3 only - configured the connector like this: using only TLS 1.3 and the configured ciphers but now I get this on startup: 11-Mar-2022 09:43:42.753 WARNUNG [main] org.apache.tomcat.util.net.openssl.OpenSSLContext.init Fehler beim

Tomcat 9.0.59 - TLS 1.3 cipher configuration ignored (TLS 1.2 ok)

2022-03-11 Thread Torsten Krah
Hi, I am using Tomcat 9.0.59 and configured it like that: ... Output is: [main] org.apache.catalina.core.AprLifecycleListener.lifecycleEvent Loaded Apache Tomcat Native library [1.2.31] using APR version [1.7.0]. [main] org.apache.catalina.core.AprLifecycleListener.lifecycleEvent APR