Re: Question about custom JSSEImplementation

2016-09-22 Thread Jacopo Cappellato
On Thu, Sep 22, 2016 at 4:07 PM, Mark Thomas wrote: > > It is only used by BIO which has been removed in 8.5.x. Even in 8.0.x I > don't see anywhere obvious it could help unless you: > a) set bindOnInit to false > and > b) start/stop the connector frequently > > In that case, it could speed up th

Question about custom JSSEImplementation

2016-09-22 Thread Jacopo Cappellato
Hi all, I am reviewing some legacy code in Apache OFBiz [*], in the attempt to simplify its integration with Tomcat 8.0.+ and in preparation to upgrade to Tomcat 8.5.+. I have noticed that OFBiz, which starts a Tomcat instance in embedded mode, uses a legacy class that extends the Tomcat's JSSEImp

Re: Enabling X-XSS-Protection

2015-12-14 Thread Jacopo Cappellato
Hi Mark, I have created a ticket and attached a patch to it: https://bz.apache.org/bugzilla/show_bug.cgi?id=58735 Thanks, Jacopo On 08/10/2015, Mark Thomas wrote: > On 08/10/2015, Jacopo Cappellato wrote: >>... >> Do you think that HttpHeaderSecurityFilter should be enhanced to

Enabling X-XSS-Protection

2015-10-07 Thread Jacopo Cappellato
Hi all, I am looking for a way to add the X-XSS-Protection header (*) to the response from Tomcat. I am currently using the Tomcat's HttpHeaderSecurityFilter that allows to setup other useful security related headers but it doesn't seem to support the X-XSS-Protection header (**). Do you think t

Re: Issue running Websockets JSR356 with Tomcat 7.0.50 Embedded

2014-02-25 Thread Jacopo Cappellato
On Feb 25, 2014, at 4:20 PM, Mark Thomas wrote: > On 25/02/2014 15:14, Jacopo Cappellato wrote: >> Any hints? I would really appreciate if someone could provide some >> pointers (e.g. classes involved etc) about the implementation of the >> mechanism used to discover an

Re: Issue running Websockets JSR356 with Tomcat 7.0.50 Embedded

2014-02-25 Thread Jacopo Cappellato
I set jarScanner.setScanClassPath(false) Thanks, Jacopo On Feb 14, 2014, at 7:58 PM, Jacopo Cappellato wrote: > Here is the client code that I use to recreate the "problem": > >public static void main(String[] args) throws Exception { > >String currentDir = new File(".&qu

Re: Websocket classes in tomcat-embed-core-7.0.52.jar

2014-02-20 Thread Jacopo Cappellato
On Feb 20, 2014, at 9:10 AM, Ralph Schaer wrote: > Hi > > The embedded core jar 7.0.52 no longer contains the websocket classes. > It only contains an empty org.apache.tomcat.websocket package > > Version 7.0.50 of the embedded core contains all the websocket classes. > > Is this a intentional

Re: Issue running Websockets JSR356 with Tomcat 7.0.50 Embedded

2014-02-14 Thread Jacopo Cappellato
9); } } I run this code from a folder containing the "examples" webapp and the Tomcat jars. Is there a way to deploy successfully the websockets with setScanClassPath(false) ? Thanks, Jacopo On Feb 13, 2014, at 6:47 PM, Jacopo Cappellato wrote: > Hello all, > &

Re: Issue running Websockets JSR356 with Tomcat 7.0.50 Embedded

2014-02-13 Thread Jacopo Cappellato
). Since I doubt we will be able to set it to true in OFBiz, I would really appreciate if you could provide some hints about the mechanism that Tomcat uses to deploy websockets. Am I completely off track? Thanks, Jacopo On Jan 29, 2014, at 4:42 PM, Jacopo Cappellato wrote: > Hello all, >

Re: Issue running Websockets JSR356 with Tomcat 7.0.50 Embedded

2014-01-29 Thread Jacopo Cappellato
Thank you Mark! Please see inline: On Jan 29, 2014, at 4:50 PM, Mark Thomas wrote: > On 29/01/2014 15:42, Jacopo Cappellato wrote: >> Hello all, >> >> I am trying to deploy and use Websockets using the Tomcat 7.0.50 *Embedded* >> distribution [*]. > > Ja

Issue running Websockets JSR356 with Tomcat 7.0.50 Embedded

2014-01-29 Thread Jacopo Cappellato
Hello all, I am trying to deploy and use Websockets using the Tomcat 7.0.50 *Embedded* distribution [*]. Some more details on my environment: * I have the following jars in my classpath: ** tomcat-7.0.50-tomcat-embed-core.jar ** tomcat-7.0.50-tomcat-embed-jasper.jar ** tomcat-7.0.50-tomcat-embed

Re: Fine tune or disable JMX activity

2012-06-22 Thread Jacopo Cappellato
On Jun 22, 2012, at 5:45 PM, Caldarale, Charles R wrote: > So let's see... you're using VisualVM which depends on JMX to retrieve the > information it reports, and you want to disable JMX? > > I think you're observing self-induced behavior. ah ah, yes I think you are quite right and it was a d

Re: Fine tune or disable JMX activity

2012-06-22 Thread Jacopo Cappellato
On Jun 22, 2012, at 5:11 PM, Pid wrote: > On 22/06/2012 16:09, Jacopo Cappellato wrote: >> Hi all, >> >> I am a committer of the Apache OFBiz project; OFBiz uses Tomcat 7.0.28 in >> embedded mode. >> While doing some profiling with Java VisualVM I have

Fine tune or disable JMX activity

2012-06-22 Thread Jacopo Cappellato
Hi all, I am a committer of the Apache OFBiz project; OFBiz uses Tomcat 7.0.28 in embedded mode. While doing some profiling with Java VisualVM I have noticed that a lot of object (java.util.TreeMap$Entry) are created even when there is no traffic; they don't represent a memory leak because a ga

Re: OutOfMemoryError happening in embedded instance of Tomcat 6 (Apache OFBiz project)

2008-07-08 Thread Jacopo Cappellato
(we are running some load testing sessions right now). Thanks so much and sorry for the off-topic. Jacopo On Jul 7, 2008, at 6:03 PM, Filip Hanik - Dev Lists wrote: just use the -XX:+HeapDumpOnOutOfMemoryError and see what is causing the OOME Filip Jacopo Cappellato wrote: Hi all, I am

OutOfMemoryError happening in embedded instance of Tomcat 6 (Apache OFBiz project)

2008-07-07 Thread Jacopo Cappellato
Hi all, I am one of the committers and PMC member of the Apache OFBiz project (ofbiz.apache.org). Our project is using an embedded instance of Tomcat to run the web applications that compose the OFBiz suite of ERP applications. A few weeks ago, with rev. 659490, we have upgraded Tomcat from