Re: Recognizing Certificate Updates

2020-12-29 Thread Mladen Adamović
=8443=reloadSslHostConfigs “ Add a to tomcat-users.xml Beware not to open the Manager App to the public - just localhost. Thank you, Mladen On Tue, Dec 29, 2020 at 3:42 PM Christopher Schultz < ch...@christopherschultz.net> wrote: > Mladen, > > On 12/29/20 03:46, M

Re: Recognizing Certificate Updates

2020-12-29 Thread Mladen Adamović
On Tue, Dec 29, 2020 at 3:18 AM Christopher Schultz < ch...@christopherschultz.net> wrote: > > Honestly, I thought that reloadAfterNDays param to server.xml would be > > better, but admins didn't have an understanding on this topic. > > Don't be a jerk. We understand it. We are just saying that

Re: Recognizing Certificate Updates

2020-12-26 Thread Mladen Adamović
On Sat, Dec 26, 2020 at 6:46 PM John Larsen wrote: > This is why we set up SSL through the web server instead of tomcat. > Apache webserver -> SSL -> Mod_jk <-> Tomcat > It might be easier to install but performance-wise it doesn't make sense. If you care about performances, I think you should

Re: Recognizing Certificate Updates

2020-12-26 Thread Mladen Adamović
If you set up tomcat manager up, you can reload certificate with something like Stop Connector – curl http://localhost:8080/manager/jmxproxy?invoke=Catalina %3Atype%3DConnector%2Cport%3D8443=stop Start Connector – curl http://localhost:8080/manager/jmxproxy?invoke=Catalina

Re: native connector, server problems with "No data received", what could be causing it?

2020-12-18 Thread Mladen Adamović
On Thu, Dec 17, 2020 at 7:57 PM Christopher Schultz < ch...@christopherschultz.net> wrote: > jstack isn't working? Hmm. Make sure that your jstack and Java binary > are the same version. If you are a different user you might have to > elevate privileges and/or use "jstack -F". > I have tried all

Re: native connector, server problems with "No data received", what could be causing it?

2020-12-17 Thread Mladen Adamović
I have just updated to the latest Tomcat 9.0.41 It seems that the problem doesn't appear anymore. If I get it reappeared, I'll post new details to the Tomcat dev mailing list. On Thu, Dec 17, 2020 at 8:56 AM Mladen Adamović wrote: > I have these problems again. To narrow it down I have d

Re: native connector, server problems with "No data received", what could be causing it?

2020-12-16 Thread Mladen Adamović
requests per minute where this problem happened (approx. 26 per second), what do you think should our Connector params be, it's currently: On Wed, Dec 16, 2020 at 7:32 PM Mladen Adamović wrote: > On Wed, Dec 16, 2020 at 7:07 PM Christopher Schultz < > ch...@christopherschultz.n

Re: native connector, server problems with "No data received", what could be causing it?

2020-12-16 Thread Mladen Adamović
On Wed, Dec 16, 2020 at 7:07 PM Christopher Schultz < ch...@christopherschultz.net> wrote: > I think your scripts will restart Tomcat even when it's not necessary. > Hm, is this https://stackoverflow.com/questions/5816239/how-do-i-force-tomcat-to-reload-trusted-certificates the way to reload the

Re: native connector, server problems with "No data received", what could be causing it?

2020-12-16 Thread Mladen Adamović
On Wed, Dec 16, 2020 at 3:27 PM Christopher Schultz < ch...@christopherschultz.net> wrote: > > We have a self-monitoring script which runs on server and when the server > > is not working properly it does a log save and the service restart. > > How do you detect this state? Just make a request

Re: Tomcat serving old TXT file even after deleting work directory and rebooted

2020-04-24 Thread Mladen Adamović
Lame! It turned out that I have @WebServlet(name = "AdsTxt", urlPatterns = {"/ads.txt"}) LOL On Fri, Apr 24, 2020 at 4:48 PM Mladen Adamović wrote: > I've changed ads.txt did upload ROOT.war file and it now contains new > version which is 18892 bytes old, check

Tomcat serving old TXT file even after deleting work directory and rebooted

2020-04-24 Thread Mladen Adamović
I've changed ads.txt did upload ROOT.war file and it now contains new version which is 18892 bytes old, checked files in the filesystem: root@condor1796 /home/glassfish/apache-tomcat-8.5.5 # find . | grep "ads.txt" | xargs ls -l -rw-r- 1 glassfish nogroup 18892 Apr 24 2020

Re: CPU high usage, the reason org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run

2019-11-26 Thread Mladen Adamović
ented here: https://mladenadamovic.wordpress.com/2016/09/06/configure-tomcat-with-ssl-on-ubuntu-minimal/ It wasn't easy for me to configure https/tomcat/letsencrypt... > [1] https://en.wikipedia.org/wiki/Busy_waiting > > > On Tue, Nov 26, 2019 at 4:50 PM Christopher Schultz < >

Re: CPU high usage, the reason org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run

2019-11-26 Thread Mladen Adamović
tthias Urlichs: http://www.brendangregg.com/blog/2017-08-08/linux-load-averages.html On Tue, Nov 26, 2019 at 4:50 PM Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Mladen, > > On 11/25/19 14:36, Mladen A

Re: Error after upgrading to Tomcat 9.0.29

2019-11-25 Thread Mladen Adamović
Try simply to increase -Xss parameter in setenv.sh or setenv.bat, see if it works, since there is no infinite loop (it seems) On Mon, Nov 25, 2019 at 2:15 PM Juri Berlanda wrote: > Hi all, > > I just tried to deploy my WebApplication (OpenWebBeans, MyFaces) to > Tomcat 9.0.29. While

Re: CPU high usage, the reason org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run

2019-11-25 Thread Mladen Adamović
On Mon, Nov 25, 2019 at 5:57 PM Christopher Schultz < ch...@christopherschultz.net> wrote: > > We certainly want to be able to serve 1 hits per second (!), > > while some connections might be stalled. > > What might stall a connection? The network, or the application (or > database, etc.)? >

Re: CPU high usage, the reason org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run

2019-11-25 Thread Mladen Adamović
Hi Christopher, the answers is inline. On Mon, Nov 25, 2019 at 4:54 PM Christopher Schultz < ch...@christopherschultz.net> wrote: > 50k connections is quite a lot. Is this a physical or virtual server? > Do you expect to have lots of long-lived connections that are mostly > idle (e.g.

Re: Official documentation for running an embedded Tomcat server

2019-11-25 Thread Mladen Adamović
I wonder why somebody would want to run "embedded Tomcat" and what it actually means? I'm working professionally in software engineering since 2003 and I'm puzzled. >From looking into that article, it seems that Java app starts Tomcat, why somebody would want that? On Sun, Nov 24, 2019 at 12:27

Re: CPU high usage, the reason org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run

2019-11-24 Thread Mladen Adamović
didn’t get reverted out in Poll.java > > Or maybe not. > > Thanks, > > On Sun, 24 Nov 2019 at 10:36, Mark Thomas wrote: > > > Tomcat version? > > > > Operating system? > > > > Java version? > > > > Mark > > > > >

Re: CPU high usage, the reason org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run

2019-11-24 Thread Mladen Adamović
Tomcat 8.5.5 Java 1.8.0_101 OS: Ubuntu 4.4.0-38-generic On Sun, Nov 24, 2019 at 11:36 AM Mark Thomas wrote: > Tomcat version? > > Operating system? > > Java version? > > Mark > > > On 24/11/2019 09:57, Mladen Adamović wrote: > > I couldn't find the explan

CPU high usage, the reason org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run

2019-11-24 Thread Mladen Adamović
I couldn't find the explanation of this in other threads, I've tried to search the archive. I have a high load average on a server and the reason for that is kernel function futex_wait invoked by java thread. By doing jstack, I see a lot of BLOCKED threads like these: Thread 1725: (state =

Re: Production Tomcat 8.5.5 suddenly started to give ClassNotFoundError

2018-06-26 Thread Mladen Adamović
d not work properly). On Mon, Jun 18, 2018 at 7:46 PM, Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Mladen, > > On 6/16/18 5:37 AM, Mladen Adamović wrote: > > Hi all, > > > > I have a

Production Tomcat 8.5.5 suddenly started to give ClassNotFoundError

2018-06-16 Thread Mladen Adamović
Hi all, I have a production Tomcat server and this morning it started to give strange ClassNotFoundError for stuff which was working for years without a problem. I did redeploy app (by copying into the dir and deleting their ROOT), but it didn't solve the issue, same ClassNotFoundException. On

web.xml and @WebServlet priority when more rules match

2016-10-12 Thread Mladen Adamović
Lets assume that web.xml has a rule One /something/e* While class Two.class has an annotation: @WebServlet(name = "Two", urlPatterns = {"/something/er*"}) >From the Servlet 3.0 specification 8.2.3. (point 4). `The web.xml of the web application has the

Tutorial: Configure Tomcat with HTTPS/SSL on Ubuntu 16.04 LTS (Xenial) using Letsencrypt

2016-09-30 Thread Mladen Adamović
Hi all, I'm running 3 servers with Tomcat (migrated from Glassfish which is not maintained well imo). But documentation is kind of not the best for configuring HTTPS/SSL. I've written my own tutorial how to do that using Letsencrypt and Tomcat native:

Re: java.lang.ClassNotFoundException: org.apache.catalina.filters.HttpHeaderSecurityFilter for app specific web.xml under Tomcat 8.0.9 (bundled with Netbeans)

2016-09-08 Thread Mladen Adamović
t-Type-Options HTTP headers to the response. (markt) And Netbeans embedded version I was using was 8.0.9, I guess that was the problem. On Thu, Sep 8, 2016 at 11:43 AM, Mark Thomas <ma...@apache.org> wrote: > On 08/09/2016 10:12, Mladen Adamović wrote: > > I want in some sp

java.lang.ClassNotFoundException: org.apache.catalina.filters.HttpHeaderSecurityFilter for app specific web.xml under Tomcat 8.0.9 (bundled with Netbeans)

2016-09-08 Thread Mladen Adamović
I want in some specific apps to enable HttpHeaderSecurityFilter (I might have some insecure applications at the same server). I've edited web.xml of one application (not the tomcat/conf/web.xml file to add this filter): httpHeaderSecurity