Re: NullPointerExceptions from Coyote over SSL

2016-07-25 Thread Peter Robbins
> If you also have tomcat-native installed… No tomcat-native in any environment I saw, but I’ll make sure we check on that config. We’re not knowingly plugging Bouncy Castle into the Tomcat SSL mix at all. We only use it in application logic after registering it with Security.addProvider() in

Re: NullPointerExceptions from Coyote over SSL

2016-07-22 Thread Peter Robbins
n" Somewhere deep within Http11NioProtocol there is a bug that is fixed in Http11Nio2Protocol. Unfortunately, we don’t have the bandwidth to try to isolate it further, though I will update if anything else is uncovered. Thanks, Peter On 7/20/16, 11:13 AM, "Peter Robbins" <peter.robb...@ja

Re: NullPointerExceptions from Coyote over SSL

2016-07-20 Thread Peter Robbins
: 2016-07-20 13:59 GMT+02:00 Peter Robbins <peter.robb...@jamfsoftware.com>: > Ok I'll see if I can dig BC out of the application and have it actually > start up to try to see if that's the case. > > You're saying there are known compatibility issues with Tomcat NIO https >

Re: NullPointerExceptions from Coyote over SSL

2016-07-20 Thread Peter Robbins
from only appearing over https. On Jul 20, 2016 1:56 AM, R?my Maucherat <r...@apache.org> wrote: 2016-07-20 2:54 GMT+02:00 Peter Robbins <peter.robb...@jamfsoftware.com>: > Without JCE or BC? Both are pretty critical for core functionality and > didn't cause any issues until 8.5

Re: NullPointerExceptions from Coyote over SSL

2016-07-19 Thread Peter Robbins
Without JCE or BC? Both are pretty critical for core functionality and didn't cause any issues until 8.5.3 entered the mix. Any known issues there I should be aware of? Peter On Jul 19, 2016 6:24 PM, R?my Maucherat <r...@apache.org> wrote: 2016-07-19 23:51 GMT+02:00 Peter Robbins <p

NullPointerExceptions from Coyote over SSL

2016-07-19 Thread Peter Robbins
Hi there, Versions: Tomcat 8.5.3, JDK 1.8 + JCE, Bouncy Castle 1.48, Ubuntu 14.04 & 16.04,Windows 2012 R2 I’m running into an issue where we are getting NullPointerExceptions from the Coyote connector in a Tomcat web application. This is an existing, stable web application that was recently

Re: Trailing dot in hostname causes TLS handshake to fail

2014-11-13 Thread Peter Robbins
4:03 PM, Peter Robbins wrote: Hi there, I’m running into an issue with fully-qualified domain names and https using Tomcat 8 and JDK 8. Tomcat version: 8.0.14 JDK Version: 1.8.0_25OS: Mac OS X 10.10 If you include the trailing dot in a request over https, the TLS handshake will fail

Trailing dot in hostname causes TLS handshake to fail

2014-11-11 Thread Peter Robbins
Hi there, I’m running into an issue with fully-qualified domain names and https using Tomcat 8 and JDK 8. Tomcat version: 8.0.14 JDK Version: 1.8.0_25OS: Mac OS X 10.10 If you include the trailing dot in a request over https, the TLS handshake will fail. It appears that it tries to fall back to

Re: Trailing dot in hostname causes TLS handshake to fail

2014-11-11 Thread Peter Robbins
I have SNI extension disabled with -Djsse.enableSNIExtension=false and SSLv3 disabled with sslEnabledProtocols=TLSv1,TLSv1.1,TLSv1.2. This should just be vanilla TLS. Peter On 11/11/14, 10:12 PM, Konstantin Kolinko knst.koli...@gmail.com wrote: 2014-11-12 0:03 GMT+03:00 Peter Robbins