Re: Can't get APR running w/ Tomcat 6.0.33 (Debian)

2011-12-20 Thread Pid
On 20/12/2011 17:33, Gregor S. wrote: > Ok, here's some news: > > When using the APR without SSL by changing the attribute of > APRLiefeCycleListener to > > SSLEngine="off" /> > > it's working. > > My SSL-version is > > OpenSSL> version > OpenSSL 0.9.8c 05 Sep 2006 Should probably update tha

Re: Can't get APR running w/ Tomcat 6.0.33 (Debian)

2011-12-20 Thread Gregor S.
Chris, On Tue, Dec 20, 2011 at 9:25 PM, Christopher Schultz wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > That's an interesting academic question: would "the stock market" > provide enough entropy? when looking at my small portfolio becoming smaller and smaller and determing again

Re: Can't get APR running w/ Tomcat 6.0.33 (Debian)

2011-12-20 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, On 12/20/11 3:10 PM, André Warnier wrote: > > Maybe you could just connect it to the stock market ? That's an interesting academic question: would "the stock market" provide enough entropy? On the one hand, everything is essentially random, b

Re: Can't get APR running w/ Tomcat 6.0.33 (Debian)

2011-12-20 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Gregor, On 12/20/11 1:53 PM, Gregor S. wrote: > On Tue, Dec 20, 2011 at 7:43 PM, Christopher Schultz > wrote: > >> Do you have an OpenSSL crypto provider that you'd like to use >> *besides* the software-based one? If so, that's where you'd >> spec

Re: Can't get APR running w/ Tomcat 6.0.33 (Debian)

2011-12-20 Thread André Warnier
Gregor S. wrote: Hi Chris, On Tue, Dec 20, 2011 at 7:43 PM, Christopher Schultz wrote: Yeah, it's a question of faster startup or "better" entropy. Everything is PRNGs, anyway. If you want real entropy, you have to listen to cosmic background radiation or something. Now *that* sound interes

Re: Can't get APR running w/ Tomcat 6.0.33 (Debian)

2011-12-20 Thread Gregor S.
Hi Chris, On Tue, Dec 20, 2011 at 7:43 PM, Christopher Schultz wrote: > Yeah, it's a question of faster startup or "better" entropy. > Everything is PRNGs, anyway. If you want real entropy, you have to > listen to cosmic background radiation or something. Now *that* sound interesting: How do I

Re: Can't get APR running w/ Tomcat 6.0.33 (Debian)

2011-12-20 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Gregor, On 12/20/11 12:51 PM, Gregor S. wrote: > Ok, it's not the best solution since AFAIK /dev/urandom is not the > most secure implementation, but at least it's working now. Yeah, it's a question of faster startup or "better" entropy. Everything

Re: Can't get APR running w/ Tomcat 6.0.33 (Debian)

2011-12-20 Thread Gregor S.
This time, it's great some of the guys are on Google+. Thanks to +Jean-Frederic Clere, I changed the listener-definition to and it's working now. Ok, it's not the best solution since AFAIK /dev/urandom is not the most secure implementation, but at least it's working now. When reading the docs

Re: Can't get APR running w/ Tomcat 6.0.33 (Debian)

2011-12-20 Thread André Warnier
André Warnier wrote: Gregor S. wrote: Ok, here's some news: When using the APR without SSL by changing the attribute of APRLiefeCycleListener to it's working. My SSL-version is OpenSSL> version OpenSSL 0.9.8c 05 Sep 2006 According to the docs (http://tomcat.apache.org/tomcat-6.0-doc/apr.h

Re: Can't get APR running w/ Tomcat 6.0.33 (Debian)

2011-12-20 Thread André Warnier
Gregor S. wrote: Ok, here's some news: When using the APR without SSL by changing the attribute of APRLiefeCycleListener to it's working. My SSL-version is OpenSSL> version OpenSSL 0.9.8c 05 Sep 2006 According to the docs (http://tomcat.apache.org/tomcat-6.0-doc/apr.html) this should be fi

Re: Can't get APR running w/ Tomcat 6.0.33 (Debian)

2011-12-20 Thread Gregor S.
Ok, here's some news: When using the APR without SSL by changing the attribute of APRLiefeCycleListener to it's working. My SSL-version is OpenSSL> version OpenSSL 0.9.8c 05 Sep 2006 According to the docs (http://tomcat.apache.org/tomcat-6.0-doc/apr.html) this should be fine. Anybody got an

Re: Can't get APR running w/ Tomcat 6.0.33 (Debian)

2011-12-20 Thread Gregor S.
Hi André, that's a good idea trying the APR w/o SSL, I'll give it a try pretty soon. Still, we do need SSL (personal data, we're obliged by law), but that might give me a clue at what to look at. Updating Java and the OS unfortunately (big, big sighh) is not an option, at least for the next

Re: Can't get APR running w/ Tomcat 6.0.33 (Debian)

2011-12-20 Thread André Warnier
Gregor S. wrote: Hi guys, I'm a bit desperated: I'm trying to re-organize our "pet" Tomcat within the following environment: Using CATALINA_BASE: /home/tomcat/local/apache-tomcat-6.0.33 Using CATALINA_HOME: /home/tomcat/local/apache-tomcat-6.0.33 Using CATALINA_TMPDIR: /home/tomcat/local/a

Can't get APR running w/ Tomcat 6.0.33 (Debian)

2011-12-20 Thread Gregor S.
Hi guys, I'm a bit desperated: I'm trying to re-organize our "pet" Tomcat within the following environment: Using CATALINA_BASE: /home/tomcat/local/apache-tomcat-6.0.33 Using CATALINA_HOME: /home/tomcat/local/apache-tomcat-6.0.33 Using CATALINA_TMPDIR: /home/tomcat/local/apache-tomcat-6.0.33