RE: tomcat 6 vulnerability scan default error page help

2018-05-07 Thread Berneburg, Cris J. - US
Mark Thanks for taking the time to help. Again, I appreciate it. cjb> We are getting dinged by a vulnerability scan for the default cjb> not-found error page being returned by Tomcat for a Status 404. cjb> [...] cjb> And we're using Tomcat 6.0.37 (ahem). MT> And you are worried about returning

RE: tomcat 6 vulnerability scan default error page help

2018-05-07 Thread Berneburg, Cris J. - US
Leon, Mark, and Alejandro Thanks for your time and suggestions. I appreciate it. cjb> We are getting dinged by a vulnerability scan for the default cjb> not-found error page being returned by Tomcat for a Status 404. cjb> [...] cjb> However, I can't find where the error-page for 404 is defined.

RE: tomcat 6 vulnerability scan default error page help

2018-05-07 Thread Berneburg, Cris J. - US
-Original Message- From: Mark Thomas [mailto:ma...@apache.org] Sent: Wednesday, May 2, 2018 4:01 PM To: users@tomcat.apache.org Subject: Re: tomcat 6 vulnerability scan default error page help > On 02/05/18 20:51, Leon Rosenberg wrote: > > Hi Mark, > > > > I ag

Re: tomcat 6 vulnerability scan default error page help

2018-05-02 Thread alejandro . vargas
You need to unpack catalina.jar in tomcat lib directory, then go to org\apache\catalina\util\, open ServerInfo.properties and edit it server.info=Apache Tomcat server.number= server.built= You need to set to empty these variables, as shown above. Save the file. Pack as jar again Put in the tom

Re: tomcat 6 vulnerability scan default error page help

2018-05-02 Thread Mark Thomas
On 02/05/18 20:51, Leon Rosenberg wrote: > Hi Mark, > > I agree with you that the complaint about version number is rather a minor > one, however, I've had the same situation as one of our projects had to > pass through a PCI Compliance test, and this is what they really test for. Don't get me st

Re: tomcat 6 vulnerability scan default error page help

2018-05-02 Thread Leon Rosenberg
Hi Mark, I agree with you that the complaint about version number is rather a minor one, however, I've had the same situation as one of our projects had to pass through a PCI Compliance test, and this is what they really test for. regards Leon On Wed, May 2, 2018 at 9:42 PM, Mark Thomas wrote:

Re: tomcat 6 vulnerability scan default error page help

2018-05-02 Thread Mark Thomas
On 02/05/18 20:27, Berneburg, Cris J. - US wrote: > We are getting dinged by a vulnerability scan for the default not-found error > page being returned by Tomcat for a Status 404. > > On my dev server when requesting an invalid URL, Tomcat returns a Status 404 > page that displays the Tomcat ver

Re: tomcat 6 vulnerability scan default error page help

2018-05-02 Thread Leon Rosenberg
Hi Cris, try to add following to your web.xml 404 /error404.html regards Leon On Wed, May 2, 2018 at 9:27 PM, Berneburg, Cris J. - US wrote: > We are getting dinged by a vulnerability scan for the default not-found > error page being returned by Tomcat for a Status

Re: Tomcat 6.x 32bit-- becomes non responsive state / crash/hang

2016-03-15 Thread Christopher Schultz
r do you get some kind of exception in Tomcat's catalina.out or other log? Thanks, - -chris > -Original Message- From: Mark Thomas > [mailto:ma...@apache.org] Sent: 14 March 2016 20:14 To: Tomcat > Users List Subject: Re: Tomcat 6.x 32bit-- becomes non responsive > state / crash

RE: Tomcat 6.x 32bit-- becomes non responsive state / crash/hang

2016-03-14 Thread Mahudeswaran A
-Original Message- From: Mark Thomas [mailto:ma...@apache.org] Sent: 14 March 2016 20:14 To: Tomcat Users List Subject: Re: Tomcat 6.x 32bit-- becomes non responsive state / crash/hang On 14/03/2016 14:41, Mahudeswaran A wrote: > Hi, > > We are facing unusual issue in Tomcat 6.x, wh

Re: Tomcat 6.x 32bit-- becomes non responsive state / crash/hang

2016-03-14 Thread Mark Thomas
On 14/03/2016 14:41, Mahudeswaran A wrote: > Hi, > > We are facing unusual issue in Tomcat 6.x, where Tomcat 6.x becomes non > responsive state after two week's time. > This happens randomly; > The jvisualvm screen shows CPU, memory, thread are normal and we don't see > memory leak, thread leak

Re: Tomcat 6 | Tomcat with APR causing Thread Blocking

2016-02-10 Thread Christopher Schultz
t; 2016 7:42 PM To: Tomcat Users List Subject: Re: Tomcat 6 | Tomcat > with APR causing Thread Blocking > > Ravi, > > On 2/9/16 7:10 AM, Ranjan, Ravi wrote: >> HI Chris, > >> Sorry for a delayed response. Here is few information that you >> asked for: 1.

RE: Tomcat 6 | Tomcat with APR causing Thread Blocking

2016-02-09 Thread Ranjan, Ravi
I am able to crack this one. Regards, Ravi Ranjan -Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: Tuesday, February 09, 2016 7:42 PM To: Tomcat Users List Subject: Re: Tomcat 6 | Tomcat with APR causing Thread Blocking -BEGIN PGP SIGNED

Re: Tomcat 6 | Tomcat with APR causing Thread Blocking

2016-02-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ravi, On 2/9/16 7:10 AM, Ranjan, Ravi wrote: > HI Chris, > > Sorry for a delayed response. Here is few information that you > asked for: 1. Tomcat Native Library version is 1.1.30 and APR > version is 1.4.8 2. I am running my tomcat 6.0.41 on Windo

RE: Tomcat 6 | Tomcat with APR causing Thread Blocking

2016-02-09 Thread Ranjan, Ravi
nks, Ravi Ranjan -Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: Saturday, February 06, 2016 4:18 AM To: Tomcat Users List Subject: Re: Tomcat 6 | Tomcat with APR causing Thread Blocking -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ravi, On 2/4/16

Re: Tomcat 6 | Tomcat with APR causing Thread Blocking

2016-02-05 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ravi, On 2/4/16 2:15 AM, Ranjan, Ravi wrote: > I am new to this user list and this is the first email I am > sending out to you. Hope you will let me know if more > information/logs/dump/test case/clarity is required. Welcome. > So I am working wit

Re: Tomcat 6, DB2 Driver Problems

2015-10-27 Thread Christopher Schultz
Simone, On 10/27/15 10:39 AM, simone.rodenbach@devk.de wrote: > we are using Apache Tomcat/6.0.41. I added the database driver " db2jcc4.jar" > into the tomcat lib folder. > Our application don't deploy the database driver. We are connecting to the > datasource with a jndi datasource lookup

Re: Tomcat 6, DB2 Driver Problems

2015-10-27 Thread Anderson Ramos
Hi Simone ! Are you tried to put this jar driver on tomcat common libs ? I hope helped you. Best regards... Em 27/10/2015 12:39, escreveu: > Hi, > > we are using Apache Tomcat/6.0.41. I added the database driver " > db2jcc4.jar" into the tomcat lib folder. > Our application don't deploy the da

Re: Tomcat 6 : saerching for a bug fix between 6.0.24 and 6.0.44

2015-06-25 Thread Pascal Abaziou
> Le 25 juin 2015 à 16:16, Christopher Schultz a > écrit : > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Pascal, > > On 6/25/15 10:01 AM, Christopher Schultz wrote: >> Pascal, >> >> On 6/24/15 4:23 PM, Pascal Abaziou wrote: >>> Hello, >> >>> I’m searching for the version that fi

Re: Tomcat 6 : saerching for a bug fix between 6.0.24 and 6.0.44

2015-06-25 Thread Pascal Abaziou
> Le 25 juin 2015 à 21:45, Pascal Abaziou a écrit : > > >> Le 25 juin 2015 à 10:40, André Warnier > > a écrit : >> >> Pascal Abaziou wrote: >> Le 25 juin 2015 à 00:23, Mark Eggers >>> > a écrit : -BEGIN PGP SIGN

Re: Tomcat 6 : saerching for a bug fix between 6.0.24 and 6.0.44

2015-06-25 Thread Pascal Abaziou
> Le 25 juin 2015 à 10:40, André Warnier a écrit : > > Pascal Abaziou wrote: > >>> Le 25 juin 2015 à 00:23, Mark Eggers a >>> écrit : >>> >>> -BEGIN PGP SIGNED MESSAGE- >>> Hash: SHA1 >>> >>> On 6/24/2015 2:40 PM, André Warnier wrote: Pascal Abaziou wrote: > Hello, > >

Re: Tomcat 6 : saerching for a bug fix between 6.0.24 and 6.0.44

2015-06-25 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Pascal, On 6/25/15 10:01 AM, Christopher Schultz wrote: > Pascal, > > On 6/24/15 4:23 PM, Pascal Abaziou wrote: >> Hello, > >> I’m searching for the version that fixes a bug I’ve on a tomcat >> 6.0.24 (on redhat). As I do not reproduce it on my w

Re: Tomcat 6 : saerching for a bug fix between 6.0.24 and 6.0.44

2015-06-25 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Pascal, On 6/24/15 4:23 PM, Pascal Abaziou wrote: > Hello, > > I’m searching for the version that fixes a bug I’ve on a tomcat > 6.0.24 (on redhat). As I do not reproduce it on my windows > workstation with tomcat 6.0.44, I need elements to argue t

Re: Tomcat 6 : saerching for a bug fix between 6.0.24 and 6.0.44

2015-06-25 Thread André Warnier
Pascal Abaziou wrote: Le 25 juin 2015 à 00:23, Mark Eggers a écrit : -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 6/24/2015 2:40 PM, André Warnier wrote: Pascal Abaziou wrote: Hello, I’m searching for the version that fixes a bug I’ve on a tomcat 6.0.24 (on redhat). As I do not reprod

Re: Tomcat 6 : saerching for a bug fix between 6.0.24 and 6.0.44

2015-06-24 Thread Pascal Abaziou
> Le 25 juin 2015 à 00:23, Mark Eggers a écrit : > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On 6/24/2015 2:40 PM, André Warnier wrote: >> Pascal Abaziou wrote: >>> Hello, >>> >>> I’m searching for the version that fixes a bug I’ve on a tomcat >>> 6.0.24 (on redhat). As I do not r

Re: Tomcat 6 : saerching for a bug fix between 6.0.24 and 6.0.44

2015-06-24 Thread Mark Eggers
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 6/24/2015 2:40 PM, André Warnier wrote: > Pascal Abaziou wrote: >> Hello, >> >> I’m searching for the version that fixes a bug I’ve on a tomcat >> 6.0.24 (on redhat). As I do not reproduce it on my windows >> workstation with tomcat 6.0.44, I nee

Re: Tomcat 6 : saerching for a bug fix between 6.0.24 and 6.0.44

2015-06-24 Thread André Warnier
Pascal Abaziou wrote: Hello, I’m searching for the version that fixes a bug I’ve on a tomcat 6.0.24 (on redhat). As I do not reproduce it on my windows workstation with tomcat 6.0.44, I need elements to argue to upgrade to the sys admin. So the bug : with a REST resource service implemented w

Re: Tomcat 6->8 upgrade breaks logout script?

2015-03-25 Thread Baron Fujimoto
On Fri, Mar 20, 2015 at 05:46:42PM -0400, Christopher Schultz wrote: > >On 3/20/15 4:27 PM, Baron Fujimoto wrote: >> I hope someone may be able to provide some insight or a solution to >> a problem we encountered after I upgraded from Tomcat 6 to 8. We're >> using Tomcat as the servlet container fo

Re: Tomcat 6->8 upgrade breaks logout script?

2015-03-20 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Baron, On 3/20/15 4:27 PM, Baron Fujimoto wrote: > I hope someone may be able to provide some insight or a solution to > a problem we encountered after I upgraded from Tomcat 6 to 8. We're > using Tomcat as the servlet container for our Shibboleth I

Re: Tomcat 6 database connection issue

2015-02-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, Sorry... I just can't read through all those reply-to-reply-to-reply-to lines anymore. I'm snipping them out since they are less relevant, now. On 2/24/15 10:50 AM, Mark Maciolek wrote: > Should have mentioned this: > > Switched to tomcat 7,

Re: Tomcat 6 database connection issue

2015-02-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 2/24/15 10:49 AM, Mark Maciolek wrote: > seeing this in the logs: > > [Tue Feb 24 10:17:12 2015] [error] (70007)The timeout specified > has expired: proxy: read response failed from (null) (*) [Tue Feb > 24 10:17:14 2015] [error] ajp_read_

Re: Tomcat 6 database connection issue

2015-02-24 Thread Mark Maciolek
On 2/24/2015 10:22 AM, Daniel Mikusa wrote: On Tue, Feb 24, 2015 at 10:08 AM, Mark Maciolek wrote: On 2/23/2015 2:46 PM, Daniel Mikusa wrote: On Feb 23, 2015 12:49 PM, "Mark Maciolek" wrote: On 2/23/2015 12:37 PM, Daniel Mikusa wrote: On Mon, Feb 23, 2015 at 12:25 PM, Mark Maciolek wr

Re: Tomcat 6 database connection issue

2015-02-24 Thread Mark Maciolek
hi, seeing this in the logs: [Tue Feb 24 10:17:12 2015] [error] (70007)The timeout specified has expired: proxy: read response failed from (null) (*) [Tue Feb 24 10:17:14 2015] [error] ajp_read_header: ajp_ilink_receive failed [Tue Feb 24 10:17:14 2015] [error] (70007)The timeout specified has

Re: Tomcat 6 database connection issue

2015-02-24 Thread Daniel Mikusa
On Tue, Feb 24, 2015 at 10:08 AM, Mark Maciolek wrote: > > On 2/23/2015 2:46 PM, Daniel Mikusa wrote: > >> On Feb 23, 2015 12:49 PM, "Mark Maciolek" wrote: >> >>> >>> On 2/23/2015 12:37 PM, Daniel Mikusa wrote: >>> On Mon, Feb 23, 2015 at 12:25 PM, Mark Maciolek wrote: On 2

Re: Tomcat 6 database connection issue

2015-02-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 2/24/15 10:08 AM, Mark Maciolek wrote: > added this line to my context xml and pool connections start > > factory="org.apache.tomcat.jdbc.pool.DataSourceFactory" had to get > older tomcat-jdbc.jar now on to updating my web pages to use thi

Re: Tomcat 6 database connection issue

2015-02-24 Thread Mark Maciolek
On 2/23/2015 2:46 PM, Daniel Mikusa wrote: On Feb 23, 2015 12:49 PM, "Mark Maciolek" wrote: On 2/23/2015 12:37 PM, Daniel Mikusa wrote: On Mon, Feb 23, 2015 at 12:25 PM, Mark Maciolek wrote: On 2/23/2015 9:55 AM, Daniel Mikusa wrote: On Mon, Feb 23, 2015 at 9:46 AM, Mark Maciolek wrote

Re: Tomcat 6 database connection issue

2015-02-23 Thread Daniel Mikusa
On Feb 23, 2015 12:49 PM, "Mark Maciolek" wrote: > > > On 2/23/2015 12:37 PM, Daniel Mikusa wrote: >> >> On Mon, Feb 23, 2015 at 12:25 PM, Mark Maciolek >> wrote: >> >>> On 2/23/2015 9:55 AM, Daniel Mikusa wrote: >>> On Mon, Feb 23, 2015 at 9:46 AM, Mark Maciolek wrote: hi,

Re: Tomcat 6 database connection issue

2015-02-23 Thread Mark Maciolek
On 2/23/2015 12:37 PM, Daniel Mikusa wrote: On Mon, Feb 23, 2015 at 12:25 PM, Mark Maciolek wrote: On 2/23/2015 9:55 AM, Daniel Mikusa wrote: On Mon, Feb 23, 2015 at 9:46 AM, Mark Maciolek wrote: hi, operating system: Scientific Linux release 6.6 (Carbon) postgres version postgresql-s

Re: Tomcat 6 database connection issue

2015-02-23 Thread Daniel Mikusa
On Mon, Feb 23, 2015 at 12:25 PM, Mark Maciolek wrote: > > On 2/23/2015 9:55 AM, Daniel Mikusa wrote: > >> On Mon, Feb 23, 2015 at 9:46 AM, Mark Maciolek >> wrote: >> >> hi, >>> >>> operating system: >>> Scientific Linux release 6.6 (Carbon) >>> >>> postgres version >>> postgresql-server-8.4.2

Re: Tomcat 6 database connection issue

2015-02-23 Thread Mark Maciolek
On 2/23/2015 9:55 AM, Daniel Mikusa wrote: On Mon, Feb 23, 2015 at 9:46 AM, Mark Maciolek wrote: hi, operating system: Scientific Linux release 6.6 (Carbon) postgres version postgresql-server-8.4.2 tomcat version tomcat6-6.0.24 Tomcat starts and I can reach page at the 8080 port on the se

Re: Tomcat 6 database connection issue

2015-02-23 Thread Daniel Mikusa
On Mon, Feb 23, 2015 at 9:46 AM, Mark Maciolek wrote: > hi, > > operating system: > Scientific Linux release 6.6 (Carbon) > > postgres version > postgresql-server-8.4.2 > > tomcat version > tomcat6-6.0.24 > > Tomcat starts and I can reach page at the 8080 port on the server > when I add the follo

Re: Tomcat 6 APR SSL Issue

2014-10-17 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 James, On 10/14/14 2:16 PM, James Drews wrote: > Hi, I have a question that may be a bug, or I'm just not doing > something right (I'll happily believe either). > > Configuration: Tomcat 6.0 running on Windows Server The > tcnative-1.dll is the lat

Re: Tomcat 6 SSL issue

2014-10-16 Thread Ognjen Blagojevic
Baran, On 16.10.2014 19:20, Baran Topal wrote: I did the new CSR with the new private key. Ok. "You could also add protocol attribute to force JSSE connector (BIO or NIO), to prevent connector auto-selection." 1) What is the protocol attribute and where to add it? To your Connector config

Re: Tomcat 6 SSL issue

2014-10-16 Thread Baran Topal
Thanks for prompt response. I simply missed your mail. I did the new CSR with the new private key. "You could also add protocol attribute to force JSSE connector (BIO or NIO), to prevent connector auto-selection." 1) What is the protocol attribute and where to add it? 2) I think those old cer and

Re: Tomcat 6 SSL issue

2014-10-13 Thread Ognjen Blagojevic
Baran, On 10.10.2014 21:06, Baran Topal wrote: Then I received 2 files from the certificate authority, abc.com.cer and abc.om.p7b What certificates do those files contain? Attribute maxSpareThreads is not listed in docs: http://tomcat.apache.org/tomcat-6.0-doc/config/http.html You co

Re: Tomcat 6 JDBCStore session keep being reset

2014-06-19 Thread Mark Thomas
On 19/06/2014 06:14, Johanes Soetanto wrote: > Is there some advice on how to debug our issues? or is there some obvious > configuration issue that we have? Thanks for all the advice beforehand. Check the system clocks on your production machines. Add a session listener to log the stakctrace whe

Re: tomcat 6 degugging with JULI

2014-05-02 Thread Christopher Schultz
f INFO? - -chris > From: Konstantin Kolinko > [knst.koli...@gmail.com] Sent: Friday, May 02, 2014 10:17 AM To: > Tomcat Users List Subject: Re: tomcat 6 degugging with JULI > > 2014-05-02 17:41 GMT+04:00 Roman, John D. : >> Greetings, Im currently trying to de

RE: tomcat 6 degugging with JULI

2014-05-02 Thread Roman, John D.
: Friday, May 02, 2014 10:17 AM To: Tomcat Users List Subject: Re: tomcat 6 degugging with JULI 2014-05-02 17:41 GMT+04:00 Roman, John D. : > Greetings, > Im currently trying to debug an application in Tomcat 6.0.33. mod_jk is > being used as well. > statements like LOGGER.finest(&quo

Re: tomcat 6 degugging with JULI

2014-05-02 Thread Konstantin Kolinko
2014-05-02 17:41 GMT+04:00 Roman, John D. : > Greetings, > Im currently trying to debug an application in Tomcat 6.0.33. mod_jk is > being used as well. > statements like LOGGER.finest("Logging an INFO-level message"); should log > to catalina.out, however they are not. > > Am I missing somethi

Re: Tomcat 6 SSL CA Certificate does not work, but Self signed Certificate does

2014-04-04 Thread Mark Murphy
Thanks everyone, this has been very informative.

Re: Tomcat 6 SSL CA Certificate does not work, but Self signed Certificate does

2014-04-04 Thread Ognjen Blagojevic
Mark, On 4.4.2014 23:54, Mark Thomas wrote: The CA that signed your certificate might not be one of the root CAs trusted by the user agent. Most likely it is an intermediate CA. The root CA will have signed the intermediate CA's certificate and the intermediate CA will have signed your certifica

Re: Tomcat 6 SSL CA Certificate does not work, but Self signed Certificate does

2014-04-04 Thread Ognjen Blagojevic
Mark, On 4.4.2014 23:00, Mark Murphy wrote: So let me try to understand what is going on here. I generate a keystore using keytool, that contains a key. At this point it is equal to a self signed certificate, and it works, but the browser complains that there is no CA. (Standard on this list i

Re: Tomcat 6 SSL CA Certificate does not work, but Self signed Certificate does

2014-04-04 Thread Mark Thomas
On 04/04/2014 22:00, Mark Murphy wrote: > So let me try to understand what is going on here. I generate a keystore > using keytool, that contains a key. At this point it is equal to a self > signed certificate, and it works, but the browser complains that there is > no CA. I then need to create a c

Re: Tomcat 6 SSL CA Certificate does not work, but Self signed Certificate does

2014-04-04 Thread Toby Lazar
Another option I normally use that may work for you (just confirmed it for myself with tomcat): 1. Copy your private key and signed public certificate in PEM format into a single file looking like this: -BEGIN RSA PRIVATE KEY- Proc-Type: 4,ENCRYPTED DEK-Info: DES-EDE3-CBC,F2CCC247E25D

Re: Tomcat 6 SSL CA Certificate does not work, but Self signed Certificate does

2014-04-04 Thread Mark Murphy
Sorry for the dumb questions, I am new to SSL, and want to understand what I am doing, not just run these instructions, and it should work. On Fri, Apr 4, 2014 at 5:00 PM, Mark Murphy wrote: > So let me try to understand what is going on here. I generate a keystore > using keytool, that contain

Re: Tomcat 6 SSL CA Certificate does not work, but Self signed Certificate does

2014-04-04 Thread Mark Murphy
So let me try to understand what is going on here. I generate a keystore using keytool, that contains a key. At this point it is equal to a self signed certificate, and it works, but the browser complains that there is no CA. I then need to create a certificate request ad send that off to goDaddy.

Re: Tomcat 6 SSL CA Certificate does not work, but Self signed Certificate does

2014-04-04 Thread Daniel Mikusa
On Apr 4, 2014, at 4:42 PM, Mark Murphy wrote: > I saw something on StackOverflow that said the key type in the keystore > needs to be PrivateKeyEntry and not trustedCertEntry. Is this true? When I > look at my keystore, it is trustedCertEntry for all the certs. > > But when I look at the type

Re: Tomcat 6 SSL CA Certificate does not work, but Self signed Certificate does

2014-04-04 Thread Mark Thomas
On 04/04/2014 21:42, Mark Murphy wrote: > I saw something on StackOverflow that said the key type in the keystore > needs to be PrivateKeyEntry and not trustedCertEntry. Is this true? When I > look at my keystore, it is trustedCertEntry for all the certs. > > But when I look at the type for the se

Re: Tomcat 6 SSL CA Certificate does not work, but Self signed Certificate does

2014-04-04 Thread Daniel Mikusa
On Apr 4, 2014, at 4:34 PM, Mark Murphy wrote: > 1.5.0_15 Any chance you could try a more recent JVM? Java 6 or preferably Java 7. That’s really old. Dan > > On Fri, Apr 4, 2014 at 3:23 PM, Daniel Mikusa wrote: >> On Apr 4, 2014, at 2:52 PM, Mark Murphy wrote: >> >>> Created my keystore

Re: Tomcat 6 SSL CA Certificate does not work, but Self signed Certificate does

2014-04-04 Thread Mark Murphy
I saw something on StackOverflow that said the key type in the keystore needs to be PrivateKeyEntry and not trustedCertEntry. Is this true? When I look at my keystore, it is trustedCertEntry for all the certs. But when I look at the type for the self signed certificate (which works), it shows keyE

Re: Tomcat 6 SSL CA Certificate does not work, but Self signed Certificate does

2014-04-04 Thread Mark Murphy
1.5.0_15 On Fri, Apr 4, 2014 at 3:23 PM, Daniel Mikusa wrote: > On Apr 4, 2014, at 2:52 PM, Mark Murphy wrote: > >> Created my keystore according to the directions here: >> http://support.godaddy.com/help/article/5239/generating-a-csr-and-installing-an-ssl-certificate-in-tomcat-4x5x6x7x > > Ok.

Re: Tomcat 6 SSL CA Certificate does not work, but Self signed Certificate does

2014-04-04 Thread Daniel Mikusa
On Apr 4, 2014, at 2:52 PM, Mark Murphy wrote: > Created my keystore according to the directions here: > http://support.godaddy.com/help/article/5239/generating-a-csr-and-installing-an-ssl-certificate-in-tomcat-4x5x6x7x Ok. Good start. > This is what I see in Chrome: > > SSL Connection Error

Re: Tomcat 6 SSL CA Certificate does not work, but Self signed Certificate does

2014-04-04 Thread Mark Murphy
Created my keystore according to the directions here: http://support.godaddy.com/help/article/5239/generating-a-csr-and-installing-an-ssl-certificate-in-tomcat-4x5x6x7x This is what I see in Chrome: SSL Connection Error Unable to make a secure connection to the server. This may be a problem wit

Re: Tomcat 6 SSL CA Certificate does not work, but Self signed Certificate does

2014-04-04 Thread Daniel Mikusa
On Apr 4, 2014, at 1:24 PM, Mark Murphy wrote: > I am trying to set up SSL on tomcat with a CA certificate from goDaddy. > > I am unable to load the Web Page using HTTPS. What exactly happens when you try to access it? Please include browser behavior and any errors / messages it gives you abo

Re: tomcat 6 refuses mod_jk connections after server runs for a couple of days

2014-03-12 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Isaac, On 3/11/14, 6:56 PM, Isaac Gonzalez wrote: > > > -Original Message- From: Christopher Schultz > [mailto:ch...@christopherschultz.net] Sent: Friday, March 07, 2014 > 8:18 AM To: Tomcat Users List Subject: Re: tomcat 6

RE: tomcat 6 refuses mod_jk connections after server runs for a couple of days

2014-03-11 Thread Isaac Gonzalez
-Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: Friday, March 07, 2014 8:18 AM To: Tomcat Users List Subject: Re: tomcat 6 refuses mod_jk connections after server runs for a couple of days -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 3

Re: [Tomcat 6] Maximum webapps in one instance

2014-03-11 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Phillipe, On 3/11/14, 11:03 AM, philippe rouxel wrote: > I use Tomcat in a RestFull application with cxf and spring. It > works fine. > > Actually, this application is deploy in a single web app. > > My client ask if I can slip all the services (n

Re: [Tomcat 6] Maximum webapps in one instance

2014-03-11 Thread André Warnier
philippe rouxel wrote: Hi, I use Tomcat in a RestFull application with cxf and spring. It works fine. Actually, this application is deploy in a single web app. My client ask if I can slip all the services (nearly 100) : he want a webapp for each service. So how many webapps can Tomcat suppor

RE: tomcat 6 refuses mod_jk connections after server runs for a couple of days

2014-03-07 Thread Isaac Gonzalez
-Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: Friday, March 07, 2014 8:18 AM To: Tomcat Users List Subject: Re: tomcat 6 refuses mod_jk connections after server runs for a couple of days -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 3

Re: tomcat 6 refuses mod_jk connections after server runs for a couple of days

2014-03-07 Thread Christopher Schultz
h 04, 2014 >> 12:42 PM To: Tomcat Users List Subject: Re: tomcat 6 refuses >> mod_jk connections after server runs for a couple of days >> >> On Mar 4, 2014, at 1:55 PM, Isaac Gonzalez >> wrote: >> >>> Dan, >>> >>> __

Re: tomcat 6 refuses mod_jk connections after server runs for a couple of days

2014-03-06 Thread Daniel Mikusa
On Mar 5, 2014, at 4:51 PM, Isaac Gonzalez wrote: > > > -Original Message- > From: Daniel Mikusa [mailto:dmik...@gopivotal.com] > Sent: Tuesday, March 04, 2014 12:42 PM > To: Tomcat Users List > Subject: Re: tomcat 6 refuses mod_jk connections after server runs fo

Re: Tomcat 6 vs. Tomcat 7 vs Cisco Load Balancer vs Java Applet

2014-03-05 Thread Bill Davidson
Isn't the applet supposed to send browser cookies regardless of if Javascript can see them? - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Tomcat 6 vs. Tomcat 7 vs Cisco Load Balancer vs Java Applet

2014-03-05 Thread Bill Davidson
On 3/5/2014 2:28 PM, Konstantin Kolinko wrote: The HttpOnly flag is used by cookies sent by server to the client. There is no point checking it on request.getCookies(), as browsers do not send it back (neither do they send 'path', 'secure' etc.). 1. Isn't that what gets sent from the server

Re: Tomcat 6 vs. Tomcat 7 vs Cisco Load Balancer vs Java Applet

2014-03-05 Thread Bill Davidson
On 3/5/2014 2:28 PM, Konstantin Kolinko wrote: The HttpOnly flag is used by cookies sent by server to the client. There is no point checking it on request.getCookies(), as browsers do not send it back (neither do they send 'path', 'secure' etc.). Isn't that showing what the server is sending

Re: Tomcat 6 vs. Tomcat 7 vs Cisco Load Balancer vs Java Applet

2014-03-05 Thread Konstantin Kolinko
2014-03-06 2:11 GMT+04:00 Bill Davidson : > On 3/5/2014 12:52 PM, Konstantin Kolinko wrote: >>Session cookie is HttpOnly in Tomcat 7. >> >>If you missed that in migration guide, it is here: >>http://tomcat.apache.org/migration-7.html#Session_cookie_configuration > > I added this to some code that i

Re: Tomcat 6 vs. Tomcat 7 vs Cisco Load Balancer vs Java Applet

2014-03-05 Thread Bill Davidson
On 3/5/2014 12:52 PM, Konstantin Kolinko wrote: >Session cookie is HttpOnly in Tomcat 7. > >If you missed that in migration guide, it is here: >http://tomcat.apache.org/migration-7.html#Session_cookie_configuration I added this to some code that is executed by most requests that we use to track o

RE: tomcat 6 refuses mod_jk connections after server runs for a couple of days

2014-03-05 Thread Isaac Gonzalez
-Original Message- From: Daniel Mikusa [mailto:dmik...@gopivotal.com] Sent: Tuesday, March 04, 2014 12:42 PM To: Tomcat Users List Subject: Re: tomcat 6 refuses mod_jk connections after server runs for a couple of days On Mar 4, 2014, at 1:55 PM, Isaac Gonzalez wrote: >

Re: Tomcat 6 vs. Tomcat 7 vs Cisco Load Balancer vs Java Applet

2014-03-05 Thread Konstantin Kolinko
2014-03-06 0:30 GMT+04:00 Bill Davidson : > The Java version wasn't it. Recompiled and redeployed with 1.7.0_25 > and it had no effect. > > The SSL handshake problem went away when we disabled TLS 1.1/1.2 in the > JCP on the client side and clicked "Restore Security Prompts" in the JCP. > > There

Re: Tomcat 6 vs. Tomcat 7 vs Cisco Load Balancer vs Java Applet

2014-03-05 Thread Bill Davidson
The Java version wasn't it. Recompiled and redeployed with 1.7.0_25 and it had no effect. The SSL handshake problem went away when we disabled TLS 1.1/1.2 in the JCP on the client side and clicked "Restore Security Prompts" in the JCP. There was also a problem with JSESSIONID not being sent to

Re: Tomcat 6 vs. Tomcat 7 vs Cisco Load Balancer vs Java Applet

2014-03-04 Thread Utkarsh Dave
Did you try generating / regenerating your certificated. Once done put it under your security directory within your jdk home On Tue, Mar 4, 2014 at 11:10 PM, Bill Davidson wrote: > We tried to upgrade a production server to Tomcat 7 yesterday and it > broke our printing applet that we use to c

Re: Tomcat 6 vs. Tomcat 7 vs Cisco Load Balancer vs Java Applet

2014-03-04 Thread Bill Davidson
On 3/4/2014 3:13 PM, Mark Eggers wrote: Hmm, is the applet signed, and is the certificate from a trusted authority? Oracle recently made some changes to Java which tightened down applet security. They also made some changes in the security policy that block communication on well-known ports u

Re: Tomcat 6 vs. Tomcat 7 vs Cisco Load Balancer vs Java Applet

2014-03-04 Thread Mark Eggers
On 3/4/2014 1:36 PM, Bill Davidson wrote: On 3/4/2014 1:24 PM, Christopher Schultz wrote: Well... then you'd need a balancer for each balancer ;) Can you reproduce this issue yourself on your own computer (running the applet locally)? If so, what version of Java is running? That's mostly wha

Re: Tomcat 6 vs. Tomcat 7 vs Cisco Load Balancer vs Java Applet

2014-03-04 Thread Bill Davidson
On 3/4/2014 1:24 PM, Christopher Schultz wrote: Well... then you'd need a balancer for each balancer ;) Can you reproduce this issue yourself on your own computer (running the applet locally)? If so, what version of Java is running? That's mostly what I've been doing for the last 24 hours.

Re: Tomcat 6 vs. Tomcat 7 vs Cisco Load Balancer vs Java Applet

2014-03-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Bill, On 3/4/14, 4:16 PM, Bill Davidson wrote: > On 3/4/2014 11:22 AM, Christopher Schultz wrote: >> >> Aah, sorry, I had missed that. So, the only change was Tomcat? >> No upgrade to mod_jk or anything like that? OpenSSL upgrade? >> Upgraded Java

Re: Tomcat 6 vs. Tomcat 7 vs Cisco Load Balancer vs Java Applet

2014-03-04 Thread Bill Davidson
On 3/4/2014 11:22 AM, Christopher Schultz wrote: Aah, sorry, I had missed that. So, the only change was Tomcat? No upgrade to mod_jk or anything like that? OpenSSL upgrade? Upgraded Java on the client? Everything else *absolutely* the same? Exact same httpd, including mod_jk. Same files. Sam

Re: tomcat 6 refuses mod_jk connections after server runs for a couple of days

2014-03-04 Thread Daniel Mikusa
On Mar 4, 2014, at 1:55 PM, Isaac Gonzalez wrote: > Dan, > > > From: Daniel Mikusa [dmik...@gopivotal.com] > Sent: Tuesday, March 04, 2014 6:20 AM > To: Tomcat Users List > Subject: Re: tomcat 6 refuses mod_jk connections af

Re: Tomcat 6 vs. Tomcat 7 vs Cisco Load Balancer vs Java Applet

2014-03-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Bill, On 3/4/14, 2:14 PM, Bill Davidson wrote: > On 3/4/2014 11:01 AM, Christopher Schultz wrote: >> On 3/4/14, 1:26 PM, Bill Davidson wrote: >>> I realized that I forgot a lot of info: >>> >>> Tomcat 7.0.47 on RHEL 5.10 Apache httpd 2.2.25 >>> >>

Re: Tomcat 6 vs. Tomcat 7 vs Cisco Load Balancer vs Java Applet

2014-03-04 Thread Bill Davidson
On 3/4/2014 11:01 AM, Christopher Schultz wrote: On 3/4/14, 1:26 PM, Bill Davidson wrote: I realized that I forgot a lot of info: Tomcat 7.0.47 on RHEL 5.10 Apache httpd 2.2.25 It worked fine with Tomcat 6.0.37 The applet is bit-for-bit identical. It's built with Java 1.1 compatibility mode.

Re: Tomcat 6 vs. Tomcat 7 vs Cisco Load Balancer vs Java Applet

2014-03-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Bill, On 3/4/14, 1:26 PM, Bill Davidson wrote: > On 3/4/2014 9:40 AM, Bill Davidson wrote: >> We tried to upgrade a production server to Tomcat 7 yesterday and >> it broke our printing applet that we use to control a printer in >> its native printer

RE: tomcat 6 refuses mod_jk connections after server runs for a couple of days

2014-03-04 Thread Isaac Gonzalez
Dan, From: Daniel Mikusa [dmik...@gopivotal.com] Sent: Tuesday, March 04, 2014 6:20 AM To: Tomcat Users List Subject: Re: tomcat 6 refuses mod_jk connections after server runs for a couple of days On Mar 4, 2014, at 6:32 AM, Rainer Jung wrote: >

RE: tomcat 6 refuses mod_jk connections after server runs for a couple of days

2014-03-04 Thread Isaac Gonzalez
Rainer, From: Rainer Jung [rainer.j...@kippdata.de] Sent: Tuesday, March 04, 2014 3:32 AM To: Tomcat Users List Subject: Re: tomcat 6 refuses mod_jk connections after server runs for a couple of days On 27.02.2014 23:06, Isaac Gonzalez wrote: >

Re: Tomcat 6 vs. Tomcat 7 vs Cisco Load Balancer vs Java Applet

2014-03-04 Thread Bill Davidson
On 3/4/2014 9:40 AM, Bill Davidson wrote: We tried to upgrade a production server to Tomcat 7 yesterday and it broke our printing applet that we use to control a printer in its native printer language. This seemed odd to us because it worked perfectly in testing. When we go direct to our product

Re: tomcat 6 refuses mod_jk connections after server runs for a couple of days

2014-03-04 Thread Daniel Mikusa
On Mar 4, 2014, at 6:32 AM, Rainer Jung wrote: > On 27.02.2014 23:06, Isaac Gonzalez wrote: >> Hi Christopher(and Konstantin), attached is a couple of thread dumps of when >> we experienced the issue again today. I also noticed we get this message >> right before the problem occurs: >> Feb 27

Re: tomcat 6 refuses mod_jk connections after server runs for a couple of days

2014-03-04 Thread Rainer Jung
On 27.02.2014 23:06, Isaac Gonzalez wrote: > Hi Christopher(and Konstantin), attached is a couple of thread dumps of when > we experienced the issue again today. I also noticed we get this message > right before the problem occurs: > Feb 27, 2014 12:47:15 PM > org.apache.tomcat.util.threads.Th

Re: tomcat 6 refuses mod_jk connections after server runs for a couple of days

2014-03-03 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Issac, On 3/1/14, 12:41 AM, Isaac Gonzalez wrote: > From: Christopher Schultz > [ch...@christopherschultz.net] Sent: Friday, February 28, 2014 > 11:40 AM To: Tomcat Users List Subject: Re: tomcat

RE: tomcat 6 refuses mod_jk connections after server runs for a couple of days

2014-02-28 Thread Isaac Gonzalez
Christopher, From: Christopher Schultz [ch...@christopherschultz.net] Sent: Friday, February 28, 2014 11:40 AM To: Tomcat Users List Subject: Re: tomcat 6 refuses mod_jk connections after server runs for a couple of days -BEGIN PGP SIGNED MESSAGE

RE: tomcat 6 refuses mod_jk connections after server runs for a couple of days

2014-02-28 Thread Isaac Gonzalez
Christopher From: Christopher Schultz [ch...@christopherschultz.net] Sent: Friday, February 28, 2014 11:38 AM To: Tomcat Users List Subject: Re: tomcat 6 refuses mod_jk connections after server runs for a couple of days -BEGIN PGP SIGNED MESSAGE

Re: tomcat 6 refuses mod_jk connections after server runs for a couple of days

2014-02-28 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Issac, On 2/27/14, 6:23 PM, Isaac Gonzalez wrote: > > -Original Message- From: Konstantin Kolinko > [mailto:knst.koli...@gmail.com] Sent: Thursday, February 27, 2014 > 2:40 PM To: Tomcat Users List Subject: Re: tomcat 6 re

Re: tomcat 6 refuses mod_jk connections after server runs for a couple of days

2014-02-28 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Konstantin, On 2/27/14, 5:40 PM, Konstantin Kolinko wrote: > 2014-02-28 2:06 GMT+04:00 Isaac Gonzalez > : >> Hi Christopher(and Konstantin), attached is a couple of thread >> dumps of when we experienced the issue again today. I also >> noticed we g

RE: tomcat 6 refuses mod_jk connections after server runs for a couple of days

2014-02-27 Thread Isaac Gonzalez
-Original Message- From: Konstantin Kolinko [mailto:knst.koli...@gmail.com] Sent: Thursday, February 27, 2014 2:40 PM To: Tomcat Users List Subject: Re: tomcat 6 refuses mod_jk connections after server runs for a couple of days 2014-02-28 2:06 GMT+04:00 Isaac Gonzalez : >

  1   2   3   4   5   6   7   8   9   10   >