| 00:09.35 | *** join/#tomcat kanai (n=kanai@124.32.114.226) |
| 00:25.34 | *** join/#tomcat kizoku (n=albus@ti0182a340-0652.bb.online.no) |
| 01:13.30 | *** join/#tomcat albert_kam (n=albert_k@222.124.39.108) |
| 01:51.36 | *** part/#tomcat albert_kam (n=albert_k@222.124.39.108) |
| 02:06.55 | *** join/#tomcat kur1j (n=kur1j@75-143-68-120.dhcp.aubn.al.charter.com) |
| 02:12.06 | kur1j | Tomcat 6.0.16, Vista, Java SE DK Update 6 |
| 02:12.29 | kur1j | I am having trouble connecting to a mysql DB |
| 02:14.00 | kur1j | http://pastebin.com/m22812ca1 |
| 02:29.56 | jwisher_ | first of all, why are you doing it like that? it will be really slow |
| 02:30.00 | jwisher_ | use connection pooling |
| 02:30.09 | kur1j | I just wanted it to connect |
| 02:30.20 | jwisher_ | see line above |
| 02:32.21 | kur1j | well no matter slow or not it won't even connect... |
| 02:33.58 | kur1j | sample code doesnt even work |
| 02:50.27 | *** join/#tomcat albert_kam (n=albert_k@222.124.39.108) |
| 02:53.50 | albert_kam | How to cleanly shutdown a tomcat process ? At times, shutdown.bat or shutdown.sh doesnt do the job and the java process lingers .. |
| 02:58.49 | jasonb | Use my RPM package on Linux, and when you do "service tomcat stop" it really stops, or "service tomcat restart" it reliably restarts. |
| 02:59.02 | jasonb | On Windows, I know of no such solution. |
| 03:03.33 | *** join/#tomcat sarts|work (n=stephan@mocha.foo-projects.org) [NETSPLIT VICTIM] |
| 03:03.33 | *** join/#tomcat b0ef (n=b0ef@062016141231.customer.alfanett.no) [NETSPLIT VICTIM] |
| 03:03.33 | *** join/#tomcat kjetilkWork (n=nnnnnnkk@news.computas.com) [NETSPLIT VICTIM] |
| 03:03.33 | *** join/#tomcat keith80403 (n=keith804@71-208-209-211.hlrn.qwest.net) [NETSPLIT VICTIM] |
| 03:03.33 | *** join/#tomcat deebo (i=globe@funkiest.net) [NETSPLIT VICTIM] |
| 03:05.25 | *** join/#tomcat Georgy32 (n=Georgy32@216.12.218.169) |
| 03:13.32 | albert_kam | jasonb: thanks .. i'm intending to use the kill -9 method for now .. as i dont use the rpm service thing :) |
| 03:21.28 | albert_kam | i think the script here is quite reliable : http://www.randrinc.com/jforum/posts/list/16.page |
| 03:35.58 | *** join/#tomcat xirdal (n=xirdal@cpe-075-181-144-222.carolina.res.rr.com) |
| 03:59.52 | *** part/#tomcat xirdal (n=xirdal@cpe-075-181-144-222.carolina.res.rr.com) |
| 04:00.55 | rev | how would i go about tracking down a problem wrt tomcat's ssl? i'm running tomcat 5.5.25, centos 4.6, java 1.5.0_14, and serving w/ the built-in http/https engine. i've got what appears to be a not uncommon problem- bringing in an SSL cert that was created from a CSR that was not generated by keytool, but by openssl's csr generator. i've no issues running tomcat with a self-signed cert, but even with following the pretty straight forward direct |
| 04:00.55 | rev | ions for bringing in the private key the CSR was made from and the issued cert I can't get it to work. The browser simply relays a tomcat-specific-sounding error about an invalid signature. where would i start to look? |
| 04:26.40 | *** join/#tomcat jasonb (i=noneoyer@adsl-66-124-73-250.dsl.sntc01.pacbell.net) |
| 04:56.05 | *** join/#tomcat acidjnk (n=have@pD950995E.dip0.t-ipconnect.de) |
| 04:57.52 | *** join/#tomcat unlord (i=ptolemy@pool-71-163-166-222.washdc.fios.verizon.net) |
| 05:11.02 | *** join/#tomcat shashi_ (n=shashi@203.197.177.61) |
| 05:32.19 | pfn | rev you should pastebin your server.xml connector settings first |
| 05:32.52 | rev | well, first, i've had an idea that i think might be the source of the problem |
| 05:33.34 | rev | but that said, between working and not-working, the only change in my server.xml was pointing to the keystore holding the self-signed cert or the keystore holding the imported cert |
| 05:35.11 | rev | but since someone is alive, i was just curious- is there any reason that we should use apache+mod_jk/proxy_ajp, etc over tomcat's built-in webserver? |
| 05:35.27 | rev | i mean, i know the usual reasons |
| 05:35.44 | rev | but i'm more curious about security-wise, if that'd be a dumb thing to do |
| 05:36.24 | rev | we have very little static content and were surprised to find that the built-in tomcat http/https engine was performing better than apache with a worker pointing to tomcat was |
| 05:40.25 | pfn | running tomcat standalone is perfectly acceptable |
| 05:40.35 | pfn | use httpd only if you need a fully-featured front-en |
| 05:40.36 | pfn | d |
| 05:40.39 | pfn | url-rewriting, etc. |
| 05:40.47 | rev | we don't have a huge need for that, no |
| 05:41.32 | rev | conventional wisdom generally says that apache would, even if we weren't doing much static content or using apache-specific features, still be a faster pipeline between tomcat and the world |
| 05:42.32 | rev | but we found that there was a subjective difference in tomcat's favor... we figured the risk was it might bomb when hit today with a full load of folks, but it held up really well. we just upgraded to tomcat 5.5.25 on a newserver, did the switch this weekend, and things are going well. |
| 05:42.38 | rev | but still, sort of surprised us. :) |
| 05:44.25 | pfn | nothing to be surprised by |
| 05:44.26 | pfn | httpd sucks |
| 05:44.32 | rev | heh, i guess so! :D |
| 05:44.46 | pfn | it's only really useful as an "application server" for CGI, mod_XXXX, etc. |
| 05:45.04 | rev | a shame that java has to be such a pain in the ass for using an already generated private key for installing a cert |
| 05:45.09 | pfn | it isn't |
| 05:45.14 | pfn | you're doing something wrong, most likely |
| 05:45.33 | pfn | I generate a lot of certificates as pkcs12, etc. and use them without problem |
| 05:45.42 | rev | as far as i can tell it is- if i generated a .key with openssl, you have to go through this kind of rigamorole to get it working- http://www.agentbob.info/agentbob/79-AB.html |
| 05:45.58 | pfn | tomcat supports PEM |
| 05:46.04 | pfn | or you can store it in a pkcs12 |
| 05:46.05 | rev | i'm pretty sure what my actual issue is, but regardless, i still have to go through this |
| 05:46.09 | pfn | or you can import it into a JKS keystore |
| 05:46.25 | rev | but how? how do i give tomcat the goods in PEM rather than import it into a keystore? |
| 05:46.32 | rev | i mean |
| 05:46.37 | pfn | documented on tomcat's site |
| 05:46.40 | rev | i can google that myself, but i hadn't realized it- is it something newer? |
| 05:46.56 | pfn | http://tomcat.apache.org/tomcat-5.5-doc/ssl-howto.html |
| 05:46.58 | rev | e.g. all of the docs point to doing it the keystore way when discussing generating certificates |
| 05:47.40 | pfn | hmm, sounds like 5.5 only supports keystores |
| 05:47.47 | pfn | use pkcs12 then |
| 05:47.58 | pfn | it's a 1 liner-openssl comment |
| 05:47.59 | rev | ...and all that covers is the keystore way of doing things. like i said, i've had no issues generating a self-signed key through a keystore. |
| 05:48.02 | pfn | demonstrated in the docs |
| 05:48.09 | pfn | s/comment/command |
| 05:48.39 | rev | but the issue is then i have a cert that was already generated from a CSR produced by a different openssl oneliner |
| 05:48.48 | pfn | that works fine |
| 05:48.53 | pfn | you import the .key and .crt into a .p12 |
| 05:48.56 | pfn | it's a one-liner |
| 05:49.25 | pfn | and like I said |
| 05:49.30 | pfn | it's documented on the page I linked!!! |
| 05:52.53 | rev | it's alluded to at least. :) but, this has it right on- http://shib.kuleuven.be/docs/ssl_commands.shtml |
| 05:52.55 | rev | :D |
| 05:52.56 | rev | thanks! |
| 06:12.32 | rev | man, i'm going to have to put that on a wiki or something with the right keywords |
| 06:13.19 | rev | even for recent versions of tomcat and java, people have written programs to solve this problem- using an already generated CSR->key to use a cert that was created from that key. |
| 06:14.13 | rev | when they could've just done the nice openssl oneliner you mentioned, and then put in server.xml keystoreType="PKCS12" |
| 06:14.50 | rev | though, it would make sense for the doc to which you linked to mention that as well- it would probably save various in-community folks like yourself a bunch of random headaches :) |
| 06:14.50 | *** join/#tomcat vikumar (n=Vimal@nat/redhat-in/x-570faca99d47f359) |
| 08:24.51 | *** join/#tomcat pfn (n=pfnguyen@hanhuy.com) |
| 08:25.19 | *** join/#tomcat unlord (i=ptolemy@pool-71-163-166-222.washdc.fios.verizon.net) |
| 08:36.18 | *** join/#tomcat nihed1 (n=ikanawa@41.224.207.172) |
| 08:49.09 | *** join/#tomcat cofeineSunshine (n=justinas@78-62-4-27.ip.zebra.lt) |
| 08:51.49 | *** join/#tomcat CrummyGummy (n=dude@dsl-242-15-177.telkomadsl.co.za) |
| 08:55.56 | *** join/#tomcat g00se (n=goose@host81-155-65-112.range81-155.btcentralplus.com) |
| 08:56.39 | g00se | Tomcat 6 - what is the recommended user and group for running it? |
| 09:05.19 | *** join/#tomcat cofeineSunshine (n=justinas@78-62-4-27.ip.zebra.lt) |
| 10:49.11 | *** join/#tomcat cofeineSunshine (n=justinas@78-62-4-27.ip.zebra.lt) |
| 11:18.09 | *** part/#tomcat albert_kam (n=albert_k@222.124.39.108) |
| 11:19.13 | *** join/#tomcat ecruz (n=chatzill@200.99.120.2) |
| 11:46.44 | *** join/#tomcat devfd0 (n=Marouan@41.226.229.161) |
| 12:37.13 | *** join/#tomcat cofeineSunshine (n=justinas@78-62-4-27.ip.zebra.lt) |
| 12:54.40 | *** join/#tomcat randrew (n=raj@dolmen.cc.columbia.edu) |
| 12:57.43 | *** part/#tomcat randrew (n=raj@dolmen.cc.columbia.edu) |
| 13:05.08 | *** join/#tomcat DNC1 (n=david@mail.ratedpeople.com) |
| 13:07.04 | b0ef | ehlo |
| 13:07.10 | b0ef | I'm trying to access a remote host and I'm getting "Exception: access denied (java.net.SocketPermission home.hib.no:80 connect,resolve)" |
| 13:07.25 | b0ef | when I put: |
| 13:07.41 | *** join/#tomcat kaesmacher (n=chatzill@62.153.141.2) |
| 13:07.48 | b0ef | grant {permission java.net.SocketPermission "home.hib.no:80","connect,resolve";}; |
| 13:08.15 | b0ef | it would just load forever and never show the page |
| 13:08.32 | b0ef | I'm running it on an ubuntu box with tomcat-5.5 |
| 13:10.01 | b0ef | any pointers as to what I can try? |
| 13:11.07 | *** join/#tomcat randrew (n=raj@dolmen.cc.columbia.edu) |
| 13:33.41 | kaesmacher | tomcat 5.5 \ ubuntu, linux 2.6.20 \ java 1.6.0_03 |
| 13:34.02 | kaesmacher | i changed tomcat-users.xml, but still cat access the manager |
| 13:34.06 | kaesmacher | cant |
| 13:34.17 | kaesmacher | any ideas? |
| 13:36.43 | *** join/#tomcat melter_ (n=Melter@dyn007.morrill-116.ndsu.NoDak.edu) |
| 14:05.06 | *** join/#tomcat MHSL- (n=Linux@innovax.com.sg) |
| 14:06.03 | *** join/#tomcat MHSL (i=Linux@116.88.6.47) |
| 14:12.53 | *** join/#tomcat melter (n=Melter@dyn007.morrill-116.ndsu.NoDak.edu) |
| 14:15.19 | devfd0 | any one beany one benchmarked jruby on rails ontomcat pleasE ..? |
| 14:15.37 | devfd0 | any one benchmarked jruby on rails ontomcat pleasE ..? |
| 14:16.01 | devfd0 | in other terms can tomcat be a real entreprise solution to host jruby on rails applications ? any tuning may be !! |
| 14:46.48 | *** join/#tomcat chris_krosk (n=chris_kr@80.124.167.39) |
| 14:47.59 | *** join/#tomcat matt7676 (n=matt@popper.yospace.com) |
| 15:13.23 | *** join/#tomcat ^Quiddity (n=steve@ng1.cptxoffice.net) |
| 15:40.50 | *** join/#tomcat unlord_ (i=ptolemy@pool-71-163-166-222.washdc.fios.verizon.net) |
| 15:42.43 | *** join/#tomcat melter (n=Melter@dyn007.morrill-116.ndsu.NoDak.edu) |
| 15:48.43 | *** join/#tomcat jeanmiii_ (n=besnard@217.167.20.149) |
| 15:48.45 | jeanmiii_ | Hi |
| 15:49.01 | jeanmiii_ | where can I configure the rotation of my logs (warn.txt, debug.txt, etc) ? |
| 16:00.31 | *** join/#tomcat acidjnk (n=have@pD950995E.dip0.t-ipconnect.de) |
| 16:13.25 | DNC1 | jeanmiii : how are you creating your log files ? |
| 16:28.17 | DNC1 | are you using log4j or java.util.logging or JULI from tomcat ? |
| 16:42.03 | *** join/#tomcat blue_asterisk (n=blue_ast@ppp-69-233-82-84.dsl.sndg02.pacbell.net) |
| 17:02.09 | *** join/#tomcat MrDys (i=MrDys@sys31.staff.ad.mse.jhu.edu) |
| 17:05.16 | MrDys | tomcat 5.5.25, java 5, rhel 5; question: how can I get mod_jk to recognize SSL connections? I have the app JkMount'd fine as http://server/app, but I really need it to work for https://server/app...thoughts? |
| 17:07.13 | *** part/#tomcat matt7676 (n=matt@popper.yospace.com) |
| 17:07.54 | *** join/#tomcat doilgheas (n=Saille@p57B8828D.dip0.t-ipconnect.de) |
| 17:08.01 | *** part/#tomcat doilgheas (n=Saille@p57B8828D.dip0.t-ipconnect.de) |
| 17:53.17 | *** join/#tomcat gatewayer (n=gatewaye@h081217074223.dyn.cm.kabsi.at) |
| 18:12.38 | *** part/#tomcat randrew (n=raj@dolmen.cc.columbia.edu) |
| 18:24.30 | *** join/#tomcat iostream (n=iostream@89.221.166.136) |
| 18:26.42 | *** join/#tomcat gatewayer (n=gatewaye@h081217074223.dyn.cm.kabsi.at) |
| 19:17.46 | *** join/#tomcat IOscanner (n=IOscanne@76.187.195.124) |
| 20:01.17 | *** join/#tomcat Dejan (n=dejan@79-78-53-172.dynamic.dsl.as9105.com) |
| 20:03.25 | Dejan | Hello guys I use Tomcat 5.5, Java 1.6.0 on Linux (Fedora 8) - I searched web for information how to access (just read basically) variables specified in META-INF/context.xml |
| 20:03.48 | Dejan | because sometimes i need database-related values from there |
| 20:05.43 | *** part/#tomcat MrDys (i=MrDys@sys31.staff.ad.mse.jhu.edu) |
| 20:16.59 | *** join/#tomcat doilgheas (n=Saille@p57B8828D.dip0.t-ipconnect.de) |
| 20:19.16 | doilgheas | hi i've kubuntu 7.10, tomcat5.5.25 and java 6.03 how could i start tomcat in the debug mode? |
| 20:33.36 | *** join/#tomcat nihed2 (n=ikanawa@41.224.204.53) |
| 21:08.12 | *** join/#tomcat gregor_k (n=a@stgt-4dbe1d2c.pool.einsundeins.de) |
| 21:10.31 | *** join/#tomcat ^Quiddity (n=steve@ng1.cptxoffice.net) |
| 21:13.35 | *** join/#tomcat nihed1 (n=ikanawa@41.224.247.77) |
| 21:28.23 | dealer | i'm installing tomcat on a amd64 freebsd machine, and webapp doesn't build, how can i deal with that? |
| 21:42.07 | *** part/#tomcat jair (n=jair@adsl-75-34-20-220.dsl.chcgil.sbcglobal.net) |
| 21:52.59 | *** join/#tomcat roue (n=roue@afterthought.ACS.Carleton.edu) |
| 22:00.40 | *** join/#tomcat acidjnk (n=have@pD950995E.dip0.t-ipconnect.de) |
| 22:24.33 | *** join/#tomcat acidjnk (n=have@pD950995E.dip0.t-ipconnect.de) |
| 23:07.50 | *** join/#tomcat Cybertinus (n=cybertin@a82-95-167-159.adsl.xs4all.nl) |
| 23:12.14 | Cybertinus | hello |
| 23:16.26 | Cybertinus | ah, I think I found the answer to my question already in the FAQ on the Wiki :) |