Reputation
818
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
5 6
Newest
 Yearling
Impact
~95k people reached

Feb
5
comment Setting up SSL for tomcat
Backslashes have bitten me so often that my first guess is always to make sure they're not interpreted as escape sequence - use forward slashes for directory separators, they work well in Java on Windows. Then report back. (you yourself are reporting both 'C:\Users\Dan\.keystore' and 'C:\Users\Dan.keystore' in your question)
Jan
25
comment Running Apache Tomcat 8 on port 80
You're right - I've mentioned it due to "nothing else being involved". I'll reorder my answer. In fact, I'm so strongly preferring the reverse proxy solution that I am only aware of jsvc, but have never considered using it myself. And thinking more about it than yesterday when I quickly answered this question, iptables is yet another option
Jan
7
comment Unable to link IIS8 and Tomcat7 by ISAPI on Windows Server 2012
The answer is old, but maybe you (or someone) still is puzzled on why localhost sometimes is working and sometimes it isn't: These days it's often aliased to ::1, which is the IPV6 version of localhost. If a server only answers on IPV4, naturally you can't reach it. Happy 20th birthday to IPV6.
Dec
18
comment Using TLS 1.2 and java 6
ok, now I get it: Your web application will connect to some other application and needs to talk TLS 1.2... Not sure if such a workaround is worth going after. Establishing a proxy - either a newer Java-version or OpenSSL will certainly increase complexity, lower maintainability and introduce many opportunities for getting it wrong and making the whole system less secure than expected with a newer version of the protocol. Good luck is all I can say. I'd strongly opt for the upgrade of the current application. Any effort there reduces complexity, rather than increase it.
Dec
17
comment Using TLS 1.2 and java 6
Do you mean that Tomcat needs to actually see the 1.2 connection or is it enough to terminate TLS on Apache?
Oct
26
comment Strange enduser experience with Liferay, Glassfish and Apache on RedHat
Can you post links to the other places where you already asked? This way one could see what else you already tried or if it's been solved already.
Feb
25
comment How can I ensure Liferay uses TLS for authentication
I'll take a look at what other options there are for future implementations. Especially because you'll have to establish some trust to the other side - otherwise encryption is useless: Having an encrypted connection to a man-in-the-middle doesn't buy you anything.
Feb
24
comment How can I ensure Liferay uses TLS for authentication
see if my edited answer helps or gives more information. Re the tag: You're welcome ;)
Feb
23
comment How can I ensure Liferay uses TLS for authentication
sorry, misread the question - it's clearer now after the edit.
Feb
21
comment How can I ensure Liferay uses TLS for authentication
Are you sure you didn't set your https port to 8080? This looks like firefox tries to do https through the port that has only http - obviously this will fail and not do anything. Will add a precondition to my answer right now.
Jun
19
comment Liferay and Oracle DB
FYI: The extra permissions are only required during installation or update (or deployment of new plugins) - during the "normal" runtime, only the standard operations SELECT, INSERT, UPDATE and DELETE are required.
Aug
18
comment same SSL certificate in two servers
whoops - your comments crossed paths with mine. If your cert vendor has any restrictions on how to use their cert is a different thing. Nothing to answer here - look at the terms and conditions of your vendor that apply to your specific situation/contract
Aug
18
comment same SSL certificate in two servers
I'm not aware of a cert that is machine specific - it can't be: It certifies the authenticity of the private key in combination with the FQDN. Once the private key is known to another machine, this machine can - under the same FQDN - operate with the same key and the same certificate without problems.
May
11
comment Downloads are consistently corrupt, what are the potential causes?
thanks for accepting this as an answer - can you provide some insight into what exactly helped to solve your problem?
May
11
comment Downloads are consistently corrupt, what are the potential causes?
and: Don't rule out malware just because you doubt that it's there. This can be quicker than you think. Check it, double check! Remember: you're observing some strange behaviour after all.
May
11
comment Downloads are consistently corrupt, what are the potential causes?
MD5 is there for you to be sure that you've got the correct file even when downloaded from a mirror site. Make sure to always get the MD5 from the original site, not from the mirror. Have you tried https (or ssh or anything encrypted) yet? If this is also corrupted, everything in the network can be ruled out. If it is not, there might be some eavesdropping component on your way - e.g. a proxy running virus checks or something else. Are all your problems from varying sources or all from the same source? Can you post links to check?
May
1
comment tomcat6 on ubuntu fails when user set to root
+1, never run as root. If you really need to execute another process from your webserver, there are other options - compile a stub that runs as root, create a daemon and communicate with it etc. Don't go the easiest way just because that the first thing you think about. To answer the original question: You can diagnose what you do wrong by looking at your post: "TOMCAT_USER=root" is what is going wrong. Seriously. Really really seriously.
Apr
20
comment How many users are “many users”?
right - that's what I had in mind: Make sure that the database doesn't have to touch the disk on read. Regarding swapping: You don't want any swapping to happen if you optimize for high load. Might as well disable swapping to come to a hard stop instead of degrading performance when memory is exhausted.
Mar
23
comment mod_rewrite redirect from SSL to HTTP not working
+1 for the answer: I've seen way too many problems with mixed setups. You will find holes. They will be unexpected. No matter how many you've already plugged - seriously.
Mar
12
comment created pub/priv keys using putty, created .ssh folder and authorized_keys, still not working
This is the issue I've most frequently been bitten by after learning that Putty and OpenSSH use different formats for their key files.