DO NOT REPLY [Bug 13263] New: - javax.servlet.request.key_size not following servlet spec

[bu...@apache.org]

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=13263>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=13263

javax.servlet.request.key_size not following servlet spec

           Summary: javax.servlet.request.key_size not following servlet
                    spec
           Product: Tomcat 4
           Version: 4.0.2 Final
          Platform: All
        OS/Version: Other
            Status: NEW
          Severity: Major
          Priority: Other
         Component: Connector:JK/AJP (deprecated)
        AssignedTo: tomcat-dev@jakarta.apache.org
        ReportedBy: tom@surety.com


According SRV.4.7 of Servlet Spec 2.3, the javax.servlet.request.key_size 
attribute is supposed to be of type java.lang.Integer.  

When using a Connector of type org.apache.ajp.tomcat4.Ajp13Connector, in Tomcat 
4.0.1, getAttribute("javax.servlet.request.key_size") properly returns a 
java.lang.Interger (or null).

In Tomcat 4.0.2 (and higher), the same call returns a java.lang.String, which 
violates the spec.  This causes a ClassCastException for code that attempts to 
use the key_size attribute as an Integer.

Attached is a jsp that can be used in a Apache+mod_ssl+mod_jk+Tomcat webapp to 
show that the class changes to java.lang.String starting in Tomcat 4.0.2, and 
is correctly a java.lang.Integer in Tomcat 4.0.1.

--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>