You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by "Mark Thomas (Confluence)" <no...@apache.org> on 2020/06/18 18:30:06 UTC

[CONF] Apache Tomcat > Servlet TCK 5.0

There's **2 new edits** on this page  
---  
|  
---  
|  | [![page icon](cid:page-
icon)](https://cwiki.apache.org/confluence/display/TOMCAT/Servlet+TCK+5.0?src=mail&src.mail.product=confluence-
server&src.mail.timestamp=1592505006020&src.mail.notification=com.atlassian.confluence.plugins.confluence-
notifications-batch-plugin%3Abatching-
notification&src.mail.recipient=8aa9809569d423cd016a0413306f00db&src.mail.action=view
"page icon")  
---  
[Servlet TCK
5.0](https://cwiki.apache.org/confluence/display/TOMCAT/Servlet+TCK+5.0?src=mail&src.mail.product=confluence-
server&src.mail.timestamp=1592505006020&src.mail.notification=com.atlassian.confluence.plugins.confluence-
notifications-batch-plugin%3Abatching-
notification&src.mail.recipient=8aa9809569d423cd016a0413306f00db&src.mail.action=view
"Servlet TCK 5.0")  
|  |  |  |  | ![](cid:avatar_0e7b7d8d93bf536b4e2f8f7984d49115) |  | Mark
Thomas edited this page  
---  
|  
|  | Here's what changed:  
---  
|

#  Running

##  Tomcat

_This is a work in progress while I figure out which settings required for
the Servlet 4.0 TCK ar still required for the Servlet 5.0 TCK._

###  setenv.[sh|bat]

Set the following system properties

  * -Dorg.apache.catalina.STRICT_SERVLET_COMPLIANCE=true

###  context.xml

Make the following changes:

...

    
    
       <CookieProcessor className="org.apache.tomcat.util.http.LegacyCookieProcessor" alwaysAddExpires="true" forwardSlashIsSeparator="false" />
    
    
       ...

</Context>

###  server.xml

    
    
    Enable h2c on port 8080, and add some trailer headers  
    <Connector ... allowedTrailerHeaders="myTrailer, myTrailer2" >

...

        </SSLHostConfig>

    </Connector>

###  tomcat-users.xml

Make the following changes:

    
    
    <user username="CN=CTS, OU=Java Software, O=Sun Microsystems Inc., L=Burlington, ST=MA, C=US" roles="Administrator"/>  
    <user username="j2ee" password="j2ee" roles="Administrator,Employee" />  
    <user username="javajoe" password="javajoe" roles="VP,Manager" />

###  web.xml

Remove the sections setting the default character encoding for requests and
responses to UTF-8.

...

.

...

###  server.xml

Enable TLS on port 8443

    <Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true">

        <SSLHostConfig truststoreFile="conf/cacerts.jks">

            <Certificate certificateKeystoreFile="conf/clientcert.jks"

                         certificateKeystorePassword="changeit"

                         type="RSA" />

        </SSLHostConfig>

    </Connector>

Remove the lock-out realm

Client certificate tests: see below

##  Test Suite

Download latest nightly build

...

Extract to SERVLET_TCK_HOMEImport

cd $SERVLET_TCK_HOME/bin/certificates

Convert cts_cert to a truststore doing: "keytool -import -alias cts -file
cts_cert -storetype JKS -keystore cacerts.jks" password should be "changeit"

Create the truststore using  "keytool -import -alias cts -file cts_cert
-storetype JKS -keystore cacerts.jks" password should be "changeit"

Place cacerts.jks truststore in $SERVLET_TCK_HOME/bin/certificates

Add $SERVLET_TCK_HOME/bin/certificates/cacerts.jks and
$SERVLET_TCK_HOME/bin/certificates/clientcert.jks in the Tomcat conf folder

...

    
    
    securedWebServicePort=8443
    
    
    command.testExecute += -Djava.endorsed.dirs=${ts.home}/endorsedlib -[Djavax.net](http://Djavax.net).ssl.trustStore=${ts.home}/bin/certificates/cacerts.jks

...

    
    
    Accept the defaults and then run the tests

#  Expected results

A default 10.0.x build (as of 2020-06-18) with the above configuration and the
TCK built from source (as of 2020-06-18) triggers 25 23 test failures

1 Expected failures

...

  * [PR 338](https://github.com/eclipse-ee4j/jakartaee-tck/pull/338)
    * Incorrect major version (1 failure),
    * Using LF rather an CRLF (15 failures)
    * Strange /j_security_check test (2 failures)
    * Error page attributes assumed to be unset when spec requires them to be set (3 failures)
    * Missing annotation marker in Java 8 signature tests (1 failure)

...

  *     * Re-do Java 11 signature test based on Java 8

  
---  
|  |  | [Go to page
history](https://cwiki.apache.org/confluence/pages/viewpreviousversions.action?pageId=158863856&src=mail&src.mail.product=confluence-
server&src.mail.timestamp=1592505006020&src.mail.notification=com.atlassian.confluence.plugins.confluence-
notifications-batch-plugin%3Abatching-
notification&src.mail.recipient=8aa9809569d423cd016a0413306f00db "Go to page
history")  
---  
---  
| [View
page](https://cwiki.apache.org/confluence/display/TOMCAT/Servlet+TCK+5.0?src=mail&src.mail.product=confluence-
server&src.mail.timestamp=1592505006020&src.mail.notification=com.atlassian.confluence.plugins.confluence-
notifications-batch-plugin%3Abatching-
notification&src.mail.recipient=8aa9809569d423cd016a0413306f00db&src.mail.action=view)  
---  
  
|  | [Stop watching
space](https://cwiki.apache.org/confluence/users/removespacenotification.action?spaceKey=TOMCAT&src=mail&src.mail.product=confluence-
server&src.mail.timestamp=1592505006020&src.mail.notification=com.atlassian.confluence.plugins.confluence-
notifications-batch-plugin%3Abatching-
notification&src.mail.recipient=8aa9809569d423cd016a0413306f00db&src.mail.action=stop-
watching&jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ4c3JmOjhhYTk4MDk1NjlkNDIzY2QwMTZhMDQxMzMwNmYwMGRiIiwicXNoIjoiOTQyYTZiZWVlNWFkOGYyODcwNjkyMjdlYjc2YmFmMmNkMThlZTc1ZDhhN2M2NzEyYmU4NjU0NjIxNDliNWViYyIsImlzcyI6ImNvbmZsdWVuY2Vfbm90aWZpY2F0aW9uc0FSRUgtWFVEMS1QT1FHLUNTQU8iLCJleHAiOjE1OTMxMDk4MDYsImlhdCI6MTU5MjUwNTAwNn0.E_t_Y2LjU6HAkpDAh7zQOuJ5wgYfucU_QrtJCct87QU)
| •  
---|---  
[Manage
notifications](https://cwiki.apache.org/confluence/users/editmyemailsettings.action?src=mail&src.mail.product=confluence-
server&src.mail.timestamp=1592505006020&src.mail.notification=com.atlassian.confluence.plugins.confluence-
notifications-batch-plugin%3Abatching-
notification&src.mail.recipient=8aa9809569d423cd016a0413306f00db&src.mail.action=manage)  
---  
| ![Confluence logo big](cid:footer-desktop-logo)  
---  
This message was sent by Atlassian Confluence 7.5.0  
![](cid:footer-mobile-logo)  
---