You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by John Dale <jc...@gmail.com> on 2021/05/28 19:32:47 UTC

Problem posting to Tomcat ssl connector ..

Page loads fine.

Other pages load fine.

SSL handshakes are working until ..

An Ajax post with a base64 encoded image in the data.

I debugged up to the request and it's fine.

I debugged the server and it's not reaching my component.

Tomcat is killing the connection for some reason.

Thought it might be maxSavePostSize .. bumped that up in the SSL connector.

No dice.

Request post is around 300K.

What's going on!?

Tomcat 9 on a raspberry pi 4 (w00t!).

<Connector port="8443" SSLEnabled="true"
        protocol="org.apache.coyote.http11.Http11NioProtocol"
        sslImplementationName="org.apache.tomcat.util.net.jsse.JSSEImplementation"
maxSavePostSize = "2097152">
        <UpgradeProtocol className="org.apache.coyote.http2.Http2Protocol" />
        <SSLHostConfig>
            <Certificate certificateKeystoreFile="cert.pfx"
certificateKeystorePassword="certpass"/>
        </SSLHostConfig>
    </Connector>

Everything is working fantastically save this one item.

Sincerely,

John

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: Problem posting to Tomcat ssl connector ..

Posted by "John Dale (DB2DOM)" <jc...@gmail.com>.
Just to note - this was fixed in the latest release of Tomcat and I'm
humming along again ..

But it would be good to track down what is happening to help folks who
can't just upgrade like me.

Side note - you'll recall that in the last year or so I've been on an
upgrade tear from 7.x to present including Java versions.

So, now I'm all caught up.  This year I would like to integrate major
release versions of Tomcat into my build so I can debug Tomcat source
and help-out more with bugs.

Sincerely,

John


On 6/1/21, Mark H. Wood <mw...@iupui.edu> wrote:
> On Fri, May 28, 2021 at 01:32:47PM -0600, John Dale wrote:
>> Page loads fine.
>>
>> Other pages load fine.
>>
>> SSL handshakes are working until ..
>>
>> An Ajax post with a base64 encoded image in the data.
>>
>> I debugged up to the request and it's fine.
>>
>> I debugged the server and it's not reaching my component.
>>
>> Tomcat is killing the connection for some reason.
>>
>> Thought it might be maxSavePostSize .. bumped that up in the SSL
>> connector.
>>
>> No dice.
>>
>> Request post is around 300K.
>>
>> What's going on!?
>
> I suppose there's nothing useful in the logs?  Can anyone suggest
> adjustments that might log relevant observations?
>
> --
> Mark H. Wood
> Lead Technology Analyst
>
> University Library
> Indiana University - Purdue University Indianapolis
> 755 W. Michigan Street
> Indianapolis, IN 46202
> 317-274-0749
> www.ulib.iupui.edu
>

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: Problem posting to Tomcat ssl connector ..

Posted by "Mark H. Wood" <mw...@iupui.edu>.
On Fri, May 28, 2021 at 01:32:47PM -0600, John Dale wrote:
> Page loads fine.
> 
> Other pages load fine.
> 
> SSL handshakes are working until ..
> 
> An Ajax post with a base64 encoded image in the data.
> 
> I debugged up to the request and it's fine.
> 
> I debugged the server and it's not reaching my component.
> 
> Tomcat is killing the connection for some reason.
> 
> Thought it might be maxSavePostSize .. bumped that up in the SSL connector.
> 
> No dice.
> 
> Request post is around 300K.
> 
> What's going on!?

I suppose there's nothing useful in the logs?  Can anyone suggest
adjustments that might log relevant observations?

-- 
Mark H. Wood
Lead Technology Analyst

University Library
Indiana University - Purdue University Indianapolis
755 W. Michigan Street
Indianapolis, IN 46202
317-274-0749
www.ulib.iupui.edu

Re: [OT] Problem posting to Tomcat ssl connector ..

Posted by Christopher Schultz <ch...@christopherschultz.net>.
John,

On 5/28/21 20:17, John Dale wrote:
> ran apt-get install tomcat9 and it upgraded these packages:
>   libtomcat9-java tomcat9 tomcat9-common
> 
> Still did not resolve the issue, however.
> 
> Looking for a guide to manually upgrade a package installed with apt-get.
 >
 > [repeated from elsewhere in the thread]
> 
> Package: tomcat9
> Version: 9.0.31-1~deb10u4

You may be misinterpreting what you are reading.

Debian (and downstream) maintain stable versions of their packages. 
Basically, they (Debian, specifically) want a SUPER stable package that 
admins don't have to worry is going to blow-up on them with what should 
be minor upgrades. They usually pick a version to go with a major 
release and then add patches for things like security and ignore the new 
features, etc. and other things that might change.

This is more difficult with a project like Tomcat which doesn't actually 
publish patches, but instead publishes new versions. I'm not sure what 
Raspbian does to upstream packages (probably nothing) or if they are 
Debian-based or Ubuntu-based. Ubuntu seems to me to be following the 
unstable branches of everything and less conservative than Debian, for 
better or worse.

You may find that this bug isn't fixed in your version. You may also 
find that it won't be fixed until a new (Raspbian) release in the 
future. That future may take a while.

You could look at the package availability in other branches of Raspbian 
(or Debian, whichever is appropriate) to see if maybe the unstable 
branch contains a better version (for you).

You could also just install it yourself from official ASF packages any time.

-chris

> On 5/28/21, Christopher Schultz <ch...@christopherschultz.net> wrote:
>> John,
>>
>> On 5/28/21 15:32, John Dale wrote:
>>> I debugged the server and it's not reaching my component.
>>>
>>   > <snip>
>>   >
>>> Request post is around 300K.
>>>
>>> Tomcat 9 on a raspberry pi 4 (w00t!).
>>
>> Maybe you are still just waiting around for that tiny CPU to run all
>> that bytecode.
>>
>> /snark
>>
>> Seriously, though, I'd be interested to hear about your pi-based Java
>> work in another thread. I have 2 Pi 4s and 2 Pi Zeros that I haven't
>> managed to do anything with besides running EmulationStation (which I
>> highly recommend for anyone who grew up with an NES. Pew-pew!).
>>
>> -chris
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
>> For additional commands, e-mail: users-help@tomcat.apache.org
>>
>>
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
> 

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: [OT] Problem posting to Tomcat ssl connector ..

Posted by John Dale <jc...@gmail.com>.
ran apt-get install tomcat9 and it upgraded these packages:
 libtomcat9-java tomcat9 tomcat9-common

Still did not resolve the issue, however.

Looking for a guide to manually upgrade a package installed with apt-get.

Suggestions?


On 5/28/21, Christopher Schultz <ch...@christopherschultz.net> wrote:
> John,
>
> On 5/28/21 15:32, John Dale wrote:
>> I debugged the server and it's not reaching my component.
>>
>  > <snip>
>  >
>> Request post is around 300K.
>>
>> Tomcat 9 on a raspberry pi 4 (w00t!).
>
> Maybe you are still just waiting around for that tiny CPU to run all
> that bytecode.
>
> /snark
>
> Seriously, though, I'd be interested to hear about your pi-based Java
> work in another thread. I have 2 Pi 4s and 2 Pi Zeros that I haven't
> managed to do anything with besides running EmulationStation (which I
> highly recommend for anyone who grew up with an NES. Pew-pew!).
>
> -chris
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: [OT] Problem posting to Tomcat ssl connector ..

Posted by John Dale <jc...@gmail.com>.
definitely related to the post size ..

smaller images work, larger images do not work, but the larger images
are only 500k, so it's not a maxpostsize issue.

I'm running apache-tomcat-9.0.41, so this shouldn't apply:
https://stackoverflow.com/questions/63050276/tomcat-9-long-https-request

John


On 5/28/21, Christopher Schultz <ch...@christopherschultz.net> wrote:
> John,
>
> On 5/28/21 15:32, John Dale wrote:
>> I debugged the server and it's not reaching my component.
>>
>  > <snip>
>  >
>> Request post is around 300K.
>>
>> Tomcat 9 on a raspberry pi 4 (w00t!).
>
> Maybe you are still just waiting around for that tiny CPU to run all
> that bytecode.
>
> /snark
>
> Seriously, though, I'd be interested to hear about your pi-based Java
> work in another thread. I have 2 Pi 4s and 2 Pi Zeros that I haven't
> managed to do anything with besides running EmulationStation (which I
> highly recommend for anyone who grew up with an NES. Pew-pew!).
>
> -chris
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: [OT] Problem posting to Tomcat ssl connector ..

Posted by John Dale <jc...@gmail.com>.
The thick plottens.

When I do apt-cache show tomcat9:

Package: tomcat9
Version: 9.0.31-1~deb10u4
...

Soooo .. simple and good way to upgrade this via apt-get?

Or will I have to manually be overwriting stuff (yuck).

John




On 5/28/21, Christopher Schultz <ch...@christopherschultz.net> wrote:
> John,
>
> On 5/28/21 15:32, John Dale wrote:
>> I debugged the server and it's not reaching my component.
>>
>  > <snip>
>  >
>> Request post is around 300K.
>>
>> Tomcat 9 on a raspberry pi 4 (w00t!).
>
> Maybe you are still just waiting around for that tiny CPU to run all
> that bytecode.
>
> /snark
>
> Seriously, though, I'd be interested to hear about your pi-based Java
> work in another thread. I have 2 Pi 4s and 2 Pi Zeros that I haven't
> managed to do anything with besides running EmulationStation (which I
> highly recommend for anyone who grew up with an NES. Pew-pew!).
>
> -chris
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: [OT] Problem posting to Tomcat ssl connector ..

Posted by Christopher Schultz <ch...@christopherschultz.net>.
John,

On 5/28/21 15:32, John Dale wrote:
> I debugged the server and it's not reaching my component.
>
 > <snip>
 >
> Request post is around 300K.
> 
> Tomcat 9 on a raspberry pi 4 (w00t!).

Maybe you are still just waiting around for that tiny CPU to run all 
that bytecode.

/snark

Seriously, though, I'd be interested to hear about your pi-based Java 
work in another thread. I have 2 Pi 4s and 2 Pi Zeros that I haven't 
managed to do anything with besides running EmulationStation (which I 
highly recommend for anyone who grew up with an NES. Pew-pew!).

-chris

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org