Re: CVE-2009-3555 fix in tomcat-native-1.1.19?! [solved]

[Jens Neu <je...@biotronik.com>]

yes, thats it, zero html write.
Thank you for opening my eyes, maybe I should not have done that on a 
Friday evening :) Totally fixated on that tlsv1 alert I was...

regards from Berlin!

Jens Neu
Health Services Network Administration

Phone: +49 (0) 30 68905-2412
Mail: jens.neu@biotronik.de



Mladen Turk <mt...@apache.org> 
01/15/2010 06:13 PM
Please respond to
"Tomcat Users List" <us...@tomcat.apache.org>


To
Tomcat Users List <us...@tomcat.apache.org>
cc

Subject
Re: CVE-2009-3555 fix in tomcat-native-1.1.19?!






On 01/15/2010 05:35 PM, Jens Neu wrote:
> Dear all,
>
>
> the GET / HTTP/1.0 until the "R" is manually inserted, I expect 
something
> like
>
> <code>
> 2860:error:1409444C:SSL routines:SSL3_READ_BYTES:tlsv1 alert no
> renegotiation:./ ssl/s3_pkt.c:1053:SSL alert number 100
> </code>
>
> but certainly no RENEGOTIATION. Any hints?
>

Tomcat Native handles that like mod_ssl
(actually I backported the mod_ssl code for that)
by simply dropping the connection.
I see you have 0 length write, so that's fine right?


Regard
-- 
^TM

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org





www.biotronik.com

BIOTRONIK SE & Co. KG
Woermannkehre 1, 12359 Berlin, Germany
Sitz der Gesellschaft: Berlin, Registergericht: Berlin HRA 6501

Vertreten durch ihre Komplementärin:
BIOTRONIK MT SE
Sitz der Gesellschaft: Berlin, Registergericht: Berlin HRB 118866 B
Vorsitzender des Verwaltungsrats: Dr. Max Schaldach
Geschäftsführende Direktoren: Christoph Böhmer, Dr. Werner Braun, Dr. 
Lothar Krings

BIOTRONIK - A global manufacturer of advanced Cardiac Rhythm Management 
systems and Vascular Intervention devices. Quality, innovation, and 
reliability define BIOTRONIK and our growing success. We are innovators of 
technologies like the first wireless remote monitoring system - Home 
Monitoring®, Closed Loop Stimulation and coveted lead solutions as well as 
state-of-the-art stents, balloons and guide wires for coronary and 
peripheral indications. We highly invest in the development of drug 
eluting devices and are leading the industry with our bioabsorbable metal 
stent program.

This e-mail and the information it contains including attachments are 
confidential and meant only for use by the intended recipient(s); 
disclosure or copying is strictly prohibited. If you are not addressed, 
but in the possession of this e-mail, please notify the sender immediately 
and delete the document.