From users-return-200312-apmail-tomcat-users-archive=tomcat.apache.org@tomcat.apache.org Wed Aug 12 14:51:59 2009 Return-Path: Delivered-To: apmail-tomcat-users-archive@www.apache.org Received: (qmail 24994 invoked from network); 12 Aug 2009 14:51:58 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3) by minotaur.apache.org with SMTP; 12 Aug 2009 14:51:58 -0000 Received: (qmail 36943 invoked by uid 500); 12 Aug 2009 14:52:01 -0000 Delivered-To: apmail-tomcat-users-archive@tomcat.apache.org Received: (qmail 36871 invoked by uid 500); 12 Aug 2009 14:52:01 -0000 Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: "Tomcat Users List" Delivered-To: mailing list users@tomcat.apache.org Received: (qmail 36860 invoked by uid 99); 12 Aug 2009 14:52:01 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 12 Aug 2009 14:52:01 +0000 X-ASF-Spam-Status: No, hits=4.0 required=10.0 tests=HTML_MESSAGE,MIME_QP_LONG_LINE,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: local policy) Received: from [66.219.55.137] (HELO mail.polydyne.com) (66.219.55.137) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 12 Aug 2009 14:51:51 +0000 Received: from postoffice.polydyne.com [10.1.1.8] by mail.polydyne.com - Websense Email Security (7.0.0); Wed, 12 Aug 2009 09:51:30 -0500 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Subject: RE: avoiding ssl vulnerabilities in tomcat Date: Wed, 12 Aug 2009 09:51:30 -0500 Message-ID: In-Reply-To: <4A82D595.9020101@christopherschultz.net> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: avoiding ssl vulnerabilities in tomcat Thread-Index: AcobW67zGNsAVYUmRHyDdA8CbcEq1QAAIHJg References: <641541.15046.qm@web94911.mail.in2.yahoo.com> <4A82D595.9020101@christopherschultz.net> From: "Jeffrey Janner" To: "Tomcat Users List" X-SEF-7853D99-ADF1-478E-8894-213D316B8FFA: 1 Content-Type: multipart/mixed; boundary="--=_NextPart_SEF_2009_08_12_09_51_30_24035" X-SEF-Processed: 7_0_0_00242__2009_08_12_09_51_30 X-Virus-Checked: Checked by ClamAV on apache.org ----=_NextPart_SEF_2009_08_12_09_51_30_24035 Content-Type: multipart/alternative; boundary="--=_NextPart_SEF_2009_08_12_09_51_30_24531" Content-Transfer-Encoding: quoted-printable ----=_NextPart_SEF_2009_08_12_09_51_30_24531 Content-Type: text/plain; Content-Transfer-Encoding: quoted-printable =0D=0A******************************* NOTICE ****************************= *****=0D=0AThis message is intended for the use of the individual or entity= to which=20=0D=0Ait is addressed and may contain information that is privi= leged,=20=0D=0Aconfidential, and exempt from disclosure under applicable la= w. If the=20=0D=0Areader of this message is not the intended recipient or = the employee or=20=0D=0Aagent responsible for delivering this message to th= e intended recipient,=20=0D=0Ayou are hereby notified that any disseminatio= n, distribution, or copying=20=0D=0Aof this communication is strictly prohi= bited. If you have received this=20=0D=0Acommunication in error, please no= tify us immediately by reply or by=20=0D=0Atelephone (call us collect at 51= 2-343-9100) and immediately delete this=20=0D=0Amessage and all its attachm= ents.=0D=0A ----=_NextPart_SEF_2009_08_12_09_51_30_24531 Content-Type: text/html;charset=utf-8 Content-Transfer-Encoding: quoted-printable =0D=0A=0D=0A

=0D=0A******************************* &n= bsp;NOTICE *********************************
=0D=0AThis = message is intended for the use of the&n= bsp;individual or entity to which
=0D=0Ait&nbs= p;is addressed and may contain information th= at is privileged,
=0D=0Aconfidential, and exem= pt from disclosure under applicable law. &nbs= p;If the
=0D=0Areader of this message is&= nbsp;not the intended recipient or the employ= ee or
=0D=0Aagent responsible for delivering&n= bsp;this message to the intended recipient, <= br>=0D=0Ayou are hereby notified that any dis= semination, distribution, or copying
=0D=0Aof = this communication is strictly prohibited. I= f you have received this
=0D=0Acommunication&n= bsp;in error, please notify us immediately by= reply or by
=0D=0Atelephone (call us&nbs= p;collect at 512-343-9100) and immediately delete&= nbsp;this
=0D=0Amessage and all its attachment= s.
=0D=0A

----=_NextPart_SEF_2009_08_12_09_51_30_24531-- ----=_NextPart_SEF_2009_08_12_09_51_30_24035 Content-Type: message/rfc822;name="oa7539692896f4d93bebdd33c45e2de79.eml" Content-Transfer-Encoding: binary Received: from postoffice.polydyne.com [10.1.1.8] by mail.polydyne.com - Websense Email Security (7.0.0); Wed, 12 Aug 2009 09:51:30 -0500 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: base64 Subject: RE: avoiding ssl vulnerabilities in tomcat Date: Wed, 12 Aug 2009 09:51:30 -0500 Message-ID: In-Reply-To: <4A82D595.9020101@christopherschultz.net> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: avoiding ssl vulnerabilities in tomcat Thread-Index: AcobW67zGNsAVYUmRHyDdA8CbcEq1QAAIHJg References: <641541.15046.qm@web94911.mail.in2.yahoo.com> <4A82D595.9020101@christopherschultz.net> From: "Jeffrey Janner" To: "Tomcat Users List" SnVzdCB0byBjbGFyaWZ5IHNvbWUgdGhpbmdzOiAgVGhpcyBDVkUgb25seSBhcHBsaWVzIHRvIHRo ZSBkZWZhdWx0IFNTTCBjb25uZWN0b3IgZnVuY3Rpb25hbGl0eS4gIEl0IGRvZXNuJ3QgYXBwbHkg dG8gdGhlIEFQUi9PcGVuU1NMIGNvbm5lY3Rvci4gQ29ycmVjdD8NCkplZmYNCg0KLS0tLS1Pcmln aW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IENocmlzdG9waGVyIFNjaHVsdHogW21haWx0bzpjaHJp c0BjaHJpc3RvcGhlcnNjaHVsdHoubmV0XSANClNlbnQ6IFdlZG5lc2RheSwgQXVndXN0IDEyLCAy MDA5IDk6NDYgQU0NClRvOiBUb21jYXQgVXNlcnMgTGlzdA0KU3ViamVjdDogUmU6IGF2b2lkaW5n IHNzbCB2dWxuZXJhYmlsaXRpZXMgaW4gdG9tY2F0DQoNCi0tLS0tQkVHSU4gUEdQIFNJR05FRCBN RVNTQUdFLS0tLS0NCkhhc2g6IFNIQTENCg0KU3VuaWwsDQoNCk9uIDgvMTIvMjAwOSAzOjEyIEFN LCBzdW5pbCBjaGFuZHJhbiB3cm90ZToNCj4gVGhlIGlzc3VlIGlzIFNTTCB2dWxuZXJhYmlsaXR5 LiBmcm9tIHRoZSByZXNwb25zZXMsIGkgdW5kZXJzdG9vZCB0aGF0DQo+IGkgbmVlZCB0byB1cGdy YWRlIHRvIHRvbWNhdCBsYXRlc3QgdmVyc2lvbi4gQXMgcGVyIHRoZSB0ZWFtLCBpdCBpcw0KPiBy ZWNvbW1lbmRlZCB0byBnbyBmb3IgVG9tY2F0IDUgaW4gb3VyIGVudmlyb25tZW50Lg0KDQpXaXRo IGFsbCBkdWUgcmVzcGVjdCB0byB5b3VyIHRlYW0sIEkgdGhpbmsgdGhleSBhcmUgbWFraW5nIGEg bWlzdGFrZS4NCkVpdGhlciBvZiB0aGVzZSBhcmUgYmV0dGVyIGNob2ljZXMgaW4gbXkgb3Bpbmlv bjoNCg0KMS4gVXBncmFkZSB0byB0aGUgbGF0ZXN0IHZlcnNpb24gb2YgNC4xLngsIHdoaWNoIGlz IDQuMS40MC4gVGhpcyB3aWxsDQogICBwcm92aWRlIHRoZSBsZWFzdCBoZWFkYWNoZSBiZWNhdXNl IHlvdSB3aWxsIGJlIHN0YXlpbmcgb24geW91cg0KICAgY3VycmVudCBUb21jYXQgdmVyc2lvbiwg anVzdCBpbXByb3ZpbmcgeW91ciBwYXRjaCBsZXZlbC4NCiAgIFBsYW4gdG8gdXBncmFkZSB0byBh IG5ld2VyIHJlbGVhc2Ugb2YgVG9tY2F0IGluIHRoZSBmdXR1cmUuDQoNCjIuIFVwZ3JhZGUgZGly ZWN0bHkgdG8gVG9tY2F0IDYgd2l0aG91dCBtYWtpbmcgYSBzdG9wIGF0IFRvbWNhdCA1LjUuDQog ICBJZiB5b3UgYXJlIGdvaW5nIHRvIHVwZ3JhZGUgbWFqb3IgdmVyc2lvbnMsIHRoZXJlIGlzIGFi c29sdXRlbHkNCiAgIG5vIHJlYXNvbiBmb3IgeW91IHRvIGdvIHRvIFRvbWNhdCA1LjUsIHdoaWNo IHdpbGwgZXZlbnR1YWxseSBoYXZlDQogICBzdXBwb3J0IGRyb3BwZWQganVzdCBsaWtlIFRvbWNh dCA0LjEgZGlkLg0KDQo+IG15IHF1ZXNpdG9uIGlzOiBJcyB0aGlzIHZ1bGVybmFiaWxpdHkgc29s dmVkIGluIHRvbWNhdCA1IHZlcnNpb24/DQoNClNoZWVzaC4gRGlkIHlvdSByZWFkIHRoZSBDVkUg ZGVzY3JpcHRpb24/DQpodHRwOi8vd2ViLm52ZC5uaXN0Lmdvdi92aWV3L3Z1bG4vZGV0YWlsP3Z1 bG5JZD1DVkUtMjAwNy0xODU4DQoNCkl0IGNsZWFybHkgc2F5cyB0aGF0IFRvbWNhdCA1LjUgaXMg dnVsbmVyYWJsZSB0aHJvdWdoIDUuNS4xNyAod2hpY2ggaXMNCmluYWNjdXJhdGU6IHRoZSBmaXgg Zm9yIHRoaXMgaXMgZG9jdW1lbnRlZCB0byBiZSBpbiA1LjUuMTcpLiBNYWtlIHN1cmUNCnlvdSBh cmUgdXNpbmcgYSB2ZXJzaW9uIGxhdGVyIHRoYW4gdGhhdCBpZiB5b3UgbXVzdCB1c2UgNS41Lg0K DQpOb3csIGJlZm9yZSB5b3UgYXNrIGFib3V0IHdoYXQgdmVyc2lvbiBvZiBUb21jYXQgNiB5b3Ug bmVlZCBpbiBvcmRlciB0bw0KYXZvaWQgdGhpcyB2dWxuZXJhYmlsaXR5LCBsZXQgbWUgaGVscCB5 b3U6DQoNCjEuIEdvIHRvIFRvbWNhdCdzIHdlYiBzaXRlIChodHRwOi8vdG9tY2F0LmFwYWNoZS5v cmcvKQ0KMi4gRm9sbG93IHRoZSBsaW5rIHRoYXQgc2F5cyAiU2VjdXJpdHkiDQozLiBQaWNrIHlv dXIgbWFqb3IgVG9tY2F0IHZlcnNpb24NCjQuIFJlYWQgdGhlIGZpeGVzLiBFYWNoIG9uZSBtZW50 aW9ucyB0aGUgQ1ZFIGlkZW50aWZpZXIsIGEgZGVzY3JpcHRpb24NCiAgIG9mIHRoZSBwcm9ibGVt LCB0aGUgdmVyc2lvbnMgb2YgVG9tY2F0IGFmZmVjdGVkLCBhbmQgdGhlIHZlcnNpb24gaW4NCiAg IHdoaWNoIGEgZml4IGFwcGVhcnMuDQoNCkFsbCB0aGlzIGluZm9ybWF0aW9uIGlzIGVhc3kgdG8g ZmluZCBvbiB0aGUgVG9tY2F0IHdlYiBzaXRlLiBQbGVhc2UgcmVhZA0KdGhlIGRvY3VtZW50YXRp b24gYmVmb3JlIGNvbnRpbnVpbmcgdG8gYXNrIHF1ZXN0aW9ucyBzdWNoIGFzIHRoZXNlLg0KDQot IC1jaHJpcw0KLS0tLS1CRUdJTiBQR1AgU0lHTkFUVVJFLS0tLS0NClZlcnNpb246IEdudVBHIHYx LjQuOSAoTWluZ1czMikNCkNvbW1lbnQ6IFVzaW5nIEdudVBHIHdpdGggTW96aWxsYSAtIGh0dHA6 Ly9lbmlnbWFpbC5tb3pkZXYub3JnLw0KDQppRVlFQVJFQ0FBWUZBa3FDMVpVQUNna1E5Q2FPNS9M djBQQ1UwQUNmUlRwaUNFQnBIQVBDSHlVMHpCOW5FWDdzDQpaU0VBb0piNnJHKzRhUUN6WDJpeVA5 QjNWcUxPREdGWA0KPXo2QnANCi0tLS0tRU5EIFBHUCBTSUdOQVRVUkUtLS0tLQ0KDQotLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0NClRvIHVuc3Vic2NyaWJlLCBlLW1haWw6IHVzZXJzLXVuc3Vic2NyaWJlQHRvbWNhdC5h cGFjaGUub3JnDQpGb3IgYWRkaXRpb25hbCBjb21tYW5kcywgZS1tYWlsOiB1c2Vycy1oZWxwQHRv bWNhdC5hcGFjaGUub3JnDQoNCg0K ----=_NextPart_SEF_2009_08_12_09_51_30_24035 Content-Type: text/plain; charset=us-ascii --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org For additional commands, e-mail: users-help@tomcat.apache.org ----=_NextPart_SEF_2009_08_12_09_51_30_24035--