[JBoss JIRA] (MODCLUSTER-716) Refactor core and SPI modules in preparation for Servlet 5.0
by Radoslav Husar (Jira)
[ https://issues.redhat.com/browse/MODCLUSTER-716?page=com.atlassian.jira.p... ]
Radoslav Husar updated MODCLUSTER-716:
--------------------------------------
Status: Pull Request Sent (was: Coding In Progress)
Git Pull Request: https://github.com/modcluster/mod_cluster/pull/444
> Refactor core and SPI modules in preparation for Servlet 5.0
> ------------------------------------------------------------
>
> Key: MODCLUSTER-716
> URL: https://issues.redhat.com/browse/MODCLUSTER-716
> Project: mod_cluster
> Issue Type: Task
> Reporter: Radoslav Husar
> Assignee: Radoslav Husar
> Priority: Major
>
> Because Servlet 5.0 will change package names, and because the implementations of the SPI must work with containers supporting earlier versions of the specification, certain interfaces will have to be made generic to support both packages names.
> {code}
> [ERROR] /Users/rhusar/git/mod_cluster/core/src/main/java/org/jboss/modcluster/ModClusterService.java:[39,21] package javax.servlet does not exist
> [ERROR] /Users/rhusar/git/mod_cluster/core/src/main/java/org/jboss/modcluster/ModClusterService.java:[40,26] package javax.servlet.http does not exist
> {code}
--
This message was sent by Atlassian Jira
(v7.13.8#713008)
4 years, 9 months
[JBoss JIRA] (MODCLUSTER-716) Refactor core and SPI modules in preparation for Servlet 5.0
by Radoslav Husar (Jira)
[ https://issues.redhat.com/browse/MODCLUSTER-716?page=com.atlassian.jira.p... ]
Work on MODCLUSTER-716 started by Radoslav Husar.
-------------------------------------------------
> Refactor core and SPI modules in preparation for Servlet 5.0
> ------------------------------------------------------------
>
> Key: MODCLUSTER-716
> URL: https://issues.redhat.com/browse/MODCLUSTER-716
> Project: mod_cluster
> Issue Type: Task
> Reporter: Radoslav Husar
> Assignee: Radoslav Husar
> Priority: Major
>
> Because Servlet 5.0 will change package names, and because the implementations of the SPI must work with containers supporting earlier versions of the specification, certain interfaces will have to be made generic to support both packages names.
> {code}
> [ERROR] /Users/rhusar/git/mod_cluster/core/src/main/java/org/jboss/modcluster/ModClusterService.java:[39,21] package javax.servlet does not exist
> [ERROR] /Users/rhusar/git/mod_cluster/core/src/main/java/org/jboss/modcluster/ModClusterService.java:[40,26] package javax.servlet.http does not exist
> {code}
--
This message was sent by Atlassian Jira
(v7.13.8#713008)
4 years, 9 months
[JBoss JIRA] (MODCLUSTER-716) Refactor core and SPI modules in preparation for Servlet 5.0
by Radoslav Husar (Jira)
[ https://issues.redhat.com/browse/MODCLUSTER-716?page=com.atlassian.jira.p... ]
Radoslav Husar updated MODCLUSTER-716:
--------------------------------------
Description:
Because Servlet 5.0 will change package names, and because the implementations of the SPI must work with containers supporting earlier versions of the specification, certain interfaces will have to be made generic to support both packages names.
{code}
[ERROR] /Users/rhusar/git/mod_cluster/core/src/main/java/org/jboss/modcluster/ModClusterService.java:[39,21] package javax.servlet does not exist
[ERROR] /Users/rhusar/git/mod_cluster/core/src/main/java/org/jboss/modcluster/ModClusterService.java:[40,26] package javax.servlet.http does not exist
{code}
was:
Because Servlet 5.0 will change package names, and because the implementations of the SPI must work with containers supporting earlier versions of the specification, certain interfaces will have to be made generic to support both packages names.
> Refactor core and SPI modules in preparation for Servlet 5.0
> ------------------------------------------------------------
>
> Key: MODCLUSTER-716
> URL: https://issues.redhat.com/browse/MODCLUSTER-716
> Project: mod_cluster
> Issue Type: Task
> Reporter: Radoslav Husar
> Assignee: Radoslav Husar
> Priority: Major
>
> Because Servlet 5.0 will change package names, and because the implementations of the SPI must work with containers supporting earlier versions of the specification, certain interfaces will have to be made generic to support both packages names.
> {code}
> [ERROR] /Users/rhusar/git/mod_cluster/core/src/main/java/org/jboss/modcluster/ModClusterService.java:[39,21] package javax.servlet does not exist
> [ERROR] /Users/rhusar/git/mod_cluster/core/src/main/java/org/jboss/modcluster/ModClusterService.java:[40,26] package javax.servlet.http does not exist
> {code}
--
This message was sent by Atlassian Jira
(v7.13.8#713008)
4 years, 9 months
[JBoss JIRA] (MODCLUSTER-716) Refactor core and SPI modules in preparation for Servlet 5.0
by Radoslav Husar (Jira)
Radoslav Husar created MODCLUSTER-716:
-----------------------------------------
Summary: Refactor core and SPI modules in preparation for Servlet 5.0
Key: MODCLUSTER-716
URL: https://issues.redhat.com/browse/MODCLUSTER-716
Project: mod_cluster
Issue Type: Task
Reporter: Radoslav Husar
Assignee: Radoslav Husar
Because Servlet 5.0 will change package names, and because the implementations of the SPI must work with containers supporting earlier versions of the specification, certain interfaces will have to be made generic to support both packages names.
--
This message was sent by Atlassian Jira
(v7.13.8#713008)
4 years, 9 months
[JBoss JIRA] (MODCLUSTER-714) support secret="secret" in AJP nodes
by Jean-Frederic Clere (Jira)
[ https://issues.redhat.com/browse/MODCLUSTER-714?page=com.atlassian.jira.p... ]
Jean-Frederic Clere commented on MODCLUSTER-714:
------------------------------------------------
AJPSecret - secret for all mod_cluster node, not configued no secret.
Add in httpd.conf something like:
AJPSecret YOUR_TOMCAT_AJP_SECRET
> support secret="secret" in AJP nodes
> ------------------------------------
>
> Key: MODCLUSTER-714
> URL: https://issues.redhat.com/browse/MODCLUSTER-714
> Project: mod_cluster
> Issue Type: Bug
> Reporter: Jean-Frederic Clere
> Assignee: Jean-Frederic Clere
> Priority: Major
>
> The CVE-2020-1938 "mitigation" forces the use of a secret between httpd and the back-end.
> <Connector port = "8009"
> protocol = "AJP / 1.3"
> redirectPort = "8443"
> address = "YOUR_TOMCAT_IP_ADDRESS"
> requiredSecret = "YOUR_TOMCAT_AJP_SECRET" />
> Actually secret="secret" is support in mod_proxy_ajp but not in mod_cluster.
> That prevents use using the mitigation.
--
This message was sent by Atlassian Jira
(v7.13.8#713008)
4 years, 9 months