Comments (3)
yosifkit
commented on May 22, 2024
1
We have seen problems of curl failing to verify certificates when run within alpine:3.5: docker-library/official-images#2756 (comment); maybe this is somehow related?
from tomcat.
roadmapper
commented on May 22, 2024
Yeah, I definitely think this is related. I ran very similar tests with curl/wget and got issues with ECDHE ciphers and SSL23_CLIENT_HELLO failures from curl, but on some machines was successful with non elliptic curve ciphers and on other machines (mostly non-libressl) successful connections. Was really not looking forward to moving back to the older OpenJDK Docker image since it won't be possible to update Java past 8u111.
I moved to Debian images for the time being, but the images are almost double in size 😕
Tomcat doesn't seem to support libressl properly either based on this bug in the Apache Tomcat bugzilla. I'll be following closely to your comment for that SonarQube PR. Hopefully someone has a solution.
from tomcat.
roadmapper
commented on May 22, 2024
Finally got around to testing if the changes in Alpine 3.6 with OpenJDK 8 b131 (r2); everything seems to work properly with elliptic curves now with the fix from alpinelinux/aports.
from tomcat.
Related Issues (20)
- Use Tomcat Native 2 HOT 1
- ppc64le/tomcat:latest exits with 132 RHEL HOT 4
- Add support for SAP Machine HOT 2
- package updates with apt not working HOT 2
- Update Vulnerable OpenSSL: 3.0.2->3.0.7 (at least, image “tomcat:8.5-jre11-temurin”) HOT 1
- Where are the OpenJDK images? HOT 1
- tomcat 10.1 with corretto HOT 5
- Create new image 9.0.71-jdk11-openjdk HOT 1
- Docker image tomcat:8-jre8, tomcat version 8.5.85 unable to deploy application, 404 error HOT 1
- tomcat:9.0.70-jdk17-temurin failing to build due to CVE-2023-0286 HOT 1
- Have release the images(jdk8) to fix CVE-2023-0286 HOT 2
- Java19 HOT 3
- Whether any images has been fixed for CVE-2023-24998 HOT 4
- tomcat image for Amazon Linux 2023 ? HOT 2
- Provide Temurin images based on Debian HOT 7
- Javacode fails to read dotted environment variables since 08/09/23 HOT 3
- Server information disclosure with default configuration HOT 3
- Latest Tomcat Version has regressions - so please update to newer fixed version when they become available. HOT 5
- Unrecognized VM option 'UseConcMarkSweepGC' with tomcat:9-jre17 HOT 1
- GraalVM HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from tomcat.