Handling empty Host in HTTP Header

[Mani]

Hi,

We are using tomcat-8.5.34. One of our client code is sending a POST request with HTTP header parameter "Host", as an empty string. And 8.5.34 version of tomcat is rejecting the connection with a 400 Error. After debugging, we found that the parseHost API in org.apache.coyote.AbstractProcessor is throwing an InvalidArgumentException (Seems to be introduced in 8.5.31). Then we checked out the latest tomcat code from SVN and found that the issue has been already addressed ( https://bz.apache.org/bugzilla/show_bug.cgi?id=62739 ) . So, we hope, the fix would be available in 8.5.35.

May I know, when is the next official tomcat release planned? So that we can decide on how to handle this issue in our product.

Thanks,

Mani

[Caldarale, Charles R]

Subject: Handling empty Host in HTTP Header
May I know, when is the next official tomcat release planned?

Releases for Tomcat versions under active development (including the 8.5
leg) normally occur in the first week of each calendar month. Last-minute
glitches can affect the schedule, of course.

- Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
MATERIAL and is thus for use only by the intended recipient. If you received
this in error, please contact the sender and delete the e-mail and its
attachments from all computers.

[Mani]

‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐

Post by Caldarale, Charles R

Subject: Handling empty Host in HTTP Header
May I know, when is the next official tomcat release planned?

Releases for Tomcat versions under active development (including the 8.5
leg) normally occur in the first week of each calendar month. Last-minute
glitches can affect the schedule, of course.
- Chuck
THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
MATERIAL and is thus for use only by the intended recipient. If you received
this in error, please contact the sender and delete the e-mail and its
attachments from all computers.

Thanks for the info Chuck..

Mani

---------------------------------------------------------------------
To unsubscribe, e-mail: users-***@tomcat.apache.org
For additional commands, e-mail: users-***@tomcat.apache.org

[Mark Thomas]

Post by Caldarale, Charles R

Subject: Handling empty Host in HTTP Header
May I know, when is the next official tomcat release planned?

Releases for Tomcat versions under active development (including the 8.5
leg) normally occur in the first week of each calendar month. Last-minute
glitches can affect the schedule, of course.

Note the October release never happened due to a combination of
ApacheCon, working on getting TRLSv1.3 support working, needing a Tomcat
Native release etc.

Currently, I don't see anything that would add delay to the November
release.

Mark

---------------------------------------------------------------------
To unsubscribe, e-mail: users-***@tomcat.apache.org
For additional commands, e-mail: users-***@tomcat.apache.org

[Mani]

‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐

Post by Mark Thomas

Post by Caldarale, Charles R

Subject: Handling empty Host in HTTP Header
May I know, when is the next official tomcat release planned?

Releases for Tomcat versions under active development (including the 8.5
leg) normally occur in the first week of each calendar month. Last-minute
glitches can affect the schedule, of course.

Note the October release never happened due to a combination of
ApacheCon, working on getting TRLSv1.3 support working, needing a Tomcat
Native release etc.
Currently, I don't see anything that would add delay to the November
release.
Mark
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

Thanks Mark.


Mani

---------------------------------------------------------------------
To unsubscribe, e-mail: users-***@tomcat.apache.org
For additional commands, e-mail: users-***@tomcat.apache.org

[Mani]

‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐

Post by Mani
‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐

Post by Mark Thomas

Post by Caldarale, Charles R

Subject: Handling empty Host in HTTP Header
May I know, when is the next official tomcat release planned?

Releases for Tomcat versions under active development (including the 8.5
leg) normally occur in the first week of each calendar month. Last-minute
glitches can affect the schedule, of course.

Note the October release never happened due to a combination of
ApacheCon, working on getting TRLSv1.3 support working, needing a Tomcat
Native release etc.
Currently, I don't see anything that would add delay to the November
release.
Mark

Thanks Mark.
Mani

Hi,
Just curious to know.. Any ideas on the release dates for tomcat 8.5.35?

Mani

---------------------------------------------------------------------
To unsubscribe, e-mail: users-***@tomcat.apache.org
For additional commands, e-mail: users-***@tomcat.apache.org

[Christopher Schultz]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Mani,

‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Sunday, October 28, 2018 8:33

‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Saturday, October 27, 2018

Post by Mark Thomas

Post by Caldarale, Charles R

From: Mani
Subject: Handling empty Host in HTTP Header
May I know, when is the next official tomcat release
planned?

Releases for Tomcat versions under active development
(including the 8.5 leg) normally occur in the first week of
each calendar month. Last-minute glitches can affect the
schedule, of course.

Note the October release never happened due to a combination
of ApacheCon, working on getting TRLSv1.3 support working,
needing a Tomcat Native release etc. Currently, I don't see
anything that would add delay to the November release. Mark

Thanks Mark.
Mani

Hi, Just curious to know.. Any ideas on the release dates for
tomcat 8.5.35?

Have a look at the recent posts to the dev@ list. Search for "8.5.35".

- -chris
-----BEGIN PGP SIGNATURE-----
Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/

iQIzBAEBCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAlvi5bQACgkQHPApP6U8
pFgxVA/+Oh8po4Qdk+caJtg1cKfanubVVZfbEcs27ABfNrc2xBftOW4/iunjdYDG
lq0oCZj6qRZGh0Lfy3Hud6naMPLTEOua4IuEM+/RrwWFOIBwBK/oIpuVDVi2WXwv
6T32szpnEdkZTkHoyWU2sosabtYCstSC9YAML9pdI3EOD2Dp1Plw4P0weEcon9uP
xco5LUjQUD2U+m4P7al8/thKpzXr3e+6rk+BH3GHlK8t71ZSNUIGj4W9VSIJOQqZ
+sbNV90OTceNHv8trw8Qu+VvojSWzoQFfQxWikE0GWFLNVZalk/8ZncrhhSzOMcO
F1Gf8ubTAfkW+KVxISZlDifOiAB/z/TxBJ4tcfBAHYk/KgDyWF+jL0C/46Cf9qm1
lp2N5CwSPRU1bvfN1vNsqIanQuOUbNVgh2vNIcrdGWhU8yfbgoQ1mVrCXlPy+uWJ
tgAKS9OSbX5s5+Wt0lMqLGS9KwhwsdPH9ARdPCs0RvObCbC8hwQSM4ZWQsjSZZ/q
iemNL28+/hkdP0wPr99zV7gRyVyabE0R5o1W5crpUFDcoF/Txf1iXV7IvCpDG57I
XZth+Y2msNmPYJ6UgLLKGBS0idovtAuAUUOA34jMCHHBALl3NCfs22Vh5fTvChCK
RZg2TxYQdEcEXXFC1Ftw//4UG+OebY9I70qgVJR+iGitZfbf58U=
=7EB3
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-***@tomcat.apache.org
For additional commands, e-mail: users-***@tomcat.apache.org