The Apache Jakarta Tomcat 5.5 Servlet/JSP Container

Changelog

print-friendly
version

Preface

This is the Changelog for Tomcat 5.5.x, which was branched based on Tomcat 5.0.27. For changes in Tomcat version 5.0.x, which preceded version 5.5.0, please see The Tomcat 5.0.x Changelog. As maintenance releases are cut on the 5.0.x branch, most fixes will be ported into a 5.5.x release and noted both here and in the above Changelog. However, bugs fixed in Tomcat 5.0.28 and earlier are noted only in the above changelog.

Tomcat 5.5.8 (yoavs)

General

33204: Fixed SSL HowTo page. (yoavs)

33351: Fix silent uninstallation. (remm)

33489: Missing space in uninstaller message. (yoavs)

Catalina

Unregister host mbean and all context mbeans at remove a host, s. StandardHost.destroy() and MBeanFactory.createStandardHost/removeHost(,) detected by Thorsten Kamann (pero)

make it possible to restart connector, now serversocket recreated after stop,start (pero)

change mbean names from Mapper and ProtocolHandler to connector naming style (pero)

Add some log.isXXXEnabled (pero)

Deregister MapperListener after remove connector (pero)

Remove host only at own domain with same name at all services, detected by Thorsten Kamann (pero)

33187: Remove any logging of the password in the JAAS realm, submitted by Andrew Jaquith (remm)

33033: Don't do anything to the response in the ErrorReportValve if data has already been written (remm)

Add charset support for the URLs used by the tasks, to remove deprecation (remm)

26135: Workaround for memory leak when reloading Struts based web applications by clearing the bean instrospector cache of the JVM on classloader stop, submitted by Tobias Lofstrand. (remm)

Ensure that if CLASSPATH is declared on startup - it is not used. (funkman)

Add back use of deployOnStartup in HostConfig (remm)

Ant tasks docs patches, submitted by Gabriele Garuglieri. (remm)

Use NIO for the raw copying operation, as it is faster (a little under 30%), and decreases a little the impact of antiResourceLocking. (remm)

33357: Fix connection leaks with the DataSourceRealm, as well as improve efficiency, submitted by Dominik Drzewiecki. (remm)

Improve a little logging of servlet exceptions, which should all log the root cause. (remm)

Add new Manager.createSession(sessionId) method, allowing the client to "specify" the session id which should be used using a cookie when using emptySessionPath="true". This fixes session tracking in this case. (remm)

33368: Fix memory leak in swallowOutput feature which occurred when the thread pool size is reduced, submitted by Rainer Jung. (remm)

StoreConfig: can't save cluster Membership element (pero)

StoreConfig: suppress default jkHome attribute at connector (pero)

StoreConfig: Save new dymanic properties from ReplicationTransmitter (pero)

33463: Remove attributes after context destroy. (remm)

33572: context.xml should be a redeploy resource, and add prioritization for redeploy resources. (remm)

Coyote

PoolTcpEndpoint recreate ServerSocket after start,stop,start connector (pero)

Add some log.isXXXEnabled (pero)

JkMX: make log4j mbean configurable with attribute log4jEnabled (pero)

When Tomcat runs on Windows and IE is uploading data to the server, the first read must be at least 8KB, otherwise upload speed is extremely low, submitted by Noel Rocher (remm)

Jasper

33223: pageContext.forward and jsp:include result in StringIndexOutOfBoundsException (luehe)

33373: Fix handling of context classloader in jspc (remm)

Cluster

Add instance based ReplicationValve statistics to Mbean descriptor (pero)

Better I18N support to cluster session and tcp classes (pero)

Support optional primaryIndicator at ReplicationValve to mark that request processing to existing session is at primary cluster node. Easy failover detection, when mark is not at configurable primaryIndicator attribute, submitted by Rainer Jung (pero)

Refactor all implementation from interface IDataSenders (pero)

Add some usefull attributes and operations to the all sender MBeans. (pero)

Add keepAlive and waitForAck handling to AsyncSocketSender and factor out a DataSender base class.(pero)

ReplicationTransmitter: Enable and Disable autoreconnect sender and waitForAck. (pero)

ReplicationTransmitter: transfer all properties to socket sender from server.xml configuration. (pero)

Webapps

Fix create and remove Host for Admin app. (pero)

Tomcat 5.5.7 (remm)

General

Add installer for mod_jk on IIS. (mturk)

New store config module for better server.xml saving support.
Add <Listener className="org.apache.catalina.storeconfig.StoreConfigLifecycleListener" /> to your server.xml (pero)

32081: Remove the JDK requirement from the Unix scripts, submitted by Ben Souther (remm)

32953: SERVLETAPI: XSS Issues, submitted by Mark Thomas (jfarcand)

Update to commons-digester 1.6, JDT 3.0.1, MX4J 2.1.0, Struts 1.2.6 (remm)

Catalina

First integration at StoreConfig to StandardServer (pero)

32714 : Don't make the AccessLogValve final (funkman)

32694: Fix bad code to make docBase path aboslute in antiLocking method. (remm)

32713: Fix resource-env-ref handling. (remm)

31201: Improve i18n support in DefaultServlet. This was causing problems with JSP include actions and static files. (markt)

Add some log.isXXXEnabled to o.a.c.core.StandardHost StandardEngine, StandardService (pero)

Feature addition to add Redirector and failOnError support for all Catalina Ant tasks, submitted by Gabriele Garuglieri (remm)

31198: Fix FORM and DIGEST authentication for non-ASCII usernames and passwords. (markt)

Reimplement charset mapper (remm)

Add logging of exception which could occur when retrieving the password in JDBCRealm (remm)

25889: Don't execute queries twice, submitted by Tom Anderson (remm)

32832: request.getSession(false) fails to return null (luehe)

28222: request.getRequestURL() in forwarded jsp/servlet returns original url rather than new url as per SRV8.4 (markt)

33157: Fix handling of the buffer length for basic authentication parsing (remm)

Coyote

32708: Better handling of bad encoding with the string cache. (remm)

32781: Fix bad initialization of the "scheme" field of the request object, which would cause getScheme to return "http" for the first request. (remm)

Content length should be ignored if there is chunking (remm)

Remove most deprecation problems for the AJP connector (remm)

Jasper

32746: Avoid JAR locking when loading classes and improve loading performance by taking advantage of caching, submitted by Dominik Drzewiecki. (remm)

Cluster

correct JvmRouteSessionIDBinderListener MBean name to <domain>:type=Listener,name=JvmRouteSessionIDBinderListener,host=<host> (pero)

JMX support to SimpleTcpCluster, ReplicationTransmitter and all senders (pero)

Webapps

Fix the webDAV servlet so it can be used via any arbitrary mapping (eg /webdav/*) to edit the contents of a web application. (markt)

32729: Stop is optional and may fail, so it needs to be in a separate try/catch (remm)

Remove the remove method of the manager servlet, and use the undeploy method instead (remm)

32777: Fail if application isn't configured properly, submitted by Gabriele Garuglieri (remm)

32771: Cannot undeploy/deploy misconfigured app after tomcat startup, submitted by Gabriele Garuglieri (remm)

28867: Correct manager documentation to document correct way to reference the ROOT context. Submitted by Stephane Bailliez. (markt)

33085: Add support for setting privileged attribute of context to admin webapp. (markt)

33117: Fix Open bugs link broken on default homepage. Patch supplied by Sander Temme. (markt)

Improve javadoc generation for Catalina. (remm)

Tomcat 5.5.6 (yoavs)

General

32532: updated logging documentation. (yoavs)

32382: Index page and packaed WAR for sample webapp. (yoavs)

32603: Updated host.xml to reflect appBase resolution. (yoavs)

Catalina

Add child to the map of the parent before starting it. (remm)

Decouple usage of the scheme and secure attributes from enabling SSL. (remm)

32502: memory leak in DigestAuthenticator. (yoavs)

28709: javax.servlet.http.HttpServletRequest.isRequestedSessionIdValid() returns true for an invalidated session. (luehe)

32137: Possible thread-safety issue in RealmBase. (yoavs)

Coyote

32585: Better handling for content length greater than Integer.MAX_VALUE in response. (markt)

Allow ApacheConfig and friends to live under an Engine. (billbarker)

Syncronize access to the Jk Request registration count. (billbarker)

Speed the MsgContext on its way to GC. (billbarker)

Keep correct thread counts in Thread pool when thread ends in an exception (billbarker)

Jasper

Updated Jasper-HowTo section on using Jikes, changed conf/web.xml JSPServlet to refer people to Jasper-HowTo so that we don't have these instructions in two places. (yoavs)

Webapps

32505: Fix handling of an empty context parameter (which occurred every time the HTML manager was used to deploy a local war without specifying also a context file). (remm)

Tomcat 5.5.5 (yoavs)

General

32235: Sync conf/web.xml MIME types with Apache httpd. (yoavs)

31132: Better -x/-r support for OS/400 in startup scripts. (yoavs)

22679: Added misc note on accessing session ID to SSL-HowTo. (yoavs)

32249: Updated logging documentation. (yoavs)

32282: Modify Windows Uninstaller to only remove webapps/ROOT and webapps if user asks to remove everything. (yoavs)

32371: outdated introduction.xml page. (yoavs)

32373: outdated installation.xml page. (yoavs)

32454: amended JNDI documentation for JavaMail/JavaActivationFramework usage. (yoavs)

Catalina

32130: Add safety check to FileStore#keys method. (yoavs)

32276: Add developer info to Realm How-To. (yoavs)

32082: Added protected getPrincipals method to MemoryRealm for easier extension. (yoavs)

32023: CGIServlet fails to handle post message with multipart/form data. (yoavs)

32269: JNDIRealm fails with InvalidNameException to authenticate users if LDAP distinguished name (DN) contains slash or double quote character(s). (yoavs)

Move processExpiresFrequency check to ManagerBase and reflect change to all subclasses (StandardManager, PersientManagerBase, DeltaManager). (pero)

Add DIGEST authentication support to the JDBC and DataSource realms. Supports both digested and cleartext passwords. (markt)

32429: CGIServlet calculates number of lines received on stderr incorrectly. (markt)

32431: Fix typo in code that passes data to CGI script. (markt)

32430: Class cast exception in toString() method within CGI servlet. (markt)

Add some log.isXXXEnabled checks at StandardContext and HostConfig (pero)

Remove the last DefaultContext artifacts (pero)

32031: using createConnector with "http" protocol (remm)

Add configFile attribute in JMX descriptors (remm)

Fix autodeployer handling of a war which includes a /META-INF/context.xml, so that it is correctly registered and can be reloaded correctly (remm)

32137: Use of MessageDigest should be synced in DIGEST (remm)

Add info log when the autodeployer reloads a context (remm)

Coyote

Small HTTP/1.1 optimizations: replace usage of Strings with constant byte arrays, and simplify the code converting Strings to bytes (remm)

Greatly reduce the amount of recycle method calls on the buffers (remm)

Add null OName check for Request unregistration in Jk, to remove exception under JDK 1.5. (billbarker)

32292: Don't send keep-alive header when the protocol can't be parsed. (billbarker)

Jasper

Updated JspC usage messages to include recently added configurable parameters. (yoavs)

32330: JspC changes context classloader. (yoavs)

Cluster

JvmRouteBinderValve/JvmRouteSessionIDBinderListener to bind cluster session after primary node failure at first calling backup node. This was an option to have session stickyness after cluster node crashed. Work only with JESSIONID cookies. (pero)

Better log support to DeltaManager to see detail information at debug level. (pero)

Fix FarmWarDeployer based on new HostConfig deployer. (pero)

FarmWarDeployer controlled WarWatcher with engine backgroundProcess call. Added processDeployFrequency attribute to Deployer server.xml element. (pero)

Webapps

32019: Remove maxlength=64 restriction on env entry values in admin webapp. (yoavs)

Fix various problems in realm docs, submitted by Phil Mocek. (remm)

Add log4j docs submitted by Allistair Crossley. (remm)

32381: Fix problem where EL expression is used as a place holder in the admin webapp. Submitted by Allistair Crossley. (billbarker)

Tomcat 5.5.4 (yoavs)

General

31671: Update web.xml files to 2.4 schema where applicable. (yoavs)

31912: Add PNG and CSS file types to replication filter default. (yoavs)

Catalina

Add processExpiresFrequency to PersistentManagerBase and made some small JDBCStore optimizations (pero)

Register JSP monitoring mbean for each servlet that declares a jsp-file in web.xml. (luehe)

31578: Update Manager configuration documentation. (yoavs)

31273: Add support for derefaliases in JNDIRealm. (markt)

31623: Better OS400 support in setclasspath.sh. (yoavs)

Extend background processing to most container components. (remm)

Remove all MX4J related code. (remm)

Update JAR list in TldConfig. (remm)

Register datasources with JMX. With DBCP, this is enough to provide JMX management and monitoring. It might work well with many other data sources which might not register themselves in JMX but do expose their stuff in a java bean fashion. (remm)

Add the ability to force session cookies to be set to the root path "/". This should not be used on large servers, otherwise tons of cookies may be sent. (remm)

Workaround for client socket exceptions occurring while running a CGI, which could cause the external process to hang. (remm)

Optimize session cookie IDs conversion to String, since this is an unavoidable and uncacheable operation. (remm)

Add explicit error message if temp dir does not exist, and remove useless calls to initDirs. (remm)

Add an optimized access log valve, supporting hardcoded support for the common and combined patterns, and doing a majority of its write-to-logfile operations asynchronously. (remm)

Register an MBean to monitor and manage the StringCache, and allow invoking the reset operation. (remm)

31677: Log warning if work dir for context can't be determined. (yoavs)

31903: Fix condition which seems to not have been properly updated after adding entry.binaryContent = null a little below, submitted by Joe Zhou. (remm)

Prevent silent NPEs during StandardContext.start dealing with JMX registration of realm, submitted by Keith Wannamaker. (remm)

31592: Support other encodings for digests. (yoavs)

31739: Minor realm-howto and AJP connector doc updates. (yoavs)

31753: Minor inconsistency between JDBC and DataSourceRealm#authenticate. (yoavs)

31683: Minor clarifications to realm documentation. (yoavs)

Coyote

Improve i18n in TCP endpoint, and add a better error message when an exception occurs in setSocketOptions. (remm)

31663: Use interval field as the delay for monitor thread. (remm)

Remove bad shutdown logic for ms pool strategy. (remm)

Sync with Cookie, by adding ' ' as a special char. If a special char is present, the string will be quoted. If the client doesn't support it, the String will no be quoted anyway and no IAE will be thrown. (remm)

Add an optional String cache for ByteChunk.toString and CharChunk.toString. The cache is unsynchronized during most of its operation, and is static after a training period. An operation is provided to allow resetting the cache. (remm)

String caching is enabled by default for ByteChunk. (remm)

31090: Use a URL encoded path when setting session cookies. (remm)

Add getAttributeName() to ProtocolHandler to get all attributes at runtime (pero)

Jasper

Exposed compilerSourceVM and compilerTargetVM options to JspC. (yoavs)

Cluster

DeltaManager and SimpleTcpReplicationManager generate double jvmRoute (pero)

Add some missing Getters and log.isXXXEnableds (pero)

Webapps

31707: Broken JavaScript confirmation in HTML manager. (yoavs)

Remove hard-coded admin context path from admin's banner.jsp. (yoavs)

Major connector docs update. (remm)

31732: Fix Japanese localization of Manager's list output. (yoavs)

Tomcat 5.5.3 (yoavs)

General

30568: Incomplete setup.html documentation for launching jsvc. (yoavs)

Repackage naming features. (remm)

Fix deployer packaging. (remm)

Fix embed packaging. (remm)

Catalina

Fix memory leak when Security Manager is turned on. (jfarcand)

When checking status codes for error handling, only check if Response.isError() is true. This way, users may use setStatus() to set their own error status without having the error page invoked. (in which case, the user should've use sendError()) (funkman)

Remove Digester code for Xerces workaround. (jfarcand)

Give proper permission to the balancer app when running under the security manager. (jfarcand)

30869: Make sure JAAS realm name is legal. (yoavs)

md5Helper, md5Encoder, and normalize are used by WebdavServlet, not DefaultServelt so move them into WebdavServlet.

31277: Clarified automatic application deployment section of Host configuration page. (yoavs)

28631: JAASRealm enhancements to support custom user and role classes use Commons-Logging. (yoavs)

31364: Missing resource in org.apache.catalina.core.LocalString.properties. (yoavs)

31362: Missing -Xdebug in catalina.bat when launching with JPDA and Security. (yoavs)

31356: Duplicates not counted in session generation. (yoavs)

30949: Make sure ApplicationDispatcher unwraps request/response even if include error occurs. (yoavs)

Fixed StandardContext.getStartTime() to return actual start time/date instead of time (startupTime) it took to start context. (luehe)

getRequest/getResponse should return the most relevant interface, to avoid casts. (remm)

Add check for directory before considering something is a compressed WAR. (remm)

Update the connector documentation. (remm)

When parsing a context file, ignore the "path" attribute: the only place where it is acceptable is in server.xml. (remm)

Digester handling fixes: always call reset in a finally block after using a digester. (remm)

Remove many fields from Connector, and tie the creation of the Connector to the creation of the protocol handler. (remm)

Remove package triggers from the classloader, which seem useless when using Java 5. (remm)

Realms will now use set attribute to set themselves in their container when using JMX. (remm)

Fix JMX related operations with the Connector. (remm)

Fix save-to-XML for naming resources. (remm)

Remove authenticator "debug" attributes from the descriptors. (remm)

Refactor org.apache.catalina.deploy.ContextXXX to use new super class ResourceBase. (pero)

Enable Connector.findLifecycleListener that we can listen start/stop Connector events and save the listener to xml. (pero)

Remove Watchdog references, as it is no longer used. (yoavs)

31511: Don't call setenv.bat if not found, in *using-launcher scripts. (yoavs)

31549: Add name to WebappClassLoader's stopped message. (yoavs)

Coyote

Allow customized server header for Standalone. (funkman)

Digester.reset now removes the error handler, the root and calls clear, to prevent any memory leak. (remm)

Remove useless stuff in digester. (remm)

In HTTP, add a utility method to convert strings to byte arrays, and output the server header directly as bytes. (remm)

Add a master slave thread pool based on the code from Tomcat 4.0. It is less exotic than the default one, and might fare better on some picky systems, such as Redhat 9. The two threadpools will likely be removed once we use the Java 5 API, although more investigation is needed. (remm)

Fix issue with getProperty in IntrospectionUtils. (remm)

Remove attribute translation for SSL in the HTTP protocol handler: it will now be done in the Catalina Connector class. (remm)

Fix handling of the "timeout" attribute of the HTTP protocol handler. (remm)

Jasper

31171: Wrap to avoid ClassCastException in PageContextImpl. (yoavs)

31257: Added specification of endorsed dirs if forking. Note that this is fairly useless for now in 5.5 since it uses JDT and not javac by default. (yoavs)

Document new Jasper defaults, and update the production configuration. (remm)

Copied XML encoding detection logic into JASPER, so we're no longer dependent on Xerces. (luehe)

Fix cosmetic issue where extra CRLF would be inserted during each precompilation in web.xml. (remm)

Allow configuring the interval following a compilation during which a JSP will not be checked for modifications. (remm)

31465: Ensure that the compiler reads the .java file using the same encoding as that with which it was written. (markt)

31510: Null out response in JspWriterImpl#recycle to aid in JBoss memory leak. (yoavs)

Cluster

Added flag to the cluster (notifyListenersOnReplication) to enable/disable the notifications of attribute/context listeners upon replication of a session delta Works only with the DeltaManager (fhanik)

Added flag to the cluster (Cluster/Sender/ackTimeout) to set the timeout in milliseconds for a synchronous request to go through, defaults to 15000ms (fhanik)

Webapps

29485: I broke the HTML manager when adding JavaScript confirmation, fixed now ;) (yoavs)

31058: Ensure StatusTransformer escapes query string for XML. (yoavs)

Added contexts' start time (available from 'startTime' MBean attribute of StandardContext) to status page (luehe)

31264: the deploy task should now behave correctly. (remm)

Refactor the manager servlet to make calls to the deployer more robust. (remm)

Use the more robust String.valueOf in the form edit action of the connector. (remm)

Tomcat 5.5.2 (yoavs)

General

The installer will now use the system's JRE. (remm)

Catalina

Fix URL generation for classloaders on Windows, causing common/classes and shared/classes to be unusable (remm)

31110: Fix resource packaging bug for servlets (remm)

Fix 5.5 regression where going through the authenticator would create a session each time. (remm)

Fix classname of the connector in Embedded, and remove the socket factory. (remm)

Coyote

Redo server header handling again. (remm)

Cleanup a little access to the headers using a local variable and use setValue for Server and Date headers. (remm)

Jasper

Remove maxTagNesting and curTagNesting since they are unused. (funkman)

Fix tag files handling with JDT, which were ususable, and refactor the lifecycle handling of the page loader. (remm)

Cluster

Webapps

Tomcat 5.5.1 (yoavs)

General

Tomcat 5.5 can be built on JDK 5.0. (yoavs)

Windows installer polish. (mladen, remm)

Remove dependency on Jakarta regexp. (remm)

Catalina

Allow overriding the location of the default context file, similar to the default web.xml. (remm)

Backport if-else logic for SSI servlet from 4.1 (funkman)

Remove DefaultContext elements from the digester rules. (remm)

Fix ResourceLink handling. (remm)

Modify the auto deployer to get along with contexts which are statically defined in server.xml. (remm)

Externalize constant strings defining the location of deployment related resources. (remm)

31052: BeanFactory swallows root cause of exception. (yoavs)

Allow using deploy Ant task with just config attribute, submitted by Michael Schuerig. (remm)

Added longest time an expired session had been alive to set of monitorable session manager attributes. (luehe)

Added average time an expired session had been alive to set of monitorable session manager attributes. (luehe)

Clear a reference in the digester where a context would be referenced for more time than it needed, until the next context deployment operation. (remm)

Coyote

31018: Race condition in SystemLogHandler. (yoavs)

Jasper

Use the "compiler" parameter to allow specifying that Ant should be used. (remm)

Ignore JDT compiler warnings. (remm)

Added compilerTargetVM option support, "1.4" default. (yoavs)

Cluster

Fix adding the clustering valve, so that session replication actually occurs. (fhanik)

Webapps

Major documentation update with current Tomcat 5.5 changes. (remm)

Added JavaScript confirmation dialog to "dangerous" Manager servler links. (yoavs)

Tomcat 5.5.0 (yoavs)

General

Many updated and fixed JavaDocs. (yoavs)

Designed and tested Tomcat on J2SE 5.0 (aka JDK 1.5). (everyone)

Bundled Eclipse JDT (new dependency) to allow Tomcat to run on a JRE only, i.e. no JDK required. (remm)

Repackage commons-dbcp and its dependencies as a sigle smaller WAR, with renamed packages. (remm)

Removed dependencies on commons-digester, commons-beanutils, and commons-collections. The relevant digester functionality is now merged in tomcat-util. (remm)

Catalina

Removed usage of org.apache.catalina.Logger, increased usage of commons-logging everywhere. (remm)

Refactored classloader code to better handle JAR and general resource locking. (remm)

Written JMX-related code to play nicely with J2SE 5.0 built-in JMX abilities. (remm, costin)

Extensively profiled and optimized the server startup performance as well as the request mapping and processing pipeline. (remm)

The container will now always process a /META-INF/context.xml resource, unless the webapp has a specified external context file. (remm)

New default configuration mechanism for web applications, replacing DefaultContext. This uses a shared context file located in conf/context.xml. (remm)

Revamped deployer, alloying full hotdeploy (note: on Windows, this requires the anti file locking features). (remm)

Remove verbosity from the JNDI resources configuration, by allowing arbitrary attributes on the Resource element. (remm)

Simpler Valve interface, to allow smaller stack traces and reducing the amount of method calls. (remm)

Coyote

Jasper

Eclipse JDT is now the default Java compiler in Jasper. Source dependencies are now loaded from the container classloader, and compilation times are much faster. (remm)

Jasper development mode should now have acceptable performance for heavily accessed pages. Precompiling JSPs is still significantly more efficient, however. (remm)

Cluster

Webapps