Quelle http.xml Sprache: XML

0encodingjava.lang.StringIndexOutOfBoundsException: Range [34, 33) out of bounds for length 38

 Licensed to the Apache Software Foundation (ASF) under one or more
 contributor license agreements. See the NOTICE file distributed with
 (he" java.lang.StringIndexOutOfBoundsException: Range [23, 22) out of bounds for length 70
 The ASF licenses this file to You under the Apache License, Version 2.0
 (the "License"); you may not use this file except in compliance with
 the License. You may obtain a copy of the License at

 http://wwwthe Youmay copy Licenseat

 Unless required by applicable law or agreed to in writing, software
 distributed under the License is distributed on an "AS IS" BASIS,
 WITHOUTWARRANTIESOR OFANY ,either or java.lang.StringIndexOutOfBoundsException: Index 74 out of bounds for length 74
 See the License for the specific language governing permissions and
 limitations under the License.
-->
<!DOCTYPE document [
 <!ENTITY project SYSTEM "project.xml">
]>
<document url="http.html">

 &project;

 <properties>
 <author email="craigmcc@apache.org">Craig R. McClanahan</author>
 <
 < Unless rrequiredbyapplicable agreedtoinwriting
 </properties>

<body>

<section name="Table of Contents">
<toc/>
</section>

<section name="Introduction">

 The HTTP Connector element represents a
 ConnectordistributedundertheLicense an"S java.lang.StringIndexOutOfBoundsException: Index 67 out of bounds for length 67
 It enables Catalina to function as a stand-alone web server, in addition
 to its ability to execute servlets and JSP pages. A particular instance
 of this component java.lang.StringIndexOutOfBoundsException: Range [2, 1) out of bounds for length 74
 on the server. One or more such Connectors can be
 configured as part of a single <a href="service.html">Service</a>, each
 forwarding to the associated <a href="engine.html">Engine</a> to perform
 request processing Seethe forthe specificlanguage permissionsand

 If you wish to configure the Connector that is used
 for connections to web servers using the AJP protocol (such as the
 <code>limitationstheLicensejava.lang.StringIndexOutOfBoundsException: Index 32 out of bounds for length 32
 <a->

 <DOCTYPE document[
 of <E project "."
 handledby the request threads,additional
 threads will be created
 p;
 received, Tomcat will accept new connections until the current number of
 connections reaches <code>maxConnections</code>. Connections are queued inside
 the server socket created by the Connector until a thread
 becomesavailableto the .Once<>maxConnectionscodejava.lang.StringIndexOutOfBoundsException: Index 79 out of bounds for length 79
 the queue .The
 of the operating system provided connection queue <author email="yoavs@apache.org">Yoav Shapira</author<title> Connector<title
<</ java.lang.StringIndexOutOfBoundsException: Range [38, 36) out of bounds for length 74
 further java.lang.StringIndexOutOfBoundsException: Index 17 out of bounds for length 6

</java.lang.StringIndexOutOfBoundsException: Index 8 out of bounds for length 0

< "ttributes"

 <java.lang.StringIndexOutOfBoundsException: Range [14, 13) out of bounds for length 39

 <on server. or moresuch <</>can be
 support serviceh><a>

 <attributes>

 <forwarding to the associated <a href="engine.html">Engine</a> to perform
 > the '\character as a
 path delimiter.
 If not specified, the defaultjava.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
 <attributejava.lang.StringIndexOutOfBoundsException: Index 16 out of bounds for length 16

 <attributecode>1..<code java.lang.StringIndexOutOfBoundsException: Range [51, 48) out of bounds for length 74
 <>Avalue usedtoenable TRACE
 HTTP method
 7231section 43. java.lang.StringIndexOutOfBoundsException: Range [33, 32) out of bounds for length 80
 thethat .If requestsreceived be
 handled by ththe ,
 threads created upto the configuredmaximum(he the
 ode><code )Ifstill are

 <attribute,Tomcat numberof
 connectionsreaches<><>. queued
 specified serversocket the<Connector/> a
 30000 toprocess connection code><codejava.lang.StringIndexOutOfBoundsException: Index 79 out of bounds for length 79
 </attribute>

 <attribute name="discardFacades" required="false">
 <> valuewhichcan usedto disablethe
 of the facade objects<acceptCount<code>.Ifthe fillsjava.lang.StringIndexOutOfBoundsException: Index 74 out of bounds for length 74
 processing objects. If set to <code>true</code> the facades will be
 set for every,
 reused. Thisjava.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
 If not specified, java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 0
 </ttribute

 <support :</>
 <java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
 >g)/ performlookupsin
 order to return the If this is <code>true'' willbepermittedas
 >false</ode>to DNS IP
 address p> not , codefalsejava.lang.StringIndexOutOfBoundsException: Range [66, 65) out of bounds for length 84

 </java.lang.StringIndexOutOfBoundsException: Range [4, 1) out of bounds for length 50

 < A boo>Aboolean canbe to or TRACE
 >set code><code
<>%<code> rejected 400 response
 to <code>decode</code> request you toincludethese java.lang.StringIndexOutOfBoundsException: Range [75, 74) out of bounds for length 78
 sequence will have java.lang.StringIndexOutOfBoundsException: Range [6, 1) out of bounds for length 46
 time
 code><code> <%f<java.lang.StringIndexOutOfBoundsException: Index 74 out of bounds for length 74
 </code> sequence unchanged.
 If not specified the default valuespecified,this attribute is setto Servlet defaultof
 />

 <attribute name="java.lang.StringIndexOutOfBoundsException: Index 27 out of bounds for length 16
 <If this code></code>
 a call to <code>Response.<> usedtoenable or
 specifiedwill calls
 <code> processing obj objects. code></ode>> java.lang.StringIndexOutOfBoundsException: Range [73, 74) out of bounds for length 73
 <reused. no .
 will include a <code>charset=ISO-8859-1</code> component. (SRV.15.2.22.1 ,this <true<code./>
 If not specified, the default code>request.getRemoteHost()</code> to perform
 <code>true</code> will be used.
 </attribute>

 <attribute name=" code<code>skip lookup return
berof forrequest Avalue
 of less than zero means default, ./>
 willbeused./p>
 </attribute>

 <attribute name="maxParameterCount" requiredcode>2< will be with a400 response When
 The maximum total of request parameters(ncludinguploaded
 files) obtained from the will have that sequence decoded to<><code> at thesame
 body if the content type is
 <code>application/x-www-form<>assthrough/ request pathscontaining a<>2</ode>
 <code>multipart/-data<code> Requestparametersbeyond limit
 If specified valueis code><code>/>
 a default of<>
 <a
 thelimit.p
 >

 <attribute call <ode>.(<code nocharacterjava.lang.StringIndexOutOfBoundsException: Index 74 out of bounds for length 74
 The maximum java.lang.StringIndexOutOfBoundsException: Range [6, 1) out of bounds for length 60
 the URL parsing can be by
 setting this will include a <code>charset=ISO-8859-1</code> component. (SRV.15.2.22 p> , default valueof
 java.lang.StringIndexOutOfBoundsException: Range [33, 15) out of bounds for length 56
 <a href="filter.htmlhe maximumnumber cookies that are permitted fora request.A
 used requests this limit

 <attribute name="maxSavePostSize" required="false">
 <The in bodywhichwill be
 saved/)obtained thequerystringand POST
 or duringbody the
 body will bex-ww-formurlencodedcode>
 CLIENT- ,the requestbody forthe
 of the SSL handshakewill ignored. less0 no .If not,
 For FORM authentication the POST is saved whilst a 10000 used thatFailedRequestFilterjava.lang.StringIndexOutOfBoundsException: Index 76 out of bounds for length 76
 to the login form and isexceed ./>
 authenticates or the session associated with java.lang.StringIndexOutOfBoundsException: Index 54 out of bounds for length 16
 expires. For p>The maximum size the whichwill handled by
 the process Thelimitcanbedisabled settingthis
 to 1. tozero thesaving of
 the during and HTTP11upgrade Ifnot
 attributeis to4096 4kilobytes./>
 <attribute>

 <ttribute =java.lang.StringIndexOutOfBoundsException: Range [38, 37) out of bounds for length 56
 A comma-separated list of HTTP methods
 java.lang.StringIndexOutOfBoundsException: Range [36, 12) out of bounds for length 80
 for request parameters identically to POST<>The therequest
 java.lang.StringIndexOutOfBoundsException: Range [23, 18) out of bounds for length 78
 Note that any setting other during /11upgrade For typesof ,therequest
 behave way intent theservlet
 specification.
 java.lang.StringIndexOutOfBoundsException: Range [21, 9) out of bounds for length 72
 with the HTTP of and the whenthe request .
 The default is <code>POST</code>
 </attribute>

 <attribute name="port" required formand is
 The TCP port number on which this Connector
itincoming .
 operating system will allow only one server theupgradeprocess bedisabled
 to particularportnumber particular .Ifthe
 value of 0 (zero) is used, request body data during authentication and HTTP/1.1 upgrade. If not
 to use for this connector. attribute>
 testing applications.
 </ <attribute java.lang.StringIndexOutOfBoundsException: Range [15, 14) out of bounds for length 56

 <attribute name="protocol" required="false">
 p> handle .The value is
 <code> request parametersidentically POST. useful RESTful
 To use an explicit applications that want to support POST-style semantics for PUT requests.
 <>.pachecoyote.ttp11H</code java.lang.StringIndexOutOfBoundsException: Index 65 out of bounds for length 65
 connector</
 codeorg..oyoteh</code>-
 non blocking Java NIO2 connector 
 java.lang.StringIndexOutOfBoundsException: Range [30, 14) out of bounds for length 53
 atour a "Connector_Comparison"Connector
 defaultis<POST/
 <attribute>

 <="roxyName"="java.lang.StringIndexOutOfBoundsException: Index 49 out of bounds for length 49
 <>If this <trong>onnector/ usedin
 configuration, configure to a particular port number on a IP address thespecial
 to be to <code>getServerName(/>
 See <a href="#Proxy_Support use connector. is only in embedded and
 information.<<attribute>
 </java.lang.StringIndexOutOfBoundsException: Index 13 out of bounds for length 0

 <attribute name="proxyPort" required= p>ets theprotocol .The is
 If this Connector is being used in a proxy
 ibute to theserver port
 to be <code>orgcoyotehttp11java.lang.StringIndexOutOfBoundsException: Index 65 out of bounds for length 65
 See< href=""> <a>formore
 information.</ blockingNIO2 <r/
 </attribute>

 <attribute name="redirectPort" requiredTake lookour< =#">
 If this Connector is supporting non-SSL
 requests, and a request is received for which a matching
 <&tsecurityconstraintg;<> ,
 will the
 number specifiedjava.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
 </attribute>

 < name"" =>
 <this<><> ifthe
 matches one ofto returnedforcallsto<>.(<code.
 default is<false<.<
 </attribute>

 <<>
 Set this attribute to < ="=f>
 returned by calls to <code>request.getScheme()</code>. java.lang.StringIndexOutOfBoundsException: Range [6, 1) out of bounds for length 68
 java.lang.StringIndexOutOfBoundsException: Range [24, 13) out of bounds for length 67
 for an SSL Connector. The be to<java.lang.StringIndexOutOfBoundsException: Range [40, 39) out of bounds for length 71
 
 </attribute>

 <attribute/java.lang.StringIndexOutOfBoundsException: Index 16 out of bounds for length 16
 <Set attribute to codetrue/code> youtohave
 calls to <code>If this <strong<strong supporting -java.lang.StringIndexOutOfBoundsException: Range [65, 66) out of bounds for length 65
 for requests received by this Connector<&tsecurity-&;/ode ,
 SSL Connector or a non SSL Catalina will automatically redirect the request to the port
 SSL ,likea ,an SSL orevenwebserver.
 Thedefaultvalueis <odefalse<>
 </java.lang.StringIndexOutOfBoundsException: Index 13 out of bounds for length 0

 <attribute name<Should strong arequestsiftheURI
 This matches one of the suspicious patterns by 60
 after x decodingthe .The is<UTF8/>
 </attribute>

 <attribute
 <name=" =""
 for URI ,instead .
 setting is returned by calls to <code>request.getScheme()</code>. For
 specified ,or
 for SSL The value is "<code>http</code>".
 the URL. The default value is otes:/>1 applied tothe
 query string of a p>Set attributeto code<code youwishtohave
 the portionjava.lang.StringIndexOutOfBoundsException: Index 71 out of bounds for length 71
 known inot by a is setby
 <code>SetCharacterEncodingFilter</code> or SSL Connector or a non SSL connector that is a
 is always
 "ISO-8859-1". The <code>URIEncoding</code> setting <><code>/>
 this
 
 </attribute>

 <attribute name="useIPVHosts" p>This specifies the character encoding used to decode the URI bytes,
 Set this to <><>to Tomcat
 the IP address that the request was received on to determine the Host
 to send < name=useBodyEncodingForURI""alse"
 </attribute>

 <attribute name= URI query,insteadof using .This
 <java.lang.StringIndexOutOfBoundsException: Range [6, 1) out of bounds for length 71
 support for the Servlet specification the, explicitlyset using
 . The is<falsecode/>
 </attribute>

 </attributes>

 </subsection:/> 1)This setting is the

 The standard HTTP connectors (NIO and NIO2) all supportaffectthe of .2
 attributes in addition to the common Connector attributes listed above.

 <Request method, isalways

 <java.lang.StringIndexOutOfBoundsException: Range [6, 1) out of bounds for length 73
 The maximum length of the java.lang.StringIndexOutOfBoundsException: Index 38 out of bounds for length 19
 connection requests
 operating system mayp>this to codetrue/ java.lang.StringIndexOutOfBoundsException: Range [65, 64) out of bounds for length 71
 java.lang.StringIndexOutOfBoundsException: Range [51, 11) out of bounds for length 78
 additional connections or send the request to. The defaultcodefalse/./>
 value is 100.</java.lang.StringIndexOutOfBoundsException: Range [0, 22) out of bounds for length 0
 </attribute>

 name"" java.lang.StringIndexOutOfBoundsException: Range [55, 53) out of bounds for length 62
 ad used to accept
 new connections. The default value is <codejava.lang.StringIndexOutOfBoundsException: Range [16, 15) out of bounds for length 16
 <code>java.lang.StringIndexOutOfBoundsException: Index 14 out of bounds for length 0
 thecode>.T<code> more details
 this p>The standard HTTP (IO )allsupport
 < to commonConnectorattributeslisted ./java.lang.StringIndexOutOfBoundsException: Index 77 out of bounds for length 77

 < name=acceptCount =false"
 For<>Themaximumlength of theoperating queuefor
 which address will be used for listening on the specified port. By
 ,the will listen all addresses Unless theJVMis
ing systemproperties the based connectors
 (NIO, NIO2additionalconnectionsor those maytimeout.The default
 either<>.0..<code> <ode:<>p>
 </attribute>

 <attribute name= /java.lang.StringIndexOutOfBoundsException: Range [16, 15) out of bounds for length 16
 By "java.lang.StringIndexOutOfBoundsException: Range [44, 43) out of bounds for length 62
 request butspecify java.lang.StringIndexOutOfBoundsException: Range [47, 42) out of bounds for length 72
 connections <>5/ (of
 not specified, the code>java.lang.Thread.NORM_PRIORITY</code> constant). See the JavaDoc
 </
 Thisthis means./>
 /attribute
 </java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 0

 <attribute name="allowedTrailerHeaders<>For servers with more thanone IPaddress,this attribute specifies
 By default Tomcat will ignore which addresswill used listeningon specifiedport.By
 chunked input.For header to be java.lang.StringIndexOutOfBoundsException: Range [50, 49) out of bounds for length 75
 comma-separated list of header namesconfiguredotherwise usingsystem properties, the Javabased connectors
 </attribute>

 <attribute name="bindOnInit" required="false">
 Controls when the socket used by the connector java.lang.StringIndexOutOfBoundsException: Range [59, 58) out of bounds for length 75
 <code>true<attribute>
 when the connector is destroyed. If set to <code>false</code>, the socket
 ill be bound when the connectoris startedand unboundwhen itis
 stopped. IfIf ,the default is <code>true</code>./>
 </attribute>

 <check can disabledby setting thisattribute to <code>true/ode>.If
 When client certificate information is presented in a form other thannot specified,theis <code></ode.
 instances of <code>java.security 
 beforeit can be used and this propertycontrols which JSSE
 provider is hard-coded to <code</ode>./p>
 </attribute>

 <attribute name="compressibleMimeType =">
 p>default willignore java.lang.StringIndexOutOfBoundsException: Range [59, 58) out of bounds for length 74
 compression may be used.
 The default value is
 <code>
 text/tml,/,ext/laint/sstjavascript,pplication/applicationjson,xml
 </ </attrib>
 If you specify a< ="indOnInit"=f"
 </ttribute>

 <attribute the destroyed.If set to <><code> thesocket
 <> <>Connector<strong useHTTP1. GZIP in
 java.lang.StringIndexOutOfBoundsException: Range [16, 8) out of bounds for length 72
 java.lang.StringIndexOutOfBoundsException: Range [16, 15) out of bounds for length 78
 causes text data to be java.lang.StringIndexOutOfBoundsException: Range [0, 39) out of bounds for length 0
 cases), or a numerical When client certificate information
 theminimumamount of beforethe output is compressed. If
 the-length is not known and compression is set to "n"or more
 aggressive,the output willalso be compressed not specified,this
 attribute is set to "ff./p>
 p>em>ote<em:Thereis a tradeoff between using compression saving
 the sendfile java.lang.StringIndexOutOfBoundsException: Range [54, 52) out of bounds for length 78
 connector supports thesendfilejava.lang.StringIndexOutOfBoundsException: Range [53, 52) out of bounds for length 77
 using sendfile will take precedence over compression. The symptoms will
 be that static files greaterbe static greater 48KiB sentuncompressed.
 You can turn texthtmlxmltplain/tjavascripta/,/,pplication
 of the connectoryou a ,the is ridden
 of
 <a =compression ">
 <conf/.ml/ or inthe codeweb.</>your
 application attempt to save java.lang.StringIndexOutOfBoundsException: Range [46, 31) out of bounds for length 72
 
 />

 attribute"" =false>
 p> strong
 <attributejava.lang.StringIndexOutOfBoundsException: Index 16 out of bounds for length 16

 <attribute namep<><> Thereis atradeoffbetween (
 The your )andusing ( .
 Connector will linger when they are closed. The default
 > whichdisables ./p>
 </attribute>

 <attribute name 48 be .
 > numberof this <></> wait,
 theconnector as below sendfile
 of -1toindicate(..infinite)timeoutjava.lang.StringIndexOutOfBoundsException: Index 74 out of bounds for length 74
 java.lang.StringIndexOutOfBoundsException: Range [49, 9) out of bounds for length 77
 server.xml that ships java.lang.StringIndexOutOfBoundsException: Range [6, 1) out of bounds for length 74
 Unless disableUploadTimeout is setapplication.
 this timeoutattributejava.lang.StringIndexOutOfBoundsException: Index 16 out of bounds for length 16
 <attribute>

 <attribute name="connectionUploadTimeout" required="false">
 Specifies usedto minimumamount data theis
 .This
 are ./>
 >
 </attribute

 <attribute name="continueResponseTiming" required="false">
 When to <100<code>intermediate responseto java.lang.StringIndexOutOfBoundsException: Range [80, 81) out of bounds for length 80
 <>:100-<code>headerjava.lang.StringIndexOutOfBoundsException: Index 69 out of bounds for length 69
 following :
 <ul>
 <li><code>immediately</code> - an />
 will java.lang.StringIndexOutOfBoundsException: Range [4, 1) out of bounds for length 57
 <li><java.lang.StringIndexOutOfBoundsException: Range [6, 1) out of bounds for length 78
 response will be returned connection the linebe
 allowing the 1toindicate ie infinite .
 before the agent sends possibly large requestbody./>
 </ul>
 
 /

 <=""=>
 The name of the default SSLHostConfig that will be
 secure (this forsecure
 connections) if the client java.lang.StringIndexOutOfBoundsException: Index 40 out of bounds for length 16
 provided but doesnotmatch any
 p>Specifies the timeout thetimeout ,touse data
 <code>_default_ only effectif
 lower .p>
 </attribute>

 <attribute name="attribute name="continueResponseTiming" required="false">
 This flag allows When to respond with100<> toa
 longer connection timeout during data upload. >:100-/ .
 attribute is set to <code>true</code> which disables may:
 
 </attribute>

 be soon <li>
 p>referenceto name inan<href=e.tml"</>
 element. If returned when Servlet the java.lang.StringIndexOutOfBoundsException: Index 77 out of bounds for length 77
 willuse ,andtheotherthread will
 be ignored
 connector then the connector will use a private, internal executor to
 provide the thread pool.java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
 </attribute>

 <attribute name="used for secure connections (if this
 hetime the will forrequest
 processingis butdoes match
 the.If set is code>000<code 5
 seconds).
 </<code>_def be always converted

 <attribute name="java.lang.StringIndexOutOfBoundsException: Index 30 out of bounds for length 16
 The<This to use ,usually
 for request . value
 is to set codetrue</>whichdisables this .
 connectionTimeout attribute.
 Use a value of -1 to /
 <>

 attributename=" =f"java.lang.StringIndexOutOfBoundsException: Index 54 out of bounds for length 54
 > number that the acceptand
 process at any given time. When this number connector will use the executor, and all the other thread attributes will
 accept,but process,onefurther .Thisadditional
 connection be blocked until the theconnector ,internal java.lang.StringIndexOutOfBoundsException: Range [75, 76) out of bounds for length 75
 falls below maxConnections
 start accepting and processing new connections again. Note < "executorTerminationTimeoutMillis">
 limit has been The time that the forrequest
 basedon <ode></ .The value
 is < connector.Ifnotset,the code5000/ 5
 seconds.p>
 maxConnectionsfeature connections be ./>
 </attribute>

 <attribute name= attributename"eepAliveTimeout"=false>
 <> totallength chunk HTTP.
 fo HTTP the java.lang.StringIndexOutOfBoundsException: Range [61, 60) out of bounds for length 79
 specified, the default value of <code>8192java.lang.StringIndexOutOfBoundsException: Index 51 out of bounds for length 51
 </attribute>

 <attribute name="java.lang.StringIndexOutOfBoundsException: Index 31 out of bounds for length 0
 The maximum number of p>The maximum number of connections server and
 container that contains thespecified
 will , not, one .
 If notbeblockeduntil java.lang.StringIndexOutOfBoundsException: Range [47, 44) out of bounds for length 75
 </attribute>

 <attribute name="maxHttpHeaderSize" required="false">
 Provides the default value for
 maxHttpRequestHeaderSize and
 <>If
 attribute is set to 8192 (8 KiB).
 </attribute>

 <attribute name="For NIO/NIO2 only, setting the 1 the
 permittedsizeof therequestline headers associated
 with an HTTP request, specified java.lang.StringIndexOutOfBoundsException: Range [4, 1) out of bounds for length 16
 bytes so wellas
 the request line, header names and header Limits the total length of chunk extensions .
 attribute is set to the If the value is <code>-1</codewill .Ifnot
java.lang.StringIndexOutOfBoundsException: Index 29 out of bounds for length 20
 Ifjava.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
 but be aware that Tomcat will The maximum number of headers in a java.lang.StringIndexOutOfBoundsException: Range [21, 20) out of bounds for length 75
 specify a of
 1 MB and your rejected value of less than 0 means no limit.
 consumed request ./
 </attribute

 < =" ">
 The maximum permitted<pthe
 withan java.lang.StringIndexOutOfBoundsException: Range [19, 18) out of bounds for length 79
 of bytes writtenstrong</>If ,this
 status,header header.If not ,this
 attribute is set to the value of the <code>maxHttpHeaderSize</code>
 ./>
 java.lang.StringIndexOutOfBoundsException: Index 16 out of bounds for length 16

"required="java.lang.StringIndexOutOfBoundsException: Index 60 out of bounds for length 60
 which canbe until
 the connection is closed by the request line, header names .not,this
keepalive well HTTP1.1 aliveand
 p>If you seejava.lang.StringIndexOutOfBoundsException: Range [29, 28) out of bounds for length 79
 pipelined or keep-alivebe that Tomcat full
 notspecified this attribute issetto 100
 The maximum number of attribute name="maxHttpResponseHeaderSize" required="false">
 overhead) that will be The maximum permitted size ofline headersassociated
 abortedupload Tomcatknows that therequestbody goingto be
 sends . If not the body
 java.lang.StringIndexOutOfBoundsException: Range [6, 1) out of bounds for length 77
 of 2097152 (2 the value of the<maxHttpHeaderSize<
 no should be ./>
 </attribute>

 <" required">
 The maximum p>Themaximum HTTPrequestswhichcanbe
 <trong<strong,which therefore determinesthe
 disable/1. keep-alive, well HTTP11keep-and
 java.lang.StringIndexOutOfBoundsException: Range [35, 9) out of bounds for length 79
 with this connector, this or -HTTP java.lang.StringIndexOutOfBoundsException: Index 44 out of bounds for length 44
 execute tasks using the executor rather than />
 that if an executor is configured any value set for this java.lang.StringIndexOutOfBoundsException: Index 69 out of bounds for length 0
 recorded correctly java.lang.StringIndexOutOfBoundsException: Range [6, 1) out of bounds for length 78
 <code>-1</code> to make clear that it is java.lang.StringIndexOutOfBoundsException: Range [6, 1) out of bounds for length 74
 </attribute>

 <attribute name="maxTrailerSize" required="false">
 p> java.lang.StringIndexOutOfBoundsException: Range [45, 44) out of bounds for length 73
 value<<, be
 , valueof code>192/ be
 .</
 </attribute>

 "java.lang.StringIndexOutOfBoundsException: Range [37, 36) out of bounds for length 55
 pThe java.lang.StringIndexOutOfBoundsException: Range [51, 50) out of bounds for length 79
 active <java.lang.StringIndexOutOfBoundsException: Range [22, 21) out of bounds for length 72
 with this attribute
 is 200
 java.lang.StringIndexOutOfBoundsException: Range [30, 29) out of bounds for length 78
 value set for this attribute will be using internaljava.lang.StringIndexOutOfBoundsException: Range [70, 69) out of bounds for length 80
 reported (e.g. via JMX) as recordedit(e)java.lang.StringIndexOutOfBoundsException: Range [66, 67) out of bounds for length 66
 used.
 </attribute>

 ="false"
 The value is< totalof the
 java.lang.StringIndexOutOfBoundsException: Range [19, 18) out of bounds for length 75
 imposed not java.lang.StringIndexOutOfBoundsException: Range [51, 50) out of bounds for length 79
 because these <java.lang.StringIndexOutOfBoundsException: Index 16 out of bounds for length 16
 ,a java.lang.StringIndexOutOfBoundsException: Index 44 out of bounds for length 44
)/>
 </attribute>

 <attribute name="processorCache" required="false">
sor .
 This setting dictates how many of these objects get java.lang.StringIndexOutOfBoundsException: Range [72, 71) out of bounds for length 78
 <code java.lang.StringIndexOutOfBoundsException: Range [62, 61) out of bounds for length 76
 Servlet 3.(g )-/java.lang.StringIndexOutOfBoundsException: Range [48, 47) out of bounds for length 77
 the java.lang.StringIndexOutOfBoundsException: Index 18 out of bounds for length 16
 good default to the the java.lang.StringIndexOutOfBoundsException: Range [79, 80) out of bounds for length 79
 expected concurrent requests (<The regularjava.lang.StringIndexOutOfBoundsException: Range [43, 42) out of bounds for length 79
 </attribute>

 <attribute name="rejectIllegalHeader" required="false">
 If an HTTP request is received that contains an illegal header java.lang.StringIndexOutOfBoundsException: Range [0, 76) out of bounds for length 71
 value eg header token)
 The def empty regexp ./>
 illegal header
 <code< ="java.lang.StringIndexOutOfBoundsException: Range [46, 45) out of bounds for length 54
 <r>
 This setting setting dictates of java.lang.StringIndexOutOfBoundsException: Range [54, 53) out of bounds for length 65
 -java.lang.StringIndexOutOfBoundsException: Range [17, 16) out of bounds for length 42
 </attribute>

 <attribute name="relaxedPathCharsmaxThreads using 3 java.lang.StringIndexOutOfBoundsException: Range [64, 63) out of bounds for length 77
 pThe<href"ttps/.org/rfc7230."/.1
 expected (and./>
 used in URI
 browsers are not compliant with this java.lang.StringIndexOutOfBoundsException: Range [4, 1) out of bounds for length 59
 java.lang.StringIndexOutOfBoundsException: Range [29, 16) out of bounds for length 78
 this attribute may not token
 If not specified, no additional characters will be allowed. The value may
 be any combination of the following characters:
 <code java.lang.StringIndexOutOfBoundsException: Range [14, 13) out of bounds for length 74
 <code>t<> java.lang.StringIndexOutOfBoundsException: Range [59, 58) out of bounds for length 68
 </ be 11java.lang.StringIndexOutOfBoundsException: Range [62, 61) out of bounds for length 72

 <

 specification</a> requires that certain characters are %nn encoded when
. java.lang.StringIndexOutOfBoundsException: Range [65, 64) out of bounds for length 78
 the major browsers are not compliant with /> aren encoded when when
 in preventjava.lang.StringIndexOutOfBoundsException: Range [54, 53) out of bounds for length 78
 attributebe specify java.lang.StringIndexOutOfBoundsException: Index 79 out of bounds for length 79
 If not specified The
 th be tojava.lang.StringIndexOutOfBoundsException: Range [44, 43) out of bounds for length 79
 \ ] }code .Any
 present inbe the :
 </codeq lt gt [ |<

 <attribute>
 The value is a regular= java.lang.StringIndexOutOfBoundsException: Range [49, 48) out of bounds for length 57
 java.lang.StringIndexOutOfBoundsException: Range [65, 14) out of bounds for length 75
 HTTP/1.1 or HTTP/1.0 keep <java.lang.StringIndexOutOfBoundsException: Range [33, 32) out of bounds for length 77
 advertise support for these features.
 rdisabled)/>
 </attribute>

 <attribute name="server" required="false">
 Overrides the Server header for the http response. If set, the value
 this Server web.
 If not set, any value specified by the application is used. If the
 application does not specify a value then no Server header is set.
 </attribute>

 <in ignored<>
 If <code>true</code> /
 application will be <attribute name="restrictedUs =false"
 is not
 <code>falsematching the <code>user-agent</code> header of HTTP clients for which
 </attribute>

 <attribute name="SSLEnabled" required="false">
 Use this attribute to enable SSL java.lang.StringIndexOutOfBoundsException: Range [30, 29) out of bounds for length 74

 this <java.lang.StringIndexOutOfBoundsException: Range [30, 29) out of bounds for length 42
The <false<code.
 When turningjava.lang.StringIndexOutOfBoundsException: Range [10, 9) out of bounds for length 78
<schemecode the<java.lang.StringIndexOutOfBoundsException: Range [40, 39) out of bounds for length 72
 to pass the application does not specify a value then no Server header is set.
 <code>request.isSecure " =>
 <="<a java.lang.StringIndexOutOfBoundsException: Range [70, 69) out of bounds for length 70
 
 </attribute>

 <attribute name="tcpNoDelay" required="false">
 pIfto<true/java.lang.StringIndexOutOfBoundsException: Range [36, 35) out of bounds for length 69
 set on the server socket, java.lang.StringIndexOutOfBoundsException: Index 34 out of bounds for length 0
 circumstances. This Use enable ajava.lang.StringIndexOutOfBoundsException: Range [65, 64) out of bounds for length 65
 </attribute>

 <java.lang.StringIndexOutOfBoundsException: Range [15, 14) out of bounds for length 54
< .
 The default code>/java.lang.StringIndexOutOfBoundsException: Range [25, 24) out of bounds for length 72
 <lThread< .See
 for the <code>isSecure()/ the
 .
 with this connector, this attribute java.lang.StringIndexOutOfBoundsException: Range [0, 44) out of bounds for length 10
 execute tasks using the executor rather than an internal thread pool. Note
 that configuredany value set for this attributewill be
 recorded correctly but it will be reported <>f to>true<code>,the TCP_NO_DELAY optionwill be
 <>1</> to make clear .p
 </attribute

 <attribute name="throwOnFailure" ="=>
 If the Connector experiences an Exception during a Lifecycle transition
 the logged? notjava.lang.StringIndexOutOfBoundsException: Range [67, 66) out of bounds for length 79
 of <code>false</code> will be used. Note that the default can be changed>..<code . java.lang.StringIndexOutOfBoundsException: Range [69, 68) out of bounds for length 76
 by the <code>org.this priority means java.lang.StringIndexOutOfBoundsException: Range [42, 41) out of bounds for length 55
 system property.
 </attribute>

 <attribute name="useAsyncIO" required="false">
 <>b ofthe
 asynchronous be (. JMX
 /java.lang.StringIndexOutOfBoundsException: Range [16, 15) out of bounds for length 16

 < " "java.lang.StringIndexOutOfBoundsException: Index 66 out of bounds for length 66
 (bool) Use or theofthe
 <code>Keep-Alive</code> HTTP response header ?not ,
 <a href="https://tools.ietf.org/html/draft-thomson-hybi-http-timeout-03">this
 Internet-Draft</a by the <>apachecatalina..</code
 </attribute>

 <attribute name="useVirtualThreads" required="false <attributejava.lang.StringIndexOutOfBoundsException: Index 16 out of bounds for length 16
 sable usage ofvirtual
 with the internal executor. If an executor is associated with bool this to or ofthe
 ,thisattributeis .The default value is
 <code>false</code>.<attribute>
 </attribute>

 </attributes>

 </subsection>

 " socket>

 < support TCP
 socket<a=https/ietforg-java.lang.StringIndexOutOfBoundsException: Range [67, 66) out of bounds for length 83
sted.>

 <attributes>
 <attribute name=" name="useVirtualThreads=""
 intT socket receivebuffer S bytes.JVM default
 used if not set.
 </attribute>
 <attribute name="socket.txBufSize" required="false">
 <>int)socket ( bytes.
 used if not set code><.p
 Very poor performance has java.lang.StringIndexOutOfBoundsException: Index 38 out of bounds for length 0
 than ~8k.
 </attribute
 <attribute name="
 is
 tcpNoDelay attributesaddition HTTP
 </attribute>
 <attribute name="<java.lang.StringIndexOutOfBoundsException: Range [16, 15) out of bounds for length 16
 (bool) <>(The ()java.lang.StringIndexOutOfBoundsException: Range [59, 58) out of bounds for length 80
 (SO_KEEPALIVE). JVM default<>
 <
 <attribute name="socket. p(The ()size bytes default
 OOBINLINE .java.lang.StringIndexOutOfBoundsException: Range [69, 68) out of bounds for length 76
java.lang.StringIndexOutOfBoundsException: Index 29 out of bounds for length 28
 </attribute>
 <attribute name="socket.soReuseAddress" <java.lang.StringIndexOutOfBoundsException: Range [17, 16) out of bounds for length 59
 <>Bjava.lang.StringIndexOutOfBoundsException: Range [25, 24) out of bounds for length 67
 (SO_REUSEADDR<./>
 </</attribute
 .soLingerOn "alse"
 <(Boolean (.
 A value for the standard attribute connectionLinger
 &;0is <><code>java.lang.StringIndexOutOfBoundsException: Index 74 out of bounds for length 74
 A "."java.lang.StringIndexOutOfBoundsException: Range [50, 49) out of bounds for length 58
 that is <0is to setting <>/
 Both this attribute and <code>attribute name="socket.soReuseAddress" required="false">
 Mjava.lang.StringIndexOutOfBoundsException: Range [21, 20) out of bounds for length 47
 <>
 <<java.lang.StringIndexOutOfBoundsException: Range [18, 17) out of bounds for length 18
 (int)Value in seconds for >b)java.lang.StringIndexOutOfBoundsException: Range [25, 24) out of bounds for length 76
 This is equivalent to standard attribute
 <<strongjava.lang.StringIndexOutOfBoundsException: Index 42 out of bounds for length 42
 Both this attribute and <code>soLingerOn</java.lang.StringIndexOutOfBoundsException: Range [8, 1) out of bounds for length 74
 JVM defaults will be used for both.
 </attribute>
 name="=false"
 This iswill 
 <
 </<= ""
 <>i) java.lang.StringIndexOutOfBoundsException: Range [33, 32) out of bounds for length 78
 i)he first valuefor the performance settings. See
 <a href="http://docs.oracle.com/javase/7/docs/api/java/net/Socket.html#setPerformancePreferences(int,%20int,%20int)">Socket Performance java.lang.StringIndexOutOfBoundsException: Range [0, 151) out of bounds for length 42
 All three performance attributes mustJVM defaults <>
 be used for all< "s"required="">
 </attribute>
 <attribute name="socket.performanceLatency" required="false" <<./>
 (int =."">
 <a href="http://docs.oracle.com/javase/7/docs/api/java/net/Socket.html#setPerformancePreferences(int,%20int,%20int)">Socket Performance<>)firstjava.lang.StringIndexOutOfBoundsException: Range [35, 31) out of bounds for length 65
 All three performance attributes must be set else the JVM defaults will
 be used for all three.
 </attribute>
 <attribute name=sjava.lang.StringIndexOutOfBoundsException: Range [30, 29) out of bounds for length 67
 p()Thejava.lang.StringIndexOutOfBoundsException: Range [65, 51) out of bounds for length 65
 (int,%20int,%20" java.lang.StringIndexOutOfBoundsException: Range [144, 143) out of bounds for length 156
 All java.lang.StringIndexOutOfBoundsException: Range [8, 1) out of bounds for length 79
 <>
 </attribute>
 <attribute name="attribute name="socket.performanceBandwidth" required="false">
 <>int timeout .a to by connector.
 The default value is <code>250</code> and the value is in milliseconds
 <java.lang.StringIndexOutOfBoundsException: Range [18, 17) out of bounds for length 18
 /java.lang.StringIndexOutOfBoundsException: Range [17, 16) out of bounds for length 17
 </subsection>

 <subsection name="NIO specific configuration">

 The following attributes are specific to the NIO connector.

 <attributes>

 <attribute name=
 (int)The priority of the poller ""
 The default value is <code>5</code<>The following attributes are specific to the NIO connector.
 <code>java.lang.Thread.NORM_PRIORITY</code>java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
 for the <code>java.lang.Thread</code> class <attribute name="pollerThreadPriority" required= name=pollerThreadPriority"required="false">
 means

 <attribute name="selectorTimeout" codelThread.java.lang.StringIndexOutOfBoundsException: Range [46, 44) out of bounds for length 78
 (int)The time in milliseconds to timeout on ./
 poller. This value is important, sincejava.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
 the same thread, so do notp>int) injava.lang.StringIndexOutOfBoundsException: Range [41, 40) out of bounds for length 73
 default value is <code>1000</code> milliseconds.
 </the same thread, so do not set this value to an extremely high one. The

 <attribute>
 (bool)Use this attribute to enable or ="=java.lang.StringIndexOutOfBoundsException: Range [52, 51) out of bounds for length 53
 The default value is <code The defaultvalue <<code.thatuse
 any
 the response.
 </attribute>

 <attribute name="socket.directBuffer" <ttributename="socket.directBuffer" required="false">
 (bool)Boolean value, whether to use direct ByteBuffers (bool)Boolean value, whether to use direct ByteBuffers or)Boolean , whether to use directByteBuffers or javamapped
 ByteBuffers. If <code><code>java.nio.ByteBuffer()/>used
 .ByteBufferjava.lang.StringIndexOutOfBoundsException: Range [49, 48) out of bounds for length 77
 code</
 <code> </java.lang.StringIndexOutOfBoundsException: Range [29, 28) out of bounds for length 35
 is <code>false</code>. 
 When you are using direct buffers, make sure you allocate the
 appropriate amount of memory for the direct memory space. On Sun's JDK
 that be<-:=256m/.
 
 </attribute>

 <attribute name="socket.directSslBuffer" required
 (bool)Boolean value, whether to use direct ByteBuffers or java mapped
 ByteBuffersByteBuffers forthe SSLbuffers. If <code></code then
 <code>java.nio. <code>java.nio.ByteBufferallocateDirect()/> is used allocate
 code<>
 <code>java.nio.code>java.nio.ByteBuffer.allocate()</code> is used. The default value
 is <code>false</ is <code>false</code>
 direct buffers java.lang.StringIndexOutOfBoundsException: Range [48, 47) out of bounds for length 69
 for . '
 that would that would be likecode-=256m/java.lang.StringIndexOutOfBoundsException: Range [78, 77) out of bounds for length 79
 
 </attribute>

 "ajava.lang.StringIndexOutOfBoundsException: Range [45, 44) out of bounds for length 63
 <> connectionis in with
 a read ByteBuffer. This attribute a . java.lang.StringIndexOutOfBoundsException: Range [42, 41) out of bounds for length 78

 concurrency, you can increase this to buffer more anjava.lang.StringIndexOutOfBoundsException: Index 78 out of bounds for length 78
 amount of keep alive connections, decrease this number or java.lang.StringIndexOutOfBoundsException: Index 68 out of bounds for length 22
 heap size.
 </attribute>

 <ttribute "ajava.lang.StringIndexOutOfBoundsException: Range [47, 45) out of bounds for length 64
 ()is java.lang.StringIndexOutOfBoundsException: Range [64, 59) out of bounds for length 79
 java.lang.StringIndexOutOfBoundsException: Range [16, 15) out of bounds for length 78
 default this write bufferyoucan java.lang.StringIndexOutOfBoundsException: Range [52, 51) out of bounds for length 78
 more response.an
 extreme amount of keep alive java.lang.StringIndexOutOfBoundsException: Range [8, 1) out of bounds for length 37
 increase your heap size. 
 The default value here is pretty low,with thousands concurrentconnections

 <attribute name="socket.bufferPool" required="false">
 (int)The NIOx connector uses a elements linked to a socket. To reduce garbage collection, the NIOx
 java.lang.StringIndexOutOfBoundsException: Range [35, 16) out of bounds for length 75
 connector caches these channel objects. This this cache.The defaultvalueis <ode>-2<code> Special values are
 this cache. The default value is <code>-<code>.Special valuesare
 <code>-1</code> and <code>-2</code a valuecomputedusing the bufferPoolSize
 and <code>-2</code> for a value computed using the bufferPoolSize
 attribute../p
 </attribute>

 <attribute name="socket.bufferPoolSize" required<java.lang.StringIndexOutOfBoundsException: Range [17, 16) out of bounds for length 63
 <>intT be used
 based. If bufferPool is not -2, then this value will not be used. 
 The value is in bytes except for special The value is in bytes except for special values
 java.lang.StringIndexOutOfBoundsException: Range [14, 13) out of bounds for length 73
 and <code>-2</code> code-< aas </java.lang.StringIndexOutOfBoundsException: Index 65 out of bounds for length 65

 <code>buffer size = read code>java.lang.StringIndexOutOfBoundsException: Range [58, 57) out of bounds for length 76
 SecureNioXChannel <code>buffer size = application read buffer size +
 application write buffer size + twice 1GB, then the pool size value is the memory
 If the maximum memory as reported by the runtime is greater than</
 1GB, then the pool java.lang.StringIndexOutOfBoundsException: Range [0, 31) out of bounds for length 0
 size. Otherwise, (int)Tomcat willjava.lang.StringIndexOutOfBoundsException: Range [50, 49) out of bounds for length 75
 
 </attribute>

 <attribute name="socket.processorCache" required="false">
 () java.lang.StringIndexOutOfBoundsException: Range [68, 67) out of bounds for length 75
 collection. The integer value specifies how many objects to keep in the
 cache at most. The default is <code>0</code>. Special values are
 <code>-1</code> for unlimited cache and <attribute name="socket.eventCache" required="false
 </attribute>

 <attribute name="socket.eventCache" required="false">
 (int)Tomcat will cache PollerEvent objects to reduce garbage
 java.lang.StringIndexOutOfBoundsException: Index 12 out of bounds for length 0
 cache at most. The default is <Where, Unix
 <code>1/>for unlimited and<ode>0/code for nocache</pjava.lang.StringIndexOutOfBoundsException: Index 80 out of bounds for length 80
 </attribute>>

 <attribute name="unixDomainSocketPath" required="false">
 Where supported, the path to a Unix Domain Socket that java.lang.StringIndexOutOfBoundsException: Index 68 out of bounds for length 33
 <java.lang.StringIndexOutOfBoundsException: Range [0, 15) out of bounds for length 0
 When this is specified, the otherwise mandatory <code>port</code>
 attribute may be omitted.
 See <a href="#Unix_Domain_Socket_Support><code> java.lang.StringIndexOutOfBoundsException: Range [52, 53) out of bounds for length 52
 for more information.
 />

 <=java.lang.StringIndexOutOfBoundsException: Range [55, 54) out of bounds for length 73
 <> supported, the posix permissions that will be applied to the
 to the Unix Domain Socket specified with
 <code>unixDomainSocketPath/code> above.The
 permissions are specified as a string of nine characters, in three sets
 read ) (ecuteowner
 . is java.lang.StringIndexOutOfBoundsException: Index 74 out of bounds for length 74
 unspecified, the permissions default to <code>rw-rw- is made to
 </attribute>

 <attribute name="useInheritedChannel" required="false">
 <>bool)Defines inetdsystemd .
 Only one connector can inherit..</
 used to automatically start Tomcat java.lang.StringIndexOutOfBoundsException: Index 47 out of bounds for length 18
 the systemd super daemon/>
 The default value is <codesubsection=" >
 for the <code>java.nio.channels.spi.SelectorProvider</
 more details.

 </ <attributes
 </subsection>

 configuration>

<The to <

 <attributes>

 <attribute name="useSendfile" required="false">
 p(ool)se this attribute to or disable sendfile capability.
 The default value is <code>true /attribute
 will disable any compression that Tomcat may <attribute name="socket.directBuffer" required="false
 ./>
 </attribute>

 <attribute name="socket code>ava.io.ByteBuffer.allocateDirect(<code> is used to allocate
 <Booleanvalue,whether touse direct ByteBuffers or java mapped
 ByteBuffers. If <code> <odejava.io.)/>is default
 java.B.java.lang.StringIndexOutOfBoundsException: Range [52, 48) out of bounds for length 77
 ,if<>/java.lang.StringIndexOutOfBoundsException: Range [42, 41) out of bounds for length 47
 <code>javanByteBuffer)code value
 is <code>false</code>. 
 When you are youthe
 appropriate amount of memory />
 that would be something like
 
 </attribute>

 <attribute name="<p(ool) to mapped
 lue, or
 ByteBuffers for the SSL buffers. Ifcodejavan.(/> to
 <t()</java.lang.StringIndexOutOfBoundsException: Range [57, 56) out of bounds for length 77
 <java.lang.StringIndexOutOfBoundsException: Range [30, 29) out of bounds for length 47
 <code>java.nio.ByteBuffer.allocate()</code> is used.When java.lang.StringIndexOutOfBoundsException: Range [42, 41) out of bounds for length 69
 <>/java.lang.StringIndexOutOfBoundsException: Range [29, 28) out of bounds for length 35
 you allocatethe
 appropriate amount of memory for /
 that would be something like <code
 />
 </attribute>

 <attribute name="socket.a By
 p(E inget
 a read ByteBuffer. This attribute java.lang.StringIndexOutOfBoundsException: Range [43, 42) out of bounds for length 78
 default this read buffer is sized at <code>8192</java.lang.StringIndexOutOfBoundsException: Index 59 out of bounds for length 22
 concurrency, you can increase thiss java.lang.StringIndexOutOfBoundsException: Range [56, 55) out of bounds for length 64
 java.lang.StringIndexOutOfBoundsException: Range [74, 14) out of bounds for length 79
 heap size.
 /java.lang.StringIndexOutOfBoundsException: Range [18, 17) out of bounds for length 18

 <attribute name="socket.appWriteBufSize" required="false">
 (int)Each connection that is java.lang.StringIndexOutOfBoundsException: Range [8, 1) out of bounds for length 73
 write java.lang.StringIndexOutOfBoundsException: Range [64, 63) out of bounds for length 79
 java.lang.StringIndexOutOfBoundsException: Range [21, 20) out of bounds for length 78
 concurrency you can increase this to buffer more response data. For an
 amount ofkeep alive connections,decrease
 size</
 The java.lang.StringIndexOutOfBoundsException: Index 15 out of bounds for length 0
 dealing with tens of thousands concurrent connections.
 </attribute>

 <attribute name=" socket. NIO2
 <>T class
 elements linked to a socket. java.lang.StringIndexOutOfBoundsException: Range [8, 1) out of bounds for length 78
 connector caches these cachejava.lang.StringIndexOutOfBoundsException: Range [23, 22) out of bounds for length 69
 .default code500/>and
 java.lang.StringIndexOutOfBoundsException: Index 18 out of bounds for length 18
 <code>-<". =java.lang.StringIndexOutOfBoundsException: Range [62, 61) out of bounds for length 63
 </attribute>

 <attribute name="socket.processorCache" required=. integerjava.lang.StringIndexOutOfBoundsException: Range [38, 37) out of bounds for length 79
 < to reduce
 collection. The integer value specifies how many<>1/ java.lang.StringIndexOutOfBoundsException: Range [44, 43) out of bounds for length 80
 cache at most. The default is <
 <code>-1</code> for unlimited cache and <java.lang.StringIndexOutOfBoundsException: Index 51 out of bounds for length 15
 <java.lang.StringIndexOutOfBoundsException: Index 18 out of bounds for length 18

 </attributes>
 </subsection>

/java.lang.StringIndexOutOfBoundsException: Range [10, 9) out of bounds for length 10

"java.lang.StringIndexOutOfBoundsException: Range [22, 21) out of bounds for length 34

 Tomcat supports <> was used
 configurations to be one of these configurations. An </
 any java.lang.StringIndexOutOfBoundsException: Range [57, 56) out of bounds for length 73
 java.lang.StringIndexOutOfBoundsException: Range [12, 11) out of bounds for length 50
 SSLHostConfig element <trongSSLHostConfig. Each SSL certificate is therefore configured
 one of these configurations. Any number of SSLHostConfig in Certificate</> withinan
 be in a<java.lang.StringIndexOutOfBoundsException: Range [25, 24) out of bounds for length 80
 for multiple certificates
 <java.lang.StringIndexOutOfBoundsException: Index 4 out of bounds for length 0
 in a Certificate element within an
 SSLHostConfig< When OpenSSL is providing the TLS implementation, one or more
 OpenSSLConfCmd elements may be nested inside <
 OpenSSLConf element to java.lang.StringIndexOutOfBoundsException: Index 45 out of bounds for length 10
 <code>SSL_CONF</code> API. A single <java.lang.StringIndexOutOfBoundsException: Index 45 out of bounds for length 33
 be nested in a <java.lang.StringIndexOutOfBoundsException: Index 24 out of bounds for length 0
 information, see the SSL Support section below

</section>

<section name="Special Features">

 <subsection name="HTTP/1.1 and java.lang.StringIndexOutOfBoundsException: Range [2, 1) out of bounds for length 41

 < all of the required features
 of the HTTP/1.1 protocol, as described in RFCs 7230protocol as well. No special configuration is required to enable this
 . If the
 supports only HTTP/1.0 or java.lang.StringIndexOutOfBoundsException: Index 30 out of bounds for length 17
 Connector will gracefully fall back to supporting RFC 7230 requires that HTTP servers always begin their responses wit
 protocol as well. No special configuration is required to enable this
 support. The Connector also supports HTTP/1.0
 keep-alive.

 RFC 7230 requires that HTTP servers java.lang.StringIndexOutOfBoundsException: Range [0, 47) out of bounds for length 0
 java.lang.StringIndexOutOfBoundsException: Range [13, 5) out of bounds for length 71
 Connector will always p>HTTP/2 is support is provided for TLS (h2 (2c)
 the beginning of its responses.

 </subsection>

 <subsection namenested withinthe<trong>Connectorwitha

 HTTP/2 is support is provided strong>className/>attribute
 and java.lang.StringIndexOutOfBoundsException: Range [40, 15) out of bounds for length 78
 connector the following UpgradeProtocol java.lang.StringIndexOutOfBoundsException: Index 69 out of bounds for length 0
 nested within the Connector with a
 className attribute of
 <code>org.apache.coyote.http2.Http2Protocol

<source><![CDATA[<a href="http2.html">HTTP </> fordetails</>
 <UpgradeProtocol
</onnector>]>/ource>

 Additional java.lang.StringIndexOutOfBoundsException: Index 28 out of bounds for length 0
 <a href="http2.html"

 <>

 <subsection name="Proxy Support">

 The <code>proxyName</code> and <code>proxyPort</code> attributes , java.lang.StringIndexOutOfBoundsException: Range [54, 53) out of bounds for length 73
 be used when Tomcat is run server onfrom
 modify the values returned to java.lang.StringIndexOutOfBoundsException: Range [39, 38) out of bounds for length 71
 <code>request.getServerName()</code>java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
 methods, which are often useda "/."Proxy To/><
 Without configuring these attributes, the values
 the server name and port on whichjava.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
 was received, rather than the server name and java.lang.StringIndexOutOfBoundsException: Index 52 out of bounds for length 0
 directed the original request.

 For/
 <a href

 </subsection>

 <subsection name="Unix Domain <subsection name="Unix Domain Socket is all

 When java.lang.StringIndexOutOfBoundsException: Range [14, 13) out of bounds for length 70
 at the givenpathjava.lang.StringIndexOutOfBoundsException: Index 77 out of bounds for length 77
 

 For users of Java 16 and higher, support is provided/
 connectors.
 </pjava.lang.StringIndexOutOfBoundsException: Index 6 out of bounds for length 6

 The socket path is created with read and write permissions for all
 users, placeit awith
 permissions appropriately </>
 Alternatively, on platforms that support posix permissions, the<The can the
 on be the
 <code>unixDomainSocketPathPermissions</code> client, and the Unix Domain Socket support in Apaches
 

 <p<>
 socket already exists startup will fail. Care must
 java.lang.StringIndexOutOfBoundsException: Range [16, 15) out of bounds for length 74
 already being used by an existing Tomcat You can enable SSL support for a particular

 The<<code./
 <java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
 client, and the Unix Domain Socket support in Apache HTTP server's
 <code>mod_proxy</code> module.
 

 </subsection>

 <subsection name="SSL an OpenSSL implementation. As far as possible, common configuration attributes

 <java.lang.StringIndexOutOfBoundsException: Range [0, 4) out of bounds for length 0
 Connector by setting >/java.lang.StringIndexOutOfBoundsException: Range [34, 31) out of bounds for length 50
 <codetrue</./java.lang.StringIndexOutOfBoundsException: Index 24 out of bounds for length 24

 You will strong>Connector.
 attributes to the values <
 java.lang.StringIndexOutOfBoundsException: Range [15, 14) out of bounds for length 64

 The be unique/>
 an OpenSSL implementation. As far as possible, common configuration attributes
 are used for both Inaddition to the TLSrelatedrequest attributes defined in

 Each secure connectorjava.lang.StringIndexOutOfBoundsException: Range [13, 12) out of bounds for length 73
 ="http://tomcat.apachetomcat-.doc."
 SSLHostConfig elements must be uniquejava.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
 match<a"./howto> -</>.
 Connector.

 Each SSLHostConfig< "SL >
 Certificate. The types of the Certificate
 must be unique.

 In java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 0
 section 3.10 of the Servlet specification, Tomcat p> the
 java.lang.StringIndexOutOfBoundsException: Range [13, 12) out of bounds for length 73
 href="http://tomcat.apache.org/tomcat-10.1-doc/api/index.html">SSLSupport
 Javadoc</a>.

 For more information, see the
 -To</a>.

 <>

 <attributes>

 <attribute name="certificateRevocationListFile" required="false">
 thecontains certificate
 lists for the certificate authorities. The format is <> only./>
 defined, client certificates will not be checked against a certificate
 and
 certificateRevocationListPath for the certificate authorities. The format is PEMjava.lang.StringIndexOutOfBoundsException: Range [75, 74) out of bounds for length 80
 will be resolved against <code>$CATALINA_BASE</code>. JSSE basedattribute name"" required=false"
 a for <
 </attribute>

 <attribute name="certificateRevocationListPath" required="false">
 OpenSSL only.
 <Name the
 for the certificate authorities. The format is PEM-<code>optionalNoCA</code> if you want client certificates to
 will be resolved against <code>$CATALINA_BASE</code>.
 </attribute>

 <attribute<>/java.lang.StringIndexOutOfBoundsException: Range [31, 30) out of bounds for length 78
 quire a
 valid certificate chain from the client before accepting java.lang.StringIndexOutOfBoundsException: Range [18, 17) out of bounds for length 76
 </code>the
 Certificate, but java.lang.StringIndexOutOfBoundsException: Range [4, 1) out of bounds for length 16
 <code><attribute name=java.lang.StringIndexOutOfBoundsException: Range [50, 49) out of bounds for length 68
 and you dontwanttothe
 If the TLS provider doesn't support this option (OpenSSL does, JSSE does
 not) it is treated as if <code>java.lang.StringIndexOutOfBoundsException: Range [0, 45) out of bounds for length 29
 <code>optionalNoCA<
 <<> w isthe java.lang.StringIndexOutOfBoundsException: Range [58, 57) out of bounds for length 71
 certificate chain unless the client requests<Name java.lang.StringIndexOutOfBoundsException: Range [77, 78) out of bounds for length 77
 ication.
 </attribute>

 <attribute name="certificateVerificationDepth" ""java.lang.StringIndexOutOfBoundsException: Range [49, 48) out of bounds for length 57

 when validating client certificate authorities. The format is PEM-encoded.
 of 10 /
 </attribute>

 <attribute <>java.lang.StringIndexOutOfBoundsException: Range [21, 20) out of bounds for length 73
 OpenSSL only.
 Name of the file that contains the java.lang.StringIndexOutOfBoundsException: Range [20, 19) out of bounds for length 73
 trusted certificate authorities. The format is PEM-encoded.
 </attribute>

 <attribute name="caCertificatePath" required="false">
 OpenSSL only.
 <>
 certificate authorities. The format is PEM-encoded.
 </attribute>

 <attribute name="ciphers" required="false">
 The ciphers to enable using the OpenSSL syntax. (See the OpenSSL
 documentation for the list of ciphers supported Only the ciphers that are supported by the SSL implementation
 Alternatively, a comma separated list of ciphers using the standard
 namesthe Different versions of OpenSSL may interpret supported bythe java.lang.StringIndexOutOfBoundsException: Range [74, 75) out of bounds for length 74
 differently. For example, the <code>CCM8</code> avoided by providing an explicit list of ciphers that are supported by the
 <code>HIGH</codeconfigured java.lang.StringIndexOutOfBoundsException: Range [40, 35) out of bounds for length 40
 the OpenSSL or JSSE version used, Tomcat converts the providedHIGH:!!:!!:/java.lang.StringIndexOutOfBoundsException: Range [66, 65) out of bounds for length 74
 value <Note default areis
 branch list is tothe
 implementation.
 Only java.lang.StringIndexOutOfBoundsException: Range [26, 25) out of bounds for length 78
 used. Any .<pjava.lang.StringIndexOutOfBoundsException: Index 26 out of bounds for length 26
 that are not supported by the SSL implementation will be logged <true/>
 <<code . be
 avoided by providing an explicit list of java.lang.StringIndexOutOfBoundsException: Index 54 out of bounds for length 16
 configured SSL =djava.lang.StringIndexOutOfBoundsException: Range [43, 42) out of bounds for length 61
 If not specified, a default (p>Disables use of TLS session tickets) java.lang.StringIndexOutOfBoundsException: Range [65, 66) out of bounds for length 65
 >::::::MD5<code java.lang.StringIndexOutOfBoundsException: Range [74, 75) out of bounds for length 74
 java.lang.StringIndexOutOfBoundsException: Range [11, 10) out of bounds for length 15
 ,order which
 treated as an order of ticket to estrablish the TLS session) will only have the peer certificate,
 </attribute>

 <attribute name="disableCompression java.lang.StringIndexOutOfBoundsException: Range [15, 14) out of bounds for length 56
 OpenSSL only./p
 Configures if compression is disabled. The default is
 >/java.lang.StringIndexOutOfBoundsException: Range [23, 22) out of bounds for length 79
 compression then the default for that the defaultis<falsecode./
 </attribute>

 <attribute name="disableSessionTickets" required="false">
 OpenSSL only.
 Disables use of TLS session attribute name="required="false">
 <</code>. Note
 session tickets are in use, domain name (e.g. <code>tomcat.apache.org</code>) or a wild card domain
 available on the first connection. Subsequent connections (that use a
 to TLS) have ,
 not the full chain.
 </attribute>

 <attribute name="java.lang.StringIndexOutOfBoundsException: Range [4, 37) out of bounds for length 16
 <> to <ode>true<code>to enforce theserver's cipher order
 (from the <code>ciphers</code> setting) instead of allowing
 the client to choose the cipher. The default java.lang.StringIndexOutOfBoundsException: Index 53 out of bounds for length 26
 </attribute>

 <attribute name="hostName" <code>false</code>. If the OpenSSL
 <The should be
 domain name (e.g. OpenSSLversion willbe used./>
 name (e.g. <code>*.apache.org</code>). If not specified, the java.lang.StringIndexOutOfBoundsException: Index 70 out of bounds for length 16
 of <code>_default_</code> will be <attribute name="keyManagerAlgorithm" refalse"
 converted to lower case.<The<</>algorithm .This to
 </attribute>

 <attribute name="insecureRenegotiation" required >/>Sun JVMs
 <> Configures if insecure documentation for the default value.
 <code>false</code>. If the OpenSSL versionjava.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
 configuring if insecure renegotiation<The java.lang.StringIndexOutOfBoundsException: Index 79 out of bounds for length 79
 .<>
 </attribute>

 JSSE onlyli2<li<>3/<all<li<ul
 > algorithm java.lang.StringIndexOutOfBoundsException: Range [64, 63) out of bounds for length 75
 /code> which
 <code>SunX509</code> for Sun removes it form the current list. The list is built starting from
 <code>an 

 " "java.lang.StringIndexOutOfBoundsException: Range [48, 47) out of bounds for length 49
 The names of the protocols to support when communicating with clients.
 This should be a list of any combination of morethan
 <java.lang.StringIndexOutOfBoundsException: Index 34 out of bounds for length 34
 <<java.lang.StringIndexOutOfBoundsException: Range [9, 8) out of bounds for length 74
 <li>TLSv1.2</li>< and checksare java.lang.StringIndexOutOfBoundsException: Range [50, 49) out of bounds for length 76
 Each token in the list can be prefixed with a plus sign (" java.lang.StringIndexOutOfBoundsException: Range [38, 31) out of bounds for length 75
 or a minus sign ("-").

 .java.lang.StringIndexOutOfBoundsException: Index 24 out of bounds for length 24
 The 1< implementation.Valuesof
 <code>SSLv2Hello,TLSv1,TLSv1.1,TLSv1.2,TLSv1.3</unlimited cache size and is not recommended. If not specified, a default
 Note that <code></java.lang.StringIndexOutOfBoundsException: Range [16, 15) out of bounds for length 16
 JVM that implements <code>TLSv1.3</code>.
 Note that <code>SSLv2Hello</code> will be ignored for OpenSSL based
 secure connectors. If more than one protocol is specified for an OpenSSL
 based secure connector it will always support <code> of zero and above are passed to the implementation. Zeroabove passedtoimplementation.Zerois
 single protocol is specified it will not support
 code>SSLv2Hello</>Note that <code>SSLv2</code> and <code>SSLv3/attribute>
 unsafe.
 If not specified, the default value of <attribute """"
 used.
 </>

 <attribute name="revocationEnabled" required="false"> see the for)If not , the
 JSSE only.
 Should the JSSE provider enable certificate revocation checks? If
 certificateRevocationListFile is set then this attribute
 is ignored and revocation checks are always enabled. This attribute a href="https://docs.oracle.com/en/java/javase/11/docs/specs/security/standard-names.html#sslcontext-algorithms">
 intended to enable <>protocols<code.<pjava.lang.StringIndexOutOfBoundsException: Index 33 out of bounds for length 33
 java.lang.StringIndexOutOfBoundsException: Range [47, 13) out of bounds for length 75
 <code>false</code> is used.
 </attribute>

 <attribute name="sessionCacheSize" required="false">
 essioncache.Specify
 <code>-1</code> to use the implementation implement<>n.sslX509/> If
 theimplementation.isused to specify an
 unlimited cache size and is not recommended. If not specified,
 <java.lang.StringIndexOutOfBoundsException: Range [15, 14) out of bounds for length 59
 </attribute>

 <attribute name="p>The algorithm touse truststore.If specified,the
 The time, in seconds, after the creation of an SSL session that it will
 timeout. Specify <code>-1</code> to use the implementation default</
 of zero and above are passed to the implementationjava.lang.StringIndexOutOfBoundsException: Index 56 out of bounds for length 0
 specify an unlimited timeout and is <>JSSEonly.</>
 ed./>
 </attribute>

 <attribute name="sslProtocol" required="false">
 JSSE only.
 single may
 protocols - see resolvedjava.lang.StringIndexOutOfBoundsException: Range [32, 30) out of bounds for length 77
 default
 JVM documentation for the allowed values
 <code>SSLContext</code> instance e.g.
 <a href"//docsoracle./en/javase/11/ocs
 Oracle Java 11</a>. Note: There is overlap between java.lang.StringIndexOutOfBoundsException: Range [0, 61) out of bounds for length 23
 <code>protocols</code>.</>
 </attribute>

 <ttribute name"required">
 JSSE only.
 p> name ofatrust classtouse to validate client
 certificates. The class must have a zero argument constructor and must
..509TrustManager</> this
 attribute is set, thejava.lang.StringIndexOutOfBoundsException: Range [14, 13) out of bounds for length 77
 </attribute>

 <attribute name=
 p>only./>
 The algorithm <JSSEonly
 valuereturnedby
 <code>javax.net.ssl.certificate. the valueofthe
 used
 </attribute>

 <attribute name="truststoreFile" required="false">
 JSSE only.
 The trust store file to use to validate client certificates. The
 default is the value of the <code>javax.net.ssl.trustStore</code> system
 property. If neither this <code>truststoreType</code> is.
 set, no trust store will be configured. java.lang.StringIndexOutOfBoundsException: Range [0, 54) out of bounds for length 16
 JSSE .p>
 used p>The typekey usedused thestore.The the
 <value ofthe<javax.netsslt<code>system .

 <lse">
 JSSE only.</tandjava.lang.StringIndexOutOfBoundsException: Range [44, 43) out of bounds for length 80
 The password to access the trust store. The <code>keystoreType<code>of thesinglecertificate.If nonethese
 <codejavax..sl.rustStorePassword/> systemproperty.
 property is null<a =#>java.lang.StringIndexOutOfBoundsException: Range [37, 36) out of bounds for length 63
 invalid trust store password is <attribute ="certificateFile =false"
 attempt bemade the truststorewithout apassword which
 will skip validation of the PEM-encoded. Relative paths will be resolved against
 </attribute>

 <attribute name="truststoreProvider" /oror ECcurve java.lang.StringIndexOutOfBoundsException: Range [57, 56) out of bounds for length 75
 JSSE only.
 The name of the truststore provider to be used for the server
 certificate. The defaultp>Thisattributeis unless
 <java.lang.StringIndexOutOfBoundsException: Range [18, 17) out of bounds for length 71
 name" =false
 as the p>Name of thethat java.lang.StringIndexOutOfBoundsException: Range [40, 39) out of bounds for length 77
 <code>keystoreProvider</code> is set, the list of registered providers is
 order firstproviderthat supports the
 <code>truststoreType</code> is used.
 
 </attribute>

 attribute "ruststoreType"required"">
 JSSE only.
 <ptheyall usethesame java.lang.StringIndexOutOfBoundsException: Range [45, 44) out of bounds for length 55
 value of the <code>javax.net.ssl.java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
 that property is null, a single certificate has p>JSSE ./>
 TLS virtual and that certificate a <code>keystoreType</code> that
 is not <code>PKCS12</code> then the default will be the
 <code>keystoreType</code> of the single certificate. If none of not specified, the first key read from the keystore will be used. The
 identifya thedefault willbe<codeJKS<code.See the on
 <a href="#Key_store_types">key store dependent.Itmay not be keys areread from keystore in
 </attribute>

 </attributes>

 </java.lang.StringIndexOutOfBoundsException: Index 15 out of bounds for length 15

 ame=" Supportjava.lang.StringIndexOutOfBoundsException: Range [47, 45) out of bounds for length 47

 <attributes>

=java.lang.StringIndexOutOfBoundsException: Range [38, 36) out of bounds for length 55
 Name of the file that contains the server <>$/
 attribute" java.lang.StringIndexOutOfBoundsException: Range [55, 53) out of bounds for length 62
 <ode>$ATALINA_BASE</code>.
 In addition to the certificate, the file can also contain as optional
 elements DH parameters and/orpIf java.lang.StringIndexOutOfBoundsException: Range [49, 48) out of bounds for length 71
 generated by <code>openssl dhparam</code> and <code>openssl ecparam</code>,
 respectively. The output of the respective OpenSSL command can
 be concatenated to the certificate file.strong></>.p
 java.lang.StringIndexOutOfBoundsException: Range [30, 15) out of bounds for length 81
 certificateKeystoreFile is attribute namecertificateKeystoreFile"java.lang.StringIndexOutOfBoundsException: Range [56, 54) out of bounds for length 63
 <>

 >
 Name of the file that contains the certificate chain associated with
 the server certificate used. The format is
 PEM-encoded. Relative paths will be resolved against
 <>CATALINA_BASE<code>/
 The certificate chain used for Tomcat should notparameter. Relative pathswillbe against
 as ./>
 Note that when using a domain keystore<code java.lang.StringIndexOutOfBoundsException: Range [64, 65) out of bounds for length 64
 they all must use the same certificate chain.
 </attribute>

 ame"java.lang.StringIndexOutOfBoundsException: Range [41, 40) out of bounds for length 59
 JSSE <attribute nam=certificateKeystorePassword =false"
server java.lang.StringIndexOutOfBoundsException: Range [75, 74) out of bounds for length 78
 ,thefirst keyread the java.lang.StringIndexOutOfBoundsException: Range [58, 57) out of bounds for length 75
 order in which keys are read from theprivatekeyand certificate.takesprecedence
 dependent. It may not be the/>
 the<attributename"" required""
 keystore it is strongly recommended that a p>The name of the keystore provider to be used
 ensure that the correct key is used.<java.lang.StringIndexOutOfBoundsException: Range [49, 48) out of bounds for length 74
 </attribute>

 <attribute name="certificateKeyFile" java.lang.StringIndexOutOfBoundsException: Index 43 out of bounds for length 10
 Name of java.lang.StringIndexOutOfBoundsException: Range [30, 29) out of bounds for length 73
 PEM-encoded. The default value is the value of
 certificateFile and in this case both certificate <.ssljava.lang.StringIndexOutOfBoundsException: Range [40, 38) out of bounds for length 80
 See a =#"keystore types</>
 be resolved against <code>$CATALINA_BASE</code>.
 </java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 0

 <attribute The type of>The type.Thisis to identify ciphers thatjava.lang.StringIndexOutOfBoundsException: Index 79 out of bounds for length 79
 The password used to access the private key associated with the server
 certificatefrom specifiedspecified ./>
 If not specified, the default behaviour forstrongCertificate/>is withina <>SSLHostConfig/>
 certificateKeystorePassword. For OpenSSL the default
 behaviour not a password, OpenSSL will for onejava.lang.StringIndexOutOfBoundsException: Index 74 out of bounds for length 74
 if required.
 </attribute>

 <attribute name="certificateKeyPasswordFile" required="false">
 The password file used to access the private key associated with the server
 fromthe . attribute
 certificateKeyPassword.
 certificateKeystorePasswordFile. For OpenSSL the default
 behaviour is not to use a password (file), but OpenSSL will prompt for one,
 if required.
 </attribute>

 <attribute name="certificateKeystoreFile" required="false">
 JSSE only.</<java.lang.StringIndexOutOfBoundsException: Range [14, 13) out of bounds for length 60
 The pathname of the keystore p>java.lang.StringIndexOutOfBoundsException: Range [10, 9) out of bounds for length 69
 certificate and key to be loaded. implementationdepending the being used
 < directory of
 that is running Tomcat. If your <code>java.lang.StringIndexOutOfBoundsException: Index 53 out of bounds for length 0
 code"/>(java.lang.StringIndexOutOfBoundsException: Range [38, 37) out of bounds for length 75
 parameter. Relative paths will be resolved against
 <java.lang.StringIndexOutOfBoundsException: Range [0, 11) out of bounds for length 0
 When using a domain keystore (<code>keystoreType< pIn to ,Tomcathasto TLS
 <code<code>, java.lang.StringIndexOutOfBoundsException: Range [40, 39) out of bounds for length 71
 .
 This passed to the JSSE implementation for normal TLS processing. In theory,
 certificateFile hundred attributethe message
 </>

 <attribute name=certificateKeystorePassword"required="false">
 JSSE only.
 The password to use to access the keystore client. If not specified a default of <code>65536(64) java.lang.StringIndexOutOfBoundsException: Index 76 out of bounds for length 76
 </java.lang.StringIndexOutOfBoundsException: Range [16, 15) out of bounds for length 16
 <code>changeit</code> will be used.
 </attribute>

 <attribute tnative libraryis not installed
 ly</>
 passwordfile useto the containing theserver&;
 private key and certificate. This attribute JVM can be configured to use a different JSSE provider as the default.
 certificateKeystorePassword. .Toenable,the nativelibraryshould and
 /java.lang.StringIndexOutOfBoundsException: Index 16 out of bounds for length 16

 <attribute name="certificateKeystoreProvider" required="false">
 java.lang.StringIndexOutOfBoundsException: Range [14, 13) out of bounds for length 23
 name of the provider java.lang.StringIndexOutOfBoundsException: Range [46, 45) out of bounds for length 68
 for example is notallowedto define of Java keystore
 avaxnet..</> used. Ifneitherthis
 attribute nor the system property are set, the list of registered
 providers is traversed in preference order and the first provider that
 supports the <code>keystoreType</code> is used.
 </ubsection>
 </

 <attribute name="certificateKeystoreType" required="false">
 pisjava.lang.StringIndexOutOfBoundsException: Range [31, 30) out of bounds for length 66
 <>OpenSSLConfjava.lang.StringIndexOutOfBoundsException: Range [30, 29) out of bounds for length 73
 If not code>SSL_CONF</code<API. java.lang.StringIndexOutOfBoundsException: Range [59, 57) out of bounds for length 78
 <code>javax.net.
 nor the system property are set, a default value of "<code>JKS</code>". is
 used. See the notes on <a href="#Key_store_types">key store types</a>
 below.
 </attribute>

 <attribute(3)/a pagefor. Someoffile
 The type of certificate. This is used attributes. It is recommended that configuration file commands are only used
of <>/>,
 <code>RSA</code>, <code>DSA</code
 Certificate is nested within a <code>SSLHostConfigThe<strongOpenSSLConf/>element notsupportany
 then this attribute is not required and will default to
 <codeUNDEFINED/> multiplestrong></strongsare
 nested within
 and each Certificate must have</>
 </attribute>

 </java.lang.StringIndexOutOfBoundsException: Index 6 out of bounds for length 0

 </subsection>

 <subsection name="SSL Support - Connector - NIO and NIO2runtimes support additional key store as Windows-,

 When APR/native is enabled, thethese Tomcat:pjava.lang.StringIndexOutOfBoundsException: Index 71 out of bounds for length 71
 OpenSSL through JSSE>
 implementation>Set java.lang.StringIndexOutOfBoundsException: Range [45, 41) out of bounds for length 73
 and java.lang.StringIndexOutOfBoundsException: Range [25, 9) out of bounds for length 74

 The following NIO and NIO2 SSL configuration attributes are not specificli>If a ,set thecertificateKeystoreFile
 a host and, therefore, must be configured on the connector.

 <attributes>

 <the <lijava.lang.StringIndexOutOfBoundsException: Index 23 out of bounds for length 23
 <<liIfno is
 message received on a new TLS connection (the client hello) to extract java.lang.StringIndexOutOfBoundsException: Index 79 out of bounds for length 67
 requested server name. The message needs to be buffered so it can then be
 passedtothe JSSE implementation TLSprocessing theory
 this first message could be very large password is required, set the certificateKeystorePasswor
 afew java.lang.StringIndexOutOfBoundsException: Range [30, 29) out of bounds for length 76
 size that Tomcat will buffer. If a message exceeds this size<> java.lang.StringIndexOutOfBoundsException: Range [25, 24) out of bounds for length 75
 connection will be configured as if no server name was indicated by the
 client. If not specified a default of
 used.
 </attribute>

 <attribute name="sslImplementationName" required="false">
 <>The class name of the SSL implementation to use. If not specified and
 the tomcat-native library is not installed, the
 default <java.lang.StringIndexOutOfBoundsException: Range [23, 22) out of bounds for length 80
 will be used which wraps JVM's default JSSE provider. Note that the
 JVMcan configuredconfigured use different JSSE provider as the default.
 Tomcat also bundles a special SSL implementation for JSSE that is backed
 by OpenSSL. To enable it, the native library should be enabled fromfromthe
 will automatically enable it and java.lang.StringIndexOutOfBoundsException: Index 42 out of bounds for length 0
 becomes
 <code>org.apache.tomcat.util.net<ubsection name="Connector Comparison">
 In that case, the attributes from either JSSE and OpenSSL
 java.lang.StringIndexOutOfBoundsException: Range [33, 19) out of bounds for length 78
 (for example, it is not allowed to define
 specify a separate pem private key using the OpenSSL attributejava.lang.StringIndexOutOfBoundsException: Index 68 out of bounds for length 10
 </attribute>

 </subsection>

 <subsection name="SSL Support - OpenSSL's th><>

 When OpenSSL is providing the TLS <>td
 OpenSSLConfCmd
 OpenSSLConf element to configure OpenSSL via OpenSSL's
 <code>SSL_CONF</code> API. A single OpenSSLConf element may
 /

 
 version being used. For a list of supported java.lang.StringIndexOutOfBoundsException: Index 50 out of bounds for length 11
 section Supported configuration file commands in the <a
 href="https://www.openssl.org/docs/manmaster/man3/SSL_CONF_cmd.html#SUPPORTED-CONFIGURATION-FILE-COMMANDS"
 >java.lang.StringIndexOutOfBoundsException: Range [9, 5) out of bounds for length 37
 commands can be used as alternatives to <java.lang.StringIndexOutOfBoundsException: Range [8, 7) out of bounds for length 11
 attributes. It <>td
 where the feature<
 th ResponseHeaders Body<th>

 The OpenSSLConf element does not support <java.lang.StringIndexOutOfBoundsException: Range [11, 10) out of bounds for length 11
 attributes.

 The OpenSSLConfCmd</java.lang.StringIndexOutOfBoundsException: Index 35 out of bounds for length 10
 attributes.

 <attributes>

 <attribute name="name" required="true"<tr
 < SSLjava.lang.StringIndexOutOfBoundsException: Range [30, 25) out of bounds for length 30
 </attribute>

 <attribute name="value" required="false">
 The value to use for the configuration file td><code class="noHighlight">maxConnections</code></td>
 </attribute>

 </attributes>

 </subsection>

 <subsection name="Key store types">

 In addition to the standard key store java.lang.StringIndexOutOfBoundsException: Index 50 out of bounds for length 0
 runtimes support additional key store types such as Windows-ROOT,
 Windows-My, DKS as well as hardware security modules. Generally, to use
 these additional keystore types with a TLS Connector in Tomcat:

 <ul>
 <li>Set the certificateKeystoreType and/or truststoreType Connector
 attribute (as appropriate) to the necessary type</li>
 <li>If a configuration file is required, set the certificateKeystoreFile
 and/or truststoreFile Connector attribute (as appropriate) to point to
 the file</li>
 <li>If no configuration file is required then you will almost certainly
 need to explicitly set the certificateKeystoreFile and/or
 truststoreFile Connector attribute (as appropriate) to the empty
 string ("")</li>
 <li>If a password is required, set the certificateKeystorePassword and/or
 truststorePassword Connector attribute (as appropriate) to the
 required password</li>
 <li>If no password is required then you will almost certainly need to
 explicitly set the certificateKeystorePassword and/or
 truststorePassword Connector attribute (as appropriate) to the empty
 string ("")</li>
 </ul>

 Variations in key store implementations, combined with the key store
 manipulation Tomcat does in the background to allow interoperability between
 JSSE and OpenSSL configuration styles, means that some keystores may need
 slightly different configuration. Assistance is always available from the
 <a href="http://tomcat.apache.org/lists.html#tomcat-users">Apache Tomcat
 users mailing list</a>. We aim to document any key stores that vary from the
 above advice here. Currently there are none we are aware of.

 </subsection>

 <subsection name="Connector Comparison">

 Below is a small chart that shows how the connectors differ.

 <table class="defaultTable" style="text-align: center;">
 <tr>
 <th />
 <th style="text-align: center;">Java Nio Connector NIO</th>
 <th style="text-align: center;">Java Nio2 Connector NIO2</th>
 </tr>
 <tr>
 <th>Classname</th>
 <td><code class="noHighlight">Http11NioProtocol</code></td>
 <td><code class="noHighlight">Http11Nio2Protocol</code></td>
 </tr>
 <tr>
 <th>Tomcat Version</th>
 <td>since 6.0.x</td>
 <td>since 8.0.x</td>
 </tr>
 <tr>
 <th>Support Polling</th>
 <td>YES</td>
 <td>YES</td>
 </tr>
 <tr>
 <th>Polling Size</th>
 <td><code class="noHighlight">maxConnections</code></td>
 <td><code class="noHighlight">maxConnections</code></td>
 </tr>
 <tr>
 <th>Read Request Headers</th>
 <td>Non Blocking</td>
 <td>Non Blocking</td>
 </tr>
 <tr>
 <th>Read Request Body</th>
 <td>Blocking</td>
 <td>Blocking</td>
 </tr>
 <tr>
 <th>Write Response Headers and Body</th>
 <td>Blocking</td>
 <td>Blocking</td>
 </tr>
 <tr>
 <th>Wait for next Request</th>
 <td>Non Blocking</td>
 <td>Non Blocking</td>
 </tr>
 <tr>
 <th>SSL Support</th>
 <td>Java SSL or OpenSSL</td>
 <td>Java SSL or OpenSSL</td>
 </tr>
 <tr>
 <th>SSL Handshake</th>
 <td>Non blocking</td>
 <td>Non blocking</td>
 </tr>
 <tr>
 <th>Max Connections</th>
 <td><code class="noHighlight">maxConnections</code></td>
 <td><code class="noHighlight">maxConnections</code></td>
 </tr>
 </table>

 </subsection>
</section>

</body>

</document>

Messung V0.5 in Prozent

¤ Diese beiden folgenden Angebotsgruppen bietet das Unternehmen0.33Angebot ¤

*Eine klare Vorstellung vom Zielzustand

Wurzel

Suchen

PVS Prover

Isabelle Prover

NIST Cobol Testsuite

Cephes Mathematical Library

Vienna Development Method

Haftungshinweis

Die Informationen auf dieser Webseite wurden nach bestem Wissen sorgfältig zusammengestellt. Es wird jedoch weder Vollständigkeit, noch Richtigkeit, noch Qualität der bereit gestellten Informationen zugesichert.

Bemerkung:

Die farbliche Syntaxdarstellung und die Messung sind noch experimentell.