Re: [VOTE] Release Apache Tomcat 10.1.10

2023-06-05 Thread Mark Thomas
On 02/06/2023 19:41, Christopher Schultz wrote: The proposed 10.1.10 release is: [ ] Broken - do not release [X] Stable - go ahead and release as 10.1.10 Tests pass on Windows, Linux, MacOS (M1) and MacOS (Intel). I have confirmed that the release binaries are reproducible. The source

[jira] [Commented] (DAEMON-460) High CPU usage in prunsrv.exe since Daemon 1.3.4

2023-06-05 Thread Mark Thomas (Jira)
[ https://issues.apache.org/jira/browse/DAEMON-460?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17729285#comment-17729285 ] Mark Thomas commented on DAEMON-460: Have you explicitly tested this with 1.3.2 and confirmed

Re: Is request.isAsyncStarted() return true after calling asyncContext.dispatch() right in tomcat?

2023-06-05 Thread Mark Thomas
On 05/06/2023 10:15, netye...@sina.com wrote: According to Servlet Specification Version 3.1, request.isAsyncStarted() should return false after calling asyncContext.dispatch().request.isAsyncStarted() return false in weblogic, but true in tomcat. Is tomcat's action right? Tomcat is correct.

Re: [VOTE] Release Apache Tomcat 10.1.10

2023-06-05 Thread Mark Thomas
On 05/06/2023 03:41, Han Li wrote: Mark, I encounter one error, as follow: 20 Testcase: testPerformance took 11.807 sec 21 FAILED 22 5666 23 junit.framework.AssertionFailedError: 5666 24 at

Re: SOAP HTTP error: "HTTP/1.1 400 Bad Request" after upgrade to 8.5.89.

2023-06-03 Thread Mark Thomas
On 02/06/2023 21:00, jonmcalexan...@wellsfargo.com.INVALID wrote: Good afternoon, Have a team that just upgraded to 8.5.89 from 8.5.72 and started getting these messages in the logs: [2023/06/01][01:05:10.012] : [INIT] - EPMSend (init) - EPMSend = SOAP [2023/06/01][01:05:10.012] : [INIT] -

[VOTE] Release Apache Tomcat 11.0.0-M7

2023-06-02 Thread Mark Thomas
The proposed Apache Tomcat 11.0.0-M7 release is now available for voting. Apache Tomcat 11.0.0-M7 is a milestone release of the 11.0.x branch and has been made to provide users with early access to the new features in Apache Tomcat 11.0.x so that they may provide feedback. The notable changes

Re: Potentially useful filter for debugging, etc.

2023-06-02 Thread Mark Thomas
On 02/06/2023 15:35, Christopher Schultz wrote: All, I've built a Filter for use with a client who has many environments, many reverse proxies, and many application servers and were getting confused about what was what. Basically, it just adds a "Via" header as appropriate and has some

Re: Get actual protocol from request

2023-06-02 Thread Mark Thomas
On 02/06/2023 15:31, Christopher Schultz wrote: All, Is it possible to get the /actual/ protocol used for communication with a tomcat server? I'm using AJP/13 and request.getProtocol is returning "HTTP/1.1" which is not 100% surprising. I'm wondering if the request has anything in it which

[ANN] Apache Tomcat Native 1.2.37 released

2023-06-02 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat Native 1.2.37 stable. The key features of this release are: - Update the version of OpenSSL used to create the binaries for Windows to OpenSSL 1.1.1u Please refer to the change log for the complete list of changes:

[ANN] Apache Tomcat Native 1.2.37 released

2023-06-02 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat Native 1.2.37 stable. The key features of this release are: - Update the version of OpenSSL used to create the binaries for Windows to OpenSSL 1.1.1u Please refer to the change log for the complete list of changes:

[ANN] Apache Tomcat Native 1.2.37 released

2023-06-02 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat Native 1.2.37 stable. The key features of this release are: - Update the version of OpenSSL used to create the binaries for Windows to OpenSSL 1.1.1u Please refer to the change log for the complete list of changes:

[ANN] Apache Tomcat Native 1.2.37 released

2023-06-02 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat Native 1.2.37 stable. The key features of this release are: - Update the version of OpenSSL used to create the binaries for Windows to OpenSSL 1.1.1u Please refer to the change log for the complete list of changes:

Re: AW: Re-Cannot upload an image file from a deployed JSP page in Tomcat 10

2023-06-02 Thread Mark Thomas
On 02/06/2023 08:20, Thomas Hoffmann (Speed4Trade GmbH) wrote: Hello Lauri, -Ursprüngliche Nachricht- Von: Lauri Gesendet: Freitag, 2. Juni 2023 08:58 An: Tomcat Users List Betreff: Re-Cannot upload an image file from a deployed JSP page in Tomcat 10 @Thomas: I have made a test

[ANN] Apache Tomcat Native 2.0.4 released

2023-06-02 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat Native 2.0.4 stable. The key features of this release are: - The binaries for Windows in this release have been built with OpenSSL 3.0.9 The 2.0.x branch is primarily intended for use with Tomcat 10.1.x or later

[ANN] Apache Tomcat Native 2.0.4 released

2023-06-02 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat Native 2.0.4 stable. The key features of this release are: - The binaries for Windows in this release have been built with OpenSSL 3.0.9 The 2.0.x branch is primarily intended for use with Tomcat 10.1.x or later

[ANN] Apache Tomcat Native 2.0.4 released

2023-06-02 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat Native 2.0.4 stable. The key features of this release are: - The binaries for Windows in this release have been built with OpenSSL 3.0.9 The 2.0.x branch is primarily intended for use with Tomcat 10.1.x or later

[ANN] Apache Tomcat Native 2.0.4 released

2023-06-02 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat Native 2.0.4 stable. The key features of this release are: - The binaries for Windows in this release have been built with OpenSSL 3.0.9 The 2.0.x branch is primarily intended for use with Tomcat 10.1.x or later

[VOTE] [RESULT] Release Apache Tomcat Native 1.2.37

2023-06-02 Thread Mark Thomas
The following votes were cast: Binding: +1: isapir, markt, schultz, remm No other votes were cast. The vote therefore passes. Thanks to everyone who contributed to this release. Mark - To unsubscribe, e-mail:

[VOTE] [RESULT] Release Apache Tomcat Native 2.0.4

2023-06-02 Thread Mark Thomas
The following votes were cast: Binding: +1: markt, schultz, remm, lihan No other votes were cast. The vote therefore passes. Mark - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail:

Re: PersistentValve removal ?

2023-06-01 Thread Mark Thomas
On 30/05/2023 22:44, Rémy Maucherat wrote: On Tue, May 30, 2023 at 6:46 PM Mark Thomas wrote: I can't think of a use case that justifies keeping PersistentValve. BZ 66513 talks about non-sticky LB with containers. I'll ask some follow-up questions to see if there is something we

Re: Re-Cannot upload an image file from a deployed JSP page in Tomcat 10

2023-06-01 Thread Mark Thomas
On 01/06/2023 10:18, Torsten Krah wrote: Am Donnerstag, dem 01.06.2023 um 08:52 + schrieb Lauri: You mention a servlet part, but I do not use a servlet. All the code is contained in the JSP page. You need to divide that code in a JSP and in your upload servlet as you need to provide the

Re: [VOTE] Release Apache Tomcat Native 1.2.37

2023-05-31 Thread Mark Thomas
On 31/05/2023 14:34, Christopher Schultz wrote: Mark, Thanks for RMing On 5/30/23 18:21, Mark Thomas wrote: Version 1.2.36 includes the following changes compared to 1.2.36 - The windows binaries in this release have been built with OpenSSL    1.1.1u and APR 1.7.4 The proposed release

Re: [VOTE] Release Apache Tomcat Native 2.0.4

2023-05-31 Thread Mark Thomas
On 31/05/2023 14:38, Christopher Schultz wrote: Mark, Thanks for RMing On 5/30/23 16:58, Mark Thomas wrote: The key differences of version 2.0.4 compared to 2.0.3 are: - The windows binaries in this release have been built with OpenSSL    3.0.9 and APR 1.7.4 The 2.0.x branch is primarily

Re: [VOTE] Release Apache Tomcat Native 1.2.37

2023-05-31 Thread Mark Thomas
On 30/05/2023 23:21, Mark Thomas wrote: The Apache Tomcat Native 1.2.37 release is  [X] Stable, go ahead and release  [ ] Broken because of ... Tested using: - Windows binary with Tomcat 11.0.x - Windows binary with Tomcat 9.0.x - Ubuntu (built from source OpenSSL 1.1.1u) with Tomcat 11.0.x

[jira] [Updated] (DAEMON-460) High CPU usage in prunsrv.exe since Daemon 1.3.4

2023-05-31 Thread Mark Thomas (Jira)
[ https://issues.apache.org/jira/browse/DAEMON-460?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Mark Thomas updated DAEMON-460: --- Fix Version/s: (was: 1.3.4) > High CPU usage in prunsrv.exe since Daemon 1.

Re: [VOTE] Release Apache Tomcat Native 2.0.4

2023-05-31 Thread Mark Thomas
On 30/05/2023 21:58, Mark Thomas wrote: The Apache Tomcat Native 2.0.4 release is  [X] Stable, go ahead and release  [ ] Broken because of ... Tested using: - Windows binaries with 11.0.x on Windows - Built OpenSSL 3.0.9 and Native 2.0.4 on Ubuntu and tested with 11.0.x All tests passed

Re: [VOTE] Release Apache Tomcat Native 2.0.4

2023-05-31 Thread Mark Thomas
On 31/05/2023 07:38, Igal Sapir wrote: I get compilation errors, but possibly because I don't have the most recent libs? Running on Ubuntu, the package manager shows the following versions as the most recent: ❯ sudo apt install libapr1-dev libssl-dev Reading package lists... Done Building

Re: [VOTE] Release Apache Tomcat Native 1.2.37

2023-05-31 Thread Mark Thomas
On 31/05/2023 07:23, Igal Sapir wrote: On Tue, May 30, 2023 at 3:22 PM Mark Thomas wrote: Version 1.2.36 includes the following changes compared to 1.2.36 - The windows binaries in this release have been built with OpenSSL 1.1.1u and APR 1.7.4 The proposed release artifacts can be found

[VOTE] Release Apache Tomcat Native 1.2.37

2023-05-30 Thread Mark Thomas
Version 1.2.36 includes the following changes compared to 1.2.36 - The windows binaries in this release have been built with OpenSSL 1.1.1u and APR 1.7.4 The proposed release artifacts can be found at [1], and the build was done using tag [2]. The Apache Tomcat Native 1.2.37 release is [ ]

[VOTE] Release Apache Tomcat Native 2.0.4

2023-05-30 Thread Mark Thomas
The key differences of version 2.0.4 compared to 2.0.3 are: - The windows binaries in this release have been built with OpenSSL 3.0.9 and APR 1.7.4 The 2.0.x branch is primarily intended for use with Tomcat 10.1.x but can be used with earlier versions as long as the APR/native connector is

Re: Timing for June releases

2023-05-30 Thread Mark Thomas
On 30/05/2023 16:54, Christopher Schultz wrote: All, On 5/26/23 13:46, Christopher Schultz wrote: Mark, On 5/24/23 04:28, Mark Thomas wrote: OpenSSL has just announced a security fix release for 30 May. We won't know what the security issues are until then so my tentative plan is to tag

Re: PersistentValve removal ?

2023-05-30 Thread Mark Thomas
On 30/05/2023 15:10, Rémy Maucherat wrote: Ok. I proposed the removal based on "It is intended to be used with non-sticky load-balancers" from the javadoc. I think the clustering and stickness have to be used instead of this valve, to comply with all reasonable concurrency requirements from the

Re: [tomcat] branch main updated: Bump OpenSSL version number.

2023-05-30 Thread Mark Thomas
On 30/05/2023 16:51, schu...@apache.org wrote: This is an automated email from the ASF dual-hosted git repository. schultz pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new

Re: PersistentValve removal ?

2023-05-30 Thread Mark Thomas
On 29/05/2023 08:36, Mark Thomas wrote: On 26/05/2023 09:56, Rémy Maucherat wrote: Hi, After looking at BZ 66513, reading things online, the javadoc with its heavy handed usage warnings, code of PersistentValve and tracing back all the calls in the PersistentManager itself, my conclusion

Re: Re-Cannot upload an image file from a deployed JSP page in Tomcat 10

2023-05-30 Thread Mark Thomas
commons-fileupload-1.5.jar from from Java EE to Jakarta EE and then use the converted JAR rather than the original. The best solution is probably the one Thomas pointed out: Option 4: Stop using commons-fileupload-1.5.jar and use the methods provided by the Servlet API to handle file uploads.

Re: [ANN] Apache Tomcat 9.0.75 available

2023-05-29 Thread Mark Thomas
On 29/05/2023 08:56, Greg Huber wrote: Hello, Looking through my logs I am seeing a few: org.apache.catalina.connector.ClientAbortException: java.io.IOException: Broken pipe Checking previous logs for 9.0.74, there were none, and I have not made any changes to my app.  Were there any

Re: Cannot upload an image file from a deployed JSP page in Tomcat 10

2023-05-29 Thread Mark Thomas
On 29/05/2023 10:36, Lauri wrote: From Tomcat 10 and onwards there has been a move from Java EE to Jakarta EE as part of the transfer of Java EE to the Eclipse Foundation, the primary package for all implemented APIs has changed from javax.* to jakarta.*. Note the above. I have these

Re: PersistentValve removal ?

2023-05-29 Thread Mark Thomas
On 26/05/2023 09:56, Rémy Maucherat wrote: Hi, After looking at BZ 66513, reading things online, the javadoc with its heavy handed usage warnings, code of PersistentValve and tracing back all the calls in the PersistentManager itself, my conclusion is that the functionality provided by that

Re: Disabling hostname verification on websockets in Tomcat 8+

2023-05-26 Thread Mark Thomas
On 25/05/2023 22:52, V User wrote: The how-to on websockets ( https://tomcat.apache.org/tomcat-9.0-doc/web-socket-howto.html) says that you can bypass hostname verification with a custom TrustManager: "For secure server endpoints, host name verification is enabled by default. To bypass this

Re: OT: java.net.socket exception

2023-05-26 Thread Mark Thomas
On 25/05/2023 20:46, jonmcalexan...@wellsfargo.com.INVALID wrote: So, to start I'm not a developer. With that said, have a development team that is getting the exception below in their Tomcat 9.0.74 implementation using Java 11 (also with Java 8). After much troubleshooting with their

Re: [website] Jenkins job Community Development/events-site/main#82 failed

2023-05-26 Thread Mark Thomas
-site/commit/271e09ae3d4f092b5a6810cdbe40774d64b729fc A new build is already scheduled but waiting on the next available executor (in Jenkins); we'll know in ~15 minutes whether things are working again. Op do 25 mei 2023 om 20:54 schreef Mark Thomas : Anyone familiar with the website build

Re: [website] Jenkins job Community Development/events-site/main#82 failed

2023-05-25 Thread Mark Thomas
Anyone familiar with the website build process and can look at this? We could do with getting the updates deployed. Mark On 25/05/2023 18:40, Jenkins wrote: There is a build failure in Community Development/events-site/main. Build:

Re: HTTP 400 from tcp half-open health checks

2023-05-25 Thread Mark Thomas
On 25/05/2023 09:14, Paul Baines wrote: Hello! We upgraded a Windows Tomcat instance from 8.5.41 to 8.5.84. This Tomcat instance is behind a load balancer. Since the upgrade the Tomcat access log (AccessLogValve) has an "empty" entry with response 400 for every TCP half-open health check from

Re: WebdavServlet protected resources cannot be opened in Word

2023-05-24 Thread Mark Thomas
On 24/05/2023 08:03, Кирилл Бубович wrote: We use webdav servlet to enable editing docx documents. We also use the |ms-word:ofe|u|https://www.example.com/document.docx

Timing for June releases

2023-05-24 Thread Mark Thomas
Hi all, OpenSSL has just announced a security fix release for 30 May. We won't know what the security issues are until then so my tentative plan is to tag and release Native 1.2.x and 2.0.x on 31 May, release Native 1.2.x and 2.0.x relatively quickly, update all Tomcat versions to use the

Re: keyPass and keystorePass

2023-05-23 Thread Mark Thomas
On 23/05/2023 18:57, James H. H. Lampert wrote: According to the Tomcat 7 configuration reference, keystorePass, if not specified, defaults to the value (specified or default) of keyPass. The Tomcat 8.5 configuration reference doesn't say this; is it still true? No. If

RFC 9113 (HTTP/2) and HTTP upgrade to h2c

2023-05-23 Thread Mark Thomas
Hi all, The latest HTTP/2 RFC (9113, June 2022) deprecates the use of HTTP upgrade to start an HTTP/2 clear text connection. Interestingly, a range of vocabulary is used. Section 3.1 says it is "deprecated". Section 11.2 says it is "obsolete" and that "This capability has been removed.".

Re: Rate Limiting support in Tomcat 9.x

2023-05-23 Thread Mark Thomas
On 22/05/2023 21:16, Amit Pande wrote: Hello, https://tomcat.apache.org/ I see rate limiting support added in Tomcat 10.1.9 . (Side note: The Apache Tomcat Project is proud to announce the release of version 10.1.8 of Apache Tomcat - I think it should be 10.1.9) Thanks. The typo has been

[SECURITY] CVE-2023-28709 Apache Tomcat - Fix for CVE-2023-24998 was incomplete

2023-05-22 Thread Mark Thomas
CVE-2023-28709 Apache Tomcat - Fix for CVE-2023-24998 was incomplete Severity: Moderate Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 11.0.0-M2 to 11.0.0-M4 Apache Tomcat 10.1.5 to 10.1.7 Apache Tomcat 9.0.71 to 9.0.73 Apache Tomcat 8.5.85 to 8.5.87 Description: The

Re: Tomcat connection pool 9.0.52 uses more then configured maxActive connections

2023-05-22 Thread Mark Thomas
On 22/05/2023 09:45, Stefan López Romero wrote: Hello, I have the problem that the Tomcat connection pool uses more than the maxActive connections. In my Dropwizard application I have configured a maxSize of 30, but I found the following message in the logs. Timeout: Pool empty. Unable to

[SECURITY] CVE-2023-28709 Apache Tomcat - Fix for CVE-2023-24998 was incomplete

2023-05-22 Thread Mark Thomas
CVE-2023-28709 Apache Tomcat - Fix for CVE-2023-24998 was incomplete Severity: Moderate Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 11.0.0-M2 to 11.0.0-M4 Apache Tomcat 10.1.5 to 10.1.7 Apache Tomcat 9.0.71 to 9.0.73 Apache Tomcat 8.5.85 to 8.5.87 Description: The

[SECURITY] CVE-2023-28709 Apache Tomcat - Fix for CVE-2023-24998 was incomplete

2023-05-22 Thread Mark Thomas
CVE-2023-28709 Apache Tomcat - Fix for CVE-2023-24998 was incomplete Severity: Moderate Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 11.0.0-M2 to 11.0.0-M4 Apache Tomcat 10.1.5 to 10.1.7 Apache Tomcat 9.0.71 to 9.0.73 Apache Tomcat 8.5.85 to 8.5.87 Description: The

[SECURITY] CVE-2023-28709 Apache Tomcat - Fix for CVE-2023-24998 was incomplete

2023-05-22 Thread Mark Thomas
CVE-2023-28709 Apache Tomcat - Fix for CVE-2023-24998 was incomplete Severity: Moderate Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 11.0.0-M2 to 11.0.0-M4 Apache Tomcat 10.1.5 to 10.1.7 Apache Tomcat 9.0.71 to 9.0.73 Apache Tomcat 8.5.85 to 8.5.87 Description: The

Re: [tomcat] branch main updated: Clear SocketWrapper reference to help GC

2023-05-20 Thread Mark Thomas
On 19/05/2023 04:24, li...@apache.org wrote: This is an automated email from the ASF dual-hosted git repository. lihan pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new

Re: Cron cd /srv/gump/public/gump/cron; /bin/bash gump.sh all

2023-05-19 Thread Mark Thomas
On 19/05/2023 13:00, Cron Daemon wrote: The lock file [/srv/gump/public/gump/gump.lock] exists, and is locked.. Either Gump is still running, or it terminated very abnormally. Please resolve this (waiting or removing the lock file) before retrying. Looks like Tomcat test failures causing a

Re: Best Practice to Upgrade Apache Tomcat from 9.0.56 to 9.0.74

2023-05-18 Thread Mark Thomas
18 May 2023 06:06:04 Meltron Kendrick : I created a "jar" file using WinRAR -- but no go --- Got the following error message... "Error: Could not find or load main class org.apache.catalina.util.ServerInfo" Any ideas on HOW TO properly do this? Start with an official Tomcat release that

Re: Tomcat 11 - minimum Java version

2023-05-17 Thread Mark Thomas
17 May 2023 20:37:01 Christopher Schultz : On 5/17/23 04:52, Mark Thomas wrote: Once we switch to using Panama, we are going to have to figure out how to handle this. My primary concern is new features that depend on API calls only present in newer OpenSSL versions. The Java components

Re: unsupported source vm 17?

2023-05-17 Thread Mark Thomas
On 17/05/2023 11:58, Holger Klawitter wrote: Hi there, I am using tomcat 9.0.73 along with jdk 17.0.7+8. I have set up tomcat to support jdk 17 on all jsp pages. jsp org.apache.jasper.servlet.JspServlet compilerSourceVM 17

Re: Tomcat 11 - minimum Java version

2023-05-17 Thread Mark Thomas
to figure out how to handle this. My primary concern is new features that depend on API calls only present in newer OpenSSL versions. Mark On Sat, May 13, 2023 at 1:48 AM Mark Thomas wrote: On 12/05/2023 22:24, Rémy Maucherat wrote: On Wed, Jan 11, 2023 at 12:23 PM Mark Thomas wrote: We

Re: Java G1 GC creating less garbage and taking more time in mixed GC phase

2023-05-16 Thread Mark Thomas
application we are receiving 800 json requests per second an average of 3KB data each request and will respond with in a second. 4. All the tomcat settings are defaults , Overall anything suspicious from the screenshots. Thanks & Regards, Venkat. -Original Message- From:

Re: Java G1 GC creating less garbage and taking more time in mixed GC phase

2023-05-16 Thread Mark Thomas
On 16/05/2023 05:12, M Venkata Pratap M wrote: Hi, 1. We are using Http2 , When compared to 9.0.38 tomcat version , 9.0.62 version is creating less garbage and taking more time(2 to 5 seconds) in garbage collection during mixed GC phase. 2. Are there any recommendation GC setting.

[ANNOUNCEMENT] Commons Daemon 1.3.4 Released

2023-05-13 Thread Mark Thomas
The Apache Commons Team is pleased to announce the availability of Apache Commons Daemon 1.3.4. The Apache Commons Daemon software library provides a generic Daemon (unix) or Service (Windows) wrapper for Java code. Version 1.3.4 is a bugfix release. A full list of changes can be found at

Re: Tomcat 11 - minimum Java version

2023-05-13 Thread Mark Thomas
On 12/05/2023 22:24, Rémy Maucherat wrote: On Wed, Jan 11, 2023 at 12:23 PM Mark Thomas wrote: We would normally make Java 21 the minimum Java version. Given that Java 21 is still in EA, I don't plan to do that yet. Since the update to Java 21 has now been made and seems to make everyone

Re: [VOTE] Release Apache Tomcat 8.5.89

2023-05-12 Thread Mark Thomas
On 12/05/2023 17:46, Christopher Schultz wrote: I'm getting a unit test failure I don't understand: 10-May-2023 22:15:23.192 INFO [main] org.apache.tomcat.util.net.AbstractEndpoint.logCertificate Connector [https-openssl-apr-127.0.0.1-auto-1], TLS virtual host [_default_], certificate

Re: Gump build switched to Java 21

2023-05-12 Thread Mark Thomas
On 11/05/2023 16:57, Stefan Bodewig wrote: On 2023-05-10, Mark Thomas wrote: Tomcat 11 is about to move to requiring Java 21 so I have just switched Gump to building with the latest Java 21 EA. I am expecting things to break and for it to take a couple of days for me to get everything fixed

[ANNOUNCEMENT] Commons Daemon 1.3.4 Released

2023-05-12 Thread Mark Thomas
The Apache Commons Team is pleased to announce the availability of Apache Commons Daemon 1.3.4. The Apache Commons Daemon software library provides a generic Daemon (unix) or Service (Windows) wrapper for Java code. Version 1.3.4 is a bugfix release. A full list of changes can be found at

[ANNOUNCEMENT] Commons Daemon 1.3.4 Released

2023-05-12 Thread Mark Thomas
The Apache Commons Team is pleased to announce the availability of Apache Commons Daemon 1.3.4. The Apache Commons Daemon software library provides a generic Daemon (unix) or Service (Windows) wrapper for Java code. Version 1.3.4 is a bugfix release. A full list of changes can be found at

[jira] [Updated] (DAEMON-458) The changes in DAEMON-446 cause existing DependsOn values to be removed

2023-05-12 Thread Mark Thomas (Jira)
[ https://issues.apache.org/jira/browse/DAEMON-458?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Mark Thomas updated DAEMON-458: --- Component/s: Procrun > The changes in DAEMON-446 cause existing DependsOn values to be remo

[VOTE][RESULT] Release Apache Commons Daemon 1.3.4 based on RC1

2023-05-12 Thread Mark Thomas
The following votes were cast: Binding: +1: ggregory, markt, kinow No other votes were cast. The vote therefore passes. Thanks to everyone who contributed to this release. Mark - To unsubscribe, e-mail:

Re: [tomcat] branch 10.1.x updated: Back-port virtual thread support

2023-05-12 Thread Mark Thomas
3949154e2f Back-port virtual thread support 3949154e2f is described below commit 3949154e2fab7e6ac40f67a8a708aeea1476a0f3 Author: Mark Thomas AuthorDate: Fri May 12 09:54:55 2023 +0100 Back-port virtual thread support Any reason not to back-port this all the way back to 8.5.x

Re: [VOTE] Release Apache Tomcat 8.5.89

2023-05-11 Thread Mark Thomas
On 11/05/2023 18:25, Igal Sapir wrote: On Thu, May 11, 2023 at 6:15 AM Mark Thomas wrote: On 10/05/2023 22:26, Christopher Schultz wrote: On 5/10/23 17:05, Igal Sapir wrote: That was a specific test case. I have the following entry in build.properties: test.entry

Re: [VOTE] Release Apache Tomcat 8.5.89

2023-05-11 Thread Mark Thomas
On 10/05/2023 22:26, Christopher Schultz wrote: On 5/10/23 17:05, Igal Sapir wrote: That was a specific test case.  I have the following entry in build.properties: test.entry=org.apache.catalina.filters.TestMapperWebapps Confirmed with the following command: ❯ ant echoproperties | grep

Re: Setting service parameters not work in Tomcat 8.5.85+

2023-05-11 Thread Mark Thomas
On 10/05/2023 22:06, Gilles Maurice wrote: Hello, Our product currently uses Tomcat 8.5.83. We wanted to upgrade to Tomcat 8.5.88 but our product fails to start up with this version. From my research I was able to determine the following facts: - Upgrade to 8.5.84 works fine - Upgrade to

Gump build switched to Java 21

2023-05-10 Thread Mark Thomas
Hi all, Tomcat 11 is about to move to requiring Java 21 so I have just switched Gump to building with the latest Java 21 EA. I am expecting things to break and for it to take a couple of days for me to get everything fixed. Fingers crossed... Mark

Re: [VOTE] Release Apache Tomcat 8.5.89

2023-05-10 Thread Mark Thomas
On 09/05/2023 23:28, Igal Sapir wrote: ch...@christopherschultz.net> wrote: The proposed 8.5.89 release is: [ ] Broken - do not release [ ] Stable - go ahead and release as 8.5.88 (stable) I get FAILED test for org.apache.catalina.mapper.TestMapperWebapps FWIW I got that error before so

[ANN] Apache Tomcat 11.0.0-M6 (alpha) available

2023-05-09 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat 11.0.0-M6 (alpha). Apache Tomcat 11 is an open source software implementation of the Jakarta Servlet, Jakarta Server Pages, Jakarta Expression Language, Jakarta WebSocket, Jakarta Authentication and Jakarta Annotations

Re: [VOTE] Release Apache Tomcat 8.5.89

2023-05-09 Thread Mark Thomas
On 09/05/2023 18:38, Christopher Schultz wrote: The proposed 8.5.89 release is: [ ] Broken - do not release [X] Stable - go ahead and release as 8.5.88 (stable) Same issue with the RateLimitFilter tests as the 10.1.x vote. Same fix addressed it. All other tests pass on Linux Windows and

[ANN] Apache Tomcat 11.0.0-M6 (alpha) available

2023-05-09 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat 11.0.0-M6 (alpha). Apache Tomcat 11 is an open source software implementation of the Jakarta Servlet, Jakarta Server Pages, Jakarta Expression Language, Jakarta WebSocket, Jakarta Authentication and Jakarta Annotations

[ANN] Apache Tomcat 11.0.0-M6 (alpha) available

2023-05-09 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat 11.0.0-M6 (alpha). Apache Tomcat 11 is an open source software implementation of the Jakarta Servlet, Jakarta Server Pages, Jakarta Expression Language, Jakarta WebSocket, Jakarta Authentication and Jakarta Annotations

[ANN] Apache Tomcat 11.0.0-M6 (alpha) available

2023-05-09 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat 11.0.0-M6 (alpha). Apache Tomcat 11 is an open source software implementation of the Jakarta Servlet, Jakarta Server Pages, Jakarta Expression Language, Jakarta WebSocket, Jakarta Authentication and Jakarta Annotations

Re: [VOTE] Release Apache Tomcat 10.1.9

2023-05-09 Thread Mark Thomas
On 09/05/2023 21:03, Igal Sapir wrote: On Tue, May 9, 2023 at 12:51 PM Mark Thomas wrote: The new rate limit tests failed in MacOs and on Windows but that is an issue with the tests and I am in the process of fixing it. Thanks Mark. I look forward to seeing your patch. It passed on my

Re: [VOTE] Release Apache Tomcat 10.1.9

2023-05-09 Thread Mark Thomas
On 09/05/2023 17:12, Christopher Schultz wrote: The proposed 10.1.9 release is: [ ] Broken - do not release [X] Stable - go ahead and release as 10.1.9 The new rate limit tests failed in MacOs and on Windows but that is an issue with the tests and I am in the process of fixing it.

[VOTE][RESULT] Release Apache Tomcat 11.0.0-M6

2023-05-09 Thread Mark Thomas
The following votes were cast: Binding: +1: lihan, remm, markt, isapir Non-binding: +1: Dimitris Soumis No other votes were cast. The vote therefore passes. Thanks to everyone who contributed to this release. Mark On 03/05/2023 19:38, Mark Thomas wrote: The proposed Apache Tomcat 11.0.0

Re: [VOTE] Release Apache Commons Daemon 1.3.4 based on RC1

2023-05-09 Thread Mark Thomas
On 05/05/2023 11:27, Mark Thomas wrote: Please review the release candidate and vote. This vote will close no sooner than 72 hours from now.   [X] +1 Release these artifacts   [ ] +0 OK, but...   [ ] -0 OK, but really should fix...   [ ] -1 I oppose this release because... Mark

[OT] Re: CommunityOverCode Asia 2023 is calling for Presentations!

2023-05-09 Thread Mark Thomas
Huxing, I'm not sure how much you are in contact with the conference organizers but I noted the following when looking at the conference site. If you are able to pass on these comments, I'd be grateful. - I was surprised to the see feather logo on the site. - The VIP tickets appear to be

Re: Java 21 and virtual threads

2023-05-09 Thread Mark Thomas
On 04/05/2023 13:37, Mark Thomas wrote: Hi all, The latest Java 21 EA build has moved virtual threads (from project Loom) out of preview. How do we want to handle this in Tomcat 11? Recall that Jakarta EE 11 has set Java 21 as the minimum version. I think we have the following options: 1

Tagging 10.1.x and 8.5.x

2023-05-09 Thread Mark Thomas
Chris, Have you had any thoughts on timing for the May tags? I could do them this month if that helps. Mark - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail:

Re: Java 21, virtual threads and ThreadLocals

2023-05-09 Thread Mark Thomas
On 05/05/2023 21:49, Rémy Maucherat wrote: The second question is what do we want to do about usages such as this. With virtual threads the end result will be, effectively, a new object for every request. Do we: a) Leave the code as-is. It will work as currently with a thread pool and virtual

Re: Workaround for misbehaving ClassLoader

2023-05-09 Thread Mark Thomas
On 05/05/2023 21:42, Christopher Schultz wrote: Mark, On 5/4/23 04:09, Mark Thomas wrote: On 03/05/2023 20:02, Christopher Schultz wrote: But my question is whether or not this is something that Tomcat should be working-around. IMO the parent ClassLoader is buggy and should be fixed

Re: Question in regards to the Connector allowHostHeaderMismatch when it is set to "false"

2023-05-09 Thread Mark Thomas
On 08/05/2023 22:04, Christopher Schultz wrote: On 5/8/23 10:39, Mark Thomas wrote: The port the client connects to is irrelevant. All that matters is the host in the request line and the host header. 1. The host header MUST be present 2. If a host is present in the request line it MUST

Re: Question in regards to the Connector allowHostHeaderMismatch when it is set to "false"

2023-05-08 Thread Mark Thomas
request line it MUST be identical (host and port) to the host header. Mark ________ From: Mark Thomas Sent: Friday, May 5, 2023 4:56 PM To: Tomcat Users List Subject: [EXTERNAL] Re: Question in regards to the Connector allowHostHeaderMismatch when it is set to "fal

Re: [VOTE] Release Apache Commons Daemon 1.3.4 based on RC1

2023-05-06 Thread Mark Thomas
n. This can be obtained from: https://github.com/mturk/cmsc Version: 15.0.44" Is this true for this release? Gary On 2023/05/05 10:27:23 Mark Thomas wrote: We have fixed a few bugs since Apache Commons Daemon 1.3.3 was released, so I would like to release Apache Commons Daemon 1.3.4. Apac

Re: [VOTE] Release Apache Commons Daemon 1.3.4 based on RC1

2023-05-06 Thread Mark Thomas
b.com/mturk/cmsc Version: 15.0.44" Is this true for this release? Yes. Mark Gary On 2023/05/05 10:27:23 Mark Thomas wrote: We have fixed a few bugs since Apache Commons Daemon 1.3.3 was released, so I would like to release Apache Commons Daemon 1.3.4. Apache Commons Daemon

Re: Question in regards to the Connector allowHostHeaderMismatch when it is set to "false"

2023-05-05 Thread Mark Thomas
5 May 2023 18:21:02 Alvaro Garay : Hi, Tomcat version: 9.0.73 Operating system: Unix z/OS System I have a question in regard to the Connector attribute allowHostHeaderMismatch=false which checks the request line is consistent with the Host Header. So in this scenario, I have the

Java 21, virtual threads and ThreadLocals

2023-05-05 Thread Mark Thomas
Hi all, I've started to review the use of ThreadLocal within the Tomcat code base given that using virtual threads will soon be an option. The first usage I came to raised a few questions. The usage is in ApplicationContext:

Re: [VOTE] Release Apache Tomcat 9.0.75

2023-05-05 Thread Mark Thomas
On 04/05/2023 15:20, Rémy Maucherat wrote: The proposed Apache Tomcat 9.0.75 release is now available for voting. The notable changes compared to 9.0.74 are: - Many improvements to the json access log valve. - Deprecate support for the HTTP Connector settings rejectIllegalHeader and

Re: [tomcat] 02/02: Move management of utility executor from init/destroy to start/stop

2023-05-05 Thread Mark Thomas
On 05/05/2023 13:17, Han Li wrote: On May 5, 2023, at 18:42, Mark Thomas wrote: On 05/05/2023 04:21, Han Li wrote: On May 4, 2023, at 21:41, ma...@apache.org wrote: This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository

Re: [tomcat] 02/02: Move management of utility executor from init/destroy to start/stop

2023-05-05 Thread Mark Thomas
4b097bf2e9075e9e2949ec5aa410cba3c2b85374 Author: Mark Thomas AuthorDate: Thu May 4 14:41:01 2023 +0100 Move management of utility executor from init/destroy to start/stop --- java/org/apache/catalina/connector/Connector.java | 13 +++--- java/org/apache/catalina/core/ContainerBase.java | 20 +++- java/org

Re: [VOTE] Release Apache Commons Daemon 1.3.4 based on RC1

2023-05-05 Thread Mark Thomas
/changes.xml#L43 Mark Gary On Fri, May 5, 2023, 06:31 Gary Gregory wrote: The release notes are empty. Gary On Fri, May 5, 2023, 06:27 Mark Thomas wrote: We have fixed a few bugs since Apache Commons Daemon 1.3.3 was released, so I would like to release Apache Commons Daemon 1.3.4. Apache

[VOTE] Release Apache Commons Daemon 1.3.4 based on RC1

2023-05-05 Thread Mark Thomas
OK, but really should fix... [ ] -1 I oppose this release because... Thank you, Mark Thomas, Release Manager (using key 10C01C5A2F6059E7) - To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org For additional commands, e

<    4   5   6   7   8   9   10   11   12   13   >