This bug was fixed in the package tomcat-native - 1.2.21-1~18.04.1build1
---
tomcat-native (1.2.21-1~18.04.1build1) bionic; urgency=medium
* No-change rebuild to pick up new libssl 1.1 version (LP: #1854072)
-- Dan Streetman Tue, 26 Nov 2019 11:46:24
-0500
** Changed in:
original reporter let me know the rebuild package does work correctly,
and they are now able to use tls1.3; marking this as verified.
** Tags removed: sts-sponsor sts-sponsor-ddstreet verification-needed
verification-needed-bionic
** Tags added: verification-done verification-done-bionic
--
** Changed in: tomcat-native (Ubuntu)
Importance: Undecided => Medium
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1854072
Title:
tomcat-native needs recompile to use TLSv1.3 from openssl 1.1
status update - I'm waiting on the original reporter to verify the
package in -proposed, but due to the holidays, verification may be
delayed until 2020.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
Hello Dan, or anyone else affected,
Accepted tomcat-native into bionic-proposed. The package will build now
and be available at https://launchpad.net/ubuntu/+source/tomcat-
native/1.2.21-1~18.04.1build1 in a few hours, and then in the -proposed
repository.
Please help us by testing this new
I asked tdaitx (java expert) for a quick review:
tdaitx you're the java guy, right? can you review this upload to
make sure i got the facts right? it's a simple no-change rebuild, but i don't
have experience with tomcat or static JNI libs so would be good to confirm the
explanation of why
** Description changed:
[impact]
the libtcnative-1 package contains both a dynamic libtcnative-1.so lib,
as well as a static libtcnative-1.a lib. Normal java applications will
use the dynamic library, and it is correctly linked to the system's
installed libssl library. However, the
** Description changed:
[impact]
- tomcat9's ssl code includes:
+ the libtcnative-1 package contains both a dynamic libtcnative-1.so lib,
+ as well as a static libtcnative-1.a lib. Normal java applications will
+ use the dynamic library, and it is correctly linked to the system's
+
** Description changed:
[impact]
tomcat9's ssl code includes:
from org/apache/tomcat/jni/SSL.java:
/* Return OpenSSL version number (compile time version, if version <
1.1.0) */
public static native int version();
from
