I'm sad to have to cancel this release.

Actually, the LDAP API itself works well, but when testing with the server, I get some breakage in some TLS tests. After a couple of days analysis the situation, it's worse than what I thought: it's goes down to MINA latest version (2.2.4) which has introduced some breakage. When I rolled back to 2.2.2, the Directory TLS tests are now passing green.


I have two options here:
- rollback to MINA 2.2.3 and start a new vote, assuming that the changes in MINA 2.2.4 were mainly to mitigate a potential CVE when using a feature we don't use - Or get MINA 2.2.5 out with a fix, then cut a new Apache LDAP API new release.

The second path is probably the best, we can wait a couple more weeks...

Let me know what you're thoughts on this.

Thanks!

On 11/02/2025 14:48, Emmanuel Lécharny wrote:
To be clear:

I have some randomly failing SaslBindIT tests filing when using LDAPs out StartTLS, and when transfering big chunk of data (like 500kb).

Which makes it hard to debug...

On 11/02/2025 08:50, Emmanuel Lecharny wrote:
Hi,


I'd like to suspend the vote to take the time to check that the lib works with Java 21. It seems we get some breakage when using TLS on a Java 21 JVM (and it's random). It may be caused by MINA 2.2.4.


I'll keep you informed.

Le 10/02/2025 à 05:57, Colm O hEigeartaigh a écrit :
+1.

Colm.

On Sat, Feb 8, 2025 at 3:45 PM Shawn McKinney <smckin...@apache.org> wrote:

On Feb 7, 2025, at 10:25 PM, Emmanuel Lecharny <elecha...@apache.org> wrote:

Please cast your votes:
[ ] +1 Release Apache LDAP API 2.1.8
[ ] 0 abstain
[ ] -1 Do not release Apache LDAP API 2.1.8

+ 1 Release Apache LDAP 2.1.8

Built source, ran tests, compiled and ran w/ fortress integration tests. Everything good on Java 17/Maven 3.9.9.

Nice work Emmanuel!

—
Shawn
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org
For additional commands, e-mail: dev-h...@directory.apache.org

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org
For additional commands, e-mail: dev-h...@directory.apache.org



--
------------------------ Emmanuel Lécharny emm...@worteks.com
elecha...@apache.org ------------------------

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org
For additional commands, e-mail: dev-h...@directory.apache.org

Reply via email to