On Thu, Oct 2, 2025 at 4:05 PM Christopher Schultz <
[email protected]> wrote:

> Mark,
>
> Thanks for RMing.
>
> On 10/1/25 4:00 AM, Mark Thomas wrote:
> > The proposed Apache Tomcat 11.0.12 release is now available for voting.
> >
> > The notable changes compared to 11.0.11 include:
> >
> > - Add specific certificate selection code for TLS 1.3 supporting post
> >    quantum cryptography. Certificates defined with type MLDSA will be
> >    selected depending on the TLS client hello.
> >
> > - Add groups attribute on SSLHostConfig allowing to restrict which
> >    groups can be enabled on the SSL engine.
> >
> > - Store HTTP/1.1 request headers using the original case for the header
> >    name rather than forcing it to lower case.
> >
> >
> > For full details, see the change log:
> > https://nightlies.apache.org/tomcat/tomcat-11.0.x/docs/changelog.html
> >
> > Applications that run on Tomcat 9 and earlier will not run on Tomcat 11
> > without changes. Java EE applications designed for Tomcat 9 and earlier
> > may be placed in the $CATALINA_BASE/webapps-javaee directory and Tomcat
> > will automatically convert them to Jakarta EE and copy them to the
> > webapps directory. Applications using deprecated APIs may require
> > further changes.
> >
> > It can be obtained from:
> > https://dist.apache.org/repos/dist/dev/tomcat/tomcat-11/v11.0.12/
> >
> > The Maven staging repo is:
> > https://repository.apache.org/content/repositories/orgapachetomcat-1560
> >
> > The tag is:
> > https://github.com/apache/tomcat/tree/11.0.12
> > 7be88ea333d4b1f0ff75b8f4bc743f7f25262886
> >
> > The proposed 11.0.12 release is:
> > [ ] -1 Broken - do not release
> > [X] +1 Stable - go ahead and release as 11.0.12
>

+1 for stable release

Build is reproducible and unit tests pass on Linux with Java 25

Igal



>
> +1 for stable release
>
> The build is 100% reproducible on MacOS aarch64, and all unit tests
> pass. I did have to re-run the
> websocket.TestWsWebSocketContainerTimeoutServer as it failed on the
> first go-around, but I suspect it's very condition-dependent.
>
> Details:
>
> * Environment
> *  Java (build):    openjdk version "25" 2025-09-16 LTS OpenJDK Runtime
> Environment Temurin-25+36 (build 25+36-LTS) OpenJDK 64-Bit Server VM
> Temurin-25+36 (build 25+36-LTS, mixed mode, sharing)
> *  Java (test):     openjdk version "25" 2025-09-16 LTS OpenJDK Runtime
> Environment Temurin-25+36 (build 25+36-LTS) OpenJDK 64-Bit Server VM
> Temurin-25+36 (build 25+36-LTS, mixed mode, sharing)
> *  Ant:             Apache Ant(TM) version 1.10.15 compiled on August 25
> 2024
> *  OS:              Darwin 24.6.0 arm64
> *  cc:              Apple clang version 17.0.0 (clang-1700.0.13.5)
> *  make:            GNU Make 3.81
> *  OpenSSL:         OpenSSL 3.5.2 5 Aug 2025 (Library: OpenSSL 3.5.2 5
> Aug 2025)
> *  APR:             1.7.6
> *
> * Valid SHA-512 signature for apache-tomcat-11.0.12.zip
> * Valid GPG signature for apache-tomcat-11.0.12.zip
> * Valid SHA-512 signature for apache-tomcat-11.0.12.tar.gz
> * Valid GPG signature for apache-tomcat-11.0.12.tar.gz
> * Valid SHA-512 signature for apache-tomcat-11.0.12.exe
> * Valid GPG signature for apache-tomcat-11.0.12.exe
> * Valid Windows Digital Signature for apache-tomcat-11.0.12.exe
> * Valid SHA512 signature for apache-tomcat-11.0.12-src.zip
> * Valid GPG signature for apache-tomcat-11.0.12-src.zip
> * Valid SHA512 signature for apache-tomcat-11.0.12-src.tar.gz
> * Valid GPG signature for apache-tomcat-11.0.12-src.tar.gz
> *
> * Binary Zip and tarball: Same
> * Source Zip and tarball: Same
> *
> * Building dependencies returned: 0
> * Tomcat builds cleanly
> * tcnative builds cleanly
> * Junit Tests: PASSED
> *
> * Signature MATCH for bin/apache-tomcat-11.0.12-deployer.tar.gz
> * Signature MATCH for bin/apache-tomcat-11.0.12-deployer.zip
> * Signature MATCH for bin/apache-tomcat-11.0.12-fulldocs.tar.gz
> * Signature MATCH for bin/apache-tomcat-11.0.12-windows-x64.zip
> * Signature MATCH for bin/apache-tomcat-11.0.12-windows-x86.zip
> * Signature MATCH for bin/apache-tomcat-11.0.12.exe
> * Signature MATCH for bin/apache-tomcat-11.0.12.tar.gz
> * Signature MATCH for bin/apache-tomcat-11.0.12.zip
> * Signature MATCH for src/apache-tomcat-11.0.12-src.tar.gz
> * Signature MATCH for src/apache-tomcat-11.0.12-src.zip
> *
> *
> *                 SSSS                   SSSS
> *                 S  SS                 SS  S
> *                SS   S                 S   SS
> *                SS   S                 S   SS
> *               SS   SS                 S   SS
> *              SS    S                  S    SS
> *            SSS    SS                  SS    SSS
> *           SS     SS                    SS     SS
> *          SS      SS                    SS      SS
> *         SS       S                       S       SS
> *        SS        SSSSSSS           SSSSSSS        SS
> *    SSSSS               SSS       SSS               SSSS
> *   SSS            SSSS    SS     SS    SSSS            SS
> *  SS            SSS  SSS   S     S   SSS  SSS           S
> *  S            SSS        SS     SS        SSS           S
> *  S            SSSSSS    SS       SS    SSSSSS           S
> *  S           SS    SSSSSSS       SSSSSSS    SS          S
> *  S           SSSS       SS       SS       SSSS          S
> *  SS         SS  SSSSSSSSS         SSSSSSSSS  SS        S
> *   SSSS     SSSS        S           S        SSSS      SS
> *    SSSSS    SSSSSS    SS           SS    SSSSSS    SSSS
> *        SS  SS    SSSSSS             SSSSSS    SS  SS
> *         SSS SSS     S                S     SSS SSS
> *           SSSSSSSSSS                  SSSSSSSSS
> *
> *
> * All signatures are verified; the build appears to be 100%
> * reproducible.
>
> -chris
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]
>
>

Reply via email to