Am 02.10.25 um 14:32 schrieb Christopher Schultz:
The proposed Apache Tomcat 10.1.47 release is now available for
voting.
All committers and PMC members are kindly requested to provide a vote if
possible. ANY TOMCAT USER MAY VOTE, though only PMC members votes are
binding. We welcome non-committer votes or comments on release builds.
The notable changes compared to 10.1.46 are:
- Add specific certificate selection code for TLS 1.3 supporting post
quantum cryptography. Certificates defined with type MLDSA will be
selected depending on the TLS client hello.
- Add groups attribute on SSLHostConfig allowing to restrict which
groups can be enabled on the SSL engine.
- Store HTTP/1.1 request headers using the original case for the header
name rather than forcing it to lower case.
For full details, see the change log:
https://nightlies.apache.org/tomcat/tomcat-10.1.x/docs/changelog.html
Applications that run on Tomcat 9 and earlier will not run on Tomcat 10
without changes. Java EE applications designed for Tomcat 9 and earlier
may be placed in the $CATALINA_BASE/webapps-javaee directory and Tomcat
will automatically convert them to Jakarta EE and copy them to the
webapps directory.
It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-10/v10.1.47/
The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1562
The tag is:
https://github.com/apache/tomcat/tree/10.1.47
https://github.com/apache/tomcat/
commit/17550edb0646a42c0c52e9272c3717a0f7888a68
Please reply with a +1 for release or +0/-0/-1 with an explanation.
+1 to release.
Reproducibility of the build checked (including the Windows installer)
on Linux Mint 22.2. OK after setting LANG. Checked manually plus with
"ant verify-release".
Original Windows installer signature verified with osslsigncode.
dist file list correct, hashes OK, gpg signatures OK.
Unit tests ran on platforms
- RHEL 6, 7, 8 and 9, SLES 11, 12 and 15, Solaris 11
using
- recent patch versions of JDK 11, 17, 21, 25 and 26 (EA 16)
from
- Eclipse Adoptium, Azul Zulu, Amazon Coretto, Oracle, RedHat and
OpenJDK (for 26)
where available.
Also tested with
- tcnative 1.3.1, 2.0.9 and panama
based on
- OpenSSL 3.0.18, 3.4.3, 3.5.4 and 3.6.0.
All test runs fine, except for
- the usual sporadic crashes with tcnative during shutdown.
- sporadic, but a bit too frequent failures in
org.apache.coyote.http2.TestCancelledUpload
(no regression; for details see mail about 11.0.10)
Thanks for RM!
Best regards,
Rainer
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
