On Tue, Jan 6, 2026 at 9:22 PM Mark Thomas <[email protected]> wrote:
>
> The key differences compared to 1.3.1 are:
>
> - The windows binaries in this release have been built with OpenSSL
> 3.0.18 and APR 1.7.6
>
> - OCSP support is included (but not enabled) by default with various
> improvements to the OCSP checks
>
> - Add the ability to configure TLS 1.3 ciphers
>
> The proposed release artifacts can be found at [1],
> and the build was done using tag [2].
>
> The Apache Tomcat Native 1.3.3 release is
> [X] Stable, go ahead and release
> [ ] Broken because of ...
Tentative +1, but TestClientCertTls13 does not pass for me with APR.
Not sure why right now. All the other TLS tests are ok.
No problem with NIO OpenSSL and OpenSSL FFM.
Testcase: testClientCertPost[OpenSSL] took 0.844 sec
Caused an ERROR
(unknown_ca) Received fatal alert: unknown_ca
javax.net.ssl.SSLHandshakeException: (unknown_ca) Received fatal
alert: unknown_ca
at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:130)
at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:117)
at
java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:363)
at java.base/sun.security.ssl.Alert$AlertConsumer.consume(Alert.java:287)
at
java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:202)
at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:172)
at java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1509)
at
java.base/sun.security.ssl.SSLSocketImpl.readApplicationRecord(SSLSocketImpl.java:1480)
at
java.base/sun.security.ssl.SSLSocketImpl$AppInputStream.read(SSLSocketImpl.java:1068)
at java.base/java.io.BufferedInputStream.fill(BufferedInputStream.java:289)
at java.base/java.io.BufferedInputStream.read1(BufferedInputStream.java:330)
at java.base/java.io.BufferedInputStream.read(BufferedInputStream.java:388)
at
java.base/sun.net.www.http.HttpClient.parseHTTPHeader(HttpClient.java:795)
at java.base/sun.net.www.http.HttpClient.parseHTTP(HttpClient.java:727)
at java.base/sun.net.www.http.HttpClient.parseHTTP(HttpClient.java:754)
at
java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1392)
at
java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1302)
at
java.base/java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:493)
at
java.base/sun.net.www.protocol.https.HttpsURLConnectionImpl.getResponseCode(HttpsURLConnectionImpl.java:307)
at
org.apache.catalina.startup.TomcatBaseTest.postUrl(TomcatBaseTest.java:827)
at
org.apache.catalina.startup.TomcatBaseTest.postUrl(TomcatBaseTest.java:782)
at
org.apache.catalina.startup.TomcatBaseTest.postUrl(TomcatBaseTest.java:753)
at
org.apache.tomcat.util.net.TestClientCertTls13.testClientCertPost(TestClientCertTls13.java:105)
at
java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:104)
Testcase: testClientCertGet[OpenSSL] took 0.052 sec
Caused an ERROR
Broken pipe
java.net.SocketException: Broken pipe
at java.base/sun.nio.ch.SocketDispatcher.write0(Native Method)
at java.base/sun.nio.ch.SocketDispatcher.write(SocketDispatcher.java:65)
at java.base/sun.nio.ch.NioSocketImpl.tryWrite(NioSocketImpl.java:402)
at java.base/sun.nio.ch.NioSocketImpl.implWrite(NioSocketImpl.java:418)
at java.base/sun.nio.ch.NioSocketImpl.write(NioSocketImpl.java:448)
at java.base/sun.nio.ch.NioSocketImpl$2.write(NioSocketImpl.java:821)
at java.base/java.net.Socket$SocketOutputStream.implWrite(Socket.java:1086)
at java.base/java.net.Socket$SocketOutputStream.write(Socket.java:1076)
at
java.base/sun.security.ssl.SSLSocketOutputRecord.flush(SSLSocketOutputRecord.java:271)
at
java.base/sun.security.ssl.HandshakeOutStream.flush(HandshakeOutStream.java:89)
at
java.base/sun.security.ssl.Finished$T13FinishedProducer.onProduceFinished(Finished.java:691)
at
java.base/sun.security.ssl.Finished$T13FinishedProducer.produce(Finished.java:670)
at java.base/sun.security.ssl.SSLHandshake.produce(SSLHandshake.java:465)
at
java.base/sun.security.ssl.Finished$T13FinishedConsumer.onConsumeFinished(Finished.java:1036)
at
java.base/sun.security.ssl.Finished$T13FinishedConsumer.consume(Finished.java:892)
at java.base/sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:421)
at
java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:477)
at
java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:448)
at
java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:199)
at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:172)
at java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1506)
at
java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1421)
at
java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:455)
at
java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:426)
at
java.base/sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:483)
at
java.base/sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:187)
at
java.base/sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:141)
at
org.apache.catalina.startup.TomcatBaseTest.methodUrl(TomcatBaseTest.java:715)
at
org.apache.catalina.startup.TomcatBaseTest.methodUrl(TomcatBaseTest.java:689)
at
org.apache.catalina.startup.TomcatBaseTest.getUrl(TomcatBaseTest.java:683)
at
org.apache.catalina.startup.TomcatBaseTest.getUrl(TomcatBaseTest.java:677)
at
org.apache.catalina.startup.TomcatBaseTest.getUrl(TomcatBaseTest.java:662)
at
org.apache.catalina.startup.TomcatBaseTest.getUrl(TomcatBaseTest.java:656)
at
org.apache.tomcat.util.net.TestClientCertTls13.testClientCertGet(TestClientCertTls13.java:86)
at
java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:104)
Rémy
> Thanks,
>
> Mark
>
>
> [1]
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-connectors/native/1.3.3
> [2]
> https://github.com/apache/tomcat-native/commit/e083c3ad8fe20e344e9508afb39aef0be2d480fd
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]
>
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
