On 07/01/2026 10:35, Rémy Maucherat wrote:
On Tue, Jan 6, 2026 at 9:22 PM Mark Thomas <[email protected]> wrote:
The key differences compared to 1.3.1 are:
- The windows binaries in this release have been built with OpenSSL
3.0.18 and APR 1.7.6
- OCSP support is included (but not enabled) by default with various
improvements to the OCSP checks
- Add the ability to configure TLS 1.3 ciphers
The proposed release artifacts can be found at [1],
and the build was done using tag [2].
The Apache Tomcat Native 1.3.3 release is
[X] Stable, go ahead and release
[ ] Broken because of ...
Tentative +1, but TestClientCertTls13 does not pass for me with APR.
Which Tomcat 9 version? I fixed an issue in the Tomcat tests that was
triggering a failure like that yesterday.
https://github.com/apache/tomcat/commit/8f001ef3
Mark
Not sure why right now. All the other TLS tests are ok.
No problem with NIO OpenSSL and OpenSSL FFM.
Testcase: testClientCertPost[OpenSSL] took 0.844 sec
Caused an ERROR
(unknown_ca) Received fatal alert: unknown_ca
javax.net.ssl.SSLHandshakeException: (unknown_ca) Received fatal
alert: unknown_ca
at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:130)
at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:117)
at
java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:363)
at java.base/sun.security.ssl.Alert$AlertConsumer.consume(Alert.java:287)
at
java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:202)
at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:172)
at java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1509)
at
java.base/sun.security.ssl.SSLSocketImpl.readApplicationRecord(SSLSocketImpl.java:1480)
at
java.base/sun.security.ssl.SSLSocketImpl$AppInputStream.read(SSLSocketImpl.java:1068)
at java.base/java.io.BufferedInputStream.fill(BufferedInputStream.java:289)
at
java.base/java.io.BufferedInputStream.read1(BufferedInputStream.java:330)
at java.base/java.io.BufferedInputStream.read(BufferedInputStream.java:388)
at
java.base/sun.net.www.http.HttpClient.parseHTTPHeader(HttpClient.java:795)
at java.base/sun.net.www.http.HttpClient.parseHTTP(HttpClient.java:727)
at java.base/sun.net.www.http.HttpClient.parseHTTP(HttpClient.java:754)
at
java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1392)
at
java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1302)
at
java.base/java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:493)
at
java.base/sun.net.www.protocol.https.HttpsURLConnectionImpl.getResponseCode(HttpsURLConnectionImpl.java:307)
at
org.apache.catalina.startup.TomcatBaseTest.postUrl(TomcatBaseTest.java:827)
at
org.apache.catalina.startup.TomcatBaseTest.postUrl(TomcatBaseTest.java:782)
at
org.apache.catalina.startup.TomcatBaseTest.postUrl(TomcatBaseTest.java:753)
at
org.apache.tomcat.util.net.TestClientCertTls13.testClientCertPost(TestClientCertTls13.java:105)
at
java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:104)
Testcase: testClientCertGet[OpenSSL] took 0.052 sec
Caused an ERROR
Broken pipe
java.net.SocketException: Broken pipe
at java.base/sun.nio.ch.SocketDispatcher.write0(Native Method)
at java.base/sun.nio.ch.SocketDispatcher.write(SocketDispatcher.java:65)
at java.base/sun.nio.ch.NioSocketImpl.tryWrite(NioSocketImpl.java:402)
at java.base/sun.nio.ch.NioSocketImpl.implWrite(NioSocketImpl.java:418)
at java.base/sun.nio.ch.NioSocketImpl.write(NioSocketImpl.java:448)
at java.base/sun.nio.ch.NioSocketImpl$2.write(NioSocketImpl.java:821)
at java.base/java.net.Socket$SocketOutputStream.implWrite(Socket.java:1086)
at java.base/java.net.Socket$SocketOutputStream.write(Socket.java:1076)
at
java.base/sun.security.ssl.SSLSocketOutputRecord.flush(SSLSocketOutputRecord.java:271)
at
java.base/sun.security.ssl.HandshakeOutStream.flush(HandshakeOutStream.java:89)
at
java.base/sun.security.ssl.Finished$T13FinishedProducer.onProduceFinished(Finished.java:691)
at
java.base/sun.security.ssl.Finished$T13FinishedProducer.produce(Finished.java:670)
at java.base/sun.security.ssl.SSLHandshake.produce(SSLHandshake.java:465)
at
java.base/sun.security.ssl.Finished$T13FinishedConsumer.onConsumeFinished(Finished.java:1036)
at
java.base/sun.security.ssl.Finished$T13FinishedConsumer.consume(Finished.java:892)
at java.base/sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:421)
at
java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:477)
at
java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:448)
at
java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:199)
at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:172)
at java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1506)
at
java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1421)
at
java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:455)
at
java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:426)
at
java.base/sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:483)
at
java.base/sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:187)
at
java.base/sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:141)
at
org.apache.catalina.startup.TomcatBaseTest.methodUrl(TomcatBaseTest.java:715)
at
org.apache.catalina.startup.TomcatBaseTest.methodUrl(TomcatBaseTest.java:689)
at
org.apache.catalina.startup.TomcatBaseTest.getUrl(TomcatBaseTest.java:683)
at
org.apache.catalina.startup.TomcatBaseTest.getUrl(TomcatBaseTest.java:677)
at
org.apache.catalina.startup.TomcatBaseTest.getUrl(TomcatBaseTest.java:662)
at
org.apache.catalina.startup.TomcatBaseTest.getUrl(TomcatBaseTest.java:656)
at
org.apache.tomcat.util.net.TestClientCertTls13.testClientCertGet(TestClientCertTls13.java:86)
at
java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:104)
Rémy
Thanks,
Mark
[1]
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-connectors/native/1.3.3
[2]
https://github.com/apache/tomcat-native/commit/e083c3ad8fe20e344e9508afb39aef0be2d480fd
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
