On Wed, Jan 7, 2026 at 11:45 AM Mark Thomas <[email protected]> wrote: > > On 07/01/2026 10:35, Rémy Maucherat wrote: > > On Tue, Jan 6, 2026 at 9:22 PM Mark Thomas <[email protected]> wrote: > >> > >> The key differences compared to 1.3.1 are: > >> > >> - The windows binaries in this release have been built with OpenSSL > >> 3.0.18 and APR 1.7.6 > >> > >> - OCSP support is included (but not enabled) by default with various > >> improvements to the OCSP checks > >> > >> - Add the ability to configure TLS 1.3 ciphers > >> > >> The proposed release artifacts can be found at [1], > >> and the build was done using tag [2]. > >> > >> The Apache Tomcat Native 1.3.3 release is > >> [X] Stable, go ahead and release > >> [ ] Broken because of ... > > > > Tentative +1, but TestClientCertTls13 does not pass for me with APR. > > Which Tomcat 9 version? I fixed an issue in the Tomcat tests that was > triggering a failure like that yesterday. > > https://github.com/apache/tomcat/commit/8f001ef3
Oh ok, I missed it since I'm usually looking at the updates to main, and it works fine now. My 9.0 was a very old version from Monday. Rémy > Mark > > > > Not sure why right now. All the other TLS tests are ok. > > > > No problem with NIO OpenSSL and OpenSSL FFM. > > > > Testcase: testClientCertPost[OpenSSL] took 0.844 sec > > Caused an ERROR > > (unknown_ca) Received fatal alert: unknown_ca > > javax.net.ssl.SSLHandshakeException: (unknown_ca) Received fatal > > alert: unknown_ca > > at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:130) > > at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:117) > > at > > java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:363) > > at > > java.base/sun.security.ssl.Alert$AlertConsumer.consume(Alert.java:287) > > at > > java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:202) > > at > > java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:172) > > at > > java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1509) > > at > > java.base/sun.security.ssl.SSLSocketImpl.readApplicationRecord(SSLSocketImpl.java:1480) > > at > > java.base/sun.security.ssl.SSLSocketImpl$AppInputStream.read(SSLSocketImpl.java:1068) > > at > > java.base/java.io.BufferedInputStream.fill(BufferedInputStream.java:289) > > at > > java.base/java.io.BufferedInputStream.read1(BufferedInputStream.java:330) > > at > > java.base/java.io.BufferedInputStream.read(BufferedInputStream.java:388) > > at > > java.base/sun.net.www.http.HttpClient.parseHTTPHeader(HttpClient.java:795) > > at java.base/sun.net.www.http.HttpClient.parseHTTP(HttpClient.java:727) > > at java.base/sun.net.www.http.HttpClient.parseHTTP(HttpClient.java:754) > > at > > java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1392) > > at > > java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1302) > > at > > java.base/java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:493) > > at > > java.base/sun.net.www.protocol.https.HttpsURLConnectionImpl.getResponseCode(HttpsURLConnectionImpl.java:307) > > at > > org.apache.catalina.startup.TomcatBaseTest.postUrl(TomcatBaseTest.java:827) > > at > > org.apache.catalina.startup.TomcatBaseTest.postUrl(TomcatBaseTest.java:782) > > at > > org.apache.catalina.startup.TomcatBaseTest.postUrl(TomcatBaseTest.java:753) > > at > > org.apache.tomcat.util.net.TestClientCertTls13.testClientCertPost(TestClientCertTls13.java:105) > > at > > java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:104) > > > > Testcase: testClientCertGet[OpenSSL] took 0.052 sec > > Caused an ERROR > > Broken pipe > > java.net.SocketException: Broken pipe > > at java.base/sun.nio.ch.SocketDispatcher.write0(Native Method) > > at > > java.base/sun.nio.ch.SocketDispatcher.write(SocketDispatcher.java:65) > > at java.base/sun.nio.ch.NioSocketImpl.tryWrite(NioSocketImpl.java:402) > > at java.base/sun.nio.ch.NioSocketImpl.implWrite(NioSocketImpl.java:418) > > at java.base/sun.nio.ch.NioSocketImpl.write(NioSocketImpl.java:448) > > at java.base/sun.nio.ch.NioSocketImpl$2.write(NioSocketImpl.java:821) > > at > > java.base/java.net.Socket$SocketOutputStream.implWrite(Socket.java:1086) > > at java.base/java.net.Socket$SocketOutputStream.write(Socket.java:1076) > > at > > java.base/sun.security.ssl.SSLSocketOutputRecord.flush(SSLSocketOutputRecord.java:271) > > at > > java.base/sun.security.ssl.HandshakeOutStream.flush(HandshakeOutStream.java:89) > > at > > java.base/sun.security.ssl.Finished$T13FinishedProducer.onProduceFinished(Finished.java:691) > > at > > java.base/sun.security.ssl.Finished$T13FinishedProducer.produce(Finished.java:670) > > at > > java.base/sun.security.ssl.SSLHandshake.produce(SSLHandshake.java:465) > > at > > java.base/sun.security.ssl.Finished$T13FinishedConsumer.onConsumeFinished(Finished.java:1036) > > at > > java.base/sun.security.ssl.Finished$T13FinishedConsumer.consume(Finished.java:892) > > at > > java.base/sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:421) > > at > > java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:477) > > at > > java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:448) > > at > > java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:199) > > at > > java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:172) > > at > > java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1506) > > at > > java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1421) > > at > > java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:455) > > at > > java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:426) > > at > > java.base/sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:483) > > at > > java.base/sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:187) > > at > > java.base/sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:141) > > at > > org.apache.catalina.startup.TomcatBaseTest.methodUrl(TomcatBaseTest.java:715) > > at > > org.apache.catalina.startup.TomcatBaseTest.methodUrl(TomcatBaseTest.java:689) > > at > > org.apache.catalina.startup.TomcatBaseTest.getUrl(TomcatBaseTest.java:683) > > at > > org.apache.catalina.startup.TomcatBaseTest.getUrl(TomcatBaseTest.java:677) > > at > > org.apache.catalina.startup.TomcatBaseTest.getUrl(TomcatBaseTest.java:662) > > at > > org.apache.catalina.startup.TomcatBaseTest.getUrl(TomcatBaseTest.java:656) > > at > > org.apache.tomcat.util.net.TestClientCertTls13.testClientCertGet(TestClientCertTls13.java:86) > > at > > java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:104) > > > > Rémy > > > >> Thanks, > >> > >> Mark > >> > >> > >> [1] > >> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-connectors/native/1.3.3 > >> [2] > >> https://github.com/apache/tomcat-native/commit/e083c3ad8fe20e344e9508afb39aef0be2d480fd > >> > >> --------------------------------------------------------------------- > >> To unsubscribe, e-mail: [email protected] > >> For additional commands, e-mail: [email protected] > >> > > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: [email protected] > > For additional commands, e-mail: [email protected] > > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
