This is an automated email from the ASF dual-hosted git repository.
markt-asf pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tomcat-native.git
The following commit(s) were added to refs/heads/main by this push:
new 687aac5f4 Fix BZ 69988 post handshake authentication when using JSSE
style trust
687aac5f4 is described below
commit 687aac5f458b75d0122d627dd47ac814fb2ec7d4
Author: Mark Thomas <[email protected]>
AuthorDate: Thu Jun 11 16:29:51 2026 +0100
Fix BZ 69988 post handshake authentication when using JSSE style trust
---
native/src/ssl.c | 19 +++++++++++++++++++
xdocs/miscellaneous/changelog.xml | 4 ++++
2 files changed, 23 insertions(+)
diff --git a/native/src/ssl.c b/native/src/ssl.c
index 232faa1f0..84bad1388 100644
--- a/native/src/ssl.c
+++ b/native/src/ssl.c
@@ -851,6 +851,25 @@ TCN_IMPLEMENT_CALL(jint, SSL,
getPostHandshakeAuthInProgress)(TCN_STDARGS,
/*** End Twitter API Additions ***/
+TCN_IMPLEMENT_CALL(void, SSL, markPostHandshakeAuthComplete)(TCN_STDARGS,
+ jlong ssl /* SSL
* */) {
+#if defined(SSL_OP_NO_TLSv1_3)
+ SSL *ssl_ = J2P(ssl, SSL *);
+ tcn_ssl_conn_t *con;
+
+ if (ssl_ == NULL) {
+ tcn_ThrowException(e, "ssl is null");
+ return;
+ }
+
+ UNREFERENCED(o);
+
+ con = (tcn_ssl_conn_t *)SSL_get_app_data(ssl_);
+
+ con->pha_state = PHA_COMPLETE;
+#endif
+}
+
/*** Apple API Additions ***/
TCN_IMPLEMENT_CALL(jstring, SSL, getAlpnSelected)(TCN_STDARGS,
diff --git a/xdocs/miscellaneous/changelog.xml
b/xdocs/miscellaneous/changelog.xml
index 84f69015c..78fd8f09a 100644
--- a/xdocs/miscellaneous/changelog.xml
+++ b/xdocs/miscellaneous/changelog.xml
@@ -41,6 +41,10 @@
Fix two potential memory leaks on error paths identified by Copilot.
(markt)
</fix>
+ <fix>
+ <bug>69988</bug>: Fix post handshake authentication Tomcat is configured
+ with a trust store using JSSE style configuration. (markt)
+ </fix>
<fix>
<bug>70102</bug>: Correct expected size of tickets when calling
<code>SSLContext.setSessionTicketKeys</code>. (markt)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
