Am 11.06.26 um 21:03 schrieb Mark Thomas:
The key differences in version 2.0.15 compared to 2.0.14 are:
- Windows binaries built with OpenSSL 3.5.7
- Fix post handshake authentication when using TLS 1.3
- Fix a small number of small memory leaks
The 2.0.x branch is primarily intended for use with Tomcat 10.1.x
onwards but can be used with earlier versions as long as the APR/native
connector is not used.
The proposed release artifacts can be found at [1],
and the build was done using tag [2].
The Apache Tomcat Native 2.0.15 release is
[X] Stable, go ahead and release
[ ] Broken because of ...
Thanks,
Mark
+1 for release
- checked artefacts for completeness
- checked artefact gpg signatures and sha512 hashes
- compared source tarballs against git sources
- checked OpenSSL version in Windows binaries
- checked some consistencies against own jnirelease.sh results
- built it against OpenSSL 3.6.3, 3.5.7 and 3.0.21, each on the
Platforms SLES 12 and 15 and RHEL 7, 8, 9 and 10 (all x86_64) and
Solaris 10 Sparc. APR was 1.7.6.
- only build warnings with OpenSSL 4 (constness); see below A)
- tested via TC unit tests with tcnative/OpenSSL but only the SSL/TLS
related tests on the above platforms using yesterdays head of TC 11.0.x,
10.1.x and 9.0.x with latest patch levels of JDK 8, 11, 17, 21, 25, 26
and 27 (where applicable) from Adoptium Temurin, Amazon Corretto, Azul
Zulu, Oracle, RedHat and OpenJDK (only a few vendor-version combinations
were tested).
- Only few crashes, most of them for RHEL 10
- Permission in the source tarball fine
A) Compilation warnings
:::::::::::::::::::::::
Only in combination with OpenSSL 4:
src/sslutils.c: In function 'ssl_ocsp_request':
src/sslutils.c:1106:13: warning: assignment discards 'const' qualifier
from pointer target type [-Wdiscarded-qualifiers]
1106 | ext = X509_get_ext(cert,nid);
| ^
src/sslutils.c:1107:12: warning: assignment discards 'const' qualifier
from pointer target type [-Wdiscarded-qualifiers]
1107 | os = X509_EXTENSION_get_data(ext);
| ^
Thanks for RM!
Best Regards,
Rainer
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
