Mark,

Thanks for RMing.

On 6/11/26 3:03 PM, Mark Thomas wrote:
The key differences in version 2.0.15 compared to 2.0.14 are:

- Windows binaries built with OpenSSL 3.5.7

- Fix post handshake authentication when using TLS 1.3

- Fix a small number of small memory leaks


The 2.0.x branch is primarily intended for use with Tomcat 10.1.x onwards but can be used with earlier versions as long as the APR/native connector is not used.

The proposed release artifacts can be found at [1],
and the build was done using tag [2].

The Apache Tomcat Native 2.0.15 release is
  [ ] Stable, go ahead and release
  [ ] Broken because of ...

+1 for stable release

tcnative builds cleanly on MacOS and all unit tests pass in Tomcat main.

Details:

* Environment
* OS:       Darwin 25.3.0 arm64
* cc:       Apple clang version 21.0.0 (clang-2100.1.1.101)
* make:     GNU Make 3.81
* OpenSSL:   OpenSSL 3.6.2 7 Apr 2026 (Library: OpenSSL 3.6.2 7 Apr 2026)
* tcnative statically-linked OpenSSL version: 3.5.7
* APR:       1.7.6
* Valid SHA-512 signature for tomcat-native-2.0.15-openssl-3.5.7-win32-bin.zip
* Valid GPG signature for tomcat-native-2.0.15-openssl-3.5.7-win32-bin.zip
* Valid SHA512 signature for tomcat-native-2.0.15-win32-src.zip
* Valid GPG signature for tomcat-native-2.0.15-win32-src.zip
* Valid SHA512 signature for tomcat-native-2.0.15-src.tar.gz
* Valid GPG signature for tomcat-native-2.0.15-src.tar.gz
* Source Zip and tarball: !! NOT SAME
* tcnative builds cleanly

Source Zip and tarball differ:

Only in tarball/tomcat-native-2.0.15-src/native: aclocal.m4
Only in tarball/tomcat-native-2.0.15-src/native/build: apr_common.m4
Only in tarball/tomcat-native-2.0.15-src/native/build: config.guess
Only in tarball/tomcat-native-2.0.15-src/native/build: config.sub
Only in tarball/tomcat-native-2.0.15-src/native/build: find_apr.m4
Only in tarball/tomcat-native-2.0.15-src/native/build: install-sh
Only in tarball/tomcat-native-2.0.15-src/native/build: install.sh
Only in tarball/tomcat-native-2.0.15-src/native/build: ltmain.sh
Only in tarball/tomcat-native-2.0.15-src/native: build-outputs.mk
Only in tarball/tomcat-native-2.0.15-src/native: configure
Only in tarball/tomcat-native-2.0.15-src/native: tcnative.spec

This isn't really an issue, as typically ZIP is used for Windows environments and tar.gz is used for Unix-like environments. I do wonder why we don't package everything with both source distributions, though.

-chris


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to