Mark,

Thanks for RMing.

On 6/12/26 5:49 AM, Mark Thomas wrote:
The key differences compared to 1.3.7 are:

- Windows binaries built with OpenSSL 3.0.21

- Fix post handshake authentication when using TLS 1.3

- Fix a small number of small memory leaks

The proposed release artifacts can be found at [1],
and the build was done using tag [2].

The Apache Tomcat Native 1.3.8 release is
  [ ] Stable, go ahead and release
  [ ] Broken because of ...

+1 for stable release

tcnative builds cleanly with many deprecation warnings and a single other warning on MacOS aarch64, and all the Tomcat 9.0.x HEAD unit tests pass.

Details:

* Environment
* OS:       Darwin 25.3.0 arm64
* cc:       Apple clang version 21.0.0 (clang-2100.1.1.101)
* make:     GNU Make 3.81
* OpenSSL:   OpenSSL 3.6.2 7 Apr 2026 (Library: OpenSSL 3.6.2 7 Apr 2026)
* tcnative statically-linked OpenSSL version: 3.0.21
* APR:       1.7.6
* Valid SHA-512 signature for tomcat-native-1.3.8-openssl-3.0.21-win32-bin.zip
* Valid GPG signature for tomcat-native-1.3.8-openssl-3.0.21-win32-bin.zip
* Valid SHA512 signature for tomcat-native-1.3.8-win32-src.zip
* Valid GPG signature for tomcat-native-1.3.8-win32-src.zip
* Valid SHA512 signature for tomcat-native-1.3.8-src.tar.gz
* Valid GPG signature for tomcat-native-1.3.8-src.tar.gz
* Source Zip and tarball: !! NOT SAME
* tcnative builds cleanly

The source distribution differences are the same as that of the 2.0.x vote I just cast. I have the same questions.

-chris


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to