Mark,
Thanks for RMing.
On 6/12/26 5:49 AM, Mark Thomas wrote:
The key differences compared to 1.3.7 are:
- Windows binaries built with OpenSSL 3.0.21
- Fix post handshake authentication when using TLS 1.3
- Fix a small number of small memory leaks
The proposed release artifacts can be found at [1],
and the build was done using tag [2].
The Apache Tomcat Native 1.3.8 release is
[ ] Stable, go ahead and release
[ ] Broken because of ...
+1 for stable release
tcnative builds cleanly with many deprecation warnings and a single
other warning on MacOS aarch64, and all the Tomcat 9.0.x HEAD unit tests
pass.
Details:
* Environment
* OS: Darwin 25.3.0 arm64
* cc: Apple clang version 21.0.0 (clang-2100.1.1.101)
* make: GNU Make 3.81
* OpenSSL: OpenSSL 3.6.2 7 Apr 2026 (Library: OpenSSL 3.6.2 7 Apr 2026)
* tcnative statically-linked OpenSSL version: 3.0.21
* APR: 1.7.6
* Valid SHA-512 signature for
tomcat-native-1.3.8-openssl-3.0.21-win32-bin.zip
* Valid GPG signature for tomcat-native-1.3.8-openssl-3.0.21-win32-bin.zip
* Valid SHA512 signature for tomcat-native-1.3.8-win32-src.zip
* Valid GPG signature for tomcat-native-1.3.8-win32-src.zip
* Valid SHA512 signature for tomcat-native-1.3.8-src.tar.gz
* Valid GPG signature for tomcat-native-1.3.8-src.tar.gz
* Source Zip and tarball: !! NOT SAME
* tcnative builds cleanly
The source distribution differences are the same as that of the 2.0.x
vote I just cast. I have the same questions.
-chris
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]