This is an automated email from the ASF dual-hosted git repository.
markt-asf pushed a commit to branch 1.3.x
in repository https://gitbox.apache.org/repos/asf/tomcat-native.git
The following commit(s) were added to refs/heads/1.3.x by this push:
new 5a04e52a2 Drop OpenSSL 1.1.1 support
5a04e52a2 is described below
commit 5a04e52a29bdf75a143aeffd72ce8c1276f25821
Author: Mark Thomas <[email protected]>
AuthorDate: Tue Sep 1 14:39:34 2026 +0100
Drop OpenSSL 1.1.1 support
---
native/srclib/VERSIONS | 2 +-
xdocs/miscellaneous/changelog.xml | 6 ++++++
2 files changed, 7 insertions(+), 1 deletion(-)
diff --git a/native/srclib/VERSIONS b/native/srclib/VERSIONS
index 808979637..3fe24ddd7 100644
--- a/native/srclib/VERSIONS
+++ b/native/srclib/VERSIONS
@@ -1,5 +1,5 @@
The current minimum versions are:
-- OpenSSL 1.1.1
+- OpenSSL 3.0.0
- APR 1.6.3
The following version of the libraries are recommended:
diff --git a/xdocs/miscellaneous/changelog.xml
b/xdocs/miscellaneous/changelog.xml
index 5c56e139f..5f2325ad3 100644
--- a/xdocs/miscellaneous/changelog.xml
+++ b/xdocs/miscellaneous/changelog.xml
@@ -85,6 +85,12 @@
<fix>
Harden against the mis-use of <code>Pool.destroy(long)</code>. (markt)
</fix>
+ <scode>
+ The minimum supported OpenSSL version is now 3.0.x. OpenSSL 1.1.1 support
+ was accidentally broken in 1.3.8. As no bug reports were receive for that
+ failure and since both Debian and Ubuntu versions that used OpenSSL 1.1.1
+ have reached end of support, OpenSSL 1.1.1 is no longer supported.
(markt)
+ </scode>
</changelog>
</section>
<section name="1.3.8" rtext="2026-06-15">
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
