Author: markt
Date: Mon Sep 7 20:53:10 2026
New Revision: 1937977
Log:
Update docs for Tomcat Native 1.3.9 release
Modified:
tomcat/site/trunk/docs/native-1.3-doc/index.html
tomcat/site/trunk/docs/native-1.3-doc/miscellaneous/changelog.html
tomcat/site/trunk/docs/native-1.3-doc/news/2026.html
Modified: tomcat/site/trunk/docs/native-1.3-doc/index.html
==============================================================================
--- tomcat/site/trunk/docs/native-1.3-doc/index.html Mon Sep 7 20:53:06
2026 (r1937976)
+++ tomcat/site/trunk/docs/native-1.3-doc/index.html Mon Sep 7 20:53:10
2026 (r1937977)
@@ -28,10 +28,10 @@
</div><h3 id="Headlines">Headlines</h3><div class="text">
<ul>
-<li><a href="news/2026.html#20260615">15 June 2026 - <b>Tomcat-Native-1.3.8
+<li><a href="news/2026.html#20260907">7 September 2026 - <b>Tomcat-Native-1.3.9
released</b></a>
<p>The Apache Tomcat team is proud to announce the immediate availability of
-Tomcat Native 1.3.8 Stable.</p>
+Tomcat Native 1.3.9 Stable.</p>
<p>
The sources and the binaries for selected platforms are available from the
<a href="../download-native.cgi">Download page</a>.
Modified: tomcat/site/trunk/docs/native-1.3-doc/miscellaneous/changelog.html
==============================================================================
--- tomcat/site/trunk/docs/native-1.3-doc/miscellaneous/changelog.html Mon Sep
7 20:53:06 2026 (r1937976)
+++ tomcat/site/trunk/docs/native-1.3-doc/miscellaneous/changelog.html Mon Sep
7 20:53:10 2026 (r1937977)
@@ -4,6 +4,89 @@
This is the Changelog for Tomcat Native 1.3.x. The Tomcat Native 1.3.x branch
started from the 1.2.39 tag.
</p>
+</div><h3 id="1.3.9"><span style="float: right;">2026-09-07</span>
1.3.9</h3><div class="text">
+ <ul class="changelog">
+ <li><img alt="Code: " class="icon" src="../images/code.gif">
+ Remove call to ERR_remove_thread_state() from Windows specific code to
+ allow building with OpenSSL 4.0.x. ERR_remove_thread_state() is a no-op
+ in OpenSSL 1.1+ and got removed in OpenSSL 4. (rjung)
+ </li>
+ <li><img alt="Fix: " class="icon" src="../images/fix.gif">
+ Fix a potential crash when negotiating ALPN. (markt)
+ </li>
+ <li><img alt="Fix: " class="icon" src="../images/fix.gif">
+ If ALPN negotiation fails and failure is configured to use the last
server
+ protocol in the list, use it rather than the last protocol offered by the
+ client. (markt)
+ </li>
+ <li><img alt="Fix: " class="icon" src="../images/fix.gif">
+ Add support for the extended range of options available from OpenSSL
+ 3.0.x. The options flag is now a 64-bit unsigned int (represented by a
+ Java long) rather than a 32-bit unsigned int (represented by a Java
int).
+ (markt)
+ </li>
+ <li><img alt="Code: " class="icon" src="../images/code.gif">
+ Remove unused code. (markt)
+ </li>
+ <li><img alt="Fix: " class="icon" src="../images/fix.gif">
+ Ensure that per connection changes to certificate verification settings,
+ e.g. to support client certificate authentication, do not modify the
+ certificate verification settings for other connections. (markt)
+ </li>
+ <li><img alt="Fix: " class="icon" src="../images/fix.gif">
+ Fix a potential crash when configuring raw certificates. (markt)
+ </li>
+ <li><img alt="Fix: " class="icon" src="../images/fix.gif">
+ Avoid a potential crash with very long ALPN protocol names. (markt)
+ </li>
+ <li><img alt="Fix: " class="icon" src="../images/fix.gif">
+ Make the call to a CertificateVerifier more robust. (markt)
+ </li>
+ <li><img alt="Fix: " class="icon" src="../images/fix.gif">
+ Avoid a potential crash when processing OCSP URLs. (markt)
+ </li>
+ <li><img alt="Fix: " class="icon" src="../images/fix.gif">
+ Make the processing of OCSP responses more robust. (markt)
+ </li>
+ <li><img alt="Fix: " class="icon" src="../images/fix.gif">
+ Stricter OCSP handling when soft-fail is disabled. (markt)
+ </li>
+ <li><img alt="Fix: " class="icon" src="../images/fix.gif">
+ Harden against the mis-use of <code>Buffer.address(ByteBuffer)</code>.
+ (markt)
+ </li>
+ <li><img alt="Fix: " class="icon" src="../images/fix.gif">
+ Harden against the mis-use of <code>Pool.destroy(long)</code>. (markt)
+ </li>
+ <li><img alt="Code: " class="icon" src="../images/code.gif">
+ The minimum supported OpenSSL version is now 3.0.x. OpenSSL 1.1.1 support
+ was accidentally broken in 1.3.8. As no bug reports were receive for that
+ failure and since both Debian and Ubuntu versions that used OpenSSL 1.1.1
+ have reached end of support, OpenSSL 1.1.1 is no longer supported.
(markt)
+ </li>
+ <li><img alt="Update: " class="icon" src="../images/update.gif">
+ OpenSSL 3.0.x is approaching end of support so the recommended version of
+ OpenSSL (and the version that windows binaries will be built with) now
+ follows the 3.5.x LTS branch. (markt)
+ </li>
+ <li><img alt="Fix: " class="icon" src="../images/fix.gif">
+ Switch to automatic configuration of DH parameters. Manual configuration
+ attempts will be ignored. (markt)
+ </li>
+ <li><img alt="Code: " class="icon" src="../images/code.gif">
+ Make <code>setTmpECDHByCurveName()</code> a NO-OP. (markt)
+ </li>
+ <li><img alt="Fix: " class="icon" src="../images/fix.gif">
+ Refactor extraction of ECDH curve name from the Certificate to avoid
+ deprecated OpenSSL methods. (markt)
+ </li>
+ <li><img alt="Fix: " class="icon" src="../images/fix.gif">
+ Refactor the native implementation of <code>SSL.getTime()</code> to avoid
+ the Y2038 problem in <code>SSL_SESSION_get_time()</code> when running on
a
+ verion of OpenSSL that includes the new
+ <code>SSL_SESSION_get_time_ex()</code> method. (markt)
+ </li>
+ </ul>
</div><h3 id="1.3.8"><span style="float: right;">2026-06-15</span>
1.3.8</h3><div class="text">
<ul class="changelog">
<li><img alt="Fix: " class="icon" src="../images/fix.gif">
Modified: tomcat/site/trunk/docs/native-1.3-doc/news/2026.html
==============================================================================
--- tomcat/site/trunk/docs/native-1.3-doc/news/2026.html Mon Sep 7
20:53:06 2026 (r1937976)
+++ tomcat/site/trunk/docs/native-1.3-doc/news/2026.html Mon Sep 7
20:53:10 2026 (r1937977)
@@ -1,6 +1,11 @@
<!DOCTYPE html SYSTEM "about:legacy-compat">
<html lang="en"><head><META http-equiv="Content-Type" content="text/html;
charset=UTF-8"><link href="../images/docs-stylesheet.css" rel="stylesheet"
type="text/css"><link href="../images/style.css" rel="stylesheet"
type="text/css"><title>The Apache Tomcat Native Library 1.3 - News - 2026 News
and Status</title></head><body><div id="wrapper"><header><div
id="header"><div><div><div class="logo noPrint"><a
href="https://tomcat.apache.org/";><img alt="Tomcat Home"
src="../images/tomcat.png"></a></div><div style="height: 1px;"></div><div
class="asfLogo noPrint"><a href="http://www.apache.org/"; target="_blank"><img
src="../images/asf-logo.svg" alt="The Apache Software Foundation" style="width:
266px; height: 83px;"></a></div><h1>The Apache Tomcat Native Library 1.3 -
News</h1><div style="height: 1px;"></div><div style="clear:
left;"></div></div></div></div></header><div id="middle"><div><div
id="mainLeft"
class="noprint"><div><nav><div><h2><strong>Links</strong></h2><ul><li><a
href="../ind
ex.html">Docs Home</a></li></ul></div><div><h2><strong>Miscellaneous
Documentation</strong></h2><ul><li><a
href="../miscellaneous/changelog.html">Changelog</a></li><li><a
href="../miscellaneous/tls-renegotiation.html">TLS
renegotiation</a></li></ul></div><div><h2><strong>News</strong></h2><ul><li><a
href="../news/2026.html">2026</a></li><li><a
href="../news/2024.html">2024</a></li></ul></div></nav></div></div><div
id="mainRight"><div id="content"><h2>2026 News and Status</h2><h3
id="2026_News_&_Status">2026 News & Status</h3><div class="text">
+ <div class="subsection"><h4 id="20260907">7 September 2026 -
Tomcat-Native-1.3.9 released</h4><div class="text">
+ <p>The Apache Tomcat team is proud to announce the immediate
+ availability of Tomcat Native 1.3.9.</p>
+ </div></div>
+
<div class="subsection"><h4 id="20260615">15 June 2026 -
Tomcat-Native-1.3.8 released</h4><div class="text">
<p>The Apache Tomcat team is proud to announce the immediate
availability of Tomcat Native 1.3.8.</p>
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
