Am 06.10.26 um 20:42 schrieb Mark Thomas:
The proposed Apache Tomcat 11.0.27 release is now available for voting.
The notable changes compared to 11.0.26 include:
- Fix possible corruption when using HTTP/2 and async IO on uploads.
Submitted by Tim Burke.
- Fix possible corruption when using HTTP/2 and async IO on uploads.
Submitted by Tim Burke.
- Update to Migration tool for Jakarta EE 1.0.13
For full details, see the change log:
https://nightlies.apache.org/tomcat/tomcat-11.0.x/docs/changelog.html
Applications that run on Tomcat 9 and earlier will not run on Tomcat 11
without changes. Java EE applications designed for Tomcat 9 and earlier
may be placed in the $CATALINA_BASE/webapps-javaee directory and Tomcat
will automatically convert them to Jakarta EE and copy them to the
webapps directory. Applications using deprecated APIs may require
further changes.
It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-11/v11.0.27/
The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1608
The tag is:
https://github.com/apache/tomcat/tree/11.0.27
52f3b364e5882a5dbcfc42cb8313a7c2ae532c64
The proposed 11.0.27 release is:
[ ] -1 Broken - do not release
[ ] +1 Stable - go ahead and release as 11.0.27
I see test failures with JDK 28 (EA) when using tcnative for
org.apache.tomcat.util.net.TestPQC. OpnSSL versions 3.5, 3.6, 4.0 and
4.1 beta. No failure for ffm.
Failure happens for testHostECandMLDSA and testHostRSAandMLDSA:
Testcase: testHostECandMLDSA[OpenSSL] took 0.525 sec
Caused an ERROR
(handshake_failure) Received fatal alert: handshake_failure
javax.net.ssl.SSLHandshakeException: (handshake_failure) Received fatal
alert: handshake_failure
at
java.base/sun.security.ssl.Alert.createSSLException(Alert.java:130)
at
java.base/sun.security.ssl.Alert.createSSLException(Alert.java:117)
at
java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:362)
at
java.base/sun.security.ssl.Alert$AlertConsumer.consume(Alert.java:313)
at
java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:201)
at
java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:173)
at
java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1509)
at
java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1424)
at
java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:455)
at
java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:426)
at
java.base/sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:491)
at
java.base/sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:190)
at
java.base/sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:141)
at
org.apache.catalina.startup.TomcatBaseTest.methodUrl(TomcatBaseTest.java:708)
at
org.apache.catalina.startup.TomcatBaseTest.methodUrl(TomcatBaseTest.java:682)
at
org.apache.catalina.startup.TomcatBaseTest.getUrl(TomcatBaseTest.java:676)
at
org.apache.catalina.startup.TomcatBaseTest.getUrl(TomcatBaseTest.java:670)
at
org.apache.catalina.startup.TomcatBaseTest.getUrl(TomcatBaseTest.java:655)
at
org.apache.catalina.startup.TomcatBaseTest.getUrl(TomcatBaseTest.java:649)
at org.apache.tomcat.util.net.TestPQC.doTest(TestPQC.java:284)
at
org.apache.tomcat.util.net.TestPQC.testHostECandMLDSA(TestPQC.java:131)
at
java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:104)
Testcase: testHostRSAandMLDSA[OpenSSL] took 0.329 sec
Caused an ERROR
(handshake_failure) Received fatal alert: handshake_failure
javax.net.ssl.SSLHandshakeException: (handshake_failure) Received fatal
alert: handshake_failure
at
java.base/sun.security.ssl.Alert.createSSLException(Alert.java:130)
at
java.base/sun.security.ssl.Alert.createSSLException(Alert.java:117)
at
java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:362)
at
java.base/sun.security.ssl.Alert$AlertConsumer.consume(Alert.java:313)
at
java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:201)
at
java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:173)
at
java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1509)
at
java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1424)
at
java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:455)
at
java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:426)
at
java.base/sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:491)
at
java.base/sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:190)
at
java.base/sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:141)
at
org.apache.catalina.startup.TomcatBaseTest.methodUrl(TomcatBaseTest.java:708)
at
org.apache.catalina.startup.TomcatBaseTest.methodUrl(TomcatBaseTest.java:682)
at
org.apache.catalina.startup.TomcatBaseTest.getUrl(TomcatBaseTest.java:676)
at
org.apache.catalina.startup.TomcatBaseTest.getUrl(TomcatBaseTest.java:670)
at
org.apache.catalina.startup.TomcatBaseTest.getUrl(TomcatBaseTest.java:655)
at
org.apache.catalina.startup.TomcatBaseTest.getUrl(TomcatBaseTest.java:649)
at org.apache.tomcat.util.net.TestPQC.doTest(TestPQC.java:284)
at
org.apache.tomcat.util.net.TestPQC.testHostRSAandMLDSA(TestPQC.java:124)
at
java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:104)
At least the JEPs listed on
https://openjdk.org/projects/jdk/28/
do not show any obviously related change.
But I found this change, which could be related:
https://github.com/openjdk/jdk/commit/a31170a68b22784a2bd9c4a02edf9c0cfe4c0df0
Best regards,
Rainer
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]