Am 06.10.26 um 20:42 schrieb Mark Thomas:
The proposed Apache Tomcat 11.0.27 release is now available for voting.

The notable changes compared to 11.0.26 include:

- Fix possible corruption when using HTTP/2 and async IO on uploads.
   Submitted by Tim Burke.

- Fix possible corruption when using HTTP/2 and async IO on uploads.
   Submitted by Tim Burke.

- Update to Migration tool for Jakarta EE 1.0.13

For full details, see the change log:
https://nightlies.apache.org/tomcat/tomcat-11.0.x/docs/changelog.html

Applications that run on Tomcat 9 and earlier will not run on Tomcat 11 without changes. Java EE applications designed for Tomcat 9 and earlier may be placed in the $CATALINA_BASE/webapps-javaee directory and Tomcat will automatically convert them to Jakarta EE and copy them to the webapps directory. Applications using deprecated APIs may require further changes.

It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-11/v11.0.27/

The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1608
The tag is:
https://github.com/apache/tomcat/tree/11.0.27 52f3b364e5882a5dbcfc42cb8313a7c2ae532c64

The proposed 11.0.27 release is:
[ ] -1 Broken - do not release
[ ] +1 Stable - go ahead and release as 11.0.27
I see test failures with JDK 28 (EA) when using tcnative for org.apache.tomcat.util.net.TestPQC. OpnSSL versions 3.5, 3.6, 4.0 and 4.1 beta. No failure for ffm.

Failure happens for testHostECandMLDSA and testHostRSAandMLDSA:

Testcase: testHostECandMLDSA[OpenSSL] took 0.525 sec
        Caused an ERROR
(handshake_failure) Received fatal alert: handshake_failure
javax.net.ssl.SSLHandshakeException: (handshake_failure) Received fatal alert: handshake_failure at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:130) at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:117) at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:362) at java.base/sun.security.ssl.Alert$AlertConsumer.consume(Alert.java:313) at java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:201) at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:173) at java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1509) at java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1424) at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:455) at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:426) at java.base/sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:491) at java.base/sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:190) at java.base/sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:141) at org.apache.catalina.startup.TomcatBaseTest.methodUrl(TomcatBaseTest.java:708) at org.apache.catalina.startup.TomcatBaseTest.methodUrl(TomcatBaseTest.java:682) at org.apache.catalina.startup.TomcatBaseTest.getUrl(TomcatBaseTest.java:676) at org.apache.catalina.startup.TomcatBaseTest.getUrl(TomcatBaseTest.java:670) at org.apache.catalina.startup.TomcatBaseTest.getUrl(TomcatBaseTest.java:655) at org.apache.catalina.startup.TomcatBaseTest.getUrl(TomcatBaseTest.java:649)
        at org.apache.tomcat.util.net.TestPQC.doTest(TestPQC.java:284)
at org.apache.tomcat.util.net.TestPQC.testHostECandMLDSA(TestPQC.java:131) at java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:104)


Testcase: testHostRSAandMLDSA[OpenSSL] took 0.329 sec
        Caused an ERROR
(handshake_failure) Received fatal alert: handshake_failure
javax.net.ssl.SSLHandshakeException: (handshake_failure) Received fatal alert: handshake_failure at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:130) at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:117) at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:362) at java.base/sun.security.ssl.Alert$AlertConsumer.consume(Alert.java:313) at java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:201) at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:173) at java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1509) at java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1424) at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:455) at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:426) at java.base/sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:491) at java.base/sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:190) at java.base/sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:141) at org.apache.catalina.startup.TomcatBaseTest.methodUrl(TomcatBaseTest.java:708) at org.apache.catalina.startup.TomcatBaseTest.methodUrl(TomcatBaseTest.java:682) at org.apache.catalina.startup.TomcatBaseTest.getUrl(TomcatBaseTest.java:676) at org.apache.catalina.startup.TomcatBaseTest.getUrl(TomcatBaseTest.java:670) at org.apache.catalina.startup.TomcatBaseTest.getUrl(TomcatBaseTest.java:655) at org.apache.catalina.startup.TomcatBaseTest.getUrl(TomcatBaseTest.java:649)
        at org.apache.tomcat.util.net.TestPQC.doTest(TestPQC.java:284)
at org.apache.tomcat.util.net.TestPQC.testHostRSAandMLDSA(TestPQC.java:124) at java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:104)


At least the JEPs listed on

https://openjdk.org/projects/jdk/28/

do not show any obviously related change.

But I found this change, which could be related:

https://github.com/openjdk/jdk/commit/a31170a68b22784a2bd9c4a02edf9c0cfe4c0df0

Best regards,

Rainer

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to