[ANN] Apache Tomcat 9.0.95 available

2024-09-17 Thread Rémy Maucherat
The Apache Tomcat team announces the immediate availability of Apache Tomcat 9.0.95. Apache Tomcat 9 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 9.0.95 is a bugfix and feat

[VOTE][RESULT] Release Apache Tomcat 9.0.95

2024-09-17 Thread Rémy Maucherat
The following votes were cast: Binding: +1: remm, markt, jfclere Non-binding: +1: dsoumis No other votes were cast. The vote therefore passes. Thanks to everyone who contributed to this release. Rémy - To unsubscribe, e-mail

Re: [VOTE] Release Apache Tomcat 9.0.95

2024-09-16 Thread Rémy Maucherat
On Fri, Sep 13, 2024 at 9:18 PM Rémy Maucherat wrote: > > The proposed Apache Tomcat 9.0.95 release is now available for voting. > > The notable changes compared to 9.0.94 are: > > - Fix the regression in HTTP/2 support introduced in 9.0.94. > > For full details, se

Re: [VOTE] Release Apache Tomcat 10.1.30

2024-09-16 Thread Rémy Maucherat
On Sat, Sep 14, 2024 at 1:10 PM Christopher Schultz wrote: > > The proposed Apache Tomcat 10.1.30 release is now available for > voting. > > All committers and PMC members are kindly requested to provide a vote if > possible. ANY TOMCAT USER MAY VOTE, though only PMC members votes are > binding. W

Re: [VOTE] Release Apache Tomcat 11.0.0-M26

2024-09-15 Thread Rémy Maucherat
On Fri, Sep 13, 2024 at 8:03 PM Mark Thomas wrote: > > The proposed Apache Tomcat 11.0.0-M26 release is now available for > voting. > > Apache Tomcat 11.0.0-M26 is a milestone release of the 11.0.x branch and > has been made to provide users with early access to the new features in > Apache Tomcat

[VOTE] Release Apache Tomcat 9.0.95

2024-09-13 Thread Rémy Maucherat
The proposed Apache Tomcat 9.0.95 release is now available for voting. The notable changes compared to 9.0.94 are: - Fix the regression in HTTP/2 support introduced in 9.0.94. For full details, see the changelog: https://nightlies.apache.org/tomcat/tomcat-9.0.x/docs/changelog.html It can be obt

Re: Future of JNI in Tomcat

2024-09-13 Thread Rémy Maucherat
On Fri, Sep 13, 2024 at 4:46 PM Christopher Schultz wrote: > > Mark, > > On 9/12/24 12:48, Mark Thomas wrote: > > On 12/09/2024 15:15, Rémy Maucherat wrote: > >> Hi, > >> > >> This JEP has the potential to have a significant impact with Tomcat

Future of JNI in Tomcat

2024-09-12 Thread Rémy Maucherat
Hi, This JEP has the potential to have a significant impact with Tomcat's JNI use starting with Java 26. https://openjdk.org/jeps/471 Unsafe.invokeCleaner will be removed, which will effectively prevent using the direct ByteBuffers that are needed for tomcat-native. The solution is to use a memor

Re: Architecture UML diagrams - startup

2024-09-11 Thread Rémy Maucherat
On Tue, Sep 10, 2024 at 6:15 PM Mark Thomas wrote: > > All, > > I have finished the first pass at updating the startup architecture > diagrams. > > The previous (5.5.x based) PDF can be found at > > https://github.com/apache/tomcat/blob/main/webapps/docs/architecture/startup/serverStartup.pdf > >

[ANN] Apache Tomcat 9.0.94 available

2024-09-11 Thread Rémy Maucherat
The Apache Tomcat team announces the immediate availability of Apache Tomcat 9.0.94. Apache Tomcat 9 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 9.0.94 is a bugfix and feat

Re: (tomcat) branch main updated: Use constant

2024-09-09 Thread Rémy Maucherat
On Mon, Sep 9, 2024 at 4:55 PM wrote: > > This is an automated email from the ASF dual-hosted git repository. > > markt pushed a commit to branch main > in repository https://gitbox.apache.org/repos/asf/tomcat.git > > > The following commit(s) were added to refs/heads/main by this push: > new

[VOTE] Release Apache Tomcat 9.0.94

2024-09-05 Thread Rémy Maucherat
The proposed Apache Tomcat 9.0.94 release is now available for voting. The notable changes compared to 9.0.93 are: - If an HTTP/2 client resets a stream before the request body is fully written, ensure that any ReadListener is notified via a call to ReadListener.onErrror() - An Exception b

Re: Tagging the September releases and 11.0.x stability

2024-09-03 Thread Rémy Maucherat
On Tue, Sep 3, 2024 at 4:00 PM Mark Thomas wrote: > > Hi all, > > I'm just wrapping up the fix for BZ 69302. Once that is committed, I > expect to tag 11.0.0-M25. > > I also think we need to start thinking about declaring 11.0.x stable. > The specs are implemented, the TCKs are passing, 11.0.x is

Re: [QUESTION] Purchase UML tool using Google security funding

2024-08-29 Thread Rémy Maucherat
On Tue, Aug 27, 2024 at 6:05 PM Mark Thomas wrote: > > On 26/08/2024 15:41, Christopher Schultz wrote: > > > > >> Personally, I am leaning towards spending the $99 so we can remove the > >> watermark from the Tomcat docs. > > > > 1. $99 is nothing, even if it ends up being tied to a single person

Re: (tomcat) branch main updated: Expected behaviour has been clarified when writing >= c-l bytes to body

2024-08-23 Thread Rémy Maucherat
On Thu, Aug 22, 2024 at 2:33 PM wrote: > > This is an automated email from the ASF dual-hosted git repository. > > markt pushed a commit to branch main > in repository https://gitbox.apache.org/repos/asf/tomcat.git > > > The following commit(s) were added to refs/heads/main by this push: > ne

Re: Cookie parsing and upcoming updates to RFC6265

2024-08-18 Thread Rémy Maucherat
On Fri, Aug 16, 2024 at 5:25 PM Mark Thomas wrote: > > On 16/08/2024 13:40, Tim Funk wrote: > > How about missingEqualsCookie="allow | ignore"? > > The proposed options were: > - ignore > - name > - value Ok, I think your proposed options are very good. Thanks for the summary. Personally I would

Re: Create a Tomcat 12 branch?

2024-08-12 Thread Rémy Maucherat
On Mon, Aug 12, 2024 at 8:30 PM Mark Thomas wrote: > > All, > > As I mentioned earlier, I am starting work on some new EL API features > that will be part of Jakarta EE 12 so implemented in Tomcat 12. > > How do we want to handle this? > > My current thinking is: > > - create a 11.0.x branch from

Re: TLD scanner and debug logging

2024-08-06 Thread Rémy Maucherat
On Tue, Aug 6, 2024 at 10:19 AM Mark Thomas wrote: > > The current TLD scanner logs the following message if JARs are scanned > but not TLDs are found: > > > At least one JAR was scanned for TLDs yet contained no TLDs. Enable > debug logging for this logger for a complete list of JARs that were >

Re: [VOTE] Release Apache Tomcat 9.0.93

2024-08-05 Thread Rémy Maucherat
On Mon, Aug 5, 2024 at 11:22 PM Christopher Schultz wrote: > > Rémy, > > On 8/2/24 19:02, Rémy Maucherat wrote: > > The proposed Apache Tomcat 9.0.93 release is now available for voting. > > > > The notable changes compared to 9.0.91 are: > > > > -

[ANN] Apache Tomcat 9.0.93 available

2024-08-05 Thread Rémy Maucherat
The Apache Tomcat team announces the immediate availability of Apache Tomcat 9.0.93. Apache Tomcat 9 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 9.0.93 is a bugfix and feat

[VOTE][RESULT] Release Apache Tomcat 9.0.93

2024-08-05 Thread Rémy Maucherat
The following votes were cast: Binding: +1: isapir, remm, rjung, funkman, markt, schultz No other votes were cast. The vote therefore passes. Thanks to everyone who contributed to this release. Rémy - To unsubscribe, e-mail:

Re: [VOTE] Release Apache Tomcat 10.1.28

2024-08-05 Thread Rémy Maucherat
On Fri, Aug 2, 2024 at 7:28 PM Christopher Schultz wrote: > > The proposed Apache Tomcat 10.1.28 release is now available for > voting. > > All committers and PMC members are kindly requested to provide a vote if > possible. ANY TOMCAT USER MAY VOTE, though only PMC members votes are > binding. We

Re: [VOTE] Release Apache Tomcat 11.0.0-M24

2024-08-04 Thread Rémy Maucherat
On Fri, Aug 2, 2024 at 4:15 PM Mark Thomas wrote: > > The proposed Apache Tomcat 11.0.0-M24 release is now available for > voting. > > Apache Tomcat 11.0.0-M24 is a milestone release of the 11.0.x branch and > has been made to provide users with early access to the new features in > Apache Tomcat

Re: [VOTE] Release Apache Tomcat 9.0.93

2024-08-04 Thread Rémy Maucherat
On Sat, Aug 3, 2024 at 1:02 AM Rémy Maucherat wrote: > > The proposed Apache Tomcat 9.0.93 release is now available for voting. > > The notable changes compared to 9.0.91 are: > > - Align HTTP/2 with HTTP/1.1 and recycle the container internal request >and response

[VOTE] Release Apache Tomcat 9.0.93

2024-08-02 Thread Rémy Maucherat
The proposed Apache Tomcat 9.0.93 release is now available for voting. The notable changes compared to 9.0.91 are: - Align HTTP/2 with HTTP/1.1 and recycle the container internal request and response processing objects by default. This behaviour can be controlled via the new discardRequests

Re: [VOTE] Release Apache Tomcat 9.0.92

2024-08-02 Thread Rémy Maucherat
On Tue, Jul 30, 2024 at 5:32 AM Rémy Maucherat wrote: > > The proposed Apache Tomcat 9.0.92 release is now available for voting. > > The notable changes compared to 9.0.91 are: > > - Align HTTP/2 with HTTP/1.1 and recycle the container internal request >and response

Re: [VOTE] Release Apache Tomcat 10.1.27

2024-08-01 Thread Rémy Maucherat
On Tue, Jul 30, 2024 at 5:57 PM Christopher Schultz wrote: > > The proposed Apache Tomcat 10.1.27 release is now available for > voting. > > All committers and PMC members are kindly requested to provide a vote if > possible. ANY TOMCAT USER MAY VOTE, though only PMC members votes are > binding. W

Re: [VOTE] Release Apache Tomcat 9.0.92

2024-07-31 Thread Rémy Maucherat
On Tue, Jul 30, 2024 at 7:06 PM Christopher Schultz wrote: > > Rémy, > > Thanks for RMing. > > On 7/29/24 11:32 PM, Rémy Maucherat wrote: > > The proposed Apache Tomcat 9.0.92 release is now available for voting. > > > > The notable changes compared to 9.0.91 a

Re: [VOTE] Release Apache Tomcat 11.0.0-M23

2024-07-30 Thread Rémy Maucherat
On Mon, Jul 29, 2024 at 8:27 PM Mark Thomas wrote: > > The proposed Apache Tomcat 11.0.0-M23 release is now available for > voting. > > Apache Tomcat 11.0.0-M23 is a milestone release of the 11.0.x branch and > has been made to provide users with early access to the new features in > Apache Tomcat

Re: [VOTE] Release Apache Tomcat 9.0.92

2024-07-29 Thread Rémy Maucherat
On Tue, Jul 30, 2024 at 5:32 AM Rémy Maucherat wrote: > > The proposed Apache Tomcat 9.0.92 release is now available for voting. > > The notable changes compared to 9.0.91 are: > > - Align HTTP/2 with HTTP/1.1 and recycle the container internal request >and response

[VOTE] Release Apache Tomcat 9.0.92

2024-07-29 Thread Rémy Maucherat
The proposed Apache Tomcat 9.0.92 release is now available for voting. The notable changes compared to 9.0.91 are: - Align HTTP/2 with HTTP/1.1 and recycle the container internal request and response processing objects by default. This behaviour can be controlled via the new discardRequests

Re: [VOTE] Release Apache Tomcat 11.0.0-M23

2024-07-29 Thread Rémy Maucherat
On Mon, Jul 29, 2024 at 8:27 PM Mark Thomas wrote: > > The proposed Apache Tomcat 11.0.0-M23 release is now available for > voting. > > Apache Tomcat 11.0.0-M23 is a milestone release of the 11.0.x branch and > has been made to provide users with early access to the new features in > Apache Tomcat

Re: Simplifying JreCompat

2024-07-25 Thread Rémy Maucherat
On Thu, Jul 25, 2024 at 10:34 PM Mark Thomas wrote: > > As per Rémy's suggestion, I've been looking simplifying JreCompat to > only support LTS versions and anything more recent than the newest LTS. > > That would mean: > - Tomcat 9 only >- Jre9Compat is renamed to Jre11Compat > - Tomcat 9 and

Re: (tomcat) 01/03: Add JreCompat support for Subject.callAs()

2024-07-25 Thread Rémy Maucherat
On Thu, Jul 25, 2024 at 10:44 AM wrote: > > This is an automated email from the ASF dual-hosted git repository. > > markt pushed a commit to branch main > in repository https://gitbox.apache.org/repos/asf/tomcat.git > > commit a2384804c527c64290cfae1fa988f1f394890e91 > Author: Mark Thomas > Autho

Re: Performance improvements for HTTP/2

2024-07-24 Thread Rémy Maucherat
On Wed, Jul 24, 2024 at 8:31 AM Mark Thomas wrote: > > On 23/07/2024 21:30, Christopher Schultz wrote: > > Mark, > > > > On 7/23/24 13:13, Mark Thomas wrote: > >> Prompted by some folks at $dayjob, I have been looking at the > >> performance of Tomcat's HTTP/2 implementation using [1] > >> > >> In

Re: Performance improvements for HTTP/2

2024-07-23 Thread Rémy Maucherat
On Tue, Jul 23, 2024 at 7:15 PM Mark Thomas wrote: > > Prompted by some folks at $dayjob, I have been looking at the > performance of Tomcat's HTTP/2 implementation using [1] > > Initially, I was seeing ~79k req/s. > > Restoring lazy init for the StreamInputBuffer increased that to ~106k req/s. >

Re: TCK CI runs

2024-07-23 Thread Rémy Maucherat
On Mon, Jul 22, 2024 at 6:54 PM Mark Thomas wrote: > > All, > > Today I have configured the tomcat-tck repository to run the EL, > Servlet, Pages and WebSocket TCKs once every day for all combinations of > JDK 17 & 21, Ubuntu latest, MacOS latest and Windows latest using GitHub > actions. > > Ther

Re: Short and long term plans for Tomcat Native

2024-07-18 Thread Rémy Maucherat
On Thu, Jul 18, 2024 at 2:41 PM Rainer Jung wrote: > > Am 18.07.24 um 14:15 schrieb Michael Osipov: > > On 2024/07/17 15:33:02 Mark Thomas wrote: > >> All, > >> > >> I've spent some time today trying to build Tomcat Native with Visual > >> Studio 2022 rather then the current, more involved process

Re: [VOTE] Release Apache Tomcat Native 1.3.1

2024-07-18 Thread Rémy Maucherat
On Thu, Jul 18, 2024 at 12:00 PM Mark Thomas wrote: > > The key differences compared to 1.3.0 are: > > - Fix a crash on Windows when SSLContext.setCACertificate() is invoked >with a null value for caCertificateFile and a non-null value for >caCertificatePath > - The windows binaries in thi

Re: [VOTE] Release Apache Tomcat Native 2.0.8

2024-07-18 Thread Rémy Maucherat
On Wed, Jul 17, 2024 at 9:52 PM Mark Thomas wrote: > > The key differences of version 2.0.8 compared to 2.0.7 are: > > - Fix a crash on Windows when SSLContext.setCACertificate() is invoked >with a null value for caCertificateFile and a non-null value for >caCertificatePath > - The windows

Re: Short and long term plans for Tomcat Native

2024-07-17 Thread Rémy Maucherat
On Wed, Jul 17, 2024 at 5:34 PM Mark Thomas wrote: > > All, > > I've spent some time today trying to build Tomcat Native with Visual > Studio 2022 rather then the current, more involved process without success. > > Therefore, my short-term plan for Tomcat Native is to get the next 2.0.x > and 1.3.

Re: (tomcat) branch main updated: Fix regression calling add-osgi

2024-07-17 Thread Rémy Maucherat
On Tue, Jul 16, 2024 at 12:39 PM Mark Thomas wrote: > > On 16/07/2024 10:40, r...@apache.org wrote: > > This is an automated email from the ASF dual-hosted git repository. > > > > remm pushed a commit to branch main > > in repository https://gitbox.apache.org/repos/asf/tomcat.git > > > > > > The f

Re: (tomcat) branch main updated: Fix regression calling add-osgi

2024-07-16 Thread Rémy Maucherat
On Tue, Jul 16, 2024 at 12:39 PM Mark Thomas wrote: > > On 16/07/2024 10:40, r...@apache.org wrote: > > This is an automated email from the ASF dual-hosted git repository. > > > > remm pushed a commit to branch main > > in repository https://gitbox.apache.org/repos/asf/tomcat.git > > > > > > The f

Re: Security mechanisms to counter spam

2024-07-15 Thread Rémy Maucherat
On Sat, Jun 8, 2024 at 10:34 AM Rémy Maucherat wrote: > > On Fri, Jun 7, 2024 at 12:23 PM Dimitris Soumis wrote: > > > > Hi All, > > > > Due to the surge in spam BZs today, I propose implementing a security > > mechanism to counter this issue and prevent f

Re: OpenSSL alternatives using FFM

2024-07-09 Thread Rémy Maucherat
On Fri, Jul 5, 2024 at 10:55 PM Christopher Schultz wrote: > > Rémy, > > On 7/4/24 09:15, Rémy Maucherat wrote: > > As an experiment, I tested with LibreSSL and BoringSSL on LInux using > > the FFM code. Both did not need too many API changes to start working, > >

Re: [VOTE] Release Apache Tomcat 10.1.26

2024-07-08 Thread Rémy Maucherat
On Mon, Jul 8, 2024 at 12:07 AM Christopher Schultz wrote: > > The proposed Apache Tomcat 10.1.26 release is now available for > voting. > > All committers and PMC members are kindly requested to provide a vote if > possible. ANY TOMCAT USER MAY VOTE, though only PMC members votes are > binding. W

Re: [ANN] New committer: Dimitris Soumis

2024-07-08 Thread Rémy Maucherat
On Mon, Jul 8, 2024 at 12:50 PM Dimitris Soumis wrote: > > Thank you very much for the warm welcome. I look forward to collaborating > with all of you and continuing the great work that has made Tomcat a > cornerstone project. +1 Welcome ! Rémy > Best regards, > > Dimitris > > On Sat, Jul 6, 2

[ANN] Apache Tomcat 9.0.91 available

2024-07-08 Thread Rémy Maucherat
The Apache Tomcat team announces the immediate availability of Apache Tomcat 9.0.91. Apache Tomcat 9 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 9.0.91 is a bugfix and feat

[VOTE][RESULT] Release Apache Tomcat 9.0.91

2024-07-08 Thread Rémy Maucherat
The following votes were cast: Binding: +1: remm, markt, jfclere Non-binding +1: dsoumis No other votes were cast. The vote therefore passes. Thanks to everyone who contributed to this release. Rémy - To unsubscribe, e-mail:

OpenSSL alternatives using FFM

2024-07-04 Thread Rémy Maucherat
Hi, As an experiment, I tested with LibreSSL and BoringSSL on LInux using the FFM code. Both did not need too many API changes to start working, so I committed the changes to "add support" for them. LibreSSL: - I cannot get it to renegotiate anything. The client always gets a "no_renegotiation" a

Re: [VOTE] Release Apache Tomcat 9.0.91

2024-07-04 Thread Rémy Maucherat
On Tue, Jul 2, 2024 at 3:00 PM Rémy Maucherat wrote: > > The proposed Apache Tomcat 9.0.91 release is now available for voting. > > The notable changes compared to 9.0.90 are: > > - When using include directives in a tag file packaged in a JAR file, >ensure that the i

Re: [VOTE] Release Apache Tomcat 11.0.0-M22

2024-07-03 Thread Rémy Maucherat
On Tue, Jul 2, 2024 at 2:01 PM Mark Thomas wrote: > > The proposed Apache Tomcat 11.0.0-M22 release is now available for > voting. > > Apache Tomcat 11.0.0-M22 is a milestone release of the 11.0.x branch and > has been made to provide users with early access to the new features in > Apache Tomcat

[VOTE] Release Apache Tomcat 9.0.91

2024-07-02 Thread Rémy Maucherat
The proposed Apache Tomcat 9.0.91 release is now available for voting. The notable changes compared to 9.0.90 are: - When using include directives in a tag file packaged in a JAR file, ensure that the include directives are processed correctly. - Expand the implementation of the filter value

Re: (tomcat) branch main updated: Attempt to fix unit tests on MacOS

2024-07-02 Thread Rémy Maucherat
On Tue, Jul 2, 2024 at 9:52 AM wrote: > > This is an automated email from the ASF dual-hosted git repository. > > markt pushed a commit to branch main > in repository https://gitbox.apache.org/repos/asf/tomcat.git > > > The following commit(s) were added to refs/heads/main by this push: > new

Re: Reduce default for maxParameterCount

2024-07-02 Thread Rémy Maucherat
On Tue, Jul 2, 2024 at 1:05 PM Mark Thomas wrote: > > On 02/07/2024 12:01, Michael Osipov wrote: > > On 2024/07/02 10:33:29 Mark Thomas wrote: > >> On 01/07/2024 07:17, Michael Osipov wrote: > > > > >>> I would really really expect that Tomcat fails hard with 4xx if the input > >>> is invalid an

Re: (tomcat) branch main updated: Remove MacOS workaround

2024-07-01 Thread Rémy Maucherat
On Mon, Jul 1, 2024 at 5:00 PM Mark Thomas wrote: > > On 28/06/2024 13:25, r...@apache.org wrote: > > This is an automated email from the ASF dual-hosted git repository. > > > > remm pushed a commit to branch main > > in repository https://gitbox.apache.org/repos/asf/tomcat.git > > > > > > The fol

Re: (tomcat) branch main updated: Try to adjust for Windows

2024-06-28 Thread Rémy Maucherat
On Fri, Jun 28, 2024 at 3:52 PM Mark Thomas wrote: > > On 27/06/2024 19:27, r...@apache.org wrote: > > This is an automated email from the ASF dual-hosted git repository. > > > > remm pushed a commit to branch main > > in repository https://gitbox.apache.org/repos/asf/tomcat.git > > > > > > The fo

Re: [tomcat] 02/03: Experimenting with Semgrep

2024-06-26 Thread Rémy Maucherat
On Wed, Sep 13, 2023 at 12:53 PM Mark Thomas wrote: > > On 13/09/2023 11:18, ma...@apache.org wrote: > > This is an automated email from the ASF dual-hosted git repository. > > > > markt pushed a commit to branch main > > in repository https://gitbox.apache.org/repos/asf/tomcat.git > > > > commit

Re: (tomcat) branch main updated: Fix line endings (should be LF in source control)

2024-06-26 Thread Rémy Maucherat
On Wed, Jun 26, 2024 at 4:34 PM wrote: > > This is an automated email from the ASF dual-hosted git repository. > > markt pushed a commit to branch main > in repository https://gitbox.apache.org/repos/asf/tomcat.git > > > The following commit(s) were added to refs/heads/main by this push: > ne

Re: TestDataSourceUserDatabase and TestDataSourceRealm need Java 17

2024-06-20 Thread Rémy Maucherat
On Tue, Jun 18, 2024 at 12:26 PM Rainer Jung wrote: > > Am 18.06.24 um 10:37 schrieb Rémy Maucherat: > > On Tue, Jun 18, 2024 at 9:45 AM Rainer Jung wrote: > >> > >> Hi there, > >> > >> the test classes org.apache.ca

Re: (tomcat) branch main updated: Clear error earlier

2024-06-19 Thread Rémy Maucherat
On Wed, Jun 19, 2024 at 6:49 PM Christopher Schultz wrote: > > Rémy, > > Michael-o has been pointing out that when fetching errors from OpenSSL, > it's important to get all of them because OpenSSL tends to queue them up. > > Instead of getting "last error" should we be getting "all errors" as a >

Re: [VOTE] Release Apache Tomcat 9.0.90

2024-06-19 Thread Rémy Maucherat
On Wed, Jun 19, 2024 at 3:59 PM Christopher Schultz wrote: > > Rémy, > > On 6/14/24 11:06 AM, Rémy Maucherat wrote: > > The proposed Apache Tomcat 9.0.90 release is now available for voting. > > > > The notable changes compared to 9.0.89 are: > > > > - E

[ANN] Apache Tomcat 9.0.90 available

2024-06-19 Thread Rémy Maucherat
The Apache Tomcat team announces the immediate availability of Apache Tomcat 9.0.90. Apache Tomcat 9 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 9.0.90 is a bugfix and feat

[VOTE][RESULT] Release Apache Tomcat 9.0.90

2024-06-19 Thread Rémy Maucherat
The following votes were cast: Binding: +1: markt, isapir, remm Non-binding +1: Dimitris Soumis No other votes were cast. The vote therefore passes. Thanks to everyone who contributed to this release. Rémy - To unsubscribe,

Re: [VOTE] Release Apache Tomcat 9.0.90

2024-06-18 Thread Rémy Maucherat
On Tue, Jun 18, 2024 at 8:26 PM Rémy Maucherat wrote: > > On Tue, Jun 18, 2024 at 5:02 PM Dimitris Soumis wrote: > > > > -1 org.apache.catalina.ant.TestDeployTask is broken although test.apr.loc > > Yeah, ok there's still likely a problem with the counting that w

Re: [VOTE] Release Apache Tomcat 9.0.90

2024-06-18 Thread Rémy Maucherat
tartup.Tomcat.stop(Tomcat.java:448) > at > org.apache.catalina.startup.TomcatBaseTest.tearDown(TomcatBaseTest.java:247) > at > java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:103) > > The root cause should be this commit > <

Re: panama test TestOpenSSLConf.testOpenSSLConfCmdCipher() failing

2024-06-18 Thread Rémy Maucherat
On Tue, Jun 18, 2024 at 12:32 PM Rainer Jung wrote: > > Am 18.06.24 um 12:04 schrieb Rémy Maucherat: > > On Tue, Jun 18, 2024 at 9:36 AM Rainer Jung wrote: > >> > >> Hi all, > >> > >> when testing 11.0.0-M21 and 10.1.25 I ob

Re: panama test TestOpenSSLConf.testOpenSSLConfCmdCipher() failing

2024-06-18 Thread Rémy Maucherat
On Tue, Jun 18, 2024 at 9:36 AM Rainer Jung wrote: > > Hi all, > > when testing 11.0.0-M21 and 10.1.25 I observe new failures in panama: > > Testcase: > testOpenSSLConfCmdCipher[org.apache.tomcat.util.net.openssl.panama.OpenSSLImplementation] > took 4.438 sec > FAILED > Wrong HostConfig c

Re: TestDataSourceUserDatabase and TestDataSourceRealm need Java 17

2024-06-18 Thread Rémy Maucherat
On Tue, Jun 18, 2024 at 9:45 AM Rainer Jung wrote: > > Hi there, > > the test classes org.apache.catalina.users.TestDataSourceUserDatabase > and org.apache.catalina.realm.TestDataSourceRealm have a filing test > which needs Java 17 due to the class version of > org/apache/derby/jdbc/EmbeddedDriver

Re: [VOTE] Release Apache Tomcat 9.0.90

2024-06-17 Thread Rémy Maucherat
On Fri, Jun 14, 2024 at 5:06 PM Rémy Maucherat wrote: > > The proposed Apache Tomcat 9.0.90 release is now available for voting. > > The notable changes compared to 9.0.89 are: > > - Ensure that static resources deployed via a JAR file remain accessible >when the context

Re: [VOTE] Release Apache Tomcat 10.1.25

2024-06-17 Thread Rémy Maucherat
On Fri, Jun 14, 2024 at 11:19 PM Christopher Schultz wrote: > > The proposed Apache Tomcat 10.1.25 release is now available for > voting. > > All committers and PMC members are kindly requested to provide a vote if > possible. ANY TOMCAT USER MAY VOTE, though only PMC members votes are > binding.

Re: [VOTE] Release Apache Tomcat 11.0.0-M21

2024-06-14 Thread Rémy Maucherat
On Fri, Jun 14, 2024 at 4:58 PM Mark Thomas wrote: > > The proposed Apache Tomcat 11.0.0-M21 release is now available for > voting. > > Apache Tomcat 11.0.0-M21 is a milestone release of the 11.0.x branch and > has been made to provide users with early access to the new features in > Apache Tomcat

Re: [VOTE] Release Apache Tomcat 9.0.90

2024-06-14 Thread Rémy Maucherat
On Fri, Jun 14, 2024 at 7:39 PM Mark Thomas wrote: > > On 14/06/2024 16:06, Rémy Maucherat wrote: > > > The proposed 9.0.90 release is: > > [ ] -1, Broken - do not release > > [X] +1, Stable - go ahead and release as 9.0.90 > > Tests pass on Linux, Windows,

[VOTE] Release Apache Tomcat 9.0.90

2024-06-14 Thread Rémy Maucherat
The proposed Apache Tomcat 9.0.90 release is now available for voting. The notable changes compared to 9.0.89 are: - Ensure that static resources deployed via a JAR file remain accessible when the context is configured to use a bloom filter. Based on pull request #730 provided by bergander.

Re: Tagging June releases

2024-06-13 Thread Rémy Maucherat
On Thu, Jun 13, 2024 at 1:43 PM Mark Thomas wrote: > > Just to confirm, I intend to tag 11.0.x tomorrow and that I intend the > next 11.0.x release to be a BETA release. > > That does beg the question how long until we have a stable release. > Given the similarity between 11.0.x and 10.1.x I don't

BND 7 and multi release JARs

2024-06-11 Thread Rémy Maucherat
Hi, To fix the issue with having Java 22 classes in tomcat-coyote (and embedded), I was looking at multi release JARs. I think it would work fine *if* we were building the JARs ourselves (jarIt task), but then the jars are actually rebuilt with bnd. Supposedly bnd 7.0.0 (which we just upgraded to

Re: [PROPOSAL] Enable SecureLifecycleListener by default

2024-06-08 Thread Rémy Maucherat
On Thu, Jun 6, 2024 at 4:46 PM Christopher Schultz wrote: > > All, > > I'd like to remove the around the SecureLifecycleListener > in conf/server.xml that we bundle with Tomcat distributions. > > Before I do so, are there any objections to making this change? +1 Having something commented out in

Re: [PROPOSAL] Remove JSP file from ROOT web application

2024-06-08 Thread Rémy Maucherat
On Thu, Jun 6, 2024 at 4:44 PM Christopher Schultz wrote: > > All, > > I'd like to change the existing webapps/ROOT/index.jsp to index.html and > remove the dynamic elements. Currently, the only truly dynamic element > in the whole file is this: > > " > Copyright ©1999-${year} Apache Software > Fo

Re: [PROPOSAL] Tomcat 10: Remove CGI Servlet

2024-06-08 Thread Rémy Maucherat
On Thu, Jun 6, 2024 at 4:40 PM Christopher Schultz wrote: > > All, > > Resurrecting this thread from 2019. > > I will be proceeding with this 4.5-year-old plan to extract the CGI > servlet to a separate JAR file to make it easy to "remove" from Tomcat > if operators would prefer to do such things.

Re: Security mechanisms to counter spam

2024-06-08 Thread Rémy Maucherat
On Fri, Jun 7, 2024 at 12:23 PM Dimitris Soumis wrote: > > Hi All, > > Due to the surge in spam BZs today, I propose implementing a security > mechanism to counter this issue and prevent further disruption to the > mailing list. > > A potential solution could include a honeypot to identify and blo

Re: [PROPOSAL] Tomcat 10: Remove Server-Side Includes (SSI)

2024-06-08 Thread Rémy Maucherat
On Mon, Oct 7, 2019 at 4:46 PM Christopher Schultz wrote: > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > All, > > I recently gave a presentation on locking-down Apache Tomcat[1] and I > briefly discussed the "sharp edges" present in Tomcat. Some of them > are unnecessarily sharp and may

Re: WebDAV and Microsoft clients

2024-05-23 Thread Rémy Maucherat
On Wed, May 22, 2024 at 7:21 PM Mark Thomas wrote: > > All, > > I've been looking at the WebDav Servlet for the last few days and in > particular how it interacts with Microsoft clients. > > Basic operations including: > - directory listings > - create new file > - create new directory > - rename

Re: ServiceBindingPropertySource

2024-05-22 Thread Rémy Maucherat
On Wed, May 22, 2024 at 9:06 AM Mark Thomas wrote: > > On 21/05/2024 18:50, Christopher Schultz wrote: > > > > > 1. Allow ServiceBindingPropertySource to use the SERVICE_BINDING_ROOT > > environment variable *or* a system property with an appropriate name > > such as service.binding.root, with th

Re: Buildbot failure in on tomcat-10.1.x

2024-05-16 Thread Rémy Maucherat
On Thu, May 16, 2024 at 12:20 PM Mark Thomas wrote: > > On 16/05/2024 11:17, Mark Thomas wrote: > > On 16/05/2024 10:34, Rémy Maucherat wrote: > >> On Thu, May 16, 2024 at 10:57 AM wrote: > >>> > >>> Build status: BUILD FAILED: failed compile (

Re: Buildbot failure in on tomcat-10.1.x

2024-05-16 Thread Rémy Maucherat
On Thu, May 16, 2024 at 10:57 AM wrote: > > Build status: BUILD FAILED: failed compile (failure) > Worker used: bb_worker2_ubuntu > URL: https://ci2.apache.org/#builders/44/builds/1265 > Blamelist: remm > Build Text: failed compile (failure) > Status Detected: new failure > Build Source Stamp: [b

Re: [tcnative] switch from using ERR_error_string to ERR_error_string_n

2024-05-15 Thread Rémy Maucherat
On Tue, May 14, 2024 at 11:15 PM Christopher Schultz wrote: > > All, > > I'd like to basically globally-search-and-replace ERR_error_string for > ERR_error_string_n and use a #define constant for both the > initialization of all > > char err[256]; > > and similar strings and use that same cons

Re: [VOTE] Release Apache Tomcat 10.1.24

2024-05-09 Thread Rémy Maucherat
On Thu, May 9, 2024 at 8:12 PM Christopher Schultz wrote: > > The proposed Apache Tomcat 10.1.24 release is now available for > voting. > > The notable changes compared to 10.1.23 are: > > - Correct error handling for asynchronous requests > > - Refactor HTTP header parsing to use common parsing c

[ANN] Apache Tomcat 9.0.89 available

2024-05-07 Thread Rémy Maucherat
The Apache Tomcat team announces the immediate availability of Apache Tomcat 9.0.89. Apache Tomcat 9 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 9.0.89 is a bugfix and feat

[VOTE][RESULT] Release Apache Tomcat 9.0.89

2024-05-07 Thread Rémy Maucherat
The following votes were cast: Binding: +1: isapir, rjung, remm, jfclere +0: markt No other votes were cast. The vote therefore passes. Thanks to everyone who contributed to this release. Rémy - To unsubscribe, e-mail: dev-un

Re: [VOTE] Release Apache Tomcat 9.0.89

2024-05-06 Thread Rémy Maucherat
On Fri, May 3, 2024 at 10:37 PM Rémy Maucherat wrote: > > The proposed Apache Tomcat 9.0.89 release is now available for voting. > > The notable changes compared to 9.0.88 are: > > - Refactor HTTP header parsing to use common parsing code and fix >non-blocking reads of c

Re: [VOTE] Release Apache Tomcat 11.0.0-M20

2024-05-06 Thread Rémy Maucherat
On Fri, May 3, 2024 at 6:22 PM Mark Thomas wrote: > > The proposed Apache Tomcat 11.0.0-M20 release is now available for > voting. > > Apache Tomcat 11.0.0-M20 is a milestone release of the 11.0.x branch and > has been made to provide users with early access to the new features in > Apache Tomcat

Re: [VOTE] Release Apache Tomcat 9.0.89

2024-05-06 Thread Rémy Maucherat
On Mon, May 6, 2024 at 4:57 AM Rainer Jung wrote: > > Am 03.05.24 um 22:37 schrieb Rémy Maucherat: > > The proposed Apache Tomcat 9.0.89 release is now available for voting. > > > > The notable changes compared to 9.0.88 are: > > > > - Refactor HTTP header pa

[VOTE] Release Apache Tomcat 9.0.89

2024-05-03 Thread Rémy Maucherat
The proposed Apache Tomcat 9.0.89 release is now available for voting. The notable changes compared to 9.0.88 are: - Refactor HTTP header parsing to use common parsing code and fix non-blocking reads of chunked request bodies including trailer fields - Add more timescale options to AccessLogV

Re: Tagging May releases

2024-05-03 Thread Rémy Maucherat
On Thu, May 2, 2024 at 7:26 PM Mark Thomas wrote: > > Hi all, > > Things are looking good for the May releases. I have a few things to > back-port to 10.1.x and 9.0.x and then I'll start running my pre-release > tests. Providing everything passes (and CI runs suggest they will) I'll > tag 11.0.x -

Re: Refactoring heads up

2024-04-26 Thread Rémy Maucherat
On Fri, Apr 26, 2024 at 7:20 PM Mark Thomas wrote: > > On 24/04/2024 17:52, Mark Thomas wrote: > > > > > My plan is to commit these changes to 11.0.x with the low risk parts > > (e.g. new methods) back-ported. Then, once we can see what is left, we > > can decide how quickly/slowly we want to bac

Re: [VOTE] Release Apache Tomcat 10.1.23

2024-04-21 Thread Rémy Maucherat
On Sun, Apr 21, 2024 at 11:52 AM Rainer Jung wrote: > > Am 16.04.24 um 15:11 schrieb Christopher Schultz: > > The proposed Apache Tomcat 10.1.23 release is now available for > > voting. Apache Tomcat 10.1.21 was canceled due to a release-build > > mistake and Apache Tomcat 10.1.22 was cancelled du

Re: Panama modules: inconsistency between 9.0.x, 10.1.x and main?

2024-04-18 Thread Rémy Maucherat
On Thu, Apr 18, 2024 at 1:52 PM Rainer Jung wrote: > > Hi all, > > I noticed, that in main and 9.0.x we have a panama module, but not in > 10.1.x. > > More precisely I see: > > main and 10.1.x do have java/org/apache/tomcat/util/net/openssl/panama. > That is probably due to the existence of Java 2

Re: [VOTE] Release Apache Tomcat 10.1.23

2024-04-16 Thread Rémy Maucherat
On Tue, Apr 16, 2024 at 3:11 PM Christopher Schultz wrote: > > The proposed Apache Tomcat 10.1.23 release is now available for > voting. Apache Tomcat 10.1.21 was canceled due to a release-build > mistake and Apache Tomcat 10.1.22 was cancelled due to an option in > startup scripts which would hav

[ANN] Apache Tomcat 9.0.88 available

2024-04-16 Thread Rémy Maucherat
The Apache Tomcat team announces the immediate availability of Apache Tomcat 9.0.88. Apache Tomcat 9 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 9.0.88 is a bugfix and feat

[ANN] Apache Tomcat 11.0.0-M19 (alpha) available

2024-04-16 Thread Rémy Maucherat
The Apache Tomcat team announces the immediate availability of Apache Tomcat 11.0.0-M19 (alpha). Apache Tomcat 11 is an open source software implementation of the Jakarta Servlet, Jakarta Server Pages, Jakarta Expression Language, Jakarta WebSocket, Jakarta Authentication and Jakarta Annotations s

  1   2   3   4   5   6   7   8   9   10   >