Re: [VOTE] Release Apache Tomcat 8.0.35

2016-05-15 Thread Rainer Jung 

Am 12.05.2016 um 00:34 schrieb Mark Thomas:

The proposed Apache Tomcat 8.0.35 release is now available for voting.

8.0.35 corrects a regression found in 8.0.34.

The main changes since 8.0.33 are:

- Make the default TLS configuration more secure.

- Update the packaged version of the Tomcat Native Library to 1.2.7
  to pick up the Windows binaries that are based on OpenSSL 1.0.2h
  and APR 1.5.2.

It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-8/v8.0.35/
The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1082/
The svn tag is:
http://svn.apache.org/repos/asf/tomcat/tc8.0.x/tags/TOMCAT_8_0_35/

The proposed 8.0.35 release is:
[ ] Broken - do not release
[X] Stable - go ahead and release as 8.0.35


+1 to release.

Details
===

- MD5 OK
- signatures OK
- key in KEYS file
- gz and zip for src and bin consistent
- src completely consistent with svn tag
- builds fine
  - warning about unchecked calls or conversions in:
- org/apache/catalina/tribes/tipis/AbstractReplicatedMap.java
- org/apache/tomcat/jdbc/pool/PoolProperties.java
  Not a regression
- build result looks consistent with binaries
- no checkstyle complaints
- no Javadoc warnings
- Unit tests: No failures
  - Two minor observations see below
- JMX MBean Comparison with 8.0.33:
  - ThreadPool and Connector MBean attribute cipher changed
from "HIGH:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5"
to "HIGH:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!kRSA:!DHE"
  - WebResourceRoot MBean attributes lookupCount and hitCount
increased by 2 for each context directly after startup
  - new system property "-Djdk.tls.ephemeralDHKeySize=2048" is set
  - Collection Count of "PS Scavenge" GC after startup reduced from
4 to 3 (the same value as for 8.0.32)
  - tomcat.util.scan.StandardJarScanFilter.jarsToScan now contains
an additional "slf4j-taglib*.jar" at the end

Build and tests were done using Java 1.7.0_80. OS was Solaris 10 Sparc, 
tcnative was 1.2.7 based on APR 1.5.1 and OpenSSL 1.0.2h.


Two things in unit test output that were not present in 8.0.33 output:

- SEVERE line for "testCometConnectorStop Status" only for apr
  (but this seemed to pop up occasionally for older releases too):

[junit] 14-May-2016 22:16:36.397 INFO [main] 
org.apache.coyote.AbstractProtocol.stop Stopping ProtocolHandler 
["http-apr-127.0.0.1-auto-2-42005"]
[junit] 14-May-2016 22:16:46.534 INFO [main] 
org.apache.coyote.AbstractProtocol.destroy Destroying ProtocolHandler 
["http-apr-127.0.0.1-auto-2-42005"]
[junit] 14-May-2016 22:16:46.538 SEVERE [main] 
org.apache.catalina.comet.TestCometProcessor.testCometConnectorStop Status:

[junit] WriterThread exception: null
[junit] ReaderThread exception: java.net.SocketTimeoutException: 
Read timed out

[junit] Last message: [Client: END]
[junit] Last response line: [0]
[junit] Last comet event: [END]
[junit] END event occurred: [true]
[junit] 14-May-2016 22:16:46.538 INFO [main] 
org.apache.catalina.core.StandardService.stopInternal Stopping service 
Tomcat


- Exception in async servlet during TestAsyncContextImpl test cases 
testBug59219a and testBug59219b for all Connectors:


[junit] 14-May-2016 20:19:22.065 INFO [main] 
org.apache.catalina.startup.LoggingBaseTest.setUp Starting test case 
[testBug59219a]
[junit] 14-May-2016 20:19:22.073 INFO [main] 
org.apache.coyote.AbstractProtocol.init Initializing ProtocolHandler 
["http-bio-127.0.0.1-auto-30"]
[junit] 14-May-2016 20:19:22.075 INFO [main] 
org.apache.catalina.core.StandardService.startInternal Starting service 
Tomcat
[junit] 14-May-2016 20:19:22.076 INFO [main] 
org.apache.catalina.core.StandardEngine.startInternal Starting Servlet 
Engine: Apache Tomcat/8.0.35
[junit] 14-May-2016 20:19:22.097 INFO [main] 
org.apache.coyote.AbstractProtocol.start Starting ProtocolHandler 
["http-bio-127.0.0.1-auto-30-33303"]
[junit] 14-May-2016 20:19:22.106 SEVERE 
[http-bio-127.0.0.1-auto-30-exec-1] 
org.apache.catalina.core.StandardWrapperValve.invoke Servlet.service() 
for servlet [async] in context with path [] threw exception [null] with 
root cause

[junit]  javax.servlet.ServletException
[junit] at 
org.apache.catalina.core.TestAsyncContextImpl$Bug59219Servlet.doGet(TestAsyncContextImpl.java:1892)
[junit] at 
javax.servlet.http.HttpServlet.service(HttpServlet.java:622)
[junit] at 
javax.servlet.http.HttpServlet.service(HttpServlet.java:729)
[junit] at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:292)
[junit] at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:207)
[junit] at 
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:212)
[junit] at 
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:106)
[junit] at

Re: [VOTE] Release Apache Tomcat 8.0.35

2016-05-14 Thread Ognjen Blagojevic 

On 12.5.2016 0:34, Mark Thomas wrote:

The proposed 8.0.35 release is:
[ ] Broken - do not release
[X] Stable - go ahead and release as 8.0.35


Tested .zip distribution on Windows 7 64-bit, Oracle JDK 1.8.0_77 and 
APR/native 1.2.7:


- Tested TLS connectivity for BIO, NIO, NIO2 and APR connectors. Default 
configuration gets "A" on SSLLabs test. Great job!


- Tested with several webapps that are in active development.

-Ognjen

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Re: [VOTE] Release Apache Tomcat 8.0.35

2016-05-12 Thread Keiichi Fujino 
2016-05-12 7:34 GMT+09:00 Mark Thomas :

> The proposed Apache Tomcat 8.0.35 release is now available for voting.
>
> 8.0.35 corrects a regression found in 8.0.34.
>
> The main changes since 8.0.33 are:
>
> - Make the default TLS configuration more secure.
>
> - Update the packaged version of the Tomcat Native Library to 1.2.7
>   to pick up the Windows binaries that are based on OpenSSL 1.0.2h
>   and APR 1.5.2.
>
> It can be obtained from:
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-8/v8.0.35/
> The Maven staging repo is:
> https://repository.apache.org/content/repositories/orgapachetomcat-1082/
> The svn tag is:
> http://svn.apache.org/repos/asf/tomcat/tc8.0.x/tags/TOMCAT_8_0_35/
>
> The proposed 8.0.35 release is:
> [ ] Broken - do not release
> [X] Stable - go ahead and release as 8.0.35
>
>
+1
Tested on my test apps (use BackupManager).



>
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: dev-h...@tomcat.apache.org
>
>


-- 
Keiichi.Fujino

Re: [VOTE] Release Apache Tomcat 8.0.35

2016-05-12 Thread Felix Schumacher 

Am 12.05.2016 um 00:34 schrieb Mark Thomas:

The proposed Apache Tomcat 8.0.35 release is now available for voting.

8.0.35 corrects a regression found in 8.0.34.

The main changes since 8.0.33 are:

- Make the default TLS configuration more secure.

- Update the packaged version of the Tomcat Native Library to 1.2.7
   to pick up the Windows binaries that are based on OpenSSL 1.0.2h
   and APR 1.5.2.

It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-8/v8.0.35/
The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1082/
The svn tag is:
http://svn.apache.org/repos/asf/tomcat/tc8.0.x/tags/TOMCAT_8_0_35/

The proposed 8.0.35 release is:
[ ] Broken - do not release
[x] Stable - go ahead and release as 8.0.35
org.apache.tomcat.websocket.server.TestCloseBug58624 seems to be a bit 
flaky, especially with nio2. Could by my ubuntu setup, though.


[junit] Running org.apache.tomcat.websocket.server.TestCloseBug58624
[junit] 12-May-2016 21:29:13.261 INFO [main] 
org.apache.coyote.AbstractProtocol.init Initializing ProtocolHandler 
["http-nio2-127.0.0.1-auto-1"]
[junit] 12-May-2016 21:29:13.281 INFO [main] 
org.apache.catalina.core.StandardService.startInternal Starting service 
Tomcat
[junit] 12-May-2016 21:29:13.282 INFO [main] 
org.apache.catalina.core.StandardEngine.startInternal Starting Servlet 
Engine: Apache Tomcat/8.0.35-dev
[junit] 12-May-2016 21:29:13.416 INFO [main] 
org.apache.coyote.AbstractProtocol.start Starting ProtocolHandler 
["http-nio2-127.0.0.1-auto-1-41135"]

[junit] java.io.EOFException
[junit] at 
org.apache.coyote.http11.upgrade.Nio2ServletInputStream$1.completed(Nio2ServletInputStream.java:60)
[junit] at 
org.apache.coyote.http11.upgrade.Nio2ServletInputStream$1.completed(Nio2ServletInputStream.java:51)

[junit] at sun.nio.ch.Invoker.invokeUnchecked(Invoker.java:126)
[junit] at sun.nio.ch.Invoker$2.run(Invoker.java:218)
[junit] at 
sun.nio.ch.AsynchronousChannelGroupImpl$1.run(AsynchronousChannelGroupImpl.java:112)
[junit] at 
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
[junit] at 
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
[junit] at 
org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)

[junit] at java.lang.Thread.run(Thread.java:745)
[junit] 12-May-2016 21:29:13.809 INFO [main] 
org.apache.coyote.AbstractProtocol.pause Pausing ProtocolHandler 
["http-nio2-127.0.0.1-auto-1-41135"]
[junit] Tests run: 1, Failures: 1, Errors: 0, Skipped: 0, Time 
elapsed: 1,192 sec
[junit] 12-May-2016 21:29:13.865 INFO [main] 
org.apache.catalina.core.StandardService.stopInternal Stopping service 
Tomcat
[junit] 12-May-2016 21:29:13.896 INFO [main] 
org.apache.coyote.AbstractProtocol.stop Stopping ProtocolHandler 
["http-nio2-127.0.0.1-auto-1-41135"]
[junit] 12-May-2016 21:29:13.898 INFO [main] 
org.apache.coyote.AbstractProtocol.destroy Destroying ProtocolHandler 
["http-nio2-127.0.0.1-auto-1-41135"]
[junit] Test org.apache.tomcat.websocket.server.TestCloseBug58624 
FAILED


Ubuntu 16.04 x86-64 and Java 1.7.0_80.

Regards,
 Felix



-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org




-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Re: [VOTE] Release Apache Tomcat 8.0.35

2016-05-12 Thread Violeta Georgieva 
Hi,

2016-05-12 1:34 GMT+03:00 Mark Thomas :
>
> The proposed Apache Tomcat 8.0.35 release is now available for voting.
>
> 8.0.35 corrects a regression found in 8.0.34.
>
> The main changes since 8.0.33 are:
>
> - Make the default TLS configuration more secure.
>
> - Update the packaged version of the Tomcat Native Library to 1.2.7
>   to pick up the Windows binaries that are based on OpenSSL 1.0.2h
>   and APR 1.5.2.
>
> It can be obtained from:
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-8/v8.0.35/
> The Maven staging repo is:
> https://repository.apache.org/content/repositories/orgapachetomcat-1082/
> The svn tag is:
> http://svn.apache.org/repos/asf/tomcat/tc8.0.x/tags/TOMCAT_8_0_35/
>
> The proposed 8.0.35 release is:
> [ ] Broken - do not release
> [X] Stable - go ahead and release as 8.0.35

Regards,
Violeta

>
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: dev-h...@tomcat.apache.org
>

Re: [VOTE] Release Apache Tomcat 8.0.35

2016-05-12 Thread Rémy Maucherat 
2016-05-12 0:34 GMT+02:00 Mark Thomas :

> The proposed Apache Tomcat 8.0.35 release is now available for voting.
>
> 8.0.35 corrects a regression found in 8.0.34.
>
> The main changes since 8.0.33 are:
>
> - Make the default TLS configuration more secure.
>
> - Update the packaged version of the Tomcat Native Library to 1.2.7
>   to pick up the Windows binaries that are based on OpenSSL 1.0.2h
>   and APR 1.5.2.
>
> It can be obtained from:
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-8/v8.0.35/
> The Maven staging repo is:
> https://repository.apache.org/content/repositories/orgapachetomcat-1082/
> The svn tag is:
> http://svn.apache.org/repos/asf/tomcat/tc8.0.x/tags/TOMCAT_8_0_35/
>
> The proposed 8.0.35 release is:
> [ ] Broken - do not release
> [X] Stable - go ahead and release as 8.0.35
>
> Assuming no unexpected regression is found.

Rémy

[VOTE] Release Apache Tomcat 8.0.35

2016-05-11 Thread Mark Thomas 
The proposed Apache Tomcat 8.0.35 release is now available for voting.

8.0.35 corrects a regression found in 8.0.34.

The main changes since 8.0.33 are:

- Make the default TLS configuration more secure.

- Update the packaged version of the Tomcat Native Library to 1.2.7
  to pick up the Windows binaries that are based on OpenSSL 1.0.2h
  and APR 1.5.2.

It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-8/v8.0.35/
The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1082/
The svn tag is:
http://svn.apache.org/repos/asf/tomcat/tc8.0.x/tags/TOMCAT_8_0_35/

The proposed 8.0.35 release is:
[ ] Broken - do not release
[ ] Stable - go ahead and release as 8.0.35


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org