Re: [VOTE] Release Apache Tomcat Native 2.0.4

2023-05-31 Thread Han Li
> On May 31, 2023, at 04:58, Mark Thomas wrote: > > The key differences of version 2.0.4 compared to 2.0.3 are: > > - The windows binaries in this release have been built with OpenSSL > 3.0.9 and APR 1.7.4 > > The 2.0.x branch is primarily intended for use with Tomcat 10.1.x but can be >

[Bug 66622] Enabling httpHeaderSecurity includes X-XSS-Protection the protection header which goes against Mozilla recommendations

2023-05-31 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=66622 Mark Thomas changed: What|Removed |Added Status|NEW |RESOLVED Resolution|---

[tomcat] branch 8.5.x updated: Fix 66622 - deprecate xssProtectionEnabled and change default to false

2023-05-31 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new 3a88682ab0 Fix 66622 - deprecate

[tomcat] branch 9.0.x updated: Fix 66622 - deprecate xssProtectionEnabled and change default to false

2023-05-31 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 5bc5fd9895 Fix 66622 - deprecate

[tomcat] branch 10.1.x updated: Fix 66622 - deprecate xssProtectionEnabled and change default to false

2023-05-31 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.1.x by this push: new b3bb402260 Fix 66622 - deprecate

[tomcat] branch main updated: Fix BZ 66622 - remove xssProtectionEnabled due to no browser support

2023-05-31 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new d61570ec0f Fix BZ 66622 - remove

[Bug 66622] Enabling httpHeaderSecurity includes X-XSS-Protection the protection header which goes against Mozilla recommendations

2023-05-31 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=66622 --- Comment #1 from Mark Thomas --- Given the status and history of that feature I intend to do the following: - change the default for xssProtectionEnabled to false - deprecate the feature in 8.5.x to 10.1.x - remove the feature in 11.0.x

[tomcat] 01/02: Simplify code

2023-05-31 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 061f8a27fdcb9f77c9a295d6969e059ddaaee4a3 Author: Mark Thomas AuthorDate: Wed May 31 17:30:12 2023 +0100 Simplify

[Bug 66621] Bug in WebdavServlet?

2023-05-31 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=66621 Mark Thomas changed: What|Removed |Added Resolution|--- |FIXED Status|NEW

[tomcat] branch 8.5.x updated (d2446e4818 -> 65d73d2aab)

2023-05-31 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a change to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git from d2446e4818 Bug 66618: add longDate attribute to XML in directory listing new 061f8a27fd Simplify code new

[tomcat] 02/02: Fix BZ 66621 - remove expired locks from correct collection

2023-05-31 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 7c683db415ef9ccf72f8c47a064d5302e412b9fa Author: Mark Thomas AuthorDate: Wed May 31 17:56:36 2023 +0100 Fix BZ 66621

[tomcat] 02/02: Fix BZ 66621 - remove expired locks from correct collection

2023-05-31 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 65d73d2aabd5abeceac5158ffb233efc047f4549 Author: Mark Thomas AuthorDate: Wed May 31 17:56:36 2023 +0100 Fix BZ 66621

[tomcat] 01/02: Simplify code

2023-05-31 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 3e798a4739c646e2d384ada11b67ed5029db9231 Author: Mark Thomas AuthorDate: Wed May 31 17:30:12 2023 +0100 Simplify

[tomcat] 01/02: Simplify code

2023-05-31 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 3011464c4b6cef6db7ca16b72eb7aee0f0aa7300 Author: Mark Thomas AuthorDate: Wed May 31 17:30:12 2023 +0100 Simplify

[tomcat] 02/02: Fix BZ 66621 - remove expired locks from correct collection

2023-05-31 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 38fba760458219a111e6c84927eb48a9dc623f74 Author: Mark Thomas AuthorDate: Wed May 31 17:56:36 2023 +0100 Fix BZ

[tomcat] branch 9.0.x updated (3d523650ff -> 7c683db415)

2023-05-31 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a change to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git from 3d523650ff Bug 66618: add longDate attribute to XML in directory listing new 3011464c4b Simplify code new

[tomcat] branch 10.1.x updated (8f46ae849d -> 38fba76045)

2023-05-31 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a change to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git from 8f46ae849d Bug 66618: add longDate attribute to XML in directory listing new 3e798a4739 Simplify code new

[tomcat] branch main updated (032f79e9c6 -> dc5c75f182)

2023-05-31 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a change to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git from 032f79e9c6 Consistent format. Add a change log entry. new 33fe0f9be8 Simplify code new dc5c75f182 Fix BZ 66621

[tomcat] 02/02: Fix BZ 66621 - remove expired locks from correct collection

2023-05-31 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git commit dc5c75f1829bed2f80536497b0b06e9da638e243 Author: Mark Thomas AuthorDate: Wed May 31 17:56:36 2023 +0100 Fix BZ 66621

[tomcat] 01/02: Simplify code

2023-05-31 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 33fe0f9be8740f8f8014400807967f5086799605 Author: Mark Thomas AuthorDate: Wed May 31 17:30:12 2023 +0100 Simplify code

Re: [VOTE] Release Apache Tomcat Native 1.2.37

2023-05-31 Thread Igal Sapir
Chris, On Wed, May 31, 2023 at 6:42 AM Christopher Schultz < ch...@christopherschultz.net> wrote: > Igal, > > On 5/31/23 02:23, Igal Sapir wrote: > > On Tue, May 30, 2023 at 3:22 PM Mark Thomas wrote: > > > >> Version 1.2.36 includes the following changes compared to 1.2.36 > >> > >> - The

[GitHub] [tomcat] jfclere commented on pull request #623: BZ 66513: Enforce one concurrent request per session requirement

2023-05-31 Thread via GitHub
jfclere commented on PR #623: URL: https://github.com/apache/tomcat/pull/623#issuecomment-1570546656 trying to remember... I guess I wrote to save and restore session information for a SINGLE tomcat node. -- This is an automated message from the Apache Git Service. To respond to the

[GitHub] [tomcat] markt-asf commented on pull request #623: BZ 66513: Enforce one concurrent request per session requirement

2023-05-31 Thread via GitHub
markt-asf commented on PR #623: URL: https://github.com/apache/tomcat/pull/623#issuecomment-1570534844 > @markt-asf that looks better that what was there ;-) Thanks. Can you recall if there was a use case for this Valve on a single node? Or was it always intended for use

[GitHub] [tomcat] jfclere commented on pull request #623: BZ 66513: Enforce one concurrent request per session requirement

2023-05-31 Thread via GitHub
jfclere commented on PR #623: URL: https://github.com/apache/tomcat/pull/623#issuecomment-1570527918 @markt-asf that looks better that what was there ;-) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above

[Bug 66618] add longDate attribute to XML in directory listing

2023-05-31 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=66618 Mark Thomas changed: What|Removed |Added Resolution|--- |FIXED Status|NEW

[tomcat] branch 8.5.x updated: Bug 66618: add longDate attribute to XML in directory listing

2023-05-31 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new d2446e4818 Bug 66618: add longDate attribute to

[tomcat] branch 9.0.x updated: Bug 66618: add longDate attribute to XML in directory listing

2023-05-31 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 3d523650ff Bug 66618: add longDate attribute to

[tomcat] branch 10.1.x updated: Bug 66618: add longDate attribute to XML in directory listing

2023-05-31 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.1.x by this push: new 8f46ae849d Bug 66618: add longDate attribute to

[tomcat] branch main updated: Consistent format. Add a change log entry.

2023-05-31 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 032f79e9c6 Consistent format. Add a change log

[tomcat] branch main updated (c36cf3a4d8 -> b3d60da211)

2023-05-31 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a change to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git from c36cf3a4d8 Align with 10.1.x / 9.0.x / 8/5/x add b3d60da211 Bug 66618: add longDate attribute to XML in directory

[GitHub] [tomcat] markt-asf merged pull request #622: Bug 66618: add longDate attribute to XML in directory listing

2023-05-31 Thread via GitHub
markt-asf merged PR #622: URL: https://github.com/apache/tomcat/pull/622 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail:

[GitHub] [tomcat] rmaucher commented on pull request #623: BZ 66513: Enforce one concurrent request per session requirement

2023-05-31 Thread via GitHub
rmaucher commented on PR #623: URL: https://github.com/apache/tomcat/pull/623#issuecomment-1570477734 Very clean overall, esp the javadoc update. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to

[GitHub] [tomcat] markt-asf commented on pull request #623: BZ 66513: Enforce one concurrent request per session requirement

2023-05-31 Thread via GitHub
markt-asf commented on PR #623: URL: https://github.com/apache/tomcat/pull/623#issuecomment-1570461148 I haven't deprecated this yet. I'm waiting on input from the OP of BZ 66513 and/or @jfclere as the original author of the Valve in case there is a use case I have missed. -- This is an

[tomcat] branch main updated (a789df00fb -> c36cf3a4d8)

2023-05-31 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a change to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git from a789df00fb Add new classes, previewing in Java 21 EA24 add 348367dcc9 Code clean-up - formatting. No functional

Re: [VOTE] Release Apache Tomcat Native 1.2.37

2023-05-31 Thread Mark Thomas
On 31/05/2023 14:34, Christopher Schultz wrote: Mark, Thanks for RMing On 5/30/23 18:21, Mark Thomas wrote: Version 1.2.36 includes the following changes compared to 1.2.36 - The windows binaries in this release have been built with OpenSSL    1.1.1u and APR 1.7.4 The proposed release

Re: [VOTE] Release Apache Tomcat Native 1.2.37

2023-05-31 Thread Rémy Maucherat
On Wed, May 31, 2023 at 12:21 AM Mark Thomas wrote: > > Version 1.2.36 includes the following changes compared to 1.2.36 > > - The windows binaries in this release have been built with OpenSSL >1.1.1u and APR 1.7.4 > > The proposed release artifacts can be found at [1], > and the build was

Re: [VOTE] Release Apache Tomcat Native 2.0.4

2023-05-31 Thread Rémy Maucherat
On Tue, May 30, 2023 at 10:58 PM Mark Thomas wrote: > > The key differences of version 2.0.4 compared to 2.0.3 are: > > - The windows binaries in this release have been built with OpenSSL >3.0.9 and APR 1.7.4 > > The 2.0.x branch is primarily intended for use with Tomcat 10.1.x but > can be

Re: [VOTE] Release Apache Tomcat Native 2.0.4

2023-05-31 Thread Mark Thomas
On 31/05/2023 14:38, Christopher Schultz wrote: Mark, Thanks for RMing On 5/30/23 16:58, Mark Thomas wrote: The key differences of version 2.0.4 compared to 2.0.3 are: - The windows binaries in this release have been built with OpenSSL    3.0.9 and APR 1.7.4 The 2.0.x branch is primarily

Re: [VOTE] Release Apache Tomcat Native 1.2.37

2023-05-31 Thread Christopher Schultz
Igal, On 5/31/23 02:23, Igal Sapir wrote: On Tue, May 30, 2023 at 3:22 PM Mark Thomas wrote: Version 1.2.36 includes the following changes compared to 1.2.36 - The windows binaries in this release have been built with OpenSSL 1.1.1u and APR 1.7.4 The proposed release artifacts can be

Re: [VOTE] Release Apache Tomcat Native 2.0.4

2023-05-31 Thread Christopher Schultz
Mark, Thanks for RMing On 5/30/23 16:58, Mark Thomas wrote: The key differences of version 2.0.4 compared to 2.0.3 are: - The windows binaries in this release have been built with OpenSSL   3.0.9 and APR 1.7.4 The 2.0.x branch is primarily intended for use with Tomcat 10.1.x but can be

Re: [VOTE] Release Apache Tomcat Native 1.2.37

2023-05-31 Thread Christopher Schultz
Mark, Thanks for RMing On 5/30/23 18:21, Mark Thomas wrote: Version 1.2.36 includes the following changes compared to 1.2.36 - The windows binaries in this release have been built with OpenSSL   1.1.1u and APR 1.7.4 The proposed release artifacts can be found at [1], and the build was done

[Bug 66622] New: Enabling httpHeaderSecurity includes X-XSS-Protection the protection header which goes against Mozilla recommendations

2023-05-31 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=66622 Bug ID: 66622 Summary: Enabling httpHeaderSecurity includes X-XSS-Protection the protection header which goes against Mozilla recommendations Product: Tomcat 8

[Bug 66621] New: Bug in WebdavServlet?

2023-05-31 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=66621 Bug ID: 66621 Summary: Bug in WebdavServlet? Product: Tomcat 8 Version: 8.5.89 Hardware: PC OS: Linux Status: NEW Severity: normal Priority:

[tomcat] branch 10.1.x updated: Align with 9.0.x / 8.5.x

2023-05-31 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.1.x by this push: new d09d0a2548 Align with 9.0.x / 8.5.x d09d0a2548

[Bug 66617] Developing wiki page: "How do I configure Tomcat to support remote debugging?" does not cover distributed shell scripts

2023-05-31 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=66617 Mark Thomas changed: What|Removed |Added Status|REOPENED|RESOLVED Resolution|---

Re: [VOTE] Release Apache Tomcat Native 1.2.37

2023-05-31 Thread Mark Thomas
On 30/05/2023 23:21, Mark Thomas wrote: The Apache Tomcat Native 1.2.37 release is  [X] Stable, go ahead and release  [ ] Broken because of ... Tested using: - Windows binary with Tomcat 11.0.x - Windows binary with Tomcat 9.0.x - Ubuntu (built from source OpenSSL 1.1.1u) with Tomcat 11.0.x

Re: [VOTE] Release Apache Tomcat Native 2.0.4

2023-05-31 Thread Mark Thomas
On 30/05/2023 21:58, Mark Thomas wrote: The Apache Tomcat Native 2.0.4 release is  [X] Stable, go ahead and release  [ ] Broken because of ... Tested using: - Windows binaries with 11.0.x on Windows - Built OpenSSL 3.0.9 and Native 2.0.4 on Ubuntu and tested with 11.0.x All tests passed.

Re: [VOTE] Release Apache Tomcat Native 2.0.4

2023-05-31 Thread Mark Thomas
On 31/05/2023 07:38, Igal Sapir wrote: I get compilation errors, but possibly because I don't have the most recent libs? Running on Ubuntu, the package manager shows the following versions as the most recent: ❯ sudo apt install libapr1-dev libssl-dev Reading package lists... Done Building

[tomcat] branch 8.5.x updated: Add new classes, previewing in Java 21 EA24

2023-05-31 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new 326b48437d Add new classes, previewing in Java 21

[tomcat] branch 9.0.x updated: Add new classes, previewing in Java 21 EA24

2023-05-31 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new e31de8fb90 Add new classes, previewing in Java 21

[tomcat] branch 10.1.x updated: Add new classes, previewing in Java 21 EA24

2023-05-31 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.1.x by this push: new 4e746aaefb Add new classes, previewing in Java

[tomcat] branch main updated: Add new classes, previewing in Java 21 EA24

2023-05-31 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new a789df00fb Add new classes, previewing in Java 21

Re: [VOTE] Release Apache Tomcat Native 2.0.4

2023-05-31 Thread Igal Sapir
Mark, On Tue, May 30, 2023 at 1:58 PM Mark Thomas wrote: > The key differences of version 2.0.4 compared to 2.0.3 are: > > - The windows binaries in this release have been built with OpenSSL >3.0.9 and APR 1.7.4 > > The 2.0.x branch is primarily intended for use with Tomcat 10.1.x but > can

Re: [VOTE] Release Apache Tomcat Native 1.2.37

2023-05-31 Thread Mark Thomas
On 31/05/2023 07:23, Igal Sapir wrote: On Tue, May 30, 2023 at 3:22 PM Mark Thomas wrote: Version 1.2.36 includes the following changes compared to 1.2.36 - The windows binaries in this release have been built with OpenSSL 1.1.1u and APR 1.7.4 The proposed release artifacts can be found

Re: [VOTE] Release Apache Tomcat Native 1.2.37

2023-05-31 Thread Igal Sapir
On Tue, May 30, 2023 at 3:22 PM Mark Thomas wrote: > Version 1.2.36 includes the following changes compared to 1.2.36 > > - The windows binaries in this release have been built with OpenSSL >1.1.1u and APR 1.7.4 > > The proposed release artifacts can be found at [1], > and the build was done

[Bug 66616] French: Misleading HTTP 401 error description ("La requête nécessite une authentification HTTP.")

2023-05-31 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=66616 Mark Thomas changed: What|Removed |Added Resolution|--- |FIXED Status|REOPENED