Re: [VOTE] Release Apache Tomcat 9.0.82

On Wed, Oct 11, 2023 at 9:38 AM Rémy Maucherat wrote: > The proposed Apache Tomcat 9.0.82 release is now available for voting. > > The notable changes compared to 9.0.81 are: > > - Correct a regression in 9.0.81 that broke the Tomcat JBDC >connection pool > > - Correct a regression in 9.0.81

Re: [VOTE] Release Apache Tomcat 9.0.81

On Mon, Oct 9, 2023 at 5:36 PM Rémy Maucherat wrote: > The proposed Apache Tomcat 9.0.81 release is now available for voting. > > The notable changes compared to 9.0.80 are: > > - Provide a lifecycle listener that will automatically > reload TLS configurations a set time before the certificate

Re: [VOTE] Release Apache Tomcat 11.0.0-M12

On Mon, Oct 9, 2023 at 9:22 PM Coty Sutherland wrote: > > > On Mon, Oct 9, 2023 at 5:42 PM Mark Thomas wrote: > >> The proposed Apache Tomcat 11.0.0-M12 release is now available for >> voting. >> >> Apache Tomcat 11.0.0-M12 is a milestone release of th

Re: [VOTE] Release Apache Tomcat 10.1.14

On Mon, Oct 9, 2023 at 6:19 PM Christopher Schultz < ch...@christopherschultz.net> wrote: > The proposed Apache Tomcat 10.1.14 release is now available for > voting. > > The notable changes compared to 10.1.13 are: > > - Update Tomcat Native to 1.2.39 to pick up Windows binaries built with >

Re: [VOTE] Release Apache Tomcat 11.0.0-M12

On Mon, Oct 9, 2023 at 5:42 PM Mark Thomas wrote: > The proposed Apache Tomcat 11.0.0-M12 release is now available for > voting. > > Apache Tomcat 11.0.0-M12 is a milestone release of the 11.0.x branch and > has been made to provide users with early access to the new features in > Apache Tomcat

Re: Tomcat's fork of Commons File Upload

On Fri, Sep 15, 2023 at 8:43 AM Rémy Maucherat wrote: > On Fri, Sep 15, 2023 at 2:38 PM Mark Thomas wrote: > > > > All, > > > > Since the introduction of multi-part upload support in Servlet 3 (Tomcat > > 7), Tomcat has used a package renamed fork of Commons FileUpload to > > provide that

Re: [VOTE] Release Apache Tomcat 9.0.76

On Mon, Jun 5, 2023 at 3:49 AM Rémy Maucherat wrote: > The proposed Apache Tomcat 9.0.76 release is now available for voting. > > The notable changes compared to 9.0.75 are: > > - Add support for virtual threads. (Java 21+ only) > > - Update HTTP/2 to use the RFC-9218 prioritization scheme. > >

Re: Java 21 and virtual threads

On Thu, May 4, 2023 at 8:37 AM Mark Thomas wrote: > Hi all, > > The latest Java 21 EA build has moved virtual threads (from project > Loom) out of preview. How do we want to handle this in Tomcat 11? Recall > that Jakarta EE 11 has set Java 21 as the minimum version. > > I think we have the

Re: tomcat-native v2.0+ breaks unix domain socket support on java16-

Hi there, On Mon, Mar 6, 2023 at 6:01 PM Graham Leggett wrote: > Hi all, > > A while back I added unix domain socket support to tomcat-native, and > patched tomcat to use it until java16 is available. > > Unfortunately unix domain socket support was removed from tomcat-native > 2.0+, and now

Re: Regarding IDE configuration files

On Sat, Feb 4, 2023 at 5:21 AM Mark Thomas wrote: > > 4 Feb 2023 04:17:29 Bailey Brownie : > > > Hi all, > > > > Recently, when setting up Tomcat for development with the Eclipse IDE, > > I noticed that the configuration files that come with Tomcat had > > multiple hard-coded (and outdated)

Re: [DISCUSS] EOL date for 8.5.x

On Fri, Oct 7, 2022 at 5:28 AM Mark Thomas wrote: > Hi all, > > I don't think there is a need to make a decision on this quickly, but > based on past experience and the current discussions about Jakarta EE 11 > I think this is something we need to start thinking about. > > Some key facts: > > -

Re: [VOTE] Release Apache Tomcat 10.1.1

On Mon, Oct 3, 2022 at 9:26 AM Mark Thomas wrote: > The proposed Apache Tomcat 10.1.1 release is now available for > voting. > > Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 > without changes. Java EE applications designed for Tomcat 9 and earlier > may be placed in

Re: [VOTE] Release Apache Tomcat 9.0.65

On Thu, Jul 14, 2022 at 9:17 AM Rémy Maucherat wrote: > The proposed Apache Tomcat 9.0.65 release is now available for voting. > > The notable changes compared to 9.0.64 are: > > - Implement support for repeatable builds. > > - Update the packaged version of the Tomcat Native Library to 1.2.35.

Re: [VOTE] Release Apache Tomcat Native 2.0.1

On Wed, Jul 6, 2022 at 6:32 AM Mark Thomas wrote: > This is the first release of the Tomcat Native 2.0.x branch. The major > differences compared to the 1.2.x branch are: > > - JNI API has been reduced to just that required to support Tomcat's >OpenSSL based TLS implementation. The

Re: [ANN] ApacheCon NA 2022 in New Orleans, 3-6 Oct 2022, CFP is OPEN!

On Fri, Apr 29, 2022 at 2:53 PM Christopher Schultz < ch...@christopherschultz.net> wrote: > All, > > Please remember that the ApacheCon North American conference is still > accepting presentations until 23 May 2022. > > The Tomcat track currently has *zero* proposals, and we were hoping to >

Re: Plans for Tomcat Native

On Mon, May 23, 2022 at 6:52 AM Mark Thomas wrote: > Hi all, > > A question on the users list about Tomcat Native, OpenSSL 3.0 FIPs > caused me to take a look at the current state of supported versions. > > The detail is here: >

Re: [VOTE] Release Apache Tomcat 9.0.62

On Thu, Mar 31, 2022 at 10:57 AM Rémy Maucherat wrote: > The proposed Apache Tomcat 9.0.62 release is now available for voting. > > The notable changes compared to 9.0.60 are: > > - Update the packaged version of the Tomcat Native Library to 1.2.32 to >pick up Windows binaries built with

Re: [VOTE] Release Apache Tomcat 9.0.61

On Wed, Mar 30, 2022 at 4:22 AM Rémy Maucherat wrote: > The proposed Apache Tomcat 9.0.61 release is now available for voting. > > The notable changes compared to 9.0.60 are: > > - Fix a potential thread-safety issue that could cause HTTP/1.1 request >processing to pause, and potentially

Re: Tomcat Native and minimum OpenSSL version

On Wed, Mar 16, 2022 at 11:21 AM Christopher Schultz < ch...@christopherschultz.net> wrote: > Mark, > > On 3/15/22 16:40, Mark Thomas wrote: > > Hi all, > > > > We currently have the following text in the VERSIONS file for Tomcat > > Native: > > > > = > > The current minimum versions

Re: [VOTE] Release Apache Tomcat 9.0.59

On Mon, Feb 21, 2022 at 4:21 PM Rémy Maucherat wrote: > The proposed Apache Tomcat 9.0.59 release is now available for voting. > > The notable changes compared to 9.0.58 are: > > - Add support for additional user attributes to TomcatPrincipal and >GenericPrincipal > > - Correct a regression

Re: [VOTE] Release Apache Tomcat 9.0.58

On Sat, Jan 15, 2022 at 9:51 AM Rémy Maucherat wrote: > The proposed Apache Tomcat 9.0.58 release is now available for voting. > > The notable changes compared to 9.0.56 are: > > - Add recycling check in the input and output stream isReady to try to >give a more informative ISE when the

Re: [VOTE] Release Apache Tomcat 10.1.0-M10

On Sat, Jan 15, 2022 at 7:49 AM Mark Thomas wrote: > The proposed Apache Tomcat 10.1.0-M10 release is now available for > voting. > > Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 > without changes. Java EE applications designed for Tomcat 9 and earlier > may be placed

Re: [VOTE] Release Apache Tomcat 10.1.0-M8

On Thu, Dec 2, 2021 at 9:45 AM Mark Thomas wrote: > The proposed Apache Tomcat 10.1.0-M8 release is now available for > voting. > > Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 > without changes. Java EE applications designed for Tomcat 9 and earlier > may be placed in

Re: [VOTE] Release Apache Tomcat 9.0.56

On Fri, Dec 3, 2021 at 3:50 AM Rémy Maucherat wrote: > The proposed Apache Tomcat 9.0.56 release is now available for voting. > > The notable changes compared to 9.0.56 are: > > - Provide protection against a known OS bug that causes the acceptor to >report an incoming connection more than

Re: [VOTE] Release Apache Tomcat 9.0.56

On Mon, Dec 6, 2021 at 10:57 AM Rémy Maucherat wrote: > On Mon, Dec 6, 2021 at 4:42 PM jean-frederic clere > wrote: > > > > On 06/12/2021 15:19, jean-frederic clere wrote: > > > On 03/12/2021 09:49, Rémy Maucherat wrote: > > >> [X] Stable - go ahead and release as 9.0.56 (stable) > > > > > >

Re: [VOTE] Release Apache Tomcat 10.1.0-M6

On Tue, Sep 28, 2021 at 8:31 AM Mark Thomas wrote: > The proposed Apache Tomcat 10.1.0-M6 release is now available for > voting. > > Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 > without changes. Java EE applications designed for Tomcat 9 and earlier > may be placed

Re: [VOTE] Release Apache Tomcat 9.0.54

On Tue, Sep 28, 2021 at 10:25 AM Rémy Maucherat wrote: > The proposed Apache Tomcat 9.0.54 release is now available for voting. > > The notable changes compared to 9.0.54 are: > > - Further robustness improvements to HTTP/2 flow control window >management > > - Improvements to the

Re: [VOTE] Release Apache Tomcat 9.0.53

On Mon, Sep 6, 2021 at 3:22 PM Rémy Maucherat wrote: > The proposed Apache Tomcat 9.0.53 release is now available for voting. > > The notable changes compared to 9.0.53 are: > > - Add a UserDatabase implementation as a superset of the DataSourceRealm >functionality. > > - Update the internal

Re: Update "developers" list

On Thu, Jul 8, 2021 at 11:17 AM Mark Thomas wrote: > On 08/07/2021 15:28, Christopher Schultz wrote: > > All, > > > > The Apache Tomcat web site has a few places where people are > > specifically listed by name. One is under "Who We Are"[1], and it's > > fairly up-to-date. (Reasonable people can

Re: [VOTE] Release Apache Tomcat 9.0.50

On Mon, Jun 28, 2021 at 4:57 AM Rémy Maucherat wrote: > The proposed Apache Tomcat 9.0.50 release is now available for voting. > > The notable changes compared to 9.0.50 are: > > - Re-work the HTTP/2 overhead protection to reduce the likelihood of >false positives. Note that the default

Re: [VOTE] Release Apache Tomcat 10.0.8

On Fri, Jun 25, 2021 at 7:27 PM Mark Thomas wrote: > The proposed Apache Tomcat 10.0.8 release is now available for > voting. > > Apache Tomcat 10.x implements Jakarta EE 9 and, as such, the primary > package for all the specification APIs has changed from javax.* to > jakarta.* > > Applications

Re: Time to create Tomcat 10.1.x and master->main migration

On Tue, May 18, 2021 at 7:34 AM Mark Thomas wrote: > All, > > Things are starting to move forward for Jakarta EE 10 so I think it is > time for us to create the 10.1.x branch. At the same time, I'd like to > switch our primary development branches from master to main for all our > repos. > > We

Re: [VOTE] Release Apache Tomcat Native 1.2.28

On Thu, Apr 1, 2021 at 9:57 AM Mark Thomas wrote: > Version 1.2.28 includes the following changes compared to 1.2.27 > > - Correct regression in previous fix for BZ 65181 > > The proposed release artefacts can be found at [1], > and the build was done using tag [2]. > > The Apache Tomcat Native

Re: [VOTE] Release Apache Tomcat 9.0.38

On Thu, Sep 10, 2020 at 5:03 AM Mark Thomas wrote: > The proposed Apache Tomcat 9.0.38 release is now available for voting. > > The notable changes compared to the 9.0.37 release are: > > - For requests containing the Expect: 100-continue header, optional > support has been added to delay

Re: [VOTE] Release Apache Tomcat 10.0.0-M8

On Wed, Sep 9, 2020 at 10:57 AM Mark Thomas wrote: > The proposed Apache Tomcat 10.0.0-M8 release is now available for > voting. > > Apache Tomcat 10.x implements Jakarta EE 9 and, as such, the primary > package for all the specification APIs has changed from javax.* to > jakarta.* >

Re: security.txt

On Tue, Sep 1, 2020 at 1:01 PM Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > All, > > I'd like to propose that we publish a security.txt[1] file on our web > site under /.well-known/security.txt and /security.txt > > This file

Re: [PROPOSAL] Remove the functional specs from docs webapp

On Mon, Aug 10, 2020 at 11:46 AM Mark Thomas wrote: > Hi all, > > I'd like to propose removing all the functional spec pages from the > documentation web application. > > My reasoning for this proposal is, in short, that we aren't using or > maintaining these pages. > > I don't recall any

Re: [tomcat] 01/02: Fix BZ 64540 - switch from bndwrap task to bnd task, begin generating a better manifest and make sure the resulting jar contents are correct.

s are > actually used externally and I had some changes coming to deal with those > (but presently I'm on vacation so thanks for handling some of those those > Mark.) > > Sincerely, > - Ray > > On Tue, Jul 21, 2020 at 9:51 AM Coty Sutherland > wrote: > >&

Re: [tomcat] 01/02: Fix BZ 64540 - switch from bndwrap task to bnd task, begin generating a better manifest and make sure the resulting jar contents are correct.

That looks like an issue that will need fixing in Fedora's build system. > Annotation scanning and the multipart upload API will be broken if those > packages are missing. > Hm, OK. I'll look into that and I guess other changes to ensure the Fedora build isn't breaking stuff. I need to figure

Re: [tomcat] 01/02: Fix BZ 64540 - switch from bndwrap task to bnd task, begin generating a better manifest and make sure the resulting jar contents are correct.

On Tue, Jul 21, 2020 at 9:15 AM Mark Thomas wrote: > On 21/07/2020 14:06, Coty Sutherland wrote: > > > > > Oh yeah, you're right. They were included in the ASF binaries, but > > Fedora (and Debian I guess) built their own bits and that's where the > > classes

Re: [tomcat] 01/02: Fix BZ 64540 - switch from bndwrap task to bnd task, begin generating a better manifest and make sure the resulting jar contents are correct.

On Tue, Jul 21, 2020 at 7:52 AM Mark Thomas wrote: > On 21/07/2020 12:43, Coty Sutherland wrote: > > Hi Mark, > > > > On Tue, Jul 21, 2020 at 4:48 AM Mark Thomas > <mailto:ma...@apache.org>> wrote: > > > > On 20/07/2020 18:20, Coty Sutherlan

Re: [tomcat] 01/02: Fix BZ 64540 - switch from bndwrap task to bnd task, begin generating a better manifest and make sure the resulting jar contents are correct.

Hi Mark, On Tue, Jul 21, 2020 at 4:48 AM Mark Thomas wrote: > On 20/07/2020 18:20, Coty Sutherland wrote: > > This commit is problematic :( It's broken some projects that depend on > > Tomcat because now the tomcat-coyote.jar doesn't contain the > > org.apache

Re: [tomcat] 01/02: Fix BZ 64540 - switch from bndwrap task to bnd task, begin generating a better manifest and make sure the resulting jar contents are correct.

This commit is problematic :( It's broken some projects that depend on Tomcat because now the tomcat-coyote.jar doesn't contain the org.apache.tomcat.util.net.jsse or org.apache.tomcat.util.modeler.modules packages which results in ClassNotFoundExceptions. I haven't seen any issues with other jars

Re: [VOTE] Release Apache Tomcat 7.0.105

On Thu, Jul 2, 2020 at 9:08 AM Violeta Georgieva wrote: > The proposed Apache Tomcat 7.0.105 release is now available for voting. > > It can be obtained from: > https://dist.apache.org/repos/dist/dev/tomcat/tomcat-7/v7.0.105/ > The Maven staging repo is: >

Re: [ANN] New committer: Raymond Augé

Congrats and welcome! On Thu, Jul 2, 2020 at 10:40 AM Mark Thomas wrote: > On behalf of the Tomcat committers I am pleased to announce that > Raymond Augé (rotty3000) has been voted in as a new Tomcat committer. > > Please join me in welcoming him. > > Kind regards, > > Mark > >

Re: [VOTE] Release Apache Tomcat 8.5.57

On Tue, Jun 30, 2020 at 6:14 PM Mark Thomas wrote: > The proposed Apache Tomcat 8.5.57 release is now available for voting. > > The notable changes compared to the 8.5.56 release are: > > - Implement a significant portion of the TLS environment variables > for the rewrite valve. > > - Reduce

Re: [VOTE] Release Apache Tomcat 10.0.0-M7

On Tue, Jun 30, 2020 at 2:16 PM Mark Thomas wrote: > The proposed Apache Tomcat 10.0.0-M7 release is now available for > voting. > > Apache Tomcat 10.x implements Jakarta EE 9 and, as such, the primary > package for all the specification APIs has changed from javax.* to > jakarta.* >

Re: [VOTE] Release Apache Tomcat 9.0.37

On Tue, Jun 30, 2020 at 4:41 PM Mark Thomas wrote: > The proposed Apache Tomcat 9.0.37 release is now available for voting. > > The notable changes compared to the 9.0.36 release are: > > - Implement a significant portion of the TLS environment variables > for the rewrite valve. > > -

Re: Changing the name of the default branch in our git repos

On Tue, Jun 16, 2020 at 4:02 AM Mark Thomas wrote: > All, > > You may have seen the recent discussions both inside and outside the ASF > about the user of "master" as the name of the default git branch. If you > haven't, the short version is that the name can be traced back to > master/slave and

Re: [VOTE] Release Apache Tomcat 9.0.36

On Wed, Jun 3, 2020 at 2:06 PM Mark Thomas wrote: > The proposed Apache Tomcat 9.0.36 release is now available for voting. > > The notable changes compared to the 9.0.35 release are: > > - Add support for ALPN on recent OpenJDK 8 releases. > > - Add support for the CATALINA_OUT_CMD environment

Re: [VOTE] Release Apache Tomcat 7.0.104

On Thu, May 7, 2020 at 4:18 PM Violeta Georgieva wrote: > The proposed Apache Tomcat 7.0.104 release is now available for voting. > > It can be obtained from: > https://dist.apache.org/repos/dist/dev/tomcat/tomcat-7/v7.0.104/ > The Maven staging repo is: >

Re: [tomcat] branch 7.0.x updated: Use parametric replacement to ensure the proper version of wsdl4j is written to Eclipse's .classpath file.

On Fri, May 15, 2020 at 10:20 AM Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > All, > > I'd like to talk about this. > > First, this is a patch to Tomcat 7 where a single version number > (wsdl4j) wasn't updated in all the

Re: [VOTE] Release Apache Tomcat 10.0.0-M5

On Tue, May 5, 2020 at 3:34 PM Mark Thomas wrote: > The proposed Apache Tomcat 10.0.0-M5 release is now available for > voting. > > Apache Tomcat 10.x implements Jakarta EE 9 and, as such, the primary > package for all the specification APIs has changed from javax.* to > jakarta.* > Applications

Re: [VOTE] Release Apache Tomcat 9.0.35

On Tue, May 5, 2020 at 5:41 PM Mark Thomas wrote: > The proposed Apache Tomcat 9.0.35 release is now available for voting. > > The major changes compared to the 9.0.34 release are: > > - Improve the handling of requests that use an expectation. Do not > disable keep-alive where the response

Re: [VOTE] Release Apache Tomcat 8.5.55

On Tue, May 5, 2020 at 6:38 PM Mark Thomas wrote: > The proposed Apache Tomcat 8.5.55 release is now available for voting. > > The major changes compared to the 8.5.54 release are: > > - Improve the handling of requests that use an expectation. Do not > disable keep-alive where the response

Re: Remove org.apache.catalina.tribes.transport.bio

On Tue, Apr 28, 2020 at 12:30 PM Rémy Maucherat wrote: > Hi, > > I'm still looking at things to remove or refactor in 10 following the > rearchitecting failure for the Connector. One candidate could be the Tribes > transport, since NIO is the default and BIO is probably never used. > > Can it be

Re: git-fu is (still) weak

On Tue, Apr 28, 2020 at 10:58 AM Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Coty, > > On 4/28/20 10:45, Coty Sutherland wrote: > > > > > > On Tue, Apr 28, 2020 at 10:2

Re: git-fu is (still) weak

On Tue, Apr 28, 2020 at 10:21 AM Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Rémy, > > On 4/27/20 18:41, Rémy Maucherat wrote: > > On Tue, Apr 28, 2020 at 12:21 AM Christopher Schultz > > >

Re: [VOTE] Release Apache Tomcat 9.0.34

On Fri, Apr 3, 2020 at 8:49 AM Mark Thomas wrote: > The proposed Apache Tomcat 9.0.34 release is now available for voting. > > The major changes compared to the 9.0.34 release are: > > - Add support for default values when using ${...} property replacement > in configuration files. Based on a

Re: [VOTE] Release Apache Tomcat 10.0.0-M4

On Fri, Apr 3, 2020 at 7:28 AM Mark Thomas wrote: > The proposed Apache Tomcat 10.0.0-M4 release is now available for > voting. > > Apache Tomcat 10.x implements Jakarta EE 9 and, as such, the primary > package for all the specification APIs has changed from javax.* to > jakarta.* > Applications

Re: [VOTE] Release Apache Tomcat 7.0.103

On Mon, Mar 16, 2020 at 5:13 AM Violeta Georgieva wrote: > The proposed Apache Tomcat 7.0.103 release is now available for voting. > > It can be obtained from: > https://dist.apache.org/repos/dist/dev/tomcat/tomcat-7/v7.0.103/ > The Maven staging repo is: >

Re: [VOTE] Release Apache Tomcat 10.0.0-M1

On Fri, Feb 14, 2020 at 9:49 AM Mark Thomas wrote: > The proposed Apache Tomcat 10.0.0-M1 release is now available for > voting. This is the first release of 10.0.x and is based on 9.0.31. > > The major changes compared to 9.0.31 are: > > - Complete the javax to jakarta package rename > > -

Re: [VOTE] Release Apache Tomcat 7.0.100

On Tue, Feb 11, 2020 at 4:08 AM Violeta Georgieva wrote: > The proposed Apache Tomcat 7.0.100 release is now available for voting. > > It can be obtained from: > https://dist.apache.org/repos/dist/dev/tomcat/tomcat-7/v7.0.100/ > The Maven staging repo is: >

Re: Numbering schemes for future releases

On Mon, Feb 10, 2020 at 4:48 AM Mark Thomas wrote: > Hi, > > I thought it would be useful to re-open the discussion on this. If there > is a better plan that the one we currently have I'd like to try and find > it. > > I'm happy to hold off on the current 10.0.0.0-M1 release for a few days > to

Re: [PROPOSAL] Tomcat 10: change default certificateKeystoreType and truststoreType from JKS to PKCS12

On Tue, Jan 28, 2020 at 12:07 PM Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > All, > > The subject says it all. > > Java 9 is changing the default keystore type from JKS to PKCS12 and > deprecating the use of JKS. > > Do we

Re: Tomcat 7.0.x end of life

On Tue, Jan 14, 2020 at 3:56 PM Mark Thomas wrote: > Hi all, > > This has been mentioned several times as we have figured out our > approach to Jakarta EE 9 and Tomcat 10. I'd like to formally propose > that we announce end of life for Tomcat 7.0.x as 31 March 2021. > > Thoughts? > +1 > >

Re: [VOTE] Release Apache Tomcat 8.5.50

On Sat, Dec 7, 2019 at 2:54 PM Mark Thomas wrote: > The proposed Apache Tomcat 8.5.50 release is now available for voting. > > The major changes compared to the 8.5.49 release are: > > - Correct multiple regressions in the static resource caching related to > using URLs provided for cached

Re: [VOTE] Release Apache Tomcat 9.0.30

On Sat, Dec 7, 2019 at 12:24 PM Mark Thomas wrote: > The proposed Apache Tomcat 9.0.30 release is now available for voting. > > The major changes compared to the 9.0.29 release are: > > - Correct multiple regressions in the static resource caching related to > using URLs provided for cached

Re: [VOTE] Release Apache Tomcat 8.5.49

On Sun, Nov 17, 2019 at 2:01 PM Mark Thomas wrote: > The proposed Apache Tomcat 8.5.49 release is now available for voting. > > The major changes compared to the 8.5.47 release are: > > - Improvements to Async error handling > > - Stricter processing of HTTP headers when looking for specific

Re: [VOTE] Release Apache Tomcat 9.0.29

On Sat, Nov 16, 2019 at 1:56 PM Mark Thomas wrote: > The proposed Apache Tomcat 9.0.29 release is now available for voting. > > The major changes compared to the 9.0.27 release are: > > - Improvements to Async error handling > > - Stricter processing of HTTP headers when looking for specific

Re: [VOTE] Release Apache Tomcat 9.0.27

On Mon, Oct 7, 2019 at 7:51 AM Mark Thomas wrote: > The proposed Apache Tomcat 9.0.27 release is now available for voting. > > The major changes compared to the 9.0.26 release are: > > - Update to Commons Daemon 1.2.2 to pick up the fix for a regression in > Commons Daemon 1.2.0 and 1.2.1 that

Re: [PROPOSAL] Tomcat 10: Remove Server-Side Includes (SSI)

On Mon, Oct 7, 2019 at 10:46 AM Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > All, > > I recently gave a presentation on locking-down Apache Tomcat[1] and I > briefly discussed the "sharp edges" present in Tomcat. Some of them >

Re: [PROPOSAL] Tomcat 10: Remove CGI Servlet

On Mon, Oct 7, 2019 at 11:00 AM Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > All, > > I recently gave a presentation on locking-down Apache Tomcat[1] and I > briefly discussed the "sharp edges" present in Tomcat. Some of them >

Re: [PROPOSAL] Tomcat 10: Drop APR Connector

On Mon, Oct 7, 2019 at 10:39 AM Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > All, > > I recently gave a presentation on locking-down Apache Tomcat[1] and I > briefly discussed the "sharp edges" present in Tomcat. Some of them >

Re: Tomcat-Native - Time to move to git?

On Mon, Jun 17, 2019 at 12:56 PM Mark Thomas wrote: > Hi, > > I'm starting to look at OCSP stapling for our OpenSSL based connectors > and I suspect a Tomcat Native release will be required. Even if it isn't > for this, it has been a while since the last Tomcat Native release so I > expect we'll

Re: [VOTE] Release Apache Tomcat 8.5.42

On Tue, Jun 4, 2019 at 5:06 PM Mark Thomas wrote: > The proposed Apache Tomcat 8.5.42 release is now available for voting. > > The major changes compared to the 8.5.41 release are: > > - Fix various concurrency and stability issues for HTTP/2. > > - Add support for same-site cookie attribute.

Re: [VOTE] Release Apache Tomcat 9.0.21

On Tue, Jun 4, 2019 at 4:50 PM Mark Thomas wrote: > The proposed Apache Tomcat 9.0.21 release is now available for voting. > > The major changes compared to the 9.0.20 release are: > > - Fix various concurrency and stability issues for HTTP/2. > > - Add support for same-site cookie attribute.

Are we interested in using any the GitHub features?

Hi, Are we interested in utilizing any of the GitHub integration for Travis CI , Coverity Scan , LGTM , etc? We could at least set them up for testing PRs since we already have the

Re: Proposal for TLS config sanity check

On Tue, May 21, 2019 at 5:43 PM Mark Thomas wrote: > On 21/05/2019 21:46, Christopher Schultz wrote: > > All, > > > > Looking at the legacy-versus-modern TLS configuration (Connector vs > > SSLHostConfig), it seems easy for an admin to create a configuration > > that looks like this

Re: [tomcat] branch master updated: Use https instead of http

anch master > >> in repository https://gitbox.apache.org/repos/asf/tomcat.git > >> > >> > >> The following commit(s) were added to refs/heads/master by this push: > >> new beb2dca Use https instead of http > >> beb2dca is described be

Re: The migration guide configuration file difference feature is broken

On Wed, May 8, 2019 at 11:17 AM Mark Thomas wrote: > On 08/05/2019 15:35, Coty Sutherland wrote: > > Hi, > > > > Someone on freenode (CiscoEagle) pointed out to me that the migration > > guide's file comparison feature doesn't work :( Looking at the "configu

The migration guide configuration file difference feature is broken

Hi, Someone on freenode (CiscoEagle) pointed out to me that the migration guide's file comparison feature doesn't work :( Looking at the "configure file differences" section on the 9.0 migration guide ( http://tomcat.apache.org/migration-9.html#Tomcat_9.0.x_configuration_file_differences), if you

Re: Finally getting around to switching to Git

On Fri, Apr 26, 2019 at 3:13 AM Mark Thomas wrote: > On 25/04/2019 20:07, Christopher Schultz wrote: > > On 4/25/19 14:03, Igal Sapir wrote: > > > > >> In some projects it's easy to maintain a single repository and > >> switch between branches, but I find the differences between 7.0.x > >> and

Re: Finally getting around to switching to Git

On Thu, Apr 25, 2019 at 2:06 PM Igal Sapir wrote: > On 4/25/2019 10:56 AM, Coty Sutherland wrote: > > On Thu, Apr 25, 2019 at 1:32 PM Christopher Schultz < > > ch...@christopherschultz.net> wrote: > > > >> -BEGIN PGP SIGNED MESSAGE- > >> Hash

Re: Finally getting around to switching to Git

On Thu, Apr 25, 2019 at 1:32 PM Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Igal, > > On 4/23/19 12:52, Igal Sapir wrote: > > Another thing that I have changed in my workflow based on Mark's > > past suggestion, is that I keep

Re: Finally getting around to switching to Git

On Tue, Apr 23, 2019 at 10:33 AM Rémy Maucherat wrote: > On Tue, Apr 23, 2019 at 4:29 PM Christopher Schultz < > ch...@christopherschultz.net> wrote: > > > -BEGIN PGP SIGNED MESSAGE- > > Hash: SHA256 > > > > Rémy, > > > > On 4/23/19 10:07, Rémy Maucherat wrote: > > > On Tue, Apr 23, 2019

Re: SSLv2Hello "Protocol" Support

On Wed, Apr 17, 2019 at 2:18 PM Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Coty, > > On 4/16/19 07:28, Coty Sutherland wrote: > > Hi, > > > > It appears that the IBM JDK (version 8)

Re: SSLv2Hello "Protocol" Support

If we haven't tried to remove it in 5 years it might be worth another look :) On Wed, Apr 17, 2019 at 3:49 AM jean-frederic clere wrote: > On 16/04/2019 13:28, Coty Sutherland wrote: > > Hi, > > > > It appears that the IBM JDK (version 8) has dropped support for > SS

SSLv2Hello "Protocol" Support

Hi, It appears that the IBM JDK (version 8) has dropped support for SSLv2Hello so when you startup tomcat with the IBM JDK you get a warning saying that the protocol is being skipped. OpenJDK seems to have dropped it in version 12 or 13 (I haven't tested, just noticed a user list thread about it)

Re: [VOTE] Release Apache Tomcat 9.0.19

On Fri, Apr 12, 2019 at 10:48 AM Mark Thomas wrote: > The proposed Apache Tomcat 9.0.19 release is now available for voting. > 9.0.19 corrects a regression and a number of packaging errors in 9.0.18. > > The major changes compared to the 9.0.17 release are: > > - Fix for CVE-2019-0232 a RCE

Re: svn commit: r33591 - in /dev/tomcat/tomcat-9/v9.0.19: ./ bin/ bin/embed/ src/

On Fri, Apr 12, 2019 at 11:29 AM Coty Sutherland wrote: > Are these svn commits intentional? I thought the svn repo was read-only > now. > Disregard that :) > > On Fri, Apr 12, 2019 at 10:47 AM wrote: > >> Author: markt >> Date: Fri Apr 12 14:47:16 2019 &g

Re: svn commit: r33591 - in /dev/tomcat/tomcat-9/v9.0.19: ./ bin/ bin/embed/ src/

Are these svn commits intentional? I thought the svn repo was read-only now. On Fri, Apr 12, 2019 at 10:47 AM wrote: > Author: markt > Date: Fri Apr 12 14:47:16 2019 > New Revision: 33591 > > Log: > Upload 9.0.19 for voting > > Added: > dev/tomcat/tomcat-9/v9.0.19/ >

Re: [VOTE] Release Apache Tomcat 9.0.18

On Wed, Apr 10, 2019 at 9:44 AM Mark Thomas wrote: > The proposed Apache Tomcat 9.0.18 release is now available for voting. > > The major changes compared to the 9.0.17 release are: > > - Fix for CVE-2019-0232 a RCE vulnerability on Windows > > - Add support for Java 11 to the JSP compiler. Java

Re: [VOTE] Release Apache Tomcat 8.5.40

On Wed, Apr 10, 2019 at 10:58 AM Mark Thomas wrote: > The proposed Apache Tomcat 8.5.40 release is now available for voting. > > The major changes compared to the 8.5.39 release are: > > - Fix for CVE-2019-0232 a RCE vulnerability on Windows > > - Add support for Java 11 to the JSP compiler.

commons-daemon packaging question

Hi, I'm looking into commons-daemon in Tomcat and it appears that the Windows executables (prunsrv and prunmgr) don't require the commons-daemon.jar to run Tomcat like the *nix binary (jsvc) does. Can someone confirm that (I tested it and it seems to work fine without the jar)? If it's unused I

Re: GitHub Issues / GitHub PRs / Bugzilla

On Thu, Mar 14, 2019 at 11:14 AM Coty Sutherland wrote: > On Thu, Mar 14, 2019 at 8:39 AM Mark Thomas wrote: > >> It is early days but my impression is that the move to git has triggered >> an increase in conversations that end up split between a GitHub PR and >> Bugzill

Re: GitHub Issues / GitHub PRs / Bugzilla

On Thu, Mar 14, 2019 at 8:39 AM Mark Thomas wrote: > It is early days but my impression is that the move to git has triggered > an increase in conversations that end up split between a GitHub PR and > Bugzilla. > > Personally, I'm not finding it unmanageable at this point but it does > feel a

Git Migration: What is the svn:eol-style equilvalent?

Hi, I updated the BUILDING and CONTRIBUTING documents so that GitHub users no longer see instructions for SVN after our migration, however I had a few questions. Does anyone know of a git equivalent to svn:eol-style that we should be using? It is mentioned in the "git-svn quirks" section of

Re: Git migration read for testing

The email notifications work for when we push commits to the repository, but it looks like we're missing emails when PRs are opened. On Wed, Feb 27, 2019 at 9:03 AM Rémy Maucherat wrote: > On Wed, Feb 27, 2019 at 11:09 AM Mark Thomas wrote: > > > On 27/02/2019 09:44, Rémy Maucherat wrote: > >

Re: New git based merging workflow?

On Thu, Feb 28, 2019 at 6:10 AM Emmanuel Bourg wrote: > Le 28/02/2019 à 11:47, Rainer Jung a écrit : > > Thanks a bunch. Looks like what I was searching for, will try it. > > > > Rainer > > You could play with a single repository too: > +1, that's what I do. > > # Initial setup > cd

  1   2   3   >