Re: Some remarks on panama libssl loading

Michael, On 4/17/24 16:46, Michael Osipov wrote: On 2024/04/17 14:21:06 Rainer Jung wrote: Am 17.04.24 um 15:34 schrieb Michael Osipov: Rainer, I do not fully understand the problem here. We use libtool to solve exactly this problem with versioned SONAMEs. It will create symlinks to the

Re: [VOTE] Release Apache Tomcat 10.1.23

Rémy, On 4/16/24 14:34, Rémy Maucherat wrote: On Tue, Apr 16, 2024 at 3:11 PM Christopher Schultz wrote: The proposed Apache Tomcat 10.1.23 release is now available for voting. Apache Tomcat 10.1.21 was canceled due to a release-build mistake and Apache Tomcat 10.1.22 was cancelled due

Re: [VOTE] Release Apache Tomcat 10.1.23

All, On 4/16/24 09:11, Christopher Schultz wrote: The proposed Apache Tomcat 10.1.23 release is now available for voting. Apache Tomcat 10.1.21 was canceled due to a release-build mistake and Apache Tomcat 10.1.22 was cancelled due to an option in startup scripts which would have caused Java

[VOTE] Release Apache Tomcat 10.1.23

The proposed Apache Tomcat 10.1.23 release is now available for voting. Apache Tomcat 10.1.21 was canceled due to a release-build mistake and Apache Tomcat 10.1.22 was cancelled due to an option in startup scripts which would have caused Java 11 environments to fail to start. The notable

Re: Base64 and BASIC authentication

Mark, On 4/16/24 03:18, Mark Thomas wrote: TL;DR - we need to tighten up parsing of BASIC authentication headers. When I switched out Tomcat's Base64 handling for the built-in JRE handling, I noticed that BASIC authentication was using a very relaxed version of the Base64 decoder. That

[VOTE][CANCELLED] Release Apache Tomcat 10.1.22

All, I'm cancelling the vote due to an issue raised by rjung which could cause Java 11 environments to fail to start Tomcat due to the introduction of an unsupported JVM startup switch. I'll re-roll the release with an updated script today. Thanks, -chris The proposed Apache Tomcat

Re: (tomcat) 01/06: Remove unused code - thanks to UCDetector

Mark, On 4/15/24 11:13, Mark Thomas wrote: On 05/04/2024 12:55, Mark Thomas wrote: 5 Apr 2024 04:33:42 Christopher Schultz : Mark, Can't this entire class be replaced with calls to java.util.Base64.get*Encoder and java.util.Base64.get*Decoder wherever necessary? Now that 9.0.x is oldest

Re: [VOTE] Release Apache Tomcat 10.1.22

Rémy, On 4/11/24 05:18, Rémy Maucherat wrote: On Wed, Apr 10, 2024 at 8:52 PM Christopher Schultz wrote: The proposed Apache Tomcat 10.1.22 release is now available for voting. Apache Tomcat 10.1.21 was canceled due to a release-build mistake. There are no source-level changes between

Re: [VOTE] Release Apache Tomcat 10.1.22

All, On 4/10/24 2:51 PM, Christopher Schultz wrote: The proposed Apache Tomcat 10.1.22 release is now available for voting. Apache Tomcat 10.1.21 was canceled due to a release-build mistake. There are no source-level changes between 10.1.21 and 10.1.22. The notable changes compared

[VOTE] Release Apache Tomcat 10.1.22

The proposed Apache Tomcat 10.1.22 release is now available for voting. Apache Tomcat 10.1.21 was canceled due to a release-build mistake. There are no source-level changes between 10.1.21 and 10.1.22. The notable changes compared to 10.1.20 are: - Add OpenSSL support when FFM is available -

Re: [VOTE][CANCELLED] Release Apache Tomcat 10.1.21

I am cancelling this release because it was built with the wrong JDK version. I will re-build the release shortly as 10.1.22. -chris On 4/9/24 15:42, Christopher Schultz wrote: The proposed Apache Tomcat 10.1.21 release is now available for voting. The notable changes compared to 10.1.21

Re: [VOTE] Release Apache Tomcat 9.0.88

Rémy, Thanks for RMing. On 4/9/24 09:54, Rémy Maucherat wrote: The proposed Apache Tomcat 9.0.88 release is now available for voting. The notable changes compared to 9.0.87 are: - Cookies header generation enhancements. - Fix regression when reloading TLS configuration and files. For full

Re: [VOTE] Release Apache Tomcat 10.1.21

Rémy, On 4/10/24 5:18 AM, Rémy Maucherat wrote: On Tue, Apr 9, 2024 at 9:42 PM Christopher Schultz wrote: The proposed Apache Tomcat 10.1.21 release is now available for voting. The notable changes compared to 10.1.21 are: - Add OpenSSL support when FFM is available This was built

[VOTE] Release Apache Tomcat 10.1.21

The proposed Apache Tomcat 10.1.21 release is now available for voting. The notable changes compared to 10.1.21 are: - Add OpenSSL support when FFM is available - Improve locking strategies in Catalina core - Updates to Apache Commons dependencies For full details, see the change log:

Re: (tomcat) 01/06: Remove unused code - thanks to UCDetector

Mark, Can't this entire class be replaced with calls to java.util.Base64.get*Encoder and java.util.Base64.get*Decoder wherever necessary? Now that 9.0.x is oldest, we should be able to use java.util.Base64 from Java 1.8+ ? -chris On 4/4/24 15:52, ma...@apache.org wrote: This is an

Re: Stop releasing Tomcat 9 or adding back Tomcat 10.0?

Romain, On 3/29/24 08:50, Romain Manni-Bucau wrote: Le ven. 29 mars 2024 à 13:41, Christopher Schultz < ch...@christopherschultz.net> a écrit : Romain, On 3/29/24 03:18, Romain Manni-Bucau wrote: Side note: what I meant about ASF is that there was a help habit between communities.

Re: Stop releasing Tomcat 9 or adding back Tomcat 10.0?

e is happy. If your build process is strictly "download Tomcat binaries and use them" then of course it will be more complicated. -chris Le jeu. 28 mars 2024 à 23:13, Christopher Schultz < ch...@christopherschultz.net> a écrit : Romain, On 3/27/24 15:29, Romain Ma

Re: Stop releasing Tomcat 9 or adding back Tomcat 10.0?

Romain, On 3/27/24 15:29, Romain Manni-Bucau wrote: FYI here is the diff between servlet 5 and 6 API jars: New API: - jakarta.servlet.ServletConnection Deleted API: - jakarta.servlet.SingleThreadModel - jakarta.servlet.http.HttpSessionContext - jakarta.servlet.http.HttpUtils Changed API:

Re: Stop releasing Tomcat 9 or adding back Tomcat 10.0?

Romain, On 3/27/24 08:26, Romain Manni-Bucau wrote: Hi Chris, Le mer. 27 mars 2024 à 13:13, Christopher Schultz < ch...@christopherschultz.net> a écrit : Romain, On 3/27/24 06:13, Romain Manni-Bucau wrote: Le mer. 27 mars 2024 à 10:58, Rémy Maucherat a écrit : On Wed, Mar 27, 202

Re: Stop releasing Tomcat 9 or adding back Tomcat 10.0?

Romain, On 3/27/24 06:13, Romain Manni-Bucau wrote: Le mer. 27 mars 2024 à 10:58, Rémy Maucherat a écrit : On Wed, Mar 27, 2024 at 9:49 AM Romain Manni-Bucau wrote: Hi all, Checkout out TomEE's notifications I realized Tomcat is in a weirdish situation where Tomcat 9 is Servlet 4 and

[ANN] Apache Tomcat 10.1.20 Available

The Apache Tomcat team announces the immediate availability of Apache Tomcat 10.1.20. Apache Tomcat 10 is an open source software implementation of the Jakarta Servlet, Jakarta Server Pages, Jakarta Expression Language, Jakarta WebSocket, Jakarta Authentication and Jakarta Annotations

[ANN] Apache Tomcat 8.5.100 Available

The Apache Tomcat team announces the immediate availability of Apache Tomcat 8.5.100. *This will likely be the final release of Apache Tomcat 8.5. Please see the EOL notice linked at the end of this message.* Apache Tomcat 8 is an open source software implementation of the Java Servlet,

[VOTE][RESULT] Release Apache Tomcat 10.1.20

All, Apologies for the delay on closing the vote for this release. The following votes were cast: +1: schultz, remm, isapir, markt Non-binding: +1: Romain Mannu-Bucau, Dimitris Soumis There were no other votes, therefore the vote passes. I will begin the release process shortly. -chris

[VOTE][RESULT] Release Apache Tomcat 8.5.100

All, Apologies for the delay on closing the vote for this release. The following votes were cast: +1: schultz, remm, isapir, markt Non-binding: +1: Dimitris Soumis There were no other votes, therefore the vote passes. I will begin the release process shortly. -chris The proposed Apache

Re: (tomcat) branch main updated: Use server's ClassLoader instead of application's when loading XMLInputFactory.

Rémy, On 3/25/24 10:21, Rémy Maucherat wrote: On Mon, Mar 25, 2024 at 2:32 PM Christopher Schultz wrote: Rémy, On 3/22/24 11:39, Rémy Maucherat wrote: On Fri, Mar 22, 2024 at 2:40 PM wrote: This is an automated email from the ASF dual-hosted git repository. schultz pushed a commit

Re: (tomcat) branch main updated: Use server's ClassLoader instead of application's when loading XMLInputFactory.

to refs/heads/main by this push: new 988992ba2e Use server's ClassLoader instead of application's when loading XMLInputFactory. 988992ba2e is described below commit 988992ba2e9a8e2c3db47ac960c2fa6c3fc7a8a4 Author: Christopher Schultz AuthorDate: Fri Mar 22 09:37:08 2024 -0400 Use

Re: HTTP / 3 protocol updates

Koti, On 3/24/24 11:30, Koteswararao Gundapaneni wrote: When can I expect the update on the HTTP/3 protocol implementation? HTTP/3 RFC 9114 (June 2022) - HTTP/3 Not yet implemented by Apache Tomcat. (As of July 2022) Why pick "July 2022" as

Re: (tomcat) branch main updated: Set context CL before calling XMLInputFactory.newFactory

Rémy, On 3/25/24 05:45, r...@apache.org wrote: This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new

Re: Observability of virtual threads

Romain, On 3/20/24 16:25, Romain Manni-Bucau wrote: Chris, added some comments inline. Le mer. 20 mars 2024 à 19:41, Christopher Schultz < ch...@christopherschultz.net> a écrit : Romain, On 3/20/24 13:34, Romain Manni-Bucau wrote: Thread dumps being dump of threads - literally os t

Re: Observability of virtual threads

Romain, On 3/20/24 13:34, Romain Manni-Bucau wrote: Thread dumps being dump of threads - literally os threads - and virtual threads not being threads at all - they are runnables in a dedicated thread pool - it is quite fair to not make them the same and have their scheduler - pool - only in the

Re: Observability of virtual threads

Rainer, On 3/20/24 13:33, Rainer Jung wrote: Am 20.03.24 um 18:17 schrieb Christopher Schultz: Rainer, Thanks for writing this up. On 3/20/24 07:22, Rainer Jung wrote: I wanted to share an observation and I hope the things are correct how I am describing them. Maybe things have already

Re: [VOTE] Release Apache Tomcat 10.1.20

no issues.) If you can get it to fail again, please post the failure here so we can look. We have found and fixed some timing issues when this exact thing happens to a tester. Thanks, -chris On Tue, Mar 19, 2024 at 4:04 PM Christopher Schultz < ch...@christopherschultz.net>

Re: Observability of virtual threads

Rainer, Thanks for writing this up. On 3/20/24 07:22, Rainer Jung wrote: I wanted to share an observation and I hope the things are correct how I am describing them. Maybe things have already improved and I am not aware of it, hints welcome. Part of JEP 425 (Project Loom, Java virtual

Re: [VOTE] Release Apache Tomcat 8.5.100

if anything isn't working as expected. Or use the "verify-release" to keep us honest. Any of those things are helpful to any release manager. Thanks, -chris -Original Message----- From: Christopher Schultz Sent: Tuesday, March 19, 2024 11:09 AM To: Tomcat Developers List Subject:

Re: [VOTE] Release Apache Tomcat 8.5.100

All, On 3/19/24 10:23, Christopher Schultz wrote: The proposed Apache Tomcat 8.5.100 release is now available for voting. The notable changes compared to 8.5.99 are: - Fix regression when reloading TLS configuration and files. - When restoring a saved POST request after a successful FORM

[VOTE] Release Apache Tomcat 8.5.100

The proposed Apache Tomcat 8.5.100 release is now available for voting. The notable changes compared to 8.5.99 are: - Fix regression when reloading TLS configuration and files. - When restoring a saved POST request after a successful FORM authentication, ensure that neither the URI, the

Re: [VOTE] Release Apache Tomcat 10.1.20

All, On 3/19/24 09:52, Christopher Schultz wrote: The proposed Apache Tomcat 10.1.20 release is now available for voting. The notable changes compared to 10.1.19 are: - Fix regression when reloading TLS configuration and files. - When restoring a saved POST request after a successful FORM

[VOTE] Release Apache Tomcat 10.1.20

The proposed Apache Tomcat 10.1.20 release is now available for voting. The notable changes compared to 10.1.19 are: - Fix regression when reloading TLS configuration and files. - When restoring a saved POST request after a successful FORM authentication, ensure that neither the URI, the

Re: [PR] Unify comma-separated-value code and optimize the implementation [tomcat]

Mark, On 3/15/24 13:27, markt-asf (via GitHub) wrote: markt-asf commented on code in PR #707: URL: https://github.com/apache/tomcat/pull/707#discussion_r1526610303 ## java/org/apache/catalina/realm/JNDIRealm.java: ## @@ -966,7 +967,7 @@ private String[] getCipherSuitesArray()

Re: (tomcat) 02/02: Add checking for the age of the Tomcat version running and warn if it's getting old.

Mark and Rémy, On 3/13/24 10:53, Mark Thomas wrote: On 13/03/2024 14:38, Rémy Maucherat wrote: wrote: 1. A longer default nag-duration That's a good start. If it is meant to be enabled by default, I would like a value that is long enough so that it is almost certain there's an issue. 2

Re: Plans for 10.1.x and 8.5.x release?

Mark, On 3/15/24 07:52, Mark Thomas wrote: Just wondering what your thinking was for the March releases of 10.1.x and 8.5.x I definitely want to make the changes discussed on dev@ for the Tomcat age-nagging, plus one more thing to round-off before cutting 8.5.final. I was planning to do

Re: Requesting as I had been agreed to commit from a contributor role

Koteswararao, On 3/14/24 14:21, Mark Thomas wrote: On 14/03/2024 13:43, koteswara Rao Gundapaneni wrote: On Thu, 14 Mar 2024, 00:28 koteswara Rao Gundapaneni, mailto:koti.gundapan...@gmail.com>> wrote:     HI Tomcat PMC,     Please ensure I had showing my interest as a committer

Re: (tomcat) 02/02: Add checking for the age of the Tomcat version running and warn if it's getting old.

Rémy, On 3/12/24 12:05, Rémy Maucherat wrote: On Tue, Mar 12, 2024 at 3:02 PM Christopher Schultz wrote: Mark, On 3/12/24 05:00, Mark Thomas wrote: On 11/03/2024 21:38, schu...@apache.org wrote: This is an automated email from the ASF dual-hosted git repository. schultz pushed a commit

Re: [VOTE] Release Apache Tomcat 9.0.87

Rémy, Thank for RMing. On 3/11/24 07:09, Rémy Maucherat wrote: The proposed Apache Tomcat 9.0.87 release is now available for voting. The notable changes compared to 9.0.86 are: - When restoring a saved POST request after a successful FORM authentication, ensure that neither the URI, the

Re: [VOTE] Release Apache Tomcat 11.0.0-M18

Mark, Thanks for RMing On 3/9/24 1:52 PM, Mark Thomas wrote: The proposed Apache Tomcat 11.0.0-M18 release is now available for voting. Apache Tomcat 11.0.0-M18 is a milestone release of the 11.0.x branch and has been made to provide users with early access to the new features in Apache

Re: (tomcat) 02/02: Add checking for the age of the Tomcat version running and warn if it's getting old.

3ab883aa746a5c577efa39d9080858e53ca77da6 Author: Christopher Schultz AuthorDate: Mon Mar 11 17:38:01 2024 -0400 Add checking for the age of the Tomcat version running and warn if it's getting old. How do I disable this check if I don't want to use it? I'd expect something like set it to "-1". I

Re: (tomcat) branch main updated: Add new valveSkip flag, also fix no rewrite rule match

Rémy, On 3/8/24 09:46, r...@apache.org wrote: This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new

Re: Planning for 8.5.final

All, On 3/6/24 08:54, Christopher Schultz wrote: All, I was wondering if anyone had any thoughts on adding anything to 8.5.final (likely .100) to indicate that the build was the last in the series. Of course, we will advertise EOL on the web site, etc. but I was thinking something more

Re: (tomcat) 03/03: Add new suspendWrappedResponseAfterForward

Rémy, On 3/6/24 09:02, r...@apache.org wrote: This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 6f85b32c545539f36266ef83218d85c9656ae6a9 Author: remm AuthorDate: Wed

Re: March releases

Mark, On 3/5/24 07:18, Mark Thomas wrote: On 27/02/2024 09:29, Christopher Schultz wrote: Mark, On 2/27/24 06:20, Mark Thomas wrote: On 27/02/2024 10:57, Rémy Maucherat wrote: On Tue, Feb 27, 2024 at 10:12 AM Mark Thomas wrote: All, When I look at the current change logs there isn't

Planning for 8.5.final

All, I was wondering if anyone had any thoughts on adding anything to 8.5.final (likely .100) to indicate that the build was the last in the series. Of course, we will advertise EOL on the web site, etc. but I was thinking something more runtime-oriented. Would it be okay to add an INFO log

Re: Add support for HTTP connectors to accept REMOTE_USER information from a proxy?

All, *bump* Any thoughts? -chris On 2/28/24 14:53, Christopher Schultz wrote: All, When using AJP, setting tomcatAuthentication="false" allows mod_jk or mod_proxy_ajp to transmit authenticated user information across the connection to Tomcat so that request.getRemoteUser() w

Add support for HTTP connectors to accept REMOTE_USER information from a proxy?

All, When using AJP, setting tomcatAuthentication="false" allows mod_jk or mod_proxy_ajp to transmit authenticated user information across the connection to Tomcat so that request.getRemoteUser() will return whatever httpd has for REMOTE_USER. The same is not true for the HTTP connectors.

Re: March releases

Mark, On 2/27/24 06:20, Mark Thomas wrote: On 27/02/2024 10:57, Rémy Maucherat wrote: On Tue, Feb 27, 2024 at 10:12 AM Mark Thomas wrote: All, When I look at the current change logs there isn't much there to justify a March release. There are a couple of open bugs of which one looks likely

Re: FFM in Tomcat 10.1

Rémy, On 2/23/24 08:35, Rémy Maucherat wrote: Hi, I would like to propose backporting the OpenSSL FFM support to Tomcat 10.1. Java 22.0.0 should be released on March 19, and the next Java LTS should still have no problem targeting Java 11. As a result, there should be no negative impact to

Re: Tomcat 8.5.99 artifacts not in Maven central

Mark, On 2/22/24 15:11, Mark Thomas wrote: On 22/02/2024 20:03, S. Ali Tokmen wrote: Dear Tomcat development team The Tomcat 8.5.99 artifacts not in Maven central. Is this normal? No. I've just checked and they weren't promoted from the staging repository. I've just done that. They

Re: JDK 22 Release Candidates & Virtual Threads pinning heads-up

All, On 2/20/24 03:05, David Delabassee wrote: Welcome to the latest OpenJDK Quality Outreach update! The first JDK 22 Release Candidates builds are now available [1]. At this stage, only P1 issues will still be evaluated. And with the JDK 22 General Availability set for March 19th, it is

[VOTE][RESULT] Release Apache Tomcat 8.5.99

All, The following votes were cast: +1: remm, schultz, fschumacher Non-binding: +1: Dimitris Soumis There were no other votes, therefore, the vote passes. Thanks to everyone who contributed toward this release. -chris The proposed Apache Tomcat 8.5.99 release is now available for voting.

[VOTE] Release Apache Tomcat 8.5.99

All, The following votes were cast: +1: remm, schultz, fschumacher Non-binding: +1: Dimitris Soumis There were no other votes, therefore, the vote passes. Thanks to everyone who contributed toward this release. -chris The proposed Apache Tomcat 8.5.99 release is now available for voting.

[VOTE][RESULT] Release Apache Tomcat 10.1.19

All, The following votes were cast: +1: remm, jflere, schultz, fschumacher Non-binding: +1: Dimitris Soumis There were no other votes, therefore, the vote passes. Thanks to everyone who contributed toward this release. -chris The proposed Apache Tomcat 10.1.19 release is now available

Re: 10.1.19: sporadic NullPointerException in org.apache.tomcat.websocket.TestWsSessionSuspendResume.testSuspendThenClose()

On 2/17/24 12:21, Rainer Jung wrote: OK, great and sorry I didn't notice the fix! Am 17.02.24 um 17:18 schrieb Mark Thomas: On 16/02/2024 23:50, Rainer Jung wrote: Hi there, I see sporadic NullPointerExceptions when running the new unit test in

Re: [VOTE] Release Apache Tomcat 9.0.86

Rémy, On 2/15/24 18:26, Christopher Schultz wrote: Rémy, Thanks for RMing. On 2/14/24 03:53, Rémy Maucherat wrote: The proposed Apache Tomcat 9.0.86 release is now available for voting. The notable changes compared to 9.0.85 are: - Add improvements to the CSRF prevention filter including

Re: [VOTE] Release Apache Tomcat 8.5.99

All, On 2/14/24 18:10, Christopher Schultz wrote: The proposed Apache Tomcat 8.5.99 release is now available for voting. The notable changes compared to 8.5.99 are: - Add improvements to the CSRF prevention filter including the ability   to skip adding nonces for resource name and subtree

Re: [VOTE] Release Apache Tomcat 9.0.86

Rémy, Thanks for RMing. On 2/14/24 03:53, Rémy Maucherat wrote: The proposed Apache Tomcat 9.0.86 release is now available for voting. The notable changes compared to 9.0.85 are: - Add improvements to the CSRF prevention filter including the ability to skip adding nonces for resource

Re: [VOTE] Release Apache Tomcat 11.0.0-M17

Mark, Thanks for RMing. On 2/13/24 17:50, Mark Thomas wrote: The proposed Apache Tomcat 11.0.0-M17 release is now available for voting. Apache Tomcat 11.0.0-M17 is a milestone release of the 11.0.x branch and has been made to provide users with early access to the new features in Apache

Re: [VOTE] Release Apache Tomcat 10.1.19

All, On 2/14/24 17:43, Christopher Schultz wrote: The proposed Apache Tomcat 10.1.19 release is now available for voting. The notable changes compared to 10.1.18 are: - Add improvements to the CSRF prevention filter including the ability   to skip adding nonces for resource name and subtree

[VOTE] Release Apache Tomcat 8.5.99

The proposed Apache Tomcat 8.5.99 release is now available for voting. The notable changes compared to 8.5.99 are: - Add improvements to the CSRF prevention filter including the ability to skip adding nonces for resource name and subtree URL patterns. - Add support for user provided

[VOTE] Release Apache Tomcat 10.1.19

The proposed Apache Tomcat 10.1.19 release is now available for voting. The notable changes compared to 10.1.18 are: - Add improvements to the CSRF prevention filter including the ability to skip adding nonces for resource name and subtree URL patterns. - Add support for user provided

Re: February release tagging

Rémy, On 2/13/24 09:34, Rémy Maucherat wrote: On Tue, Feb 13, 2024 at 3:28 PM Christopher Schultz wrote: Mark, On 2/13/24 08:11, Mark Thomas wrote: Hi all, Just a quick status update. I was hopping to have tagged 11.0.x by now but I have found a couple of issues. 1. FFM on MacOS

Re: February release tagging

Mark, On 2/13/24 08:11, Mark Thomas wrote: Hi all, Just a quick status update. I was hopping to have tagged 11.0.x by now but I have found a couple of issues. 1. FFM on MacOS is broken. This might be related to me updating OpenSSL (via homebrew) from 3.2.0 to 3.2.1 I still have OpenSSL

Required build version(s)

All, The release managers have bumped-up their tool chains to Java 17 or later for all supported releases. Tomcat 11 requires Java 21. Tomcat 8.5.x only requires Java 11. But the documented Java versions for each release are actually: Tomcat 11 - Java 21 Tomcat 10 - Java 11 Tomcat 9 - Java

Re: Test stability and tagging delayed

Mark, On 2/9/24 08:30, Mark Thomas wrote: On 09/02/2024 12:14, Rémy Maucherat wrote: On Fri, Feb 9, 2024 at 12:46 PM Mark Thomas wrote: On 08/02/2024 17:07, Mark Thomas wrote: Back to working out a more robust fix... While the fix worked well locally, it hasn't fixed the problem on

Re: (tomcat) 05/05: Need for force GC to avoid duplicate clean-up (which triggers a crash)

Mark, On 2/8/24 16:18, ma...@apache.org wrote: This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 967be0a2d5bb90a5f962359e80fe3e6a78b1ea51 Author: Mark Thomas

Re: (tomcat) 02/02: Reduce changes of crash on Library shutdown with OpenSSL connections

Mark, On 2/8/24 16:10, ma...@apache.org wrote: This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 543e2b56bc8ccbde973366975b211b61408caf8a Author: Mark Thomas AuthorDate:

Re: (tomcat) 01/02: Re-order so library isn't reported as running after it is terminated

Mark, On 2/8/24 16:10, ma...@apache.org wrote: This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 712f6d8a70e0e89d66cba8a7b9cc81c717ecbe7d Author: Mark Thomas AuthorDate:

Re: Moving to Tomcat Native 1.3.x

Michael, On 2/7/24 14:14, Michael Osipov wrote: On 2024/02/07 18:19:24 Christopher Schultz wrote: Michael, On 2/7/24 11:05, Michael Osipov wrote: On 2024/02/04 19:54:25 Mark Thomas wrote: Hi all, AS you have probably noticed I am working on another round of Tomcat Native releases. We

Re: Moving to Tomcat Native 1.3.x

Michael, On 2/7/24 11:05, Michael Osipov wrote: On 2024/02/04 19:54:25 Mark Thomas wrote: Hi all, AS you have probably noticed I am working on another round of Tomcat Native releases. We are overdue on switching to 1.3.x so I would like to propose the following with this release round: -

Re: Moving to Tomcat Native 1.3.x

Mark, On 2/6/24 11:44, Mark Thomas wrote: On 06/02/2024 11:22, Michael Osipov wrote: On 2024/02/04 19:54:25 Mark Thomas wrote: Hi all, AS you have probably noticed I am working on another round of Tomcat Native releases. We are overdue on switching to 1.3.x so I would like to propose the

Re: [VOTE] Release Apache Tomcat Native 1.3.0

Mark, Thanks for RMing. On 2/5/24 15:43, Mark Thomas wrote: This is the first release of the 1.3.x branch. The main differences compared to the 1.2.x branch are - Minimum OpenSSL version of 1.1.1 - Minimum APR version of 1.6.3 - Minimum LibreSSL version of 3.5.2 - The windows binaries in

Re: [VOTE] Release Apache Tomcat Native 1.3.0

Mark, It's odd that the Java unit tests pass without any native library having been built. I find that confusing. -chris On 2/5/24 15:43, Mark Thomas wrote: This is the first release of the 1.3.x branch. The main differences compared to the 1.2.x branch are - Minimum OpenSSL version of

Re: Moving to Tomcat Native 1.3.x

Mark, On 2/5/24 11:39, Mark Thomas wrote: On 05/02/2024 14:11, Christopher Schultz wrote: I'm +1 to markt's suggestions for these releases, except maybe we should leave 8.5.x with tcnative 1.2.x. I wouldn't want to break the last few releases of 8.5.x for anybody. I think the chances

Re: [VOTE] Release Apache Tomcat Native 2.0.7

Mark, Thanks for RMing. On 2/4/24 15:42, Mark Thomas wrote: The key differences of version 2.0.7 compared to 2.0.6 are: - Align default pass phrase prompt with httpd on Windows - The windows binaries in this release have been built with OpenSSL   3.0.13 and APR 1.7.4 The 2.0.x branch is

Re: Moving to Tomcat Native 1.3.x

All, On 2/5/24 09:03, Christopher Schultz wrote: Mark, On 2/4/24 14:54, Mark Thomas wrote: AS you have probably noticed I am working on another round of Tomcat Native releases. We are overdue on switching to 1.3.x so I would like to propose the following with this release round: - create

Re: Moving to Tomcat Native 1.3.x

Mark, On 2/4/24 14:54, Mark Thomas wrote: AS you have probably noticed I am working on another round of Tomcat Native releases. We are overdue on switching to 1.3.x so I would like to propose the following with this release round: - create a new 1.3.x branch from the current 1.2.x HEAD -

Re: [VOTE] Apache Tomcat migration tool for Jakarta EE 1.0.8

Mark, On 2/2/24 10:53, Mark Thomas wrote: The proposed Apache Tomcat migration tool for Jakarta EE 1.0.8 is now available for voting. The significant changes since 1.0.7 are: - Recognize .ear files as archives - Include .jspf and .tagf files in the conversion process - Update dependencies

Re: February 2024 releases

Mark, On 2/1/24 18:07, Mark Thomas wrote: On 01/02/2024 23:45, Christopher Schultz wrote: All, Friday seems like a good time to roll a release and call for a vote. Does anyone want to fit anything in before this round of releases? Yes. The update to the migration tool. Okay. Does

February 2024 releases

All, Friday seems like a good time to roll a release and call for a vote. Does anyone want to fit anything in before this round of releases? -chris - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional

Merging PR for Csrf improvements

All, I'd like to merge this PR this week. https://github.com/apache/tomcat/pull/681 Does anyone else have any changes they feel strongly about? -chris - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For

Re: Consultation on disabling insecure HTTP requests in Tomcat

To whom it may concern, On 1/18/24 01:24, 2460873257 wrote: Hi Tomcat Experts：       I'm trying to Looking for a solution to disable the tomcat * Options request, but upon checking the source code, it seems that it is directly defined in the code. Is there a configuration provided to

Re: (tomcat) branch main updated: Fix logic bug spotted by Coverity Scan

Konstantin, On 1/15/24 09:30, Konstantin Kolinko wrote: пн, 15 янв. 2024 г. в 13:16, : This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to

Re: Supposed to provide performance at daemon thread in tomcat

Hello, On 1/15/24 03:45, koteswara Rao Gundapaneni wrote: On Sun, 14 Jan 2024, 18:13 koteswara Rao Gundapaneni, < koti.gundapan...@gmail.com> wrote: hi Daemon threads have identified the performance issue inorder to complete . Thread which is set as daemon by default has performance

Apache Tomcat 8.5.98 Available

The Apache Tomcat team announces the immediate availability of Apache Tomcat 8.5.98. Apache Tomcat 8 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 8.5.98 is a bugfix and

[VOTE] Release Apache Tomcat 8.5.98

All, The following votes were cast: +1: remm, markt, isapir, lihan, schultz No other votes were cast, therefore, the vote passes. Thanks to everyone who contributed toward this release. -chris The proposed Apache Tomcat 8.5.98 release is now available for voting. The notable changes

[VOTE][RESULT] Release Apache Tomcat 10.1.18

All, The following votes were cast: +1: remm, isapir, markt, lihan, jfclere, schultz There were no other votes, therefore, the vote passes. Thanks to everyone who contributed toward this release. -chris The proposed Apache Tomcat 10.1.18 release is now available for voting. The notable

Re: [VOTE] Release Apache Tomcat 8.5.98

All, On 1/5/24 11:53, Christopher Schultz wrote: The proposed Apache Tomcat 8.5.98 release is now available for voting. The notable changes compared to 8.5.97 are: - Fix virtual thread support for the NIO2 connector. - Correct a regression in the fix for 67675 that broke TLS key file

Re: [VOTE] Release Apache Tomcat 10.1.18

All, On 1/5/24 10:25, Christopher Schultz wrote: The proposed Apache Tomcat 10.1.18 release is now available for voting. The notable changes compared to 10.1.17 are: - Fix virtual thread support for the NIO2 connector. - Correct a regression in the fix for 67675 that broke TLS key file

Re: [VOTE] Release Apache Tomcat 11.0.0-M16

Mark, Thanks for RMing On 1/4/24 4:08 PM, Mark Thomas wrote: The proposed Apache Tomcat 11.0.0-M16 release is now available for voting. Apache Tomcat 11.0.0-M16 is a milestone release of the 11.0.x branch and has been made to provide users with early access to the new features in Apache

[VOTE] Release Apache Tomcat 8.5.98

The proposed Apache Tomcat 8.5.98 release is now available for voting. The notable changes compared to 8.5.97 are: - Fix virtual thread support for the NIO2 connector. - Correct a regression in the fix for 67675 that broke TLS key file parsing for PKCS#8 format keys that do not specify an

Re: [VOTE] Release Apache Tomcat 8.5.98

All, I jumped the gun a little bit on this voting announcement. The Maven repo isn't quite ready, but everything else is. I'll reply again when the Maven repo is ready. Thanks, -chris On 1/5/24 11:20, Christopher Schultz wrote: The proposed Apache Tomcat 8.5.98 release is now available

[VOTE] Release Apache Tomcat 8.5.98

The proposed Apache Tomcat 8.5.98 release is now available for voting. The notable changes compared to 8.5.97 are: - Fix virtual thread support for the NIO2 connector. - Correct a regression in the fix for 67675 that broke TLS key file parsing for PKCS#8 format keys that do not specify an

  1   2   3   4   5   6   7   8   9   10   >