[VOTE][RESULT] Release Apache Tomcat 10.1.18

2024-01-09 Thread Christopher Schultz
All, The following votes were cast: +1: remm, isapir, markt, lihan, jfclere, schultz There were no other votes, therefore, the vote passes. Thanks to everyone who contributed toward this release. -chris The proposed Apache Tomcat 10.1.18 release is now available for voting. The notable

Re: [VOTE] Release Apache Tomcat 8.5.98

2024-01-09 Thread Christopher Schultz
All, On 1/5/24 11:53, Christopher Schultz wrote: The proposed Apache Tomcat 8.5.98 release is now available for voting. The notable changes compared to 8.5.97 are: - Fix virtual thread support for the NIO2 connector. - Correct a regression in the fix for 67675 that broke TLS key file

Re: [VOTE] Release Apache Tomcat 10.1.18

2024-01-09 Thread Christopher Schultz
All, On 1/5/24 10:25, Christopher Schultz wrote: The proposed Apache Tomcat 10.1.18 release is now available for voting. The notable changes compared to 10.1.17 are: - Fix virtual thread support for the NIO2 connector. - Correct a regression in the fix for 67675 that broke TLS key file

Re: [VOTE] Release Apache Tomcat 11.0.0-M16

2024-01-08 Thread Christopher Schultz
Mark, Thanks for RMing On 1/4/24 4:08 PM, Mark Thomas wrote: The proposed Apache Tomcat 11.0.0-M16 release is now available for voting. Apache Tomcat 11.0.0-M16 is a milestone release of the 11.0.x branch and has been made to provide users with early access to the new features in Apache

[VOTE] Release Apache Tomcat 8.5.98

2024-01-05 Thread Christopher Schultz
The proposed Apache Tomcat 8.5.98 release is now available for voting. The notable changes compared to 8.5.97 are: - Fix virtual thread support for the NIO2 connector. - Correct a regression in the fix for 67675 that broke TLS key file parsing for PKCS#8 format keys that do not specify an

Re: [VOTE] Release Apache Tomcat 8.5.98

2024-01-05 Thread Christopher Schultz
All, I jumped the gun a little bit on this voting announcement. The Maven repo isn't quite ready, but everything else is. I'll reply again when the Maven repo is ready. Thanks, -chris On 1/5/24 11:20, Christopher Schultz wrote: The proposed Apache Tomcat 8.5.98 release is now available

[VOTE] Release Apache Tomcat 8.5.98

2024-01-05 Thread Christopher Schultz
The proposed Apache Tomcat 8.5.98 release is now available for voting. The notable changes compared to 8.5.97 are: - Fix virtual thread support for the NIO2 connector. - Correct a regression in the fix for 67675 that broke TLS key file parsing for PKCS#8 format keys that do not specify an

[VOTE] Release Apache Tomcat 10.1.18

2024-01-05 Thread Christopher Schultz
The proposed Apache Tomcat 10.1.18 release is now available for voting. The notable changes compared to 10.1.17 are: - Fix virtual thread support for the NIO2 connector. - Correct a regression in the fix for 67675 that broke TLS key file parsing for PKCS#8 format keys that do not specify an

Re: January releases

2024-01-03 Thread Christopher Schultz
Mark, On 1/2/24 06:30, Mark Thomas wrote: Hi all, What do we think about a January release? The changelog is fairly short but there is a fix for the regression in parsing keys/certs generated by older OpenSSL versions. I was planning on implementing a fix for BZ 68348 [1] and could tag

Re: (tomcat) branch main updated: Fix NIO2 and virtual threads (NIO2 requires ExecutorService)

2023-12-20 Thread Christopher Schultz
Mark, Was this back-ported to the 10.1.x branch? I see the back-port to 9.0.x and 8.5.x but not 10.1.x. -chris On 12/8/23 05:27, ma...@apache.org wrote: This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository

Re: Practical use of CsrfPreventionFilter

2023-12-15 Thread Christopher Schultz
All, I've opened a PR for this: https://github.com/apache/tomcat/pull/681 Comments welcome. -chris On 12/15/23 10:20, Christopher Schultz wrote: Mark, On 12/15/23 04:53, Mark Thomas wrote: On 13/12/2023 22:05, Christopher Schultz wrote: All, I've been playing with this Filter recently

Re: Practical use of CsrfPreventionFilter

2023-12-15 Thread Christopher Schultz
Mark, On 12/15/23 04:53, Mark Thomas wrote: On 13/12/2023 22:05, Christopher Schultz wrote: All, I've been playing with this Filter recently, and I have some concerns for its practical use. I'm considering adding some features to it in order to make it more practical to use, and I'm

Re: (tomcat) branch main updated: Make Host header / request line consistency check case insensitive

2023-12-15 Thread Christopher Schultz
Mark, On 12/15/23 04:37, ma...@apache.org wrote: This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new

Practical use of CsrfPreventionFilter

2023-12-13 Thread Christopher Schultz
All, I've been playing with this Filter recently, and I have some concerns for its practical use. I'm considering adding some features to it in order to make it more practical to use, and I'm interested to see what others think about these "problems" and whether my potential additions have

Apache Tomcat 10.1.17 Available

2023-12-12 Thread Christopher Schultz
The Apache Tomcat team announces the immediate availability of Apache Tomcat 10.1.17. Apache Tomcat 10 is an open source software implementation of the Jakarta Servlet, Jakarta Server Pages, Jakarta Expression Language, Jakarta WebSocket, Jakarta Authentication and Jakarta Annotations

[ANN] Apache Tomcat 8.5.97 available

2023-12-12 Thread Christopher Schultz
The Apache Tomcat team announces the immediate availability of Apache Tomcat 8.5.97. Apache Tomcat 8 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 8.5.97 is a bugfix and

[VOTE][RESULT] Release Apache Tomcat 10.1.17

2023-12-12 Thread Christopher Schultz
The following votes were cast: 1: remm, markt, schultz, jfclere, isapir, lihan There were no other votes, therefore the vote passes. Thanks to everyone who contributed toward this release. -chris The proposed Apache Tomcat 10.1.17 release is now available for voting. The notable changes

[VOTE][RESULT] Release Apache Tomcat 8.5.97

2023-12-12 Thread Christopher Schultz
The following votes were cast: +1: remm, schultz, markt, isapir There were no additional votes, therefore the vote passes. Thanks to everyone who contributed toward this release. -chris The proposed Apache Tomcat 8.5.97 release is now available for voting. The notable changes compared to

"Secure" parsing of XML

2023-12-11 Thread Christopher Schultz
All, Tomcat parses XML documents in a handful of places for example: 1. Main config files (server.xml, web.xml, context.xml) 2. JSPs 3. JSP tag-library descriptors (TLDs) 4. WebDAV requests 5. Directory-index XSL transforms In most of these cases, the XML parser is put into a "safe"

Re: [VOTE] Release Apache Tomcat 11.0.0-M15

2023-12-10 Thread Christopher Schultz
Mark, On 12/8/23 15:44, Christopher Schultz wrote: Mark, On 12/7/23 10:36, Mark Thomas wrote: The proposed Apache Tomcat 11.0.0-M15 release is now available for voting. Apache Tomcat 11.0.0-M15 is a milestone release of the 11.0.x branch and has been made to provide users with early access

Re: [VOTE] Release Apache Tomcat 9.0.84

2023-12-10 Thread Christopher Schultz
Rémy, Thanks for RMing. On 12/7/23 2:44 PM, Rémy Maucherat wrote: The proposed Apache Tomcat 9.0.84 release is now available for voting. The notable changes compared to 9.0.83 are: - Background processes for a Container no longer execute while lifecycle operations are in progress for

Re: [VOTE] Release Apache Tomcat 8.5.97

2023-12-08 Thread Christopher Schultz
Mark, On 12/8/23 14:47, Mark Thomas wrote: On 07/12/2023 18:16, Christopher Schultz wrote: The proposed 8.5.97 release is: [ ] Broken - do not release [X] Stable - go ahead and release as 8.5.97 (stable) Unit tests on Linux, Windows, MacOS M1 and MacOS Intel Build is cross-platform

Re: [VOTE] Release Apache Tomcat 11.0.0-M15

2023-12-08 Thread Christopher Schultz
Mark, On 12/7/23 10:36, Mark Thomas wrote: The proposed Apache Tomcat 11.0.0-M15 release is now available for voting. Apache Tomcat 11.0.0-M15 is a milestone release of the 11.0.x branch and has been made to provide users with early access to the new features in Apache Tomcat 11.0.x so that

[OT] Re: [VOTE] Release Apache Tomcat 10.1.17

2023-12-08 Thread Christopher Schultz
Mark, On 12/8/23 13:27, Mark Thomas wrote: On 08/12/2023 14:41, Christopher Schultz wrote: Mark, On 12/8/23 7:34 AM, Mark Thomas wrote: On 08/12/2023 03:17, Christopher Schultz wrote: The proposed 10.1.17 release is: [ ] Broken - do not release [X] Stable - go ahead and release as 10.1.17

Annoyances with Eclipse JDT compiler

2023-12-08 Thread Christopher Schultz
All, Tomcat has to be built, tested, and deployed in a variety of environments. Specifically, in a variety of Java Runtime Environments. I'm finding that my 8.5.x testing and execution requires some weird backflips due to JDT versioning. Would be make any sense to ship Tomcat with several

Re: [VOTE] Release Apache Tomcat 10.1.17

2023-12-08 Thread Christopher Schultz
All, On 12/7/23 10:17 PM, Christopher Schultz wrote: The proposed Apache Tomcat 10.1.17 release is now available for voting. The notable changes compared to 10.1.16 are: - Background processes for a Container no longer execute while lifecycle   operations are in progress for that Container

Re: [VOTE] Release Apache Tomcat 10.1.17

2023-12-08 Thread Christopher Schultz
Mark, On 12/8/23 7:34 AM, Mark Thomas wrote: On 08/12/2023 03:17, Christopher Schultz wrote: The proposed 10.1.17 release is: [ ] Broken - do not release [X] Stable - go ahead and release as 10.1.17 Unit tests on Linux, Windows, MacOS M1 and MacOS Intel Build is cross-platform repeatable

Re: [VOTE] Release Apache Tomcat 8.5.97

2023-12-08 Thread Christopher Schultz
All, On 12/7/23 13:16, Christopher Schultz wrote: The proposed Apache Tomcat 8.5.97 release is now available for voting. The notable changes compared to 8.5.96 are: - Background processes for a Container no longer execute while lifecycle   operations are in progress for that Container

[VOTE] Release Apache Tomcat 10.1.17

2023-12-07 Thread Christopher Schultz
The proposed Apache Tomcat 10.1.17 release is now available for voting. The notable changes compared to 10.1.16 are: - Background processes for a Container no longer execute while lifecycle operations are in progress for that Container. - Correct unintended escaping of XML in some WebDAV

Re: (tomcat) tag 10.1.17 deleted (was 69757db4c5)

2023-12-07 Thread Christopher Schultz
All, Apologies for the noise. I didn't notice until after the tag that I had not incremented the version numbers. -chris On 12/7/23 18:04, schu...@apache.org wrote: This is an automated email from the ASF dual-hosted git repository. schultz pushed a change to tag 10.1.17 in repository

[VOTE] Release Apache Tomcat 8.5.97

2023-12-07 Thread Christopher Schultz
The proposed Apache Tomcat 8.5.97 release is now available for voting. The notable changes compared to 8.5.96 are: - Background processes for a Container no longer execute while lifecycle operations are in progress for that Container. - Correct unintended escaping of XML in some WebDAV

Re: Tine to tag

2023-12-06 Thread Christopher Schultz
Mark, On 12/5/23 14:01, Mark Thomas wrote: There are a few tasks to complete but we are close to being in a position to tag the December release. The remaining tasks are: - check dependencies for updates - sync with POEditor - fix the new test that fails on NIO2 + Windows - maybe some

Re: svn commit: r1914238 - in /tomcat/site/trunk: docs/index.html docs/upgrading.html xdocs/stylesheets/project.xml xdocs/upgrading.xml

2023-11-30 Thread Christopher Schultz
Mark, On 11/30/23 12:07, Mark Thomas wrote: On 30/11/2023 16:52, schu...@apache.org wrote: Author: schultz Date: Thu Nov 30 16:52:59 2023 New Revision: 1914238 URL: http://svn.apache.org/viewvc?rev=1914238=rev Log: Add an "Upgrading" page. Nice :) There is some overlap with the

Re: (tomcat) 03/08: Code clean - formatting. No functional change.

2023-11-28 Thread Christopher Schultz
Mark, On 11/25/23 08:40, Mark Thomas wrote: On 25/11/2023 07:59, Rémy Maucherat wrote: On Fri, Nov 24, 2023 at 6:17 PM wrote: This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository

[ANN] Apache Tomcat 8.5.96 available

2023-11-14 Thread Christopher Schultz
The Apache Tomcat team announces the immediate availability of Apache Tomcat 8.5.96. Apache Tomcat 8 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 8.5.96 is a bugfix and

[VOTE][RESULT] Release Apache Tomcat 8.5.96

2023-11-14 Thread Christopher Schultz
The following votes were cast: +1: lihan, remm, schultz, markt Non-binding: +1: Dimitris Soumis There were no additional votes, therefore the vote passes. I will begin the release process shortly. -chris The proposed Apache Tomcat 8.5.96 release is now available for voting. The notable

[VOTE][RESULT] Release Apache Tomcat 10.1.16

2023-11-14 Thread Christopher Schultz
The following votes were cast: +1: schultz, lihan, remm, markt Non-binding: +1: Dimitris Soumis There were no additional votes, therefore the vote passes. I will begin the release process shortly. -chris The proposed Apache Tomcat 10.1.16 release is now available for voting. The notable

[VOTE] Release Apache Tomcat 10.1.16

2023-11-14 Thread Christopher Schultz
The following votes were cast: +1: schultz, lihan, remm, markt Non-binding: +1: Dimitris Soumis There were no additional votes, therefore the vote passes. I will begin the release process shortly. -chris The proposed Apache Tomcat 10.1.16 release is now available for voting. The notable

[VOTE][RESULT] Release Apache Tomcat 8.5.96

2023-11-14 Thread Christopher Schultz
The following votes were cast: +1: lihan, remy, schultz, markt Non-binding: +1: Dimitris Soumis I will begin the release process shortly. -chris The proposed Apache Tomcat 8.5.96 release is now available for voting. The notable changes compared to 8.5.95 are: - Fix reloading TLS

Re: Tomcat 8.5.x and repeatable builds

2023-11-14 Thread Christopher Schultz
Mark, On 11/14/23 11:53, Mark Thomas wrote: All, We are currently unable to produce cross-platform repeatable builds for Tomcat 8.5.x with Java 11 due to https://bugs.openjdk.org/browse/JDK-8320082 We have several options: 1. Do nothing. Build remains repeatable on the same OS. Wait and

Re: [VOTE] Release Apache Tomcat 11.0.0-M14

2023-11-14 Thread Christopher Schultz
Mark, Thanks for RM'ing. On 11/9/23 2:58 PM, Mark Thomas wrote: The proposed Apache Tomcat 11.0.0-M14 release is now available for voting. Apache Tomcat 11.0.0-M14 is a milestone release of the 11.0.x branch and has been made to provide users with early access to the new features in Apache

Re: [VOTE] Release Apache Tomcat 8.5.96

2023-11-13 Thread Christopher Schultz
All, On 11/10/23 15:04, Christopher Schultz wrote: The proposed Apache Tomcat 8.5.96 release is now available for voting. The notable changes compared to 8.5.95 are: - Fix reloading TLS configuration could cause the Connector to   refuse new connections or the JVM to crash. - Ensure

Re: [VOTE] Release Apache Tomcat 10.1.16

2023-11-10 Thread Christopher Schultz
All, On 11/10/23 3:00 PM, Christopher Schultz wrote: The proposed Apache Tomcat 10.1.16 release is now available for voting. The notable changes compared to 10.1.15 are: - Fix reloading TLS configuration could cause the Connector to   refuse new connections or the JVM to crash. - Ensure

Re: [VOTE] Release Apache Tomcat 8.5.99... er, .96

2023-11-10 Thread Christopher Schultz
Mark, On 11/10/23 12:17, Mark Thomas wrote: Maybe re-issue this vote with the correct subject? ;) Thanks -chris On 10/11/2023 16:09, Christopher Schultz wrote: The proposed Apache Tomcat 8.5.96 release is now available for voting. The notable changes compared to 8.5.95 are: - Fix

[VOTE] Release Apache Tomcat 8.5.96

2023-11-10 Thread Christopher Schultz
The proposed Apache Tomcat 8.5.96 release is now available for voting. The notable changes compared to 8.5.95 are: - Fix reloading TLS configuration could cause the Connector to refuse new connections or the JVM to crash. - Ensure that an IOException during the reading of the request

[VOTE] Release Apache Tomcat 10.1.16

2023-11-10 Thread Christopher Schultz
The proposed Apache Tomcat 10.1.16 release is now available for voting. The notable changes compared to 10.1.15 are: - Fix reloading TLS configuration could cause the Connector to refuse new connections or the JVM to crash. - Ensure that an IOException during the reading of the request

[VOTE] Release Apache Tomcat 8.5.99

2023-11-10 Thread Christopher Schultz
The proposed Apache Tomcat 8.5.96 release is now available for voting. The notable changes compared to 8.5.95 are: - Fix reloading TLS configuration could cause the Connector to refuse new connections or the JVM to crash. - Ensure that an IOException during the reading of the request

Release build JDK

2023-11-10 Thread Christopher Schultz
All, I see that the builds of 10.1.x require Java 17 or later. Is it okay to use Java 21 for that purpose, or is there a reason to use Java 17 specifically? -chris - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org

Unexpected error running unit tests in 8.5.x

2023-11-09 Thread Christopher Schultz
All, I just ran the full unit test suite for 8.5.x on x86 MacOS and I got a weird error in this test: TEST-org.apache.catalina.mapper.TestMapperWebapps.NIO.txt 09-Nov-2023 13:46:19.661 SEVERE [http-nio-127.0.0.1-auto-3-exec-4] org.apache.jasper.compiler.JDTCompiler$1.findType Failed to load

Re: Tagging and code signing

2023-11-09 Thread Christopher Schultz
Mark and Rémy, On 11/9/23 04:07, Rémy Maucherat wrote: On Thu, Nov 9, 2023 at 10:00 AM Mark Thomas wrote: On 08/11/2023 21:07, Christopher Schultz wrote: Mark, On 11/8/23 12:58, Mark Thomas wrote: Hi all, I have a few things I still want to look at with the recent error handling changes

Re: (tomcat) 04/04: Ignore x86 binary for Tomcat 11.0.x

2023-11-09 Thread Christopher Schultz
All, I'm preserving these "11.0 hacks" in the other branches because I may or may not adapt them as time goes on. I wanted to get these patches into the branches for this next set of releases so people could give some feedback using the "verify-release" target. Thanks, -chris On 11/9/23

Re: Tagging and code signing

2023-11-08 Thread Christopher Schultz
Mark, On 11/8/23 12:58, Mark Thomas wrote: Hi all, I have a few things I still want to look at with the recent error handling changes. I'm seeing differences in behaviour between versions I at least want to understand. Depending on what I find, I might try and align behaviours a little

Re: (tomcat-native) branch main updated: BZ 67818: SSL#setVerify()/SSLContext#setVerify() silently set undocumented default verify paths

2023-10-30 Thread Christopher Schultz
Michael, On 10/30/23 08:40, Michael Osipov wrote: On 2023/10/30 11:50:55 Mark Thomas wrote: 30 Oct 2023 10:25:07 micha...@apache.org: This is an automated email from the ASF dual-hosted git repository. michaelo pushed a commit to branch main in repository

Re: [tomcat] branch main updated: Add charset

2023-10-19 Thread Christopher Schultz
Michael, On 10/19/23 08:30, Michael Osipov wrote: On 2023/10/19 11:24:35 r...@apache.org wrote: java/org/apache/catalina/manager/StatusTransformer.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/java/org/apache/catalina/manager/StatusTransformer.java

Re: [tomcat] branch main updated: Use a better "move" method.

2023-10-18 Thread Christopher Schultz
a better "move" method. 7d301f5f9a is described below commit 7d301f5f9aa1ac7c8d82336594cef2fd0702d0e4 Author: Christopher Schultz AuthorDate: Wed Oct 18 22:08:42 2023 -0400 Use a better "move" method. --- java/org/apache/catalina/ha/deploy/FarmWarDeployer.java | 9

Re: Which release artifact should we expect to be reproducible?

2023-10-18 Thread Christopher Schultz
Mark, On 10/18/23 11:43, Mark Thomas wrote: On 18/10/2023 15:06, Konstantin Kolinko wrote: ср, 18 окт. 2023 г. в 14:55, Mark Thomas : On 17/10/2023 16:36, Mark Thomas wrote: It looks like Javadoc generation is different between Linux and Windows with Java 21. That is still causing issues

[ANN] Apache Tomcat 8.5.95 available

2023-10-16 Thread Christopher Schultz
The Apache Tomcat team announces the immediate availability of Apache Tomcat 8.5.95. Apache Tomcat 8 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 8.5.95 is a bugfix and

[VOTE][RELEASE] Release Apache Tomcat 8.5.95

2023-10-16 Thread Christopher Schultz
All, The following votes were cast: +1: isapir, lihan, remm, michaelo, schultz Non-binding: +1: cesarhernandezgt There were no other votes cast, therefore the vote passes. I will begin the release process very shortly. -chris On 10/11/23 21:31, Christopher Schultz wrote: > The propo

[VOTE][RESULT] Release Apache Tomcat 10.1.15

2023-10-16 Thread Christopher Schultz
All, The following votes were cast: +1: isapir, schultz, lihan, remm Non-binding: +1: rmannibucau There were no other votes cast, therefore the vote passes. I will begin the release process very shortly. -chris On 10/11/23 20:50, Christopher Schultz wrote: The proposed Apache Tomcat

Re: Which release artifact should we expect to be reproducible?

2023-10-13 Thread Christopher Schultz
Emmanuel, On 10/12/23 18:13, Emmanuel Bourg wrote: Le 12/10/2023 à 23:27, Christopher Schultz a écrit : I installed the ZIP version of Temurin Java 21 to match your release toolchain and I get every file being different. But the versions are not exactly the same, so that may be the reason

Re: Which release artifact should we expect to be reproducible?

2023-10-12 Thread Christopher Schultz
Mark, On 10/12/23 15:50, Christopher Schultz wrote: Mark, On 10/12/23 13:15, Mark Thomas wrote: 12 Oct 2023 10:29:02 Christopher Schultz : All, I've been working on an "ant verify-release" target and I'm finding that in the 9.0 release -- the one I'm using as a guinea pig -- th

Re: Which release artifact should we expect to be reproducible?

2023-10-12 Thread Christopher Schultz
Mark, On 10/12/23 13:15, Mark Thomas wrote: 12 Oct 2023 10:29:02 Christopher Schultz : All, I've been working on an "ant verify-release" target and I'm finding that in the 9.0 release -- the one I'm using as a guinea pig -- the SHA-512 hashes do not match for these artifacts:

Re: [VOTE] Release Apache Tomcat 8.5.95 [CORRECTED]

2023-10-12 Thread Christopher Schultz
All, On 10/11/23 21:32, Christopher Schultz wrote: The proposed Apache Tomcat 8.5.95 release is now available for voting. The notable changes compared to 8.5.94 are: - Correct a regression in 8.5.94 that broke the Tomcat JBDC   connection pool - Correct a regression in 8.5.94 that broke

Re: [VOTE] Release Apache Tomcat 11.0.0-M13

2023-10-12 Thread Christopher Schultz
Mark, On 10/11/23 09:24, Mark Thomas wrote: The proposed Apache Tomcat 11.0.0-M13 release is now available for voting. Apache Tomcat 11.0.0-M13 is a milestone release of the 11.0.x branch and has been made to provide users with early access to the new features in Apache Tomcat 11.0.x so that

Re: [tomcat] branch main updated: BZ 67667: TLSCertificateReloadListener prints unreadable rendering of X509Certificate#getNotAfter()

2023-10-12 Thread Christopher Schultz
Michael, On 10/12/23 07:56, Michael Osipov wrote: On 2023/10/12 11:46:55 Christopher Schultz wrote: Michael, On 10/12/23 06:13, micha...@apache.org wrote: This is an automated email from the ASF dual-hosted git repository. michaelo pushed a commit to branch main in repository https

Which release artifact should we expect to be reproducible?

2023-10-12 Thread Christopher Schultz
All, I've been working on an "ant verify-release" target and I'm finding that in the 9.0 release -- the one I'm using as a guinea pig -- the SHA-512 hashes do not match for these artifacts: apache-tomcat-9.0.82-fulldocs.tar.gz apache-tomcat-9.0.82-src.tar.gz apache-tomcat-9.0.82-src.zip

Re: [tomcat] branch main updated: BZ 67667: TLSCertificateReloadListener prints unreadable rendering of X509Certificate#getNotAfter()

2023-10-12 Thread Christopher Schultz
Michael, On 10/12/23 06:13, micha...@apache.org wrote: This is an automated email from the ASF dual-hosted git repository. michaelo pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push:

Re: [VOTE] Release Apache Tomcat 9.0.82

2023-10-11 Thread Christopher Schultz
Rémy, On 10/11/23 09:38, Rémy Maucherat wrote: The proposed Apache Tomcat 9.0.82 release is now available for voting. The notable changes compared to 9.0.81 are: - Correct a regression in 9.0.81 that broke the Tomcat JBDC connection pool - Correct a regression in 9.0.81 that broke HTTP

Re: [VOTE] Release Apache Tomcat 10.1.15

2023-10-11 Thread Christopher Schultz
All, On 10/11/23 20:50, Christopher Schultz wrote: The proposed Apache Tomcat 10.1.15 release is now available for voting. The notable changes compared to 10.1.14 are: - Correct a regression in 10.1.14 that broke the Tomcat JBDC   connection pool - Correct a regression in 10.1.14 that broke

[VOTE] Release Apache Tomcat 8.5.95 [CORRECTED]

2023-10-11 Thread Christopher Schultz
The proposed Apache Tomcat 8.5.95 release is now available for voting. The notable changes compared to 8.5.94 are: - Correct a regression in 8.5.94 that broke the Tomcat JBDC connection pool - Correct a regression in 8.5.94 that broke HTTP compression Along with lots of other bug fixes and

[VOTE] Release Apache Tomcat 8.5.95

2023-10-11 Thread Christopher Schultz
The proposed Apache Tomcat 8.5.95 release is now available for voting. The notable changes compared to 8.5.94 are: - Correct a regression in 10.1.14 that broke the Tomcat JBDC connection pool - Correct a regression in 10.1.14 that broke HTTP compression Along with lots of other bug fixes

[VOTE] Release Apache Tomcat 10.1.15

2023-10-11 Thread Christopher Schultz
The proposed Apache Tomcat 10.1.15 release is now available for voting. The notable changes compared to 10.1.14 are: - Correct a regression in 10.1.14 that broke the Tomcat JBDC connection pool - Correct a regression in 10.1.14 that broke HTTP compression For full details, see the change

[ANN] Apache Tomcat 8.5.94 available

2023-10-10 Thread Christopher Schultz
The Apache Tomcat team announces the immediate availability of Apache Tomcat 8.5.94. Apache Tomcat 8 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 8.5.94 is a bugfix and

[VOTE][RESULT] Release Apache Tomcat 10.1.14

2023-10-10 Thread Christopher Schultz
All, The following votes were cast: +1: isapir, ebourg, csutherl, lihan, markt, schultz No other votes were cast, the vote therefore passes. I will begin the release process shortly. Thanks to everyone who contributed to this release. Thanks, -chris On 10/9/23 18:18, Christopher Schultz

[VOTE][RESULT] Release Apache Tomcat 8.5.94

2023-10-10 Thread Christopher Schultz
All, The following votes were cast: +1: schultz, lihan, isapir, markt, remm No other votes were cast, the vote therefore passes. I will begin the release process shortly. Thanks to everyone who contributed to this release. Thanks, -chris On 10/9/23 17:55, Christopher Schultz wrote

Re: [VOTE] Release Apache Tomcat 10.1.14

2023-10-09 Thread Christopher Schultz
All, On 10/9/23 18:18, Christopher Schultz wrote: The proposed Apache Tomcat 10.1.14 release is now available for voting. The notable changes compared to 10.1.13 are: - Update Tomcat Native to 1.2.39 to pick up Windows binaries built with   OpenSSL 3.0.11. - Provide a lifecycle listener

Re: [VOTE] Release Apache Tomcat 8.5.94 [CORRECTION]

2023-10-09 Thread Christopher Schultz
Igal, On 10/9/23 18:53, Igal Sapir wrote: Chris, On Mon, Oct 9, 2023 at 3:22 PM Christopher Schultz < ch...@christopherschultz.net> wrote: Igal, On 10/9/23 18:13, Igal Sapir wrote: Chris, I'm getting some errors when I run `ant clean test` with Java 1.8.0_322 - any ideas? Ye

Re: [VOTE] Release Apache Tomcat 8.5.94 [CORRECTION]

2023-10-09 Thread Christopher Schultz
All, On 10/9/23 18:01, Christopher Schultz wrote: All, On 10/9/23 17:55, Christopher Schultz wrote: The proposed Apache Tomcat 8.5.94 release is now available for voting. The notable changes compared to 8.5.93 are: - Update Tomcat Native to 1.2.39 to pick up Windows binaries built

Re: [VOTE] Release Apache Tomcat 8.5.94 [CORRECTION]

2023-10-09 Thread Christopher Schultz
d.xml:1544: The following error occurred while executing this line: /workspace/src/tomcat/8.5.x/build.xml:1594: Context loader has not been reset Total time: 18 seconds Igal On Mon, Oct 9, 2023 at 3:02 PM Christopher Schultz < ch...@christopherschultz.net> wrote: All, On 10/9/23 17:55, Chr

[VOTE] Release Apache Tomcat 10.1.14

2023-10-09 Thread Christopher Schultz
The proposed Apache Tomcat 10.1.14 release is now available for voting. The notable changes compared to 10.1.13 are: - Update Tomcat Native to 1.2.39 to pick up Windows binaries built with OpenSSL 3.0.11. - Provide a lifecycle listener that will automatically reload TLS configurations a

Re: [VOTE] Release Apache Tomcat 8.5.94 [CORRECTION]

2023-10-09 Thread Christopher Schultz
All, On 10/9/23 17:55, Christopher Schultz wrote: The proposed Apache Tomcat 8.5.94 release is now available for voting. The notable changes compared to 8.5.93 are: - Update Tomcat Native to 1.2.39 to pick up Windows binaries built with   OpenSSL 3.0.11. - Provide a lifecycle listener

[VOTE] Release Apache Tomcat 8.5.94

2023-10-09 Thread Christopher Schultz
The proposed Apache Tomcat 8.5.94 release is now available for voting. The notable changes compared to 8.5.93 are: - Update Tomcat Native to 1.2.39 to pick up Windows binaries built with OpenSSL 3.0.11. - Provide a lifecycle listener that will automatically reload TLS configurations a set

Re: [tomcat] branch main updated: Add experimental FilterValve, which allows a Filter to be run within the Valve chain.

2023-10-09 Thread Christopher Schultz
ow commit dc5b18d8989cf816c0870f236f6ccaade8b16ff3 Author: Christopher Schultz AuthorDate: Mon Oct 9 15:45:42 2023 -0400 Add experimental FilterValve, which allows a Filter to be run within the Valve chain. --- .../apache/catalina/startup/ContextRuleSet.java| 3 + .../org/apache/catalina/startup/EngineRuleSet.

Alternative TLS 1.3 cipher suite names

2023-10-09 Thread Christopher Schultz
All, I was cleaning some things up today and I found this patch in my tomcat fork. I tried to find the place where I found these cipher suite aliases and I think it's only present in CloudFlare's documentation[1]. Is this patch at all useful? -chris [1]

Re: Tomcat training noise

2023-10-03 Thread Christopher Schultz
Mark, On 10/3/23 10:57, Mark Thomas wrote: Hi all, Sorry for all the noise. I am trying to get the tomcat-training repo up to date so I can use it for a presentation at CoC Halifax. I'll try and do more stuff off-line. Thanks for mentioning this. I was gonna reply and say "shouldn't we

Re: [tomcat] branch main updated: Check GPG viability without actually creating a file.

2023-09-29 Thread Christopher Schultz
Mark, On 9/29/23 14:15, Mark Thomas wrote: On 29/09/2023 17:29, Christopher Schultz wrote: Mark, On 9/29/23 11:18, Mark Thomas wrote: 29 Sept 2023 16:08:37 schu...@apache.org: This is an automated email from the ASF dual-hosted git repository. schultz pushed a commit to branch main

Re: [tomcat] branch main updated: Check GPG viability without actually creating a file.

2023-09-29 Thread Christopher Schultz
to refs/heads/main by this push: new 622a3d0a0b Check GPG viability without actually creating a file. 622a3d0a0b is described below commit 622a3d0a0b79bfaa5686f810295890c5a53987d0 Author: Christopher Schultz AuthorDate: Fri Sep 29 11:07:41 2023 -0400     Check GPG viability without actually

Re: [tomcat] branch main updated: Perform a simple gpg test at the beginning of the build to ensure that GPG will work later.

2023-09-29 Thread Christopher Schultz
Mark, On 9/29/23 10:36, Mark Thomas wrote: On 29/09/2023 15:32, Christopher Schultz wrote: On 9/29/23 10:13, Mark Thomas wrote: No objections. Just a query as to whether there is any other operation that can be used to confirm the passphrase is correct that doesn't have any side-effects

Re: [tomcat] branch main updated: Perform a simple gpg test at the beginning of the build to ensure that GPG will work later.

2023-09-29 Thread Christopher Schultz
Mark, On 9/29/23 10:13, Mark Thomas wrote: On 29/09/2023 13:43, Christopher Schultz wrote: All, On 9/29/23 08:40, schu...@apache.org wrote: This is an automated email from the ASF dual-hosted git repository. schultz pushed a commit to branch main in repository https://gitbox.apache.org

Re: [tomcat] branch main updated: Perform a simple gpg test at the beginning of the build to ensure that GPG will work later.

2023-09-29 Thread Christopher Schultz
ow commit 5ffb9fb712691bfb7f79f2d6a5181ff3dec3946a Author: Christopher Schultz AuthorDate: Fri Sep 29 08:39:15 2023 -0400 Perform a simple gpg test at the beginning of the build to ensure that GPG will work later. --- build.xml | 20 1 file changed, 16 insertions(+), 4

[SECURITY] [CORRECTION] CVE-2023-41081 Apache Tomcat Connectors (mod_jk) Authentication Bypass

2023-09-28 Thread Christopher Schultz
CVE-2023-41081 Apache Tomcat Connectors (mod_jk) Authentication Bypass Severity: Important Vendor: The Apache Software Foundation Versions Affected: - Apache Tomcat Connectors mod_jk Connector 1.2.0 to 1.2.48 Description: In some circumstances, such as when a configuration included "JkOptions

[SECURITY] [CORRECTION] CVE-2023-41081 Apache Tomcat Connectors (mod_jk) Authentication Bypass

2023-09-28 Thread Christopher Schultz
CVE-2023-41081 Apache Tomcat Connectors (mod_jk) Authentication Bypass Severity: Important Vendor: The Apache Software Foundation Versions Affected: - Apache Tomcat Connectors mod_jk Connector 1.2.0 to 1.2.48 Description: In some circumstances, such as when a configuration included "JkOptions

Re: [VOTE] Release Apache Tomcat Native 1.2.39

2023-09-28 Thread Christopher Schultz
Mark, On 9/28/23 09:56, Mark Thomas wrote: Version 1.2.39 includes the following changes compared to 1.2.38 - Fix optionalNoCA support (always disable OCSP) - The windows binaries in this release have been built with OpenSSL   3.0.11 and APR 1.7.4 The proposed release artifacts can be found

Re: [VOTE] Release Apache Tomcat Native 2.0.6

2023-09-28 Thread Christopher Schultz
Mark, On 9/27/23 12:59, Mark Thomas wrote: The key differences of version 2.0.6 compared to 2.0.5 are: - Fix optionalNoCA support (always disable OCSP) - The windows binaries in this release have been built with OpenSSL   3.0.11 and APR 1.7.4 The 2.0.x branch is primarily intended for use

Re: [tomcat] branch main updated: Refactor to remove syncs for upgraded connections statistics

2023-09-27 Thread Christopher Schultz
Rémy, This is a good one. Nice catch. -chris On 9/27/23 09:59, r...@apache.org wrote: This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to

Re: [tomcat] branch main updated: Move to correct section

2023-09-22 Thread Christopher Schultz
Mark, On 9/22/23 12:55, ma...@apache.org wrote: This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new

Re: [tomcat] branch main updated: Tighten up readNotify and writeNotify

2023-09-19 Thread Christopher Schultz
Rémy, On 9/19/23 08:24, r...@apache.org wrote: This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new

Re: Tomcat's fork of Commons File Upload

2023-09-15 Thread Christopher Schultz
Mark, Rémy, On 9/15/23 08:43, Rémy Maucherat wrote: On Fri, Sep 15, 2023 at 2:38 PM Mark Thomas wrote: All, Since the introduction of multi-part upload support in Servlet 3 (Tomcat 7), Tomcat has used a package renamed fork of Commons FileUpload to provide that support. Recently,

Re: Potential performance improvement

2023-09-14 Thread Christopher Schultz
various implementations which employ different suspected performance improvements. Let me clean it up a bit and I'll post it someplace for everyone. -chris On 13/09/2023 17:38, Christopher Schultz wrote: All, Ping. I've added a few other implementations which will e.g. perform no char-copy

Re: Potential performance improvement

2023-09-13 Thread Christopher Schultz
time I run the benchmark, which is puzzling. Thanks, -chris On 9/8/23 13:39, Christopher Schultz wrote: All, Please ignore the fact that my benchmark is all oriented around toUpperCase instead of toLowerCase :) -chris On 9/8/23 13:25, Christopher Schultz wrote: All, There are many cases

<    1   2   3   4   5   6   7   8   9   10   >