Re: BZ 66294 - optionally disable some SecurityManager checks

2022-11-07 Thread Christopher Schultz
Mark, On 11/7/22 11:24, Mark Thomas wrote: Hi, BZ 66294 [1] highlights the performance impact in Tomcat of some additional SecurityManager checks that were added to avoid AccessControlException when using the EL API JAR outside of Tomcat. Details of the performance impact are in the bug rep

Re: [VOTE] Release Apache Tomcat Native 2.0.2

2022-11-07 Thread Christopher Schultz
Mark, On 11/2/22 16:57, Mark Thomas wrote: The key differences of version 2.0.2 compared to 2.0.1 are: - Update the minimum supported version of LibreSSL to 3.5.2.   Based on a #13 provided by orbea. - The windows binaries in this release have been built with OpenSSL   3.0.7 The 2.0.x branc

Re: November release round

2022-11-02 Thread Christopher Schultz
Mark, On 11/1/22 12:19, Mark Thomas wrote: I've just read the OpenSSL announcement. The issue has been downgraded to critical but we are going to need to new Tomcat Native release. There are a couple of stack overflow bugs in certificate verification so Tomcat could be accepted via CLIENT-CERT

Re: [SECURITY][UPDATE] CVE-2022-42252 Apache Tomcat - Request Smuggling

2022-11-02 Thread Christopher Schultz
All, There is a typo in this announcement. The affected versions of Tomcat8.5 are 8.5.0 to 8.0.82, not 8.5.52. Thanks, -chris On 10/31/22 12:46, Mark Thomas wrote: CVE-2022-42252 Apache Tomcat - Request Smuggling Severity: Low Vendor: The Apache Software Foundation Versions Affected: Apach

Re: [tomcat] branch loom created (now 6a22f2f399)

2022-10-21 Thread Christopher Schultz
Rémy, On 10/21/22 05:27, Rémy Maucherat wrote: On Thu, Oct 20, 2022 at 3:46 PM Rémy Maucherat wrote: Ok, that is reasonable and seeing what can be expected in the best case is a good plan. Async will indeed be a bit more expensive with Loom, just like blocking is more expensive with NIO(2).

Re: [tomcat] branch loom created (now 6a22f2f399)

2022-10-21 Thread Christopher Schultz
Mark, On 10/20/22 05:28, Mark Thomas wrote: On 20/10/2022 09:32, Rémy Maucherat wrote: This is interesting since now is the best time to discuss long term plans. We'll see if there are some scheduling gains with Loom ... But I don't think thread scheduling was the problem in Tomcat. Maybe

Re: [DISCUSS] EOL date for 8.5.x

2022-10-21 Thread Christopher Schultz
Mark, On 10/20/22 04:44, Mark Thomas wrote: Bump. On 07/10/2022 10:27, Mark Thomas wrote: Hi all, I don't think there is a need to make a decision on this quickly, but based on past experience and the current discussions about Jakarta EE 11 I think this is something we need to start thinki

Re: [VOTE] Release Apache Tomcat 8.5.83

2022-10-10 Thread Christopher Schultz
Mark, Thanks for RMing. On 10/3/22 17:53, Mark Thomas wrote: The proposed Apache Tomcat 8.5.83 release is now available for voting. The notable changes compared to 8.5.82 are: - Add support for authenticating WebSocket clients with an HTTP forward   proxy when establishing a connection to a

Re: [VOTE] Release Apache Tomcat 8.5.83

2022-10-06 Thread Christopher Schultz
Mark, I' have started my testing process ;) On 10/3/22 16:53, Mark Thomas wrote: The proposed Apache Tomcat 8.5.83 release is now available for voting. The notable changes compared to 8.5.82 are: - Add support for authenticating WebSocket clients with an HTTP forward   proxy when establishin

Re: Release plans

2022-10-03 Thread Christopher Schultz
Mark, On 10/3/22 03:33, Mark Thomas wrote: Hi all, Given the regression in the previous set of releases and that it is the beginning of October, my intention is to start the October release round shortly. I have a couple of things I want to look at before I tag the releases as well as runn

Re: Security manager support

2022-10-01 Thread Christopher Schultz
Emmanuel, On 9/28/22 11:05, Emmanuel Bourg wrote: The security manager has been deprecated for removal in Java 17 [1], and at some point Tomcat will have to stop supporting it. Do we want to wait until it's no longer available in the JDK to remove it from Tomcat, or should we remove it earlie

Re: [tomcat] branch main updated: Refactor to avoid use of Hashtable. No functional change.

2022-09-15 Thread Christopher Schultz
Mark, On 9/15/22 11:26, Mark Thomas wrote: On 15/09/2022 16:23, ma...@apache.org wrote: This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to

Time for Tomcat 8.5.83?

2022-09-13 Thread Christopher Schultz
All, Looking at the changelog, I don't see anything really critical, but there are a bunch of little things that maybe we should just go ahead and release. Any comments either way? -chris - To unsubscribe, e-mail: dev-unsub

Re: [tomcat] branch main updated: Improve handling of EL error messages.

2022-08-29 Thread Christopher Schultz
Mark, On 8/29/22 02:39, ma...@apache.org wrote: This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new e

Re: svn commit: r1903658 - /tomcat/site/trunk/xdocs/whoweare.xml

2022-08-25 Thread Christopher Schultz
🎉 On 8/24/22 06:25, li...@apache.org wrote: Author: lihan Date: Wed Aug 24 10:25:26 2022 New Revision: 1903658 URL: http://svn.apache.org/viewvc?rev=1903658&view=rev Log: add new committer - Han Li Modified: tomcat/site/trunk/xdocs/whoweare.xml Modified: tomcat/site/trunk/xdocs/whoweare.

Re: jakarta.el, useless getResource?

2022-08-25 Thread Christopher Schultz
Mark, On 8/22/22 07:54, Mark Thomas wrote: On 22/08/2022 11:48, Mark Thomas wrote: On 22/08/2022 10:20, Romain Manni-Bucau wrote: So overall I wonder if this check can be dropped now we have concurrent classloaders and cache almost everywhere. If not, should the missed items be cached in

Re: Migrate from Bugzilla to GitHub Issues

2022-08-18 Thread Christopher Schultz
All, On 8/18/22 08:30, Mark Thomas wrote: On 18/08/2022 13:21, Graham Leggett wrote: On 18 Aug 2022, at 06:57, Vladimir Sitnikov wrote: Have you considered migrating from Bugzilla to GitHub Issues? I think co-locating issues, code, and PRs at GitHub would make it easier to browse both

Re: BUILDING.txt

2022-08-18 Thread Christopher Schultz
distribution should really have easy-to-read documentation. -chris 2022年8月18日 09:36,Christopher Schultz 写道: All, On 8/17/22 21:23, Christopher Schultz wrote: I just noticed that BUILDING.txt in the source distribution of Tomcat 8.5.82 hasn'

Re: BUILDING.txt

2022-08-17 Thread Christopher Schultz
All, On 8/17/22 21:23, Christopher Schultz wrote: I just noticed that BUILDING.txt in the source distribution of Tomcat 8.5.82 hasn't been merged as expected: "         Building The Apache Tomcat @VERSION_M

Re: [Bug 66209] CPU regression when classpath Bloom filters are active

2022-08-17 Thread Christopher Schultz
Mark, On 8/15/22 06:10, bugzi...@apache.org wrote: https://bz.apache.org/bugzilla/show_bug.cgi?id=66209 --- Comment #1 from Mark Thomas --- This patch essentially trades memory for performance. We have some users that won't want to make that trade - even if the memory concerned is relatively s

BUILDING.txt

2022-08-17 Thread Christopher Schultz
I just noticed that BUILDING.txt in the source distribution of Tomcat 8.5.82 hasn't been merged as expected: " Building The Apache Tomcat @VERSION_MAJOR_MINOR@ Servlet/JSP Container ===

Re: svn commit: r56264 - /release/tomcat/tomcat-8/v8.5.82/

2022-08-13 Thread Christopher Schultz
Mark, On 8/13/22 11:34 AM, Mark Thomas wrote: 13 Aug 2022 16:03:03 schu...@apache.org: Author: schultz Date: Sat Aug 13 15:03:03 2022 New Revision: 56264 Log: Drop previous release. Removed:     release/tomcat/tomcat-8/v8.5.82/ That looks like the current release. I'm my phone so I can't

[ANN] Apache Tomcat 8.5.82 available

2022-08-13 Thread Christopher Schultz
The Apache Tomcat team announces the immediate availability of Apache Tomcat 8.5.82. Apache Tomcat 8 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 8.5.82 is a bugfix and fea

[VOTE][RESULT] Release Apache Tomcat 8.5.82

2022-08-12 Thread Christopher Schultz
All, The following votes were cast: Binding: +1: remm, fhanik, schultz Non-binding: +1: Han Li The vote therefore passes. Thanks to everyone who contributed toward this release. I'll get started with post-voting exercises in a few hours. -chris -

Re: [VOTE] Release Apache Tomcat 8.5.82

2022-08-11 Thread Christopher Schultz
Han, On 8/11/22 10:31, Han Li wrote: 2022年8月11日 21:02,Konstantin Kolinko 写道: чт, 11 авг. 2022 г. в 05:21, Han Li : 2022年8月11日 06:52,Konstantin Kolinko 写道: ср, 10 авг. 2022 г. в 13:25, Han Li mailto:aooo...@gmail.com>>: Mark, Can I make a suggestion related to the ant build script.

Re: [VOTE] Release Apache Tomcat 8.5.82

2022-08-10 Thread Christopher Schultz
Are these values not *already* copied from ant JVM into forked-ant JVM for testing? -chris 2022年8月10日 18:02,Mark Thomas 写道: On 09/08/2022 20:19, Christopher Schultz wrote: On 8/9/22 14:09, Mark Thomas wrote: This issue is the zip files. Time stamps in zip files use local (yes, local - I di

Re: [VOTE] Release Apache Tomcat 8.5.82

2022-08-10 Thread Christopher Schultz
Mark, On 8/10/22 06:02, Mark Thomas wrote: On 09/08/2022 20:19, Christopher Schultz wrote: On 8/9/22 14:09, Mark Thomas wrote: This issue is the zip files. Time stamps in zip files use local (yes, local - I didn't mistype that) time. Hence you need to use the same time zone to

Re: [VOTE] Release Apache Tomcat 8.5.82

2022-08-09 Thread Christopher Schultz
Mark, On 8/9/22 14:09, Mark Thomas wrote: On 09/08/2022 16:22, Mark Thomas wrote: On 09/08/2022 15:46, Mark Thomas wrote: On 09/08/2022 15:12, Christopher Schultz wrote: All, I'm curious to find out if anyone is able to build a byte-for-byte identical release given the 8.5.82 tag in G

Re: [VOTE] Release Apache Tomcat 8.5.82

2022-08-09 Thread Christopher Schultz
Han, On 8/9/22 10:46, Han Li wrote: 2022年8月9日 22:25,Rémy Maucherat 写道: On Tue, Aug 9, 2022 at 12:16 AM Christopher Schultz mailto:ch...@christopherschultz.net>> wrote: The proposed Apache Tomcat 8.5.82 release is now available for voting. The notable changes compared to 8.5.

Re: [VOTE] Release Apache Tomcat 8.5.82

2022-08-09 Thread Christopher Schultz
Mark, On 8/9/22 10:46, Mark Thomas wrote: On 09/08/2022 15:12, Christopher Schultz wrote: All, I'm curious to find out if anyone is able to build a byte-for-byte identical release given the 8.5.82 tag in GitHub. You won't be able to generate the correct signed Windows binaries,

Re: [VOTE] Release Apache Tomcat 8.5.82

2022-08-09 Thread Christopher Schultz
t;. I'm not sure if that will have a significant impact on the build in terms of reproducibility. Thanks, -chris On 8/8/22 18:15, Christopher Schultz wrote: The proposed Apache Tomcat 8.5.82 release is now available for voting. The notable changes compared to 8.5.81 are:  - Update the pa

Re: [VOTE] Release Apache Tomcat 8.5.82

2022-08-09 Thread Christopher Schultz
All, On 8/8/22 18:15, Christopher Schultz wrote: The proposed Apache Tomcat 8.5.82 release is now available for voting. The notable changes compared to 8.5.81 are:  - Update the packaged version of the Tomcat Native Library to 1.2.35 to    pick up Windows binaries built with OpenSSL 1.1.1q

[VOTE] Release Apache Tomcat 8.5.82

2022-08-08 Thread Christopher Schultz
The proposed Apache Tomcat 8.5.82 release is now available for voting. The notable changes compared to 8.5.81 are: - Update the packaged version of the Tomcat Native Library to 1.2.35 to pick up Windows binaries built with OpenSSL 1.1.1q. - Enable the use of the FIPS provider for TLS enabl

Re: [tomcat] branch 10.0.x updated: Fix checkstyle warnings

2022-08-08 Thread Christopher Schultz
Mark, On 8/8/22 15:37, ma...@apache.org wrote: This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.0.x by this push: ne

Re: [tomcat] branch main updated: Do not include sensitive headers in responses to HTTP TRACE requests

2022-08-01 Thread Christopher Schultz
Mark, On 8/1/22 12:36, ma...@apache.org wrote: This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 7c

Re: Delay between release tags and announcement

2022-07-21 Thread Christopher Schultz
Konstantin, On 7/21/22 09:56, Konstantin Kolinko wrote: чт, 21 июл. 2022 г. в 15:23, Christopher Schultz : Nemo, Mark, On 7/21/22 04:06, Mark Thomas wrote: On 21/07/2022 07:06, Nemo wrote: Generally, I'd strongly discourage anyone from assuming that GitHub tag == ASF release

Re: Delay between release tags and announcement

2022-07-21 Thread Christopher Schultz
Nemo, Mark, On 7/21/22 04:06, Mark Thomas wrote: On 21/07/2022 07:06, Nemo wrote: What happens if a vote doesn't pass or get vetoed - do the tags get deleted? Release votes cannot be vetoed. If a release vote doesn't pass, that release doesn't happen. In Tomcat, we'll fix whatever the pr

Tomcat 8.5.82

2022-07-21 Thread Christopher Schultz
All, I was on holiday last week and will be out again today through Monday. Looking at the changelog for 8.5.x, I don't see anything pressing[1], so I'm thinking of just waiting for August to kind of reset the clock on releases back to the beginning(ish) of each month. Please let me know in

Re: Plan for 10.1.next / 10.0.next

2022-07-06 Thread Christopher Schultz
Mark, On 7/5/22 10:21, Mark Thomas wrote: Hi all, My plan for the next round of releases is as follows: - Tomcat migration tool for Jakarta EE   - Fix the dependabot nags   - Fix #24   - release 1.0.1 - Tomcat Native 2.0.x   - Tag and release 2.0.1 - Tomcat 10.1.x   - Update to migratio

Re: [VOTE] Release Apache Tomcat Native 1.2.35

2022-07-06 Thread Christopher Schultz
Mark, Thanks for RMing On 7/6/22 11:05, Mark Thomas wrote: Version 1.2.35 includes the following changes compared to 1.2.34 - Update the recommended version of OpenSSL to 1.1.1q - Document TLS renegotiation behaviour and the release process The proposed release artefacts can be found at [1],

Re: [VOTE] Release Apache Tomcat Native 2.0.0

2022-07-05 Thread Christopher Schultz
Mark, On 7/4/22 07:23, Mark Thomas wrote: On 30/06/2022 17:55, Christopher Schultz wrote: Mark, On 6/30/22 09:58, Mark Thomas wrote: This is the first release of the Tomcat Native 2.0.x branch. The major differences compared to the 1.2.x branch are: - JNI API has been reduced to just that

Re: [VOTE] Release Apache Tomcat Native 2.0.0

2022-06-30 Thread Christopher Schultz
Mark, On 6/30/22 09:58, Mark Thomas wrote: This is the first release of the Tomcat Native 2.0.x branch. The major differences compared to the 1.2.x branch are: - JNI API has been reduced to just that required to support the use of   OpenSSL rather than JSSE for TLS connections. The APR/native

Re: [tomcat-native] branch main updated: Add renegotiation info

2022-06-30 Thread Christopher Schultz
Mark, On 6/30/22 03:35, ma...@apache.org wrote: This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat-native.git The following commit(s) were added to refs/heads/main by this push:

Re: [tomcat] branch main updated: Fix a regresssion in the Loom refactoring

2022-06-23 Thread Christopher Schultz
Mark, On 6/23/22 09:02, ma...@apache.org wrote: This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 7

Re: Tomcat Native and OpenSSL 3.0.x

2022-06-22 Thread Christopher Schultz
Mark, On 6/21/22 11:42, Mark Thomas wrote: On 16/06/2022 11:10, Mark Thomas wrote: OpenSSL will be producing security releases on 21st June. This will include 3.0.4. The security issue affects a script distributed with OpenSSL. The binaries for Windows that Tomcat distributes are not affecte

Re: [tomcat] branch main updated: Deprecate the jvmRoute system property

2022-06-16 Thread Christopher Schultz
Mark, On 6/16/22 09:04, ma...@apache.org wrote: This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 3

Re: JDK 19: Rampdown Phase 1 + EA builds 26 & JDK 20: EA builds 1

2022-06-14 Thread Christopher Schultz
Martin, On 6/14/22 14:42, Martin Grigorov wrote: On Tue, Jun 14, 2022 at 3:07 PM Mark Thomas wrote: On 14/06/2022 09:00, Martin Grigorov wrote: Hello Tomcat devs, The following test fails with JDK 19 b26: [concat] Testsuites with failed tests: [concat] TEST-javax.el.TestImportHan

Re: Compiler warnings when compiling tcnative with -Wall -pedantic -ansi

2022-06-14 Thread Christopher Schultz
All, On 5/5/22 08:27, Christopher Schultz wrote: All, When compiling with these extra flags, we get a raft of errors which are mostly: 1. Use of "long long" which is an "extension" 2. Use of // style comments 3. Use of mixed declarations and code When setting -std=C99

Re: [VOTE] Release Apache Tomcat Native 1.2.34

2022-06-14 Thread Christopher Schultz
Mark, On 6/7/22 06:12, Mark Thomas wrote: Version 1.2.34 includes the following changes compared to 1.2.33 - Refactor the initialization of the native code so it is compatible   with Tomcat 10.1.x where deprecated Java classes will be removed - Map the OpenSSL 3.0.x FIPS behaviour to the 1.1.

Re: Any interest in a read-only JMX role?

2022-06-13 Thread Christopher Schultz
anager app - or some other way - we'd be happy to have your feedback. Thanks, -chris -Original Message----- From: Christopher Schultz Sent: Monday, June 13, 2022 1:36 PM To: dev@tomcat.apache.org Subject: Re: Any interest in a read-only JMX role? Jon, On 6/13/2

Re: Any interest in a read-only JMX role?

2022-06-13 Thread Christopher Schultz
Mark, On 6/13/22 14:56, Mark Thomas wrote: On 13/06/2022 19:34, Christopher Schultz wrote: Mark, On 6/13/22 13:19, Mark Thomas wrote: On 13/06/2022 17:32, Christopher Schultz wrote: All, I've been thinking about the possibility of making a read-only JMX role available for the exi

Re: Any interest in a read-only JMX role?

2022-06-13 Thread Christopher Schultz
ing to say (about JMXProxyServlet) or you don't care about the whole discussion, right? :) -chris -Original Message- From: Konstantin Kolinko Sent: Monday, June 13, 2022 11:54 AM To: Tomcat Developers List Subject: Re: Any interest in a read-only JMX role? пн, 13 июн. 2022 г. в 19:

Re: Any interest in a read-only JMX role?

2022-06-13 Thread Christopher Schultz
Mark, On 6/13/22 13:19, Mark Thomas wrote: On 13/06/2022 17:32, Christopher Schultz wrote: All, I've been thinking about the possibility of making a read-only JMX role available for the existing manager-jmx capability. The idea would be that this role would only be able to make

Re: Any interest in a read-only JMX role?

2022-06-13 Thread Christopher Schultz
Konstantin, On 6/13/22 12:54, Konstantin Kolinko wrote: пн, 13 июн. 2022 г. в 19:32, Christopher Schultz : All, I've been thinking about the possibility of making a read-only JMX role available for the existing manager-jmx capability. [...] Does anyone think this is a good idea? I

Re: Any interest in a read-only JMX role?

2022-06-13 Thread Christopher Schultz
rongly against deprecating the JMXProxyServlet for that reason moving forward. -chris On Mon, Jun 13, 2022 at 12:32 PM Christopher Schultz < ch...@christopherschultz.net> wrote: All, I've been thinking about the possibility of making a read-only JMX role available for the existing m

Any interest in a read-only JMX role?

2022-06-13 Thread Christopher Schultz
All, I've been thinking about the possibility of making a read-only JMX role available for the existing manager-jmx capability. The idea would be that this role would only be able to make "get" requests (that is, a JMX-get operation, not HTTP-GET). No "set" or "invoke" operations would be al

Re: [ANN] Apache Tomcat 8.5.81 available

2022-06-13 Thread Christopher Schultz
Li, On 6/13/22 08:26, Han Li wrote: 2022年6月13日 01:44,Christopher Schultz 写道: The Apache Tomcat team announces the immediate availability of Apache Tomcat 8.5.81. Apache Tomcat 8 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression

[ANN] Apache Tomcat 8.5.81 available

2022-06-12 Thread Christopher Schultz
The Apache Tomcat team announces the immediate availability of Apache Tomcat 8.5.81. Apache Tomcat 8 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 8.5.81 is a bugfix and fea

[VOTE][RESULT] Release Apache Tomcat 8.5.81

2022-06-11 Thread Christopher Schultz
All, The following votes were cast: +1: remm, schultz, markt There were no other votes. The vote therefore passes. Thanks to everyone who contributed toward this release. Thanks, -chris - To unsubscribe, e-mail: dev-unsubscr

Re: [VOTE] Release Apache Tomcat 8.5.81

2022-06-09 Thread Christopher Schultz
All, On 6/9/22 08:18, Christopher Schultz wrote: All, On 6/8/22 18:01, Christopher Schultz wrote: The proposed Apache Tomcat 8.5.81 release is now available for voting. The notable change compared to 8.5.80 (not released) is:   - Fix regression that broke or unexpectedly modified some TLS

Re: [tomcat] 05/05: Add comments to remind committers to keep files in sync

2022-06-09 Thread Christopher Schultz
Mark, On 6/9/22 08:32, Mark Thomas wrote: On 09/06/2022 13:27, Christopher Schultz wrote: Mark, On 6/9/22 04:22, ma...@apache.org wrote: This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf

Re: [tomcat] branch 10.0.x updated: Enable detached signatures for Windows installer

2022-06-09 Thread Christopher Schultz
Mark, On 6/9/22 06:57, ma...@apache.org wrote: This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.0.x by this push: ne

Re: [tomcat] 05/05: Add comments to remind committers to keep files in sync

2022-06-09 Thread Christopher Schultz
Mark, On 6/9/22 04:22, ma...@apache.org wrote: This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git commit d79b39d55f1d193276a5b846867260de07c41f7e Author: Mark Thomas AuthorDate:

Re: [VOTE] Release Apache Tomcat 8.5.81

2022-06-09 Thread Christopher Schultz
All, On 6/8/22 18:01, Christopher Schultz wrote: The proposed Apache Tomcat 8.5.81 release is now available for voting. The notable change compared to 8.5.80 (not released) is:  - Fix regression that broke or unexpectedly modified some TLS    configurations when running on a Java 8 JDK

[VOTE] Release Apache Tomcat 8.5.81

2022-06-08 Thread Christopher Schultz
The proposed Apache Tomcat 8.5.81 release is now available for voting. The notable change compared to 8.5.80 (not released) is: - Fix regression that broke or unexpectedly modified some TLS configurations when running on a Java 8 JDK. The notable changes compared to 8.5.79 are: - Ensure th

Re: [VOTE][CANCELLED] Release Apache Tomcat 8.5.80

2022-06-08 Thread Christopher Schultz
All, I am cancelling this vote and re-rolling a new release, 8.5.81. Thanks, -chris On 6/8/22 13:01, Christopher Schultz wrote: All, On 6/7/22 11:25, Christopher Schultz wrote: The proposed Apache Tomcat 8.5.80 release is now available for voting. The notable changes compared to 8.5.79 are

Re: [VOTE] Release Apache Tomcat 8.5.80

2022-06-08 Thread Christopher Schultz
Mark, On 6/8/22 12:29, Mark Thomas wrote: On 08/06/2022 16:00, Christopher Schultz wrote: I now have a different set of tests failing: * org.apache.catalina.valves.rewrite.TestResolverSSL.NIO.txt * org.apache.catalina.valves.rewrite.TestResolverSSL.NIO2.txt

Re: [VOTE] Release Apache Tomcat 8.5.80

2022-06-08 Thread Christopher Schultz
All, On 6/7/22 11:25, Christopher Schultz wrote: The proposed Apache Tomcat 8.5.80 release is now available for voting. The notable changes compared to 8.5.79 are: - Ensure that changes made to a request by the RemoteIPValve persist   after the request is put into asynchronous mode

Re: [VOTE] Release Apache Tomcat 8.5.80

2022-06-08 Thread Christopher Schultz
Mark, On 6/8/22 08:54, Christopher Schultz wrote: Mark, On 6/8/22 03:07, Mark Thomas wrote: On 08/06/2022 00:04, Christopher Schultz wrote: Mark, On 6/7/22 11:25, Christopher Schultz wrote: The proposed Apache Tomcat 8.5.80 release is now available for voting. The notable changes compared

Re: [VOTE] Release Apache Tomcat 8.5.80

2022-06-08 Thread Christopher Schultz
Mark, On 6/8/22 03:07, Mark Thomas wrote: On 08/06/2022 00:04, Christopher Schultz wrote: Mark, On 6/7/22 11:25, Christopher Schultz wrote: The proposed Apache Tomcat 8.5.80 release is now available for voting. The notable changes compared to 8.5.79 are: - Ensure that changes made to a

Re: [VOTE] Release Apache Tomcat 8.5.80

2022-06-07 Thread Christopher Schultz
Mark, On 6/7/22 11:25, Christopher Schultz wrote: The proposed Apache Tomcat 8.5.80 release is now available for voting. The notable changes compared to 8.5.79 are: - Ensure that changes made to a request by the RemoteIPValve persist   after the request is put into asynchronous mode

[VOTE] Release Apache Tomcat 8.5.80

2022-06-07 Thread Christopher Schultz
The proposed Apache Tomcat 8.5.80 release is now available for voting. The notable changes compared to 8.5.79 are: - Ensure that changes made to a request by the RemoteIPValve persist after the request is put into asynchronous mode. - Correct a regression in the support added for encrypted PK

FYI: I'll be rolling 8.5.80 soon

2022-06-07 Thread Christopher Schultz
All, Apologies for the delay behind the other releases. -chris - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org

Re: [tomcat-native] 01/02: Minimum OpenSSl version is 3.0.0 is keylog callback is always available

2022-05-31 Thread Christopher Schultz
Mark, On 5/31/22 12:48, Mark Thomas wrote: On 31/05/2022 17:34, Christopher Schultz wrote: Mark, On 5/31/22 11:30, ma...@apache.org wrote: This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos

Re: [tomcat-native] 01/02: Minimum OpenSSl version is 3.0.0 is keylog callback is always available

2022-05-31 Thread Christopher Schultz
Mark, On 5/31/22 11:30, ma...@apache.org wrote: This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat-native.git commit b6952740dd64fa8ea7edd1764d4b14661527a0eb Author: Mark Thomas Auth

Re: Pointer deref typo in ISAPI redirector?

2022-05-27 Thread Christopher Schultz
Rainer, On 5/27/22 4:45 PM, Rainer Jung wrote: Hi there, I suspect there is a ponter deref typo in the source code of the ISAPI redirector. Suggested patch would be: diff --git a/native/iis/jk_isapi_plugin.c b/native/iis/jk_isapi_plugin.c index c0d7a4353..4978a0b85 100644 --- a/native/iis/jk

Re: [tomcat-connectors] branch main updated: Standardize variable name for jk_ws_service_t args to "s".

2022-05-27 Thread Christopher Schultz
Rainer, On 5/27/22 8:44 AM, rj...@apache.org wrote: This is an automated email from the ASF dual-hosted git repository. rjung pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat-connectors.git The following commit(s) were added to refs/heads/main by this pu

Re: [tomcat] branch 9.0.x updated: Additional fixes for 66076

2022-05-24 Thread Christopher Schultz
Mark, On 5/24/22 12:46, ma...@apache.org wrote: This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new

[ANN] Apache Tomcat 8.5.79 available

2022-05-24 Thread Christopher Schultz
The Apache Tomcat team announces the immediate availability of Apache Tomcat 8.5.79. Apache Tomcat 8 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 8.5.79 is a bugfix and fea

Re: Plans for Tomcat Native

2022-05-24 Thread Christopher Schultz
Mark, On 5/23/22 14:58, Mark Thomas wrote: Hi all, I've started to look at this and I think we need a slightly broader plan. Hence this post to discuss it before I do to much work on it. It looks like we are going to need to support OpenSSL 1.1.1 in some form for quite some time. We are als

Re: svn commit: r1901210 - in /tomcat/site/trunk: docs/index.html xdocs/index.xml

2022-05-24 Thread Christopher Schultz
Konstantin, Thanks for catching these. -chris On 5/24/22 07:21, kkoli...@apache.org wrote: Author: kkolinko Date: Tue May 24 11:21:00 2022 New Revision: 1901210 URL: http://svn.apache.org/viewvc?rev=1901210&view=rev Log: Fix typos in release announcements. Modified: tomcat/site/trunk/do

Re: [ANN] ApacheCon NA 2022 in New Orleans, 3-6 Oct 2022, CFP is OPEN!

2022-05-24 Thread Christopher Schultz
n the planners group. Feel free to reach-out to the group with your ideas. Remember that your ideas will often need to be backed-up with your own work to make them happen :) https://events.apache.org/involved/mailing-lists.html Thanks, -chris -Original Message- From: Christopher Schultz

Re: [ANN] Apache Tomcat 8.5.79 available

2022-05-23 Thread Christopher Schultz
All, I jumped the gun on sending this announcement, so I went ahead and updated the web site, too. The CDN doesn't have the release artifacts, yet, but the ASF downloads server does. Please be patient until the CDN updates. Thanks, -chris On 5/23/22 16:56, Christopher Schultz wrote:

[ANN] Apache Tomcat 8.5.79 available

2022-05-23 Thread Christopher Schultz
The Apache Tomcat team announces the immediate availability of Apache Tomcat 8.5.79. Apache Tomcat 8 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 8.5.79 is a bugfix and fea

Re: [ANN] ApacheCon NA 2022 in New Orleans, 3-6 Oct 2022, CFP is OPEN!

2022-05-23 Thread Christopher Schultz
Jon, On 5/23/22 16:41, jonmcalexan...@wellsfargo.com.INVALID wrote: Understood. I'm willing to give it a try if you want to sign me up, but I have to do it virtual. Traveling is not possible for me. Oh. Sorry about that; it will need to be in-person. We don't have any set up to do pre-recorded

Re: [ANN] ApacheCon NA 2022 in New Orleans, 3-6 Oct 2022, CFP is OPEN!

2022-05-23 Thread Christopher Schultz
Jon, On 5/23/22 15:53, jonmcalexan...@wellsfargo.com.INVALID wrote: I would really Love to have something, but I just don't have the time to work on anything like this You could just talk about something you are already doing. It doesn't need to be ground-breaking work. Something along the line

[VOTE][RESULT] Release Apache Tomcat 8.5.79

2022-05-23 Thread Christopher Schultz
All, Binding: +1: markt, remm, fhanik, schultz Non-Binding +1: rotyy3000 There were no other votes. The vote therefore passes. I'll start the release process in a few minutes. -chris On 5/16/22 12:13, Christopher Schultz wrote: The proposed Apache Tomcat 8.5.79 release is now availabl

Re: [ANN] ApacheCon NA 2022 in New Orleans, 3-6 Oct 2022, CFP CLOSES TODAY!!

2022-05-23 Thread Christopher Schultz
All, If you were considering submitting a presentation, please do it *RIGHT NOW*. Thank, -chris On 4/7/22 10:26, Christopher Schultz wrote: All, [Cross-posting to dev@, please reply to users@] ApacheCon NA 2022 is back *in-person* in New Orleans, Louisiana. It will be held 3 - 6 October

Re: [ANN] ApacheCon NA 2022 in New Orleans, 3-6 Oct 2022, CFP is OPEN!

2022-05-23 Thread Christopher Schultz
Coty, On 5/23/22 15:22, Coty Sutherland wrote: On Fri, Apr 29, 2022 at 2:53 PM Christopher Schultz < ch...@christopherschultz.net> wrote: All, Please remember that the ApacheCon North American conference is still accepting presentations until 23 May 2022. The Tomcat track current

Re: [VOTE] Release Apache Tomcat 8.5.79

2022-05-23 Thread Christopher Schultz
All, On 5/16/22 12:13, Christopher Schultz wrote: The proposed Apache Tomcat 8.5.79 release is now available for voting. The notable changes compared to 8.5.78 are: - Provide a property source that sources values from Kubernetes service    bindings. Provided by Sumit Kulhadia and Gareth

Re: Repeatable builds update

2022-05-16 Thread Christopher Schultz
Mark, On 5/16/22 12:30, Mark Thomas wrote: On 06/05/2022 14:27, Christopher Schultz wrote: Awesome. I have a small commit to build.xml that drops environmental information (e.g. versions, etc.) to a build-release.properties file, but I'm unable to generate the timestamp in the correct f

[VOTE] Release Apache Tomcat 8.5.79

2022-05-16 Thread Christopher Schultz
The proposed Apache Tomcat 8.5.79 release is now available for voting. The notable changes compared to 8.5.78 are: - Provide a property source that sources values from Kubernetes service bindings. Provided by Sumit Kulhadia and Gareth Evans. - The root cause of the Linux kernel duplicate acc

Re: svn commit: r54554 - /dev/tomcat/tomcat-10/v10.1.0-M15/ /release/tomcat/tomcat-10/v10.1.0-M15/

2022-05-16 Thread Christopher Schultz
Chris, On 5/16/22 09:40, Strickland, Christopher wrote: I'm new to the community. Is this the official release of 10.1? Yes, but what you are really looking for is the email with subject "[ANN] Apache Tomcat 10.1.0-M15 (alpha) available". This includes links to the "Downloads" are on the web

Re: [ANN] Apache Tomcat 9.0.63 available

2022-05-16 Thread Christopher Schultz
Jon, On 5/16/22 09:30, jonmcalexan...@wellsfargo.com.INVALID wrote: Is there any news around 8.5 next release?­ I expect to roll the release today after morning meetings :) Thanks, -chris ___ From: Rémy Maucherat Sent: May 16, 2022 7:41 AM To: Tomcat Developers List ; Tomcat Users List ; a

Re: Repeatable builds update

2022-05-06 Thread Christopher Schultz
Mark, On 5/5/22 15:28, Mark Thomas wrote: TL;DR we have platform independent repeatable release builds Excellent work. Thanks for putting in the time it took for all this. And now for the longer version: Nearly all of the plumbing is in place for this. I have one more commit to add to hand

Compiler warnings when compiling tcnative with -Wall -pedantic -ansi

2022-05-05 Thread Christopher Schultz
All, When compiling with these extra flags, we get a raft of errors which are mostly: 1. Use of "long long" which is an "extension" 2. Use of // style comments 3. Use of mixed declarations and code When setting -std=C99 all of these go away. This flag works with both gcc and clang, but I don

Re: [VOTE] Release Apache Tomcat Native 1.2.33

2022-05-04 Thread Christopher Schultz
Mark, Thanks for RM'ing On 5/3/22 16:45, Mark Thomas wrote: Version 1.2.33 includes the following changes compared to 1.2.32 - Updated recommended minimum OpenSSL to 1.1.1o and build windows   binaries using that version - Fix BZ 66035, a crash when attempting to read the TSL session ID afte

Re: Tomcat mitigations for CVE-2022-21449

2022-05-03 Thread Christopher Schultz
Mark, On 4/29/22 18:17, Mark Thomas wrote: On 29/04/2022 19:41, Christopher Schultz wrote: 1. The underlying JVM is affected 2. A Connector is defined with uses mutual TLS 3. The client's key is ECDSA I was thinking that on startup, we could check for a vulnerable environmen

Re: May release plans

2022-04-29 Thread Christopher Schultz
Mark, On 4/29/22 06:03, Mark Thomas wrote: Hi all, There are a couple of things I think we need to take into account for the May releases. 1. OpenSSL. A security release is due 2022-05-03. I am assuming we'll need to pick that up for Tomcat Native. I am therefore planning for a Tomcat Nati

Re: [ANN] ApacheCon NA 2022 in New Orleans, 3-6 Oct 2022, CFP is OPEN!

2022-04-29 Thread Christopher Schultz
, Christopher Schultz wrote: All, [Cross-posting to dev@, please reply to users@] ApacheCon NA 2022 is back *in-person* in New Orleans, Louisiana. It will be held 3 - 6 October 2022 at the Canal Street Sheraton right next to the French Quarter. The call-for-presentations is currently open

<    1   2   3   4   5   6   7   8   9   10   >