Re: [VOTE] Release Apache Tomcat 8.5.82

2022-08-09 Thread Rémy Maucherat
On Tue, Aug 9, 2022 at 12:16 AM Christopher Schultz wrote: > > The proposed Apache Tomcat 8.5.82 release is now available for voting. > > The notable changes compared to 8.5.81 are: > > - Update the packaged version of the Tomcat Native Library to 1.2.35 to > pick up Windows binaries built

[ANN] Apache Tomcat 9.0.65 available

2022-07-20 Thread Rémy Maucherat
The Apache Tomcat team announces the immediate availability of Apache Tomcat 9.0.65. Apache Tomcat 9 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 9.0.65 is a bugfix and

[VOTE][RESULT] Release Apache Tomcat 9.0.65

2022-07-20 Thread Rémy Maucherat
The following votes were cast: Binding: +1: remm, jfclere, csutherl Non-binding: +1: Han Li The vote therefore passes. Thanks to everyone who contributed to this release. Remy On Thu, Jul 14, 2022 at 3:17 PM Rémy Maucherat wrote: > > The proposed Apache Tomcat 9.0.65 release

Re: [VOTE] Release Apache Tomcat 9.0.65

2022-07-15 Thread Rémy Maucherat
On Thu, Jul 14, 2022 at 3:17 PM Rémy Maucherat wrote: > > The proposed Apache Tomcat 9.0.65 release is now available for voting. > > The notable changes compared to 9.0.64 are: > > - Implement support for repeatable builds. > > - Update the packaged version of the Tomcat

Re: [VOTE] Release Apache Tomcat 10.0.23

2022-07-15 Thread Rémy Maucherat
On Thu, Jul 14, 2022 at 11:26 AM Mark Thomas wrote: > > The proposed Apache Tomcat 10.0.23 release is now available for > voting. > > Apache Tomcat 10.0.x implements Jakarta EE 9 and, as such, the primary > package for all the specification APIs has changed from javax.* to jakarta.* > >

Re: [VOTE] Release Apache Tomcat 10.1.0-M17

2022-07-15 Thread Rémy Maucherat
On Wed, Jul 13, 2022 at 11:58 PM Mark Thomas wrote: > > The proposed Apache Tomcat 10.1.0-M17 release is now available for > voting. > > Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 > without changes. Java EE applications designed for Tomcat 9 and earlier > may be

[VOTE] Release Apache Tomcat 9.0.65

2022-07-14 Thread Rémy Maucherat
The proposed Apache Tomcat 9.0.65 release is now available for voting. The notable changes compared to 9.0.64 are: - Implement support for repeatable builds. - Update the packaged version of the Tomcat Native Library to 1.2.35. This includes Windows binaries built with OpenSSL 1.1.1q. - Fix

Re: [VOTE] Release Apache Tomcat Native 1.2.35

2022-07-06 Thread Rémy Maucherat
On Wed, Jul 6, 2022 at 5:06 PM Mark Thomas wrote: > > Version 1.2.35 includes the following changes compared to 1.2.34 > > - Update the recommended version of OpenSSL to 1.1.1q > > - Document TLS renegotiation behaviour and the release process > > The proposed release artefacts can be found at

Re: [VOTE] Release Apache Tomcat Native 2.0.1

2022-07-06 Thread Rémy Maucherat
On Wed, Jul 6, 2022 at 12:32 PM Mark Thomas wrote: > > This is the first release of the Tomcat Native 2.0.x branch. The major > differences compared to the 1.2.x branch are: > > - JNI API has been reduced to just that required to support Tomcat's >OpenSSL based TLS implementation. The

Re: [VOTE] Apache Tomcat migration tool for Jakarta EE 1.0.1

2022-07-06 Thread Rémy Maucherat
On Tue, Jul 5, 2022 at 9:49 PM Mark Thomas wrote: > > The proposed Apache Tomcat migration tool for Jakarta EE 1.0.1 is now > available for voting. > > The significant changes since 1.0.0 are: > > - Add support for .groovy files > > - Better support for non-standard archives > > - Numerous

Re: [VOTE] Release Apache Tomcat Native 2.0.0

2022-07-04 Thread Rémy Maucherat
On Mon, Jul 4, 2022 at 2:50 PM Mark Thomas wrote: > > Hi all, > > OpenSSL has announced a 3.0.5 release is scheduled for tomorrow that > will include security fixes. Depending on the details of those fixes we > may need a 2.0.1 release. (And a 1.2.x release.) > > We currently have 2 PMC votes for

Re: [VOTE] Release Apache Tomcat Native 2.0.0

2022-07-04 Thread Rémy Maucherat
On Mon, Jul 4, 2022 at 1:23 PM Mark Thomas wrote: > > On 30/06/2022 17:55, Christopher Schultz wrote: > > Mark, > > > > On 6/30/22 09:58, Mark Thomas wrote: > >> This is the first release of the Tomcat Native 2.0.x branch. The major > >> differences compared to the 1.2.x branch are: > >> > >> -

Re: [VOTE] Release Apache Tomcat Native 2.0.0

2022-07-01 Thread Rémy Maucherat
On Thu, Jun 30, 2022 at 3:58 PM Mark Thomas wrote: > > This is the first release of the Tomcat Native 2.0.x branch. The major > differences compared to the 1.2.x branch are: > > - JNI API has been reduced to just that required to support the use of >OpenSSL rather than JSSE for TLS

Re: MappedByteBuffer, Windows and locked files

2022-06-21 Thread Rémy Maucherat
On Tue, Jun 21, 2022 at 8:47 PM Mark Thomas wrote: > > On 21/06/2022 13:25, Rémy Maucherat wrote: > > kOn Tue, Jun 21, 2022 at 12:41 PM Mark Thomas wrote: > >> > >> On 21/06/2022 08:53, Rémy Maucherat wrote: > >>> On Tue, Jun 21, 2022 at 9:13 A

Re: MappedByteBuffer, Windows and locked files

2022-06-21 Thread Rémy Maucherat
kOn Tue, Jun 21, 2022 at 12:41 PM Mark Thomas wrote: > > On 21/06/2022 08:53, Rémy Maucherat wrote: > > On Tue, Jun 21, 2022 at 9:13 AM Mark Thomas wrote: > >> > >> Hi all, > >> > >> See [1] for further background. > >> >

Re: MappedByteBuffer, Windows and locked files

2022-06-21 Thread Rémy Maucherat
On Tue, Jun 21, 2022 at 9:13 AM Mark Thomas wrote: > > Hi all, > > See [1] for further background. > > The current sendfile implementation for async HTTP/2 uses a > MappedByteBuffer as the source. > > Unfortunately, MappedByteBuffer has some problematic side effects on > Windows. The underlying

[ANN] Apache Tomcat 9.0.64 available

2022-06-09 Thread Rémy Maucherat
The Apache Tomcat team announces the immediate availability of Apache Tomcat 9.0.64. Apache Tomcat 9 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 9.0.64 is a bugfix and

[VOTE][RESULT] Release Apache Tomcat 9.0.64

2022-06-09 Thread Rémy Maucherat
The following votes were cast: Binding: +1: remm, markt, jfclere Non-Binding +1: Han Li No other votes were cast. The vote therefore passes. Thanks to everyone who contributed to this release. Rémy On Thu, Jun 2, 2022 at 9:46 PM Rémy Maucherat wrote: > > The proposed Apache Tomcat

Re: [VOTE] Release Apache Tomcat 8.5.81

2022-06-09 Thread Rémy Maucherat
On Thu, Jun 9, 2022 at 12:03 AM Christopher Schultz wrote: > > The proposed Apache Tomcat 8.5.81 release is now available for voting. > > The notable change compared to 8.5.80 (not released) is: > > - Fix regression that broke or unexpectedly modified some TLS > configurations when running

Re: [VOTE] Release Apache Tomcat 8.5.80

2022-06-08 Thread Rémy Maucherat
On Tue, Jun 7, 2022 at 5:26 PM Christopher Schultz wrote: > > The proposed Apache Tomcat 8.5.80 release is now available for voting. > > The notable changes compared to 8.5.79 are: > > - Ensure that changes made to a request by the RemoteIPValve persist >after the request is put into

Re: [VOTE] Release Apache Tomcat Native 1.2.34

2022-06-07 Thread Rémy Maucherat
On Tue, Jun 7, 2022 at 12:12 PM Mark Thomas wrote: > > Version 1.2.34 includes the following changes compared to 1.2.33 > > - Refactor the initialization of the native code so it is compatible >with Tomcat 10.1.x where deprecated Java classes will be removed > > - Map the OpenSSL 3.0.x FIPS

Re: [VOTE] Release Apache Tomcat 9.0.64

2022-06-03 Thread Rémy Maucherat
On Thu, Jun 2, 2022 at 9:46 PM Rémy Maucherat wrote: > > The proposed Apache Tomcat 9.0.64 release is now available for voting. > > The notable changes compared to 9.0.63 are: > > - Correct a regression in the support added for encrypted PKCS#1 >formatted private keys in

Re: [VOTE] Release Apache Tomcat 10.0.22

2022-06-03 Thread Rémy Maucherat
On Thu, Jun 2, 2022 at 7:11 PM Mark Thomas wrote: > > The proposed Apache Tomcat 10.0.22 release is now available for > voting. > > Apache Tomcat 10.0.x implements Jakarta EE 9 and, as such, the primary > package for all the specification APIs has changed from javax.* to jakarta.* > >

Re: [VOTE] Release Apache Tomcat 10.1.0-M16

2022-06-03 Thread Rémy Maucherat
On Thu, Jun 2, 2022 at 3:22 PM Mark Thomas wrote: > > The proposed Apache Tomcat 10.1.0-M16 release is now available for > voting. > > I am proposing this as a beta release since the Jakarta EE APIs are now > finalised and Tomcat's implementation of the API changes is complete. > > Applications

Re: [VOTE] Release Apache Tomcat 10.1.0-M16

2022-06-03 Thread Rémy Maucherat
On Thu, Jun 2, 2022 at 3:22 PM Mark Thomas wrote: > > The proposed Apache Tomcat 10.1.0-M16 release is now available for > voting. For all previous branches, the "M" was dropped as soon as the spec was final (and its implementation was complete too ;) ). Maybe this is better though, all regular

[VOTE] Release Apache Tomcat 9.0.64

2022-06-02 Thread Rémy Maucherat
The proposed Apache Tomcat 9.0.64 release is now available for voting. The notable changes compared to 9.0.63 are: - Correct a regression in the support added for encrypted PKCS#1 formatted private keys in the previous release that broke support for unencrypted PKCS#1 formatted private

Re: [tomcat] branch main updated: Jakarta Servlet 6.0 specification is final

2022-06-01 Thread Rémy Maucherat
On Wed, Jun 1, 2022 at 9:04 PM Mark Thomas wrote: > > On 01/06/2022 19:59, ma...@apache.org wrote: > > This is an automated email from the ASF dual-hosted git repository. > > > > markt pushed a commit to branch main > > in repository https://gitbox.apache.org/repos/asf/tomcat.git > > > > > > The

Re: [tomcat-native] 01/02: Minimum OpenSSl version is 3.0.0 is keylog callback is always available

2022-06-01 Thread Rémy Maucherat
On Tue, May 31, 2022 at 8:02 PM Mark Thomas wrote: > > On 31/05/2022 17:59, Rémy Maucherat wrote: > > On Tue, May 31, 2022 at 6:48 PM Mark Thomas wrote: > > > > >> On that topic, I originally made the decision to keep LibreSSL support > >> when I thought t

Re: [tomcat-native] 01/02: Minimum OpenSSl version is 3.0.0 is keylog callback is always available

2022-05-31 Thread Rémy Maucherat
On Tue, May 31, 2022 at 6:48 PM Mark Thomas wrote: > > On 31/05/2022 17:34, Christopher Schultz wrote: > > Mark, > > > > On 5/31/22 11:30, ma...@apache.org wrote: > >> This is an automated email from the ASF dual-hosted git repository. > >> > >> markt pushed a commit to branch main > >> in

Re: Tomcat Native 2.0 Update

2022-05-31 Thread Rémy Maucherat
On Tue, May 31, 2022 at 9:46 AM Mark Thomas wrote: > > On 30/05/2022 20:05, Rémy Maucherat wrote: > > On Mon, May 30, 2022 at 6:49 PM Mark Thomas wrote: > >> > >> Hi all, > >> > >> I have made some progress. I have a trimmed down Tomcat Native

Re: Tomcat Native 2.0 Update

2022-05-30 Thread Rémy Maucherat
On Mon, May 30, 2022 at 6:49 PM Mark Thomas wrote: > > Hi all, > > I have made some progress. I have a trimmed down Tomcat Native 2.0 built > with OpenSSL 3.0 working locally with Tomcat 10.1.x. I also have it > working with the OpenSSL 3 FIPS provider. > > I have also been thinking about Tomcat

Re: [tomcat] branch 9.0.x updated: Additional fixes for 66076

2022-05-25 Thread Rémy Maucherat
On Tue, May 24, 2022 at 6:46 PM wrote: > > This is an automated email from the ASF dual-hosted git repository. > > markt pushed a commit to branch 9.0.x > in repository https://gitbox.apache.org/repos/asf/tomcat.git > > > The following commit(s) were added to refs/heads/9.0.x by this push: >

Re: Plans for Tomcat Native

2022-05-24 Thread Rémy Maucherat
On Tue, May 24, 2022 at 3:42 PM Christopher Schultz wrote: > > Mark, > > On 5/23/22 14:58, Mark Thomas wrote: > > Hi all, > > > > I've started to look at this and I think we need a slightly broader > > plan. Hence this post to discuss it before I do to much work on it. > > > > It looks like we

Re: Plans for Tomcat Native

2022-05-24 Thread Rémy Maucherat
On Mon, May 23, 2022 at 8:59 PM Mark Thomas wrote: > > Hi all, > > I've started to look at this and I think we need a slightly broader > plan. Hence this post to discuss it before I do to much work on it. > > It looks like we are going to need to support OpenSSL 1.1.1 in some form > for quite

Re: [tomcat] branch main updated: Refactor to remove syncs on SocketWrapper to support Loom experiments

2022-05-23 Thread Rémy Maucherat
On Mon, May 23, 2022 at 6:29 PM Mark Thomas wrote: > > On 23/05/2022 17:27, ma...@apache.org wrote: > > This is an automated email from the ASF dual-hosted git repository. > > > > markt pushed a commit to branch main > > in repository https://gitbox.apache.org/repos/asf/tomcat.git > > > > > > The

Re: Plans for Tomcat Native

2022-05-23 Thread Rémy Maucherat
On Mon, May 23, 2022 at 12:52 PM Mark Thomas wrote: > > Hi all, > > A question on the users list about Tomcat Native, OpenSSL 3.0 FIPs > caused me to take a look at the current state of supported versions. > > The detail is here: >

Re: JDK 19 - Virtual Threads Testing!

2022-05-20 Thread Rémy Maucherat
On Fri, May 20, 2022 at 9:35 AM Martin Grigorov wrote: > > On Tue, May 17, 2022 at 4:23 PM Rémy Maucherat wrote: > > > On Tue, May 17, 2022 at 12:27 PM Mark Thomas wrote: > > > > > > On 16/05/2022 14:14, Martin Grigorov wrote: > > > > Hello Tomcat d

Re: [tomcat] branch main updated: The ObjectStreamClass memory leak has been fixed in newer JREs

2022-05-18 Thread Rémy Maucherat
On Wed, May 18, 2022 at 8:52 PM wrote: > > This is an automated email from the ASF dual-hosted git repository. > > markt pushed a commit to branch main > in repository https://gitbox.apache.org/repos/asf/tomcat.git > > > The following commit(s) were added to refs/heads/main by this push: >

Re: JDK 19 - Virtual Threads Testing!

2022-05-17 Thread Rémy Maucherat
On Tue, May 17, 2022 at 12:27 PM Mark Thomas wrote: > > On 16/05/2022 14:14, Martin Grigorov wrote: > > Hello Tomcat devs, > > > > Some tests fail with JDK 19-ea+22-1598: > > > > >[concat] Testsuites with failed tests: > > [concat]

Re: [VOTE] Release Apache Tomcat 8.5.79

2022-05-16 Thread Rémy Maucherat
On Mon, May 16, 2022 at 6:13 PM Christopher Schultz wrote: > > The proposed Apache Tomcat 8.5.79 release is now available for voting. > > The notable changes compared to 8.5.78 are: > > - Provide a property source that sources values from Kubernetes service > bindings. Provided by Sumit

[ANN] Apache Tomcat 9.0.63 available

2022-05-16 Thread Rémy Maucherat
The Apache Tomcat team announces the immediate availability of Apache Tomcat 9.0.63. Apache Tomcat 9 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 9.0.63 is a bugfix and

[VOTE][RESULT] Release Apache Tomcat 9.0.63

2022-05-16 Thread Rémy Maucherat
The following votes were cast: Binding: +1: remm, markt, isapir Non-Binding +1: rotyy3000 No other votes were cast. The vote therefore passes. Thanks to everyone who contributed to this release. Rémy On Wed, May 11, 2022 at 10:26 AM Rémy Maucherat wrote: > > The proposed Apache

Re: New test in TestPEMFile fails ...

2022-05-12 Thread Rémy Maucherat
On Thu, May 12, 2022 at 9:14 PM Rainer Jung wrote: > > ... for me with Java 1.8.0 332 (various OpenJDK builds) on TC 9.0.63 and > 10.0.21, platform various Linuxes and also Solaris Sparc. It does not > fail for Java 11 and also not for Oracle Java 1.8.0 331. The funny thing is it is the support

Re: [VOTE] Release Apache Tomcat 9.0.63

2022-05-11 Thread Rémy Maucherat
On Wed, May 11, 2022 at 10:26 AM Rémy Maucherat wrote: > > The proposed Apache Tomcat 9.0.63 release is now available for voting. > > The notable changes compared to 9.0.62 are: > > - Provide a property source that sources values from Kubernetes service >bindings. Provi

Re: [VOTE] Release Apache Tomcat 10.0.21

2022-05-11 Thread Rémy Maucherat
On Wed, May 11, 2022 at 12:39 AM Mark Thomas wrote: > > The proposed Apache Tomcat 10.0.21 release is now available for > voting. > > Apache Tomcat 10.0.x implements Jakarta EE 9 and, as such, the primary > package for all the specification APIs has changed from javax.* to jakarta.* > >

Re: [VOTE] Release Apache Tomcat 10.1.0-M15

2022-05-11 Thread Rémy Maucherat
On Tue, May 10, 2022 at 10:25 PM Mark Thomas wrote: > > The proposed Apache Tomcat 10.1.0-M15 release is now available for > voting. > > Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 > without changes. Java EE applications designed for Tomcat 9 and earlier > may be

[VOTE] Release Apache Tomcat 9.0.63

2022-05-11 Thread Rémy Maucherat
The proposed Apache Tomcat 9.0.63 release is now available for voting. The notable changes compared to 9.0.62 are: - Provide a property source that sources values from Kubernetes service bindings. Provided by Sumit Kulhadia and Gareth Evans. - The root cause of the Linux kernel duplicate

Re: Trying to use Loom virtual threads with Tomcat

2022-05-02 Thread Rémy Maucherat
On Tue, May 3, 2022 at 6:24 AM Cay Horstmann wrote: > > Hi, I am trying to experiment with Loom > (https://openjdk.java.net/jeps/425) virtual threads in Tomcat 10. There > is a nice extension point in server.xml where I can provide an Executor > and use it in the default Connector. It works like

Re: Native Compilation, Continuation 2022

2022-04-12 Thread Rémy Maucherat
On Tue, Apr 12, 2022 at 9:14 AM Mark Thomas wrote: > > On 11/04/2022 23:32, Filip Hanik wrote: > > Hi folks, > > > > I'm jumping in on the bandwagon again. Specifically to talk some more about > > native compilation. The graal compiler is making headway, and it's becoming > > better and better at

[ANN] Apache Tomcat 9.0.62 available

2022-04-01 Thread Rémy Maucherat
The Apache Tomcat team announces the immediate availability of Apache Tomcat 9.0.62. Apache Tomcat 9 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 9.0.62 is a bugfix and

[VOTE][RESULT] Release Apache Tomcat 9.0.62

2022-04-01 Thread Rémy Maucherat
The following votes were cast: Binding: +1: remm, fschumacher, markt, csutherl, fhanik, funkman, jfclere Non-binding: +1: rotty3000 No other votes were cast. The vote therefore passes. Thanks to everyone who contributed to this release. Rémy

Re: [VOTE][RESULT] Release Apache Tomcat 10.1.0-M14

2022-04-01 Thread Rémy Maucherat
On Fri, Apr 1, 2022 at 10:27 AM Mark Thomas wrote: > > Hi all, > > I am calling the result of this release vote earlier than usual to make > the alternative mitigation for the Spring vulnerability CVE-2022-22965 > available sooner rather than later. > > The following votes were cast: > > Binding:

Re: [VOTE][CANCELLED] Release Apache Tomcat 9.0.61

2022-04-01 Thread Rémy Maucherat
On Wed, Mar 30, 2022 at 10:21 AM Rémy Maucherat wrote: > > The proposed Apache Tomcat 9.0.61 release is now available for voting. > > The notable changes compared to 9.0.60 are: > > - Fix a potential thread-safety issue that could cause HTTP/1.1 request >processing to p

Re: [VOTE] Release Apache Tomcat 8.5.78

2022-03-31 Thread Rémy Maucherat
On Thu, Mar 31, 2022 at 11:14 PM Christopher Schultz wrote: > > Mark, > > Thanks for RMing. I hope I didn't break your 8.5.78 git tag. I was 2.5 > hours later than you, and didn't realize you had already rolled the release. It looks fine: https://github.com/apache/tomcat/tree/8.5.78 Rémy >

Re: [VOTE] Release Apache Tomcat 8.5.78

2022-03-31 Thread Rémy Maucherat
On Thu, Mar 31, 2022 at 6:55 PM Mark Thomas wrote: > > The proposed Apache Tomcat 8.5.78 release is now available for voting. > > The notable changes compared to 8.5.77 are: > > - Update the packaged version of the Tomcat Native Library to 1.2.32 to > pick up Windows binaries built with

Re: [VOTE] Release Apache Tomcat 9.0.62

2022-03-31 Thread Rémy Maucherat
On Thu, Mar 31, 2022 at 4:56 PM Rémy Maucherat wrote: > > The proposed Apache Tomcat 9.0.62 release is now available for voting. > > The notable changes compared to 9.0.60 are: > > - Update the packaged version of the Tomcat Native Library to 1.2.32 to >pick up W

Re: [VOTE] Release Apache Tomcat 10.0.20

2022-03-31 Thread Rémy Maucherat
On Thu, Mar 31, 2022 at 5:20 PM Mark Thomas wrote: > > The proposed Apache Tomcat 10.0.20 release is now available for > voting. > > Apache Tomcat 10.0.x implements Jakarta EE 9 and, as such, the primary > package for all the specification APIs has changed from javax.* to jakarta.* > >

Re: [VOTE] Release Apache Tomcat 9.0.61

2022-03-31 Thread Rémy Maucherat
message or any > information herein. If you have received this message in error, please advise > the sender immediately by reply e-mail and delete this message. Thank you for > your cooperation. > > > > -Original Message- > > From: Rémy Maucherat > > Sent: We

[VOTE] Release Apache Tomcat 9.0.62

2022-03-31 Thread Rémy Maucherat
The proposed Apache Tomcat 9.0.62 release is now available for voting. The notable changes compared to 9.0.60 are: - Update the packaged version of the Tomcat Native Library to 1.2.32 to pick up Windows binaries built with OpenSSL 1.1.1n. - Improve logging of unknown HTTP/2 settings frames.

Re: [VOTE] Release Apache Tomcat 10.1.0-M14

2022-03-31 Thread Rémy Maucherat
On Thu, Mar 31, 2022 at 3:58 PM Mark Thomas wrote: > > The proposed Apache Tomcat 10.1.0-M14 release is now available for > voting. > > Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 > without changes. Java EE applications designed for Tomcat 9 and earlier > may be placed

Re: Re-rolling releases to pick up class loader hardening

2022-03-31 Thread Rémy Maucherat
On Thu, Mar 31, 2022 at 1:16 PM Mark Thomas wrote: > > On 31/03/2022 11:48, Rémy Maucherat wrote: > > On Thu, Mar 31, 2022 at 11:52 AM Mark Thomas wrote: > >> > >> Hi all, > >> > >> My recent hardening fix to the class loader [1] provides mitig

Re: Re-rolling releases to pick up class loader hardening

2022-03-31 Thread Rémy Maucherat
On Thu, Mar 31, 2022 at 11:52 AM Mark Thomas wrote: > > Hi all, > > My recent hardening fix to the class loader [1] provides mitigation for > a current Spring vulnerability [2]. > > While this is a Spring vulnerability, it may be the case for some users > that updating Tomcat is an easier

Re: [VOTE] Release Apache Tomcat 10.0.19

2022-03-31 Thread Rémy Maucherat
On Wed, Mar 30, 2022 at 1:50 AM Mark Thomas wrote: > > The proposed Apache Tomcat 10.0.19 release is now available for > voting. > > Apache Tomcat 10.0.x implements Jakarta EE 9 and, as such, the primary > package for all the specification APIs has changed from javax.* to jakarta.* > >

Re: [VOTE] Release Apache Tomcat 10.1.0-M13

2022-03-31 Thread Rémy Maucherat
On Wed, Mar 30, 2022 at 1:06 AM Mark Thomas wrote: > > The proposed Apache Tomcat 10.1.0-M13 release is now available for > voting. > > Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 > without changes. Java EE applications designed for Tomcat 9 and earlier > may be placed

[VOTE] Release Apache Tomcat 9.0.61

2022-03-30 Thread Rémy Maucherat
The proposed Apache Tomcat 9.0.61 release is now available for voting. The notable changes compared to 9.0.60 are: - Fix a potential thread-safety issue that could cause HTTP/1.1 request processing to pause, and potentially timeout, waiting for additional data when the full request has

Re: [tomcat] 01/02: PR #487: Improve logging of unknown settings frames

2022-03-23 Thread Rémy Maucherat
On Wed, Mar 23, 2022 at 10:01 PM Christopher Schultz wrote: > > Rémy, > > On 3/23/22 16:10, r...@apache.org wrote: > > This is an automated email from the ASF dual-hosted git repository. > > > > remm pushed a commit to branch 10.0.x > > in repository https://gitbox.apache.org/repos/asf/tomcat.git

Re: [tomcat] branch main updated: PR #487: Improve logging of unknown settings frames

2022-03-23 Thread Rémy Maucherat
On Wed, Mar 23, 2022 at 9:04 PM Mark Thomas wrote: > > On 23/03/2022 20:01, r...@apache.org wrote: > > > > > diff --git a/java/org/apache/coyote/http2/Http2Parser.java > > b/java/org/apache/coyote/http2/Http2Parser.java > > index 5875e28..8c67d84 100644 > > ---

Re: Tomcat 8.5.78 (and other branches as well)

2022-03-22 Thread Rémy Maucherat
On Tue, Mar 22, 2022 at 5:11 PM Mark Thomas wrote: > > FYI I'm aiming to tag 10.1.x and 10.0.x late Tuesday next week with a > view to completing the VOTE on Saturday as I have other things on the > first full week of April and finding time to do a release could be tricky. +1 Rémy Rémy >

Re: [tomcat] branch 10.0.x updated: Use a constant for the cipher suite

2022-03-17 Thread Rémy Maucherat
On Thu, Mar 17, 2022 at 3:01 PM wrote: > > This is an automated email from the ASF dual-hosted git repository. > > remm pushed a commit to branch 10.0.x > in repository https://gitbox.apache.org/repos/asf/tomcat.git > > > The following commit(s) were added to refs/heads/10.0.x by this push: >

Re: [VOTE] Release Apache Tomcat Native 1.2.32

2022-03-17 Thread Rémy Maucherat
On Thu, Mar 17, 2022 at 9:48 AM Mark Thomas wrote: > > Version 1.2.32 includes the following changes compared to 1.2.31 > > - Updated recommended minimum OpenSSL to 1.1.1n and build windows >binaries using that version > > - Fix release script so it works with the current git layout > > The

Re: svn propchange: r53085 - svn:log

2022-03-14 Thread Rémy Maucherat
On Mon, Mar 14, 2022 at 10:18 PM wrote: > > Author: kkolinko > Revision: 53085 > Modified property: svn:log > > Modified: svn:log at Mon Mar 14 21:17:54 2022 > -- > --- svn:log (original) > +++ svn:log Mon Mar 14 21:17:54

[ANN] Apache Tomcat 9.0.60 available

2022-03-14 Thread Rémy Maucherat
The Apache Tomcat team announces the immediate availability of Apache Tomcat 9.0.60. Apache Tomcat 9 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 9.0.60 is a bugfix and

Re: [VOTE] Release Apache Tomcat 8.5.77

2022-03-14 Thread Rémy Maucherat
On Sun, Mar 13, 2022 at 8:41 PM Christopher Schultz wrote: > > The proposed Apache Tomcat 8.5.77 release is now available for voting. > > The notable changes compared to 8.5.76 are: > > - Fix a potential thread-safety issue that could cause HTTP/1.1 request > processing to pause, and

[VOTE][RESULT] Release Apache Tomcat 9.0.60

2022-03-14 Thread Rémy Maucherat
The following votes were cast: Binding: +1: remm, markt, kkolinko, fschumacher No other votes were cast. The vote therefore passes. Thanks to everyone who contributed to this release. Rémy - To unsubscribe, e-mail:

Re: [VOTE] Release Apache Tomcat 10.0.18

2022-03-10 Thread Rémy Maucherat
On Wed, Mar 9, 2022 at 3:53 PM Mark Thomas wrote: > > The proposed Apache Tomcat 10.0.18 release is now available for > voting. > > Apache Tomcat 10.0.x implements Jakarta EE 9 and, as such, the primary > package for all the specification APIs has changed from javax.* to jakarta.* > >

Re: [VOTE] Release Apache Tomcat 10.1.0-M12

2022-03-10 Thread Rémy Maucherat
On Wed, Mar 9, 2022 at 2:59 PM Mark Thomas wrote: > > The proposed Apache Tomcat 10.1.0-M12 release is now available for > voting. > > Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 > without changes. Java EE applications designed for Tomcat 9 and earlier > may be placed

[VOTE] Release Apache Tomcat 9.0.60

2022-03-09 Thread Rémy Maucherat
The proposed Apache Tomcat 9.0.60 release is now available for voting. The notable changes compared to 9.0.59 are: - Fix a potential thread-safety issue that could cause HTTP/1.1 request processing to pause, and potentially timeout, waiting for additional data when the full request has

Re: March releases?

2022-03-08 Thread Rémy Maucherat
On Tue, Mar 8, 2022 at 10:25 PM Mark Thomas wrote: > > Hi all, > > I know I suggested skipping the March releases but I'd like to revisit > that in light of two things. > > 1. The concurrency issue I fixed earlier today. [1] > It has been present for a long time and we haven't had any bug

[ANN] Apache Tomcat 9.0.59 available

2022-02-28 Thread Rémy Maucherat
The Apache Tomcat team announces the immediate availability of Apache Tomcat 9.0.59. Apache Tomcat 9 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 9.0.59 is a bugfix and

Re: Jakarta EE 10 update

2022-02-28 Thread Rémy Maucherat
On Wed, Feb 23, 2022 at 8:01 PM Mark Thomas wrote: > > Just a quick update. > > Current planned release date is ~March 2022. > > Tomcat 10.1.x currently passes the latest builds of the Servlet, JSP, EL > and WebSocket TCK with the exception of the one Servlet test we expected > to fail. Ok, so

[VOTE][RESULT] Release Apache Tomcat 9.0.59

2022-02-28 Thread Rémy Maucherat
The following votes were cast: Binding: +1: remm, mturk, csutherl, jclere No other votes were cast. The vote therefore passes. Thanks to everyone who contributed to this release. Rémy - To unsubscribe, e-mail:

Re: [VOTE] Release Apache Tomcat 8.5.76

2022-02-24 Thread Rémy Maucherat
On Wed, Feb 23, 2022 at 7:57 PM Christopher Schultz wrote: > > The proposed Apache Tomcat 8.5.76 release is now available for voting. > > The notable changes compared to 8.5.75 are: > > - Correct a regression in the fix for 65454 that meant that > minSpareThreads and maxThreads settings were

Re: Tagging 8.5.x

2022-02-23 Thread Rémy Maucherat
On Wed, Feb 23, 2022 at 4:07 PM Mark Thomas wrote: > > Hi all, > > The February release round is running rather late. Therefore, I'd like > to get 8.5.x tagged and the RC uploaded today. Unless there are > objections I'm intending to start this in ~3 hours time. +1 > On a related topic,

Re: [VOTE] Release Apache Tomcat 9.0.59

2022-02-22 Thread Rémy Maucherat
On Mon, Feb 21, 2022 at 10:20 PM Rémy Maucherat wrote: > > The proposed Apache Tomcat 9.0.59 release is now available for voting. > > The notable changes compared to 9.0.58 are: > > - Add support for additional user attributes to TomcatPrincipal and >GenericPr

Re: [VOTE] Release Apache Tomcat 10.0.17

2022-02-22 Thread Rémy Maucherat
On Mon, Feb 21, 2022 at 8:58 PM Mark Thomas wrote: > > The proposed Apache Tomcat 10.0.17 release is now available for > voting. > > Apache Tomcat 10.x implements Jakarta EE 9 and, as such, the primary > package for all the specification APIs has changed from javax.* to jakarta.* > > Applications

Re: [VOTE] Release Apache Tomcat 10.1.0-M11

2022-02-22 Thread Rémy Maucherat
On Mon, Feb 21, 2022 at 7:42 PM Mark Thomas wrote: > > The proposed Apache Tomcat 10.1.0-M11 release is now available for > voting. > > Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 > without changes. Java EE applications designed for Tomcat 9 and earlier > may be placed

[VOTE] Release Apache Tomcat 9.0.59

2022-02-21 Thread Rémy Maucherat
The proposed Apache Tomcat 9.0.59 release is now available for voting. The notable changes compared to 9.0.58 are: - Add support for additional user attributes to TomcatPrincipal and GenericPrincipal - Correct a regression in the fix for 65454 that meant that minSpareThreads and

Re: ULRStreamHandlerFactory proposal

2022-02-17 Thread Rémy Maucherat
On Thu, Feb 17, 2022 at 12:11 AM Raymond Augé wrote: > > Hello all, > > There has been a long standing limitation in the JDK w.r.t. the handling of > URLStreamHandlerFactory. Beyond Java 17 this API becomes even more locked > down making dynamic use cases or coordination among frameworks next to

Re: [tomcat] branch main updated: Add support for additional user attributes in TomcatPrincipal

2022-02-13 Thread Rémy Maucherat
On Thu, Feb 10, 2022 at 1:01 PM Rémy Maucherat wrote: > > On Tue, Feb 8, 2022 at 2:13 PM wrote: > > > > This is an automated email from the ASF dual-hosted git repository. > > > > michaelo pushed a commit to branch main > > in repository https://gi

Re: Add support for additional user attributes in TomcatPrincipal

2022-02-11 Thread Rémy Maucherat
On Fri, Feb 11, 2022 at 11:17 AM Carsten Klein wrote: > > > > > On Fri, Feb 11, 2022 at 10:10 AM Rémy Maucherat wrote > > > > If we get there, it could include mail addresses, ssn, payment info, > > user profile pictures (binary), etc etc. > > Also one t

Re: Re: [tomcat] branch main updated: Add support for additional user, attributes in TomcatPrincipal

2022-02-11 Thread Rémy Maucherat
On Fri, Feb 11, 2022 at 10:47 AM Michael Osipov wrote: > > Rémy, > > really, I don't understand your work attitude. Carsten contacted us on > the mailing list before providing the PR. Then he provided the PR. It > was open for EIGHT months. We discussed this in and out, with you and > Mark.

Re: Add support for additional user attributes in TomcatPrincipal

2022-02-11 Thread Rémy Maucherat
On Fri, Feb 11, 2022 at 8:10 AM Carsten Klein wrote: > > Hello Rémy, Mark and Michael, > > I'm new to the dev list and did not get your recent mails and didn't > figure out how to get them in order to answer. So, I decided to start a > new thread (sorry for that). > > I guess, having those

Re: Running unit tests with JVMs < 11

2022-02-10 Thread Rémy Maucherat
On Thu, Feb 10, 2022 at 4:25 PM Rainer Jung wrote: > > Am 10.02.2022 um 14:41 schrieb Rémy Maucherat: > > On Thu, Feb 10, 2022 at 2:11 PM Mark Thomas wrote: > >> > >> On 09/02/2022 14:04, Rainer Jung wrote: > >>> Hi all, > >>> > >>

Re: Running unit tests with JVMs < 11

2022-02-10 Thread Rémy Maucherat
On Thu, Feb 10, 2022 at 4:25 PM Rainer Jung wrote: > > Am 10.02.2022 um 14:41 schrieb Rémy Maucherat: > > On Thu, Feb 10, 2022 at 2:11 PM Mark Thomas wrote: > >> > >> On 09/02/2022 14:04, Rainer Jung wrote: > >>> Hi all, > >>> > >>

Re: [tomcat] branch main updated: Add support for additional user attributes in TomcatPrincipal

2022-02-10 Thread Rémy Maucherat
On Thu, Feb 10, 2022 at 2:48 PM Mark Thomas wrote: > > On 10/02/2022 12:01, Rémy Maucherat wrote: > > On Tue, Feb 8, 2022 at 2:13 PM wrote: > >> > >> This is an automated email from the ASF dual-hosted git repository. > >> > >> michaelo pushed

Re: Running unit tests with JVMs < 11

2022-02-10 Thread Rémy Maucherat
On Thu, Feb 10, 2022 at 2:11 PM Mark Thomas wrote: > > On 09/02/2022 14:04, Rainer Jung wrote: > > Hi all, > > > > I wonder how important it is to be able to run the unit tests for TC > > 8.5-10.0 with JVM versions 8 or even 7 (TC 8.5). > > > > The unconditional addition of unit test jvmargs

Re: Tagging 10.1.x and 10.0.x tomorrow

2022-02-10 Thread Rémy Maucherat
On Wed, Feb 9, 2022 at 1:18 PM Mark Thomas wrote: > > On 07/02/2022 21:06, Mark Thomas wrote: > > Hi all, > > > > Just a heads up that, barring surprises, I plan to be in a position to > > tag 10.1.x and 10.0.x for the February release round towards the end of > > tomorrow. > > There were

Re: [tomcat] branch main updated: Add support for additional user attributes in TomcatPrincipal

2022-02-10 Thread Rémy Maucherat
On Tue, Feb 8, 2022 at 2:13 PM wrote: > > This is an automated email from the ASF dual-hosted git repository. > > michaelo pushed a commit to branch main > in repository https://gitbox.apache.org/repos/asf/tomcat.git > > > The following commit(s) were added to refs/heads/main by this push: >

Re: JDK 18 Rampdown Phase 2 & JDK 19 Early-Access Builds

2022-01-31 Thread Rémy Maucherat
On Mon, Jan 31, 2022 at 10:33 AM David Delabassee wrote: > > Greetings! > > First off, on behalf of Oracle’s Java Team, I’d like to wish you a happy > and prosperous new year! > > In 2022, two Java releases will be made available: > - JDK 18 (March 2022) > - JDK 19 (September 2022) > > JDK 18[1]

Re: Digicert code-signing

2022-01-27 Thread Rémy Maucherat
On Thu, Jan 27, 2022 at 10:12 PM Mark Thomas wrote: > > Primarily for release managers. > > Your API key and certificate have expiry dates. By default this is a > year after you created them. The error message when they have expired > just indicates that the credentials are invalid. > > If you

  1   2   3   4   5   6   7   8   9   10   >