svn commit: r1807075 - in /tomcat/tc8.5.x/trunk: ./ test/org/apache/tomcat/util/net/TestSSLHostConfigIntegration.java

Author: rjung Date: Sat Sep 2 18:51:21 2017 New Revision: 1807075 URL: http://svn.apache.org/viewvc?rev=1807075=rev Log: No SSL communication done in this test, so we do not need to set up an ssl client. Backport of r1804888 from trunk. Modified: tomcat/tc8.5.x/trunk/ (props changed)

svn commit: r1807079 - in /tomcat/tc8.5.x/trunk: ./ test/org/apache/tomcat/util/net/ test/org/apache/tomcat/websocket/

Author: rjung Date: Sat Sep 2 19:02:22 2017 New Revision: 1807079 URL: http://svn.apache.org/viewvc?rev=1807079=rev Log: - Use constants for test certificate file paths, aliases and passwords. - Change TesterSupport.initSsl() to use full path names. Backport of r1804890 from trunk.

[Bug 46767] mod_jk to send DECLINED in case no fail-over tomcats available/configured

https://bz.apache.org/bugzilla/show_bug.cgi?id=46767 --- Comment #2 from Dinesh Ilindra --- "return DECLINE" means that the httpd server can continue the request processing to the next possible option For example, if uri "/app/*" is configured to goto mod_jk and there is

svn commit: r1807083 - in /tomcat/tc8.0.x/trunk: ./ test/org/apache/tomcat/util/net/TesterSupport.java

Author: rjung Date: Sat Sep 2 19:18:44 2017 New Revision: 1807083 URL: http://svn.apache.org/viewvc?rev=1807083=rev Log: Replace hard-coded client certificate subject by retrieving it from the certificate. Backport of r1804906 from trunk resp. r1807080 from TC 8.5.x. Modified:

Re: svn commit: r1807004 - in /tomcat/trunk: java/org/apache/catalina/authenticator/ test/org/apache/catalina/authenticator/ webapps/docs/ webapps/docs/config/

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 9/1/17 4:18 PM, Mark Thomas wrote: > On 01/09/17 20:51, ma...@apache.org wrote: >> Author: markt Date: Fri Sep 1 19:51:42 2017 New Revision: >> 1807004 >> >> URL: http://svn.apache.org/viewvc?rev=1807004=rev Log: Fix >>

svn commit: r1807092 - in /tomcat/tc8.5.x/trunk: ./ java/org/apache/tomcat/util/net/openssl/OpenSSLEngine.java

Author: rjung Date: Sat Sep 2 20:22:35 2017 New Revision: 1807092 URL: http://svn.apache.org/viewvc?rev=1807092=rev Log: AVAILABLE_CIPHER_SUITES contains the ciphers with JSSE names, so the check needs to be done before replacing with the OpenSSL name. Backport of r1805524 from trunk.

svn commit: r1807094 - in /tomcat/tc8.5.x/trunk: ./ java/org/apache/tomcat/util/net/openssl/OpenSSLContext.java java/org/apache/tomcat/util/net/openssl/OpenSSLEngine.java webapps/docs/changelog.xml

Author: rjung Date: Sat Sep 2 20:33:06 2017 New Revision: 1807094 URL: http://svn.apache.org/viewvc?rev=1807094=rev Log: When using a Java connector in combination with the OpenSSL TLS implementation, do not configure each SSL connection object via the OpenSSLEngine. For OpenSSL the SSL object

svn commit: r1807080 - in /tomcat/tc8.5.x/trunk: ./ test/org/apache/tomcat/util/net/TesterSupport.java

Author: rjung Date: Sat Sep 2 19:07:38 2017 New Revision: 1807080 URL: http://svn.apache.org/viewvc?rev=1807080=rev Log: Replace hard-coded client certificate subject by retrieving it from the certificate. Backport of r1804906 from trunk. Modified: tomcat/tc8.5.x/trunk/ (props changed)

svn commit: r1807082 - in /tomcat/tc8.0.x/trunk: ./ test/org/apache/tomcat/util/net/ test/org/apache/tomcat/websocket/

Author: rjung Date: Sat Sep 2 19:14:46 2017 New Revision: 1807082 URL: http://svn.apache.org/viewvc?rev=1807082=rev Log: - Use constants for test certificate file paths, aliases and passwords. - Change TesterSupport.initSsl() to use full path names. Backport of r1804890 from trunk resp.

svn commit: r1807089 - in /tomcat/tc7.0.x/trunk: ./ test/org/apache/tomcat/util/net/ test/org/apache/tomcat/websocket/

Author: rjung Date: Sat Sep 2 20:07:05 2017 New Revision: 1807089 URL: http://svn.apache.org/viewvc?rev=1807089=rev Log: - Use constants for test certificate file paths, aliases and passwords. - Change TesterSupport.initSsl() to use full resource names with path. Backport of r1804890 from

svn commit: r1807090 - in /tomcat/tc7.0.x/trunk: ./ test/org/apache/tomcat/util/net/TesterSupport.java

Author: rjung Date: Sat Sep 2 20:08:33 2017 New Revision: 1807090 URL: http://svn.apache.org/viewvc?rev=1807090=rev Log: Replace hard-coded client certificate subject by retrieving it from the certificate. Backport of r1804906 from trunk resp. r1807080 from TC 8.5.x resp. r1807083 from TC

svn commit: r1807091 - in /tomcat/tc8.5.x/trunk: ./ java/org/apache/tomcat/jni/SSL.java

Author: rjung Date: Sat Sep 2 20:13:45 2017 New Revision: 1807091 URL: http://svn.apache.org/viewvc?rev=1807091=rev Log: Fix a comment typo. Backport of r1805523 from trunk. Modified: tomcat/tc8.5.x/trunk/ (props changed) tomcat/tc8.5.x/trunk/java/org/apache/tomcat/jni/SSL.java

svn commit: r1807093 - /tomcat/trunk/webapps/docs/changelog.xml

Author: rjung Date: Sat Sep 2 20:26:58 2017 New Revision: 1807093 URL: http://svn.apache.org/viewvc?rev=1807093=rev Log: Move changelog item from Catalina to Coyote. Modified: tomcat/trunk/webapps/docs/changelog.xml Modified: tomcat/trunk/webapps/docs/changelog.xml URL:

OK to require tcnative 1.2.14 for TC 8.5 once it is available?

Backporting some fixes and enhancements from TC trunk to 8.5.x would need to either require tcnative 1.2.14 or make the code more complex by catching UnsatisfiedLinkError etc. and converting into error messages. I don't remember very well, how we handled this in the past. Are we willing to