Mark, Excellent news, thank you for taking the time to make it work. I tested it in 9.0.105 (using NIO2) , 10.1.41 and 11.0.7 on Windows and it works fine. On Chrome 136 the negotiated DH group is X25519MLKEM768, as expected. I'll keep doing tests.
Fede. On Wed, May 28, 2025, 04:51 Mark Thomas <ma...@apache.org> wrote: > On 27/05/2025 19:20, federico bustamante wrote: > > Hi Mark, hope to find you well. > > Just following up, did you get the build working? > > I tried a few more times but I couldn't make any progress. > > Yes, all working. There is a Tomcat Native release in progress now with > the Windows binaries built with OpenSSL 3.5.0. > > Details here: > https://lists.apache.org/thread/5k3nv5ntmnrwfyz8tlywfldmpzbjdpcn > > Additional testing and feedback on that proposed release would be > appreciated. > > Mark > > > > > Fede > > > > On Thu, May 22, 2025, 08:22 federico bustamante <busta...@gmail.com> > wrote: > > > >> I couldn't make it work with mingw64. > >> The switch to 3.5 LTS would be wonderful, I hope you can get the build > >> working, Mark. > >> Please keep us updated. > >> > >> Thanks, > >> Fede. > >> > >> On Thu, May 22, 2025, 07:07 Mark Thomas <ma...@apache.org> wrote: > >> > >>> On 22/05/2025 07:53, Mark Thomas wrote: > >>>> On 21/05/2025 23:04, federico bustamante wrote: > >>>>> Yes, I don't have high hopes on make in it work on Ubuntu, but I > >>>>> thought of > >>>>> giving it a try using mingw-64. > >>>>> I'll report back. > >>>> > >>>> I've been building the Tomcat Native binaries for Windows for a while. > >>>> I'll try with 3.5 and report back. > >>> > >>> This won't work with the currently documented Tomcat Native build > >>> process for Windows > >>> I'm working on some updates. > >>> > >>>> I'll also start a discussion on dev@ about switching the convenience > >>>> builds to use OpenSSL 3.5 since that is the new LTS version. > >>> > >>> Looks like we are heading towards consensus to do that - assuming I can > >>> get the build working. > >>> > >>> Mark > >>> > >>>> > >>>> Mark > >>>> > >>>>> > >>>>> Fede > >>>>> > >>>>> On Wed, May 21, 2025, 18:20 Christopher Schultz < > >>>>> ch...@christopherschultz.net> wrote: > >>>>> > >>>>>> Federico, > >>>>>> > >>>>>> On 5/21/25 2:22 PM, federico bustamante wrote: > >>>>>>> I've only tried with OpenSSL 3.5, but I suspect it's the same story > >>>>>>> with > >>>>>>> older versions (which, to be honest, wouldn't bother me as much as > it > >>>>>> being > >>>>>>> a specific problem with 3.5). > >>>>>> > >>>>>> I'll try reproducing the build process on Windows. We know the build > >>> CAN > >>>>>> be produced on Windows, because, well... we produce convenience > >>> binaries > >>>>>> for Windows with each tcnative release. But there may be some > >>>>>> environmental nuances that aren't completely documented in our build > >>>>>> process. We should fix that if it's the case. > >>>>>> > >>>>>>> I'll try building the DLL on Ubuntu. > >>>>>> > >>>>>> Strictly speaking, this is not possible. You may be able to build a > >>>>>> Linux binary, but creating a Windows DLL on Linux would require that > >>> you > >>>>>> set up a toolchain that is much more complicated than just doing it > on > >>>>>> Windows in the first place. > >>>>>> > >>>>>> -chris > >>>>>> > >>>>>>> On Wed, May 21, 2025, 13:35 Christopher Schultz < > >>>>>>> ch...@christopherschultz.net> wrote: > >>>>>>> > >>>>>>>> Federico, > >>>>>>>> > >>>>>>>> On 5/21/25 12:27 PM, Christopher Schultz wrote: > >>>>>>>>> Federico, > >>>>>>>>> > >>>>>>>>> On 5/21/25 10:58 AM, federico bustamante wrote: > >>>>>>>>>> Hi! > >>>>>>>>>> Did anyone have any luck building tcnative-2.dll with Openssl > 3.5 > >>> to > >>>>>> add > >>>>>>>>>> Post Quantum Cryptography support? > >>>>>>>>>> I tried following the steps in the wiki, but didn't have any > luck > >>>>>> (tried > >>>>>>>>>> with cmake and nmake). > >>>>>>>>> > >>>>>>>>> Have you been able to compile tcnative-2.dll with earlier > versions > >>> of > >>>>>>>>> OpenSSL? I'm asking to see if you are having trouble with > building > >>>>>>>>> tcnative in general, or if OpenSSL 3.5 is what is causing the > >>>>>>>>> problem. > >>>>>>>> > >>>>>>>> FYI I just tried building libtcnative on MacOS against OpenSSL 3.5 > >>> and > >>>>>>>> the build was successful. I believe the build process for Windows > >>>>>>>> is ... > >>>>>>>> complex compared to *NIX-style builds. > >>>>>>>> > >>>>>>>> But I wanted to confirm that tcnative didn't have any issues with > >>>>>>>> building against OpenSSL 3.5 in general, and that seems not to be > >>> the > >>>>>> case. > >>>>>>>> > >>>>>>>> So the problem must be with the Windows build process itself. > >>>>>>>> > >>>>>>>> -chris > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>> --------------------------------------------------------------------- > >>>>>>>> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > >>>>>>>> For additional commands, e-mail: users-h...@tomcat.apache.org > >>>>>>>> > >>>>>>>> > >>>>>>> > >>>>>> > >>>>>> > >>>>>> > --------------------------------------------------------------------- > >>>>>> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > >>>>>> For additional commands, e-mail: users-h...@tomcat.apache.org > >>>>>> > >>>>>> > >>>>> > >>>> > >>>> > >>>> --------------------------------------------------------------------- > >>>> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > >>>> For additional commands, e-mail: users-h...@tomcat.apache.org > >>>> > >>> > >>> > >>> --------------------------------------------------------------------- > >>> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > >>> For additional commands, e-mail: users-h...@tomcat.apache.org > >>> > >>> > > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org > >
