Hi all,
OpenSSL will be producing security releases on 21st June. This will
include 3.0.4.
OpenSSL 3.0.3 won't build for Windows using our build tool chain because
of a dependency on a method that doesn't exist in the runtime libraries
we build against. The fix will be in 3.0.4.
I have been able to build OpenSSL 3.0.x HEAD for Windows using our build
tool chain.
Given all of the above, my plan for Tomcat Native 2.0.0 is as follows:
- test the build once OpenSSL 3.0.4 is released, including running
the 10.1.x unit tests with it
- tag and release Tomcat Native 2.0.0
- update Tomcat 10.1.x to use Tomcat Native 2.0.x
- tag and release Tomcat 10.1.x
A separate question is do we want to continue building Tomcat Native
1.2.x with OpenSSL 1.1.1 or do we want to switch to OpenSSL 3.0.x?
Thoughts?
Mark
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
