Mark,
Thanks for RMing.
On 10/1/25 4:00 AM, Mark Thomas wrote:
The proposed Apache Tomcat 11.0.12 release is now available for voting.
The notable changes compared to 11.0.11 include:
- Add specific certificate selection code for TLS 1.3 supporting post
quantum cryptography. Certificates defined with type MLDSA will be
selected depending on the TLS client hello.
- Add groups attribute on SSLHostConfig allowing to restrict which
groups can be enabled on the SSL engine.
- Store HTTP/1.1 request headers using the original case for the header
name rather than forcing it to lower case.
For full details, see the change log:
https://nightlies.apache.org/tomcat/tomcat-11.0.x/docs/changelog.html
Applications that run on Tomcat 9 and earlier will not run on Tomcat 11
without changes. Java EE applications designed for Tomcat 9 and earlier
may be placed in the $CATALINA_BASE/webapps-javaee directory and Tomcat
will automatically convert them to Jakarta EE and copy them to the
webapps directory. Applications using deprecated APIs may require
further changes.
It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-11/v11.0.12/
The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1560
The tag is:
https://github.com/apache/tomcat/tree/11.0.12
7be88ea333d4b1f0ff75b8f4bc743f7f25262886
The proposed 11.0.12 release is:
[ ] -1 Broken - do not release
[ ] +1 Stable - go ahead and release as 11.0.12
+1 for stable release
The build is 100% reproducible on MacOS aarch64, and all unit tests
pass. I did have to re-run the
websocket.TestWsWebSocketContainerTimeoutServer as it failed on the
first go-around, but I suspect it's very condition-dependent.
Details:
* Environment
* Java (build): openjdk version "25" 2025-09-16 LTS OpenJDK Runtime
Environment Temurin-25+36 (build 25+36-LTS) OpenJDK 64-Bit Server VM
Temurin-25+36 (build 25+36-LTS, mixed mode, sharing)
* Java (test): openjdk version "25" 2025-09-16 LTS OpenJDK Runtime
Environment Temurin-25+36 (build 25+36-LTS) OpenJDK 64-Bit Server VM
Temurin-25+36 (build 25+36-LTS, mixed mode, sharing)
* Ant: Apache Ant(TM) version 1.10.15 compiled on August 25
2024
* OS: Darwin 24.6.0 arm64
* cc: Apple clang version 17.0.0 (clang-1700.0.13.5)
* make: GNU Make 3.81
* OpenSSL: OpenSSL 3.5.2 5 Aug 2025 (Library: OpenSSL 3.5.2 5
Aug 2025)
* APR: 1.7.6
*
* Valid SHA-512 signature for apache-tomcat-11.0.12.zip
* Valid GPG signature for apache-tomcat-11.0.12.zip
* Valid SHA-512 signature for apache-tomcat-11.0.12.tar.gz
* Valid GPG signature for apache-tomcat-11.0.12.tar.gz
* Valid SHA-512 signature for apache-tomcat-11.0.12.exe
* Valid GPG signature for apache-tomcat-11.0.12.exe
* Valid Windows Digital Signature for apache-tomcat-11.0.12.exe
* Valid SHA512 signature for apache-tomcat-11.0.12-src.zip
* Valid GPG signature for apache-tomcat-11.0.12-src.zip
* Valid SHA512 signature for apache-tomcat-11.0.12-src.tar.gz
* Valid GPG signature for apache-tomcat-11.0.12-src.tar.gz
*
* Binary Zip and tarball: Same
* Source Zip and tarball: Same
*
* Building dependencies returned: 0
* Tomcat builds cleanly
* tcnative builds cleanly
* Junit Tests: PASSED
*
* Signature MATCH for bin/apache-tomcat-11.0.12-deployer.tar.gz
* Signature MATCH for bin/apache-tomcat-11.0.12-deployer.zip
* Signature MATCH for bin/apache-tomcat-11.0.12-fulldocs.tar.gz
* Signature MATCH for bin/apache-tomcat-11.0.12-windows-x64.zip
* Signature MATCH for bin/apache-tomcat-11.0.12-windows-x86.zip
* Signature MATCH for bin/apache-tomcat-11.0.12.exe
* Signature MATCH for bin/apache-tomcat-11.0.12.tar.gz
* Signature MATCH for bin/apache-tomcat-11.0.12.zip
* Signature MATCH for src/apache-tomcat-11.0.12-src.tar.gz
* Signature MATCH for src/apache-tomcat-11.0.12-src.zip
*
*
* SSSS SSSS
* S SS SS S
* SS S S SS
* SS S S SS
* SS SS S SS
* SS S S SS
* SSS SS SS SSS
* SS SS SS SS
* SS SS SS SS
* SS S S SS
* SS SSSSSSS SSSSSSS SS
* SSSSS SSS SSS SSSS
* SSS SSSS SS SS SSSS SS
* SS SSS SSS S S SSS SSS S
* S SSS SS SS SSS S
* S SSSSSS SS SS SSSSSS S
* S SS SSSSSSS SSSSSSS SS S
* S SSSS SS SS SSSS S
* SS SS SSSSSSSSS SSSSSSSSS SS S
* SSSS SSSS S S SSSS SS
* SSSSS SSSSSS SS SS SSSSSS SSSS
* SS SS SSSSSS SSSSSS SS SS
* SSS SSS S S SSS SSS
* SSSSSSSSSS SSSSSSSSS
*
*
* All signatures are verified; the build appears to be 100%
* reproducible.
-chris
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
