Am 01.10.25 um 10:00 schrieb Mark Thomas:
The proposed Apache Tomcat 11.0.12 release is now available for voting.
The notable changes compared to 11.0.11 include:
- Add specific certificate selection code for TLS 1.3 supporting post
quantum cryptography. Certificates defined with type MLDSA will be
selected depending on the TLS client hello.
- Add groups attribute on SSLHostConfig allowing to restrict which
groups can be enabled on the SSL engine.
- Store HTTP/1.1 request headers using the original case for the header
name rather than forcing it to lower case.
For full details, see the change log:
https://nightlies.apache.org/tomcat/tomcat-11.0.x/docs/changelog.html
Applications that run on Tomcat 9 and earlier will not run on Tomcat 11
without changes. Java EE applications designed for Tomcat 9 and earlier
may be placed in the $CATALINA_BASE/webapps-javaee directory and Tomcat
will automatically convert them to Jakarta EE and copy them to the
webapps directory. Applications using deprecated APIs may require
further changes.
It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-11/v11.0.12/
The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1560
The tag is:
https://github.com/apache/tomcat/tree/11.0.12
7be88ea333d4b1f0ff75b8f4bc743f7f25262886
The proposed 11.0.12 release is:
[ ] -1 Broken - do not release
[ ] +1 Stable - go ahead and release as 11.0.12
+1 to release.
Reproducibility of the build checked (including the Windows installer)
on Linux Mint 22.2. OK after setting LANG. Checked manually plus with
"ant verify-release".
Original Windows installer signature verified with osslsigncode.
dist file list correct, hashes OK, gpg signatures OK.
Unit tests ran on platforms
- RHEL 6, 7, 8 and 9, SLES 11, 12 and 15
using
- recent patch versions of JDK 17, 21, 25 and 26 (EA 16)
from
- Eclipse Adoptium, Azul Zulu, Amazon Coretto, Oracle, RedHat and
OpenJDK (for 26)
where available.
Also tested with
- tcnative 1.3.1, 2.0.9 and panama
based on
- OpenSSL 3.0.18, 3.4.3, 3.5.4 and 3.6.0.
All test runs fine, except for
- the usual sporadic crashes with tcnative during shutdown.
- sporadic, but a bit too frequent failures in
org.apache.coyote.http2.TestCancelledUpload
(no regression; for details see mail about 11.0.10)
Thanks for RM!
Best regards,
Rainer
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
