On 20/01/2026 14:51, Rémy Maucherat wrote:
On Tue, Jan 20, 2026 at 3:50 PM Mark Thomas <[email protected]> wrote:
On 20/01/2026 14:25, Mark Thomas wrote:
On 20/01/2026 12:07, Dimitris Soumis wrote:
On Tue, Jan 20, 2026 at 12:37 AM Mark Thomas <[email protected]> wrote:
The proposed Apache Tomcat 11.0.16 release is now available for voting.
The notable changes compared to 11.0.15 include:
- For configuration consistency between OpenSSL and JSSE TLS
implementations, TLSv1.3 cipher suites included in the ciphers
attribute of an SSLHostConfig are now always ignored (previously
they would be ignored with OpenSSL implementations and used with
JSSE implementations) and a warning is logged that the cipher
suite has been ignored.
- Expand OCSP support to JSSE based connections and expand OCSP
configuration options
- Update Commons Daemon to 1.5.1.
- Update Tomcat Native to 2.0.12 and increase the minimum version to
2.0.12 / 1.3.4
For full details, see the change log:
https://nightlies.apache.org/tomcat/tomcat-11.0.x/docs/changelog.html
Applications that run on Tomcat 9 and earlier will not run on Tomcat 11
without changes. Java EE applications designed for Tomcat 9 and earlier
may be placed in the $CATALINA_BASE/webapps-javaee directory and Tomcat
will automatically convert them to Jakarta EE and copy them to the
webapps directory. Applications using deprecated APIs may require
further changes.
It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-11/v11.0.16/
The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1575
The tag is:
https://github.com/apache/tomcat/tree/11.0.16
f2a18d2aa892941e91e214f954a5ee31d60093ed
The proposed 11.0.16 release is:
[ ] -1 Broken - do not release
[ ] +1 Stable - go ahead and release as 11.0.16
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
Tests pass on Fedora 43 with Java 25, tcnative-2.0.12, apr-1.7.6,
openssl-3.5.4.
Can't reproduce the build though. I am getting signature mismatches
for apache-tomcat-11.0.16-src.tar.gz and apache-tomcat-11.0.16-src.zip.
Hmm. That is usually something like a line-endings issue with a new file
type. Let me take a look...
It is index.db and index.db.attr
They need to be treated as text files and have the line endings set
correctly.
I'll fix those and re-tag but I'll leave until - possibly as long as
until first thing tomorrow - to give folks a chance to find any other
issues.
Ok.
I didn't get any sig mismatches personally.
It will be broken cross-platform. If you test on Windows it will be fine.
Mark
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
