Mark,

Thanks for RMing.

On 1/20/26 7:57 PM, Mark Thomas wrote:
The proposed Apache Tomcat 11.0.17 release is now available for voting.

The notable changes compared to 11.0.15 include:

- For configuration consistency between OpenSSL and JSSE TLS
   implementations, TLSv1.3 cipher suites included in the ciphers
   attribute of an SSLHostConfig are now always ignored (previously
   they would be ignored with OpenSSL implementations and used with
   JSSE implementations) and a warning is logged that the cipher
   suite has been ignored.

- Expand OCSP support to JSSE based connections and expand OCSP
   configuration options

- Update Commons Daemon to 1.5.1.

- Update Tomcat Native to 2.0.12 and increase the minimum version to
   2.0.12 / 1.3.4


For full details, see the change log:
https://nightlies.apache.org/tomcat/tomcat-11.0.x/docs/changelog.html

Applications that run on Tomcat 9 and earlier will not run on Tomcat 11 without changes. Java EE applications designed for Tomcat 9 and earlier may be placed in the $CATALINA_BASE/webapps-javaee directory and Tomcat will automatically convert them to Jakarta EE and copy them to the webapps directory. Applications using deprecated APIs may require further changes.

It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-11/v11.0.17/

The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1577

The tag is:
https://github.com/apache/tomcat/tree/11.0.17
c4ac38afc5edd64a71a000955fee47ee6f9c0e27

The proposed 11.0.17 release is:
[ ] -1 Broken - do not release
[ ] +1 Stable - go ahead and release as 11.0.17

+1 for stable release.

The build is reproducible and unit tests all pass on MacOS aarch64.
Details:

* Environment
* Java (build): openjdk version "25.0.1" 2025-10-21 LTS OpenJDK Runtime Environment Temurin-25.0.1+8 (build 25.0.1+8-LTS) OpenJDK 64-Bit Server VM Temurin-25.0.1+8 (build 25.0.1+8-LTS, mixed mode, sharing) * Java (test): openjdk version "25.0.1" 2025-10-21 LTS OpenJDK Runtime Environment Temurin-25.0.1+8 (build 25.0.1+8-LTS) OpenJDK 64-Bit Server VM Temurin-25.0.1+8 (build 25.0.1+8-LTS, mixed mode, sharing) * Ant: Apache Ant(TM) version 1.10.15 compiled on August 25 2024
*  OS:              Darwin 24.6.0 arm64
*  cc:              Apple clang version 17.0.0 (clang-1700.6.3.2)
*  make:            GNU Make 3.81
* OpenSSL: OpenSSL 3.6.0 1 Oct 2025 (Library: OpenSSL 3.6.0 1 Oct 2025)
*  APR:             1.7.6
*
* Valid SHA-512 signature for apache-tomcat-11.0.17.zip
* Valid GPG signature for apache-tomcat-11.0.17.zip
* Valid SHA-512 signature for apache-tomcat-11.0.17.tar.gz
* Valid GPG signature for apache-tomcat-11.0.17.tar.gz
* Valid SHA-512 signature for apache-tomcat-11.0.17.exe
* Valid GPG signature for apache-tomcat-11.0.17.exe
* Valid Windows Digital Signature for apache-tomcat-11.0.17.exe
* Valid SHA512 signature for apache-tomcat-11.0.17-src.zip
* Valid GPG signature for apache-tomcat-11.0.17-src.zip
* Valid SHA512 signature for apache-tomcat-11.0.17-src.tar.gz
* Valid GPG signature for apache-tomcat-11.0.17-src.tar.gz
*
* Binary Zip and tarball: Same
* Source Zip and tarball: Same
*
* Building dependencies returned: 0
* Tomcat builds cleanly
* tcnative builds cleanly
* Junit Tests: PASSED



---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to