Am 10.11.26 um 15:48 schrieb schultz.apache.org via dev:
The proposed Apache Tomcat 10.1.62 release is now available for voting.
All committers and PMC members are kindly requested to provide a vote if
possible. ANY TOMCAT USER MAY VOTE, though only PMC members votes are binding.
We welcome non-committer votes or comments on release builds.
The notable changes compared to 10.1.62 are:
- Large number of bugfixes to jdbc-pool
- The JAAS realm is now deprecated and will be removed in Tomcat 12
- Deprecate the EncryptInterceptor and replace it with TLS-PSK support
to encrypt cluster traffic
For full details, see the change log:
https://nightlies.apache.org/tomcat/tomcat-10.1.x/docs/changelog.html
Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 without
changes. Java EE applications designed for Tomcat 9 and earlier may be placed
in the $CATALINA_BASE/webapps-javaee directory and Tomcat will automatically
convert them to Jakarta EE and copy them to the webapps directory.
It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-10/v10.1.62/
The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1614
The tag is:
https://github.com/apache/tomcat/tree/10.1.62
https://github.com/apache/tomcat/commit/a92462222d487e8e55a770c4eabc9a6f75a32a90
We are also testing out a Beta release of the Apache Trusted Release (ATR) with
this Tomcat release. The page of the release candidate from ATR revision 00003,
which includes downloads, can be found at:
https://releases.apache.org/vote/tomcat/10.1.62
The file manifest for ATR revision 00003, including file digests,
can be found at:
https://releases.apache.org/manifest/tomcat/10.1.62/00003
The release artifacts are signed with one or more OpenPGP keys from:
https://downloads.apache.org/tomcat/KEYS
Please review the release candidate and vote accordingly.
[ ] +1 Release this package
[ ] +0 Abstain
[ ] -1 Do not release this package (please provide specific comments)
+1 to release.
Reproducibility of the build checked (including the Windows installer)
using "ant verify-release" on Linux Mint 22.3. OK after setting LANG.
Original Windows installer signature verified with osslsigncode 2.15.
Unit tests ran on platforms
- RHEL 7, 8, 9 and 10 and SLES 12 and 15
using
- recent patch versions of JDK 11, JDK 17, 21, 25, 27 and 28 (EA)
from
- Eclipse Adoptium, Azul Zulu, Amazon Corretto, Oracle, RedHat (missing
27) and from OpenJDK for 28
Also tested with
- tcnative 2.0.16 and panama
based on
- OpenSSL 3.5.9, 3.6.5, 4.0.3 and 4.1.0
- tcnative and panama tests only for tests which involve TLS
- no APR connector tests
Each combination of platform, JVM and JSSE or tcnative or panama only
tested for NIO or NIO2 (randomized). Total number of test combinations:
66 nio jsse
117 nio panama
281 nio tcnative
76 nio2 jsse
115 nio2 panama
287 nio2 tcnative
Test observations:
- IMHO nothing critical
- in addition
- no crash failure with JSSE (142 runs)
- one crash with tcnative (1 in 568 runs)
- no crash failures with panama (232 runs)
- one non-crash failure with jsse (1 in 142 runs)
- no non-crash failures with tcnative (568 runs)
- no non-crash failures with panama (232 runs)
Thanks for RM!
Best regards,
Rainer
P.S.: Test failure details:
With crash
- org.apache.tomcat.util.net.ocsp.TestOcspEnabled FAILED (crashed)
1 nio2 zulu_jdk11-rhel10.x86_64-tcnative-2.0.17-400-1
No crash
- org.apache.tomcat.util.net.ocsp.TestOcspSoftFailTryLater FAILED
1 nio2 oracle_jdk27-rhel7.x86_64-jsse
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
