Bug#1034824: tomcat9 should not be released with Bookworm

2023-05-27 Thread Timo Aaltonen
Paul Gevers kirjoitti 26.5.2023 klo 22.14: Hi, On 26-05-2023 10:58, Moritz Muehlenhoff wrote: Can't we just do the pragmatic fix of updating src:tomcat9 to only ship libtomcat9-java and libtomcat9-embed-java? The maintenance burden for security updates lies within the server stack, the

Bug#1034824: tomcat9 should not be released with Bookworm

2023-05-26 Thread Markus Koschany
Am Freitag, dem 26.05.2023 um 21:44 +0200 schrieb Emmanuel Bourg: > > The changes to jetty9 have to be reverted too, the package is broken > (#1036798). > > Sadly we can't do without tomcat9. The path forward implies packaging > Jetty 11 or 12 first and migrating all the reverse dependencies,

Bug#1034824: tomcat9 should not be released with Bookworm

2023-05-26 Thread Paul Gevers
Hi, On 26-05-2023 21:34, Markus Koschany wrote: Do I understand you correctly, that we only ship libtomcat9-java in Bookworm now? Shall I upload a new revision of tomcat9 too? Yes and yes. Paul OpenPGP_signature Description: OpenPGP digital signature

Bug#1034824: tomcat9 should not be released with Bookworm

2023-05-26 Thread Emmanuel Bourg
Le 2023-05-26 21:14, Paul Gevers a écrit : I have just added removal hints for tomcatjss and dogtag-pki. As mentioned in my previous message, I want the changes in logback reverted. You can do the reduced upload of tomcat9. Markus, can you please revert you logback change by tomorrow at the

Bug#1034824: tomcat9 should not be released with Bookworm

2023-05-26 Thread Markus Koschany
Hi, > Markus, can you please revert you logback change by tomorrow at the latest? Sure. I will take care if it. Do I understand you correctly, that we only ship libtomcat9-java in Bookworm now? Shall I upload a new revision of tomcat9 too? Regards, Markus signature.asc Description: This is

Bug#1034824: tomcat9 should not be released with Bookworm

2023-05-26 Thread Paul Gevers
Hi, On 26-05-2023 10:58, Moritz Muehlenhoff wrote: Can't we just do the pragmatic fix of updating src:tomcat9 to only ship libtomcat9-java and libtomcat9-embed-java? The maintenance burden for security updates lies within the server stack, the percentage of issues affecting the libtomcat9-java

Bug#1034824: tomcat9 should not be released with Bookworm

2023-05-26 Thread Salvatore Bonaccorso
hey all, I was involved with a discussion on site here in Hamburg with Paul about it. On Fri, May 26, 2023 at 10:58:48AM +0200, Moritz Muehlenhoff wrote: > On Fri, May 26, 2023 at 12:10:18AM +0200, Markus Koschany wrote: > > First of all trapperkeeper-webserver-jetty9-clojure should add a build-

Bug#1034824: tomcat9 should not be released with Bookworm

2023-05-26 Thread Emmanuel Bourg
Le 26/05/2023 à 10:58, Moritz Muehlenhoff a écrit : Can't we just do the pragmatic fix of updating src:tomcat9 to only ship libtomcat9-java and libtomcat9-embed-java? The maintenance burden for security updates lies within the server stack, the percentage of issues affecting the libtomcat9-java

Bug#1034824: tomcat9 should not be released with Bookworm

2023-05-26 Thread Moritz Muehlenhoff
On Fri, May 26, 2023 at 12:10:18AM +0200, Markus Koschany wrote: > First of all trapperkeeper-webserver-jetty9-clojure should add a build- > dependency on logback to detect such regressions in advance. > > #1036250 is mainly a logback problem, not a tomcat problem. I still would like > to hear

Bug#1034824: tomcat9 should not be released with Bookworm

2023-05-26 Thread Paul Gevers
Control: clone -1 -2 -3 Control: reassign -2 release-notes Control: reassign -3 debian-security-support Control: tag -1 bookworm-ignore Hi, On 26-05-2023 00:10, Markus Koschany wrote: #1036250 is mainly a logback problem, not a tomcat problem. I still would like to hear Emmanuel's opinion. We

Bug#1034824: tomcat9 should not be released with Bookworm

2023-05-25 Thread Markus Koschany
First of all trapperkeeper-webserver-jetty9-clojure should add a build- dependency on logback to detect such regressions in advance. #1036250 is mainly a logback problem, not a tomcat problem. I still would like to hear Emmanuel's opinion. We still could revert to libtomcat9-java, if we don't

Bug#1034824: tomcat9 should not be released with Bookworm

2023-05-25 Thread Jérôme Charaoui
Le 2023-05-25 à 17 h 41, Martin Hostettler a écrit : Quoting from J�r�me Charaoui in (#1036250): I did further tests with puppetserver, which is a downstream dependency of trapperkeeper-webserver-jetty9-clojure and unfortunately, the web requests (access) logging remains broken. There are no

Bug#1034824: tomcat9 should not be released with Bookworm

2023-05-25 Thread Martin Hostettler
I was asked to send a update to this bug from my notes/open tabs. >From what i can see this is still a problem and it is getting very late to fix all the fallout. There are still 2 packages that are not fixed for this. src:trapperkeeper-webserver-jetty9-clojure (#1036250) which is as far as I

Bug#1031816: Bug#1034824: tomcat9 should not be released with Bookworm

2023-05-22 Thread Adrian Bunk
On Tue, May 16, 2023 at 05:28:11PM +0300, Timo Aaltonen wrote: > Timo Aaltonen kirjoitti 16.5.2023 klo 10.12: > > Markus Koschany kirjoitti 13.5.2023 klo 23.38: > > > Hi Salvatore, > > > > > > adding Timo Aaltonen, maintainer of dogtag-pki and tomcatjss, to CC > > > > > > Am Samstag, dem

Bug#1034824: tomcat9 should not be released with Bookworm

2023-05-16 Thread Paul Gevers
Hi, On 12-05-2023 21:49, Paul Gevers wrote: I'll check on Sunday on the proposal, unless somebody beats me to it. I don't have time before then. This dropped off my radar and I don't expect I have decent time to look at this until a week from now. Paul OpenPGP_signature Description:

Bug#1034824: tomcat9 should not be released with Bookworm

2023-05-16 Thread Timo Aaltonen
Timo Aaltonen kirjoitti 16.5.2023 klo 10.12: Markus Koschany kirjoitti 13.5.2023 klo 23.38: Hi Salvatore, adding Timo Aaltonen, maintainer of dogtag-pki and tomcatjss, to CC Am Samstag, dem 13.05.2023 um 20:50 +0200 schrieb Salvatore Bonaccorso: Hi Markus, On Sat, May 13, 2023 at 06:27:49PM

Bug#1034824: tomcat9 should not be released with Bookworm

2023-05-16 Thread Timo Aaltonen
Markus Koschany kirjoitti 13.5.2023 klo 23.38: Hi Salvatore, adding Timo Aaltonen, maintainer of dogtag-pki and tomcatjss, to CC Am Samstag, dem 13.05.2023 um 20:50 +0200 schrieb Salvatore Bonaccorso: Hi Markus, On Sat, May 13, 2023 at 06:27:49PM +0200, Markus Koschany wrote: I have just

Bug#1034824: tomcat9 should not be released with Bookworm

2023-05-13 Thread Emmanuel Bourg
Le 2023-05-13 22:38, Markus Koschany a écrit : The question is: If we ship libtomcat9-java in Bookworm and change the dependency from tomcat9-user to tomcat10-user, will a web application like dogtag-pki, which is designed for Tomcat 9, continue to work with Tomcat 10? I'm pretty sure it

Bug#1034824: tomcat9 should not be released with Bookworm

2023-05-13 Thread Markus Koschany
Hi Salvatore, adding Timo Aaltonen, maintainer of dogtag-pki and tomcatjss, to CC Am Samstag, dem 13.05.2023 um 20:50 +0200 schrieb Salvatore Bonaccorso: > Hi Markus, > > On Sat, May 13, 2023 at 06:27:49PM +0200, Markus Koschany wrote: > > I have just pushed the necessary changes to our Git

Bug#1034824: tomcat9 should not be released with Bookworm

2023-05-13 Thread Salvatore Bonaccorso
Hi Markus, On Sat, May 13, 2023 at 06:27:49PM +0200, Markus Koschany wrote: > I have just pushed the necessary changes to our Git repository. > > https://salsa.debian.org/java-team/tomcat9/-/commit/adbd0b0711de66b67278b10e258c47c805e9b993 Do we need to have done more here? When Paul asked on

Bug#1034824: tomcat9 should not be released with Bookworm

2023-05-13 Thread Markus Koschany
I have just pushed the necessary changes to our Git repository. https://salsa.debian.org/java-team/tomcat9/-/commit/adbd0b0711de66b67278b10e258c47c805e9b993 signature.asc Description: This is a digitally signed message part

Bug#1034824: tomcat9 should not be released with Bookworm

2023-05-12 Thread Paul Gevers
Hi Markus, Thanks for the reply and sorry for my bit grumpy mail yesterday. I was tired and surprised. On 11-05-2023 23:31, Markus Koschany wrote: [...] (all good reply). I'll check on Sunday on the proposal, unless somebody beats me to it. I don't have time before then. Paul

Bug#1034824: tomcat9 should not be released with Bookworm

2023-05-11 Thread Emmanuel Bourg
Hi Paul, Le 2023-05-11 21:44, Paul Gevers a écrit : From a quick look at the key packages: It seems you didn't follow up (86 days) on libcommons-dbcp-java which can't migrate to bookworm because it would make libbiojava-java-doc uninstallable (no fix there, no bug report filed). I have to

Bug#1034824: tomcat9 should not be released with Bookworm

2023-05-11 Thread Markus Koschany
Hello Paul, Am Donnerstag, dem 11.05.2023 um 21:44 +0200 schrieb Paul Gevers: > Hi Markus, > > On Tue, 25 Apr 2023 16:04:09 +0200 Markus Koschany wrote: > > We can only support one major Tomcat version per release. Tomcat9 has > > been part of Buster and Bullseye already and is superseded by

Bug#1034824: tomcat9 should not be released with Bookworm

2023-05-11 Thread Paul Gevers
Hi Markus, On Tue, 25 Apr 2023 16:04:09 +0200 Markus Koschany wrote: We can only support one major Tomcat version per release. Tomcat9 has been part of Buster and Bullseye already and is superseded by Tomcat 10 in Bookworm. I wanted to wait with the removal request until the issues in

Bug#1034824: tomcat9 should not be released with Bookworm

2023-04-25 Thread Markus Koschany
Source: tomcat9 Version: 9.0.70-1 Severity: serious X-Debbugs-Cc: a...@debian.org We can only support one major Tomcat version per release. Tomcat9 has been part of Buster and Bullseye already and is superseded by Tomcat 10 in Bookworm. I wanted to wait with the removal request until the issues