Re: [VOTE] Release Apache Tomcat 9.0.29

On 16/11/2019 19:56, Mark Thomas wrote: The proposed Apache Tomcat 9.0.29 release is now available for voting. The major changes compared to the 9.0.27 release are: - Improvements to Async error handling - Stricter processing of HTTP headers when looking for specific token values - Fix var

Re: Tomcat S2I

On 30/07/2019 16:18, Maxime Beck wrote: > Hello everyone, > > Has there been any release of a Source-to-Image Tomcat builder container > by any chance? If not, is there any plan to implement one in the near > future? The idea is to have an operator for tomcat in operatorhub.io that uses S2I. >

Re: H2 protocol validation

On 23/07/2019 11:27, Mark Thomas wrote: > On 23/07/2019 09:40, jean-frederic clere wrote: >> Hi, >> >> I have tried to run summerwind/h2spec (docker (1)) to validate tomcat >> master (using the apr connector and java8) and I have a bunch of errors. >> >>

Re: H2 protocol validation

On 23/07/2019 16:54, Mark Thomas wrote: > On 23/07/2019 15:34, jean-frederic clere wrote: >> On 23/07/2019 11:27, Mark Thomas wrote: >>> On 23/07/2019 09:40, jean-frederic clere wrote: >>>> Hi, >>>> >>>> I have tried to run summerwind/h2spec

Re: H2 protocol validation

On 23/07/2019 11:27, Mark Thomas wrote: > On 23/07/2019 09:40, jean-frederic clere wrote: >> Hi, >> >> I have tried to run summerwind/h2spec (docker (1)) to validate tomcat >> master (using the apr connector and java8) and I have a bunch of errors. >> >>

H2 protocol validation

Hi, I have tried to run summerwind/h2spec (docker (1)) to validate tomcat master (using the apr connector and java8) and I have a bunch of errors. Does someone validate our code against another test suite? (1) https://github.com/summerwind/h2spec -- Cheers Jean-Frederic -

Re: Graal and Tomcat Native

(stdout, "%d\t%d\t%d\t%d\t%d\t%f\t%d\t%d\t%f\n", >     l, h, seed, rand_orig, rand_reduced, > rand_normalized, >     i1, i2, rand_prod); >     } >     count++; >     if (count % FEEDBACK == 0) { >     f

Re: Graal and Tomcat Native

On 12/07/2019 11:21, Rémy Maucherat wrote: > On Thu, Jul 11, 2019 at 11:01 PM Rainer Jung > wrote: > > Am 11.07.2019 um 22:10 schrieb Rémy Maucherat: > > On Thu, Jul 11, 2019 at 8:42 PM Rainer Jung > mailto:rainer.j...@kippdata.de> > >

Re: [VOTE] Release Apache Tomcat 9.0.21

On 04/06/2019 22:50, Mark Thomas wrote: > [X] Stable - go ahead and release as 9.0.21 Tested on fedora30 with tc-native-1.2.21 ;-) -- Cheers Jean-Frederic - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additio

small extension for Tomcat in ApacheConNA2019

Hi, We have a small extension for The Tomcat track in ApacheConNA2019 CfP until Tuesday 23h59 GMT! Go and submit now ;-) -- Cheers Jean-Frederic - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional comman

ApacheCon call for presentations, httpd content

Hi, folks. The call for presentations for ApacheCon North America closes in a little less than 6 days. The CFP is here - https://www.apachecon.com/acna19/cfp.html - and closes May 13th. Thanks! Jean-Frederic - To unsubscribe,

Re: SSLv2Hello "Protocol" Support

On 16/04/2019 13:28, Coty Sutherland wrote: > Hi, > > It appears that the IBM JDK (version 8) has dropped support for SSLv2Hello > so when you startup tomcat with the IBM JDK you get a warning saying that > the protocol is being skipped. OpenJDK seems to have dropped it in version > 12 or 13 (I ha

Re: [VOTE] Release Apache Tomcat Native 1.2.19

On 30/11/2018 21:00, Mark Thomas wrote: > [X] Stable, go ahead and release tested on fedora29 with tomcat-9.0.13. -- Cheers Jean-Frederic - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-

Re: svn commit: r1847714 - /tomcat/native/trunk/native/src/sslconf.c

On 29/11/2018 18:25, Christopher Schultz wrote: > Jean-Frederic, > > On 11/29/18 12:18, jean-frederic clere wrote: >> On 29/11/2018 18:13, Christopher Schultz wrote: >>> Jean-Frederic, >>> >>> On 11/29/18 08:06, jfcl...@apache.org wrote: >>>&

Re: svn commit: r1847714 - /tomcat/native/trunk/native/src/sslconf.c

On 29/11/2018 18:13, Christopher Schultz wrote: > Jean-Frederic, > > On 11/29/18 08:06, jfcl...@apache.org wrote: >> Author: jfclere Date: Thu Nov 29 13:06:21 2018 New Revision: >> 1847714 > >> URL: http://svn.apache.org/viewvc?rev=1847714&view=rev Log: Allow >> to compile with --enable-insecure-

Re: svn commit: r1847704 - /tomcat/trunk/java/org/apache/catalina/ha/backend/HeartbeatListener.java

On 29/11/2018 11:04, Mark Thomas wrote: > On 29/11/2018 09:56, jean-frederic clere wrote: >> On 29/11/2018 10:46, ma...@apache.org wrote: >>> Author: markt >>> Date: Thu Nov 29 09:46:49 2018 >>> New Revision: 1847704 >>> >>> URL: http://svn.a

Re: [VOTE] Release Apache Tomcat Native 1.2.18

On 18/10/2018 00:19, Mark Thomas wrote: > [X] Stable, go ahead and release tested with nio/apr on rhel7 (apr: 1.5.2 openssl: 1.0.2k-fips), fedora28 (apr: 1.6.3 openssl: 1.1.0i-fips). scripts in https://github.com/jfclere/tomcat-native-tests.git -- Cheers Jean-Frederic ---

Re: [VOTE] Release JK 1.2.46

On 01/10/2018 17:30, Mark Thomas wrote: > Tag: > http://svn.apache.org/viewvc/tomcat/jk/tags/JK_1_2_46/ > > Source: > https://dist.apache.org/repos/dist/dev/tomcat/tomcat-connectors/jk/ > > > This is a maintenance release with a handful of bug fixes (compared to > 1.2.44) and some clean-up. It a

Re: [VOTE] Release Apache Tomcat 9.0.12

On 05/09/18 00:32, Mark Thomas wrote: > [X] Stable - go ahead and release as 9.0.12 Tested on fedora 28. -- Cheers Jean-Frederic - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-

Re: tomcat-native trunk

On 03/09/18 12:31, Rainer Jung wrote: > Am 03.09.2018 um 11:41 schrieb Mark Thomas: >> On 03/09/18 09:38, jean-frederic clere wrote: >>> Hi, >>> >>> I am working on a jar to laod the libraries in tomcat-native. I have >>> noted that the examples

tomcat-native trunk

Hi, I am working on a jar to laod the libraries in tomcat-native. I have noted that the examples don't compile and that the test directory is empty. I am planning to clean that and go for maven build for the new jar. Comments? -- Cheers Jean-Frederic --

ant problems

Hi, I have problems while building trunk: /home/jfclere/TMP/tomcat/build.xml:693: javac doesn't support the "release" attribute Is that expected I have tried java11 and java8 (openjdk)? -- Cheers Jean-Frederic - To unsubscri

Re: DBCP2 in Tomcat

On 07/08/18 10:10, Mark Thomas wrote: > On 07/08/18 08:55, jean-frederic clere wrote: >> Hi, >> >> I just want to ask what is the process, we pick all changes after >> commons-dbcp releases a version, or could I pick the actual code? > > Generally, I keep an e

DBCP2 in Tomcat

Hi, I just want to ask what is the process, we pick all changes after commons-dbcp releases a version, or could I pick the actual code? -- Cheers Jean-Frederic - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For ad

Re: https://repository.apache.org/content/repositories/snapshots/org/apache/tomcat/tomcat-dbcp/9.0-SNAPSHOT

On 06/08/18 16:34, Mark Thomas wrote: > On 06/08/18 15:26, jean-frederic clere wrote: >> Hi, >> >> I have a question about using those snapshots: How are they produced? > > The buidlbot jobs that run after every commit generate and upload them. > It is only configu

https://repository.apache.org/content/repositories/snapshots/org/apache/tomcat/tomcat-dbcp/9.0-SNAPSHOT

Hi, I have a question about using those snapshots: How are they produced? -- Cheers Jean-Frederic - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org

[SECURITY] CVE-2018-8034 Apache Tomcat - Security Constraint Bypass

CVE-2018-8034 Apache Tomcat - Security Constraint Bypass Severity: Low Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 9.0.0.M1 to 9.0.9 Apache Tomcat 8.5.0 to 8.5.31 Apache Tomcat 8.0.0.RC1 to 8.0.52 Apache Tomcat 7.0.35 to 7.0.88 Description: The host name verification

[SECURITY] CVE-2018-8037 Apache Tomcat - Information Disclosure

CVE-2018-8037 Apache Tomcat - Information Disclosure Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 9.0.0.M9 to 9.0.9 Apache Tomcat 8.5.5 to 8.5.31 Description: A bug in the tracking of connection closures can lead to reuse of user sessions in a new

[SECURITY] CVE-2018-1336 Apache Tomcat - Denial of Service

CVE-2018-1336 Apache Tomcat - Denial of Service Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 9.0.0.M9 to 9.0.7 Apache Tomcat 8.5.0 to 8.5.30 Apache Tomcat 8.0.0.RC1 to 8.0.51 Apache Tomcat 7.0.28 to 7.0.86 Description: An improper handing of overf

[SECURITY] CVE-2018-8020 Apache Tomcat Native Connector - Mishandled OCSP responses can allow clients to authenticate with revoked certificates

CVE-2018-8020 Apache Tomcat Native Connector - Mishandled OCSP responses can allow clients to authenticate with revoked certificates Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat Native 1.2.0 to 1.2.16 Apache Tomcat Native 1.1.23 to 1.1.34 Descript

[SECURITY] CVE-2018-8019 Apache Tomcat Native Connector - Mishandled OCSP invalid response

CVE-2018-8019 Apache Tomcat Native Connector - Mishandled OCSP invalid response Severity: Moderate Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat Native 1.2.0 to 1.2.16 Apache Tomcat Native 1.1.23 to 1.1.34 Description: When using an OCSP responder Tomcat Native did not

[ANN] Apache Tomcat Native 1.2.17 released

The Apache Tomcat team announces the immediate availability of Apache Tomcat Native 1.2.17 stable. The key features of this release are: - Windows binaries built with APR 1.6.3 and OpenSSL 1.0.2o. - Fix Certificate verification using CRL. - Arrange OCSP response processing. Note that users shoul

[RESULT] [VOTE] Release Apache Tomcat Native 1.2.17

The following votes were cast: Binding: +1: markt, ebourg, remm, rjung, csutherl, jfclere The vote therefore passes. Thanks to everyone who contributed to this release. Cheers Jean-Frederic - To unsubscribe, e-mail: dev-uns

Re: [VOTE] Release Apache Tomcat Native 1.2.17

     using RSA key ED3873F5D3262722 > gpg: BAD signature from "Jean-Frederic Clere (Apache signing key) > " > > Other signatures are OK, so please check integrity of the file > tomcat-native-1.2.17-win32-src.zip and fix either this file or the asc > fil

[VOTE] Release Apache Tomcat Native 1.2.17

Version 1.2.17 includes the following changes compared to 1.2.16: - Windows binaries built with OpenSSL 1.0.2o and APR 1.6.3 Various other fixes and improvements. See the changelog for details. The proposed release artefacts can be found at [1], and the build was done using tag [2]. The Apache

Re: Tagging tc-native 1.2.17

On 06/06/18 14:39, Mark Thomas wrote: > On 06/06/18 13:03, jean-frederic clere wrote: >> Hi >> >> I have been fixed a few issues in tomcat-native trunk, I would like to >> tag and "release". >> >> updating openssl and apr to their latest versi

Re: Tagging tc-native 1.2.17

On 06/06/18 14:05, Rainer Jung wrote: > Did you notice my reply to your r1832987? Oops fixed thanks. Jean-Frederic - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apac

Tagging tc-native 1.2.17

Hi I have been fixed a few issues in tomcat-native trunk, I would like to tag and "release". updating openssl and apr to their latest version is also planed for 1.2.17 Any objections? I have looked to https://bz.apache.org/bugzilla/show_bug.cgi?id=53940 but it is more work that expected. OK to

Re: svn commit: r1832936 - /tomcat/native/trunk/native/src/sslutils.c

On 05/06/18 15:21, Mark Thomas wrote: > On 05/06/18 13:55, jfcl...@apache.org wrote: >> Author: jfclere >> Date: Tue Jun 5 12:55:05 2018 >> New Revision: 1832936 >> >> URL: http://svn.apache.org/viewvc?rev=1832936&view=rev >> Log: >> ssl_ocsp_request() sets the error correctly already. >> >> Modif

Re: svn commit: r1832863 - /tomcat/native/trunk/native/src/sslutils.c

On 04/06/18 18:02, jfcl...@apache.org wrote: > +++ tomcat/native/trunk/native/src/sslutils.c Mon Jun 4 16:02:26 2018 > @@ -532,7 +532,7 @@ static int ssl_verify_OCSP(int ok, X509_ > break; > case OCSP_STATUS_UNKNOWN: > /* correct error code for application errors

Re: [Git migration] Merge strategy

On 22/01/18 22:16, Mark Thomas wrote: > 1. Make the change in master and cherry-pick as required to earlier >versions. This is, essentially, what we do now in svn. That is what most of the github "hosted" projects are doing, so +1 for it. Additionally it prevents forgetting fixing master...

try to release taglibs-standard-1.2.6

Hi, I will try to tag and propose taglibs-standard-1.2.6 for release tomorrow, any comments? Cheers Jean-Frederic - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apac

Re: [POLL] Will you be at ApacheCon NA 2017?

On 01/24/2017 04:46 PM, Mark Thomas wrote: > Hi, > > I'm sure you have all seen the TomcatCon discussion I started on the > users@ list. We are getting enthusiastic support from the ApacheCon > organisers at both the ASF and the Linux Foundation. > > I am starting to think about the overall sched

Re: TomcatCon @ ApacheCon

On 01/09/2017 12:58 PM, Mark Thomas wrote: > All, > > After speaking to various folks at various times about some form of > Tomcat conference, I've finally got around to actually doing something > about it. I'm like to try and do something alongside ApacheCon NA 2017. That makes sense since the A

http://svn.apache.org/viewvc/tomcat/taglibs/standard/ in git?

Hi, Anyone knows we have a git mirror of the taglibs? What would be the process to get it? Ticket to infra? Cheers Jean-Frederic - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h

Re: JSSE-based crypto performance

On 09/29/2016 08:35 PM, Christopher Schultz wrote: > All, > > In the past few years, jfclere has been dong some performance testing > with JSSE-based crypto versus OpenSSL-based crypto, and it had always > been clear that the pure-Java crypto was slower by orders of magnitude. Correct, it is stil

Re: [VOTE] Release Apache Tomcat Native 1.2.8

On 06/28/2016 10:25 PM, Mark Thomas wrote: > Version 1.2.8 includes the following changes: > > - Fix OCSP / no OCSP status of Windows builds > - Improve handling of OS level EAGAIN return codes > - Fix a potential performance problem on Linux and OSX > > The proposed release artefacts can be fou

Re: svn commit: r1750514 - in /tomcat/native/trunk: native/src/ssl.c xdocs/miscellaneous/changelog.xml

On 06/28/2016 04:05 PM, ma...@apache.org wrote: > + Correct a potential performance problem identified by Nate Clark due to > + Tomcat Native providing OpenSSL with thread identifiers poorly suited > to > + the hash function used by OpenSSL when selecting a bucket for the hash > +

Re: OpenSSL without APR experiment

On 06/27/2016 06:07 PM, Rémy Maucherat wrote: > 2016-06-27 17:52 GMT+02:00 Mark Thomas : > >> Is the performance any different from NIO[2] + tc-native 1.2 + OpenSSL? >> If I recall correctly, when I asked previously you said APR/native >> generally had better performance. >> > > The performance i

Re: Timescale for 8.0.x EOL

On 06/20/2016 12:12 PM, Mark Thomas wrote: > Since it seems there is some interest in maintaining 8.0.x beyond > September, how about we announce that: > - the monthly release cycle for 8.0.x will end in September > - new features and bug fixes are unlikely to be back-ported from that > point > -

Re: Timescale for 8.0.x EOL

On 06/14/2016 02:05 PM, Rémy Maucherat wrote: > 2016-06-14 10:31 GMT+02:00 Mark Thomas : > >> On 14/06/2016 09:00, Emmanuel Bourg wrote: >>> Le 13/06/2016 à 17:47, Mark Thomas a écrit : Now we have a stable release of 8.5.x, I'd like to finialise the end of life date for 8.0.x so we can

Re: svn commit: r1741984 - in /tomcat/trunk: java/org/apache/coyote/ java/org/apache/coyote/ajp/ java/org/apache/coyote/http11/ java/org/apache/coyote/http11/upgrade/ java/org/apache/coyote/http2/ web

Cool now the following h2 proxy configuration of httpd (trunk) works: +++ Protocols h2 http/1.1 ProtocolsHonorOrder on SSLEngine on ProxyPass "/" "h2c://localhost:8003/" +++ and h2load http://localhost:8003/ works too. On 8003 I have the tomcat running configured as: +++

Re: Time for tc-native 1.2.6

On 04/18/2016 05:03 PM, Rainer Jung wrote: > Hi Mark, > > Am 18.04.2016 um 16:37 schrieb Mark Thomas: >> I'd like to get the next tc-native release out before the end of the >> month so the next round of Tomcat releases can pick it up - particularly >> the cert chain from Java keystore fix. >> >>

Re: [VOTE] Release Apache Tomcat 8.5.0

On 03/17/2016 09:00 PM, Mark Thomas wrote: > [x] Alpha - go ahead and release as 8.5.0 I have failure in the following tests: +++ [concat] TEST-org.apache.tomcat.util.net.openssl.ciphers.TestCipher.NIO.txt [concat] TEST-org.apache.tomcat.util.net.openssl.ciphers.TestCipher.NIO2.txt [con

Re: [VOTE] Release Apache Tomcat 8.5.0

On 03/18/2016 03:47 PM, Mark Thomas wrote: > On 18/03/2016 14:44, jean-frederic clere wrote: >> On 03/17/2016 09:00 PM, Mark Thomas wrote: >>> [x] Alpha - go ahead and release as 8.5.0 >> >> I have failure in the following tests:

Re: Tomcat 8.next

On 02/25/2016 02:52 PM, Rémy Maucherat wrote: > b) A more radical option is to use 9 as 8.x but remove the Servlet API > changes. This would force Java 8 and many incompatible changes. That looks the best for me, tomcat-8.5.x Cheers Jean-Frederic

Re: Tomcat 8.next

On 03/01/2016 11:30 PM, Rémy Maucherat wrote: > 2016-03-01 23:12 GMT+01:00 Mark Thomas : > >> To summarise where I think this discussion is going: >> >> - Create 8.5.x from 9.0.x with the following changes >> - revert all changes to spec APIs >> > > Yes. Do we have a plan when everyone wants to

Re: NIO + JSSE + NIO + OpenSSL

On 02/15/2016 11:30 AM, Rémy Maucherat wrote: > 2016-02-15 10:45 GMT+01:00 Mark Thomas : > >> Looks like such a claim is indeed over simplified. >> >> Having tweaking the test so the same cipher is used, NIO+JSSE is about >> 10% faster than NIO+OpenSSL :( >> >> Enabling direct buffers didn't seem

[ANN] Apache Tomcat 6.0.45 available

The Apache Tomcat team announces the immediate availability of Apache Tomcat 6.0.45. Apache Tomcat is an open source software implementation of the Java Servlet, JavaServer Pages and Java Expression Language technologies. This release contains a number of bug fixes and improvements compared to ve

[RESULT] [VOTE] Release Apache Tomcat 6.0.45

The following votes were cast: Binding: +1: markt, remm, violetagg, jfclere This vote therefore passes. Thanks to every one who tested and/or voted. I'll start the final release steps shortly. Cheers Jean-Frederic - To unsubs

Re: [VOTE] Release Apache Tomcat 6.0.45

On 02/01/2016 07:52 PM, jean-frederic clere wrote: > The proposed Apache Tomcat 6.0.45 release is now available for voting. > > It can be obtained from: > https://dist.apache.org/repos/dist/dev/tomcat/tomcat-6/v6.0.45/ > The Maven staging repo is: > https://repository.

Re: [VOTE] Release Apache Tomcat 9.0.0.M3

On 02/04/2016 02:38 PM, jean-frederic clere wrote: > That looks like something different in the openssl configuration, if > someone has an hint I can try to find the problem. Release first and I will look after the release ;-) Cheers Jean-Fr

Re: [VOTE] Release Apache Tomcat 9.0.0.M3

On 02/03/2016 07:08 PM, Mark Thomas wrote: > On 03/02/2016 16:20, jean-frederic clere wrote: >> On 02/02/2016 01:20 AM, Mark Thomas wrote: >>> The proposed 9.0.0.M3 release is: >>> [ ] Broken - do not release >>> [X] Alpha - go ahead and release as 9.0.0.

Re: [VOTE] Release Apache Tomcat 9.0.0.M3

On 02/02/2016 01:20 AM, Mark Thomas wrote: > The proposed 9.0.0.M3 release is: > [ ] Broken - do not release > [X] Alpha - go ahead and release as 9.0.0.M3 I have the following errors: +++ hudson@neo2 logs]$ grep -l FAILED *.txt TEST-org.apache.tomcat.util.net.openssl.ciphers.TestCipher.APR.txt TE

Re: svn commit: r1713220 - /tomcat/native/trunk/native/src/sslcontext.c

On 02/03/2016 05:01 PM, Christopher Schultz wrote: > Jean-Frederic, > > On 11/8/15 5:34 AM, jfcl...@apache.org wrote: >> Author: jfclere Date: Sun Nov 8 10:34:31 2015 New Revision: >> 1713220 > >> URL: http://svn.apache.org/viewvc?rev=1713220&view=rev Log: >> Allow to use raw (well keystore) ce

Re: [VOTE] Release Apache Tomcat 6.0.45

On 02/03/2016 02:22 PM, Mark Thomas wrote: > On 01/02/2016 18:52, jean-frederic clere wrote: >> The proposed Apache Tomcat 6.0.45 release is now available for voting. >> >> It can be obtained from: >> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-6/v6.0.45/ &

Re: svn commit: r1728005 - in /tomcat/tags/TOMCAT_9_0_0_M3: ./ build.properties.default webapps/docs/changelog.xml

On 02/03/2016 09:52 AM, Mark Thomas wrote: > On 03/02/2016 07:53, jean-frederic clere wrote: >> On 02/01/2016 09:51 PM, ma...@apache.org wrote: >>> Author: markt >>> Date: Mon Feb 1 20:51:24 2016 >>> New Revision: 1728005 >>> >>> URL: htt

Re: svn commit: r1728005 - in /tomcat/tags/TOMCAT_9_0_0_M3: ./ build.properties.default webapps/docs/changelog.xml

On 02/01/2016 09:51 PM, ma...@apache.org wrote: > Author: markt > Date: Mon Feb 1 20:51:24 2016 > New Revision: 1728005 > > URL: http://svn.apache.org/viewvc?rev=1728005&view=rev > Log: > Tag 9.0.0.M3 > > Added: > tomcat/tags/TOMCAT_9_0_0_M3/ > - copied from r1727998, tomcat/trunk/ W

[VOTE] Release Apache Tomcat 6.0.45

The proposed Apache Tomcat 6.0.45 release is now available for voting. It can be obtained from: https://dist.apache.org/repos/dist/dev/tomcat/tomcat-6/v6.0.45/ The Maven staging repo is: https://repository.apache.org/content/repositories/orgapachetomcat-1061/ The svn tag is: http://svn.apache.org/

Re: tagging tomcat 6.0.45 (try2)

On 01/31/2016 07:47 PM, Konstantin Kolinko wrote: > 2016-01-30 15:54 GMT+03:00 Konstantin Kolinko : >> 2016-01-29 18:50 GMT+03:00 jean-frederic clere : >>> Hi, >>> >>> I am planning to test and tag tomcat 6.0.45 during the week-end. >>> >>> M

tagging tomcat 6.0.45 (try2)

Hi, I am planning to test and tag tomcat 6.0.45 during the week-end. Mark has fixed his session stuff and the openssl we use isn't affected with the latest vulnerability. Any objections? Cheers Jean-Frederic - To unsubscribe,

Re: openssl 1.0.2f released

On 01/28/2016 08:48 PM, Mark Thomas wrote: > On 28/01/2016 15:47, Rainer Jung wrote: >> My first thoughts: >> >> - DH small subgroups (CVE-2016-0701) >> >> Our native code sets SSL_OP_SINGLE_DH_USE in sslcontext.c (in the native >> impl of SSLContext.make()). This is true for trunk and 1.1.x. This

Re: [VOTE-RESTARTED] Release Apache Tomcat Native 1.2.4

On 01/11/2016 03:10 PM, Giorgio Zoppi wrote: > Jean, > trying to move to CMake for making portable? That might be something to look at my previous tries with CMake weren't successful but feel free to contribute. Cheers Jean-Frederic --

dropping windows ia64 in Tomcat6

Hi, I would like to drop Itanium support in the windows binaries, we have dropped it in native 1.1.34 so we can't have a complete Itanium in Tomcat 6.0.45. Comments? Cheers Jean-Frederic - To unsubscribe, e-mail: dev-unsubscr

Re: tagging tomcat 6.0.45

On 01/08/2016 07:27 PM, Konstantin Kolinko wrote: > 2016-01-08 17:21 GMT+03:00 jean-frederic clere : >> Hi, >> >> I am planning to test and tag tomcat 6.0.45 during the week-end. > > 1) A bug in a new feature: > https://bz.apache.org/bugzilla/show_bug.cgi?id=5

Re: tagging tomcat 6.0.45

On 01/08/2016 11:28 PM, Mark Thomas wrote: > On 08/01/2016 14:21, jean-frederic clere wrote: >> Hi, >> >> I am planning to test and tag tomcat 6.0.45 during the week-end. >> >> Any objections? > > I'm working on some session stuff that really should

tagging tomcat 6.0.45

Hi, I am planning to test and tag tomcat 6.0.45 during the week-end. Any objections? Cheers Jean-Frederic - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org

Re: [VOTE-RESTARTED] Release Apache Tomcat Native 1.2.4

On 01/06/2016 08:45 PM, Mark Thomas wrote: > On 06/01/2016 19:34, Rainer Jung wrote: >> Hi Mark, >> >> there's no file bin/openssl.exe in the Windows binariy zip files. >> >> It existed in 1.2.3 but was also missing for 1.2.2. It also exists in >> 1.2.0 and 1.2.1 as well as 1.1.33 and 1.1.34. So I

Re: [VOTE-RESTARTED] Release Apache Tomcat Native 1.2.4

On 01/06/2016 01:56 PM, Mark Thomas wrote: > On 05/01/2016 15:46, Mark Thomas wrote: >> Version 1.2.4 includes the following change: >> >> - Renegotiation improvements >> >> The proposed release artefacts can be found at [1], >> and the build was done using tag [2]. >> >> The Apache Tomcat Native 1

Re: Time for a 6.0.x release in January?

On 12/22/2015 10:23 AM, Mark Thomas wrote: > All, > > It has been over 6 months since the last 6.0.x release. The changelog > for 6.0.x is reasonably long so it is looks like time for a release. > > Jean-Frederic or I have done the last few releases. Are there any > volunteers for the release man

Re: svn commit: r1715732 - /tomcat/trunk/java/org/apache/tomcat/util/net/openssl/OpenSSLUtil.java

On 11/23/2015 03:35 PM, Rémy Maucherat wrote: > 2015-11-23 15:31 GMT+01:00 jean-frederic clere : > >> On 11/23/2015 01:56 PM, Konstantin Kolinko wrote: >>> TW, a changelog, documentation =? >> >> Here I have a small question. In fact it possible to mix ope

Re: svn commit: r1715732 - /tomcat/trunk/java/org/apache/tomcat/util/net/openssl/OpenSSLUtil.java

On 11/23/2015 01:56 PM, Konstantin Kolinko wrote: > TW, a changelog, documentation =? Here I have a small question. In fact it possible to mix open pem and jsse keystore, is it something we want to support? I try it but removed it because I found it very confusing. Thanks for the review I will f

Re: svn commit: r1715414 - in /tomcat/trunk: java/org/apache/catalina/ java/org/apache/catalina/core/ java/org/apache/catalina/mapper/ java/org/apache/catalina/mbeans/ java/org/apache/catalina/storeco

On 11/22/2015 05:03 PM, Mark Thomas wrote: > I've fixed the digester rules in trunk so you shouldn't need your patch > any more. Thanks Jean-Frederic - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional com

Re: svn commit: r1715414 - in /tomcat/trunk: java/org/apache/catalina/ java/org/apache/catalina/core/ java/org/apache/catalina/mapper/ java/org/apache/catalina/mbeans/ java/org/apache/catalina/storeco

On 11/22/2015 01:25 PM, Mark Thomas wrote: > On 22 November 2015 10:40:07 GMT+00:00, jean-frederic clere > wrote: >> On 11/20/2015 09:28 PM, ma...@apache.org wrote: >>> -public void setContainer(Container container) { >>> -setContainer((Engine) con

Re: svn commit: r1715414 - in /tomcat/trunk: java/org/apache/catalina/ java/org/apache/catalina/core/ java/org/apache/catalina/mapper/ java/org/apache/catalina/mbeans/ java/org/apache/catalina/storeco

On 11/20/2015 09:28 PM, ma...@apache.org wrote: > -public void setContainer(Container container) { > -setContainer((Engine) container); Hm does that explains why I get: +++ 22-Nov-2015 10:34:43.641 SEVERE [main] org.apache.tomcat.util.digester.Digester.endElement End event threw excep

Re: Tomcat Native 1.2.2

On 11/04/2015 02:00 AM, Mark Thomas wrote: > I've just finished running the unit tests for APR on OSX with the > current 1.2.x trunk and 9.0.x, 8.0.x and 7.0.x and all pass. > > I plan to tag 1.2.2 tomorrow morning and will hopefully be able to start > a new vote later in the day. I am trying som

Re: [VOTE][RESULT] Release Apache Tomcat Native 1.2.0

On 10/30/2015 02:19 PM, Henri Gomez wrote: > Hi all > > I tried to build 1.2.0 today, from tarball found here : > > http://www.apache.org/dist/tomcat/tomcat-connectors/native/1.2.0/source/tomcat-native-1.2.0-src.tar.gz > > cd native > ./configure > > configure: error: cannot find install-sh, in

Re: [VOTE] Switch 6.0.x from RTC to CTR

On 10/28/2015 11:42 PM, Mark Thomas wrote: > [X] Switch 6.0.x to CTR Basically there are so few fixes in 6.0.x that the RTC blocks any move in 6.0.x Cheers Jean-Frederic - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.

Re: Tomcat 9.0.x, tc-native and itanium support

On 10/22/2015 12:31 PM, Mark Thomas wrote: > how do folks feel about dropping the Itanium build from > the binary packages for tcnative 1.2.x and Tomcat 9.0.x? DROP IT!!! Cheers Jean-Frederic - To unsubscribe, e-mail: dev-unsu

Re: [VOTE] Release Apache Tomcat Native 1.2.0

On 10/22/2015 12:47 PM, Mark Thomas wrote: > Version 1.2.0 includes the following changes: > - Windows binaries built with APR 1.5.1 and OpenSSL 1.0.2d > - ALPN support > > The proposed release artefacts can be found at [1], > and the build was done using tag [2]. > > The Apache Tomcat Native 1.2

Re: Plan for 9.0.0.RC1

On 10/23/2015 03:12 PM, Mark Thomas wrote: > On 23/10/2015 12:26, Mark Thomas wrote: >> On 23/10/2015 11:54, Rémy Maucherat wrote: >>> 2015-10-23 10:12 GMT+02:00 Mark Thomas : >>> I've made a little progress. I can see in Wireshark that the initial HTTP/2 connection preface is s

Re: Plan for 9.0.0.RC1

On 10/22/2015 05:19 PM, Rémy Maucherat wrote: > 2015-10-22 16:56 GMT+02:00 Mark Thomas : > >> On 19/10/2015 13:38, Rémy Maucherat wrote: >>> 2015-10-19 14:24 GMT+02:00 Mark Thomas : >> Anything reproducible? >>> >>> Chrome mostly, Firefox is a bit nicer for me. I use JF's ApacheCon >> example

Re: Plan for 9.0.0.RC1

On 10/19/2015 02:24 PM, Mark Thomas wrote: On 19/10/2015 12:27, Rémy Maucherat wrote: 2015-10-16 12:26 GMT+02:00 Mark Thomas : I think now is the time to give users a chance to use 9.0.x so we can start gathering feedback on what works and what doesn't. I'm still having problems with HTTP/2

Re: svn commit: r1706858 - /tomcat/trunk/java/org/apache/coyote/http2/Http2UpgradeHandler.java

On 10/05/2015 05:47 PM, r...@apache.org wrote: Author: remm Date: Mon Oct 5 15:47:21 2015 New Revision: 1706858 URL: http://svn.apache.org/viewvc?rev=1706858&view=rev Log: A flush seems to be missing when writing a window update [for consistency at least]. It seems it helps: with my demo fro

Re: AJP Protocol enhancements

On 09/25/2015 10:51 AM, Rémy Maucherat wrote: 2015-09-25 9:29 GMT+02:00 Mark Thomas : I'm not so sure. HTTP/2 explicitly doesn't support HTTP upgrade. The HTTP/2 spec expects protocols like WebSocket to use ALPN. Despite this, there has been work to try and layer WebSocket on top of HTTP/2. At

Re: svn commit: r1702962 - /tomcat/trunk/java/org/apache/tomcat/util/net/NioEndpoint.java

On 09/14/2015 04:44 PM, r...@apache.org wrote: Author: remm Date: Mon Sep 14 14:44:06 2015 New Revision: 1702962 URL: http://svn.apache.org/r1702962 Log: Similar to NIO2, async NIO sendfile needs to deallocate and recycle the buffer. That fixed the java.lang.OutOfMemoryError: Direct buffer mem

Re: NIO sendfile

On 09/14/2015 10:44 AM, jean-frederic clere wrote: On 09/14/2015 10:21 AM, Mark Thomas wrote: On 14/09/2015 09:16, jean-frederic clere wrote: Hi, I have noted that "sendfile" with the NIO connector doesn't fill the CPU on a load test I am testing HTTP/1.1 with: sslImp

Re: NIO sendfile

On 09/14/2015 10:21 AM, Mark Thomas wrote: On 14/09/2015 09:16, jean-frederic clere wrote: Hi, I have noted that "sendfile" with the NIO connector doesn't fill the CPU on a load test I am testing HTTP/1.1 with: sslImplementationName="org.apache.tomcat.util.net.openssl.O

NIO sendfile

Hi, I have noted that "sendfile" with the NIO connector doesn't fill the CPU on a load test I am testing HTTP/1.1 with: sslImplementationName="org.apache.tomcat.util.net.openssl.OpenSSLImplementation" 16 ab creating 80 connections requesting files from 4K to 32M NIO2 works as excepted with th

Re: ApacheCon tomcat9 or tomcat-trunk

On 09/10/2015 02:10 PM, Rémy Maucherat wrote: I don't exactly know what is in trunk that couldn't be in a 8.1. The removals of existing features make a lot of the rest probably acceptable. The EE schedule saying 2017, it's really a long time to be in beta [or not maybe;) ]. HTTP/2 seems t

<    1   2   3   4   5   6   7   8   >