Hi all,

I hope this message finds you well. I am writing to seek clarifications and
provide some suggestions regarding the Tomcat Native binary distributions.

Firstly, I have noticed that openssl.exe is included in the Tomcat Native
binary distributions. It appears that the .dll file is sufficient for the
component to function correctly. Thus, my question is why is openssl.exe
included in the distribution? If openssl.exe is not essential, it might be
worth considering its removal from the distribution to minimize the
vulnerability footprint.

Secondly, I observed that Tomcat Native 1.3.0 does not include the .pdb
file, which is present in version 2.0.7. I would like to confirm if this is
intentional.

Additionally, Tomcat Native 1.3.0 contains a deprecated VERSIONS file.

I would also like to suggest pruning the "Building" and "Running the tests"
sections in the README.txt for both versions. These sections are not
applicable to the binary distribution and their exclusion could make the
documentation more concise and user-friendly.

Lastly, I noticed a minor issue, the NOTICE file for both releases contains
an outdated copyright date.

Best regards,
Dimitris

Reply via email to