Hi all, I hope this message finds you well. I am writing to seek clarifications and provide some suggestions regarding the Tomcat Native binary distributions.
Firstly, I have noticed that openssl.exe is included in the Tomcat Native binary distributions. It appears that the .dll file is sufficient for the component to function correctly. Thus, my question is why is openssl.exe included in the distribution? If openssl.exe is not essential, it might be worth considering its removal from the distribution to minimize the vulnerability footprint. Secondly, I observed that Tomcat Native 1.3.0 does not include the .pdb file, which is present in version 2.0.7. I would like to confirm if this is intentional. Additionally, Tomcat Native 1.3.0 contains a deprecated VERSIONS file. I would also like to suggest pruning the "Building" and "Running the tests" sections in the README.txt for both versions. These sections are not applicable to the binary distribution and their exclusion could make the documentation more concise and user-friendly. Lastly, I noticed a minor issue, the NOTICE file for both releases contains an outdated copyright date. Best regards, Dimitris