Rémy,

Thanks for RMing

On 10/1/25 5:57 AM, Rémy Maucherat wrote:
The proposed Apache Tomcat 9.0.110 release is now available for voting.

The notable changes compared to 9.0.109 are:

- Add specific certificate selection code for TLS 1.3 supporting post
    quantum cryptography. Certificates defined with type MLDSA will be
    selected depending on the TLS client hello.

- Add groups attribute on SSLHostConfig allowing to restrict which
    groups can be enabled on the SSL engine.

- Store HTTP/1.1 request headers using the original case for the header
    name rather than forcing it to lower case.

For full details, see the changelog:
https://nightlies.apache.org/tomcat/tomcat-9.0.x/docs/changelog.html

It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-9/v9.0.110/

The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1561

The tag is:
https://github.com/apache/tomcat/tree/9.0.110
dbccb8cba2bf667a0e1b5da02187bda3e1a74120

The proposed 9.0.110 release is:
[ ] -1, Broken - do not release
[ ] +1, Stable - go ahead and release as 9.0.110

+1 for stable release

The build is 100% reproducible on MacOS aarch64 and all the unit test pass. I had to re-run the test for tomcat.util.net.TestSSLHostConfigCompat for some reason.

-chris

Details:

* Environment
* Java (build): openjdk version "25" 2025-09-16 LTS OpenJDK Runtime Environment Temurin-25+36 (build 25+36-LTS) OpenJDK 64-Bit Server VM Temurin-25+36 (build 25+36-LTS, mixed mode, sharing) * Java (test): openjdk version "25" 2025-09-16 LTS OpenJDK Runtime Environment Temurin-25+36 (build 25+36-LTS) OpenJDK 64-Bit Server VM Temurin-25+36 (build 25+36-LTS, mixed mode, sharing) * Ant: Apache Ant(TM) version 1.10.15 compiled on August 25 2024
*  OS:              Darwin 24.6.0 arm64
*  cc:              Apple clang version 17.0.0 (clang-1700.0.13.5)
*  make:            GNU Make 3.81
* OpenSSL: OpenSSL 3.5.2 5 Aug 2025 (Library: OpenSSL 3.5.2 5 Aug 2025)
*  APR:             1.7.6
*
* Valid SHA-512 signature for apache-tomcat-9.0.110.zip
* Valid GPG signature for apache-tomcat-9.0.110.zip
* Valid SHA-512 signature for apache-tomcat-9.0.110.tar.gz
* Valid GPG signature for apache-tomcat-9.0.110.tar.gz
* Valid SHA-512 signature for apache-tomcat-9.0.110.exe
* Valid GPG signature for apache-tomcat-9.0.110.exe
* Valid Windows Digital Signature for apache-tomcat-9.0.110.exe
* Valid SHA512 signature for apache-tomcat-9.0.110-src.zip
* Valid GPG signature for apache-tomcat-9.0.110-src.zip
* Valid SHA512 signature for apache-tomcat-9.0.110-src.tar.gz
* Valid GPG signature for apache-tomcat-9.0.110-src.tar.gz
*
* Binary Zip and tarball: Same
* Source Zip and tarball: Same
*
* Building dependencies returned: 0
* Tomcat builds cleanly
* tcnative builds cleanly
* Junit Tests: PASSED
*
* Signature MATCH for bin/apache-tomcat-9.0.110-deployer.tar.gz
* Signature MATCH for bin/apache-tomcat-9.0.110-deployer.zip
* Signature MATCH for bin/apache-tomcat-9.0.110-fulldocs.tar.gz
* Signature MATCH for bin/apache-tomcat-9.0.110-windows-x64.zip
* Signature MATCH for bin/apache-tomcat-9.0.110-windows-x86.zip
* Signature MATCH for bin/apache-tomcat-9.0.110.exe
* Signature MATCH for bin/apache-tomcat-9.0.110.tar.gz
* Signature MATCH for bin/apache-tomcat-9.0.110.zip
* Signature MATCH for src/apache-tomcat-9.0.110-src.tar.gz
* Signature MATCH for src/apache-tomcat-9.0.110-src.zip
*
*
*                 SSSS                   SSSS
*                 S  SS                 SS  S
*                SS   S                 S   SS
*                SS   S                 S   SS
*               SS   SS                 S   SS
*              SS    S                  S    SS
*            SSS    SS                  SS    SSS
*           SS     SS                    SS     SS
*          SS      SS                    SS      SS
*         SS       S                       S       SS
*        SS        SSSSSSS           SSSSSSS        SS
*    SSSSS               SSS       SSS               SSSS
*   SSS            SSSS    SS     SS    SSSS            SS
*  SS            SSS  SSS   S     S   SSS  SSS           S
*  S            SSS        SS     SS        SSS           S
*  S            SSSSSS    SS       SS    SSSSSS           S
*  S           SS    SSSSSSS       SSSSSSS    SS          S
*  S           SSSS       SS       SS       SSSS          S
*  SS         SS  SSSSSSSSS         SSSSSSSSS  SS        S
*   SSSS     SSSS        S           S        SSSS      SS
*    SSSSS    SSSSSS    SS           SS    SSSSSS    SSSS
*        SS  SS    SSSSSS             SSSSSS    SS  SS
*         SSS SSS     S                S     SSS SSS
*           SSSSSSSSSS                  SSSSSSSSS
*
*
* All signatures are verified; the build appears to be 100% reproducible.


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to