Am 01.10.25 um 11:57 schrieb Rémy Maucherat:
The proposed Apache Tomcat 9.0.110 release is now available for voting.
The notable changes compared to 9.0.109 are:
- Add specific certificate selection code for TLS 1.3 supporting post
quantum cryptography. Certificates defined with type MLDSA will be
selected depending on the TLS client hello.
- Add groups attribute on SSLHostConfig allowing to restrict which
groups can be enabled on the SSL engine.
- Store HTTP/1.1 request headers using the original case for the header
name rather than forcing it to lower case.
For full details, see the changelog:
https://nightlies.apache.org/tomcat/tomcat-9.0.x/docs/changelog.html
It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-9/v9.0.110/
The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1561
The tag is:
https://github.com/apache/tomcat/tree/9.0.110
dbccb8cba2bf667a0e1b5da02187bda3e1a74120
The proposed 9.0.110 release is:
[ ] -1, Broken - do not release
[X] +1, Stable - go ahead and release as 9.0.110
+1 to release.
Reproducibility of the build checked (including the Windows installer)
on Linux Mint 22.2. OK after setting LANG. Checked manually plus with
"ant verify-release".
Original Windows installer signature verified with osslsigncode.
dist file list correct, hashes OK, gpg signatures OK.
Unit tests ran on platforms
- RHEL 6, 7, 8 and 9, SLES 11, 12 and 15, Solaris 10 and 11
using
- recent patch versions of JDK 1.8.0, 11, 17, 21, 25 and 26 (EA 16)
from
- Eclipse Adoptium, Azul Zulu, Amazon Coretto, Oracle, RedHat and
OpenJDK (for 26)
where available.
Also tested with
- tcnative 1.3.1, 2.0.9 and panama
based on
- OpenSSL 3.0.18, 3.4.3, 3.5.4 and 3.6.0.
All test runs fine, except for
- the usual sporadic crashes with tcnative during shutdown.
- sporadic, but a bit too frequent failures in
org.apache.coyote.http2.TestCancelledUpload
(no regression; for details see mail about 11.0.10)
Thanks for RM!
Best regards,
Rainer
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
