Unsubscribe PLEASE!! ________________________________ From: [email protected] <[email protected]> Sent: Friday, 16 October 2026 05:38:44 To: [email protected] <[email protected]> Subject: (tomcat) branch 11.0.x updated: Ensure the Tomcat Native based OpenSSL SSLContext does not drop TLS 1.3 when rebuilding the list of enabled protocols during initialization.
This is an automated email from the ASF dual-hosted git repository. dsoumis pushed a commit to branch 11.0.x in repository https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgitbox.apache.org%2Frepos%2Fasf%2Ftomcat.git&data=05%7C02%7C%7Cb07d9e8e728140e5d23f08df2b04b4ef%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C639276971337457036%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=1%2B1h9sG7gf3gKns27q%2BwBIG7zqLOIGYD0oCJb3Lg%2Few%3D&reserved=0<https://gitbox.apache.org/repos/asf/tomcat.git> The following commit(s) were added to refs/heads/11.0.x by this push: new b5cee02724 Ensure the Tomcat Native based OpenSSL SSLContext does not drop TLS 1.3 when rebuilding the list of enabled protocols during initialization. b5cee02724 is described below commit b5cee027245ac032e5d2e7c8d86c6059207c4d69 Author: Dimitris Soumis <[email protected]> AuthorDate: Thu Oct 15 18:48:46 2026 +0300 Ensure the Tomcat Native based OpenSSL SSLContext does not drop TLS 1.3 when rebuilding the list of enabled protocols during initialization. --- java/org/apache/tomcat/util/net/openssl/OpenSSLContext.java | 3 +++ webapps/docs/changelog.xml | 5 +++++ 2 files changed, 8 insertions(+) diff --git a/java/org/apache/tomcat/util/net/openssl/OpenSSLContext.java b/java/org/apache/tomcat/util/net/openssl/OpenSSLContext.java index 18102be9c7..d8383db463 100644 --- a/java/org/apache/tomcat/util/net/openssl/OpenSSLContext.java +++ b/java/org/apache/tomcat/util/net/openssl/OpenSSLContext.java @@ -488,6 +488,9 @@ public class OpenSSLContext implements org.apache.tomcat.util.net.SSLContext { if ((opts & SSL.SSL_OP_NO_TLSv1_2) == 0) { enabled.add(Constants.SSL_PROTO_TLSv1_2); } + if ((opts & SSL.SSL_OP_NO_TLSv1_3) == 0) { + enabled.add(Constants.SSL_PROTO_TLSv1_3); + } if ((opts & SSL.SSL_OP_NO_SSLv3) == 0) { enabled.add(Constants.SSL_PROTO_SSLv3); } diff --git a/webapps/docs/changelog.xml b/webapps/docs/changelog.xml index 5ce8f143f6..3059636e8a 100644 --- a/webapps/docs/changelog.xml +++ b/webapps/docs/changelog.xml @@ -339,6 +339,11 @@ implementations to set a limit on the maximum depth of nesting. (remm) </fix> + <fix> + Ensure the Tomcat Native based OpenSSL <code>SSLContext</code> does not + drop TLS 1.3 when rebuilding the list of enabled protocols during + initialization. (dsoumis) + </fix> </changelog> </subsection> <subsection name="Web applications"> --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
