To unsubscribe, e-mail: [email protected] . Dimitris
On Fri, Oct 16, 2026 at 3:47 AM Allen Prescott <[email protected]> wrote: > Unsubscribe PLEASE!! > > ________________________________ > From: [email protected] <[email protected]> > Sent: Friday, 16 October 2026 05:32:17 > To: [email protected] <[email protected]> > Subject: (tomcat) branch main updated: Ensure the Tomcat Native based > OpenSSL SSLContext does not drop TLS 1.3 when rebuilding the list of > enabled protocols during initialization. > > This is an automated email from the ASF dual-hosted git repository. > > dsoumis pushed a commit to branch main > in repository > https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgitbox.apache.org%2Frepos%2Fasf%2Ftomcat.git&data=05%7C02%7C%7Ca07e19c2822c4a9e3f5108df2b03e4ed%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C639276967859413456%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=lHftvmL3ZSPDIURt1GPxhP%2Fv5VRBcHxlt3OZ6y7x4QE%3D&reserved=0 > <https://gitbox.apache.org/repos/asf/tomcat.git> > > > The following commit(s) were added to refs/heads/main by this push: > new ee868c8efd Ensure the Tomcat Native based OpenSSL SSLContext does > not drop TLS 1.3 when rebuilding the list of enabled protocols during > initialization. > ee868c8efd is described below > > commit ee868c8efdceb6332dd64776083d0c8c50368e4a > Author: Dimitris Soumis <[email protected]> > AuthorDate: Thu Oct 15 18:48:46 2026 +0300 > > Ensure the Tomcat Native based OpenSSL SSLContext does not drop TLS > 1.3 when rebuilding the list of enabled protocols during initialization. > --- > java/org/apache/tomcat/util/net/openssl/OpenSSLContext.java | 3 +++ > webapps/docs/changelog.xml | 5 +++++ > 2 files changed, 8 insertions(+) > > diff --git a/java/org/apache/tomcat/util/net/openssl/OpenSSLContext.java > b/java/org/apache/tomcat/util/net/openssl/OpenSSLContext.java > index c878b5d70f..619fc78b4c 100644 > --- a/java/org/apache/tomcat/util/net/openssl/OpenSSLContext.java > +++ b/java/org/apache/tomcat/util/net/openssl/OpenSSLContext.java > @@ -525,6 +525,9 @@ public class OpenSSLContext implements > org.apache.tomcat.util.net.SSLContext { > if ((opts & SSL.SSL_OP_NO_TLSv1_2) == 0) { > enabled.add(Constants.SSL_PROTO_TLSv1_2); > } > + if ((opts & SSL.SSL_OP_NO_TLSv1_3) == 0) { > + enabled.add(Constants.SSL_PROTO_TLSv1_3); > + } > if ((opts & SSL.SSL_OP_NO_SSLv3) == 0) { > enabled.add(Constants.SSL_PROTO_SSLv3); > } > diff --git a/webapps/docs/changelog.xml b/webapps/docs/changelog.xml > index b56e868362..5ccf78ff48 100644 > --- a/webapps/docs/changelog.xml > +++ b/webapps/docs/changelog.xml > @@ -459,6 +459,11 @@ > buffer used by the BIO pair. Patch submitted by Lukas Hellebrandt. > (remm) > </fix> > + <fix> > + Ensure the Tomcat Native based OpenSSL <code>SSLContext</code> > does not > + drop TLS 1.3 when rebuilding the list of enabled protocols during > + initialization. (dsoumis) > + </fix> > <!-- Entries for backport and removal before 12.0.0-M1 below this > line --> > <fix> > Keep the asynchronous timeout in place until the timeout event has > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > >
