Mark,
Thanks for RMing.
On 10/22/26 11:00 AM, Mark Thomas wrote:
The key differences in version 2.0.17 compared to 2.0.16 are:
- Windows binaries built with OpenSSL 3.5.9
- Add TLS PSK support
- Align OCSP checks with JSSE so that a certificate that is itself a
trust anchor (whether a self-signed root or a certificate trusted
directly via the configured trust store) is not subject to OCSP
checking
The 2.0.x branch is primarily intended for use with Tomcat 10.1.x
onwards but can be used with earlier versions as long as the APR/native
connector is not used.
The proposed release artifacts can be found at [1],
and the build was done using tag [2].
The Apache Tomcat Native 2.0.17 release is
[ ] Stable, go ahead and release
[ ] Broken because of ...
+1 for stable release.
Builds on MacOS aarch64 without errors or warnings with OpenSSL 3.5.9.
Builds on MacOS aarch64 with 2 warnings with OpenSSL 4.0.3.
Unit tests all pass on main on MacOS aarch64.
Details:
* Environment
* OS: Darwin 25.6.0 arm64
* cc: Apple clang version 21.0.0 (clang-2100.3.34.2)
* make: GNU Make 3.81
* OpenSSL: OpenSSL 3.5.9 29 Sep 2026 (Library: OpenSSL 3.5.9 29 Sep 2026)
* tcnative statically-linked OpenSSL version: 3.5.9
* APR: 1.7.6
* Java: OpenJDK 64-Bit Server VM Temurin-25.0.4.1+1 (build
25.0.4.1+1-LTS, mixed mode, sharing)
* Valid SHA-512 signature for
tomcat-native-2.0.17-openssl-3.5.9-win32-bin.zip
* Valid GPG signature for tomcat-native-2.0.17-openssl-3.5.9-win32-bin.zip
* Valid SHA512 signature for tomcat-native-2.0.17-win32-src.zip
* Valid GPG signature for tomcat-native-2.0.17-win32-src.zip
* Valid SHA512 signature for tomcat-native-2.0.17-src.tar.gz
* Valid GPG signature for tomcat-native-2.0.17-src.tar.gz
* Source Zip and tarball: !! NOT SAME
* tcnative builds cleanly
-chris
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
