Am 22.10.26 um 21:04 schrieb Mark Thomas:
The key differences in version 1.3.10 compared to 1.3.9 are:
- Windows binaries built with OpenSSL 3.5.9
- Restore support for OpenSSL 1.1.1
- Align OCSP checks with JSSE so that a certificate that is itself a
trust anchor (whether a self-signed root or a certificate trusted
directly via the configured trust store) is not subject to OCSP
checking
The proposed release artifacts can be found at [1],
and the build was done using tag [2].
The Apache Tomcat Native 1.3.10 release is
[ ] Stable, go ahead and release
[ ] Broken because of ...
+1 for release
- checked artefacts for completeness
- checked artefact gpg signatures and sha512 hashes
- compared source tarballs against git sources
- checked OpenSSL version in Windows binaries
- checked some consistencies against own jnirelease.sh results
- built it against OpenSSL 3.6.5 and 3.5.9, each on the Platforms SLES
12 and 15 and RHEL 7, 8, 9 and 10 (all x86_64). APR was 1.7.6.
- no build warnings
- tested via TC unit tests with tcnative/OpenSSL but only the SSL/TLS
related tests on the above platforms using TC 11.0.27, 10.1.61 and
9.0.123 with September patch levels of JDK 8, 11, 17, 21, 25, 27 and 28
EA from Adoptium Temurin, Amazon Corretto, Azul Zulu, Oracle, RedHat
and OpenJDK (where available and applicable). Tests TC 9 with JDK 25-28
not yet done.
- No noteworthy test failures, only the usual sporadic failure noise.
Thanks for RM!
Best Regards,
Rainer
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
