On 8/04/2014, at 11:56 pm, Konstantin Kolinko <knst.koli...@gmail.com> wrote:
> 2014-04-08 11:56 GMT+04:00 Mladen Turk <mt...@apache.org>: >> Hi, >> >> I plan to tag JK 1.2.40 pretty soon (probably end of this week) >> We have few bugs in the latest release which requires a new version. > > +1 > > There is also a need for a tc-native build, due to security issue in OpenSSL > https://issues.apache.org/bugzilla/show_bug.cgi?id=56363 > On that subject, does anyone have a HOWTO to get a tcnative build working? I’ve tried with and RHEL 6 and CentOS 6 (cmake is missing /usr/share/cmake/Modules/ExternalProject.cmake) and OS X Mavericks (downloaded apr is trying to include apr_private.h, which is missing). (I was actually looking at the ECDHE support - Mladen looks like he’s across Heartbleed). > I cannot test this now, but from reading the FAQ at > http://heartbleed.com/ there are good chances that the current build > of TC-Native (and included with windows versions of TC8, TC7 etc) is > vulnerable. I think it’s fairly probable given the static linking we do. cheers tim --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
