Hi guys, this may be a little offtopic, but I postet a fix for the native-library at bug https://bz.apache.org/bugzilla/show_bug.cgi?id=56108.
The fix is based on the mod_ssl implementation of the httpd project for the DH-based key exchange. This ensures that the used DH-Cipher is at least the size of the private-key, otherwise the Cipher has a length of only 512 or 1024 bits. Is it possible to release this fix within Tomcat 7.0.60? thanks, Robert Robert Paasche Senior Developer pripares GmbH Altheimer Eck 2 80331 München Tel +49 (0)89 45 22 808 - 30 Fax +49 (0)89 45 22 808 - 58 Mail r.paas...@pripares.com Web www.pripares.com Handelsregister: Registergericht München HRB 138701 Sitz der Gesellschaft: München Geschäftsführer: Aßmann Christoph, Ertl Andreas Diese E-Mail enthält vertrauliche und/oder rechtlich geschützte Informationen. Wenn Sie nicht der richtige Adressat sind oder diese E-Mail irrtümlich erhalten haben, informieren Sie bitte sofort den Absender und löschen Sie diese Mail. Das unerlaubte Kopieren sowie die unbefugte Weitergabe dieser Mail und der darin enthaltenen Informationen sind nicht gestattet. This e-mail may contain confidential and/or privileged information. If you are not the intended recipient (or have received this e-mail in error) please notify the sender immediately and delete this e-mail. Any unauthorized copying, disclosure or distribution of the material in this e-mail is strictly forbidden. 2015-03-10 15:44 GMT+01:00 Christopher Schultz <ch...@christopherschultz.net >: > Mark, > > On 3/8/15 12:58 PM, Mark Thomas wrote: > > On 07/03/2015 19:16, Christopher Schultz wrote: > >> Violetta, > >> > >> On 3/5/15 2:39 PM, Violeta Georgieva wrote: > >>> I plan to start preparing 7.0.60 for voting. > >>> > >>> If you want to add something to this release please reply here. > >> > >> Mark's got the input half the problem with AjpNioProcessor fixed, I > >> suspect he'll have the output half fixed very soon. > > > > Thanks for the vote of confidence. I suspect - like the input - putting > > together the test case is going to take most of the time. I'm looking at > > this now. Should have something by the end of today. > > Looks good to me in Tomcat 7.0.x trunk. > > Violetta, thanks for waiting a bit. I'm okay to release, thought > Konstantin and Jeremy might want to get a few fixes in for the bundled > JSTL. > > Thanks, > -chris > >
