Re: [VOTE] Release Apache Tomcat 10.1.0-M17

2022-07-14 Thread Han Li



> 2022年7月14日 05:57,Mark Thomas  写道:
> 
> The proposed Apache Tomcat 10.1.0-M17 release is now available for
> voting.
> 
> Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 
> without changes. Java EE applications designed for Tomcat 9 and earlier may 
> be placed in the $CATALINA_BASE/webapps-javaee directory and Tomcat will 
> automatically convert them to Jakarta EE and copy them to the webapps 
> directory.
> 
> The notable changes compared to 10.1.0-M16 are:
> 
> - Implement support for repeatable builds
> 
> - Update the packaged version of the Tomcat Native Library to 2.0.1.
>  This includes Windows binaries built with with OpenSSL 3.0.5.
> 
> - Update experimental Panama modules with support for OpenSSL 3.0+.
>  OpenSSL 1.1 remains supported.
> 
> For full details, see the change log:
> https://nightlies.apache.org/tomcat/tomcat-10.1.x/docs/changelog.html
> 
> It can be obtained from:
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-10/v10.1.0-M17/
> 
> The Maven staging repo is:
> https://repository.apache.org/content/repositories/orgapachetomcat-1382
> 
> The tag is:
> https://github.com/apache/tomcat/tree/10.1.0-M17
> 7a261dff58bc9581317c400b5c0fa4f7ae371fda
> 
> 
> The proposed 10.1.0-M17 release is:
> [ ] Broken - do not release
> [X ] Beta - go ahead and release as 10.1.0-M17 (beta)

All unit tests passed on macOS 12.3.1

Han
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: dev-h...@tomcat.apache.org
> 


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[tomcat] branch main updated: Fix corruption spotted when preparing 10.0.x release

2022-07-14 Thread markt
This is an automated email from the ASF dual-hosted git repository.

markt pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tomcat.git


The following commit(s) were added to refs/heads/main by this push:
 new 537e3b8cdf Fix corruption spotted when preparing 10.0.x release
537e3b8cdf is described below

commit 537e3b8cdf05282fbc2436e85d3fc6c6235d2e66
Author: Mark Thomas 
AuthorDate: Thu Jul 14 09:15:06 2022 +0100

Fix corruption spotted when preparing 10.0.x release
---
 build.xml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/build.xml b/build.xml
index e78581c9f6..586924af45 100644
--- a/build.xml
+++ b/build.xml
@@ -2720,6 +2720,7 @@ gpg.exec=${gpg.exec}
 asf.ldap.username=${release.asfusername}
 
 
   


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[tomcat] branch 10.0.x updated: Fix corruption spotted when preparing 10.0.x release

2022-07-14 Thread markt
This is an automated email from the ASF dual-hosted git repository.

markt pushed a commit to branch 10.0.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git


The following commit(s) were added to refs/heads/10.0.x by this push:
 new a0da8d3853 Fix corruption spotted when preparing 10.0.x release
a0da8d3853 is described below

commit a0da8d3853a525b8bb60a7e7f47fefb14c5237ed
Author: Mark Thomas 
AuthorDate: Thu Jul 14 09:15:06 2022 +0100

Fix corruption spotted when preparing 10.0.x release
---
 build.xml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/build.xml b/build.xml
index 157292d3e7..15dd8b1714 100644
--- a/build.xml
+++ b/build.xml
@@ -2681,6 +2681,7 @@ gpg.exec=${gpg.exec}
 asf.ldap.username=${release.asfusername}
 
 
   


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[tomcat] branch 9.0.x updated: Fix corruption spotted when preparing 10.0.x release

2022-07-14 Thread markt
This is an automated email from the ASF dual-hosted git repository.

markt pushed a commit to branch 9.0.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git


The following commit(s) were added to refs/heads/9.0.x by this push:
 new 4df3f71f27 Fix corruption spotted when preparing 10.0.x release
4df3f71f27 is described below

commit 4df3f71f271da615013195a40e445fc13079e1cd
Author: Mark Thomas 
AuthorDate: Thu Jul 14 09:15:06 2022 +0100

Fix corruption spotted when preparing 10.0.x release
---
 build.xml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/build.xml b/build.xml
index f0d5bdbbd0..2a2bf779bd 100644
--- a/build.xml
+++ b/build.xml
@@ -2663,6 +2663,7 @@ gpg.exec=${gpg.exec}
 asf.ldap.username=${release.asfusername}
 
 
   


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[tomcat] branch 8.5.x updated: Fix corruption spotted when preparing 10.0.x release

2022-07-14 Thread markt
This is an automated email from the ASF dual-hosted git repository.

markt pushed a commit to branch 8.5.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git


The following commit(s) were added to refs/heads/8.5.x by this push:
 new 010f0eba58 Fix corruption spotted when preparing 10.0.x release
010f0eba58 is described below

commit 010f0eba5852a64ab74747c54a0b084ad4b3ea42
Author: Mark Thomas 
AuthorDate: Thu Jul 14 09:15:06 2022 +0100

Fix corruption spotted when preparing 10.0.x release
---
 build.xml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/build.xml b/build.xml
index ad33010644..dee29a27aa 100644
--- a/build.xml
+++ b/build.xml
@@ -2362,6 +2362,7 @@ gpg.exec=${gpg.exec}
 asf.ldap.username=${release.asfusername}
 
 
   


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Re: [VOTE] Release Apache Tomcat 10.1.0-M17

2022-07-14 Thread Mark Thomas

On 13/07/2022 22:57, Mark Thomas wrote:

The proposed 10.1.0-M17 release is:
[ ] Broken - do not release
[X] Beta - go ahead and release as 10.1.0-M17 (beta)


Unit tests pass with Tomcat Native 2.0.1 built with OpenSSL 3.0.5 on 
Windows, Linux and MacOS.


Mark

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[tomcat] tag 10.0.23 created (now cda46e050e)

2022-07-14 Thread markt
This is an automated email from the ASF dual-hosted git repository.

markt pushed a change to tag 10.0.23
in repository https://gitbox.apache.org/repos/asf/tomcat.git


  at cda46e050e (commit)
This tag includes the following new commits:

 new cda46e050e Tag 10.0.23

The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.



-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[tomcat] 01/01: Tag 10.0.23

2022-07-14 Thread markt
This is an automated email from the ASF dual-hosted git repository.

markt pushed a commit to tag 10.0.23
in repository https://gitbox.apache.org/repos/asf/tomcat.git

commit cda46e050e09bd394c82ba874633367f80eeb259
Author: Mark Thomas 
AuthorDate: Thu Jul 14 09:28:56 2022 +0100

Tag 10.0.23
---
 build.properties.release |  43 +++
 res/install-win/Uninstall.exe.sig| Bin 0 -> 10289 bytes
 res/install-win/tomcat-installer.exe.sig | Bin 0 -> 10289 bytes
 res/maven/mvn.properties.release |  27 +++
 webapps/docs/changelog.xml   |   2 +-
 5 files changed, 71 insertions(+), 1 deletion(-)

diff --git a/build.properties.release b/build.properties.release
new file mode 100644
index 00..190e5d01b8
--- /dev/null
+++ b/build.properties.release
@@ -0,0 +1,43 @@
+# -
+# Licensed to the Apache Software Foundation (ASF) under one or more
+# contributor license agreements.  See the NOTICE file distributed with
+# this work for additional information regarding copyright ownership.
+# The ASF licenses this file to You under the Apache License, Version 2.0
+# (the "License"); you may not use this file except in compliance with
+# the License.  You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+# -
+
+# This file was auto-generated by the pre-release Ant target
+
+# Set the version-dev to "" (empty string) as this is not a development 
release.
+version.dev=
+
+# Ensure consistent timestamps for reproducible builds
+ant.tstamp.now.iso=2022-07-14T08:16:11Z
+
+# Reproducible builds require the use of the build tools defined below. The
+# vendors (where appropriate) and versions must match exactly for a 
reproducible
+# build since this data is embedded in various files, particularly JAR file
+# manifests, as part of the build process
+#
+# Apache Ant:  Apache Ant(TM) version 1.10.12 compiled on October 13 2021
+#
+# Java Name:   OpenJDK 64-Bit Server VM
+# Java Vendor: Eclipse Adoptium
+# Java Version:11.0.15+10
+
+# The following is provided for information only. Builds will be repeatable
+# whether or not the build ennvironment in consistent with this information
+#
+# OS:  amd64 Windows Server 2022 10.0
+# File encoding:   Cp1252
+#
+# Release Manager: markt
diff --git a/res/install-win/Uninstall.exe.sig 
b/res/install-win/Uninstall.exe.sig
new file mode 100644
index 00..0b37a4d2f9
Binary files /dev/null and b/res/install-win/Uninstall.exe.sig differ
diff --git a/res/install-win/tomcat-installer.exe.sig 
b/res/install-win/tomcat-installer.exe.sig
new file mode 100644
index 00..604417d6c2
Binary files /dev/null and b/res/install-win/tomcat-installer.exe.sig differ
diff --git a/res/maven/mvn.properties.release b/res/maven/mvn.properties.release
new file mode 100644
index 00..8166e8ed71
--- /dev/null
+++ b/res/maven/mvn.properties.release
@@ -0,0 +1,27 @@
+# -
+# Licensed to the Apache Software Foundation (ASF) under one or more
+# contributor license agreements.  See the NOTICE file distributed with
+# this work for additional information regarding copyright ownership.
+# The ASF licenses this file to You under the Apache License, Version 2.0
+# (the "License"); you may not use this file except in compliance with
+# the License.  You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+# -
+
+# This file was auto-generated by the pre-release Ant target
+
+# Remove "-dev" from the version since this is not a development release.
+maven.asf.release.deploy.version=10.0.23
+
+# Re-use the same GPG executable
+gpg.exec=C:/Program Files (x86)/GnuPG/bin/gpg.exe
+
+# Set the user name to use to upload the artefacts to Nexus
+asf.ldap.username=markt
diff --git a/webapps/docs/changelog.xml b/webapps/docs/changelog.xml
index 722abd538f..d8eef89a23 100644
--- a/webapps/docs/changelog.xml
+++ b/webapps/docs/changelog.xml
@@ -104,7 +104,7 @@
   They eventually become mixed with the

svn commit: r55735 - in /dev/tomcat/tomcat-10/v10.0.23: ./ bin/ bin/embed/ src/

2022-07-14 Thread markt
Author: markt
Date: Thu Jul 14 09:09:11 2022
New Revision: 55735

Log:
Upload 10.0.23 for voting

Added:
dev/tomcat/tomcat-10/v10.0.23/
dev/tomcat/tomcat-10/v10.0.23/KEYS
dev/tomcat/tomcat-10/v10.0.23/README.html
dev/tomcat/tomcat-10/v10.0.23/RELEASE-NOTES
dev/tomcat/tomcat-10/v10.0.23/bin/
dev/tomcat/tomcat-10/v10.0.23/bin/README.html
dev/tomcat/tomcat-10/v10.0.23/bin/apache-tomcat-10.0.23-deployer.tar.gz   
(with props)
dev/tomcat/tomcat-10/v10.0.23/bin/apache-tomcat-10.0.23-deployer.tar.gz.asc

dev/tomcat/tomcat-10/v10.0.23/bin/apache-tomcat-10.0.23-deployer.tar.gz.sha512
dev/tomcat/tomcat-10/v10.0.23/bin/apache-tomcat-10.0.23-deployer.zip   
(with props)
dev/tomcat/tomcat-10/v10.0.23/bin/apache-tomcat-10.0.23-deployer.zip.asc
dev/tomcat/tomcat-10/v10.0.23/bin/apache-tomcat-10.0.23-deployer.zip.sha512
dev/tomcat/tomcat-10/v10.0.23/bin/apache-tomcat-10.0.23-fulldocs.tar.gz   
(with props)
dev/tomcat/tomcat-10/v10.0.23/bin/apache-tomcat-10.0.23-fulldocs.tar.gz.asc

dev/tomcat/tomcat-10/v10.0.23/bin/apache-tomcat-10.0.23-fulldocs.tar.gz.sha512
dev/tomcat/tomcat-10/v10.0.23/bin/apache-tomcat-10.0.23-windows-x64.zip   
(with props)
dev/tomcat/tomcat-10/v10.0.23/bin/apache-tomcat-10.0.23-windows-x64.zip.asc

dev/tomcat/tomcat-10/v10.0.23/bin/apache-tomcat-10.0.23-windows-x64.zip.sha512
dev/tomcat/tomcat-10/v10.0.23/bin/apache-tomcat-10.0.23-windows-x86.zip   
(with props)
dev/tomcat/tomcat-10/v10.0.23/bin/apache-tomcat-10.0.23-windows-x86.zip.asc

dev/tomcat/tomcat-10/v10.0.23/bin/apache-tomcat-10.0.23-windows-x86.zip.sha512
dev/tomcat/tomcat-10/v10.0.23/bin/apache-tomcat-10.0.23.exe   (with props)
dev/tomcat/tomcat-10/v10.0.23/bin/apache-tomcat-10.0.23.exe.asc
dev/tomcat/tomcat-10/v10.0.23/bin/apache-tomcat-10.0.23.exe.sha512
dev/tomcat/tomcat-10/v10.0.23/bin/apache-tomcat-10.0.23.tar.gz   (with 
props)
dev/tomcat/tomcat-10/v10.0.23/bin/apache-tomcat-10.0.23.tar.gz.asc
dev/tomcat/tomcat-10/v10.0.23/bin/apache-tomcat-10.0.23.tar.gz.sha512
dev/tomcat/tomcat-10/v10.0.23/bin/apache-tomcat-10.0.23.zip   (with props)
dev/tomcat/tomcat-10/v10.0.23/bin/apache-tomcat-10.0.23.zip.asc
dev/tomcat/tomcat-10/v10.0.23/bin/apache-tomcat-10.0.23.zip.sha512
dev/tomcat/tomcat-10/v10.0.23/bin/embed/
dev/tomcat/tomcat-10/v10.0.23/bin/embed/apache-tomcat-10.0.23-embed.tar.gz  
 (with props)

dev/tomcat/tomcat-10/v10.0.23/bin/embed/apache-tomcat-10.0.23-embed.tar.gz.asc

dev/tomcat/tomcat-10/v10.0.23/bin/embed/apache-tomcat-10.0.23-embed.tar.gz.sha512
dev/tomcat/tomcat-10/v10.0.23/bin/embed/apache-tomcat-10.0.23-embed.zip   
(with props)
dev/tomcat/tomcat-10/v10.0.23/bin/embed/apache-tomcat-10.0.23-embed.zip.asc

dev/tomcat/tomcat-10/v10.0.23/bin/embed/apache-tomcat-10.0.23-embed.zip.sha512
dev/tomcat/tomcat-10/v10.0.23/src/
dev/tomcat/tomcat-10/v10.0.23/src/apache-tomcat-10.0.23-src.tar.gz   (with 
props)
dev/tomcat/tomcat-10/v10.0.23/src/apache-tomcat-10.0.23-src.tar.gz.asc
dev/tomcat/tomcat-10/v10.0.23/src/apache-tomcat-10.0.23-src.tar.gz.sha512
dev/tomcat/tomcat-10/v10.0.23/src/apache-tomcat-10.0.23-src.zip   (with 
props)
dev/tomcat/tomcat-10/v10.0.23/src/apache-tomcat-10.0.23-src.zip.asc
dev/tomcat/tomcat-10/v10.0.23/src/apache-tomcat-10.0.23-src.zip.sha512

Added: dev/tomcat/tomcat-10/v10.0.23/KEYS
==
--- dev/tomcat/tomcat-10/v10.0.23/KEYS (added)
+++ dev/tomcat/tomcat-10/v10.0.23/KEYS Thu Jul 14 09:09:11 2022
@@ -0,0 +1,453 @@
+This file contains the PGP&GPG keys of various Apache developers.
+Please don't use them for email unless you have to. Their main
+purpose is code signing.
+
+Apache users: pgp < KEYS
+Apache developers:
+(pgpk -ll  && pgpk -xa ) >> this file.
+  or
+(gpg --fingerprint --list-sigs 
+ && gpg --armor --export ) >> this file.
+
+Apache developers: please ensure that your key is also available via the
+PGP keyservers (such as pgpkeys.mit.edu).
+
+
+pub   4096R/2F6059E7 2009-09-18
+  Key fingerprint = A9C5 DF4D 22E9 9998 D987  5A51 10C0 1C5A 2F60 59E7
+uid  Mark E D Thomas 
+sub   4096R/5E763BEC 2009-09-18
+
+-BEGIN PGP PUBLIC KEY BLOCK-
+Comment: GPGTools - http://gpgtools.org
+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[VOTE] Release Apache Tomcat 10.0.23

2022-07-14 Thread Mark Thomas

The proposed Apache Tomcat 10.0.23 release is now available for
voting.

Apache Tomcat 10.0.x implements Jakarta EE 9 and, as such, the primary
package for all the specification APIs has changed from javax.* to jakarta.*

Applications that run on Tomcat 9 will not run on Tomcat 10 without 
changes. Java EE applications designed for Tomcat 9 and earlier may be 
placed in the $CATALINA_BASE/webapps-javaee directory and Tomcat will 
automatically convert them to Jakarta EE and copy them to the webapps 
directory


The notable changes compared to 10.0.22 are:

- Implement support for repeatable builds

- Update the packaged version of the Tomcat Native Library to 1.2.35.
  This includes Windows binaries built with with OpenSSL 1.1.1q.

- Fix CVE-2022-34305, a low severity XSS vulnerability in the Form
  authentication example

Along with lots of other bug fixes and improvements.

For full details, see the changelog:
https://nightlies.apache.org/tomcat/tomcat-10.0.x/docs/changelog.html

It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-10/v10.0.23/

The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1383

The tag is:
https://github.com/apache/tomcat/tree/10.0.23
cda46e050e09bd394c82ba874633367f80eeb259

The proposed 10.0.23 release is:
[ ] Broken - do not release
[ ] Stable - go ahead and release as 10.0.23 (stable)

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Re: [VOTE] Release Apache Tomcat 10.0.23

2022-07-14 Thread Mark Thomas

On 14/07/2022 10:25, Mark Thomas wrote:

The proposed 10.0.23 release is:
[ ] Broken - do not release
[X] Stable - go ahead and release as 10.0.23 (stable)


Unit tests pass with Tomcat Native 1.2.35 built with OpenSSL 1.1.1q on 
Windows, Linux and MacOS.


Mark

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[tomcat] 01/01: Tag 9.0.65

2022-07-14 Thread remm
This is an automated email from the ASF dual-hosted git repository.

remm pushed a commit to tag 9.0.65
in repository https://gitbox.apache.org/repos/asf/tomcat.git

commit c443b393281c7eee5d6a95977c4faeed28906bdf
Author: remm 
AuthorDate: Thu Jul 14 14:32:43 2022 +0200

Tag 9.0.65
---
 build.properties.release |  43 +++
 res/install-win/Uninstall.exe.sig| Bin 0 -> 10289 bytes
 res/install-win/tomcat-installer.exe.sig | Bin 0 -> 10289 bytes
 res/maven/mvn.properties.release |  27 +++
 webapps/docs/changelog.xml   |   2 +-
 5 files changed, 71 insertions(+), 1 deletion(-)

diff --git a/build.properties.release b/build.properties.release
new file mode 100644
index 00..7d7b0089be
--- /dev/null
+++ b/build.properties.release
@@ -0,0 +1,43 @@
+# -
+# Licensed to the Apache Software Foundation (ASF) under one or more
+# contributor license agreements.  See the NOTICE file distributed with
+# this work for additional information regarding copyright ownership.
+# The ASF licenses this file to You under the Apache License, Version 2.0
+# (the "License"); you may not use this file except in compliance with
+# the License.  You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+# -
+
+# This file was auto-generated by the pre-release Ant target
+
+# Set the version-dev to "" (empty string) as this is not a development 
release.
+version.dev=
+
+# Ensure consistent timestamps for reproducible builds
+ant.tstamp.now.iso=2022-07-14T12:28:53Z
+
+# Reproducible builds require the use of the build tools defined below. The
+# vendors (where appropriate) and versions must match exactly for a 
reproducible
+# build since this data is embedded in various files, particularly JAR file
+# manifests, as part of the build process
+#
+# Apache Ant:  Apache Ant(TM) version 1.10.12 compiled on June 6 2022
+#
+# Java Name:   OpenJDK 64-Bit Server VM
+# Java Vendor: Eclipse Adoptium
+# Java Version:11.0.15+10
+
+# The following is provided for information only. Builds will be repeatable
+# whether or not the build ennvironment in consistent with this information
+#
+# OS:  amd64 Linux 5.18.10-200.fc36.x86_64
+# File encoding:   UTF-8
+#
+# Release Manager: remm
diff --git a/res/install-win/Uninstall.exe.sig 
b/res/install-win/Uninstall.exe.sig
new file mode 100644
index 00..4f08141038
Binary files /dev/null and b/res/install-win/Uninstall.exe.sig differ
diff --git a/res/install-win/tomcat-installer.exe.sig 
b/res/install-win/tomcat-installer.exe.sig
new file mode 100644
index 00..5212fe714a
Binary files /dev/null and b/res/install-win/tomcat-installer.exe.sig differ
diff --git a/res/maven/mvn.properties.release b/res/maven/mvn.properties.release
new file mode 100644
index 00..4dfb7c1474
--- /dev/null
+++ b/res/maven/mvn.properties.release
@@ -0,0 +1,27 @@
+# -
+# Licensed to the Apache Software Foundation (ASF) under one or more
+# contributor license agreements.  See the NOTICE file distributed with
+# this work for additional information regarding copyright ownership.
+# The ASF licenses this file to You under the Apache License, Version 2.0
+# (the "License"); you may not use this file except in compliance with
+# the License.  You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+# -
+
+# This file was auto-generated by the pre-release Ant target
+
+# Remove "-dev" from the version since this is not a development release.
+maven.asf.release.deploy.version=9.0.65
+
+# Re-use the same GPG executable
+gpg.exec=/usr/bin/gpg
+
+# Set the user name to use to upload the artefacts to Nexus
+asf.ldap.username=remm
diff --git a/webapps/docs/changelog.xml b/webapps/docs/changelog.xml
index b7a3988de9..30b29d4dd6 100644
--- a/webapps/docs/changelog.xml
+++ b/webapps/docs/changelog.xml
@@ -104,7 +104,7 @@
   They eventually become mixed with the numbered issues (i.e., numbered
   issue

[tomcat] tag 9.0.65 created (now c443b39328)

2022-07-14 Thread remm
This is an automated email from the ASF dual-hosted git repository.

remm pushed a change to tag 9.0.65
in repository https://gitbox.apache.org/repos/asf/tomcat.git


  at c443b39328 (commit)
This tag includes the following new commits:

 new c443b39328 Tag 9.0.65

The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.



-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



svn commit: r55738 - in /dev/tomcat/tomcat-9/v9.0.65: ./ bin/ bin/embed/ src/

2022-07-14 Thread remm
Author: remm
Date: Thu Jul 14 13:13:00 2022
New Revision: 55738

Log:
Upload 9.0.65 for voting

Added:
dev/tomcat/tomcat-9/v9.0.65/
dev/tomcat/tomcat-9/v9.0.65/KEYS
dev/tomcat/tomcat-9/v9.0.65/README.html
dev/tomcat/tomcat-9/v9.0.65/RELEASE-NOTES
dev/tomcat/tomcat-9/v9.0.65/bin/
dev/tomcat/tomcat-9/v9.0.65/bin/README.html
dev/tomcat/tomcat-9/v9.0.65/bin/apache-tomcat-9.0.65-deployer.tar.gz   
(with props)
dev/tomcat/tomcat-9/v9.0.65/bin/apache-tomcat-9.0.65-deployer.tar.gz.asc   
(with props)
dev/tomcat/tomcat-9/v9.0.65/bin/apache-tomcat-9.0.65-deployer.tar.gz.sha512
dev/tomcat/tomcat-9/v9.0.65/bin/apache-tomcat-9.0.65-deployer.zip   (with 
props)
dev/tomcat/tomcat-9/v9.0.65/bin/apache-tomcat-9.0.65-deployer.zip.asc   
(with props)
dev/tomcat/tomcat-9/v9.0.65/bin/apache-tomcat-9.0.65-deployer.zip.sha512
dev/tomcat/tomcat-9/v9.0.65/bin/apache-tomcat-9.0.65-fulldocs.tar.gz   
(with props)
dev/tomcat/tomcat-9/v9.0.65/bin/apache-tomcat-9.0.65-fulldocs.tar.gz.asc   
(with props)
dev/tomcat/tomcat-9/v9.0.65/bin/apache-tomcat-9.0.65-fulldocs.tar.gz.sha512
dev/tomcat/tomcat-9/v9.0.65/bin/apache-tomcat-9.0.65-windows-x64.zip   
(with props)
dev/tomcat/tomcat-9/v9.0.65/bin/apache-tomcat-9.0.65-windows-x64.zip.asc   
(with props)
dev/tomcat/tomcat-9/v9.0.65/bin/apache-tomcat-9.0.65-windows-x64.zip.sha512
dev/tomcat/tomcat-9/v9.0.65/bin/apache-tomcat-9.0.65-windows-x86.zip   
(with props)
dev/tomcat/tomcat-9/v9.0.65/bin/apache-tomcat-9.0.65-windows-x86.zip.asc   
(with props)
dev/tomcat/tomcat-9/v9.0.65/bin/apache-tomcat-9.0.65-windows-x86.zip.sha512
dev/tomcat/tomcat-9/v9.0.65/bin/apache-tomcat-9.0.65.exe   (with props)
dev/tomcat/tomcat-9/v9.0.65/bin/apache-tomcat-9.0.65.exe.asc   (with props)
dev/tomcat/tomcat-9/v9.0.65/bin/apache-tomcat-9.0.65.exe.sha512
dev/tomcat/tomcat-9/v9.0.65/bin/apache-tomcat-9.0.65.tar.gz   (with props)
dev/tomcat/tomcat-9/v9.0.65/bin/apache-tomcat-9.0.65.tar.gz.asc   (with 
props)
dev/tomcat/tomcat-9/v9.0.65/bin/apache-tomcat-9.0.65.tar.gz.sha512
dev/tomcat/tomcat-9/v9.0.65/bin/apache-tomcat-9.0.65.zip   (with props)
dev/tomcat/tomcat-9/v9.0.65/bin/apache-tomcat-9.0.65.zip.asc   (with props)
dev/tomcat/tomcat-9/v9.0.65/bin/apache-tomcat-9.0.65.zip.sha512
dev/tomcat/tomcat-9/v9.0.65/bin/embed/
dev/tomcat/tomcat-9/v9.0.65/bin/embed/apache-tomcat-9.0.65-embed.tar.gz   
(with props)
dev/tomcat/tomcat-9/v9.0.65/bin/embed/apache-tomcat-9.0.65-embed.tar.gz.asc 
  (with props)

dev/tomcat/tomcat-9/v9.0.65/bin/embed/apache-tomcat-9.0.65-embed.tar.gz.sha512
dev/tomcat/tomcat-9/v9.0.65/bin/embed/apache-tomcat-9.0.65-embed.zip   
(with props)
dev/tomcat/tomcat-9/v9.0.65/bin/embed/apache-tomcat-9.0.65-embed.zip.asc   
(with props)
dev/tomcat/tomcat-9/v9.0.65/bin/embed/apache-tomcat-9.0.65-embed.zip.sha512
dev/tomcat/tomcat-9/v9.0.65/src/
dev/tomcat/tomcat-9/v9.0.65/src/apache-tomcat-9.0.65-src.tar.gz   (with 
props)
dev/tomcat/tomcat-9/v9.0.65/src/apache-tomcat-9.0.65-src.tar.gz.asc   (with 
props)
dev/tomcat/tomcat-9/v9.0.65/src/apache-tomcat-9.0.65-src.tar.gz.sha512
dev/tomcat/tomcat-9/v9.0.65/src/apache-tomcat-9.0.65-src.zip   (with props)
dev/tomcat/tomcat-9/v9.0.65/src/apache-tomcat-9.0.65-src.zip.asc   (with 
props)
dev/tomcat/tomcat-9/v9.0.65/src/apache-tomcat-9.0.65-src.zip.sha512

Added: dev/tomcat/tomcat-9/v9.0.65/KEYS
==
--- dev/tomcat/tomcat-9/v9.0.65/KEYS (added)
+++ dev/tomcat/tomcat-9/v9.0.65/KEYS Thu Jul 14 13:13:00 2022
@@ -0,0 +1,237 @@
+This file contains the PGP&GPG keys of various Apache developers.
+Please don't use them for email unless you have to. Their main
+purpose is code signing.
+
+Apache users: pgp < KEYS
+Apache developers:
+(pgpk -ll  && pgpk -xa ) >> this file.
+  or
+(gpg --fingerprint --list-sigs 
+ && gpg --armor --export ) >> this file.
+
+Apache developers: please ensure that your key is also available via the
+PGP keyservers (such as pgpkeys.mit.edu).
+
+
+pub   1024D/33C60243 2004-09-12
+  Key fingerprint = DCFD 35E0 BF8C A734 4752  DE8B 6FB2 1E89 33C6 0243
+uid  Mark E D Thomas 
+uid  Mark E D Thomas 
+uid  Mark E D Thomas 
+sub   2048g/0BECE548 2004-09-12
+
+pub   4096R/2F6059E7 2009-09-18
+  Key fingerprint = A9C5 DF4D 22E9 9998 D987  5A51 10C0 1C5A 2F60 59E7
+uid  Mark E D Thomas 
+sub   4096R/5E763BEC 2009-09-18
+
+-BEGIN PGP PUBLIC KEY BLOCK-
+Version: GnuPG v1.4.9 (MingW32)
+
+mQGiBEFEjegRBADocGttfROvtLGrTOW3xRqZHmFWybmEaI6jmnRdN/1gGXmb3wQL
+rHsS3fLFIIOYLPph0Kov9q4qNq36LekShIvjMBDFoj2/wRxaUtFq81asaRZg8Mcw
+4kVeIoe8OIOuWmvYhU8SH2jJNUnVVrpTPAa6QWquTmseNi6UJMjLxuL7DwCg//9u
+k2yj0vk6e4WSO6Fe5+EkQDED/AjQsy0kj9TpNHkKSSUR2evRlWPYA0YtxBSbsgON
+tT0cYipAp5IcYt6Zq5QzHiZreyQXLAjItDS2oGCIXfNbTYJ3kxxJTCU/3wlefV

Re: [VOTE] Release Apache Tomcat 10.0.23

2022-07-14 Thread Han Li



> 2022年7月14日 17:25,Mark Thomas  写道:
> 
> The proposed Apache Tomcat 10.0.23 release is now available for
> voting.
> 
> Apache Tomcat 10.0.x implements Jakarta EE 9 and, as such, the primary
> package for all the specification APIs has changed from javax.* to jakarta.*
> 
> Applications that run on Tomcat 9 will not run on Tomcat 10 without changes. 
> Java EE applications designed for Tomcat 9 and earlier may be placed in the 
> $CATALINA_BASE/webapps-javaee directory and Tomcat will automatically convert 
> them to Jakarta EE and copy them to the webapps directory
> 
> The notable changes compared to 10.0.22 are:
> 
> - Implement support for repeatable builds
> 
> - Update the packaged version of the Tomcat Native Library to 1.2.35.
>  This includes Windows binaries built with with OpenSSL 1.1.1q.
> 
> - Fix CVE-2022-34305, a low severity XSS vulnerability in the Form
>  authentication example
> 
> Along with lots of other bug fixes and improvements.
> 
> For full details, see the changelog:
> https://nightlies.apache.org/tomcat/tomcat-10.0.x/docs/changelog.html
> 
> It can be obtained from:
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-10/v10.0.23/
> 
> The Maven staging repo is:
> https://repository.apache.org/content/repositories/orgapachetomcat-1383
> 
> The tag is:
> https://github.com/apache/tomcat/tree/10.0.23
> cda46e050e09bd394c82ba874633367f80eeb259
> 
> The proposed 10.0.23 release is:
> [ ] Broken - do not release
> [ X] Stable - go ahead and release as 10.0.23 (stable)

All unit tests pass on macOS 12.3.1

Han
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: dev-h...@tomcat.apache.org
> 


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[VOTE] Release Apache Tomcat 9.0.65

2022-07-14 Thread Rémy Maucherat
The proposed Apache Tomcat 9.0.65 release is now available for voting.

The notable changes compared to 9.0.64 are:

- Implement support for repeatable builds.

- Update the packaged version of the Tomcat Native Library to 1.2.35.
   This includes Windows binaries built with OpenSSL 1.1.1q.

- Fix CVE-2022-34305, a low severity XSS vulnerability in the Form
   authentication example.

Along with lots of other bug fixes and improvements.

For full details, see the changelog:
https://nightlies.apache.org/tomcat/tomcat-9.0.x/docs/changelog.html

It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-9/v9.0.65/
The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1384
The tag is:
https://github.com/apache/tomcat/tree/9.0.65
c443b393281c7eee5d6a95977c4faeed28906bdf

The proposed 9.0.65 release is:
[ ] Broken - do not release
[ ] Stable - go ahead and release as 9.0.65 (stable)

Rémy

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[GitHub] [tomcat] exabrial commented on pull request #402: Add support for Unix Domain Sockets (APR Protocol)

2022-07-14 Thread GitBox


exabrial commented on PR #402:
URL: https://github.com/apache/tomcat/pull/402#issuecomment-1184515644

   Hey guys, My apologies to comment on a year-old PR, but I cannot get 
`unixDomainSocketPath` to work on Tomcat9 with the latest APR, Java11, Ubuntu 
18.04. What happens is the second request to the server causes the server to 
hang on the socket. I was trying to find _any_ example of a working server.xml, 
but it's not part of the PR. Any chance you guys could post your working 
server.xml? Otherwise I may have spotted a bug and can start a new discussion 
with a test case. Thank you!


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 66120] j_security_check returns 408 if j_security_check request lands on different tomcat server from original server

2022-07-14 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=66120

--- Comment #4 from psakkanan  ---
 I like making it optional

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org