Re: [VOTE] Release Apache Tomcat 9.0.72

2023-02-21 Thread Han Li



> On Feb 18, 2023, at 17:44, Rémy Maucherat  wrote:
> 
> The proposed Apache Tomcat 9.0.72 release is now available for voting.
> 
> The notable changes compared to 9.0.71 are:
> 
> -  Add an error report valve that allows redirecting to or proxying from an
>   external web server.
> 
> - Log basic information for each configured TLS certificate when
>   Tomcat starts.
> 
> Along with lots of other bug fixes and improvements.
> 
> For full details, see the changelog:
> https://nightlies.apache.org/tomcat/tomcat-9.0.x/docs/changelog.html
> 
> It can be obtained from:
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-9/v9.0.72/
> The Maven staging repo is:
> https://repository.apache.org/content/repositories/orgapachetomcat-1418
> The tag is:
> https://github.com/apache/tomcat/tree/9.0.72
> 7754d319b2a8866b5bcdf1ea0f35e68470320295
> 
> The proposed 9.0.72 release is:
> [ ] Broken - do not release
> [ X] Stable - go ahead and release as 9.0.72

Han
> 
> Rémy
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: dev-h...@tomcat.apache.org
> 


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Re: [VOTE] Release Apache Tomcat 10.1.6

2023-02-21 Thread Christopher Schultz

All,

On 2/20/23 08:58, Christopher Schultz wrote:

Mark,

On 2/20/23 08:27, Mark Thomas wrote:
You'll probably need to change the default ephemeral (dynamic in MS 
speak) port range to avoid issues with port exhaustion.


I'm using:

netsh int ipv4 set dynamicport tcp start=1025 num=64511

I suspect running out of ports is causing odd errors.


I have waved my magic wand and spoken the incantation. We'll see if it 
runs to completion :)


Looks like not:

[junit] Tests run: 2304, Failures: 2, Errors: 0, Skipped: 0, Time 
elapsed: 170.185 sec, Thread: 2, Class: 
jakarta.servlet.http.TestHttpServletDoHeadValidWrite1025


And the whole unit test suite stops there.

Things are working on Linux, though.

-chris


On 20/02/2023 13:16, Christopher Schultz wrote:

All,

I'm getting a failure on 
jakarta.servlet.http.TestHttpServletDoHeadValidWrite0.NIO on Windows


Looks like 11 failures all of the form:

   Failed to delete at least one file

I'm assuming that this is a spurious error, but the test keeps 
failing at that point and stopping, despite having 
test.haltonfailure=false in my build.properties file.


When running ant test-status, I get only 4 tests shown under "test 
suites with failed tests" and nothing showing elsewhere. A very small 
number of other TEST-*.txt files exist in the logs/ directory.


Any suggestions?

-chris

On 2/19/23 09:11, Christopher Schultz wrote:

The proposed Apache Tomcat 10.1.6 release is now available for
voting.

The notable changes compared to 10.1.5 are:

- Switch to using the ServiceLoader mechanism to load the custom URL
   protocol handlers that Tomcat uses.

- Update the packaged version of the Apache Tomcat Native Library to
   2.0.3 to pick up the Windows binaries built with with OpenSSL 3.0.8.

- Add the shared address space specified by RFC 6598 (100.64.0.0/10)
   to the list of trusted proxies for RemoteIPValve/Filter.

- Limit access to examples web application to localhost by default


For full details, see the change log:
https://nightlies.apache.org/tomcat/tomcat-10.1.x/docs/changelog.html

Applications that run on Tomcat 9 and earlier will not run on Tomcat 
10 without changes. Java EE applications designed for Tomcat 9 and 
earlier may be placed in the $CATALINA_BASE/webapps-javaee directory 
and Tomcat will automatically convert them to Jakarta EE and copy 
them to the webapps directory.


It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-10/v10.1.6/

The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1421

The tag is:
https://github.com/apache/tomcat/tree/10.1.6
9829c929059f96605a3fb870700b5887970d7203

The proposed 10.1.6 release is:
[ ] Broken - do not release
[ ] Stable - go ahead and release as 10.1.6


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Re: [VOTE] Release Apache Tomcat 10.1.6

2023-02-21 Thread Christopher Schultz

All,

On 2/19/23 09:11, Christopher Schultz wrote:

The proposed Apache Tomcat 10.1.6 release is now available for
voting.

The notable changes compared to 10.1.5 are:

- Switch to using the ServiceLoader mechanism to load the custom URL
   protocol handlers that Tomcat uses.

- Update the packaged version of the Apache Tomcat Native Library to
   2.0.3 to pick up the Windows binaries built with with OpenSSL 3.0.8.

- Add the shared address space specified by RFC 6598 (100.64.0.0/10)
   to the list of trusted proxies for RemoteIPValve/Filter.

- Limit access to examples web application to localhost by default


For full details, see the change log:
https://nightlies.apache.org/tomcat/tomcat-10.1.x/docs/changelog.html

Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 
without changes. Java EE applications designed for Tomcat 9 and earlier 
may be placed in the $CATALINA_BASE/webapps-javaee directory and Tomcat 
will automatically convert them to Jakarta EE and copy them to the 
webapps directory.


It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-10/v10.1.6/

The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1421

The tag is:
https://github.com/apache/tomcat/tree/10.1.6
9829c929059f96605a3fb870700b5887970d7203

The proposed 10.1.6 release is:
[ ] Broken - do not release
[X] Stable - go ahead and release as 10.1.6


Unit tests pass (minus APR; I did not test with tcnative) on MacOS 
w/Java 17.0.5 and Linux w/Java 17.0.6. Two cipher-related tests fail but 
I believe this is an environmental problem with my local openssl version.


-chris

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Re: [VOTE] Release Apache Tomcat 8.5.86

2023-02-21 Thread Christopher Schultz

All,

On 2/18/23 08:56, Christopher Schultz wrote:

The proposed Apache Tomcat 8.5.86 release is now available for voting.

The notable changes compared to 8.5.85 are:

- Add an error report valve that allows redirecting to or proxying from
   an external web server.

- Add the shared address space specified by RFC 6598 (100.64.0.0/10)
   to the list of trusted proxies for RemoteIPValve/Filter.

- Log basic information for each configured TLS certificate when
   Tomcat starts.

- Limit access to examples web application to localhost by default

Along with lots of other bug fixes and improvements.

For full details, see the changelog:
https://nightlies.apache.org/tomcat/tomcat-8.5.x/docs/changelog.html

It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-8/v8.5.86/

The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1419

The tag is:
https://github.com/apache/tomcat/tree/8.5.86/
0bf2722f4652674e321a0e22e72dca75d2ea8275

The proposed 8.5.86 release is:
[ ] Broken - do not release
[X] Stable - go ahead and release as 8.5.86 (stable)


Works on a vanilla servlet-based web application in a testing environment.

One unit-test fails due to the specific version of Java I am using for 
testing.


Details:

* Environment
*  Java (build): openjdk version "1.8.0_292" OpenJDK Runtime 
Environment (build 1.8.0_292-8u292-b10-0+deb9u1-b10) OpenJDK 64-Bit 
Server VM (build 25.292-b10, mixed mode)
*  Java (test): openjdk version "1.8.0_292" OpenJDK Runtime 
Environment (build 1.8.0_292-8u292-b10-0+deb9u1-b10) OpenJDK 64-Bit 
Server VM (build 25.292-b10, mixed mode)

*  OS:   Linux 5.10.0-19-amd64 x86_64
*  cc:   cc (Debian 10.2.1-6) 10.2.1 20210110
*  make: GNU Make 4.3
*  OpenSSL:  OpenSSL 1.1.1 11 Sep 2018
*  APR:  1.7.0
*
* Valid SHA-512 signature for apache-tomcat-8.5.86.zip
* Valid GPG signature for apache-tomcat-8.5.86.zip
* Valid SHA-512 signature for apache-tomcat-8.5.86.tar.gz
* Valid GPG signature for apache-tomcat-8.5.86.tar.gz
* Valid SHA-512 signature for apache-tomcat-8.5.86.exe
* Valid GPG signature for apache-tomcat-8.5.86.exe
* Valid Windows Digital Signature for apache-tomcat-8.5.86.exe
* Valid SHA512 signature for apache-tomcat-8.5.86-src.zip
* Valid GPG signature for apache-tomcat-8.5.86-src.zip
* Valid SHA512 signature for apache-tomcat-8.5.86-src.tar.gz
* Valid GPG signature for apache-tomcat-8.5.86-src.tar.gz
*
* Binary Zip and tarball: Same
* Source Zip and tarball: Same
*
* Building dependencies returned: 0
* tcnative builds cleanly
* Tomcat builds cleanly
* Junit Tests: FAILED
*
* Tests that failed:
* org.apache.tomcat.util.net.jsse.TestPEMFile.APR.txt
* org.apache.tomcat.util.net.jsse.TestPEMFile.NIO.txt
* org.apache.tomcat.util.net.jsse.TestPEMFile.NIO2.txt

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Re: [VOTE] Release Apache Tomcat 10.1.6

2023-02-21 Thread Dimitris Soumis
+1
Tests pass on Linux.

On Sun, Feb 19, 2023 at 4:20 PM Christopher Schultz <
ch...@christopherschultz.net> wrote:

> The proposed Apache Tomcat 10.1.6 release is now available for
> voting.
>
> The notable changes compared to 10.1.5 are:
>
> - Switch to using the ServiceLoader mechanism to load the custom URL
>protocol handlers that Tomcat uses.
>
> - Update the packaged version of the Apache Tomcat Native Library to
>2.0.3 to pick up the Windows binaries built with with OpenSSL 3.0.8.
>
> - Add the shared address space specified by RFC 6598 (100.64.0.0/10)
>to the list of trusted proxies for RemoteIPValve/Filter.
>
> - Limit access to examples web application to localhost by default
>
>
> For full details, see the change log:
> https://nightlies.apache.org/tomcat/tomcat-10.1.x/docs/changelog.html
>
> Applications that run on Tomcat 9 and earlier will not run on Tomcat 10
> without changes. Java EE applications designed for Tomcat 9 and earlier
> may be placed in the $CATALINA_BASE/webapps-javaee directory and Tomcat
> will automatically convert them to Jakarta EE and copy them to the
> webapps directory.
>
> It can be obtained from:
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-10/v10.1.6/
>
> The Maven staging repo is:
> https://repository.apache.org/content/repositories/orgapachetomcat-1421
>
> The tag is:
> https://github.com/apache/tomcat/tree/10.1.6
> 9829c929059f96605a3fb870700b5887970d7203
>
> The proposed 10.1.6 release is:
> [ ] Broken - do not release
> [X] Stable - go ahead and release as 10.1.6
>