RE: Removing the APR connector

[jonmcalexander]

I know I'm not a contributor, but what is the reason for removing the APR 
Connector?


Dream * Excel * Explore * Inspire
Jon McAlexander
Infrastructure Engineer
Asst Vice President

Middleware Product Engineering
Enterprise CIO | Platform Services | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com


This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.


-Original Message-
From: Rémy Maucherat  
Sent: Tuesday, September 29, 2020 6:58 AM
To: Tomcat Developers List 
Subject: Re: Removing the APR connector

On Tue, Sep 29, 2020 at 1:32 PM Mark Thomas  wrote:

> All,
>
> Removing the APR connector (HTTP and AJP) is currently on the TODO 
> list for Tomcat 10.0.x (i.e. the current development branch).
>
> I am wondering whether we are still happy with this plan as we have 
> had a few 10.0.x milestone releases and we haven't made any efforts to 
> remove the APR connector.
>
> I'm happy to remove APR from 10.0.x but I am equally happy postponing 
> this to a later release if necessary.
>
> We'd still need Tomcat Native support to enable the use of OpenSSL 
> with NIO and NIO2. I am only thinking of removing the APR based HTTP 
> and AJP connectors (with associated plumbing) and possibly some of the 
> org.apache.tomcat.jni package.
>
> Thoughts?
>

I would rather postpone at this point, with the idea of really removing it in 
10.1.
Maybe we should remove it from the docs in 10.0 in preparation for the move ?

Rémy


>
> Mark
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For 
> additional commands, e-mail: dev-h...@tomcat.apache.org
>
>

RE: Removing the APR connector

[jonmcalexander]

👍coolio


Dream * Excel * Explore * Inspire
Jon McAlexander
Infrastructure Engineer
Asst Vice President

Middleware Product Engineering
Enterprise CIO | Platform Services | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com


This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.


-Original Message-
From: Mark Thomas  
Sent: Tuesday, September 29, 2020 10:54 AM
To: dev@tomcat.apache.org
Subject: Re: Removing the APR connector

On 29/09/2020 16:29, jonmcalexan...@wellsfargo.com.INVALID wrote:
> I know I'm not a contributor, but what is the reason for removing the APR 
> Connector?

It is inherently less stable. If we get the NIO code wrong, you might see a 
NullPointerException. If we get the APR code wrong you might see a JVM crash.

The primary benefit when the connector was first introduced was performance. 
With current JVMs HTTP performance of pure Java connectors is broadly similar 
to the APR/Native connector. For HTTPS, APR/Native still provides a performance 
boost but we see a similar performance boost when we use APR/Native to plug 
OpenSSL into NIO or NIO2 and that requires less native code (and hence is less 
prune to stability issues).

In short, we can get the same benefits as the APR connector with
NIO+OpenSSL with less native code and hence less risk.

There are secondary benefits in terms of where we can clean up some of the 
Tomcat internals if we only need to support two connectors (NIO and
NIO2) rather than 3.

Mark

> 
> 
> Dream * Excel * Explore * Inspire
> Jon McAlexander
> Infrastructure Engineer
> Asst Vice President
> 
> Middleware Product Engineering
> Enterprise CIO | Platform Services | Middleware | Infrastructure 
> Solutions
> 
> 8080 Cobblestone Rd | Urbandale, IA 50322
> MAC: F4469-010
> Tel 515-988-2508 | Cell 515-988-2508
> 
> jonmcalexan...@wellsfargo.com
> 
> 
> This message may contain confidential and/or privileged information. If you 
> are not the addressee or authorized to receive this for the addressee, you 
> must not use, copy, disclose, or take any action based on this message or any 
> information herein. If you have received this message in error, please advise 
> the sender immediately by reply e-mail and delete this message. Thank you for 
> your cooperation.
> 
> 
> -Original Message-
> From: Rémy Maucherat 
> Sent: Tuesday, September 29, 2020 6:58 AM
> To: Tomcat Developers List 
> Subject: Re: Removing the APR connector
> 
> On Tue, Sep 29, 2020 at 1:32 PM Mark Thomas  wrote:
> 
>> All,
>>
>> Removing the APR connector (HTTP and AJP) is currently on the TODO 
>> list for Tomcat 10.0.x (i.e. the current development branch).
>>
>> I am wondering whether we are still happy with this plan as we have 
>> had a few 10.0.x milestone releases and we haven't made any efforts 
>> to remove the APR connector.
>>
>> I'm happy to remove APR from 10.0.x but I am equally happy postponing 
>> this to a later release if necessary.
>>
>> We'd still need Tomcat Native support to enable the use of OpenSSL 
>> with NIO and NIO2. I am only thinking of removing the APR based HTTP 
>> and AJP connectors (with associated plumbing) and possibly some of 
>> the org.apache.tomcat.jni package.
>>
>> Thoughts?
>>
> 
> I would rather postpone at this point, with the idea of really removing it in 
> 10.1.
> Maybe we should remove it from the docs in 10.0 in preparation for the move ?
> 
> Rémy
> 
> 
>>
>> Mark
>>
>> -
>> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For 
>> additional commands, e-mail: dev-h...@tomcat.apache.org
>>
>>
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For 
> additional commands, e-mail: dev-h...@tomcat.apache.org
> 


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional 
commands, e-mail: dev-h...@tomcat.apache.org

RE: [VOTE] Release Apache Tomcat 9.0.48

[jonmcalexander]

Is there a planned 8.5x release coming also? Haven't seen anything about a Vote 
for that yet.

Dream * Excel * Explore * Inspire
Jon McAlexander
Infrastructure Engineer
Asst Vice President

Middleware Product Engineering
Enterprise CIO | Platform Services | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com

Upcoming PTO: 10/30/2020, 11/6/2020, 11/13/2020, 11/20/2020, 11/27/2020, 
12/2/2020, 12/4/2020, 12/11/2020, 12/18/2020, 12/28/2020, 12/29/2020, 
12/30/2020, 12/31/2020
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.


> -Original Message-
> From: Mark Thomas 
> Sent: Thursday, June 10, 2021 1:30 PM
> To: dev@tomcat.apache.org
> Subject: Re: [VOTE] Release Apache Tomcat 9.0.48
> 
> On 10/06/2021 11:19, Rémy Maucherat wrote:
> 
> > The proposed 9.0.48 release is:
> > [ ] Broken - do not release
> > [X] Stable - go ahead and release as 9.0.48 (stable)
> 
> Mark
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional
> commands, e-mail: dev-h...@tomcat.apache.org

RE: [VOTE] Release Apache Tomcat 9.0.48

[jonmcalexander]

Thanks Sir Shultz! You're a Prince!

Dream * Excel * Explore * Inspire
Jon McAlexander
Infrastructure Engineer
Asst Vice President

Middleware Product Engineering
Enterprise CIO | Platform Services | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com

Upcoming PTO: 10/30/2020, 11/6/2020, 11/13/2020, 11/20/2020, 11/27/2020, 
12/2/2020, 12/4/2020, 12/11/2020, 12/18/2020, 12/28/2020, 12/29/2020, 
12/30/2020, 12/31/2020
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.


> -Original Message-
> From: Christopher Schultz 
> Sent: Thursday, June 10, 2021 2:43 PM
> To: dev@tomcat.apache.org
> Subject: Re: [VOTE] Release Apache Tomcat 9.0.48
> 
> Jon,
> 
> On 6/10/21 14:58, jonmcalexan...@wellsfargo.com.INVALID wrote:
> > Is there a planned 8.5x release coming also? Haven't seen anything about a
> Vote for that yet.
> 
> Yes, there is. I'm working on preparing to RM for this release.
> 
> -chris
> 
> >> -Original Message-
> >> From: Mark Thomas 
> >> Sent: Thursday, June 10, 2021 1:30 PM
> >> To: dev@tomcat.apache.org
> >> Subject: Re: [VOTE] Release Apache Tomcat 9.0.48
> >>
> >> On 10/06/2021 11:19, Rémy Maucherat wrote:
> >>
> >>> The proposed 9.0.48 release is:
> >>> [ ] Broken - do not release
> >>> [X] Stable - go ahead and release as 9.0.48 (stable)
> >>
> >> Mark
> >>
> >> -
> >> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For
> >> additional commands, e-mail: dev-h...@tomcat.apache.org
> >
> >
> > -
> > To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For
> > additional commands, e-mail: dev-h...@tomcat.apache.org
> >
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional
> commands, e-mail: dev-h...@tomcat.apache.org

RE: [SECURITY] CVE-2021-30639 Apache Tomcat DoS

[jonmcalexander]

Corrected Numbers. Subtract 3667 desktops from the 8.5.64 numbers.



8.5.64
DISCOVERED_VERSION

(Multiple Items)

ASSET_CLAS_DS

DESKTOP





Row Labels

Count of CI_NM_HOST

(blank)

3667

Grand Total

3667




Distributed Servers:
DISCOVERED_VERSION

(Multiple Items)

ASSET_CLAS_DS

DISTRIBUTED SERVERS


Row Labels

Count of CI_NM_HOST

CICCT-IVR-TECH

2

COMMONCHANNELINFRASTRUCTURE

6

CSG-DISTRIBUTEDSUPPORT

4

EFT-PLATMGMT-HROPERATIONSUPPOR

3

EFT-SPECSVCS-FINANCIALS;FST-SYSTEMARCHITECTURE

1

EIS-IPT-INFRACRYPTO;PLATMGMT-MWS-SERVICES

1

EPA-EBSPRODUCTIONAVAIL

1

FST-SYSTEMARCHITECTURE

1

NOMIDDLEWARE

110

NOMIDDLEWARE;PLATMGMT-MWS-SERVICES

1

PAC2000DEVELOPMENT

31

PAC2000-PLATFORMSUPPORT

1

PLATMGMT-MWS-SERVICES

52

PLATMGMT-MWS-SERVICES;ITECH-DOCUMENTUMSERVICES

9

QUALITYASSURANCE-INFRA

1

WFFISTHIRDPARTYAPPS

3

WHLSEQFINFOLEASE

1

WHLSTECHFXENGINEERING

7

WHLSTECHWMSMWSPECIALTYSVCS

1

WHLSWFGATEWAY

3

WHLSWFSCACHESERVICES

2

WHLSWFSPLANTMWSERVICES

1

(blank)

30

Grand Total

272








9.0.44

0 desktops



Distributed Servers:
DISCOVERED_VERSION

(Multiple Items)

ASSET_CLAS_DS

DISTRIBUTED SERVERS


Row Labels

Count of CI_NM_HOST

EFT-SPECSVCS-FINANCIALS;FST-SYSTEMARCHITECTURE

4

EIS-IPT-INFRACRYPTO;PLATMGMT-MWS-SERVICES

2

EPR-TECH-TOOLS

4

FST-SYSTEMARCHITECTURE

2

INTERNET.BANKING

119

INTERNET.BANKING;NOMIDDLEWARE

2

ISD-CONFIGURATIONMANAGEMENT

124

NOMIDDLEWARE

38

NOMIDDLEWARE;INTERNET.BANKING

2

PLATMGMT-MWS-SERVICES

16

WHLSTECHCRISP

1

WHLSWFSCACHESERVICES

3

WHLSWFSFIDATASERVICES

1

(blank)

8

Grand Total

326




Dream * Excel * Explore * Inspire

Jon McAlexander

Infrastructure Engineer

Asst Vice President



Middleware Product Engineering

Enterprise CIO | Platform Services | Middleware | Infrastructure Solutions



8080 Cobblestone Rd | Urbandale, IA 50322

MAC: F4469-010

Tel 515-988-2508 | Cell 515-988-2508



jonmcalexan...@wellsfargo.com



Upcoming PTO: 10/30/2020, 11/6/2020, 11/13/2020, 11/20/2020, 11/27/2020, 
12/2/2020, 12/4/2020, 12/11/2020, 12/18/2020, 12/28/2020, 12/29/2020, 
12/30/2020, 12/31/2020

This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.



> -Original Message-

> From: Mark Thomas 

> Sent: Monday, July 12, 2021 8:03 AM

> To: Tomcat Users List 

> Cc: annou...@tomcat.apache.org; annou...@apache.org; Tomcat

> Developers List 

> Subject: [SECURITY] CVE-2021-30639 Apache Tomcat DoS

> Importance: High

>

> CVE-2021-30639 Denial of Service

>

> Severity: Important

>

> Vendor: The Apache Software Foundation

>

> Versions Affected:

> Apache Tomcat 10.0.3 to 10.0.4

> Apache Tomcat 9.0.44

> Apache Tomcat 8.5.64

>

> Description:

> An error introduced as part of a change to improve error handling during

> non-blocking I/O meant that the error flag associated with the Request

> object was not reset between requests. This meant that once a non-blocking

> I/O error occurred, all future requests handled by that request object would

> fail. Users were able to trigger non-blocking I/O errors, e.g. by dropping a

> connection, thereby creating the possibility of triggering a DoS.

> Applications that do not use non-blocking I/O are not exposed to this

> vulnerability.

>

> Mitigation:

> Users of the affected versions should apply one of the following

> mitigations:

> - Upgrade to Apache Tomcat 10.0.5 or later

> - Upgrade to Apache Tomcat 9.0.45 or later

> - Upgrade to Apache Tomcat 8.5.65 or later

>

> History:

> 2021-07-12 Original advisory

>

> References:

> [1] 
> https://urldefense.com/v3/__https://tomcat.apache.org/security-

> 10.html__;!!F9svGWnIaVPGSwU!607UY9zjZTjuJp8fhq-

> p_3YkZV7gfGSmtkc7KbT-xIJEPa6eFDluFkSy1N7PMtUHTxMsAPk$

> [2] 
> https://urldefense.com/v3/__https://tomcat.apache.org/security-

> 9.html__;!!F9svGWnIaVPGSwU!607UY9zjZTjuJp8fhq-

RE: Plans for Tomcat 8.5.71

[jonmcalexander]

Any update on when voting is going to start?­


Thanks,


Sent with BlackBerry Work (www.blackberry.com)

From: Rémy Maucherat 
Sent: Sep 2, 2021 4:47 AM
To: Tomcat Developers List 
Subject: Re: Plans for Tomcat 8.5.71

On Wed, Sep 1, 2021 at 2:52 PM Christopher Schultz
 wrote:
>
> All,
>
> Since the tcnative vote has passed, and it's the beginning of the month,
> I expect to tag + call for a vote on 8.5.71 later today (US-Eastern
> time). It's an extra-long weekend in the US this upcoming weekend; if I
> get enough votes by Friday mid-day, I'll do the release, otherwise the
> vote will likely remain open until Wednesday morning.

I think you should wait for the tag on the main branch before doing
anything, otherwise you may be missing one of the "auto" pre tag
updates (poeditor, etc).

Rémy

>
> Thanks,
> -chris
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: dev-h...@tomcat.apache.org
>

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

RE: Plans for Tomcat 8.5.71

[jonmcalexander]

Thanks Chris, 

I didn't want to be a pick, I just track these things really close for internal 
release cycles. :-)

Dream * Excel * Explore * Inspire
Jon McAlexander
Infrastructure Engineer
Asst Vice President

Middleware Product Engineering
Enterprise CIO | EAS | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.

> -Original Message-
> From: Christopher Schultz 
> Sent: Thursday, September 9, 2021 1:51 PM
> To: Tomcat Developers List ;
> jonmcalexan...@wellsfargo.com.INVALID
> Subject: Re: Plans for Tomcat 8.5.71
> 
> Jon,
> 
> On 9/9/21 13:40, jonmcalexan...@wellsfargo.com.INVALID wrote:
> > Any update on when voting is going to start?­
> 
> I finally have the build working again after some (great!) changes to the
> release process.
> 
> The vote should be out as soon as I can get the Maven artifacts uploaded.
> 
> -chris
> 
> > 
> > From: Rémy Maucherat 
> > Sent: Sep 2, 2021 4:47 AM
> > To: Tomcat Developers List 
> > Subject: Re: Plans for Tomcat 8.5.71
> >
> > On Wed, Sep 1, 2021 at 2:52 PM Christopher Schultz
> >  wrote:
> >>
> >> All,
> >>
> >> Since the tcnative vote has passed, and it's the beginning of the
> >> month, I expect to tag + call for a vote on 8.5.71 later today
> >> (US-Eastern time). It's an extra-long weekend in the US this upcoming
> >> weekend; if I get enough votes by Friday mid-day, I'll do the
> >> release, otherwise the vote will likely remain open until Wednesday
> morning.
> >
> > I think you should wait for the tag on the main branch before doing
> > anything, otherwise you may be missing one of the "auto" pre tag
> > updates (poeditor, etc).
> >
> > Rémy
> >
> >>
> >> Thanks,
> >> -chris
> >>
> >> -
> >> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For
> >> additional commands, e-mail: dev-h...@tomcat.apache.org
> >>
> >
> > -
> > To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For
> > additional commands, e-mail: dev-h...@tomcat.apache.org
> >
> >
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional
> commands, e-mail: dev-h...@tomcat.apache.org


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

RE: Status of 10.0.x

[jonmcalexander]

Has a definitive decision been made regarding this? When will the 10.0x 
releases come to an end?

Dream * Excel * Explore * Inspire
Jon McAlexander
Senior Infrastructure Engineer
Asst. Vice President
He/His

Middleware Product Engineering
Enterprise CIO | EAS | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.

> -Original Message-
> From: Rémy Maucherat 
> Sent: Tuesday, September 27, 2022 8:55 AM
> To: Tomcat Developers List 
> Subject: Re: Status of 10.0.x
> 
> On Tue, Sep 27, 2022 at 12:46 PM Mark Thomas  wrote:
> >
> > On 27/09/2022 11:25, Rémy Maucherat wrote:
> > > On Tue, Sep 27, 2022 at 12:17 PM Mark Thomas 
> wrote:
> > >>
> > >> On 27/09/2022 11:15, Mark Thomas wrote:
> > >>> On 27/09/2022 10:31, Rémy Maucherat wrote:
> >  On Tue, Sep 27, 2022 at 11:23 AM Mark Thomas 
> wrote:
> > >
> > > On 27/09/2022 03:42, Han Li wrote:
> > >>
> > >>
> > >>> 2022年9月26日 23:07，Rémy Maucherat 
> 写道：
> > >>>
> > >>> On Mon, Sep 26, 2022 at 4:51 PM Mark Thomas
>  wrote:
> > 
> >  Hi all,
> > 
> >  Now 10.1.x is stable, how to we want to handle 10.0.x? Than
> >  plan has always been that we would support 10.0.x until 10.1.x
> was stable.
> > 
> >  Assuming the vote passes (we need 1 more +1) then there will
> >  be a
> >  10.0.26 release. Do we want that to be the last 10.0.x.
> >  release? If, not, how many more 10.0.x releases should there
> be?
> > >>>
> > >>> I'm not against stopping at 10.0.26 and directing people to 10.1.
> > >>
> > >> +1
> > >
> > > Given the regressions, I'm now thinking we do 10.0.27 at the
> > > start of October (i.e. start the release process next week) and
> > > - assuming no issues - make that the final release.
> > 
> >  Ok, but I'll have trouble doing a release cycle next week. Since
> >  there is a bad regression I would need to do 9.0.68 now.
> > >>>
> > >>> Understood. Can you give me a few hours to update the translations
> etc?
> > >>
> > >> Or we wait until the following week.
> > >>
> > >> Or I could do the 9.0.x release.
> > >>
> > >> Or ... ?
> > >
> > > Or you can do the 9.0 release next week (along with 10.0 and 10.1).
> > >
> > > So you have all the options on the table now I believe.
> >
> > I'm leaning towards leaving it a few days in case other regressions
> > emerge. I think that means me releasing next week if you are OK with
> > that plan.
> 
> That sounds like the best option for now, so +1.
> 
> Rémy
> 
> > Mark
> >
> > -
> > To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For
> > additional commands, e-mail: dev-h...@tomcat.apache.org
> >
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional
> commands, e-mail: dev-h...@tomcat.apache.org

RE: Status of 10.0.x

[jonmcalexander]

Thanks for the info. We were discussing strategy this morning and there was the 
question of 10.0x vs 10.1x. :-)

Dream * Excel * Explore * Inspire
Jon McAlexander
Senior Infrastructure Engineer
Asst. Vice President
He/His

Middleware Product Engineering
Enterprise CIO | EAS | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.


> -Original Message-
> From: Mark Thomas 
> Sent: Wednesday, October 26, 2022 1:36 PM
> To: dev@tomcat.apache.org
> Subject: Re: Status of 10.0.x
> 
> On 26/10/2022 17:45, jonmcalexan...@wellsfargo.com.INVALID wrote:
> > Has a definitive decision been made regarding this? When will the 10.0x
> releases come to an end?
> 
> The plan has always been for 10.0.x releases to cease once 10.1.x was stable.
> 
> My current expectation is that there will not be any further 10.0.x releases. 
> I
> am intending to remove 10.0.x from the downloads as part of the November
> release round.
> 
> A serious security vulnerability in 10.0.x might change that. Equally, we 
> might
> decide that an update to 10.1.x was an appropriate mitigation.
> 
> The final caveat is that any committer can decide to create a release
> candidate of any branch at any time. If they get at least 3 +1 votes from PMC
> members and more +1 votes than -1 votes then that release candidate will
> become a formal release. I'm not aware of any such plans but - in theory - it
> could happen.
> 
> Mark
> 
> 
> >
> > Dream * Excel * Explore * Inspire
> > Jon McAlexander
> > Senior Infrastructure Engineer
> > Asst. Vice President
> > He/His
> >
> > Middleware Product Engineering
> > Enterprise CIO | EAS | Middleware | Infrastructure Solutions
> >
> > 8080 Cobblestone Rd | Urbandale, IA 50322
> > MAC: F4469-010
> > Tel 515-988-2508 | Cell 515-988-2508
> >
> > jonmcalexan...@wellsfargo.com
> > This message may contain confidential and/or privileged information. If you
> are not the addressee or authorized to receive this for the addressee, you
> must not use, copy, disclose, or take any action based on this message or any
> information herein. If you have received this message in error, please advise
> the sender immediately by reply e-mail and delete this message. Thank you
> for your cooperation.
> >
> >> -Original Message-
> >> From: Rémy Maucherat 
> >> Sent: Tuesday, September 27, 2022 8:55 AM
> >> To: Tomcat Developers List 
> >> Subject: Re: Status of 10.0.x
> >>
> >> On Tue, Sep 27, 2022 at 12:46 PM Mark Thomas 
> wrote:
> >>>
> >>> On 27/09/2022 11:25, Rémy Maucherat wrote:
>  On Tue, Sep 27, 2022 at 12:17 PM Mark Thomas 
> >> wrote:
> >
> > On 27/09/2022 11:15, Mark Thomas wrote:
> >> On 27/09/2022 10:31, Rémy Maucherat wrote:
> >>> On Tue, Sep 27, 2022 at 11:23 AM Mark Thomas
> 
> >> wrote:
> 
>  On 27/09/2022 03:42, Han Li wrote:
> >
> >
> >> 2022年9月26日 23:07，Rémy Maucherat
> 
> >> 写道：
> >>
> >> On Mon, Sep 26, 2022 at 4:51 PM Mark Thomas
> >>  wrote:
> >>>
> >>> Hi all,
> >>>
> >>> Now 10.1.x is stable, how to we want to handle 10.0.x? Than
> >>> plan has always been that we would support 10.0.x until
> >>> 10.1.x
> >> was stable.
> >>>
> >>> Assuming the vote passes (we need 1 more +1) then there
> will
> >>> be a
> >>> 10.0.26 release. Do we want that to be the last 10.0.x.
> >>> release? If, not, how many more 10.0.x releases should there
> >> be?
> >>
> >> I'm not against stopping at 10.0.26 and directing people to 10.1.
> >
> > +1
> 
>  Given the regressions, I'm now thinking we do 10.0.27 at the
>  start of October (i.e. start the release process next week) and
>  - assuming no issues - make that the final release.
> >>>
> >>> Ok, but I'll have trouble doing a release cycle next week. Since
> >>> there is a bad regression I would need to do 9.0.68 now.
> >>
> >> Understood. Can you give me a few hours to update the
> >> translations
> >> etc?
> >
> > Or we wait until the following week.
> >
> > Or I could do the 9.0.x release.
> >
> > Or ... ?
> 
>  Or you can do the 9.0 release next week (along with 10.0 and 10.1).
> 
>  So you have all the options on the table now I believe.
> >>>
> >>> I'm leaning towards leaving it a few days in case other regressions
> >>> emerge. I think that means me releasing 

RE: Tomcat 8.5.84

[jonmcalexander]

I feel for ya man. Sounds like my typical day.

Dream * Excel * Explore * Inspire
Jon McAlexander
Senior Infrastructure Engineer
Asst. Vice President
He/His

Middleware Product Engineering
Enterprise CIO | EAS | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.

> -Original Message-
> From: Christopher Schultz 
> Sent: Wednesday, November 16, 2022 9:55 AM
> To: Tomcat Developers List 
> Subject: Re: Tomcat 8.5.84
> 
> All,
> 
> On 11/16/22 10:11, Christopher Schultz wrote:
> > All,
> >
> > On 11/15/22 21:43, Christopher Schultz wrote:
> >> All,
> >>
> >> Sorry, I've been MIA the past few days and haven't yet rolled an
> >> 8.5.84 release.
> >>
> >> I will begin the process tomorrow.
> >>
> >> -chris
> >
> > Ugh, I'm having VirtualBox problems. Again. I don't store my
> > code-signing cert in the virtual machine, I keep it on my real machine
> > and mount a directory from host to guest to access it. And the mapping
> > isn't working for some reason.
> 
> D'oh. VitualBox hadn't been given access to my "Downloads" folder and the
> program on the guest isn't smart enough to notify the user in the guest that
> it's a problem. :/
> 
> -chris
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional
> commands, e-mail: dev-h...@tomcat.apache.org

RE: [ANN] Apache Tomcat 8.5.84 available

[jonmcalexander]

Please update the subject line. :-)

Dream * Excel * Explore * Inspire
Jon McAlexander
Senior Infrastructure Engineer
Asst. Vice President
He/His

Middleware Product Engineering
Enterprise CIO | EAS | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.


> -Original Message-
> From: Christopher Schultz 
> Sent: Thursday, January 19, 2023 2:15 PM
> To: Tomcat Developers List ; Tomcat Users List
> ; annou...@tomcat.apache.org;
> annou...@apache.org
> Subject: [ANN] Apache Tomcat 8.5.84 available
> Importance: High
> 
> The Apache Tomcat team announces the immediate availability of Apache
> Tomcat 8.5.85.
> 
> Apache Tomcat 8 is an open source software implementation of the Java
> Servlet, JavaServer Pages, Java Unified Expression Language, Java
> WebSocket and JASPIC technologies.
> 
> Apache Tomcat 8.5.85 is a bugfix and feature release. The notable changes
> compared to 8.5.84 include:
> 
> - The default value of AccessLogValve's file encoding is
> now UTF-8.
> 
> - Correct a regression in the refactoring that replaced the use of the
> URL constructors. The regression broke lookups for resources that
> contained one or more characters in their name that required escaping
> when used in a URI path.
> 
> - When an HTTP/2 stream was reset, the current active stream count was
> not reduced. If enough resets occurred on a connection, the current
> active stream count limit was reached and no new streams could be
> created on that connection.
> 
> - Change the default of the
> org.apache.el.GET_CLASSLOADER_USE_PRIVILEGED
> system property to true unless the EL library is running on Tomcat in
> which case the default remains false as the EL library is already
> called from within a privileged block and skipping the unnecessary
> privileged block improves performance.
> 
> Along with lots of other bug fixes and improvements.
> 
> Please refer to the change log for the complete list of changes:
> https://urldefense.com/v3/__https://tomcat.apache.org/tomcat-8.5-
> doc/changelog.html__;!!F9svGWnIaVPGSwU!tDwmxw-uaKfem6BEKLq-
> Id8FG97PqzTfCb08s-
> SjMz8raZCoUhoYA5JCWnWkSkJdWMVfeYCzNW7zotqQHLCbEB9B$
> 
> Downloads:
> https://urldefense.com/v3/__https://tomcat.apache.org/download-
> 80.cgi__;!!F9svGWnIaVPGSwU!tDwmxw-uaKfem6BEKLq-
> Id8FG97PqzTfCb08s-
> SjMz8raZCoUhoYA5JCWnWkSkJdWMVfeYCzNW7zotqQHFBGWIuR$
> 
> Migration guides from Apache Tomcat 7.x and 8.0:
> https://urldefense.com/v3/__https://tomcat.apache.org/migration.html__;
> !!F9svGWnIaVPGSwU!tDwmxw-uaKfem6BEKLq-Id8FG97PqzTfCb08s-
> SjMz8raZCoUhoYA5JCWnWkSkJdWMVfeYCzNW7zotqQHPlBxE8v$
> 
> Please note that Tomcat 8.5.x will reach End-of-life (EOL) on 31 March 2024.
> For more information please
> visit https://urldefense.com/v3/__https://tomcat.apache.org/tomcat-85-
> eol.html__;!!F9svGWnIaVPGSwU!tDwmxw-uaKfem6BEKLq-
> Id8FG97PqzTfCb08s-
> SjMz8raZCoUhoYA5JCWnWkSkJdWMVfeYCzNW7zotqQHHwbRXpJ$
> 
> Enjoy!
> 
> - The Apache Tomcat team
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional
> commands, e-mail: dev-h...@tomcat.apache.org


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

RE: [VOTE][RESULT] Release Apache Tomcat 10.1.5

[jonmcalexander]

Has this actually been released?

Dream * Excel * Explore * Inspire
Jon McAlexander
Senior Infrastructure Engineer
Asst. Vice President
He/His

Middleware Product Engineering
Enterprise CIO | EAS | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.

> -Original Message-
> From: Mark Thomas 
> Sent: Friday, January 13, 2023 7:48 AM
> To: dev@tomcat.apache.org
> Subject: [VOTE][RESULT] Release Apache Tomcat 10.1.5
> 
> The following votes were cast:
> 
> Binding:
> +1: markt, remm, jfclere
> +0: schultz
> 
> Non-binding:
> +1: lihan
> 
> The vote therefore passes. Thanks to everyone who contributed to this
> release.
> 
> Mark
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional
> commands, e-mail: dev-h...@tomcat.apache.org

RE: [VOTE][RESULT] Release Apache Tomcat 10.1.5

[jonmcalexander]

Thank you!

Dream * Excel * Explore * Inspire
Jon McAlexander
Senior Infrastructure Engineer
Asst. Vice President
He/His

Middleware Product Engineering
Enterprise CIO | EAS | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.


> -Original Message-
> From: Mark Thomas 
> Sent: Monday, January 23, 2023 2:41 PM
> To: dev@tomcat.apache.org
> Subject: Re: [VOTE][RESULT] Release Apache Tomcat 10.1.5
> 
> On 23/01/2023 17:44, jonmcalexan...@wellsfargo.com.INVALID wrote:
> > Has this actually been released?
> 
> Yes. Looks like I forgot to send out the announcement. I'll do that now.
> 
> Mark
> 
> 
> >
> > Dream * Excel * Explore * Inspire
> > Jon McAlexander
> > Senior Infrastructure Engineer
> > Asst. Vice President
> > He/His
> >
> > Middleware Product Engineering
> > Enterprise CIO | EAS | Middleware | Infrastructure Solutions
> >
> > 8080 Cobblestone Rd | Urbandale, IA 50322
> > MAC: F4469-010
> > Tel 515-988-2508 | Cell 515-988-2508
> >
> > jonmcalexan...@wellsfargo.com
> > This message may contain confidential and/or privileged information. If you
> are not the addressee or authorized to receive this for the addressee, you
> must not use, copy, disclose, or take any action based on this message or any
> information herein. If you have received this message in error, please advise
> the sender immediately by reply e-mail and delete this message. Thank you
> for your cooperation.
> >
> >> -Original Message-
> >> From: Mark Thomas 
> >> Sent: Friday, January 13, 2023 7:48 AM
> >> To: dev@tomcat.apache.org
> >> Subject: [VOTE][RESULT] Release Apache Tomcat 10.1.5
> >>
> >> The following votes were cast:
> >>
> >> Binding:
> >> +1: markt, remm, jfclere
> >> +0: schultz
> >>
> >> Non-binding:
> >> +1: lihan
> >>
> >> The vote therefore passes. Thanks to everyone who contributed to this
> >> release.
> >>
> >> Mark
> >>
> >> -
> >> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For
> >> additional commands, e-mail: dev-h...@tomcat.apache.org
> >
> >
> > -
> > To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For
> > additional commands, e-mail: dev-h...@tomcat.apache.org
> >
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional
> commands, e-mail: dev-h...@tomcat.apache.org


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

RE: November releases

[jonmcalexander]

> -Original Message-
> From: Mark Thomas 
> Sent: Monday, November 8, 2021 8:02 AM
> To: dev@tomcat.apache.org
> Subject: Re: November releases
> 
> On 05/11/2021 08:37, Mark Thomas wrote:
> > On 02/11/2021 16:58, Christopher Schultz wrote:
> >> Mark,
> >>
> >> On 11/2/21 07:45, Mark Thomas wrote:
> >>> Hi all,
> >>>
> >>> There doesn't seem to be much in the changelogs at the moment and
> >>> the code signing is currently unavailable as the renewal process is
> >>> taking longer than expected. Therefore, my current thinking is to
> >>> delay the release process and review the situation towards the end
> >>> of the week.
> >>>
> >>> Thoughts?
> >>
> >> +1
> >>
> >> I was thinking the same thing (not much to release).
> >
> > The code signing service is now back up and running.
> >
> > I'd like to configure the code signing service to use a certificate
> > that includes "Tomcat" in the name (currently we have a dedicated cert
> > for Tomcat but it names the ASF as a whole). That should be fairly quick.
> >
> > I'd also like to iron out the wrinkles in the new CI service. As far
> > as I can tell, the Tomcat jobs have been migrated but there are a few
> > small issues to resolve.
> >
> > I plan to work on the above today and - if make sufficient progress -
> > intend to tag towards the end of today although that might slip to
> > over the weekend / early next week.
> 
> The cert change is currently pending the request for new certificate being
> approved by the CA. I think this can wait until next time.
> 
> The migrated BuildBot service is pretty much there. I need to update the
> links on the web site, confirm the APR tests run correctly now the native
> library is available on the worker and iron out any other wrinkles.
> 
> I am therefore going to tag 10.1.0-M7 and 10.0.12 once my local test runs
> complete (assuming there are no test failures).
> 
> Mark
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional
> commands, e-mail: dev-h...@tomcat.apache.org

10.0.12? But this is already released, or am I missing something?



Dream * Excel * Explore * Inspire
Jon McAlexander
Infrastructure Engineer
Asst Vice President

Middleware Product Engineering
Enterprise CIO | EAS | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.

RE: November releases

[jonmcalexander]

Thanks!

Dream * Excel * Explore * Inspire
Jon McAlexander
Infrastructure Engineer
Asst Vice President

Middleware Product Engineering
Enterprise CIO | EAS | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.


> -Original Message-
> From: Mark Thomas 
> Sent: Monday, November 8, 2021 1:36 PM
> To: dev@tomcat.apache.org
> Subject: Re: November releases
> 
> On 08/11/2021 18:15, jonmcalexan...@wellsfargo.com.INVALID wrote:
> >> -Original Message-
> >> From: Mark Thomas 
> >> Sent: Monday, November 8, 2021 8:02 AM
> >> To: dev@tomcat.apache.org
> >> Subject: Re: November releases
> 
> 
> 
> >> I am therefore going to tag 10.1.0-M7 and 10.0.12 once my local test
> >> runs complete (assuming there are no test failures).
> >>
> >> Mark
> >>
> >> -
> >> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For
> >> additional commands, e-mail: dev-h...@tomcat.apache.org
> >
> > 10.0.12? But this is already released, or am I missing something?
> 
> Typo. I meant 10.0.13.
> 
> Mark
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional
> commands, e-mail: dev-h...@tomcat.apache.org

RE: APR crashes when running tests on Windows

[jonmcalexander]

Great Job Mark!!!

Dream * Excel * Explore * Inspire
Jon McAlexander
Infrastructure Engineer
Asst Vice President

Middleware Product Engineering
Enterprise CIO | EAS | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.

> -Original Message-
> From: Mark Thomas 
> Sent: Tuesday, November 9, 2021 2:02 PM
> To: dev@tomcat.apache.org
> Subject: Re: APR crashes when running tests on Windows
> 
> On 09/11/2021 18:33, Mark Thomas wrote:
> > On 09/11/2021 10:28, Michael Osipov wrote:
> >> Am 2021-11-09 um 10:40 schrieb Mark Thomas:
> >>> All,
> >>>
> >>> I am seeing some fairly consistent crashes when running the APR
> >>> tests on Windows for 10.0.x. I'm going to spend some time trying to
> >>> track down the root cause before I tag the next 10.0.x release.
> >>
> >> That's surprising, all of a sudden?
> >
> > Yes, but it seems related to me switching to a new, clean built
> > Windows VM for pre-release testing and release building. The VM is on
> > different
> > (slower) hardware so I suspect I have just uncovered a timing issue.
> >
> >> Can you share the dump/backtrace of the crash while you are analyzing
> >> the issue?
> >
> > I have various dump files but haven't got anything useful out of them
> > (I suspect my lack of knowledge is the primary factor here).
> >
> > I have managed to make progress though. It looks like the Connector
> > fails to initialise, we don't handle that properly and when it tries
> > to continue with a null socket, APR gets a tad upset.
> >
> > I'm hopeful I'll get to the bottom of this later today.
> 
> Fixed it. The short version is:
> 
> - default time wait delay and ephemeral port range on Windows meant unit
>tests were running out of ports
> 
> - APR wasn't handling the init() failure and carrying on with an invalid
>socket
> 
> - as soon as any code tried to use the invalid socket, the JVM crashed
> 
> 
> I've fixed the init() failure handling so we now see test failures rather than
> JVM crashes.
> 
> I've adjusted the OS settings for the VM where I run the tests so the time
> wait delay is shorter so the test process doesn't run out of ports.
> 
> The 10.0.x tag should follow later today.
> 
> Mark
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional
> commands, e-mail: dev-h...@tomcat.apache.org

RE: [ANN] Apache Tomcat 8.5.73 available

[jonmcalexander]

http://tomcat.apache.org/tomcat-8.5-doc/changelog.html


Dream * Excel * Explore * Inspire
Jon McAlexander
Infrastructure Engineer
Asst Vice President

Middleware Product Engineering
Enterprise CIO | EAS | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.


> -Original Message-
> From: Christopher Schultz 
> Sent: Wednesday, November 17, 2021 1:46 PM
> To: Tomcat Users List 
> Cc: Tomcat Developers List ;
> annou...@tomcat.apache.org; annou...@apache.org
> Subject: [ANN] Apache Tomcat 8.5.73 available
> Importance: High
> 
> The Apache Tomcat team announces the immediate availability of Apache
> Tomcat 8.5.73.
> 
> Apache Tomcat 8 is an open source software implementation of the Java
> Servlet, JavaServer Pages, Java Unified Expression Language, Java
> WebSocket and Java Authentication Service Provider Interface for Containers
> technologies.
> 
> Apache Tomcat 8.5.73 is a bugfix and feature release. The notable changes
> compared to 8.5.72 include:
> 
> - Improvements to native/APR including avoiding a JVM crash if APR fails
>  to properly initialize and improving error handling.
> 
> - Improve robustness of JNDIRealm for exceptions occurring when getting
>  the connection.
> 
> Along with lots of other bug fixes and improvements.
> 
> Please refer to the change log for the complete list of changes:
> https://urldefense.com/v3/__http://tomcat.apache.org/tomcat-8.5-
> doc/changelog.html__;!!F9svGWnIaVPGSwU!6M_AzW35z0_d9hp6uZCdKi23
> uNop4D_uAulQBHDVeyUkeZvY043ysooWNnR0kJBwhnndkws$
> 
> Downloads:
> https://urldefense.com/v3/__http://tomcat.apache.org/download-
> 80.cgi__;!!F9svGWnIaVPGSwU!6M_AzW35z0_d9hp6uZCdKi23uNop4D_uAul
> QBHDVeyUkeZvY043ysooWNnR0kJBwbBI0P0A$
> 
> Migration guides from Apache Tomcat 7.x and 8.0.x:
> https://urldefense.com/v3/__http://tomcat.apache.org/migration.html__;!!
> F9svGWnIaVPGSwU!6M_AzW35z0_d9hp6uZCdKi23uNop4D_uAulQBHDVeyU
> keZvY043ysooWNnR0kJBwOGUnpqA$
> 
> Enjoy!
> 
> - The Apache Tomcat team
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional
> commands, e-mail: dev-h...@tomcat.apache.org
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional
> commands, e-mail: dev-h...@tomcat.apache.org

RE: [ANN] Apache Tomcat 8.5.73 available

[jonmcalexander]

Please ignore this

Dream * Excel * Explore * Inspire
Jon McAlexander
Infrastructure Engineer
Asst Vice President

Middleware Product Engineering
Enterprise CIO | EAS | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.


> -Original Message-
> From: jonmcalexan...@wellsfargo.com.INVALID
> 
> Sent: Wednesday, November 17, 2021 4:35 PM
> To: dev@tomcat.apache.org; us...@tomcat.apache.org
> Cc: annou...@tomcat.apache.org; annou...@apache.org
> Subject: RE: [ANN] Apache Tomcat 8.5.73 available
> Importance: High
> 
> https://urldefense.com/v3/__http://tomcat.apache.org/tomcat-8.5-
> doc/changelog.html__;!!F9svGWnIaVPGSwU!93daTIhZydgRkeOLLwvrekOfB
> dPqKtwM1UV7UQee40_sA2Xh0zUwQe44ktUV8k4bsyJifVo$
> 
> 
> Dream * Excel * Explore * Inspire
> Jon McAlexander
> Infrastructure Engineer
> Asst Vice President
> 
> Middleware Product Engineering
> Enterprise CIO | EAS | Middleware | Infrastructure Solutions
> 
> 8080 Cobblestone Rd | Urbandale, IA 50322
> MAC: F4469-010
> Tel 515-988-2508 | Cell 515-988-2508
> 
> jonmcalexan...@wellsfargo.com
> This message may contain confidential and/or privileged information. If you
> are not the addressee or authorized to receive this for the addressee, you
> must not use, copy, disclose, or take any action based on this message or any
> information herein. If you have received this message in error, please advise
> the sender immediately by reply e-mail and delete this message. Thank you
> for your cooperation.
> 
> 
> > -Original Message-
> > From: Christopher Schultz 
> > Sent: Wednesday, November 17, 2021 1:46 PM
> > To: Tomcat Users List 
> > Cc: Tomcat Developers List ;
> > annou...@tomcat.apache.org; annou...@apache.org
> > Subject: [ANN] Apache Tomcat 8.5.73 available
> > Importance: High
> >
> > The Apache Tomcat team announces the immediate availability of Apache
> > Tomcat 8.5.73.
> >
> > Apache Tomcat 8 is an open source software implementation of the Java
> > Servlet, JavaServer Pages, Java Unified Expression Language, Java
> > WebSocket and Java Authentication Service Provider Interface for
> > Containers technologies.
> >
> > Apache Tomcat 8.5.73 is a bugfix and feature release. The notable
> > changes compared to 8.5.72 include:
> >
> > - Improvements to native/APR including avoiding a JVM crash if APR fails
> >  to properly initialize and improving error handling.
> >
> > - Improve robustness of JNDIRealm for exceptions occurring when getting
> >  the connection.
> >
> > Along with lots of other bug fixes and improvements.
> >
> > Please refer to the change log for the complete list of changes:
> > https://urldefense.com/v3/__http://tomcat.apache.org/tomcat-8.5-
> >
> doc/changelog.html__;!!F9svGWnIaVPGSwU!6M_AzW35z0_d9hp6uZCdKi23
> > uNop4D_uAulQBHDVeyUkeZvY043ysooWNnR0kJBwhnndkws$
> >
> > Downloads:
> > https://urldefense.com/v3/__http://tomcat.apache.org/download-
> >
> 80.cgi__;!!F9svGWnIaVPGSwU!6M_AzW35z0_d9hp6uZCdKi23uNop4D_uAul
> > QBHDVeyUkeZvY043ysooWNnR0kJBwbBI0P0A$
> >
> > Migration guides from Apache Tomcat 7.x and 8.0.x:
> >
> https://urldefense.com/v3/__http://tomcat.apache.org/migration.html__;!!
> >
> F9svGWnIaVPGSwU!6M_AzW35z0_d9hp6uZCdKi23uNop4D_uAulQBHDVeyU
> > keZvY043ysooWNnR0kJBwOGUnpqA$
> >
> > Enjoy!
> >
> > - The Apache Tomcat team
> >
> > -
> > To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For
> > additional commands, e-mail: dev-h...@tomcat.apache.org
> >
> > -
> > To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For
> > additional commands, e-mail: dev-h...@tomcat.apache.org

RE: Tomcat Connectors (JK) release

[jonmcalexander]

Is there any expected issue with dropping AJP 1.2? I don't think I've ever used 
it, but just wanting to make sure we flesh that out. :-)

Dream * Excel * Explore * Inspire
Jon McAlexander
Infrastructure Engineer
Asst Vice President
He/His

Middleware Product Engineering
Enterprise CIO | EAS | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.

> -Original Message-
> From: Mark Thomas 
> Sent: Friday, March 18, 2022 11:07 AM
> To: Tomcat Developers List 
> Subject: Tomcat Connectors (JK) release
> 
> Hi all,
> 
> I was planning to do a Tomcat Connectors (JK) release soonish along with
> testing that everything still works with the newest versions of Windows.
> 
> I was wondering about making it a 1.3.0 release and dropping AJP/1.2
> support.
> 
> Thoughts?
> 
> Mark
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional
> commands, e-mail: dev-h...@tomcat.apache.org

RE: Tomcat Connectors (JK) release

[jonmcalexander]

That's good to know. In that case I would say get rid of it with prejudice. :-)

Dream * Excel * Explore * Inspire
Jon McAlexander
Infrastructure Engineer
Asst Vice President
He/His

Middleware Product Engineering
Enterprise CIO | EAS | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.


> -Original Message-
> From: Mark Thomas 
> Sent: Friday, March 18, 2022 11:23 AM
> To: dev@tomcat.apache.org
> Subject: Re: Tomcat Connectors (JK) release
> 
> On 18/03/2022 16:15, jonmcalexan...@wellsfargo.com.INVALID wrote:
> > Is there any expected issue with dropping AJP 1.2? I don't think I've
> > ever used it, but just wanting to make sure we flesh that out. :-)
> 
> I don't think so.
> 
> I had to go back to Tomcat 3.x to find support for AJP/1.2.
> 
> Mark
> 
> 
> >
> > Dream * Excel * Explore * Inspire
> > Jon McAlexander
> > Infrastructure Engineer
> > Asst Vice President
> > He/His
> >
> > Middleware Product Engineering
> > Enterprise CIO | EAS | Middleware | Infrastructure Solutions
> >
> > 8080 Cobblestone Rd | Urbandale, IA 50322
> > MAC: F4469-010
> > Tel 515-988-2508 | Cell 515-988-2508
> >
> > jonmcalexan...@wellsfargo.com
> > This message may contain confidential and/or privileged information. If you
> are not the addressee or authorized to receive this for the addressee, you
> must not use, copy, disclose, or take any action based on this message or any
> information herein. If you have received this message in error, please advise
> the sender immediately by reply e-mail and delete this message. Thank you
> for your cooperation.
> >
> >> -Original Message-
> >> From: Mark Thomas 
> >> Sent: Friday, March 18, 2022 11:07 AM
> >> To: Tomcat Developers List 
> >> Subject: Tomcat Connectors (JK) release
> >>
> >> Hi all,
> >>
> >> I was planning to do a Tomcat Connectors (JK) release soonish along
> >> with testing that everything still works with the newest versions of
> Windows.
> >>
> >> I was wondering about making it a 1.3.0 release and dropping AJP/1.2
> >> support.
> >>
> >> Thoughts?
> >>
> >> Mark
> >>
> >> -
> >> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For
> >> additional commands, e-mail: dev-h...@tomcat.apache.org
> >
> >
> > -
> > To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For
> > additional commands, e-mail: dev-h...@tomcat.apache.org
> >
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional
> commands, e-mail: dev-h...@tomcat.apache.org


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

RE: Tomcat 8.5.78 (and other branches as well)

[jonmcalexander]

So, you are planning to release just 2 to 3 weeks after the last one? Talk 
about a cadence. :-)

Dream * Excel * Explore * Inspire
Jon McAlexander
Infrastructure Engineer
Asst Vice President
He/His

Middleware Product Engineering
Enterprise CIO | EAS | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.

> -Original Message-
> From: Mark Thomas 
> Sent: Tuesday, March 22, 2022 11:11 AM
> To: dev@tomcat.apache.org
> Subject: Re: Tomcat 8.5.78 (and other branches as well)
> 
> FYI I'm aiming to tag 10.1.x and 10.0.x late Tuesday next week with a view to
> completing the VOTE on Saturday as I have other things on the first full week
> of April and finding time to do a release could be tricky.
> 
> Mark
> 
> 
> On 22/03/2022 13:56, Christopher Schultz wrote:
> > All,
> >
> > Given the fact that tcnative 1.2.32 was released to include a
> > freshly-patched, statically-linked openssl binary, I plan on rolling
> > 8.5.78 next Thursday, March 31st. (I would have done Friday but I
> > don't want any confusion over the use of April 1st as a day to
> > announce
> > anything.) This will give Windows admins a chance to have a package
> > they can install without having to juggle a Tomcat release separately
> > from a tcnative release.
> >
> > I would like to take this opportunity to remind any Windows admins out
> > there that there is also a new binary release of Apache httpd
> > available from Apache Lounge[1] which includes all the latest CVEs
> > reported against httpd itself as well as OpenSSL. I would make that a
> > priority if I were you.
> >
> > -chris
> >
> > [1]
> >
> https://urldefense.com/v3/__https://www.apachelounge.com/download/_
> _;!
> >
> !F9svGWnIaVPGSwU!521rcPGj71ChiJc7_7kSSFFdPVJI9Lqnga4H4aU5lCv2eXjR
> 0OK2e
> > nUWxohrRyVTotTrVQQ$
> >
> > -
> > To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For
> > additional commands, e-mail: dev-h...@tomcat.apache.org
> >
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional
> commands, e-mail: dev-h...@tomcat.apache.org


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

RE: Tomcat 8.5.78 (and other branches as well)

[jonmcalexander]

Chris,

> -Original Message-
> From: Christopher Schultz 
> Sent: Tuesday, March 22, 2022 11:43 AM
> To: dev@tomcat.apache.org
> Subject: Re: Tomcat 8.5.78 (and other branches as well)
> 
> Jon,
> 
> On 3/22/22 12:25, jonmcalexan...@wellsfargo.com.INVALID wrote:
> > So, you are planning to release just 2 to 3 weeks after the last one?
> > Talk about a cadence. :-)
> Hey, "Release Early, Release Often".
> 

> We have been keeping-up a roughly monthly release cycle for a few years,
> now. The Feb and March releases were delayed a bit so we could finish-up
> some thing we wanted to get into those, so the April releases seem "sooner"
> than usual. Enjoy!
> 
I know about the monthly cadence, it just seems a lot sooner lately, that's 
all. :-) Keeping me on my toes with no relaxation time. :-)


> -Chris
> 
> >> -Original Message-
> >> From: Mark Thomas 
> >> Sent: Tuesday, March 22, 2022 11:11 AM
> >> To: dev@tomcat.apache.org
> >> Subject: Re: Tomcat 8.5.78 (and other branches as well)
> >>
> >> FYI I'm aiming to tag 10.1.x and 10.0.x late Tuesday next week with a
> >> view to completing the VOTE on Saturday as I have other things on the
> >> first full week of April and finding time to do a release could be tricky.
> >>
> >> Mark
> >>
> >>
> >> On 22/03/2022 13:56, Christopher Schultz wrote:
> >>> All,
> >>>
> >>> Given the fact that tcnative 1.2.32 was released to include a
> >>> freshly-patched, statically-linked openssl binary, I plan on rolling
> >>> 8.5.78 next Thursday, March 31st. (I would have done Friday but I
> >>> don't want any confusion over the use of April 1st as a day to
> >>> announce
> >>> anything.) This will give Windows admins a chance to have a package
> >>> they can install without having to juggle a Tomcat release
> >>> separately from a tcnative release.
> >>>
> >>> I would like to take this opportunity to remind any Windows admins
> >>> out there that there is also a new binary release of Apache httpd
> >>> available from Apache Lounge[1] which includes all the latest CVEs
> >>> reported against httpd itself as well as OpenSSL. I would make that
> >>> a priority if I were you.
> >>>
> >>> -chris
> >>>
> >>> [1]
> >>>
> >>
> https://urldefense.com/v3/__https://www.apachelounge.com/download/_
> >> _;!
> >>>
> >>
> !F9svGWnIaVPGSwU!521rcPGj71ChiJc7_7kSSFFdPVJI9Lqnga4H4aU5lCv2eXjR
> >> 0OK2e
> >>> nUWxohrRyVTotTrVQQ$
> >>>
> >>> 
> >>> - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For
> >>> additional commands, e-mail: dev-h...@tomcat.apache.org
> >>>
> >>
> >> -
> >> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For
> >> additional commands, e-mail: dev-h...@tomcat.apache.org
> >
> >
> > -
> > To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For
> > additional commands, e-mail: dev-h...@tomcat.apache.org
> >
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional
> commands, e-mail: dev-h...@tomcat.apache.org



Dream * Excel * Explore * Inspire
Jon McAlexander
Infrastructure Engineer
Asst Vice President
He/His

Middleware Product Engineering
Enterprise CIO | EAS | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.



-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

RE: EOL dates for Tomcat 5.0 and 4.1?

[jonmcalexander]

If nobody else does, I dub thee 

"The Librarian"!!!

Dream * Excel * Explore * Inspire
Jon McAlexander
Infrastructure Engineer
Asst Vice President
He/His

Middleware Product Engineering
Enterprise CIO | EAS | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.


> -Original Message-
> From: Konstantin Kolinko 
> Sent: Monday, March 28, 2022 3:10 PM
> To: Tomcat Developers List 
> Subject: Re: EOL dates for Tomcat 5.0 and 4.1?
> 
> пн, 28 мар. 2022 г. в 19:36, Christopher Schultz
> :
> >
> > All,
> >
> > Did the Apache Tomcat project ever officially announce an EOL date for
> > Tomcat 5.0 and 4.x? Or for 3.x for that matter?
> >
> > I was looking at the Wikipedia page for Tomcat and they didn't have
> > EOL dates for anything before 6.0, so I filled-in the date for 5.5 but
> > I can't find older EOL announcements.
> >
> > This page
> >
> https://urldefense.com/v3/__https://tomcat.apache.org/whichversion.html
> __;!!F9svGWnIaVPGSwU!4-uXfWX21aLQ75RonP7ikKOuxTyuxhzpEAg1A3-
> TYFUYkf3eJ0sPNo0qeZD3uJMMiN0hd0o$  contains links to the EOL
> announcements for 5.5, 6.0, 7.0, and 8.0.
> >
> > I wonder if the project ever made any "official" EOL announcements for
> > those versions, and whether or not anyone cares enough to make those
> > announcements at this point, just for "posterity"? Not to fix the
> > Wikipedia page, but more to have something official to point to to say
> > "this version is officially unsupported by the vendor" just in case
> > some dummy somewhere wants to say "we run the latest available version
> > of Tomcat 4.1 from the vendor" and their product is therefore full of holes.
> 
> announce@ list was created in June 2009, so all those announcements were
> on users@
> 
> https://urldefense.com/v3/__https://lists.apache.org/thread/z6ljrkdqtjgnm
> xfctnk6f1v4dp42ptnw__;!!F9svGWnIaVPGSwU!4-
> uXfWX21aLQ75RonP7ikKOuxTyuxhzpEAg1A3-
> TYFUYkf3eJ0sPNo0qeZD3uJMMVZP8zeA$
> [ANN] Apache Tomcat 5.0.x no longer supported
> 2007-10-23
> 
> https://urldefense.com/v3/__https://lists.apache.org/thread/nw4vpbwgrn4
> 80gsvn06f4qj4yhoo89v7__;!!F9svGWnIaVPGSwU!4-
> uXfWX21aLQ75RonP7ikKOuxTyuxhzpEAg1A3-
> TYFUYkf3eJ0sPNo0qeZD3uJMMhMlY8qA$
> [ANN] Tomcat support status
> 2008-03-13
> - It involved site cleanup, immediate EOL for 3.3, and EOL for 4.1 announced
> to be June 2009.
> 
> 
> BTW, if anyone is interested, announcements for the last releases of
> 4.0 and 3.3:
> 
> https://urldefense.com/v3/__https://lists.apache.org/thread/v1ccn429s9lh3
> 2ypvwwhxo26zhh1965c__;!!F9svGWnIaVPGSwU!4-
> uXfWX21aLQ75RonP7ikKOuxTyuxhzpEAg1A3-
> TYFUYkf3eJ0sPNo0qeZD3uJMMLnhTHRU$
> [ANN] Apache Tomcat 4.1.40 stable is now available
> 2009-06-26
> "Apache Tomcat 4.1.40 is very likely to be the last release of the
> 4.1.x series."
> 
> https://urldefense.com/v3/__https://lists.apache.org/thread/q0bb1756s8zx
> g949ocodmm2j2o9ntpfq__;!!F9svGWnIaVPGSwU!4-
> uXfWX21aLQ75RonP7ikKOuxTyuxhzpEAg1A3-
> TYFUYkf3eJ0sPNo0qeZD3uJMM-UQ43E4$
> [ANN] Release of Tomcat 3.3.2
> 2004-03-09.
> 
> Best regards,
> Konstantin Kolinko
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: dev-h...@tomcat.apache.org

RE: EOL dates for Tomcat 5.0 and 4.1?

[jonmcalexander]

Chris,

Yeah, but, this is Tomcat, not Stack Overflow. :-)

Dream * Excel * Explore * Inspire
Jon McAlexander
Infrastructure Engineer
Asst Vice President
He/His

Middleware Product Engineering
Enterprise CIO | EAS | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.


> -Original Message-
> From: Christopher Schultz 
> Sent: Monday, March 28, 2022 4:47 PM
> To: dev@tomcat.apache.org
> Subject: Re: EOL dates for Tomcat 5.0 and 4.1?
> 
> Jon,
> 
> On 3/28/22 16:24, jonmcalexan...@wellsfargo.com.INVALID wrote:
> > If nobody else does, I dub thee
> >
> > "The Librarian"!!!
> 
> Stack Overflow rewards this kind of work with a badge called "Necromancer".
> 
> -chris
> 
> >> -Original Message-
> >> From: Konstantin Kolinko 
> >> Sent: Monday, March 28, 2022 3:10 PM
> >> To: Tomcat Developers List 
> >> Subject: Re: EOL dates for Tomcat 5.0 and 4.1?
> >>
> >> пн, 28 мар. 2022 г. в 19:36, Christopher Schultz
> >> :
> >>>
> >>> All,
> >>>
> >>> Did the Apache Tomcat project ever officially announce an EOL date
> >>> for Tomcat 5.0 and 4.x? Or for 3.x for that matter?
> >>>
> >>> I was looking at the Wikipedia page for Tomcat and they didn't have
> >>> EOL dates for anything before 6.0, so I filled-in the date for 5.5
> >>> but I can't find older EOL announcements.
> >>>
> >>> This page
> >>>
> >>
> https://urldefense.com/v3/__https://tomcat.apache.org/whichversion.ht
> >> ml
> >> __;!!F9svGWnIaVPGSwU!4-uXfWX21aLQ75RonP7ikKOuxTyuxhzpEAg1A3-
> >> TYFUYkf3eJ0sPNo0qeZD3uJMMiN0hd0o$  contains links to the EOL
> >> announcements for 5.5, 6.0, 7.0, and 8.0.
> >>>
> >>> I wonder if the project ever made any "official" EOL announcements
> >>> for those versions, and whether or not anyone cares enough to make
> >>> those announcements at this point, just for "posterity"? Not to fix
> >>> the Wikipedia page, but more to have something official to point to
> >>> to say "this version is officially unsupported by the vendor" just
> >>> in case some dummy somewhere wants to say "we run the latest
> >>> available version of Tomcat 4.1 from the vendor" and their product is
> therefore full of holes.
> >>
> >> announce@ list was created in June 2009, so all those announcements
> >> were on users@
> >>
> >> https://urldefense.com/v3/__https://lists.apache.org/thread/z6ljrkdqt
> >> jgnm
> >> xfctnk6f1v4dp42ptnw__;!!F9svGWnIaVPGSwU!4-
> >> uXfWX21aLQ75RonP7ikKOuxTyuxhzpEAg1A3-
> >> TYFUYkf3eJ0sPNo0qeZD3uJMMVZP8zeA$
> >> [ANN] Apache Tomcat 5.0.x no longer supported
> >> 2007-10-23
> >>
> >>
> https://urldefense.com/v3/__https://lists.apache.org/thread/nw4vpbwgr
> >> n4
> >> 80gsvn06f4qj4yhoo89v7__;!!F9svGWnIaVPGSwU!4-
> >> uXfWX21aLQ75RonP7ikKOuxTyuxhzpEAg1A3-
> >> TYFUYkf3eJ0sPNo0qeZD3uJMMhMlY8qA$
> >> [ANN] Tomcat support status
> >> 2008-03-13
> >> - It involved site cleanup, immediate EOL for 3.3, and EOL for 4.1
> >> announced to be June 2009.
> >>
> >>
> >> BTW, if anyone is interested, announcements for the last releases of
> >> 4.0 and 3.3:
> >>
> >> https://urldefense.com/v3/__https://lists.apache.org/thread/v1ccn429s
> >> 9lh3
> >> 2ypvwwhxo26zhh1965c__;!!F9svGWnIaVPGSwU!4-
> >> uXfWX21aLQ75RonP7ikKOuxTyuxhzpEAg1A3-
> >> TYFUYkf3eJ0sPNo0qeZD3uJMMLnhTHRU$
> >> [ANN] Apache Tomcat 4.1.40 stable is now available
> >> 2009-06-26
> >> "Apache Tomcat 4.1.40 is very likely to be the last release of the
> >> 4.1.x series."
> >>
> >> https://urldefense.com/v3/__https://lists.apache.org/thread/q0bb1756s
> >> 8zx
> >> g949ocodmm2j2o9ntpfq__;!!F9svGWnIaVPGSwU!4-
> >> uXfWX21aLQ75RonP7ikKOuxTyuxhzpEAg1A3-
> >> TYFUYkf3eJ0sPNo0qeZD3uJMM-UQ43E4$
> >> [ANN] Release of Tomcat 3.3.2
> >> 2004-03-09.
> >>
> >> Best regards,
> >> Konstantin Kolinko
> >>
> >> -
> >> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For
> >> additional commands, e-mail: dev-h...@tomcat.apache.org
> >
> >
> > -
> > To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For
> > additional commands, e-mail: dev-h...@tomcat.apache.org
> >
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional
> commands, e-mail: dev-h...@tomcat.apache.org

Setting up Eclipse IDE on Windows using separate CATALINA_BASE

[jonmcalexander]

I'm reaching out to the experts that I know of. Does anyone have a process for 
successfully configuring Eclipse IDE on Windows 10 to use Apache Tomcat that 
has a separate CATALINA_BASE from the CATALINA_HOME (Binaries)?

Thanks,

Dream * Excel * Explore * Inspire
Jon McAlexander
Infrastructure Engineer
Asst Vice President

Middleware Product Engineering
Enterprise CIO | Platform Services | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com

Upcoming PTO: 10/30/2020, 11/6/2020, 11/13/2020, 11/20/2020, 11/27/2020, 
12/2/2020, 12/4/2020, 12/11/2020, 12/18/2020, 12/28/2020, 12/29/2020, 
12/30/2020, 12/31/2020
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.

RE: Setting up Eclipse IDE on Windows using separate CATALINA_BASE

[jonmcalexander]

Thank you!

Dream * Excel * Explore * Inspire
Jon McAlexander
Infrastructure Engineer
Asst Vice President

Middleware Product Engineering
Enterprise CIO | Platform Services | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com

Upcoming PTO: 10/30/2020, 11/6/2020, 11/13/2020, 11/20/2020, 11/27/2020, 
12/2/2020, 12/4/2020, 12/11/2020, 12/18/2020, 12/28/2020, 12/29/2020, 
12/30/2020, 12/31/2020
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.


> -Original Message-
> From: Konstantin Kolinko 
> Sent: Wednesday, December 9, 2020 5:16 PM
> To: Tomcat Developers List 
> Subject: Re: Setting up Eclipse IDE on Windows using separate
> CATALINA_BASE
> 
> чт, 10 дек. 2020 г. в 02:03, :
> >
> > I'm reaching out to the experts that I know of. Does anyone have a process
> for successfully configuring Eclipse IDE on Windows 10 to use Apache Tomcat
> that has a separate CATALINA_BASE from the CATALINA_HOME (Binaries)?
> 
> See the FAQ:
> https://cwiki.apache.org/confluence/display/TOMCAT/Developing
> 
> HTH
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional
> commands, e-mail: dev-h...@tomcat.apache.org

RE: Setting up Eclipse IDE on Windows using separate CATALINA_BASE

[jonmcalexander]

I appreciate these links, but I'm getting no joy from it as it's not working 
for me. I point eclipse to my instance and don't get Finish. I point it to the 
symbolic link which points to the c:\program files location, and I get finish, 
but I can't do anything with it. It shows localhost, but I can't click next or 
finish. Isn't there somewhere in eclipse that I can tell it CATALINA_HOME is 
here and CATALINA_BASE is there and it reads In the configurations?

Thanks,

Dream * Excel * Explore * Inspire
Jon McAlexander
Infrastructure Engineer
Asst Vice President

Middleware Product Engineering
Enterprise CIO | Platform Services | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com

Upcoming PTO: 10/30/2020, 11/6/2020, 11/13/2020, 11/20/2020, 11/27/2020, 
12/2/2020, 12/4/2020, 12/11/2020, 12/18/2020, 12/28/2020, 12/29/2020, 
12/30/2020, 12/31/2020
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.

> -Original Message-
> From: Konstantin Kolinko 
> Sent: Wednesday, December 9, 2020 5:16 PM
> To: Tomcat Developers List 
> Subject: Re: Setting up Eclipse IDE on Windows using separate
> CATALINA_BASE
> 
> чт, 10 дек. 2020 г. в 02:03, :
> >
> > I'm reaching out to the experts that I know of. Does anyone have a process
> for successfully configuring Eclipse IDE on Windows 10 to use Apache Tomcat
> that has a separate CATALINA_BASE from the CATALINA_HOME (Binaries)?
> 
> See the FAQ:
> https://cwiki.apache.org/confluence/display/TOMCAT/Developing
> 
> HTH
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional
> commands, e-mail: dev-h...@tomcat.apache.org


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Migration Guide question

[jonmcalexander]

Quick question.

In looking at the Migration Guides, there is a guide for going from 7.0x to 
8.0x and a guide for going from 8.0x to 8.5x. However, there isn't a guide for 
going from Tomcat 7x to 8.5x. With 7.0 going EOL at the end of March, is there 
any hope of a migration plan for developers going from 7x to 8.5x?

Thanks,

Dream * Excel * Explore * Inspire
Jon McAlexander
Infrastructure Engineer
Asst Vice President

Middleware Product Engineering
Enterprise CIO | Platform Services | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com

Upcoming PTO: 10/30/2020, 11/6/2020, 11/13/2020, 11/20/2020, 11/27/2020, 
12/2/2020, 12/4/2020, 12/11/2020, 12/18/2020, 12/28/2020, 12/29/2020, 
12/30/2020, 12/31/2020
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.

RE: Migration Guide question

[jonmcalexander]

Thanks Mark!

Dream * Excel * Explore * Inspire
Jon McAlexander
Infrastructure Engineer
Asst Vice President

Middleware Product Engineering
Enterprise CIO | Platform Services | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com

Upcoming PTO: 10/30/2020, 11/6/2020, 11/13/2020, 11/20/2020, 11/27/2020, 
12/2/2020, 12/4/2020, 12/11/2020, 12/18/2020, 12/28/2020, 12/29/2020, 
12/30/2020, 12/31/2020
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.

> -Original Message-
> From: Mark Thomas 
> Sent: Monday, January 11, 2021 1:59 AM
> To: Tomcat Developers List 
> Subject: Re: Migration Guide question
> 
> On 11/01/2021 05:04, jonmcalexan...@wellsfargo.com.INVALID wrote:
> > Quick question.
> >
> > In looking at the Migration Guides, there is a guide for going from 7.0x to
> 8.0x and a guide for going from 8.0x to 8.5x. However, there isn't a guide for
> going from Tomcat 7x to 8.5x. With 7.0 going EOL at the end of March, is
> there any hope of a migration plan for developers going from 7x to 8.5x?
> 
> Unlikely. Any such guide would just be a concatenation of the 7.0.x to 8.0.x
> guide and the 8.0.x to 8.5.x guide. Creating a 7.0.x to 8.5.x guide would just
> create a maintenance overhead.
> 
> I've just scanned through those docs and don't see anything else that would
> be required.
> 
> Mark
> 
> 
> >
> > Thanks,
> >
> > Dream * Excel * Explore * Inspire
> > Jon McAlexander
> > Infrastructure Engineer
> > Asst Vice President
> >
> > Middleware Product Engineering
> > Enterprise CIO | Platform Services | Middleware | Infrastructure
> > Solutions
> >
> > 8080 Cobblestone Rd | Urbandale, IA 50322
> > MAC: F4469-010
> > Tel 515-988-2508 | Cell 515-988-2508
> >
> >
> jonmcalexan...@wellsfargo.com
> >
> > Upcoming PTO: 10/30/2020, 11/6/2020, 11/13/2020, 11/20/2020,
> > 11/27/2020, 12/2/2020, 12/4/2020, 12/11/2020, 12/18/2020, 12/28/2020,
> 12/29/2020, 12/30/2020, 12/31/2020 This message may contain confidential
> and/or privileged information. If you are not the addressee or authorized to
> receive this for the addressee, you must not use, copy, disclose, or take any
> action based on this message or any information herein. If you have received
> this message in error, please advise the sender immediately by reply e-mail
> and delete this message. Thank you for your cooperation.
> >
> >
> 
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional
> commands, e-mail: dev-h...@tomcat.apache.org


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

RE: [VOTE] Release Apache Tomcat 10.0.1

[jonmcalexander]

Please forgive my ignorance, but would this then be considered the first 
Official Release of Tomcat 10x, or is it still considered Beta?

Thanks,

Dream * Excel * Explore * Inspire
Jon McAlexander
Infrastructure Engineer
Asst Vice President

Middleware Product Engineering
Enterprise CIO | Platform Services | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com

Upcoming PTO: 10/30/2020, 11/6/2020, 11/13/2020, 11/20/2020, 11/27/2020, 
12/2/2020, 12/4/2020, 12/11/2020, 12/18/2020, 12/28/2020, 12/29/2020, 
12/30/2020, 12/31/2020
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.

> -Original Message-
> From: Mark Thomas 
> Sent: Wednesday, January 27, 2021 9:09 AM
> To: Tomcat Developers List 
> Subject: [VOTE] Release Apache Tomcat 10.0.1
> 
> The proposed Apache Tomcat 10.0.1 release is now available for voting.
> 
> Apache Tomcat 10.x implements Jakarta EE 9 and, as such, the primary package
> for all the specification APIs has changed from javax.* to jakarta.* 
> Applications
> that run on Tomcat 9 will not run on Tomcat 10 without changes.
> 
> The notable changes compared to 10.0.1 are:
> 
> - Add support for using Unix domain sockets for NIO when running on
>   Java 16 or later.
> 
> - Add a new StringInterpreter interface that allows applications to
>   provide customised string attribute value to type conversion within
>   JSPs. This allows applications to provide a conversion
>   implementation that is optimised for the application.
> 
> - Add peerAddress to coyote request, which contains the IP address of
>   the direct connection peer. If a reverse proxy sits in front of
>   Tomcat and the protocol used is AJP or HTTP in combination with the
>   RemoteIp(Valve|Filter), the peer address might differ from the
>   remoteAddress. The latter then contains the address of the client in
>   front of the reverse proxy, not the address of the proxy itself.
> 
> Along with lots of other bug fixes and improvements.
> 
> 
> For full details, see the changelog:
> https://ci.apache.org/projects/tomcat/tomcat10/docs/changelog.html
> 
> It can be obtained from:
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-10/v10.0.1/
> The Maven staging repo is:
> https://repository.apache.org/content/repositories/orgapachetomcat-1292/
> The tag is:
> https://github.com/apache/tomcat/tree/10.0.1
> e4344b6bd67359e1690312674d83710a793f1d5b
> 
> The proposed 10.0.1 release is:
> [ ] Broken - do not release
> [ ] Beta   - go ahead and release as 10.0.1 (beta)
> [ ] Stable - go ahead and release as 10.0.1 (stable)
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional
> commands, e-mail: dev-h...@tomcat.apache.org


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

RE: [VOTE] Release Apache Tomcat 10.0.1

[jonmcalexander]

Thank you,

Dream * Excel * Explore * Inspire
Jon McAlexander
Infrastructure Engineer
Asst Vice President

Middleware Product Engineering
Enterprise CIO | Platform Services | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com

Upcoming PTO: 10/30/2020, 11/6/2020, 11/13/2020, 11/20/2020, 11/27/2020, 
12/2/2020, 12/4/2020, 12/11/2020, 12/18/2020, 12/28/2020, 12/29/2020, 
12/30/2020, 12/31/2020
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.


> -Original Message-
> From: Mark Thomas 
> Sent: Wednesday, January 27, 2021 1:38 PM
> To: dev@tomcat.apache.org
> Subject: Re: [VOTE] Release Apache Tomcat 10.0.1
> 
> On 27/01/2021 19:28, jonmcalexan...@wellsfargo.com.INVALID wrote:
> > Please forgive my ignorance, but would this then be considered the first
> Official Release of Tomcat 10x, or is it still considered Beta?
> 
> I depends on the result of the vote. Assuming the vote to release passes, if 
> more
> people vote for stable than beta it will be announced as stable.
> 
> Mark
> 
> 
> >
> > Thanks,
> >
> > Dream * Excel * Explore * Inspire
> > Jon McAlexander
> > Infrastructure Engineer
> > Asst Vice President
> >
> > Middleware Product Engineering
> > Enterprise CIO | Platform Services | Middleware | Infrastructure
> > Solutions
> >
> > 8080 Cobblestone Rd | Urbandale, IA 50322
> > MAC: F4469-010
> > Tel 515-988-2508 | Cell 515-988-2508
> >
> > jonmcalexan...@wellsfargo.com
> >
> > Upcoming PTO: 10/30/2020, 11/6/2020, 11/13/2020, 11/20/2020,
> > 11/27/2020, 12/2/2020, 12/4/2020, 12/11/2020, 12/18/2020, 12/28/2020,
> 12/29/2020, 12/30/2020, 12/31/2020 This message may contain confidential
> and/or privileged information. If you are not the addressee or authorized to
> receive this for the addressee, you must not use, copy, disclose, or take any
> action based on this message or any information herein. If you have received
> this message in error, please advise the sender immediately by reply e-mail 
> and
> delete this message. Thank you for your cooperation.
> >
> >> -Original Message-
> >> From: Mark Thomas 
> >> Sent: Wednesday, January 27, 2021 9:09 AM
> >> To: Tomcat Developers List 
> >> Subject: [VOTE] Release Apache Tomcat 10.0.1
> >>
> >> The proposed Apache Tomcat 10.0.1 release is now available for voting.
> >>
> >> Apache Tomcat 10.x implements Jakarta EE 9 and, as such, the primary
> >> package for all the specification APIs has changed from javax.* to
> >> jakarta.* Applications that run on Tomcat 9 will not run on Tomcat 10
> without changes.
> >>
> >> The notable changes compared to 10.0.1 are:
> >>
> >> - Add support for using Unix domain sockets for NIO when running on
> >>   Java 16 or later.
> >>
> >> - Add a new StringInterpreter interface that allows applications to
> >>   provide customised string attribute value to type conversion within
> >>   JSPs. This allows applications to provide a conversion
> >>   implementation that is optimised for the application.
> >>
> >> - Add peerAddress to coyote request, which contains the IP address of
> >>   the direct connection peer. If a reverse proxy sits in front of
> >>   Tomcat and the protocol used is AJP or HTTP in combination with the
> >>   RemoteIp(Valve|Filter), the peer address might differ from the
> >>   remoteAddress. The latter then contains the address of the client in
> >>   front of the reverse proxy, not the address of the proxy itself.
> >>
> >> Along with lots of other bug fixes and improvements.
> >>
> >>
> >> For full details, see the changelog:
> >> https://ci.apache.org/projects/tomcat/tomcat10/docs/changelog.html
> >>
> >> It can be obtained from:
> >> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-10/v10.0.1/
> >> The Maven staging repo is:
> >> https://repository.apache.org/content/repositories/orgapachetomcat-12
> >> 92/
> >> The tag is:
> >> https://github.com/apache/tomcat/tree/10.0.1
> >> e4344b6bd67359e1690312674d83710a793f1d5b
> >>
> >> The proposed 10.0.1 release is:
> >> [ ] Broken - do not release
> >> [ ] Beta   - go ahead and release as 10.0.1 (beta)
> >> [ ] Stable - go ahead and release as 10.0.1 (stable)
> >>
> >> -
> >> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For
> >> additional commands, e-mail: dev-h...@tomcat.apache.org
> >
> >
> > -
> > To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For
> > additional commands, e-mail: dev-h...@tomcat.apache.org
> >
> 

Question

[jonmcalexander]

Hi Folks! Another wild and crazy question.

So, Tomcat 10.0.2. I see that it uses Jakarta EE 9, and the README states it 
requires at least Java 8. So, will it run just fine on Java 1.8x or does the 
Jakarta EE 1.9 have to be installed?

Thanks,

Dream * Excel * Explore * Inspire
Jon McAlexander
Infrastructure Engineer
Asst Vice President

Middleware Product Engineering
Enterprise CIO | Platform Services | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com

Upcoming PTO: 10/30/2020, 11/6/2020, 11/13/2020, 11/20/2020, 11/27/2020, 
12/2/2020, 12/4/2020, 12/11/2020, 12/18/2020, 12/28/2020, 12/29/2020, 
12/30/2020, 12/31/2020
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.

RE: Question

[jonmcalexander]

Thank you so much Mark!!! Yesterday was a PEBKAC day.


Sent with BlackBerry Work (www.blackberry.com)

From: Mark Thomas 
Sent: Feb 4, 2021 1:57 AM
To: dev@tomcat.apache.org
Subject: Re: Question

On 04/02/2021 05:04, jonmcalexan...@wellsfargo.com.INVALID wrote:
> Hi Folks! Another wild and crazy question.
>
> So, Tomcat 10.0.2. I see that it uses Jakarta EE 9, and the README states it 
> requires at least Java 8. So, will it run just fine on Java 1.8x or does the 
> Jakarta EE 1.9 have to be installed?

You only need Java 8.

There is no such thing as Jakarta EE 1.9.

Jakarta EE 9 is a collection of APIs and specifications for how those
APIs are expected to behave. Tomcat implements a subset of those
specifications and APIs (Servlet, WebSocket, EL, Server Pages,
Authentication and Annotations).

Note that you cannot take an application that works on Tomcat 9 and use
it unchanged on Tomcat 10 because in the move from Java EE 8 (Tomcat 9)
to Jakarta EE 9 (Tomcat 10) the java package name used by all the APIs
changed from javax... to jakarta...

The Tomcat community has provided a migration tool that converts
applications from Java EE 8 to Jakarta EE 9:
https://github.com/apache/tomcat-jakartaee-migration

HTH,

Mark


>
> Thanks,
>
> Dream * Excel * Explore * Inspire
> Jon McAlexander
> Infrastructure Engineer
> Asst Vice President
>
> Middleware Product Engineering
> Enterprise CIO | Platform Services | Middleware | Infrastructure Solutions
>
> 8080 Cobblestone Rd | Urbandale, IA 50322
> MAC: F4469-010
> Tel 515-988-2508 | Cell 515-988-2508
>
> jonmcalexan...@wellsfargo.com
>
> Upcoming PTO: 10/30/2020, 11/6/2020, 11/13/2020, 11/20/2020, 11/27/2020, 
> 12/2/2020, 12/4/2020, 12/11/2020, 12/18/2020, 12/28/2020, 12/29/2020, 
> 12/30/2020, 12/31/2020
> This message may contain confidential and/or privileged information. If you 
> are not the addressee or authorized to receive this for the addressee, you 
> must not use, copy, disclose, or take any action based on this message or any 
> information herein. If you have received this message in error, please advise 
> the sender immediately by reply e-mail and delete this message. Thank you for 
> your cooperation.
>
>


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

RE: [ANN] Apache Tomcat 7.0.108 released

[jonmcalexander]

We are getting the firewall error again like we did once last year, stating 
that its blacklisted.

Dream * Excel * Explore * Inspire
Jon McAlexander
Infrastructure Engineer
Asst Vice President

Middleware Product Engineering
Enterprise CIO | Platform Services | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com

Upcoming PTO: 10/30/2020, 11/6/2020, 11/13/2020, 11/20/2020, 11/27/2020, 
12/2/2020, 12/4/2020, 12/11/2020, 12/18/2020, 12/28/2020, 12/29/2020, 
12/30/2020, 12/31/2020
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.


> -Original Message-
> From: Violeta Georgieva 
> Sent: Monday, February 8, 2021 3:21 AM
> To: Tomcat Users List ; Tomcat Developers List
> ; annou...@tomcat.apache.org;
> annou...@apache.org
> Subject: [ANN] Apache Tomcat 7.0.108 released
> Importance: High
> 
> The Apache Tomcat team announces the immediate availability of Apache
> Tomcat 7.0.108.
> 
> Apache Tomcat is an open source software implementation of the Java Servlet,
> JavaServer Pages, Java Expression Language and Java WebSocket technologies.
> 
> This release contains a number of bug fixes and improvements compared to
> version 7.0.107. The notable changes since 7.0.107 include:
> 
> 
> - Fix a potential file descriptor leak when WebSocket connections are
>   attempted and fail. Patch provided by Maurizio Adami.
> 
> 
> Please refer to the change log for the complete list of changes:
> http://tomcat.apache.org/tomcat-7.0-doc/changelog.html
> 
> Apache Tomcat website:
> http://tomcat.apache.org
> 
> Downloads:
> http://tomcat.apache.org/download-70.cgi
> 
> Migration guides from Apache Tomcat 5.5.x and 6.0.x:
> http://tomcat.apache.org/migration.html
> 
> Enjoy
> 
> The Apache Tomcat team

RE: [VOTE] Release Apache Tomcat 10.1.0-M14

[jonmcalexander]

Noting the Hardening of the class loader, is this going to require this to be a 
security release of the newest Tomcat releases (forthcoming), or will they 
still just be standard releases?

Thanks,

Dream * Excel * Explore * Inspire
Jon McAlexander
Infrastructure Engineer
Asst Vice President
He/His

Middleware Product Engineering
Enterprise CIO | EAS | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.


> -Original Message-
> From: Mark Thomas 
> Sent: Thursday, March 31, 2022 8:58 AM
> To: Tomcat Developers List 
> Subject: [VOTE] Release Apache Tomcat 10.1.0-M14
> 
> The proposed Apache Tomcat 10.1.0-M14 release is now available for voting.
> 
> Applications that run on Tomcat 9 and earlier will not run on Tomcat 10
> without changes. Java EE applications designed for Tomcat 9 and earlier may
> be placed in the $CATALINA_BASE/webapps-javaee directory and Tomcat
> will automatically convert them to Jakarta EE and copy them to the webapps
> directory.
> 
> The notable changes compared to 10.1.0-M12 are:
> 
> - Update the packaged version of the Tomcat Native Library to 1.2.32 to
>pick up Windows binaries built with OpenSSL 1.1.1n.
> 
> - Improve logging of unknown HTTP/2 settings frames. Pull request by
>Thomas Hoffmann.
> 
> - Update the JASPIC 2.0 API to Jakarta Authentication 3.0 (JASPIC was
>renamed for Jakarta EE 10)
> 
> - Harden the class loader to provide a mitigation for CVE-2022-22965
>a Spring Framework vulnerability
> 
> For full details, see the change log:
> https://urldefense.com/v3/__https://nightlies.apache.org/tomcat/tomcat-
> 10.1.x/docs/changelog.html__;!!F9svGWnIaVPGSwU!8mSg3B7bwW3JnbXXA
> HCr-s8j6bZCdu7KDUxw0l3wJQ8OI_ns3yIc_U-_KVbJQJhG49qpLRI$
> 
> It can be obtained from:
> https://urldefense.com/v3/__https://dist.apache.org/repos/dist/dev/tomc
> at/tomcat-10/v10.1.0-
> M14/__;!!F9svGWnIaVPGSwU!8mSg3B7bwW3JnbXXAHCr-
> s8j6bZCdu7KDUxw0l3wJQ8OI_ns3yIc_U-_KVbJQJhG6BHBJ-s$
> 
> The Maven staging repo is:
> https://urldefense.com/v3/__https://repository.apache.org/content/reposi
> tories/orgapachetomcat-
> 1367__;!!F9svGWnIaVPGSwU!8mSg3B7bwW3JnbXXAHCr-
> s8j6bZCdu7KDUxw0l3wJQ8OI_ns3yIc_U-_KVbJQJhG7SAVFwo$
> 
> The tag is:
> https://urldefense.com/v3/__https://github.com/apache/tomcat/tree/10.1.
> 0-M14__;!!F9svGWnIaVPGSwU!8mSg3B7bwW3JnbXXAHCr-
> s8j6bZCdu7KDUxw0l3wJQ8OI_ns3yIc_U-_KVbJQJhGfLmoUPs$
> 02e84c839def0228475fad85d0b19abc2f70b03f
> 
> 
> The proposed 10.1.0-M14 release is:
> [ ] Broken - do not release
> [ ] Alpha - go ahead and release as 10.1.0-M14 (alpha)
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: dev-h...@tomcat.apache.org


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

RE: [VOTE] Release Apache Tomcat 9.0.61

[jonmcalexander]

Rémy,

Will the Spring Framework Zero Day result in moving to release 9.0.62, 
surpassing 9.0.61 currently in vote?

Thanks,

Dream * Excel * Explore * Inspire
Jon McAlexander
Infrastructure Engineer
Asst Vice President
He/His

Middleware Product Engineering
Enterprise CIO | EAS | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.


> -Original Message-
> From: Rémy Maucherat 
> Sent: Wednesday, March 30, 2022 3:22 AM
> To: Tomcat Developers List 
> Subject: [VOTE] Release Apache Tomcat 9.0.61
> 
> The proposed Apache Tomcat 9.0.61 release is now available for voting.
> 
> The notable changes compared to 9.0.60 are:
> 
> - Fix a potential thread-safety issue that could cause HTTP/1.1 request
>processing to pause, and potentially timeout, waiting for additional
>data when the full request has been received.
> 
> - Fix a regression introduced with 65757 bugfix which better identified
>non request threads but which introduced a similar problem when user
>code was doing sequential operations in a single thread.
> 
> - When resolving methods in EL expressions that use beans and/or static
>fields, ensure that any custom type conversion is considered when
>identifying the method to call.
> 
> Along with lots of other bug fixes and improvements.
> 
> For full details, see the changelog:
> https://urldefense.com/v3/__https://nightlies.apache.org/tomcat/tomcat-
> 9.0.x/docs/changelog.html__;!!F9svGWnIaVPGSwU!7XK-DbVirPj3r-
> F7wfi6sKyGhYbedykficURS6hxf41RBWPgm_J3aM8LgZ-NVP4f6n0DAak$
> 
> It can be obtained from:
> https://urldefense.com/v3/__https://dist.apache.org/repos/dist/dev/tomc
> at/tomcat-9/v9.0.61/__;!!F9svGWnIaVPGSwU!7XK-DbVirPj3r-
> F7wfi6sKyGhYbedykficURS6hxf41RBWPgm_J3aM8LgZ-NVP4fLrXOhN4$
> The Maven staging repo is:
> https://urldefense.com/v3/__https://repository.apache.org/content/reposi
> tories/orgapachetomcat-1366__;!!F9svGWnIaVPGSwU!7XK-DbVirPj3r-
> F7wfi6sKyGhYbedykficURS6hxf41RBWPgm_J3aM8LgZ-NVP4fYUTTyiA$
> The tag is:
> https://urldefense.com/v3/__https://github.com/apache/tomcat/tree/9.0.6
> 1__;!!F9svGWnIaVPGSwU!7XK-DbVirPj3r-
> F7wfi6sKyGhYbedykficURS6hxf41RBWPgm_J3aM8LgZ-NVP4fVDyFgoI$
> 6c6432ac1416ed369f892b9ce76e10c7eb10b91c
> 
> The proposed 9.0.61 release is:
> [ ] Broken - do not release
> [ ] Stable - go ahead and release as 9.0.61 (stable)
> 
> Rémy
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional
> commands, e-mail: dev-h...@tomcat.apache.org

RE: [VOTE] Release Apache Tomcat 10.1.0-M14

[jonmcalexander]

Sorry, just read the thread in tomcat.developers. I don't know about doing in 
parallel. IT may be best to just supersede to 10.0.20 and 9.0.62 instead of 
rolling .19 and .61. Less confusion.

Dream * Excel * Explore * Inspire
Jon McAlexander
Infrastructure Engineer
Asst Vice President
He/His

Middleware Product Engineering
Enterprise CIO | EAS | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.


> -Original Message-
> From: jonmcalexan...@wellsfargo.com.INVALID
> 
> Sent: Thursday, March 31, 2022 9:56 AM
> To: dev@tomcat.apache.org
> Subject: RE: [VOTE] Release Apache Tomcat 10.1.0-M14
> 
> Noting the Hardening of the class loader, is this going to require this to be 
> a
> security release of the newest Tomcat releases (forthcoming), or will they
> still just be standard releases?
> 
> Thanks,
> 
> Dream * Excel * Explore * Inspire
> Jon McAlexander
> Infrastructure Engineer
> Asst Vice President
> He/His
> 
> Middleware Product Engineering
> Enterprise CIO | EAS | Middleware | Infrastructure Solutions
> 
> 8080 Cobblestone Rd | Urbandale, IA 50322
> MAC: F4469-010
> Tel 515-988-2508 | Cell 515-988-2508
> 
> jonmcalexan...@wellsfargo.com
> This message may contain confidential and/or privileged information. If you
> are not the addressee or authorized to receive this for the addressee, you
> must not use, copy, disclose, or take any action based on this message or any
> information herein. If you have received this message in error, please advise
> the sender immediately by reply e-mail and delete this message. Thank you
> for your cooperation.
> 
> 
> > -Original Message-
> > From: Mark Thomas 
> > Sent: Thursday, March 31, 2022 8:58 AM
> > To: Tomcat Developers List 
> > Subject: [VOTE] Release Apache Tomcat 10.1.0-M14
> >
> > The proposed Apache Tomcat 10.1.0-M14 release is now available for
> voting.
> >
> > Applications that run on Tomcat 9 and earlier will not run on Tomcat
> > 10 without changes. Java EE applications designed for Tomcat 9 and
> > earlier may be placed in the $CATALINA_BASE/webapps-javaee directory
> > and Tomcat will automatically convert them to Jakarta EE and copy them
> > to the webapps directory.
> >
> > The notable changes compared to 10.1.0-M12 are:
> >
> > - Update the packaged version of the Tomcat Native Library to 1.2.32 to
> >pick up Windows binaries built with OpenSSL 1.1.1n.
> >
> > - Improve logging of unknown HTTP/2 settings frames. Pull request by
> >Thomas Hoffmann.
> >
> > - Update the JASPIC 2.0 API to Jakarta Authentication 3.0 (JASPIC was
> >renamed for Jakarta EE 10)
> >
> > - Harden the class loader to provide a mitigation for CVE-2022-22965
> >a Spring Framework vulnerability
> >
> > For full details, see the change log:
> > https://urldefense.com/v3/__https://nightlies.apache.org/tomcat/tomcat
> > -
> 10.1.x/docs/changelog.html__;!!F9svGWnIaVPGSwU!8mSg3B7bwW3JnbXXA
> > HCr-s8j6bZCdu7KDUxw0l3wJQ8OI_ns3yIc_U-_KVbJQJhG49qpLRI$
> >
> > It can be obtained from:
> > https://urldefense.com/v3/__https://dist.apache.org/repos/dist/dev/tom
> > c
> > at/tomcat-10/v10.1.0-
> > M14/__;!!F9svGWnIaVPGSwU!8mSg3B7bwW3JnbXXAHCr-
> > s8j6bZCdu7KDUxw0l3wJQ8OI_ns3yIc_U-_KVbJQJhG6BHBJ-s$
> >
> > The Maven staging repo is:
> > https://urldefense.com/v3/__https://repository.apache.org/content/repo
> > si
> > tories/orgapachetomcat-
> > 1367__;!!F9svGWnIaVPGSwU!8mSg3B7bwW3JnbXXAHCr-
> > s8j6bZCdu7KDUxw0l3wJQ8OI_ns3yIc_U-_KVbJQJhG7SAVFwo$
> >
> > The tag is:
> >
> https://urldefense.com/v3/__https://github.com/apache/tomcat/tree/10.1.
> > 0-M14__;!!F9svGWnIaVPGSwU!8mSg3B7bwW3JnbXXAHCr-
> > s8j6bZCdu7KDUxw0l3wJQ8OI_ns3yIc_U-_KVbJQJhGfLmoUPs$
> > 02e84c839def0228475fad85d0b19abc2f70b03f
> >
> >
> > The proposed 10.1.0-M14 release is:
> > [ ] Broken - do not release
> > [ ] Alpha - go ahead and release as 10.1.0-M14 (alpha)
> >
> > -
> > To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For
> > additional commands, e-mail: dev-h...@tomcat.apache.org
> 
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional
> commands, e-mail: dev-h...@tomcat.apache.org


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

RE: [VOTE] Release Apache Tomcat 10.1.0-M14

[jonmcalexander]

Thank you Mark. I know it's not a Tomcat vulnerability, but if the Hardening 
mitigates the other, then that had me wondering was all.

Thanks for the position clarification.

Dream * Excel * Explore * Inspire
Jon McAlexander
Infrastructure Engineer
Asst Vice President
He/His

Middleware Product Engineering
Enterprise CIO | EAS | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.


> -Original Message-
> From: Mark Thomas 
> Sent: Thursday, March 31, 2022 10:08 AM
> To: dev@tomcat.apache.org
> Subject: Re: [VOTE] Release Apache Tomcat 10.1.0-M14
> 
> On 31/03/2022 15:56, jonmcalexan...@wellsfargo.com.INVALID wrote:
> > Noting the Hardening of the class loader, is this going to require this to 
> > be a
> security release of the newest Tomcat releases (forthcoming), or will they
> still just be standard releases?
> 
> That change does not address a security vulnerability in Apache Tomcat.
> 
> There will be no CVE for this change.
> 
> We generally use hardening to refer to things that do not address a
> vulnerability but improve the overall security posture. Typically, these
> changes provide additional defense in depth.
> 
> In this instance, it mitigates CVE-2022-22965 which is a Spring Framework
> vulnerability. The main purpose of the release is to provide end users with an
> alternative option if updating Tomcat is simpler than updating the version of
> Spring they are using.
> 
> To provide some context, similar recent hardening changes include:
> 
> - Using a constant time algorithm to compare passwords. Analysis showed
>that a timing attack wasn't feasible but we switched now in case it
>became feasible as some point in the future
> 
> - We changed the BeanFactory in 10.1.x (and might back-port the change)
>to prevent it from being used if an application has a JNDI injection
>vulnerability
> 
> Finally, we will either keep completely silent about security vulnerabilities
> until they are published or we will be completely open about them up front
> (e.g. if there is a zero day).
> 
> HTH,
> 
> Mark
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional
> commands, e-mail: dev-h...@tomcat.apache.org


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

RE: Tomcat mitigations for CVE-2022-21449

[jonmcalexander]

Personally I like this approach. I would suggest putting a descriptive error 
description in the logs if this is detected and startup is aborted. From an 
environment where curtailing vulnerabilities is key, regardless of the source, 
this is truly a Martha Stuart moment. It's a good thing. :-)

Thanks,

Dream * Excel * Explore * Inspire
Jon McAlexander
Senior Infrastructure Engineer
Asst. Vice President
He/His

Middleware Product Engineering
Enterprise CIO | EAS | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.

> -Original Message-
> From: Christopher Schultz 
> Sent: Friday, April 29, 2022 1:42 PM
> To: Tomcat Developers List 
> Subject: Tomcat mitigations for CVE-2022-21449
> 
> All,
> 
> CVE-2022-21449 is a bug in the JDK which allows a malicious signer using
> ECDSA to forge a signature which an affected (buggy) verifier fails to detect.
> 
> I used deliberate language above instead of "client" and "server"
> because in many csases, the server is performing verification as well (e.g. 
> of a
> client's TLS certificate in a mutually-authenticated TLS handshake).
> 
> This affects JDK versions from 15 - 18. Notably, Java 15 and 16 are EOL and
> won't be getting any updates. This Isn't Good.
> 
> This wasn't as popular in the press as "log4shell" nor does it have as 
> exciting
> or sensational a name given to it, but it's still a pretty big problem.
> 
> Tomcat is, of course, transiently affected by this bug under the following
> conditions (all of which must be true, I believe):
> 
> 1. The underlying JVM is affected
> 2. A Connector is defined with uses mutual TLS 3. The client's key is ECDSA
> 
> If all of the above are true, then anyone can impersonate any client to the
> server. An attacker may need to find a /useful/ client to impersonate, but
> usually, simply connecting to the server and askint which clients are allowed
> is enough:
> 
> $ openssl s_client -connect host:port | grep 'Acceptable client'
> Acceptable client certificate CA names
> [...]
> 
> While we can't protect any *clients* against these attacks, we may be able to
> protect *servers*.
> 
> What does the community think about Tomcat trying to prevent the use of
> vulnerable configurations? Is it overstepping? Would it be helpful? I think
> anyone running a vulnerable configuration should /really/ know that they are
> vulnerable and be able to fix their environment. But lots of environments are
> on auto-pilot.
> 
> I was thinking that on startup, we could check for a vulnerable environment
> and simply refuse to start the server.
> 
> If there are no objections, I was thinking of putting this into the
> SecurityListener. I assume that all the necessary information is available to 
> a
> LifecycleListener such as being able to enumerate the Connectors to check
> on items #2 and #3 above?
> 
> Thanks,
> -chris
> 
> [1]
> https://urldefense.com/v3/__https://www.theregister.com/AMP/2022/04/
> 20/java_authentication_bug/__;!!F9svGWnIaVPGSwU!9ldUN4bpY-
> cQsJkrr7Hps8mQSzWFnodb8KZy6okiLIxBs4t382eRkvPY7KQ9BaG8USwy1z4$
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional
> commands, e-mail: dev-h...@tomcat.apache.org


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

RE: [ANN] Apache Tomcat 9.0.63 available

[jonmcalexander]

Is there any news around 8.5 next release?­


Thanks,


Sent with BlackBerry Work (www.blackberry.com)

From: Rémy Maucherat 
Sent: May 16, 2022 7:41 AM
To: Tomcat Developers List ; Tomcat Users List 
; annou...@tomcat.apache.org; annou...@apache.org
Subject: [ANN] Apache Tomcat 9.0.63 available

The Apache Tomcat team announces the immediate availability of Apache
Tomcat 9.0.63.

Apache Tomcat 9 is an open source software implementation of the Java
Servlet, JavaServer Pages, Java Unified Expression Language, Java
WebSocket and JASPIC technologies.

Apache Tomcat 9.0.63 is a bugfix and feature release. The notable
changes compared to 9.0.62 include:

- Provide a property source that sources values from Kubernetes service
   bindings. Provided by Sumit Kulhadia and Gareth Evans.

- The root cause of the Linux kernel duplicate accept bug has been
   identified along with the version of the kernel that includes the fix.
   The error message displayed when this bug occurs has been updated to
   reflect this new information and to advise users to update to a
   version of the OS that uses kernel 5.10 or later. Thanks to
   Christopher Gual for the research into this issue.

- Update the packaged version of the Tomcat Native Library to 1.2.33 to
   pick up Windows binaries built with OpenSSL 1.1.1o.

- Add support for encrypted PKCS#1 formatted private keys when configuring
   the internal, in memory key store.

Along with lots of other bug fixes and improvements.

Please refer to the change log for the complete list of changes:
https://urldefense.com/v3/__https://tomcat.apache.org/tomcat-9.0-doc/changelog.html__;!!F9svGWnIaVPGSwU!suZVsLug6coHnWDZh3NuYVKl7NVOH3Dk0wljCay3MOSsUqI1fve264snDZCMAS815vxiJiTT610FFbZ0nQq8$


Downloads:
https://urldefense.com/v3/__https://tomcat.apache.org/download-90.cgi__;!!F9svGWnIaVPGSwU!suZVsLug6coHnWDZh3NuYVKl7NVOH3Dk0wljCay3MOSsUqI1fve264snDZCMAS815vxiJiTT610FFdpkRMvt$

Migration guides from Apache Tomcat 7.x and 8.x:
https://urldefense.com/v3/__https://tomcat.apache.org/migration.html__;!!F9svGWnIaVPGSwU!suZVsLug6coHnWDZh3NuYVKl7NVOH3Dk0wljCay3MOSsUqI1fve264snDZCMAS815vxiJiTT610FFcJdcDuL$

Enjoy!

- The Apache Tomcat team

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

RE: [ANN] ApacheCon NA 2022 in New Orleans, 3-6 Oct 2022, CFP is OPEN!

[jonmcalexander]

> -Original Message-
> From: Christopher Schultz 
> Sent: Monday, May 23, 2022 2:37 PM
> To: Tomcat Users List ; Coty Sutherland
> 
> Cc: Tomcat Developers List 
> Subject: Re: [ANN] ApacheCon NA 2022 in New Orleans, 3-6 Oct 2022, CFP is
> OPEN!
> Importance: High
> 
> Coty,
> 
> On 5/23/22 15:22, Coty Sutherland wrote:
> > On Fri, Apr 29, 2022 at 2:53 PM Christopher Schultz <
> > ch...@christopherschultz.net> wrote:
> >
> >> All,
> >>
> >> Please remember that the ApacheCon North American conference is still
> >> accepting presentations until 23 May 2022.
> >>
> >> The Tomcat track currently has *zero* proposals, and we were hoping
> >> to fill a 3-day track.
> >>
> >> So please, send in your ideas for presentations!
> >
> > How are we doing now? I just submitted one with the hopes of
> > submitting a second, but I think one is about all I can handle at the
> moment...
> 
> jfclere proposed 4 talks and it looks like remm added another 2. I guess yours
> is the 7th. (I can't actually see the submitter names right now).
> I haven't done any, yet (I was going to wait to see what else showed up).
> 
> The CFP is officially over today, so I'll probably drop 3a few in there, too.
> 
> I'm sad to see that no non-committers submitted anything. Maybe its just
> that people aren't ready to travel/conference quite yet.
> 
> -chris
> 
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
I would really Love to have something, but I just don't have the time to work 
on anything like this, nor do I feel confident enough yet. Chris keeps blowing 
holes in my understanding so now I think I need to go and fine-tooth thru the 
documentation. I really feel I know proper "instance" configuration, but now, 
not so sure. :-=) Maybe in an upcoming year when I'm older, closer to 
retirement age. :-D

Thanks,

Dream * Excel * Explore * Inspire
Jon McAlexander
Senior Infrastructure Engineer
Asst. Vice President
He/His

Middleware Product Engineering
Enterprise CIO | EAS | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

RE: [ANN] ApacheCon NA 2022 in New Orleans, 3-6 Oct 2022, CFP is OPEN!

[jonmcalexander]

Understood.

I'm willing to give it a try if you want to sign me up, but I have to do it 
virtual. Traveling is not possible for me.

Let me know please.

Dream * Excel * Explore * Inspire
Jon McAlexander
Senior Infrastructure Engineer
Asst. Vice President
He/His

Middleware Product Engineering
Enterprise CIO | EAS | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.

> -Original Message-
> From: Christopher Schultz 
> Sent: Monday, May 23, 2022 3:36 PM
> To: Tomcat Developers List ;
> jonmcalexan...@wellsfargo.com.INVALID; us...@tomcat.apache.org;
> csuth...@apache.org
> Subject: Re: [ANN] ApacheCon NA 2022 in New Orleans, 3-6 Oct 2022, CFP is
> OPEN!
> Importance: High
> 
> Jon,
> 
> On 5/23/22 15:53, jonmcalexan...@wellsfargo.com.INVALID wrote:
> > I would really Love to have something, but I just don't have the time
> > to work on anything like this
> You could just talk about something you are already doing. It doesn't need to
> be ground-breaking work. Something along the lines of "we are using Tomcat
> feature X to solve problem Y at job Z". As long as it's not an advertisement 
> for
> your company/product.
> 
> I mean... most of the presentations given by committers are like "Here's how
> to do this fairly mundane thing like connect httpd -> Tomcat".
> 
> > nor do I feel confident enough yet.
> 
> I'm sure you'd do fine. It's not a hostile crowd.
> 
> > Chris keeps blowing holes in my understanding so now I think I need to
> > go and fine-tooth thru the documentation. I really feel I know proper
> > "instance" configuration, but now, not so sure. :-=) Maybe in an
> > upcoming year when I'm older, closer to retirement age. :-D
> The proper configuration it the one that's working for you... especially if 
> you
> understand it! If you don't understand youre configuration, you will be afraid
> to change anything for the better... or the worse. :)
> 
> If it takes you a while to figure something out, you are probably not alone.
> You could give a talk on "How I Learned to Stop Worrying and Love the
> Configuration" or whatever. Not everybody thinks the same way, and
> hearing it from you instead of (e.g.) me might be better for the audience.
> 
> -chris
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional
> commands, e-mail: dev-h...@tomcat.apache.org


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

RE: [ANN] ApacheCon NA 2022 in New Orleans, 3-6 Oct 2022, CFP is OPEN!

[jonmcalexander]

Ah, ok. I understand. :-) It may be something to consider for the future, for 
those of us with disabilities. :-)

Dream * Excel * Explore * Inspire
Jon McAlexander
Senior Infrastructure Engineer
Asst. Vice President
He/His

Middleware Product Engineering
Enterprise CIO | EAS | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.

> -Original Message-
> From: Christopher Schultz 
> Sent: Monday, May 23, 2022 3:49 PM
> To: Tomcat Developers List ;
> jonmcalexan...@wellsfargo.com.INVALID; us...@tomcat.apache.org;
> csuth...@apache.org
> Subject: Re: [ANN] ApacheCon NA 2022 in New Orleans, 3-6 Oct 2022, CFP is
> OPEN!
> Importance: High
> 
> Jon,
> 
> On 5/23/22 16:41, jonmcalexan...@wellsfargo.com.INVALID wrote:
> > Understood.
> >
> > I'm willing to give it a try if you want to sign me up, but I have to
> > do it virtual. Traveling is not possible for me.
> Oh. Sorry about that; it will need to be in-person. We don't have any set up
> to do pre-recorded or virtual presentations (that I know of) at the moment.
> 
> Thanks,
> -chris
> 
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org

RE: [ANN] ApacheCon NA 2022 in New Orleans, 3-6 Oct 2022, CFP is OPEN!

[jonmcalexander]

Thank you Chris! I'll think about that.

Dream * Excel * Explore * Inspire
Jon McAlexander
Senior Infrastructure Engineer
Asst. Vice President
He/His

Middleware Product Engineering
Enterprise CIO | EAS | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.


> -Original Message-
> From: Christopher Schultz 
> Sent: Tuesday, May 24, 2022 8:07 AM
> To: dev@tomcat.apache.org
> Subject: Re: [ANN] ApacheCon NA 2022 in New Orleans, 3-6 Oct 2022, CFP is
> OPEN!
> Importance: High
> 
> Jon,
> 
> On 5/23/22 17:47, jonmcalexan...@wellsfargo.com.INVALID wrote:
> > Ah, ok. I understand. :-) It may be something to consider for the
> > future, for those of us with disabilities. :-)
> Again, apologies. Planning the conference is enough work (for unpaid
> volunteers!) without having to add more layers of complexity like live-
> remote speakers. A pre-recorded presentation could work but, because it
> would by definition be one-way communication, it's quite a bit less satisfying
> than a talk where you can interact with the presenter, etc.
> 
> The ASF is always looking for volunteers to join the planners group.
> Feel free to reach-out to the group with your ideas. Remember that your
> ideas will often need to be backed-up with your own work to make them
> happen :)
> 
> https://urldefense.com/v3/__https://events.apache.org/involved/mailing-
> lists.html__;!!F9svGWnIaVPGSwU!oY7_eWy8a12Ma1K_nKamDL0GipkKjg9zS
> PNOjX-
> yC2I2S3kloAS_JDWI7Rx7aX1RHpXFhoJQGBhQWpglzKPHVvo5NrAG9qPb$
> 
> Thanks,
> -chris
> 
> >> -Original Message-
> >> From: Christopher Schultz 
> >> Sent: Monday, May 23, 2022 3:49 PM
> >> To: Tomcat Developers List ;
> >> jonmcalexan...@wellsfargo.com.INVALID; us...@tomcat.apache.org;
> >> csuth...@apache.org
> >> Subject: Re: [ANN] ApacheCon NA 2022 in New Orleans, 3-6 Oct 2022,
> >> CFP is OPEN!
> >> Importance: High
> >>
> >> Jon,
> >>
> >> On 5/23/22 16:41, jonmcalexan...@wellsfargo.com.INVALID wrote:
> >>> Understood.
> >>>
> >>> I'm willing to give it a try if you want to sign me up, but I have
> >>> to do it virtual. Traveling is not possible for me.
> >> Oh. Sorry about that; it will need to be in-person. We don't have any
> >> set up to do pre-recorded or virtual presentations (that I know of) at the
> moment.
> >>
> >> Thanks,
> >> -chris
> >>
> >> -
> >> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> >> For additional commands, e-mail: users-h...@tomcat.apache.org
> >
> >
> > -
> > To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For
> > additional commands, e-mail: dev-h...@tomcat.apache.org
> >
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional
> commands, e-mail: dev-h...@tomcat.apache.org


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

RE: Any interest in a read-only JMX role?

[jonmcalexander]

This sounds like a good idea to me. There may be times that an application team 
wants to be able to monitor their app, but the support engineers don't want to 
give them normal JMX access to a production system. The Read-Only role would be 
good for those types.

Dream * Excel * Explore * Inspire
Jon McAlexander
Senior Infrastructure Engineer
Asst. Vice President
He/His

Middleware Product Engineering
Enterprise CIO | EAS | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.

> -Original Message-
> From: Christopher Schultz 
> Sent: Monday, June 13, 2022 11:32 AM
> To: Tomcat Developers List 
> Subject: Any interest in a read-only JMX role?
> 
> All,
> 
> I've been thinking about the possibility of making a read-only JMX role
> available for the existing manager-jmx capability.
> 
> The idea would be that this role would only be able to make "get"
> requests (that is, a JMX-get operation, not HTTP-GET). No "set" or "invoke"
> operations would be allowed.
> 
> The manager-jmx role has quite a bit of power, and is typically used only for
> monitoring where being able to modify the server is not necessary. If
> manager-jmx is being used "only" for monitoring, then opening-up the
> system for potential reconfiguration by the monitoring user is a potential
> attack vector.
> 
> I don't think the level-of-effort would be significant: simply require
> "manager-jmx" for set/invoke operations and require either manager-jmx or
> manager-jmx-read-only (or something similar) for get operations.
> 
> Does anyone think this is a good idea?
> 
> I for one use jmxproxy at $work for both monitoring /and/ administrative
> tasks such as restarting applications, listing users, and initiating garbage
> collection (in very rare cases). For these full-write purposes, I could 
> continue
> to use the (full) jmxproxy role, but for the monitoring-only ones, it would be
> nice to lock things down to the absolute minimum.
> 
> -chris
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional
> commands, e-mail: dev-h...@tomcat.apache.org


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

RE: Any interest in a read-only JMX role?

[jonmcalexander]

That's great if you use the manager app, but we don't use it or even make it 
available.

Dream * Excel * Explore * Inspire
Jon McAlexander
Senior Infrastructure Engineer
Asst. Vice President
He/His

Middleware Product Engineering
Enterprise CIO | EAS | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.


> -Original Message-
> From: Konstantin Kolinko 
> Sent: Monday, June 13, 2022 11:54 AM
> To: Tomcat Developers List 
> Subject: Re: Any interest in a read-only JMX role?
> 
> пн, 13 июн. 2022 г. в 19:32, Christopher Schultz
> :
> >
> > All,
> >
> > I've been thinking about the possibility of making a read-only JMX
> > role available for the existing manager-jmx capability.
> >
> > [...]
> >
> > Does anyone think this is a good idea?
> >
> 
> I think it is a bad idea, because passwords (and maybe other secrets) are
> visible through JMX, by design.
> 
> It might be worth to have some "status" role, but it has to be defined more
> specifically than just a "view all" role.
> 
> Maybe the way to achieve the same result is to amend the server status
> page, which is already provided by the manager app and has a dedicated
> role.
> 
> Best regards,
> Konstantin Kolinko.
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional
> commands, e-mail: dev-h...@tomcat.apache.org

RE: Any interest in a read-only JMX role?

[jonmcalexander]

I'm sorry I interfered.

Dream * Excel * Explore * Inspire
Jon McAlexander
Senior Infrastructure Engineer
Asst. Vice President
He/His

Middleware Product Engineering
Enterprise CIO | EAS | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.

> -Original Message-
> From: Christopher Schultz 
> Sent: Monday, June 13, 2022 1:36 PM
> To: dev@tomcat.apache.org
> Subject: Re: Any interest in a read-only JMX role?
> 
> Jon,
> 
> On 6/13/22 13:43, jonmcalexan...@wellsfargo.com.INVALID wrote:
> > That's great if you use the manager app, but we don't use it or even make it
> available.
> 
> Well... this /is/ a conversation about the JMXProxyServlet which is a part of
> the Manager app. So either you have something to say (about
> JMXProxyServlet) or you don't care about the whole discussion, right?
> 
> :)
> 
> -chris
> 
> >> -Original Message-
> >> From: Konstantin Kolinko 
> >> Sent: Monday, June 13, 2022 11:54 AM
> >> To: Tomcat Developers List 
> >> Subject: Re: Any interest in a read-only JMX role?
> >>
> >> пн, 13 июн. 2022 г. в 19:32, Christopher Schultz
> >> :
> >>>
> >>> All,
> >>>
> >>> I've been thinking about the possibility of making a read-only JMX
> >>> role available for the existing manager-jmx capability.
> >>>
> >>> [...]
> >>>
> >>> Does anyone think this is a good idea?
> >>>
> >>
> >> I think it is a bad idea, because passwords (and maybe other secrets)
> >> are visible through JMX, by design.
> >>
> >> It might be worth to have some "status" role, but it has to be
> >> defined more specifically than just a "view all" role.
> >>
> >> Maybe the way to achieve the same result is to amend the server
> >> status page, which is already provided by the manager app and has a
> >> dedicated role.
> >>
> >> Best regards,
> >> Konstantin Kolinko.
> >>
> >> -
> >> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For
> >> additional commands, e-mail: dev-h...@tomcat.apache.org
> >
> >
> > -
> > To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For
> > additional commands, e-mail: dev-h...@tomcat.apache.org
> >
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional
> commands, e-mail: dev-h...@tomcat.apache.org


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

RE: Tomcat 8.5.82

[jonmcalexander]

I personally like it when all three streams are updated at the same time, but 
I'm flexible. :-)

Dream * Excel * Explore * Inspire
Jon McAlexander
Senior Infrastructure Engineer
Asst. Vice President
He/His

Middleware Product Engineering
Enterprise CIO | EAS | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.


> -Original Message-
> From: Christopher Schultz 
> Sent: Thursday, July 21, 2022 7:20 AM
> To: Tomcat Developers List 
> Subject: Tomcat 8.5.82
> 
> All,
> 
> I was on holiday last week and will be out again today through Monday.
> Looking at the changelog for 8.5.x, I don't see anything pressing[1], so I'm
> thinking of just waiting for August to kind of reset the clock on releases 
> back
> to the beginning(ish) of each month.
> 
> Please let me know in the next 3-4 hours if anyone disagrees and I'll roll the
> release and put it out for a vote before I leave.
> 
> Thanks,
> -chris
> 
> [1] The only "important" thing is an upgrade of bundled OpenSSL for
> Windows users, but they can grab an updated tcnative release if necessary.
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional
> commands, e-mail: dev-h...@tomcat.apache.org

RE: [ANN] New committer: Han Li

[jonmcalexander]

Congratulations Han!

Dream * Excel * Explore * Inspire
Jon McAlexander
Senior Infrastructure Engineer
Asst. Vice President
He/His

Middleware Product Engineering
Enterprise CIO | EAS | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.

> -Original Message-
> From: Mark Thomas 
> Sent: Tuesday, September 6, 2022 2:38 AM
> To: Tomcat Developers List ; Tomcat Users List
> 
> Subject: [ANN] New committer: Han Li
> Importance: High
> 
> On behalf of the Tomcat committers I am delighted to announce that Han Li
> (lihan) has been voted in as a new Tomcat committer.
> 
> Please join me in congratulating Han.
> 
> Kind regards,
> 
> Mark
> 
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org