Re: Tomcat Native and OpenSSL 3.5.x

2025-05-22 Thread Michael Osipov
On 2025/05/22 07:13:49 Mark Thomas wrote: > All, > > The last Tomcat Native releases were in July 2024. The Windows binaries > were built with 3.0.14. > > There are some low severity CVEs in 3.0.14 that we don't believe apply > to Tomcat's usage of OpenSSL but that may trigger a security scanne

Re: NIO2 connector

2025-05-13 Thread Michael Osipov
On 2025/05/13 15:20:48 Mark Thomas wrote: > All, > > This was mentioned briefly before (I think on a BZ issue) but needs a > wider discussion before taking action - if we do anything. > > It has been suggested that there isn't much benefit to maintaining the > NIO2 connector and that we could s

Re: [ANN] Apache Tomcat 9.0.105 available

2025-05-13 Thread Michael Osipov
Please fix the release changelog for jakarta.el.ImportHandler. - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org

Re: [VOTE] Release Apache Tomcat 9.0.105

2025-05-08 Thread Michael Osipov
On 2025/05/07 19:03:01 Rémy Maucherat wrote: > The proposed Apache Tomcat 9.0.105 release is now available for voting. > > The notable changes compared to 9.0.104 are: > > - Process possible path parameters rewrite production in the rewrite >valve. > > - Enable allowLinking to be set on PreR

Re: Generation javadoc in a specific locale

2025-04-10 Thread Michael Osipov
I have observed similar and applied a general fix for the Maven Javadoc Plugin: https://github.com/apache/maven-javadoc-plugin/pull/298/files - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-

Why no ALPN with HTTP/1.1?

2025-03-24 Thread Michael Osipov
Folks, on Tomcat 9.0 with OpenSSL I see the following with curl: > $ curl https://dw-eng-apps-dev.innomotics.net:8444 --verbose -Ss > /dev/null > * Uses proxy env variable NO_PROXY == > 'localhost,.siemens.net,.siemens.com,.siemens.de,.siemens.cloud,.siemens.io,.innomotics.net,.innomotics.com' >

Re: (tomcat) branch main updated: Add option to serve resources from subpath only with WebDAV Servlet

2024-11-13 Thread Michael Osipov
omcat.git > > > > > > The following commit(s) were added to refs/heads/main by this push: > > new f5601ff240 Add option to serve resources from subpath only with > > WebDAV Servlet > > f5601ff240 is described below > > > > commit f5601ff240e2c

Re: WebDAV lock null and RFC 4918

2024-10-16 Thread Michael Osipov
On 2024/10/16 10:14:49 Rémy Maucherat wrote: > Hi, > > I spent a few days going through the behavior of the WebDAV Servlet, > expanding on a test scenario, and looking at the most recent RFC. I > found many items to fix. > > Three items remain: > - Propatch support: it is useless without support

Re: (tomcat) branch 10.1.x updated: BZ 69370: DefaultServlet's HTML listing uses incorrect labels

2024-10-10 Thread Michael Osipov
omcat.git > > > > > > The following commit(s) were added to refs/heads/10.1.x by this push: > > new 098834facf BZ 69370: DefaultServlet's HTML listing uses incorrect > > labels > > 098834facf is described below > > > > commit 098834facf88

Re: (tomcat) branch 11.0.x updated: BZ 69370: DefaultServlet's HTML listing uses incorrect labels

2024-10-10 Thread Michael Osipov
On 2024/10/10 10:12:56 Rémy Maucherat wrote: > On Thu, Oct 10, 2024 at 12:05 PM wrote: > > -sb.append(" - > +sb.append(" \u2013 > If this really needed ? Consistency with the ErrorReportValve. Look at the LocalStrings of it.

Re: (tomcat) branch 11.0.x updated: BZ 69370: DefaultServlet's HTML listing uses incorrect labels

2024-10-10 Thread Michael Osipov
On 2024/10/10 10:12:56 Rémy Maucherat wrote: > On Thu, Oct 10, 2024 at 12:05 PM wrote: > > -sb.append(" - > +sb.append(" \u2013 > If this really needed ? > > > @@ -123,6 +123,10 @@ > > the base class. The primary advantage for doing this is less code > > to >

Re: (tomcat) branch 11.0.x updated: Improve HTML output of DefaultServlet

2024-10-06 Thread Michael Osipov
On 2024/10/06 18:43:27 Mark Thomas wrote: > On 06/10/2024 19:04, Michael Osipov wrote: > > On 2024/10/06 14:18:34 Mark Thomas wrote: > >> On 05/10/2024 18:23, micha...@apache.org wrote: > >>> This is an automated email from the ASF dual-hosted git repository. > &

Re: (tomcat) branch 11.0.x updated: Improve HTML output of DefaultServlet

2024-10-06 Thread Michael Osipov
omcat.git > > > > > > The following commit(s) were added to refs/heads/11.0.x by this push: > > new 4108bf15b5 Improve HTML output of DefaultServlet > > 4108bf15b5 is described below > > > > commit 4108bf15b54cc82b56736edf07cff4561e8d457c >

Re: (tomcat) branch main updated: BZ 69360: Inconsistent DELETE behavior between DefaultServlet and WebdavServlet

2024-10-02 Thread Michael Osipov
On 2024/10/02 14:30:52 Christopher Schultz wrote: > All, > > On 10/2/24 06:21, Mark Thomas wrote: > > -1 veto > > > > This change is not compliant with RFC 9110. > > > > [...] > > > > Generally, SC_METHOD_NOT_ALLOWED is probably the right status code as > > the most likely failure mode is a l

Re: (tomcat) branch main updated: BZ 69360: Inconsistent DELETE behavior between DefaultServlet and WebdavServlet

2024-10-02 Thread Michael Osipov
On 2024/10/02 14:33:28 Christopher Schultz wrote: > Michael, > > On 10/2/24 07:00, Michael Osipov wrote: > > [...] > > > >> $ curl --negotiate -u : -X DELETE > >> 'https://example.com/backend-dev/dav/log/sadfs' --verbose > >> ...* R

Re: (tomcat) branch main updated: Make WebdavServlet properly return the Allow header on NOT_ALLOWED status

2024-10-02 Thread Michael Osipov
os/asf/tomcat.git > > > > > > The following commit(s) were added to refs/heads/main by this push: > > new b03fde0383 Make WebdavServlet properly return the Allow header on > > NOT_ALLOWED status > > b03fde0383 is described below > > > > commit b03fde0

Re: (tomcat) branch main updated: BZ 69360: Inconsistent DELETE behavior between DefaultServlet and WebdavServlet

2024-10-02 Thread Michael Osipov
On 2024/10/02 10:41:38 Mark Thomas wrote: > On 02/10/2024 11:30, Michael Osipov wrote: > > On 2024/10/02 10:21:07 Mark Thomas wrote: > >> -1 veto > >> > >> This change is not compliant with RFC 9110. > >> > >> If Tomcat send

Re: (tomcat) branch main updated: BZ 69360: Inconsistent DELETE behavior between DefaultServlet and WebdavServlet

2024-10-02 Thread Michael Osipov
rg/repos/asf/tomcat.git > > > > > > The following commit(s) were added to refs/heads/main by this push: > > new 142c45a427 BZ 69360: Inconsistent DELETE behavior between > > DefaultServlet and WebdavServlet > > 142c45a427 is described below > > > &

Re: Coyote Request getRequestId()

2024-10-01 Thread Michael Osipov
On 2024/09/23 03:28:06 Igal Sapir wrote: > Hello, > > The current implementation of getRequestId() is optimized for speed and > generates IDs that are unique to a running instance of Tomcat. > > But most server configurations nowadays require uniqueness across the whole > system, and currently we

Re: (tomcat) 01/03: Add JreCompat support for Subject.callAs()

2024-07-25 Thread Michael Osipov
On 2024/07/25 08:42:52 ma...@apache.org wrote: > This is an automated email from the ASF dual-hosted git repository. > > markt pushed a commit to branch main > in repository https://gitbox.apache.org/repos/asf/tomcat.git > > commit a2384804c527c64290cfae1fa988f1f394890e91 > Author: Mark Thomas >

Re: Short and long term plans for Tomcat Native

2024-07-18 Thread Michael Osipov
On 2024/07/18 12:41:22 Rainer Jung wrote: > Am 18.07.24 um 14:15 schrieb Michael Osipov: > > On 2024/07/17 15:33:02 Mark Thomas wrote: > >> All, > >> > >> I've spent some time today trying to build Tomcat Native with Visual > >> Studio 2022 rath

Re: Short and long term plans for Tomcat Native

2024-07-18 Thread Michael Osipov
On 2024/07/17 15:33:02 Mark Thomas wrote: > All, > > I've spent some time today trying to build Tomcat Native with Visual > Studio 2022 rather then the current, more involved process without success. > > Therefore, my short-term plan for Tomcat Native is to get the next 2.0.x > and 1.3.x releas

Re: OpenSSL alternatives using FFM

2024-07-10 Thread Michael Osipov
On 2024/07/04 13:15:26 Rémy Maucherat wrote: > Hi, > > As an experiment, I tested with LibreSSL and BoringSSL on LInux using > the FFM code. Both did not need too many API changes to start working, > so I committed the changes to "add support" for them. > > BoringSSL: I wouldn't waste any time f

Re: Reduce default for maxParameterCount

2024-07-02 Thread Michael Osipov
On 2024/07/02 11:06:55 Rémy Maucherat wrote: > On Tue, Jul 2, 2024 at 1:05 PM Mark Thomas wrote: > > > > On 02/07/2024 12:01, Michael Osipov wrote: > > > On 2024/07/02 10:33:29 Mark Thomas wrote: > > >> On 01/07/2024 07:17, Michael Osipov wrote: > > >

Re: Reduce default for maxParameterCount

2024-07-02 Thread Michael Osipov
On 2024/07/02 10:33:29 Mark Thomas wrote: > On 01/07/2024 07:17, Michael Osipov wrote: > > On 2024/06/27 17:13:56 Christopher Schultz wrote: > >> Michael, > >> > >> On 6/27/24 08:46, Michael Osipov wrote: > >>> On 2023/03/09 14:23:33 Christophe

Re: Tagging 11.0.x

2024-07-02 Thread Michael Osipov
On 2024/07/02 09:17:49 Mark Thomas wrote: > Hi all, > > The tests currently pass and there are just a couple of PRs still to > review so, barring any unexpected problems, I should be tagging 11.0.x > later today. Before going over to tagging, can you assess the following situation: https://lis

Re: Reduce default for maxParameterCount

2024-06-30 Thread Michael Osipov
On 2024/06/27 17:13:56 Christopher Schultz wrote: > Michael, > > On 6/27/24 08:46, Michael Osipov wrote: > > On 2023/03/09 14:23:33 Christopher Schultz wrote: > >> A potential use-case for "large numbers of parameters" might be an > >> application that

Re: (tomcat) branch main updated: Restore warning to use only this listener with Server

2024-06-14 Thread Michael Osipov
On 2024/06/14 09:39:23 ma...@apache.org wrote: > This is an automated email from the ASF dual-hosted git repository. > > markt pushed a commit to branch main > in repository https://gitbox.apache.org/repos/asf/tomcat.git > > > The following commit(s) were added to refs/heads/main by this push: >

Re: (tomcat) branch main updated: Add RealmBase.getPrincipal(GSSName, GSSCredential, GSSContext)

2024-06-11 Thread Michael Osipov
On 2024/06/11 16:47:37 Mark Thomas wrote: > On 11/06/2024 12:45, Michael Osipov wrote: > > On 2024/06/11 10:48:29 Mark Thomas wrote: > >> On 11/06/2024 11:14, micha...@apache.org wrote: > >>> This is an automated email from the ASF dual-hosted git repository. > &

Re: BND 7 and multi release JARs

2024-06-11 Thread Michael Osipov
On 2024/06/11 14:15:48 Rémy Maucherat wrote: > Hi, > > To fix the issue with having Java 22 classes in tomcat-coyote (and > embedded), I was looking at multi release JARs. I think it would work > fine *if* we were building the JARs ourselves (jarIt task), but then > the jars are actually rebuilt w

Re: BND 7 and multi release JARs

2024-06-11 Thread Michael Osipov
On 2024/06/11 14:15:48 Rémy Maucherat wrote: > Hi, > > To fix the issue with having Java 22 classes in tomcat-coyote (and > embedded), I was looking at multi release JARs. I think it would work > fine *if* we were building the JARs ourselves (jarIt task), but then > the jars are actually rebuilt w

Re: (tomcat) branch main updated: Add RealmBase.getPrincipal(GSSName, GSSCredential, GSSContext)

2024-06-11 Thread Michael Osipov
omcat.git > > > > > > The following commit(s) were added to refs/heads/main by this push: > > new 956c4577ca Add RealmBase.getPrincipal(GSSName, GSSCredential, > > GSSContext) > > 956c4577ca is described below > > > > commit 956c4577caedca7d77c5

Re: [PROPOSAL] Tomcat 10: Remove Server-Side Includes (SSI)

2024-06-07 Thread Michael Osipov
On 2024/06/07 12:54:44 Christopher Schultz wrote: > Michael, > > On 6/7/24 08:01, Michael Osipov wrote: > > On 2024/06/07 08:05:34 Mark Thomas wrote: > >> On 06/06/2024 16:30, Christopher Schultz wrote: > >>> All, > >>> > >>> Resurr

Re: [PROPOSAL] Tomcat 10: Remove Server-Side Includes (SSI)

2024-06-07 Thread Michael Osipov
On 2024/06/07 08:05:34 Mark Thomas wrote: > On 06/06/2024 16:30, Christopher Schultz wrote: > > All, > > > > Resurrecting this thread from 2019. > > > > I'd like to remove the SSI configuration from conf/web.xml and put it > > into webapps/docs/ssi-howto.html. > > > > Are there any objections?

Re: WebDAV and Microsoft clients

2024-05-23 Thread Michael Osipov
On 2024/05/23 08:00:24 Mark Thomas wrote: > On 22/05/2024 21:47, Michael Osipov wrote: > > On 2024/05/22 17:21:07 Mark Thomas wrote: > >> All, > >> > >> I've been looking at the WebDav Servlet for the last few days and in > >> particular how i

Re: WebDAV and Microsoft clients

2024-05-22 Thread Michael Osipov
On 2024/05/22 17:21:07 Mark Thomas wrote: > All, > > I've been looking at the WebDav Servlet for the last few days and in > particular how it interacts with Microsoft clients. Which clients are we talking about? Windows Explorer? I know that DAV Redirector/Explorer are quite picky about TLS and

Re: (tomcat-native) branch main updated: Ensure local reference capacity is available for array allocations.

2024-05-20 Thread Michael Osipov
On 2024/05/17 14:37:32 Christopher Schultz wrote: > Michael, > > On 5/16/24 10:39, Michael Osipov wrote: > > Not for 1.3.x? > > Good question. I wasn't sure how much energy we are expecting to put > into tcnative 1.3.x. > > I have no problem back-porting

Re: (tomcat-native) branch main updated: Use ERR_error_string_n instead of ERR_error_string.

2024-05-16 Thread Michael Osipov
Not for 1.3.x? On 2024/05/15 13:14:56 schu...@apache.org wrote: > This is an automated email from the ASF dual-hosted git repository. > > schultz pushed a commit to branch main > in repository https://gitbox.apache.org/repos/asf/tomcat-native.git > > > The following commit(s) were added to refs

Re: (tomcat-native) branch main updated: Ensure local reference capacity is available for array allocations.

2024-05-16 Thread Michael Osipov
Not for 1.3.x? On 2024/05/16 13:52:45 schu...@apache.org wrote: > This is an automated email from the ASF dual-hosted git repository. > > schultz pushed a commit to branch main > in repository https://gitbox.apache.org/repos/asf/tomcat-native.git > > > The following commit(s) were added to refs

Re: [tcnative] Should we make DEBUG builds available for Windows?

2024-05-16 Thread Michael Osipov
On 2024/05/15 13:12:44 Christopher Schultz wrote: > All, > > A recent thread was posted with a tcnative crash with not much in the > way of useful information in the error: > > https://lists.apache.org/thread/m1dbj3w1x1oqftqsbj7jbnvkm2073x1o > > The error details were: > > " > # EXCEPTION_ACC

Re: [tcnative] switch from using ERR_error_string to ERR_error_string_n

2024-05-15 Thread Michael Osipov
On 2024/05/14 21:15:03 Christopher Schultz wrote: > All, > > I'd like to basically globally-search-and-replace ERR_error_string for > ERR_error_string_n and use a #define constant for both the > initialization of all > > char err[256]; > > and similar strings and use that same constant for

Re: Passing down arbitrary auth attributes down to Realm#authenticate()

2024-05-08 Thread Michael Osipov
On 2024/05/07 21:10:33 Christopher Schultz wrote: > Michael, > > On 5/7/24 14:06, Michael Osipov wrote: > > Folks, > > > > I am working on a custom Authenticator and Realm where I need to pass > > down a custom value to Realm#authenticate(), more spe

Re: Passing down arbitrary auth attributes down to Realm#authenticate()

2024-05-08 Thread Michael Osipov
On 2024/05/07 18:20:46 Mark Thomas wrote: > On 07/05/2024 19:06, Michael Osipov wrote: > > Folks, > > > > I am working on a custom Authenticator and Realm where I need to pass > > down a custom value to Realm#authenticate(), more specially a value > > obtained

Re: Our ASN.1 parser

2024-05-03 Thread Michael Osipov
On 2024/05/03 08:59:17 Mark Thomas wrote: > > > On 03/05/2024 08:17, Michael Osipov wrote: > > Hi folks, > > > > currenly we have a minimalistic ASN.1 parser in the code tree w/o any > > testing > > The ASN.1 parsing is covered by the test suite. My ba

Our ASN.1 parser

2024-05-03 Thread Michael Osipov
Hi folks, currenly we have a minimalistic ASN.1 parser in the code tree w/o any testing since it assumes that the passed byte array is properly encoded. Now, I do have some X.509 related improvements which I'd like to bring upstream from my OSS project which I think will benefit everyone using

Re: Some remarks on panama libssl loading

2024-04-17 Thread Michael Osipov
On 2024/04/17 14:21:06 Rainer Jung wrote: > Am 17.04.24 um 15:34 schrieb Michael Osipov: > > Rainer, I do not fully understand the problem here. We use libtool to solve > > exactly this problem with versioned SONAMEs. It will create symlinks to the > > SONAME. > > Do

Re: Some remarks on panama libssl loading

2024-04-17 Thread Michael Osipov
Rainer, I do not fully understand the problem here. We use libtool to solve exactly this problem with versioned SONAMEs. It will create symlinks to the SONAME. Do you expect anyone even with dlopen() to load libfoo.o.{SOVERSION} unless it is strictly needed? E.g.: lrwxr-xr-x 1 root wheel

Re: Required build version(s)

2024-02-12 Thread Michael Osipov
I have complained about this many times... On 2024/02/12 20:58:14 Christopher Schultz wrote: > All, > > The release managers have bumped-up their tool chains to Java 17 or > later for all supported releases. Tomcat 11 requires Java 21. Tomcat > 8.5.x only requires Java 11. > > But the document

Re: Moving to Tomcat Native 1.3.x

2024-02-07 Thread Michael Osipov
On 2024/02/07 16:05:17 Michael Osipov wrote: > On 2024/02/04 19:54:25 Mark Thomas wrote: > > Hi all, > > > > AS you have probably noticed I am working on another round of Tomcat > > Native releases. > > > > We are overdue on switching to 1.3.x so I would

Re: Moving to Tomcat Native 1.3.x

2024-02-07 Thread Michael Osipov
On 2024/02/07 18:19:24 Christopher Schultz wrote: > Michael, > > On 2/7/24 11:05, Michael Osipov wrote: > > On 2024/02/04 19:54:25 Mark Thomas wrote: > >> Hi all, > >> > >> AS you have probably noticed I am working on another round of Tomcat > &g

Re: Moving to Tomcat Native 1.3.x

2024-02-07 Thread Michael Osipov
On 2024/02/04 19:54:25 Mark Thomas wrote: > Hi all, > > AS you have probably noticed I am working on another round of Tomcat > Native releases. > > We are overdue on switching to 1.3.x so I would like to propose the > following with this release round: > > - create a new 1.3.x branch from the

Re: Moving to Tomcat Native 1.3.x

2024-02-07 Thread Michael Osipov
> >> The next 8.5.x and 9.0.x releases would then ship with Tomcat Native > >> 1.3.0 but minimum required/recommended Tomcat Native versions would not > >> change. > > > > I wouldn't bother with 8.5 and 1.3, I'd use 1.2.x until end of 8.5 and the > > put 1.2.x EOL. > > I'm still leaning towards

Re: Moving to Tomcat Native 1.3.x

2024-02-06 Thread Michael Osipov
On 2024/02/04 19:54:25 Mark Thomas wrote: > Hi all, > > AS you have probably noticed I am working on another round of Tomcat > Native releases. > > We are overdue on switching to 1.3.x so I would like to propose the > following with this release round: > > - create a new 1.3.x branch from the

Re: Backporting patch for CVE-2023-46589 to Tomcat 8.0.14

2023-12-18 Thread Michael Osipov
On 2023/12/18 17:00:43 Mark Thomas wrote: > On 17/12/2023 16:32, Sean Whitton wrote: > > Hello, > > > > I am working to backport the fix for CVE-2023-46589 to Tomcat version > > 8.0.14, which is what we have in Debian "jessie". This is under the > > Extended LTS project for older Debian releases,

Re: Tomcat 8.5.x and repeatable builds

2023-11-15 Thread Michael Osipov
On 2023/11/14 16:53:38 Mark Thomas wrote: > All, > > We are currently unable to produce cross-platform repeatable builds for > Tomcat 8.5.x with Java 11 due to https://bugs.openjdk.org/browse/JDK-8320082 > > We have several options: > > 1. Do nothing. Build remains repeatable on the same OS. Wa

Re: (tomcat) branch main updated: Update BND to 7.0.0

2023-11-06 Thread Michael Osipov
On 2023/11/05 14:50:11 Mark Thomas wrote: > On 05/11/2023 10:10, Mark Thomas wrote: > > On 03/11/2023 15:07, Michael Osipov wrote: > >> On 2023/11/03 11:57:56 Mark Thomas wrote: > >>> On 03/11/2023 09:26, Michael Osipov wrote: > >>>> This change now co

Re: (tomcat) branch main updated: Update BND to 7.0.0

2023-11-06 Thread Michael Osipov
On 2023/11/05 10:10:20 Mark Thomas wrote: > On 03/11/2023 15:07, Michael Osipov wrote: > > On 2023/11/03 11:57:56 Mark Thomas wrote: > >> On 03/11/2023 09:26, Michael Osipov wrote: > >>> This change now completely missed to enfore Java 17 on < 11 and opt-in to >

Re: (tomcat) branch main updated: Update BND to 7.0.0

2023-11-03 Thread Michael Osipov
On 2023/11/03 11:57:56 Mark Thomas wrote: > On 03/11/2023 09:26, Michael Osipov wrote: > > This change now completely missed to enfore Java 17 on < 11 and opt-in to > > skip the required during tests I have introduced last month. > > Tomcat 11.0.x has required Java

Re: (tomcat) branch main updated: Update BND to 7.0.0

2023-11-03 Thread Michael Osipov
This change now completely missed to enfore Java 17 on < 11 and opt-in to skip the required during tests I have introduced last month. - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: d

Re: BND 7.0.0 requires Java 17

2023-11-02 Thread Michael Osipov
On 2023/11/02 15:20:37 Mark Thomas wrote: > Hi all, > > The update to BND 7.0.0 requires Java 17. Do we want to update the build > process to use Java 17 or do we want to revert the BND update? > > I'm leaning towards switching to Java 17 as not updating would prevent > any future update if req

Re: BND 7.0.0 requires Java 17

2023-11-02 Thread Michael Osipov
On 2023/11/02 15:51:53 Rémy Maucherat wrote: > On Thu, Nov 2, 2023 at 4:20 PM Mark Thomas wrote: > > > > Hi all, > > > > The update to BND 7.0.0 requires Java 17. Do we want to update the build > > process to use Java 17 or do we want to revert the BND update? > > > > I'm leaning towards switching

Re: (tomcat-native) branch main updated: BZ 67818: SSL#setVerify()/SSLContext#setVerify() silently set undocumented default verify paths

2023-10-31 Thread Michael Osipov
On 2023/10/30 15:47:20 Christopher Schultz wrote: > Michael, > > On 10/30/23 08:40, Michael Osipov wrote: > > On 2023/10/30 11:50:55 Mark Thomas wrote: > >> 30 Oct 2023 10:25:07 micha...@apache.org: > >> > >>> This is an automated

Re: (tomcat-native) branch main updated: BZ 67818: SSL#setVerify()/SSLContext#setVerify() silently set undocumented default verify paths

2023-10-30 Thread Michael Osipov
cat-native.git > > > > > > The following commit(s) were added to refs/heads/main by this push: > > new ccc6bfe99 BZ 67818: SSL#setVerify()/SSLContext#setVerify() > > silently set undocumented default verify paths > > ccc6bfe99 is described below > >

Re: [tomcat] branch main updated: Correct exception message.

2023-10-25 Thread Michael Osipov
Reported: https://bz.apache.org/bugzilla/show_bug.cgi?id=67926 - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org

Re: [tomcat] branch main updated: Correct exception message.

2023-10-25 Thread Michael Osipov
On 2023/10/25 01:54:10 li...@apache.org wrote: > This is an automated email from the ASF dual-hosted git repository. > > lihan pushed a commit to branch main > in repository https://gitbox.apache.org/repos/asf/tomcat.git > > > The following commit(s) were added to refs/heads/main by this push: >

Re: [tomcat] branch main updated: Add more complex password picker

2023-10-23 Thread Michael Osipov
Thanks for catching up! - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org

Re: Non preview FFM (formerly known as Panama) API

2023-10-20 Thread Michael Osipov
On 2023/10/20 07:30:04 Rémy Maucherat wrote: > Hi, > > I am very pleased to report that after years of development, the > Foreign Function & Memory API is (finally !) no longer a preview API. > It is now available in build 20 of Java 22 where it can be used > without the preview flag. > Downloads:

Re: [tomcat] branch main updated: Add charset

2023-10-19 Thread Michael Osipov
On 2023/10/19 11:24:35 r...@apache.org wrote: > java/org/apache/catalina/manager/StatusTransformer.java | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) > > diff --git a/java/org/apache/catalina/manager/StatusTransformer.java > b/java/org/apache/catalina/manager/StatusTransformer.java > i

Re: [tomcat] branch main updated: Add JSON stats to the status servlet

2023-10-18 Thread Michael Osipov
On 2023/10/17 13:58:06 r...@apache.org wrote: > @@ -51,6 +52,8 @@ public class StatusTransformer { > response.setContentType("text/html;charset=" + > Constants.CHARSET); > } else if (mode == 1) { > response.setContentType("text/xml;charset=" + Constants.CHARSET);

Re: [tomcat] branch main updated: BZ 67667: TLSCertificateReloadListener prints unreadable rendering of X509Certificate#getNotAfter()

2023-10-12 Thread Michael Osipov
On 2023/10/12 11:46:55 Christopher Schultz wrote: > Michael, > > On 10/12/23 06:13, micha...@apache.org wrote: > > This is an automated email from the ASF dual-hosted git repository. > > > > michaelo pushed a commit to branch main > > in repository https://gitbox.apache.org/repos/asf/tomcat.git >

Re: [VOTE] Release Apache Tomcat 8.5.95 [CORRECTED]

2023-10-12 Thread Michael Osipov
On 2023/10/12 01:32:37 Christopher Schultz wrote: > The proposed Apache Tomcat 8.5.95 release is now available for voting. > > The notable changes compared to 8.5.94 are: > > - Correct a regression in 8.5.94 that broke the Tomcat JBDC >connection pool > > - Correct a regression in 8.5.94 tha

Re: [tomcat] branch main updated: Update future code

2023-10-06 Thread Michael Osipov
On 2023/10/06 09:14:54 Rémy Maucherat wrote: > On Fri, Oct 6, 2023 at 10:42 AM Michael Osipov wrote: > > > > Please let's not use the term Panama anymore, it is like with Jigsaw. They > > were working titles, official name is Java FFM API. Even JEP 442 does not >

Re: [tomcat] branch main updated: Update future code

2023-10-06 Thread Michael Osipov
Please let's not use the term Panama anymore, it is like with Jigsaw. They were working titles, official name is Java FFM API. Even JEP 442 does not mention this term anymore. On 2023/10/06 08:15:09 r...@apache.org wrote: > This is an automated email from the ASF dual-hosted git repository. > >

Re: build failure for 10.1.x

2023-10-05 Thread Michael Osipov
On 2023/10/05 12:19:43 Mark Thomas wrote: > On 05/10/2023 12:10, koteswara Rao Gundapaneni wrote: > > Here is my Tomcat environment details > > > > java version "1.8.0_202" > > Apache Ant(TM) version 1.10.13 > > Windows 10 Pro > > apache-tomcat-10.1.12-src > > Tomcat 10.1.x requires a minimum of

Re: Tomcat Native releases

2023-09-26 Thread Michael Osipov
On 2023/09/26 10:47:34 Mark Thomas wrote: > Hi all, > > With OpenSSL 1.1.1 reaching EOL and there being a low severity issue in > the OpenSSL versions used in the Windows binaries for the last releases, > I'd like to propose a new set of Tomcat Native releases that: > > - include the fix for BZ

Re: certificateVerification="optionalNoCA" and OCSP validation.

2023-09-26 Thread Michael Osipov
On 2023/09/26 10:48:23 Mark Thomas wrote: > Hi, > > This is an old thread (2021) but relevant to BZ 67061 [1]. > > In short, optionalNoCA doesn't work unless OCSP is also disabled. > > Do we: > > a) Always skip the OCSP check if optionalNoCA is used (and document this > for optionalNoCA)? > >

Re: [tomcat] 03/03: Use application provided status code for error page if present

2023-08-17 Thread Michael Osipov
On 2023/08/16 15:03:23 ma...@apache.org wrote: > This is an automated email from the ASF dual-hosted git repository. > > markt pushed a commit to branch 8.5.x > in repository https://gitbox.apache.org/repos/asf/tomcat.git > diff --git a/webapps/docs/changelog.xml b/webapps/docs/changelog.xml > ind

Re: [tomcat] branch main updated: Remove used property

2023-06-30 Thread Michael Osipov
os/asf/tomcat.git > > > > > > The following commit(s) were added to refs/heads/main by this push: > > new b9a8bd4fda Remove used property > > b9a8bd4fda is described below > > > > commit b9a8bd4fdaf31b0cc08cc72f95c802d35bb885f2 > > Author: Michael Osipov

Re: [tomcat-native] branch 1.2.x updated: Align default pass phrase prompt with HTTPd

2023-06-28 Thread Michael Osipov
On 2023/06/27 18:53:05 Christopher Schultz wrote: > Michael, > > On 6/27/23 12:55, Michael Osipov wrote: > > On 2023/06/27 14:44:46 Christopher Schultz wrote: > >> Michael, > >> > >> On 6/27/23 10:37, Michael Osipov wrote: > >>> On 2023/06

Re: [tomcat-native] branch 1.2.x updated: Align default pass phrase prompt with HTTPd

2023-06-27 Thread Michael Osipov
On 2023/06/27 14:44:46 Christopher Schultz wrote: > Michael, > > On 6/27/23 10:37, Michael Osipov wrote: > > On 2023/06/27 14:13:37 Christopher Schultz wrote: > >> Michael, > >> > >> On 6/27/23 04:06, Michael Osipov wrote: > >>> Chris, > &

Re: [tomcat-native] branch 1.2.x updated: Align default pass phrase prompt with HTTPd

2023-06-27 Thread Michael Osipov
On 2023/06/27 14:13:37 Christopher Schultz wrote: > Michael, > > On 6/27/23 04:06, Michael Osipov wrote: > > Chris, > > > > On 2023/06/26 19:50:39 Christopher Schultz wrote: > >> Michael, > >> On 6/26/23 13:11, micha...@apache.org wrote: > >>

Re: [tomcat-native] branch 1.2.x updated: Align default pass phrase prompt with HTTPd

2023-06-27 Thread Michael Osipov
Please also read my BZ issue: https://bz.apache.org/bugzilla/show_bug.cgi?id=64826 Nothing new here... - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org

Re: [tomcat-native] branch 1.2.x updated: Align default pass phrase prompt with HTTPd

2023-06-27 Thread Michael Osipov
ox.apache.org/repos/asf/tomcat-native.git > > > > > > The following commit(s) were added to refs/heads/1.2.x by this push: > > new 8049561c8 Align default pass phrase prompt with HTTPd > > 8049561c8 is described below > > > > commit 8049561c86c3270b

Re: Tomcat 11 - minimum Java version

2023-01-11 Thread Michael Osipov
On 11/01/2023 14:13, Michael Osipov wrote: While I cannot comment on Tomcat 11 requirements and Java 21 is unavoidable I'd like to comment on this because I consider it wrong: We could switch all branches to Java 17 as the the default build JRE now as that supports targeting Java 7 on

Re: Tomcat 11 - minimum Java version

2023-01-11 Thread Michael Osipov
While I cannot comment on Tomcat 11 requirements and Java 21 is unavoidable I'd like to comment on this because I consider it wrong: We could switch all branches to Java 17 as the the default build JRE now as that supports targeting Java 7 onwards. That would allow us to easily use some newer

Re: [tomcat] branch main updated: Add support for additional user, attributes in TomcatPrincipal

2022-02-11 Thread Michael Osipov
Am 2022-02-11 um 11:16 schrieb Rémy Maucherat: On Fri, Feb 11, 2022 at 10:47 AM Michael Osipov wrote: I cannot share your further explanations as well. The Realm *is* already an object store. Principal name and roles are attributes on that object, so is password. Without this possibility you

Re: Add support for additional user attributes in TomcatPrincipal

2022-02-11 Thread Michael Osipov
On Fri, Feb 11, 2022 at 8:10 AM Carsten Klein wrote: Hello R=C3=A9my, Mark and Michael, I'm new to the dev list and did not get your recent mails and didn't figure out how to get them in order to answer. So, I decided to start a new thread (sorry for that). I guess, having those attributes wi

Re: Re: [tomcat] branch main updated: Add support for additional user, attributes in TomcatPrincipal

2022-02-11 Thread Michael Osipov
Rémy, really, I don't understand your work attitude. Carsten contacted us on the mailing list before providing the PR. Then he provided the PR. It was open for EIGHT months. We discussed this in and out, with you and Mark. Everyone expressed the conditions he is willing to accept the PR. I ha

Re: Building all releases with Java 11

2022-01-11 Thread Michael Osipov
Am 2022-01-10 um 17:46 schrieb Mark Thomas: [...] Is this because of EJC going Java 11? Has anyone reached out to them? Why 11? I assume that 8 will outlive 11 for some time. Java 8 still seems like a good baseline. - To uns

Re: [tomcat] branch 10.0.x updated: Update Eclipse JDT from 4.20 to 4.22

2022-01-03 Thread Michael Osipov
Am 2022-01-03 um 12:20 schrieb Rémy Maucherat: On Mon, Jan 3, 2022 at 11:53 AM Rainer Jung wrote: For reference: this is probably the ticket about moving JDT (and ECJ) to Java 11: https://bugs.eclipse.org/bugs/show_bug.cgi?id=572389 And this is the parallel mail discussion: https://www.ecli

Re: [OT] Forthcoming PEM utility code

2021-12-28 Thread Michael Osipov
Am 2021-12-28 um 01:20 schrieb Christopher Schultz: Michael, [...] Although, I haven't see your code I know that this is a lot of work I have done some of that some for our enterprise CAs with pure Java recently. Kudos! It's always fun finding out ANOTHER RFC that only one tool in the world

Re: [OT] Forthcoming PEM utility code

2021-12-27 Thread Michael Osipov
Am 2021-12-27 um 17:13 schrieb Christopher Schultz: Michael, All, I haven't actually committed any source yet, as I'm still polishing it up a bit but I intend to release a bunch of PEM-related code on GH under this repository: https://github.com/ChristopherSchultz/pem-utils The license is A

Re: [tomcat] branch 8.5.x updated: Revert incorrect change in 4896083

2021-11-28 Thread Michael Osipov
Am 2021-11-28 um 14:42 schrieb ma...@apache.org: This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new

Re: [VOTE] Release Apache Tomcat 8.5.73

2021-11-15 Thread Michael Osipov
Am 2021-11-11 um 16:34 schrieb Christopher Schultz: The proposed Apache Tomcat 8.5.73 release is now available for voting. The notable changes compared to 8.5.72 are: - Improvements to native/APR including avoiding a JVM crash if APR fails    to properly initialize and improving error handling

Re: APR crashes when running tests on Windows

2021-11-09 Thread Michael Osipov
Am 2021-11-09 um 10:40 schrieb Mark Thomas: All, I am seeing some fairly consistent crashes when running the APR tests on Windows for 10.0.x. I'm going to spend some time trying to track down the root cause before I tag the next 10.0.x release. That's surprising, all of a sudden? Can you sha

Re: November releases

2021-11-08 Thread Michael Osipov
Am 2021-11-08 um 15:01 schrieb Mark Thomas: On 05/11/2021 08:37, Mark Thomas wrote: On 02/11/2021 16:58, Christopher Schultz wrote: Mark, On 11/2/21 07:45, Mark Thomas wrote: Hi all, There doesn't seem to be much in the changelogs at the moment and the code signing is currently unavailable

Re: [tomcat] branch main updated: Portable temp path code

2021-06-30 Thread Michael Osipov
Am 2021-06-30 um 17:45 schrieb r...@apache.org: This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new d2e

Re: [VOTE] Release Apache Tomcat Native 1.2.30

2021-06-02 Thread Michael Osipov
Am 2021-06-01 um 11:53 schrieb Mark Thomas: Resending with correct subject line... Version 1.2.30 includes the following changes compared to 1.2.28 - Fix an issue where some Windows systems in some configurations would   only listen on IPv6 addresses on dual stack systems even though   config

Re: APR connector on Windows 8+ fails to listen on all addresses

2021-05-27 Thread Michael Osipov
Am 2021-05-27 um 15:41 schrieb Mark Thomas: On 27/05/2021 13:24, Mark Thomas wrote: On 27/05/2021 11:12, Michael Osipov wrote: Am 2021-05-27 um 11:52 schrieb Mark Thomas: Michael, I think we need to step back a bit. I am unable to recreate the issue you describe. I am using: - Windows

Re: APR connector on Windows 8+ fails to listen on all addresses

2021-05-27 Thread Michael Osipov
Prefences in the OS: PS C:\Users\osipovmi> netsh interface ipv6 show prefixpolicies Der aktive Status wird abgefragt... Vorgänger Label Präfix -- - 50 0 :::0:0/96 40 1 ::1/128 30 2 ::/0 20

  1   2   3   4   >