OpenSSL security announcement - do we need a Tomcat Native release?

2021-08-25 Thread Mark Thomas
Hi all, OpenSSL have published a security announcement alongside the latest release: https://www.openssl.org/news/secadv/20210824.txt I'm trying to figure out if Tomcat Native is affected by these. For CVE-2021-3711 it isn't clear to me if the issue relates to just stand-alone decryption or i

OT: Parsing EC private keys in PEM format

2021-08-25 Thread Christopher Schultz
All, I'm trying to do this without looking at the code which is in Tomcat because I'd like to release it separately and not have to worry about figuring out hos to get permission, etc. I'm working on a piece of code which can load the following types of PEM-encoded DER files with private key

Re: OT: Parsing EC private keys in PEM format

2021-08-25 Thread Mark Thomas
On 25/08/2021 15:10, Christopher Schultz wrote: All, I'm trying to do this without looking at the code which is in Tomcat because I'd like to release it separately and not have to worry about figuring out hos to get permission, etc. It is ALv2 so the requirements are pretty minimal. You just

Re: OT: Parsing EC private keys in PEM format

2021-08-25 Thread Christopher Schultz
Mark, On 8/25/21 10:28, Mark Thomas wrote: On 25/08/2021 15:10, Christopher Schultz wrote: All, I'm trying to do this without looking at the code which is in Tomcat because I'd like to release it separately and not have to worry about figuring out hos to get permission, etc. It is ALv2 so

[tomcat] branch main updated: Add available flag for UserDatabase

2021-08-25 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 459cbf6 Add available flag for UserDatabase 459cbf6 i