Re: [VOTE] Release Apache Tomcat Native 2.0.4

On 31/05/2023 07:38, Igal Sapir wrote: I get compilation errors, but possibly because I don't have the most recent libs? Running on Ubuntu, the package manager shows the following versions as the most recent: ❯ sudo apt install libapr1-dev libssl-dev Reading package lists... Done Building de

Re: [VOTE] Release Apache Tomcat Native 2.0.4

On 30/05/2023 21:58, Mark Thomas wrote: The Apache Tomcat Native 2.0.4 release is  [X] Stable, go ahead and release  [ ] Broken because of ... Tested using: - Windows binaries with 11.0.x on Windows - Built OpenSSL 3.0.9 and Native 2.0.4 on Ubuntu and tested with 11.0.x All tests passed. M

Re: [VOTE] Release Apache Tomcat Native 1.2.37

On 30/05/2023 23:21, Mark Thomas wrote: The Apache Tomcat Native 1.2.37 release is  [X] Stable, go ahead and release  [ ] Broken because of ... Tested using: - Windows binary with Tomcat 11.0.x - Windows binary with Tomcat 9.0.x - Ubuntu (built from source OpenSSL 1.1.1u) with Tomcat 11.0.x

[Bug 66617] Developing wiki page: "How do I configure Tomcat to support remote debugging?" does not cover distributed shell scripts

https://bz.apache.org/bugzilla/show_bug.cgi?id=66617 Mark Thomas changed: What|Removed |Added Status|REOPENED|RESOLVED Resolution|---

[tomcat] branch 10.1.x updated: Align with 9.0.x / 8.5.x

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.1.x by this push: new d09d0a2548 Align with 9.0.x / 8.5.x d09d0a2548 is

[Bug 66621] New: Bug in WebdavServlet?

https://bz.apache.org/bugzilla/show_bug.cgi?id=66621 Bug ID: 66621 Summary: Bug in WebdavServlet? Product: Tomcat 8 Version: 8.5.89 Hardware: PC OS: Linux Status: NEW Severity: normal Priority: P

[Bug 66622] New: Enabling httpHeaderSecurity includes X-XSS-Protection the protection header which goes against Mozilla recommendations

https://bz.apache.org/bugzilla/show_bug.cgi?id=66622 Bug ID: 66622 Summary: Enabling httpHeaderSecurity includes X-XSS-Protection the protection header which goes against Mozilla recommendations Product: Tomcat 8

Re: [VOTE] Release Apache Tomcat Native 1.2.37

Mark, Thanks for RMing On 5/30/23 18:21, Mark Thomas wrote: Version 1.2.36 includes the following changes compared to 1.2.36 - The windows binaries in this release have been built with OpenSSL   1.1.1u and APR 1.7.4 The proposed release artifacts can be found at [1], and the build was done u

Re: [VOTE] Release Apache Tomcat Native 2.0.4

Mark, Thanks for RMing On 5/30/23 16:58, Mark Thomas wrote: The key differences of version 2.0.4 compared to 2.0.3 are: - The windows binaries in this release have been built with OpenSSL   3.0.9 and APR 1.7.4 The 2.0.x branch is primarily intended for use with Tomcat 10.1.x but can be used

Re: [VOTE] Release Apache Tomcat Native 1.2.37

Igal, On 5/31/23 02:23, Igal Sapir wrote: On Tue, May 30, 2023 at 3:22 PM Mark Thomas wrote: Version 1.2.36 includes the following changes compared to 1.2.36 - The windows binaries in this release have been built with OpenSSL 1.1.1u and APR 1.7.4 The proposed release artifacts can be fo

Re: [VOTE] Release Apache Tomcat Native 2.0.4

On 31/05/2023 14:38, Christopher Schultz wrote: Mark, Thanks for RMing On 5/30/23 16:58, Mark Thomas wrote: The key differences of version 2.0.4 compared to 2.0.3 are: - The windows binaries in this release have been built with OpenSSL    3.0.9 and APR 1.7.4 The 2.0.x branch is primarily int

Re: [VOTE] Release Apache Tomcat Native 2.0.4

On Tue, May 30, 2023 at 10:58 PM Mark Thomas wrote: > > The key differences of version 2.0.4 compared to 2.0.3 are: > > - The windows binaries in this release have been built with OpenSSL >3.0.9 and APR 1.7.4 > > The 2.0.x branch is primarily intended for use with Tomcat 10.1.x but > can be us

Re: [VOTE] Release Apache Tomcat Native 1.2.37

On Wed, May 31, 2023 at 12:21 AM Mark Thomas wrote: > > Version 1.2.36 includes the following changes compared to 1.2.36 > > - The windows binaries in this release have been built with OpenSSL >1.1.1u and APR 1.7.4 > > The proposed release artifacts can be found at [1], > and the build was don

Re: [VOTE] Release Apache Tomcat Native 1.2.37

On 31/05/2023 14:34, Christopher Schultz wrote: Mark, Thanks for RMing On 5/30/23 18:21, Mark Thomas wrote: Version 1.2.36 includes the following changes compared to 1.2.36 - The windows binaries in this release have been built with OpenSSL    1.1.1u and APR 1.7.4 The proposed release artifa

[tomcat] branch main updated (a789df00fb -> c36cf3a4d8)

This is an automated email from the ASF dual-hosted git repository. markt pushed a change to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git from a789df00fb Add new classes, previewing in Java 21 EA24 add 348367dcc9 Code clean-up - formatting. No functional chan

[GitHub] [tomcat] markt-asf commented on pull request #623: BZ 66513: Enforce one concurrent request per session requirement

markt-asf commented on PR #623: URL: https://github.com/apache/tomcat/pull/623#issuecomment-1570461148 I haven't deprecated this yet. I'm waiting on input from the OP of BZ 66513 and/or @jfclere as the original author of the Valve in case there is a use case I have missed. -- This is an

[GitHub] [tomcat] rmaucher commented on pull request #623: BZ 66513: Enforce one concurrent request per session requirement

rmaucher commented on PR #623: URL: https://github.com/apache/tomcat/pull/623#issuecomment-1570477734 Very clean overall, esp the javadoc update. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to t

[GitHub] [tomcat] markt-asf merged pull request #622: Bug 66618: add longDate attribute to XML in directory listing

markt-asf merged PR #622: URL: https://github.com/apache/tomcat/pull/622 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.o

[tomcat] branch main updated (c36cf3a4d8 -> b3d60da211)

This is an automated email from the ASF dual-hosted git repository. markt pushed a change to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git from c36cf3a4d8 Align with 10.1.x / 9.0.x / 8/5/x add b3d60da211 Bug 66618: add longDate attribute to XML in directory l

[tomcat] branch main updated: Consistent format. Add a change log entry.

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 032f79e9c6 Consistent format. Add a change log entry.

[tomcat] branch 10.1.x updated: Bug 66618: add longDate attribute to XML in directory listing

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.1.x by this push: new 8f46ae849d Bug 66618: add longDate attribute to X

[tomcat] branch 9.0.x updated: Bug 66618: add longDate attribute to XML in directory listing

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 3d523650ff Bug 66618: add longDate attribute to XML

[tomcat] branch 8.5.x updated: Bug 66618: add longDate attribute to XML in directory listing

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new d2446e4818 Bug 66618: add longDate attribute to XML

[Bug 66618] add longDate attribute to XML in directory listing

https://bz.apache.org/bugzilla/show_bug.cgi?id=66618 Mark Thomas changed: What|Removed |Added Resolution|--- |FIXED Status|NEW

[GitHub] [tomcat] jfclere commented on pull request #623: BZ 66513: Enforce one concurrent request per session requirement

jfclere commented on PR #623: URL: https://github.com/apache/tomcat/pull/623#issuecomment-1570527918 @markt-asf that looks better that what was there ;-) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to

[GitHub] [tomcat] markt-asf commented on pull request #623: BZ 66513: Enforce one concurrent request per session requirement

markt-asf commented on PR #623: URL: https://github.com/apache/tomcat/pull/623#issuecomment-1570534844 > @markt-asf that looks better that what was there ;-) Thanks. Can you recall if there was a use case for this Valve on a single node? Or was it always intended for use behind

[GitHub] [tomcat] jfclere commented on pull request #623: BZ 66513: Enforce one concurrent request per session requirement

jfclere commented on PR #623: URL: https://github.com/apache/tomcat/pull/623#issuecomment-1570546656 trying to remember... I guess I wrote to save and restore session information for a SINGLE tomcat node. -- This is an automated message from the Apache Git Service. To respond to the mess

Re: [VOTE] Release Apache Tomcat Native 1.2.37

Chris, On Wed, May 31, 2023 at 6:42 AM Christopher Schultz < ch...@christopherschultz.net> wrote: > Igal, > > On 5/31/23 02:23, Igal Sapir wrote: > > On Tue, May 30, 2023 at 3:22 PM Mark Thomas wrote: > > > >> Version 1.2.36 includes the following changes compared to 1.2.36 > >> > >> - The windo

[tomcat] 01/02: Simplify code

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 33fe0f9be8740f8f8014400807967f5086799605 Author: Mark Thomas AuthorDate: Wed May 31 17:30:12 2023 +0100 Simplify code

[tomcat] 02/02: Fix BZ 66621 - remove expired locks from correct collection

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git commit dc5c75f1829bed2f80536497b0b06e9da638e243 Author: Mark Thomas AuthorDate: Wed May 31 17:56:36 2023 +0100 Fix BZ 66621 -

[tomcat] branch main updated (032f79e9c6 -> dc5c75f182)

This is an automated email from the ASF dual-hosted git repository. markt pushed a change to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git from 032f79e9c6 Consistent format. Add a change log entry. new 33fe0f9be8 Simplify code new dc5c75f182 Fix BZ 66621

[tomcat] branch 10.1.x updated (8f46ae849d -> 38fba76045)

This is an automated email from the ASF dual-hosted git repository. markt pushed a change to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git from 8f46ae849d Bug 66618: add longDate attribute to XML in directory listing new 3e798a4739 Simplify code new 38

[tomcat] branch 9.0.x updated (3d523650ff -> 7c683db415)

This is an automated email from the ASF dual-hosted git repository. markt pushed a change to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git from 3d523650ff Bug 66618: add longDate attribute to XML in directory listing new 3011464c4b Simplify code new 7c6

[tomcat] 02/02: Fix BZ 66621 - remove expired locks from correct collection

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 38fba760458219a111e6c84927eb48a9dc623f74 Author: Mark Thomas AuthorDate: Wed May 31 17:56:36 2023 +0100 Fix BZ 66621

[tomcat] 01/02: Simplify code

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 3011464c4b6cef6db7ca16b72eb7aee0f0aa7300 Author: Mark Thomas AuthorDate: Wed May 31 17:30:12 2023 +0100 Simplify code

[tomcat] 01/02: Simplify code

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 3e798a4739c646e2d384ada11b67ed5029db9231 Author: Mark Thomas AuthorDate: Wed May 31 17:30:12 2023 +0100 Simplify cod

[tomcat] 02/02: Fix BZ 66621 - remove expired locks from correct collection

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 65d73d2aabd5abeceac5158ffb233efc047f4549 Author: Mark Thomas AuthorDate: Wed May 31 17:56:36 2023 +0100 Fix BZ 66621

[tomcat] 02/02: Fix BZ 66621 - remove expired locks from correct collection

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 7c683db415ef9ccf72f8c47a064d5302e412b9fa Author: Mark Thomas AuthorDate: Wed May 31 17:56:36 2023 +0100 Fix BZ 66621

[tomcat] branch 8.5.x updated (d2446e4818 -> 65d73d2aab)

This is an automated email from the ASF dual-hosted git repository. markt pushed a change to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git from d2446e4818 Bug 66618: add longDate attribute to XML in directory listing new 061f8a27fd Simplify code new 65d

[Bug 66621] Bug in WebdavServlet?

https://bz.apache.org/bugzilla/show_bug.cgi?id=66621 Mark Thomas changed: What|Removed |Added Resolution|--- |FIXED Status|NEW

[tomcat] 01/02: Simplify code

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 061f8a27fdcb9f77c9a295d6969e059ddaaee4a3 Author: Mark Thomas AuthorDate: Wed May 31 17:30:12 2023 +0100 Simplify code

[Bug 66622] Enabling httpHeaderSecurity includes X-XSS-Protection the protection header which goes against Mozilla recommendations

https://bz.apache.org/bugzilla/show_bug.cgi?id=66622 --- Comment #1 from Mark Thomas --- Given the status and history of that feature I intend to do the following: - change the default for xssProtectionEnabled to false - deprecate the feature in 8.5.x to 10.1.x - remove the feature in 11.0.x --

[tomcat] branch main updated: Fix BZ 66622 - remove xssProtectionEnabled due to no browser support

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new d61570ec0f Fix BZ 66622 - remove xssProtectionEnabled

[tomcat] branch 10.1.x updated: Fix 66622 - deprecate xssProtectionEnabled and change default to false

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.1.x by this push: new b3bb402260 Fix 66622 - deprecate xssProtectionEna

[tomcat] branch 9.0.x updated: Fix 66622 - deprecate xssProtectionEnabled and change default to false

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 5bc5fd9895 Fix 66622 - deprecate xssProtectionEnabl

[tomcat] branch 8.5.x updated: Fix 66622 - deprecate xssProtectionEnabled and change default to false

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new 3a88682ab0 Fix 66622 - deprecate xssProtectionEnabl

[Bug 66622] Enabling httpHeaderSecurity includes X-XSS-Protection the protection header which goes against Mozilla recommendations

https://bz.apache.org/bugzilla/show_bug.cgi?id=66622 Mark Thomas changed: What|Removed |Added Status|NEW |RESOLVED Resolution|---

Re: [VOTE] Release Apache Tomcat Native 2.0.4

> On May 31, 2023, at 04:58, Mark Thomas wrote: > > The key differences of version 2.0.4 compared to 2.0.3 are: > > - The windows binaries in this release have been built with OpenSSL > 3.0.9 and APR 1.7.4 > > The 2.0.x branch is primarily intended for use with Tomcat 10.1.x but can be > u