You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by Mark Thomas <ma...@apache.org> on 2022/10/03 21:53:12 UTC

[VOTE] Release Apache Tomcat 8.5.83

The proposed Apache Tomcat 8.5.83 release is now available for voting.

The notable changes compared to 8.5.82 are:

- Add support for authenticating WebSocket clients with an HTTP forward
   proxy when establishing a connection to a WebSocket endpoint via a
   forward proxy that requires authentication. Based on a patch provided
   by Joe Mokos.

- Various fixes for edge case bugs in EL processing

- Enforce the requirement of RFC 7230 onwards that a request with a
   malformed content-length header should always be rejected with a 400
   response.

Along with lots of other bug fixes and improvements.

For full details, see the changelog:
https://nightlies.apache.org/tomcat/tomcat-8.5.x/docs/changelog.html

It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-8/v8.5.83/

The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1402

The tag is:
https://github.com/apache/tomcat/tree/8.5.83/
702df4f4db92b59e01d5d8824190ce2652d74a76

The proposed 8.5.83 release is:
[ ] Broken - do not release
[ ] Stable - go ahead and release as 8.5.83 (stable)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Re: [VOTE] Release Apache Tomcat 8.5.83

Posted by Mark Thomas <ma...@apache.org>.
Reminder:

This release vote is still open. Currently there are two +1 votes from 
PMC members.

Mark


On 03/10/2022 22:53, Mark Thomas wrote:
> The proposed Apache Tomcat 8.5.83 release is now available for voting.
> 
> The notable changes compared to 8.5.82 are:
> 
> - Add support for authenticating WebSocket clients with an HTTP forward
>    proxy when establishing a connection to a WebSocket endpoint via a
>    forward proxy that requires authentication. Based on a patch provided
>    by Joe Mokos.
> 
> - Various fixes for edge case bugs in EL processing
> 
> - Enforce the requirement of RFC 7230 onwards that a request with a
>    malformed content-length header should always be rejected with a 400
>    response.
> 
> Along with lots of other bug fixes and improvements.
> 
> For full details, see the changelog:
> https://nightlies.apache.org/tomcat/tomcat-8.5.x/docs/changelog.html
> 
> It can be obtained from:
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-8/v8.5.83/
> 
> The Maven staging repo is:
> https://repository.apache.org/content/repositories/orgapachetomcat-1402
> 
> The tag is:
> https://github.com/apache/tomcat/tree/8.5.83/
> 702df4f4db92b59e01d5d8824190ce2652d74a76
> 
> The proposed 8.5.83 release is:
> [ ] Broken - do not release
> [ ] Stable - go ahead and release as 8.5.83 (stable)
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: dev-help@tomcat.apache.org
> 

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Re: [VOTE] Release Apache Tomcat 8.5.83

Posted by Christopher Schultz <ch...@christopherschultz.net>.
Mark,

Thanks for RMing.

On 10/3/22 17:53, Mark Thomas wrote:
> The proposed Apache Tomcat 8.5.83 release is now available for voting.
> 
> The notable changes compared to 8.5.82 are:
> 
> - Add support for authenticating WebSocket clients with an HTTP forward
>    proxy when establishing a connection to a WebSocket endpoint via a
>    forward proxy that requires authentication. Based on a patch provided
>    by Joe Mokos.
> 
> - Various fixes for edge case bugs in EL processing
> 
> - Enforce the requirement of RFC 7230 onwards that a request with a
>    malformed content-length header should always be rejected with a 400
>    response.
> 
> Along with lots of other bug fixes and improvements.
> 
> For full details, see the changelog:
> https://nightlies.apache.org/tomcat/tomcat-8.5.x/docs/changelog.html
> 
> It can be obtained from:
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-8/v8.5.83/
> 
> The Maven staging repo is:
> https://repository.apache.org/content/repositories/orgapachetomcat-1402
> 
> The tag is:
> https://github.com/apache/tomcat/tree/8.5.83/
> 702df4f4db92b59e01d5d8824190ce2652d74a76
> 
> The proposed 8.5.83 release is:
> [ ] Broken - do not release
> [X] Stable - go ahead and release as 8.5.83 (stable)

Works with a vanilla servlet-based application in a development environment.

I think we determined last time that my Java 8 version contains a bug 
which is triggered by the TestPEMFile tests.

-chris

Details:
* Environment
*  Java (build):     openjdk version "1.8.0_292" OpenJDK Runtime 
Environment (build 1.8.0_292-8u292-b10-0+deb9u1-b10) OpenJDK 64-Bit 
Server VM (build 25.292-b10, mixed mode)
*  Java (test):     openjdk version "1.8.0_292" OpenJDK Runtime 
Environment (build 1.8.0_292-8u292-b10-0+deb9u1-b10) OpenJDK 64-Bit 
Server VM (build 25.292-b10, mixed mode)
*  OS:       Linux 5.10.0-17-amd64 x86_64
*  cc:       cc (Debian 10.2.1-6) 10.2.1 20210110
*  make:     GNU Make 4.3
*  OpenSSL:  OpenSSL 1.1.1 11 Sep 2018
*  APR:      1.7.0
*
* Valid SHA-512 signature for apache-tomcat-8.5.83.zip
* Valid GPG signature for apache-tomcat-8.5.83.zip
* Valid SHA-512 signature for apache-tomcat-8.5.83.tar.gz
* Valid GPG signature for apache-tomcat-8.5.83.tar.gz
* Valid SHA-512 signature for apache-tomcat-8.5.83.exe
* Valid GPG signature for apache-tomcat-8.5.83.exe
* Valid Windows Digital Signature for apache-tomcat-8.5.83.exe
* Valid SHA512 signature for apache-tomcat-8.5.83-src.zip
* Valid GPG signature for apache-tomcat-8.5.83-src.zip
* Valid SHA512 signature for apache-tomcat-8.5.83-src.tar.gz
* Valid GPG signature for apache-tomcat-8.5.83-src.tar.gz
*
* Binary Zip and tarball: Same
* Source Zip and tarball: Same
*
* Building dependencies returned: 0
* tcnative builds cleanly
* Tomcat builds cleanly
* Junit Tests: FAILED
*
* Tests that failed:
* org.apache.tomcat.util.net.jsse.TestPEMFile.APR.txt
* org.apache.tomcat.util.net.jsse.TestPEMFile.NIO.txt
* org.apache.tomcat.util.net.jsse.TestPEMFile.NIO2.txt

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Re: [VOTE] Release Apache Tomcat 8.5.83

Posted by Mark Thomas <ma...@homeinbox.net>.
On 03/10/2022 22:53, Mark Thomas wrote:

> The proposed 8.5.83 release is:
> [ ] Broken - do not release
> [X] Stable - go ahead and release as 8.5.83 (stable)


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Re: [VOTE] Release Apache Tomcat 8.5.83

Posted by Christopher Schultz <ch...@christopherschultz.net>.
Mark,

I' have started my testing process ;)

On 10/3/22 16:53, Mark Thomas wrote:
> The proposed Apache Tomcat 8.5.83 release is now available for voting.
> 
> The notable changes compared to 8.5.82 are:
> 
> - Add support for authenticating WebSocket clients with an HTTP forward
>    proxy when establishing a connection to a WebSocket endpoint via a
>    forward proxy that requires authentication. Based on a patch provided
>    by Joe Mokos.
> 
> - Various fixes for edge case bugs in EL processing
> 
> - Enforce the requirement of RFC 7230 onwards that a request with a
>    malformed content-length header should always be rejected with a 400
>    response.
> 
> Along with lots of other bug fixes and improvements.
> 
> For full details, see the changelog:
> https://nightlies.apache.org/tomcat/tomcat-8.5.x/docs/changelog.html
> 
> It can be obtained from:
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-8/v8.5.83/
> 
> The Maven staging repo is:
> https://repository.apache.org/content/repositories/orgapachetomcat-1402
> 
> The tag is:
> https://github.com/apache/tomcat/tree/8.5.83/
> 702df4f4db92b59e01d5d8824190ce2652d74a76
> 
> The proposed 8.5.83 release is:
> [ ] Broken - do not release
> [ ] Stable - go ahead and release as 8.5.83 (stable)
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: dev-help@tomcat.apache.org
> 

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


[VOTE][RESULT] Release Apache Tomcat 8.5.83

Posted by Mark Thomas <ma...@apache.org>.
The following votes were cast:

Binding:
+1: markt, remm, schultz

No other votes were cast. The vote therefore passes.

Thanks to everyone who contributed to this release.

Mark

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Re: [VOTE] Release Apache Tomcat 8.5.83

Posted by Rémy Maucherat <re...@apache.org>.
On Mon, Oct 3, 2022 at 4:54 PM Mark Thomas <ma...@apache.org> wrote:
>
> The proposed Apache Tomcat 8.5.83 release is now available for voting.
>
> The notable changes compared to 8.5.82 are:
>
> - Add support for authenticating WebSocket clients with an HTTP forward
>    proxy when establishing a connection to a WebSocket endpoint via a
>    forward proxy that requires authentication. Based on a patch provided
>    by Joe Mokos.
>
> - Various fixes for edge case bugs in EL processing
>
> - Enforce the requirement of RFC 7230 onwards that a request with a
>    malformed content-length header should always be rejected with a 400
>    response.
>
> Along with lots of other bug fixes and improvements.
>
> For full details, see the changelog:
> https://nightlies.apache.org/tomcat/tomcat-8.5.x/docs/changelog.html
>
> It can be obtained from:
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-8/v8.5.83/
>
> The Maven staging repo is:
> https://repository.apache.org/content/repositories/orgapachetomcat-1402
>
> The tag is:
> https://github.com/apache/tomcat/tree/8.5.83/
> 702df4f4db92b59e01d5d8824190ce2652d74a76
>
> The proposed 8.5.83 release is:
> [ ] Broken - do not release
> [X] Stable - go ahead and release as 8.5.83 (stable)

Rémy

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org