You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by Christopher Schultz <ch...@christopherschultz.net> on 2025/03/04 19:13:46 UTC
[VOTE] Release Apache Tomcat 10.1.39
The proposed Apache Tomcat 10.1.39 release is now available for
voting.
All committers and PMC members are kindly requested to provide a vote if
possible. ANY TOMCAT USER MAY VOTE, though only PMC members votes are
binding. We welcome non-committer votes or comments on release builds.
Note that 10.1.37 and 10.1.38 were not released due to packaging errors.
The notable changes compared to 10.1.36 are:
- Improve the checks for exposure to and protection against
CVE-2024-56337 so that reflection is not used unless required. The
checks for whether the file system is case sensitive or not have been
removed.
- Use Transfer-Encoding for compression rather than Content-Encoding if
the client submits a TE header containing gzip.
- Add makensis as an option for building the Installer for Windows on
non-Windows platforms.
For full details, see the change log:
https://nightlies.apache.org/tomcat/tomcat-10.1.x/docs/changelog.html
Applications that run on Tomcat 9 and earlier will not run on Tomcat 10
without changes. Java EE applications designed for Tomcat 9 and earlier
may be placed in the $CATALINA_BASE/webapps-javaee directory and Tomcat
will automatically convert them to Jakarta EE and copy them to the
webapps directory.
It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-10/v10.1.38/
The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1539
The tag is:
https://github.com/apache/tomcat/tree/10.1.39
https://github.com/apache/tomcat/commit/1e17b1d03591faa17a6eedeaeb3a9f9f7aac12fa
Please reply with a +1 for release or +0/-0/-1 with an explanation.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
Re: [VOTE] Release Apache Tomcat 10.1.39
Posted by Christopher Schultz <ch...@christopherschultz.net>.
All,
On 3/4/25 2:13 PM, Christopher Schultz wrote:
> The proposed Apache Tomcat 10.1.39 release is now available for
> voting.
>
> All committers and PMC members are kindly requested to provide a vote if
> possible. ANY TOMCAT USER MAY VOTE, though only PMC members votes are
> binding. We welcome non-committer votes or comments on release builds.
>
> Note that 10.1.37 and 10.1.38 were not released due to packaging errors.
>
> The notable changes compared to 10.1.36 are:
>
> - Improve the checks for exposure to and protection against
> CVE-2024-56337 so that reflection is not used unless required. The
> checks for whether the file system is case sensitive or not have been
> removed.
>
> - Use Transfer-Encoding for compression rather than Content-Encoding if
> the client submits a TE header containing gzip.
>
> - Add makensis as an option for building the Installer for Windows on
> non-Windows platforms.
>
> For full details, see the change log:
> https://nightlies.apache.org/tomcat/tomcat-10.1.x/docs/changelog.html
>
> Applications that run on Tomcat 9 and earlier will not run on Tomcat 10
> without changes. Java EE applications designed for Tomcat 9 and earlier
> may be placed in the $CATALINA_BASE/webapps-javaee directory and Tomcat
> will automatically convert them to Jakarta EE and copy them to the
> webapps directory.
>
> It can be obtained from:
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-10/v10.1.38/
>
> The Maven staging repo is:
> https://repository.apache.org/content/repositories/orgapachetomcat-1539
>
> The tag is:
> https://github.com/apache/tomcat/tree/10.1.39
> https://github.com/apache/tomcat/
> commit/1e17b1d03591faa17a6eedeaeb3a9f9f7aac12fa
>
> Please reply with a +1 for release or +0/-0/-1 with an explanation.
+1 for stable release
Unit tests pass on MacOS aarch64.
Details:
* Junit Tests: PASSED
chris@Mac:~/git/apache-tomcat-stuff$ grep '^*' tomcat-10.1.39.log
* Environment
* Java (build): openjdk version "23.0.2" 2025-01-21 OpenJDK Runtime
Environment Temurin-23.0.2+7 (build 23.0.2+7) OpenJDK 64-Bit Server VM
Temurin-23.0.2+7 (build 23.0.2+7, mixed mode, sharing)
* Java (test): openjdk version "23.0.2" 2025-01-21 OpenJDK Runtime
Environment Temurin-23.0.2+7 (build 23.0.2+7) OpenJDK 64-Bit Server VM
Temurin-23.0.2+7 (build 23.0.2+7, mixed mode, sharing)
* Ant: Apache Ant(TM) version 1.10.15 compiled on August 25
2024
* OS: Darwin 24.1.0 arm64
* cc: Apple clang version 16.0.0 (clang-1600.0.26.4)
* make: GNU Make 3.81
* OpenSSL: OpenSSL 3.4.0 22 Oct 2024 (Library: OpenSSL 3.4.0 22
Oct 2024)
* APR: 1.7.5
*
* Valid SHA-512 signature for apache-tomcat-10.1.39.zip
* Valid GPG signature for apache-tomcat-10.1.39.zip
* Valid SHA-512 signature for apache-tomcat-10.1.39.tar.gz
* Valid GPG signature for apache-tomcat-10.1.39.tar.gz
* Valid SHA-512 signature for apache-tomcat-10.1.39.exe
* Valid GPG signature for apache-tomcat-10.1.39.exe
* Valid Windows Digital Signature for apache-tomcat-10.1.39.exe
* Valid SHA512 signature for apache-tomcat-10.1.39-src.zip
* Valid GPG signature for apache-tomcat-10.1.39-src.zip
* Valid SHA512 signature for apache-tomcat-10.1.39-src.tar.gz
* Valid GPG signature for apache-tomcat-10.1.39-src.tar.gz
*
* Binary Zip and tarball: Same
* Source Zip and tarball: Same
*
* Building dependencies returned: 0
* Tomcat builds cleanly
* tcnative builds cleanly
* Junit Tests: PASSED
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
Re: [VOTE] Release Apache Tomcat 10.1.39
Posted by Rémy Maucherat <re...@apache.org>.
On Tue, Mar 4, 2025 at 8:15 PM Christopher Schultz
<ch...@christopherschultz.net> wrote:
>
> The proposed Apache Tomcat 10.1.39 release is now available for
> voting.
>
> All committers and PMC members are kindly requested to provide a vote if
> possible. ANY TOMCAT USER MAY VOTE, though only PMC members votes are
> binding. We welcome non-committer votes or comments on release builds.
>
> Note that 10.1.37 and 10.1.38 were not released due to packaging errors.
>
> The notable changes compared to 10.1.36 are:
>
> - Improve the checks for exposure to and protection against
> CVE-2024-56337 so that reflection is not used unless required. The
> checks for whether the file system is case sensitive or not have been
> removed.
>
> - Use Transfer-Encoding for compression rather than Content-Encoding if
> the client submits a TE header containing gzip.
>
> - Add makensis as an option for building the Installer for Windows on
> non-Windows platforms.
>
> For full details, see the change log:
> https://nightlies.apache.org/tomcat/tomcat-10.1.x/docs/changelog.html
>
> Applications that run on Tomcat 9 and earlier will not run on Tomcat 10
> without changes. Java EE applications designed for Tomcat 9 and earlier
> may be placed in the $CATALINA_BASE/webapps-javaee directory and Tomcat
> will automatically convert them to Jakarta EE and copy them to the
> webapps directory.
>
> It can be obtained from:
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-10/v10.1.38/
>
> The Maven staging repo is:
> https://repository.apache.org/content/repositories/orgapachetomcat-1539
>
> The tag is:
> https://github.com/apache/tomcat/tree/10.1.39
> https://github.com/apache/tomcat/commit/1e17b1d03591faa17a6eedeaeb3a9f9f7aac12fa
>
> Please reply with a +1 for release or +0/-0/-1 with an explanation.
+1, reproduced.
Rémy
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: dev-help@tomcat.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
Re: [VOTE] Release Apache Tomcat 10.1.39
Posted by Konstantin Kolinko <kn...@gmail.com>.
вт, 4 мар. 2025 г. в 22:13, Christopher Schultz <ch...@christopherschultz.net>:
>
> The proposed Apache Tomcat 10.1.39 release is now available for
> voting.
>
> All committers and PMC members are kindly requested to provide a vote if
> possible. ANY TOMCAT USER MAY VOTE, though only PMC members votes are
> binding. We welcome non-committer votes or comments on release builds.
>
> Note that 10.1.37 and 10.1.38 were not released due to packaging errors.
>
> The notable changes compared to 10.1.36 are:
>
> - Improve the checks for exposure to and protection against
> CVE-2024-56337 so that reflection is not used unless required. The
> checks for whether the file system is case sensitive or not have been
> removed.
>
> - Use Transfer-Encoding for compression rather than Content-Encoding if
> the client submits a TE header containing gzip.
>
> - Add makensis as an option for building the Installer for Windows on
> non-Windows platforms.
>
> For full details, see the change log:
> https://nightlies.apache.org/tomcat/tomcat-10.1.x/docs/changelog.html
>
> Applications that run on Tomcat 9 and earlier will not run on Tomcat 10
> without changes. Java EE applications designed for Tomcat 9 and earlier
> may be placed in the $CATALINA_BASE/webapps-javaee directory and Tomcat
> will automatically convert them to Jakarta EE and copy them to the
> webapps directory.
>
> It can be obtained from:
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-10/v10.1.38/
Note that the correct link instead of the above one is, obviously:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-10/v10.1.39/
Other links are OK.
> The Maven staging repo is:
> https://repository.apache.org/content/repositories/orgapachetomcat-1539
>
> The tag is:
> https://github.com/apache/tomcat/tree/10.1.39
> https://github.com/apache/tomcat/commit/1e17b1d03591faa17a6eedeaeb3a9f9f7aac12fa
>
> Please reply with a +1 for release or +0/-0/-1 with an explanation.
+0 (I have tested it yet besides downloading)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
Re: [VOTE] Release Apache Tomcat 10.1.39
Posted by Mark Thomas <ma...@apache.org>.
On 04/03/2025 19:13, Christopher Schultz wrote:
> The proposed Apache Tomcat 10.1.39 release is now available for
> voting.
+1
Build is cross platform (OSX/Linux/Windows) reproducible.
Tests pass on:
- Linux (OpenSSL 3.0.13 from Ubuntu 24.04)
- Windows (OpenSSL 3.0.14 - Native 2.0.8 binaries)
- MacOS (M1 (OpenSSL 3.4.1)
Mark
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
Re: [VOTE] Release Apache Tomcat 10.1.39
Posted by Coty Sutherland <cs...@apache.org>.
On Tue, Mar 4, 2025 at 2:16 PM Christopher Schultz <
chris@christopherschultz.net> wrote:
> The proposed Apache Tomcat 10.1.39 release is now available for
> voting.
>
> All committers and PMC members are kindly requested to provide a vote if
> possible. ANY TOMCAT USER MAY VOTE, though only PMC members votes are
> binding. We welcome non-committer votes or comments on release builds.
>
> Note that 10.1.37 and 10.1.38 were not released due to packaging errors.
>
> The notable changes compared to 10.1.36 are:
>
> - Improve the checks for exposure to and protection against
> CVE-2024-56337 so that reflection is not used unless required. The
> checks for whether the file system is case sensitive or not have been
> removed.
>
> - Use Transfer-Encoding for compression rather than Content-Encoding if
> the client submits a TE header containing gzip.
>
> - Add makensis as an option for building the Installer for Windows on
> non-Windows platforms.
>
> For full details, see the change log:
> https://nightlies.apache.org/tomcat/tomcat-10.1.x/docs/changelog.html
>
> Applications that run on Tomcat 9 and earlier will not run on Tomcat 10
> without changes. Java EE applications designed for Tomcat 9 and earlier
> may be placed in the $CATALINA_BASE/webapps-javaee directory and Tomcat
> will automatically convert them to Jakarta EE and copy them to the
> webapps directory.
>
> It can be obtained from:
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-10/v10.1.38/
>
> The Maven staging repo is:
> https://repository.apache.org/content/repositories/orgapachetomcat-1539
>
> The tag is:
> https://github.com/apache/tomcat/tree/10.1.39
>
> https://github.com/apache/tomcat/commit/1e17b1d03591faa17a6eedeaeb3a9f9f7aac12fa
>
> Please reply with a +1 for release or +0/-0/-1 with an explanation.
>
+1
Re: [VOTE] Release Apache Tomcat 10.1.39
Posted by Mark Thomas <ma...@apache.org>.
On 05/03/2025 12:22, Dimitris Soumis wrote:
<snip/>
> Build is 100% reproducible with nsis.tool=makensis. I am getting an error
> though if the nsis.tool=wine as it doesn't contain the latest build.xml
> files with the fixes.
Just to note with the latest fixes you won't see that error but the
build still won't work properly (the signatures will fail) with wine.
Rainer set out yesterday one option to get wine working while retaining
support for makesnis.
Mark
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
Re: [VOTE] Release Apache Tomcat 10.1.39
Posted by Dimitris Soumis <ds...@apache.org>.
On Tue, Mar 4, 2025 at 9:25 PM Christopher Schultz <
chris@christopherschultz.net> wrote:
> The proposed Apache Tomcat 10.1.39 release is now available for
> voting.
>
> All committers and PMC members are kindly requested to provide a vote if
> possible. ANY TOMCAT USER MAY VOTE, though only PMC members votes are
> binding. We welcome non-committer votes or comments on release builds.
>
> Note that 10.1.37 and 10.1.38 were not released due to packaging errors.
>
> The notable changes compared to 10.1.36 are:
>
> - Improve the checks for exposure to and protection against
> CVE-2024-56337 so that reflection is not used unless required. The
> checks for whether the file system is case sensitive or not have been
> removed.
>
> - Use Transfer-Encoding for compression rather than Content-Encoding if
> the client submits a TE header containing gzip.
>
> - Add makensis as an option for building the Installer for Windows on
> non-Windows platforms.
>
> For full details, see the change log:
> https://nightlies.apache.org/tomcat/tomcat-10.1.x/docs/changelog.html
>
> Applications that run on Tomcat 9 and earlier will not run on Tomcat 10
> without changes. Java EE applications designed for Tomcat 9 and earlier
> may be placed in the $CATALINA_BASE/webapps-javaee directory and Tomcat
> will automatically convert them to Jakarta EE and copy them to the
> webapps directory.
>
> It can be obtained from:
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-10/v10.1.38/
>
> The Maven staging repo is:
> https://repository.apache.org/content/repositories/orgapachetomcat-1539
>
> The tag is:
> https://github.com/apache/tomcat/tree/10.1.39
>
> https://github.com/apache/tomcat/commit/1e17b1d03591faa17a6eedeaeb3a9f9f7aac12fa
>
> Please reply with a +1 for release or +0/-0/-1 with an explanation.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: dev-help@tomcat.apache.org
>
>
Build is 100% reproducible with nsis.tool=makensis. I am getting an error
though if the nsis.tool=wine as it doesn't contain the latest build.xml
files with the fixes.
BUILD FAILED
/home/dsoumis/Downloads/apache-tomcat-10.1.39-src/build.xml:2632: Execute
failed: java.io.IOException: Cannot run program "${nsis.executable.unix}"
(in directory "/home/dsoumis/Downloads/apache-tomcat-10.1.39-src"):
error=2, No such file or directory
at java.base/java.lang.ProcessBuilder.start(ProcessBuilder.java:1170)
at java.base/java.lang.ProcessBuilder.start(ProcessBuilder.java:1089)
at java.base/java.lang.Runtime.exec(Runtime.java:681)
at
org.apache.tools.ant.taskdefs.launcher.Java13CommandLauncher.exec(Java13CommandLauncher.java:58)
at org.apache.tools.ant.taskdefs.Execute.launch(Execute.java:424)
at org.apache.tools.ant.taskdefs.Execute.execute(Execute.java:438)
at
org.apache.tools.ant.taskdefs.ExecTask.runExecute(ExecTask.java:660)
at org.apache.tools.ant.taskdefs.ExecTask.runExec(ExecTask.java:699)
at org.apache.tools.ant.taskdefs.ExecTask.execute(ExecTask.java:527)
at
org.apache.tools.ant.UnknownElement.execute(UnknownElement.java:299)
at
java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:103)
at java.base/java.lang.reflect.Method.invoke(Method.java:580)
at
org.apache.tools.ant.dispatch.DispatchUtils.execute(DispatchUtils.java:99)
at org.apache.tools.ant.Task.perform(Task.java:350)
at org.apache.tools.ant.Target.execute(Target.java:449)
at org.apache.tools.ant.Target.performTasks(Target.java:470)
at
org.apache.tools.ant.Project.executeSortedTargets(Project.java:1401)
at org.apache.tools.ant.Project.executeTarget(Project.java:1374)
at
org.apache.tools.ant.helper.DefaultExecutor.executeTargets(DefaultExecutor.java:41)
at org.apache.tools.ant.Project.executeTargets(Project.java:1264)
at org.apache.tools.ant.Main.runBuild(Main.java:818)
at org.apache.tools.ant.Main.startAnt(Main.java:223)
at org.apache.tools.ant.launch.Launcher.run(Launcher.java:284)
at org.apache.tools.ant.launch.Launcher.main(Launcher.java:101)
Caused by: java.io.IOException: error=2, No such file or directory
at java.base/java.lang.ProcessImpl.forkAndExec(Native Method)
at java.base/java.lang.ProcessImpl.<init>(ProcessImpl.java:295)
at java.base/java.lang.ProcessImpl.start(ProcessImpl.java:225)
at java.base/java.lang.ProcessBuilder.start(ProcessBuilder.java:1126)
... 23 more
Tests pass on Fedora 41 with Java 23, tcnative-2.0.8, apr-1.7.4,
openssl-3.2.4.
[VOTE][RESULT] Release Apache Tomcat 10.1.39
Posted by Christopher Schultz <ch...@christopherschultz.net>.
All,
The following votes were cast:
+1: remm, markt, csutherl, schultz
+0: dsoumis, kkolinko
No other votes were cast, therefore the vote passes.
Thanks to everyone who contributed toward this release.
-chris
On 3/4/25 2:13 PM, Christopher Schultz wrote:
> The proposed Apache Tomcat 10.1.39 release is now available for
> voting.
>
> All committers and PMC members are kindly requested to provide a vote if
> possible. ANY TOMCAT USER MAY VOTE, though only PMC members votes are
> binding. We welcome non-committer votes or comments on release builds.
>
> Note that 10.1.37 and 10.1.38 were not released due to packaging errors.
>
> The notable changes compared to 10.1.36 are:
>
> - Improve the checks for exposure to and protection against
> CVE-2024-56337 so that reflection is not used unless required. The
> checks for whether the file system is case sensitive or not have been
> removed.
>
> - Use Transfer-Encoding for compression rather than Content-Encoding if
> the client submits a TE header containing gzip.
>
> - Add makensis as an option for building the Installer for Windows on
> non-Windows platforms.
>
> For full details, see the change log:
> https://nightlies.apache.org/tomcat/tomcat-10.1.x/docs/changelog.html
>
> Applications that run on Tomcat 9 and earlier will not run on Tomcat 10
> without changes. Java EE applications designed for Tomcat 9 and earlier
> may be placed in the $CATALINA_BASE/webapps-javaee directory and Tomcat
> will automatically convert them to Jakarta EE and copy them to the
> webapps directory.
>
> It can be obtained from:
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-10/v10.1.38/
>
> The Maven staging repo is:
> https://repository.apache.org/content/repositories/orgapachetomcat-1539
>
> The tag is:
> https://github.com/apache/tomcat/tree/10.1.39
> https://github.com/apache/tomcat/
> commit/1e17b1d03591faa17a6eedeaeb3a9f9f7aac12fa
>
> Please reply with a +1 for release or +0/-0/-1 with an explanation.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
Re: [VOTE] Release Apache Tomcat 10.1.39
Posted by Rainer Jung <ra...@kippdata.de>.
Am 04.03.25 um 20:13 schrieb Christopher Schultz:
> The proposed Apache Tomcat 10.1.39 release is now available for
> voting.
>
> All committers and PMC members are kindly requested to provide a vote if
> possible. ANY TOMCAT USER MAY VOTE, though only PMC members votes are
> binding. We welcome non-committer votes or comments on release builds.
>
> Note that 10.1.37 and 10.1.38 were not released due to packaging errors.
>
> The notable changes compared to 10.1.36 are:
>
> - Improve the checks for exposure to and protection against
> CVE-2024-56337 so that reflection is not used unless required. The
> checks for whether the file system is case sensitive or not have been
> removed.
>
> - Use Transfer-Encoding for compression rather than Content-Encoding if
> the client submits a TE header containing gzip.
>
> - Add makensis as an option for building the Installer for Windows on
> non-Windows platforms.
>
> For full details, see the change log:
> https://nightlies.apache.org/tomcat/tomcat-10.1.x/docs/changelog.html
>
> Applications that run on Tomcat 9 and earlier will not run on Tomcat 10
> without changes. Java EE applications designed for Tomcat 9 and earlier
> may be placed in the $CATALINA_BASE/webapps-javaee directory and Tomcat
> will automatically convert them to Jakarta EE and copy them to the
> webapps directory.
>
> It can be obtained from:
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-10/v10.1.38/
>
> The Maven staging repo is:
> https://repository.apache.org/content/repositories/orgapachetomcat-1539
>
> The tag is:
> https://github.com/apache/tomcat/tree/10.1.39
> https://github.com/apache/tomcat/
> commit/1e17b1d03591faa17a6eedeaeb3a9f9f7aac12fa
>
> Please reply with a +1 for release or +0/-0/-1 with an explanation.
I am late, but for the sake of completeness:
+1
Reproducibility of the build checked (including the Windows installer)
on Linux Mint 22.1 (x86_64) using custom makensis. OK after setting
LANG=en_US.utf8 for javadoc (fixed in main).
Tested on platforms
- RHEL 6, 7, 8 and 9, SLES 11, 12 and 15, Solaris 11 Sparc
using
- current patch versions of JDK 11, 17, 21, 23 and 24+25 (current EAs)
from
- Eclipse Adoptium, Azul Zulu, Amazon Corretto, Oracle, RedHat and
OpenJDK (for the EAs)
where available.
Also tested with
- tcnative 1.3.1, tcnative 2.0.8 and panama
based on
- OpenSSL 3.0.16, 3.1.8, 3.2.4, 3.3.3 and 3.4.1.
All tests fine, except for the usual sporadic crashes with tcnative
during shutdown.
Thanks for RM!
Best regards,
Rainer
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org