You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by Mark Thomas <ma...@apache.org> on 2026/09/07 20:57:58 UTC
[ANN] Apache Tomcat Native 1.3.9 released
The Apache Tomcat team announces the immediate availability of Apache
Tomcat Native 1.3.8 stable.
The key features of this release are:
- Windows binaries built with OpenSSL 3.5.8.
- Various robustness improvements, mostly around error handling. Note
that due to these additional checks, *Tomcat versions released before
this version of Tomcat Native will not be able to use OpenSSL based
JSSE TLS support with this release*.
- Add support for the extended range of options available in OpenSSL
3.0.x onwards.
Please refer to the change log for the complete list of changes:
http://tomcat.apache.org/native-1.3-doc/miscellaneous/changelog.html
Downloads:
http://tomcat.apache.org/download-native.cgi
The Apache Tomcat Native Library 1.3.x provides portable API for
features not found in contemporary JDK's. It uses Apache Portable
Runtime as operating system abstraction layer and OpenSSL for SSL
networking and allows optimal performance in production environments.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
Re: [ANN] Apache Tomcat Native 1.3.9 released
Posted by Evan Rempel via users <us...@tomcat.apache.org>.
Thanks for the consideration.
There are a number of ways that I can deal with this
*
Move SSL termination to Apache httpd to front end tomcat
*
Move SSL termination to a hardware load balancer product that we already deploy
*
Push up our timeline for move to RHEL9
I was just caught off guard a little bit, but I can deal with the move to OpenSSL 3.x requirements.
Thanks again for all of the amazing work on providing great products with as much compatibility that you do
--
Evan
________________________________
From: Mark Thomas <ma...@apache.org>
Sent: September 8, 2026 8:33 AM
To: users@tomcat.apache.org <us...@tomcat.apache.org>
Subject: Re: [ANN] Apache Tomcat Native 1.3.9 released
On 08/09/2026 15:43, Evan Rempel via users wrote:
> Wow. The minimum version of OpenSSL was bumped to 3.0 making Apache Tomcat Native 1.3.9 no longer compile on RHEL 8.
>
> This means that there is no latest Apache Tomcat Native that compiles under RHEL8, which is not EOL until May 31, 2029.
>
> I was hoping that RHEL8 and Apache Tomcat Native 1.3 would continue to be a supported combination until Apache Tomcat Native 1.3 went EOL in Mar 2027. We were on track to move all of our Tomcat installations to RHEL9 by Mar 2027. This drastically changes the time line.
>
> Any consideration to working around the requirement of OpenSSL 3.0?
OpenSSL 1.1.1 was supported way beyond its end of life (Sept 2023)
because of support in Debian 11 LTS (EOS August 2026). The Tomcat Native
project generally tracks supported OpenSSL and APR versions in Debian
and Ubuntu to determine the minimum versions for building Tomcat Native.
As the changelog notes, 1.1.1 support was broken in 1.3.8 and no-one
complained.
The changes between 1.1.1 and current OpenSSL master are significant. If
you want code the compiles cleaning you are (at the last count)
effectively maintaining 3 implementations in one via directives). And
that is before LibreSSL and BoringSSL support is taken into consideration.
Taking all of that together, dropping 1.1.1 support was an attractive
option compared to continuing to try and support 1.1.1 through to
current OpenSSL master.
It is also worth noting that OpenSSL 3.0.x (LTS) reached end of support
yesterday.
The latest releases of both 1.3.x and 2.0.x were built (for Windows)
with 3.5.x (specifically, 3.5.8).
It wouldn't be impossible to restore OpenSSL 1.1.1 support in the 1.3.x
branch but that would require effort and given the tidal wave of AI
generated security reports Tomcat is currently dealing restoring support
for an OpenSSL version 3+ years beyond its end of support date is
unlikely to be a priority for the current committers.
A pull request that adds back 1.1.1 support (wrapped in appropriate
directives so the 3.0.x build remains essentially as-is) would be
considered. Even that would require work to restore OpenSSL 1.1.1 build
and test environments (at least for me it would anyway).
It might be worth a quick performance test to see if you still need
Tomcat Native.
Mark
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: [ANN] Apache Tomcat Native 1.3.9 released
Posted by Mark Thomas <ma...@apache.org>.
On 08/09/2026 15:43, Evan Rempel via users wrote:
> Wow. The minimum version of OpenSSL was bumped to 3.0 making Apache Tomcat Native 1.3.9 no longer compile on RHEL 8.
>
> This means that there is no latest Apache Tomcat Native that compiles under RHEL8, which is not EOL until May 31, 2029.
>
> I was hoping that RHEL8 and Apache Tomcat Native 1.3 would continue to be a supported combination until Apache Tomcat Native 1.3 went EOL in Mar 2027. We were on track to move all of our Tomcat installations to RHEL9 by Mar 2027. This drastically changes the time line.
>
> Any consideration to working around the requirement of OpenSSL 3.0?
OpenSSL 1.1.1 was supported way beyond its end of life (Sept 2023)
because of support in Debian 11 LTS (EOS August 2026). The Tomcat Native
project generally tracks supported OpenSSL and APR versions in Debian
and Ubuntu to determine the minimum versions for building Tomcat Native.
As the changelog notes, 1.1.1 support was broken in 1.3.8 and no-one
complained.
The changes between 1.1.1 and current OpenSSL master are significant. If
you want code the compiles cleaning you are (at the last count)
effectively maintaining 3 implementations in one via directives). And
that is before LibreSSL and BoringSSL support is taken into consideration.
Taking all of that together, dropping 1.1.1 support was an attractive
option compared to continuing to try and support 1.1.1 through to
current OpenSSL master.
It is also worth noting that OpenSSL 3.0.x (LTS) reached end of support
yesterday.
The latest releases of both 1.3.x and 2.0.x were built (for Windows)
with 3.5.x (specifically, 3.5.8).
It wouldn't be impossible to restore OpenSSL 1.1.1 support in the 1.3.x
branch but that would require effort and given the tidal wave of AI
generated security reports Tomcat is currently dealing restoring support
for an OpenSSL version 3+ years beyond its end of support date is
unlikely to be a priority for the current committers.
A pull request that adds back 1.1.1 support (wrapped in appropriate
directives so the 3.0.x build remains essentially as-is) would be
considered. Even that would require work to restore OpenSSL 1.1.1 build
and test environments (at least for me it would anyway).
It might be worth a quick performance test to see if you still need
Tomcat Native.
Mark
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: [ANN] Apache Tomcat Native 1.3.9 released
Posted by lo...@kreuser.name.
Nevertheless even openssl 3.0 is EOL (since yesterday). Which version is maintained and supported by RedHat (8)?
> Am 08.09.2026 um 17:04 schrieb Evan Rempel via users <us...@tomcat.apache.org>:
>
> Not really. We have a policy that we don't source RPMs built by others. Either from the vendor, or from ourselves.
>
> --
> Evan
> ________________________________
> From: Noelette Stout <stounoel@isu.edu <ma...@isu.edu>>
> Sent: September 8, 2026 7:54 AM
> To: Tomcat Users List <users@tomcat.apache.org <ma...@tomcat.apache.org>>
> Subject: Re: [ANN] Apache Tomcat Native 1.3.9 released
>
> [You don't often get email from stounoel@isu.edu <ma...@isu.edu>. Learn why this is important at https://aka.ms/LearnAboutSenderIdentification ]
>
> Are you able to use the RHEL8 openssl3 provided in the EPEL repo?
>
> On Tue, Sep 8, 2026 at 8:44 AM Evan Rempel via users <
> users@tomcat.apache.org> wrote:
>
>> Wow. The minimum version of OpenSSL was bumped to 3.0 making Apache Tomcat
>> Native 1.3.9 no longer compile on RHEL 8.
>>
>> This means that there is no latest Apache Tomcat Native that compiles
>> under RHEL8, which is not EOL until May 31, 2029.
>>
>> I was hoping that RHEL8 and Apache Tomcat Native 1.3 would continue to be
>> a supported combination until Apache Tomcat Native 1.3 went EOL in Mar
>> 2027. We were on track to move all of our Tomcat installations to RHEL9 by
>> Mar 2027. This drastically changes the time line.
>>
>> Any consideration to working around the requirement of OpenSSL 3.0?
>>
>> --
>> Evan
>> ________________________________
>> From: Mark Thomas <ma...@apache.org>
>> Sent: September 7, 2026 1:57 PM
>> To: users@tomcat.apache.org <us...@tomcat.apache.org>
>> Cc: announce@tomcat.apache.org <an...@tomcat.apache.org>;
>> dev@tomcat.apache.org <de...@tomcat.apache.org>; announce@apache.org <
>> announce@apache.org>
>> Subject: [ANN] Apache Tomcat Native 1.3.9 released
>>
>> The Apache Tomcat team announces the immediate availability of Apache
>> Tomcat Native 1.3.8 stable.
>>
>> The key features of this release are:
>>
>> - Windows binaries built with OpenSSL 3.5.8.
>>
>> - Various robustness improvements, mostly around error handling. Note
>> that due to these additional checks, *Tomcat versions released before
>> this version of Tomcat Native will not be able to use OpenSSL based
>> JSSE TLS support with this release*.
>>
>> - Add support for the extended range of options available in OpenSSL
>> 3.0.x onwards.
>>
>> Please refer to the change log for the complete list of changes:
>>
>> https://can01.safelinks.protection.outlook.com/?url=http%3A%2F%2Ftomcat.apache.org%2Fnative-1.3-doc%2Fmiscellaneous%2Fchangelog.html&data=05%7C02%7Cerempel%40uvic.ca%7C4bb38c13006341fb2cf008df0db9547d%7C9c61d3779894427cb13b1d6a51662b4e%7C0%7C0%7C639244761786553555%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=tWh2%2FF%2Fdn0sSdnlbayuWZxVRuRc3BRRUSTeKAf6MiL8%3D&reserved=0<http://tomcat.apache.org/native-1.3-doc/miscellaneous/changelog.html> <https://can01.safelinks.protection.outlook.com/?url=http%3A%2F%2Ftomcat.apache.org%2Fnative-1.3-doc%2Fmiscellaneous%2Fchangelog.html&data=05%7C02%7Cerempel%40uvic.ca%7C4bb38c13006341fb2cf008df0db9547d%7C9c61d3779894427cb13b1d6a51662b4e%7C0%7C0%7C639244761786553555%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=tWh2%2FF%2Fdn0sSdnlbayuWZxVRuRc3BRRUSTeKAf6MiL8%3D&reserved=0%3Chttp://tomcat.apache.org/native-1.3-doc/miscellaneous/changelog.html%3E>
>> <https://can01.safelinks.protection.outlook.com/?url=http%3A%2F%2Ftomcat.apache.org%2Fnative-1.3-doc%2Fmiscellaneous%2Fchangelog.html&data=05%7C02%7Cerempel%40uvic.ca%7C4bb38c13006341fb2cf008df0db9547d%7C9c61d3779894427cb13b1d6a51662b4e%7C0%7C0%7C639244761786570354%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=idDJOijYs8PESUVfwm7183QaVAiopLH0FNYot3dERa0%3D&reserved=0<http://tomcat.apache.org/native-1.3-doc/miscellaneous/changelog.html> <https://can01.safelinks.protection.outlook.com/?url=http%3A%2F%2Ftomcat.apache.org%2Fnative-1.3-doc%2Fmiscellaneous%2Fchangelog.html&data=05%7C02%7Cerempel%40uvic.ca%7C4bb38c13006341fb2cf008df0db9547d%7C9c61d3779894427cb13b1d6a51662b4e%7C0%7C0%7C639244761786570354%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=idDJOijYs8PESUVfwm7183QaVAiopLH0FNYot3dERa0%3D&reserved=0%3Chttp://tomcat.apache.org/native-1.3-doc/miscellaneous/changelog.html%3E>>
>>
>> Downloads:
>>
>> https://can01.safelinks.protection.outlook.com/?url=http%3A%2F%2Ftomcat.apache.org%2Fdownload-native.cgi&data=05%7C02%7Cerempel%40uvic.ca%7C4bb38c13006341fb2cf008df0db9547d%7C9c61d3779894427cb13b1d6a51662b4e%7C0%7C0%7C639244761786580683%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=oQdbhvALl%2FZhY0yeb8Jz5k1vyXuz0mdhWrXgHCNMp6Y%3D&reserved=0<http://tomcat.apache.org/download-native.cgi> <https://can01.safelinks.protection.outlook.com/?url=http%3A%2F%2Ftomcat.apache.org%2Fdownload-native.cgi&data=05%7C02%7Cerempel%40uvic.ca%7C4bb38c13006341fb2cf008df0db9547d%7C9c61d3779894427cb13b1d6a51662b4e%7C0%7C0%7C639244761786580683%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=oQdbhvALl%2FZhY0yeb8Jz5k1vyXuz0mdhWrXgHCNMp6Y%3D&reserved=0%3Chttp://tomcat.apache.org/download-native.cgi%3E>
>> <https://can01.safelinks.protection.outlook.com/?url=http%3A%2F%2Ftomcat.apache.org%2Fdownload-native.cgi&data=05%7C02%7Cerempel%40uvic.ca%7C4bb38c13006341fb2cf008df0db9547d%7C9c61d3779894427cb13b1d6a51662b4e%7C0%7C0%7C639244761786590067%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=HEsabTc05Tu7B7gbfc%2FPBrvENTrfDEYiBqRCmySY2XQ%3D&reserved=0<http://tomcat.apache.org/download-native.cgi> <https://can01.safelinks.protection.outlook.com/?url=http%3A%2F%2Ftomcat.apache.org%2Fdownload-native.cgi&data=05%7C02%7Cerempel%40uvic.ca%7C4bb38c13006341fb2cf008df0db9547d%7C9c61d3779894427cb13b1d6a51662b4e%7C0%7C0%7C639244761786590067%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=HEsabTc05Tu7B7gbfc%2FPBrvENTrfDEYiBqRCmySY2XQ%3D&reserved=0%3Chttp://tomcat.apache.org/download-native.cgi%3E>>
>>
>>
>> The Apache Tomcat Native Library 1.3.x provides portable API for
>> features not found in contemporary JDK's. It uses Apache Portable
>> Runtime as operating system abstraction layer and OpenSSL for SSL
>> networking and allows optimal performance in production environments.
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
>> For additional commands, e-mail: users-help@tomcat.apache.org
>>
>>
>
> --
> Noelette Stout
> Enterprise Access Manager
> Senior Application Administrator
> Idaho State University
> E-mail: stounoel "at" isu "dot" edu
> Desk: 208-282-2554
> *I am sending this message now because it suits me, but I don’t expect that
> you will read, respond to, or act on it outside of comfortable hours for
> your time zone.*
Re: [ANN] Apache Tomcat Native 1.3.9 released
Posted by Evan Rempel via users <us...@tomcat.apache.org>.
Not really. We have a policy that we don't source RPMs built by others. Either from the vendor, or from ourselves.
--
Evan
________________________________
From: Noelette Stout <st...@isu.edu>
Sent: September 8, 2026 7:54 AM
To: Tomcat Users List <us...@tomcat.apache.org>
Subject: Re: [ANN] Apache Tomcat Native 1.3.9 released
[You don't often get email from stounoel@isu.edu. Learn why this is important at https://aka.ms/LearnAboutSenderIdentification ]
Are you able to use the RHEL8 openssl3 provided in the EPEL repo?
On Tue, Sep 8, 2026 at 8:44 AM Evan Rempel via users <
users@tomcat.apache.org> wrote:
> Wow. The minimum version of OpenSSL was bumped to 3.0 making Apache Tomcat
> Native 1.3.9 no longer compile on RHEL 8.
>
> This means that there is no latest Apache Tomcat Native that compiles
> under RHEL8, which is not EOL until May 31, 2029.
>
> I was hoping that RHEL8 and Apache Tomcat Native 1.3 would continue to be
> a supported combination until Apache Tomcat Native 1.3 went EOL in Mar
> 2027. We were on track to move all of our Tomcat installations to RHEL9 by
> Mar 2027. This drastically changes the time line.
>
> Any consideration to working around the requirement of OpenSSL 3.0?
>
> --
> Evan
> ________________________________
> From: Mark Thomas <ma...@apache.org>
> Sent: September 7, 2026 1:57 PM
> To: users@tomcat.apache.org <us...@tomcat.apache.org>
> Cc: announce@tomcat.apache.org <an...@tomcat.apache.org>;
> dev@tomcat.apache.org <de...@tomcat.apache.org>; announce@apache.org <
> announce@apache.org>
> Subject: [ANN] Apache Tomcat Native 1.3.9 released
>
> The Apache Tomcat team announces the immediate availability of Apache
> Tomcat Native 1.3.8 stable.
>
> The key features of this release are:
>
> - Windows binaries built with OpenSSL 3.5.8.
>
> - Various robustness improvements, mostly around error handling. Note
> that due to these additional checks, *Tomcat versions released before
> this version of Tomcat Native will not be able to use OpenSSL based
> JSSE TLS support with this release*.
>
> - Add support for the extended range of options available in OpenSSL
> 3.0.x onwards.
>
> Please refer to the change log for the complete list of changes:
>
> https://can01.safelinks.protection.outlook.com/?url=http%3A%2F%2Ftomcat.apache.org%2Fnative-1.3-doc%2Fmiscellaneous%2Fchangelog.html&data=05%7C02%7Cerempel%40uvic.ca%7C4bb38c13006341fb2cf008df0db9547d%7C9c61d3779894427cb13b1d6a51662b4e%7C0%7C0%7C639244761786553555%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=tWh2%2FF%2Fdn0sSdnlbayuWZxVRuRc3BRRUSTeKAf6MiL8%3D&reserved=0<http://tomcat.apache.org/native-1.3-doc/miscellaneous/changelog.html>
> <https://can01.safelinks.protection.outlook.com/?url=http%3A%2F%2Ftomcat.apache.org%2Fnative-1.3-doc%2Fmiscellaneous%2Fchangelog.html&data=05%7C02%7Cerempel%40uvic.ca%7C4bb38c13006341fb2cf008df0db9547d%7C9c61d3779894427cb13b1d6a51662b4e%7C0%7C0%7C639244761786570354%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=idDJOijYs8PESUVfwm7183QaVAiopLH0FNYot3dERa0%3D&reserved=0<http://tomcat.apache.org/native-1.3-doc/miscellaneous/changelog.html>>
>
> Downloads:
>
> https://can01.safelinks.protection.outlook.com/?url=http%3A%2F%2Ftomcat.apache.org%2Fdownload-native.cgi&data=05%7C02%7Cerempel%40uvic.ca%7C4bb38c13006341fb2cf008df0db9547d%7C9c61d3779894427cb13b1d6a51662b4e%7C0%7C0%7C639244761786580683%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=oQdbhvALl%2FZhY0yeb8Jz5k1vyXuz0mdhWrXgHCNMp6Y%3D&reserved=0<http://tomcat.apache.org/download-native.cgi>
> <https://can01.safelinks.protection.outlook.com/?url=http%3A%2F%2Ftomcat.apache.org%2Fdownload-native.cgi&data=05%7C02%7Cerempel%40uvic.ca%7C4bb38c13006341fb2cf008df0db9547d%7C9c61d3779894427cb13b1d6a51662b4e%7C0%7C0%7C639244761786590067%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=HEsabTc05Tu7B7gbfc%2FPBrvENTrfDEYiBqRCmySY2XQ%3D&reserved=0<http://tomcat.apache.org/download-native.cgi>>
>
>
> The Apache Tomcat Native Library 1.3.x provides portable API for
> features not found in contemporary JDK's. It uses Apache Portable
> Runtime as operating system abstraction layer and OpenSSL for SSL
> networking and allows optimal performance in production environments.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>
--
Noelette Stout
Enterprise Access Manager
Senior Application Administrator
Idaho State University
E-mail: stounoel "at" isu "dot" edu
Desk: 208-282-2554
*I am sending this message now because it suits me, but I don’t expect that
you will read, respond to, or act on it outside of comfortable hours for
your time zone.*
Re: [ANN] Apache Tomcat Native 1.3.9 released
Posted by Noelette Stout <st...@isu.edu>.
Are you able to use the RHEL8 openssl3 provided in the EPEL repo?
On Tue, Sep 8, 2026 at 8:44 AM Evan Rempel via users <
users@tomcat.apache.org> wrote:
> Wow. The minimum version of OpenSSL was bumped to 3.0 making Apache Tomcat
> Native 1.3.9 no longer compile on RHEL 8.
>
> This means that there is no latest Apache Tomcat Native that compiles
> under RHEL8, which is not EOL until May 31, 2029.
>
> I was hoping that RHEL8 and Apache Tomcat Native 1.3 would continue to be
> a supported combination until Apache Tomcat Native 1.3 went EOL in Mar
> 2027. We were on track to move all of our Tomcat installations to RHEL9 by
> Mar 2027. This drastically changes the time line.
>
> Any consideration to working around the requirement of OpenSSL 3.0?
>
> --
> Evan
> ________________________________
> From: Mark Thomas <ma...@apache.org>
> Sent: September 7, 2026 1:57 PM
> To: users@tomcat.apache.org <us...@tomcat.apache.org>
> Cc: announce@tomcat.apache.org <an...@tomcat.apache.org>;
> dev@tomcat.apache.org <de...@tomcat.apache.org>; announce@apache.org <
> announce@apache.org>
> Subject: [ANN] Apache Tomcat Native 1.3.9 released
>
> The Apache Tomcat team announces the immediate availability of Apache
> Tomcat Native 1.3.8 stable.
>
> The key features of this release are:
>
> - Windows binaries built with OpenSSL 3.5.8.
>
> - Various robustness improvements, mostly around error handling. Note
> that due to these additional checks, *Tomcat versions released before
> this version of Tomcat Native will not be able to use OpenSSL based
> JSSE TLS support with this release*.
>
> - Add support for the extended range of options available in OpenSSL
> 3.0.x onwards.
>
> Please refer to the change log for the complete list of changes:
>
> https://can01.safelinks.protection.outlook.com/?url=http%3A%2F%2Ftomcat.apache.org%2Fnative-1.3-doc%2Fmiscellaneous%2Fchangelog.html&data=05%7C02%7Cerempel%40uvic.ca%7C60c109cec0a545a1470208df0d22d5c1%7C9c61d3779894427cb13b1d6a51662b4e%7C0%7C0%7C639244115428142187%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=0tBMaefSZmRDVHRjeDH2VeNwTleuOuOUIGmNxswl2IU%3D&reserved=0
> <http://tomcat.apache.org/native-1.3-doc/miscellaneous/changelog.html>
>
> Downloads:
>
> https://can01.safelinks.protection.outlook.com/?url=http%3A%2F%2Ftomcat.apache.org%2Fdownload-native.cgi&data=05%7C02%7Cerempel%40uvic.ca%7C60c109cec0a545a1470208df0d22d5c1%7C9c61d3779894427cb13b1d6a51662b4e%7C0%7C0%7C639244115428163138%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=7hEse%2F70iFtRrZ%2Fl75x%2BABbo5%2Bzb7GZgWch5yWP7a4s%3D&reserved=0
> <http://tomcat.apache.org/download-native.cgi>
>
>
> The Apache Tomcat Native Library 1.3.x provides portable API for
> features not found in contemporary JDK's. It uses Apache Portable
> Runtime as operating system abstraction layer and OpenSSL for SSL
> networking and allows optimal performance in production environments.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>
--
Noelette Stout
Enterprise Access Manager
Senior Application Administrator
Idaho State University
E-mail: stounoel "at" isu "dot" edu
Desk: 208-282-2554
*I am sending this message now because it suits me, but I don’t expect that
you will read, respond to, or act on it outside of comfortable hours for
your time zone.*
Re: [ANN] Apache Tomcat Native 1.3.9 released
Posted by Evan Rempel via users <us...@tomcat.apache.org>.
Wow. The minimum version of OpenSSL was bumped to 3.0 making Apache Tomcat Native 1.3.9 no longer compile on RHEL 8.
This means that there is no latest Apache Tomcat Native that compiles under RHEL8, which is not EOL until May 31, 2029.
I was hoping that RHEL8 and Apache Tomcat Native 1.3 would continue to be a supported combination until Apache Tomcat Native 1.3 went EOL in Mar 2027. We were on track to move all of our Tomcat installations to RHEL9 by Mar 2027. This drastically changes the time line.
Any consideration to working around the requirement of OpenSSL 3.0?
--
Evan
________________________________
From: Mark Thomas <ma...@apache.org>
Sent: September 7, 2026 1:57 PM
To: users@tomcat.apache.org <us...@tomcat.apache.org>
Cc: announce@tomcat.apache.org <an...@tomcat.apache.org>; dev@tomcat.apache.org <de...@tomcat.apache.org>; announce@apache.org <an...@apache.org>
Subject: [ANN] Apache Tomcat Native 1.3.9 released
The Apache Tomcat team announces the immediate availability of Apache
Tomcat Native 1.3.8 stable.
The key features of this release are:
- Windows binaries built with OpenSSL 3.5.8.
- Various robustness improvements, mostly around error handling. Note
that due to these additional checks, *Tomcat versions released before
this version of Tomcat Native will not be able to use OpenSSL based
JSSE TLS support with this release*.
- Add support for the extended range of options available in OpenSSL
3.0.x onwards.
Please refer to the change log for the complete list of changes:
https://can01.safelinks.protection.outlook.com/?url=http%3A%2F%2Ftomcat.apache.org%2Fnative-1.3-doc%2Fmiscellaneous%2Fchangelog.html&data=05%7C02%7Cerempel%40uvic.ca%7C60c109cec0a545a1470208df0d22d5c1%7C9c61d3779894427cb13b1d6a51662b4e%7C0%7C0%7C639244115428142187%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=0tBMaefSZmRDVHRjeDH2VeNwTleuOuOUIGmNxswl2IU%3D&reserved=0<http://tomcat.apache.org/native-1.3-doc/miscellaneous/changelog.html>
Downloads:
https://can01.safelinks.protection.outlook.com/?url=http%3A%2F%2Ftomcat.apache.org%2Fdownload-native.cgi&data=05%7C02%7Cerempel%40uvic.ca%7C60c109cec0a545a1470208df0d22d5c1%7C9c61d3779894427cb13b1d6a51662b4e%7C0%7C0%7C639244115428163138%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=7hEse%2F70iFtRrZ%2Fl75x%2BABbo5%2Bzb7GZgWch5yWP7a4s%3D&reserved=0<http://tomcat.apache.org/download-native.cgi>
The Apache Tomcat Native Library 1.3.x provides portable API for
features not found in contemporary JDK's. It uses Apache Portable
Runtime as operating system abstraction layer and OpenSSL for SSL
networking and allows optimal performance in production environments.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org