You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by Mark Thomas <ma...@apache.org> on 2020/04/09 15:08:07 UTC

[ANN] Apache Tomcat 9.0.34 available

The Apache Tomcat team announces the immediate availability of Apache
Tomcat 9.0.34.

Apache Tomcat 9 is an open source software implementation of the Java
Servlet, JavaServer Pages, Java Unified Expression Language, Java
WebSocket and JASPIC technologies.

Apache Tomcat 9.0.34 is a bugfix and feature release. The notable
changes compared to 9.0.33 include:

- Add support for default values when using ${...} property replacement
  in configuration files. Based on a pull request provided by Bernd
  Bohmann.

- When configuring an HTTP Connector, warn if the encoding specified for
  URIEncoding is not a superset of US-ASCII as required by RFC7230.

- Replace the system property
  org.apache.tomcat.util.buf.UDecoder.ALLOW_ENCODED_SLASH with the
  Connector attribute encodedSolidusHandling that adds an additional
  option to pass the %2f sequence through to the application without
  decoding it in addition to rejecting such sequences and decoding such
  sequences.

Please refer to the change log for the complete list of changes:
http://tomcat.apache.org/tomcat-9.0-doc/changelog.html


Downloads:
http://tomcat.apache.org/download-90.cgi

Migration guides from Apache Tomcat 7.x and 8.x:
http://tomcat.apache.org/migration.html

Enjoy!

- The Apache Tomcat team


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Re: [ANN] Apache Tomcat 9.0.34 available

Posted by Bill Stewart <bs...@iname.com>.
On Thu, Apr 9, 2020 at 10:54 AM Mark Thomas wrote:

> The correct SHA512 is:
> 2bb67b23dc4fd484026f1a8b382f8fe3693644b45576f835f3822d4627e1c1a5c395b054c66cb7b50a29ac591389bdd6b9d2fe42de9fdfb0f4dd38bdeb58027f

Thank you. The issue was my download had somehow gotten corrupted. I
downloaded the file again and all is well.

(Lesson learned: Verify file hash.)

My apologies for the unnecessary noise in this list.

Bill

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: [ANN] Apache Tomcat 9.0.34 available

Posted by Mark Thomas <ma...@apache.org>.
On 09/04/2020 17:50, Bill Stewart wrote:
> On Thu, Apr 9, 2020 at 10:41 AM Bill Stewart wrote:
>>
>> On Thu, Apr 9, 2020 at 10:36 AM Mark Thomas wrote:
>>
>>> Where did you get that zip file from?
>>
>> https://tomcat.apache.org/download-90.cgi
>>
>> (Not sure which specific mirror was used; I since navigated elsewhere)

Hmm. Can you tell me which mirror you get when you try again. That will
at least point me to the correct group of mirrors

>>> What is the SHA512 hash of the zip file you downloaded?
>>
>> DA20C41125C879B193C1B3AE9A6728E3CA5A9C5CF9F97C54AE81585D7D942D91526FD62D663A0A09483373205F8B2745A6F02F9AE441F8979429C59189D4A72E

That SHA512 does not match the SHA512 listed on tomcat.apache.org for
apache-tomcat-9.0.34-windows-x64.zip

The correct SHA512 is:
2bb67b23dc4fd484026f1a8b382f8fe3693644b45576f835f3822d4627e1c1a5c395b054c66cb7b50a29ac591389bdd6b9d2fe42de9fdfb0f4dd38bdeb58027f

>>> Did you download over HTTPS?
>>
>> Yes.
> 
> Also missing: tomcat9.exe

That makes me think something in your network intercepted the zip file
and removed the .dll and .exe content. But downloading over HTTPS should
have prevented that unless you are behind a particular invasive
corporate firewall.

Mark

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: [ANN] Apache Tomcat 9.0.34 available

Posted by Bill Stewart <bs...@iname.com>.
On Thu, Apr 9, 2020 at 10:41 AM Bill Stewart wrote:
>
> On Thu, Apr 9, 2020 at 10:36 AM Mark Thomas wrote:
>
> > Where did you get that zip file from?
>
> https://tomcat.apache.org/download-90.cgi
>
> (Not sure which specific mirror was used; I since navigated elsewhere)
>
> > What is the SHA512 hash of the zip file you downloaded?
>
> DA20C41125C879B193C1B3AE9A6728E3CA5A9C5CF9F97C54AE81585D7D942D91526FD62D663A0A09483373205F8B2745A6F02F9AE441F8979429C59189D4A72E
>
> > Did you download over HTTPS?
>
> Yes.

Also missing: tomcat9.exe

Bill

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: [ANN] Apache Tomcat 9.0.34 available

Posted by Bill Stewart <bs...@iname.com>.
On Thu, Apr 9, 2020 at 10:36 AM Mark Thomas <ma...@apache.org> wrote:

> Where did you get that zip file from?

https://tomcat.apache.org/download-90.cgi

(Not sure which specific mirror was used; I since navigated elsewhere)

> What is the SHA512 hash of the zip file you downloaded?

DA20C41125C879B193C1B3AE9A6728E3CA5A9C5CF9F97C54AE81585D7D942D91526FD62D663A0A09483373205F8B2745A6F02F9AE441F8979429C59189D4A72E

> Did you download over HTTPS?

Yes.

Bill

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: [ANN] Apache Tomcat 9.0.34 available

Posted by Rémy Maucherat <re...@apache.org>.
On Thu, Apr 9, 2020 at 6:36 PM Mark Thomas <ma...@apache.org> wrote:

> On 09/04/2020 17:27, Mark Thomas wrote:
> > On 09/04/2020 17:16, Bill Stewart wrote:
> >> On Thu, Apr 9, 2020 at 9:08 AM Mark Thomas <ma...@apache.org> wrote:
> >>
> >>> The Apache Tomcat team announces the immediate availability of Apache
> >>> Tomcat 9.0.34.
> >>
> >> Thank you.
> >>
> >> FYI: The file tcnative-1.dll is missing from the
> >> 'apache-tomcat-9.0.34-windows-x64.zip' distribution.
> >
> > That is strange. The release build process is scripted so that sort of
> > thing shouldn't happen. Let me take a look.
>
> Bill,
>
> I'm not seeing this.
>
> The file "tcnative-1.dll" is present in the "bin" directory in the zip
> file generated by the build process (this happens on a dedicated VM and
> I keep the previous build directory until I start the next point release
> for that version).
>

It looks fine for me as well.

Rémy


>
> The file "tcnative-1.dll" is present in the "bin" directory in the zip
> file I downloaded from tomcat.apache.org
>
> I also confirmed that the SHA512 hashes were the same for both zip files
> confirming that nothing changed between the version I built and the file
> that is available on the download page.
>
> Where did you get that zip file from?
> What is the SHA512 hash of the zip file you downloaded?
> Did you download over HTTPS?
>
> Mark
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>

Re: [ANN] Apache Tomcat 9.0.34 available

Posted by Mark Thomas <ma...@apache.org>.
On 09/04/2020 17:27, Mark Thomas wrote:
> On 09/04/2020 17:16, Bill Stewart wrote:
>> On Thu, Apr 9, 2020 at 9:08 AM Mark Thomas <ma...@apache.org> wrote:
>>
>>> The Apache Tomcat team announces the immediate availability of Apache
>>> Tomcat 9.0.34.
>>
>> Thank you.
>>
>> FYI: The file tcnative-1.dll is missing from the
>> 'apache-tomcat-9.0.34-windows-x64.zip' distribution.
> 
> That is strange. The release build process is scripted so that sort of
> thing shouldn't happen. Let me take a look.

Bill,

I'm not seeing this.

The file "tcnative-1.dll" is present in the "bin" directory in the zip
file generated by the build process (this happens on a dedicated VM and
I keep the previous build directory until I start the next point release
for that version).

The file "tcnative-1.dll" is present in the "bin" directory in the zip
file I downloaded from tomcat.apache.org

I also confirmed that the SHA512 hashes were the same for both zip files
confirming that nothing changed between the version I built and the file
that is available on the download page.

Where did you get that zip file from?
What is the SHA512 hash of the zip file you downloaded?
Did you download over HTTPS?

Mark

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: [ANN] Apache Tomcat 9.0.34 available

Posted by Mark Thomas <ma...@apache.org>.
On 09/04/2020 17:16, Bill Stewart wrote:
> On Thu, Apr 9, 2020 at 9:08 AM Mark Thomas <ma...@apache.org> wrote:
> 
>> The Apache Tomcat team announces the immediate availability of Apache
>> Tomcat 9.0.34.
> 
> Thank you.
> 
> FYI: The file tcnative-1.dll is missing from the
> 'apache-tomcat-9.0.34-windows-x64.zip' distribution.

That is strange. The release build process is scripted so that sort of
thing shouldn't happen. Let me take a look.

Thanks for the heads up.

Mark

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: [ANN] Apache Tomcat 9.0.34 available

Posted by Bill Stewart <bs...@iname.com>.
On Thu, Apr 9, 2020 at 9:08 AM Mark Thomas <ma...@apache.org> wrote:

> The Apache Tomcat team announces the immediate availability of Apache
> Tomcat 9.0.34.

Thank you.

FYI: The file tcnative-1.dll is missing from the
'apache-tomcat-9.0.34-windows-x64.zip' distribution.

Bill

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org