You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by Thierry Guérin <t_...@hotmail.com> on 2015/12/11 13:55:48 UTC

Tomcat Native 1.2.2 & Tomcat 8

Hi,

I'm using Tomcat 8 and recently updated to 8.0.30. I saw that Tomcat 
Native 1.2.2 has been released and is compatible with Tomcat 8, but it's 
not packaged inside Tomcat 8.0.30 (for Windows) by default. Is there a 
particular reason for this? Should I stick with the bundled 1.1.33?
Going with 1.2.2 seems the right choice given that it's built with 
OpenSSL 1.0.2d (2015-06-02) which is more recent than OpenSSL 
1.0.1m(2015-03-19), but I may be missing something (I am by no means a 
security expert).

Thanks,

Thiery

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: Tomcat Native 1.2.2 & Tomcat 8

Posted by Thierry Guérin <t_...@hotmail.com>.
Thanks for all the information & clarification, that's exactly what I 
needed.

Cheers,

Thierry

On 11/12/2015 16:42, Mark Thomas wrote:
> On 11/12/2015 12:55, Thierry Guérin wrote:
>> Hi,
>>
>> I'm using Tomcat 8 and recently updated to 8.0.30. I saw that Tomcat
>> Native 1.2.2 has been released and is compatible with Tomcat 8, but it's
>> not packaged inside Tomcat 8.0.30 (for Windows) by default. Is there a
>> particular reason for this? Should I stick with the bundled 1.1.33?
> Only that there have been a few changes and we want to be sure it it
> stable before packaging it.
>
>> Going with 1.2.2 seems the right choice given that it's built with
>> OpenSSL 1.0.2d (2015-06-02) which is more recent than OpenSSL
>> 1.0.1m(2015-03-19), but I may be missing something (I am by no means a
>> security expert).
> Tomcat Native 1.2.2 should be fine. 1.1.34 and 1.2.3 are currently in
> the release process built with the latest 1.0.0 and 1.0.1 OpenSSL
> releases respectively.
>
> The plan is that the next Tomcat 8.0.x release will ship with Tomcat
> Native 1.2.x
>
> HTH,
>
> Mark
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: Tomcat Native 1.2.2 & Tomcat 8

Posted by Mark Thomas <ma...@apache.org>.
On 11/12/2015 12:55, Thierry Guérin wrote:
> Hi,
> 
> I'm using Tomcat 8 and recently updated to 8.0.30. I saw that Tomcat
> Native 1.2.2 has been released and is compatible with Tomcat 8, but it's
> not packaged inside Tomcat 8.0.30 (for Windows) by default. Is there a
> particular reason for this? Should I stick with the bundled 1.1.33?

Only that there have been a few changes and we want to be sure it it
stable before packaging it.

> Going with 1.2.2 seems the right choice given that it's built with
> OpenSSL 1.0.2d (2015-06-02) which is more recent than OpenSSL
> 1.0.1m(2015-03-19), but I may be missing something (I am by no means a
> security expert).

Tomcat Native 1.2.2 should be fine. 1.1.34 and 1.2.3 are currently in
the release process built with the latest 1.0.0 and 1.0.1 OpenSSL
releases respectively.

The plan is that the next Tomcat 8.0.x release will ship with Tomcat
Native 1.2.x

HTH,

Mark


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org