Re: [VOTE] Release Apache Tomcat 11.0.25

Mark,

On 8/12/26 7:58 PM, Christopher Schultz wrote:
>     [concat] Testsuites with failed tests:
>     [concat] TEST-org.apache.tomcat.util.net.TestPQC.NIO.txt
>     [concat] TEST-org.apache.tomcat.util.net.TestPQC.NIO2.txt

These failed because my openssl binary path was incorrect. Fixing that 
has them passing.

>     [concat] TEST-org.apache.tomcat.util.net.ocsp.TestOcspSoftFail.NIO2.txt


Testcase: testNoResponderWithoutSoftFail[JSSE with OpenSSL trust false] 
took 0.97 sec
         Caused an ERROR
Unexpected exception, expected<javax.net.ssl.SSLHandshakeException> but 
was<java.io.IOException>
java.lang.Exception: Unexpected exception, 
expected<javax.net.ssl.SSLHandshakeException> but was<java.io.IOException>
Caused by: java.io.IOException: Error writing to server

This looks like a test that needs to be updated, though I'm not sure why 
it's failing for me and not you.

I'm also getting some "Connection refused" errors during the test. Maybe 
timing-related? Or maybe those are expected?

A second run of this test got it passing.

-chris
> On 8/12/26 10:02 AM, Mark Thomas wrote:
>> The proposed Apache Tomcat 11.0.25 release is now available for voting.
>>
>> The notable changes compared to 11.0.24 include:
>>
>> - Add a new attribute to the Context, urlPatternsProvidedInDecodedForm.
>>    This attribute controls whether URLs and URL patterns provided in the
>>    deployment descriptor (web.xml), annotations and/or their programmatic
>>    equivalents are treated as being provided in URL-encoded form (i.e.
>>    using %nn encoding) or in decoded form. The Servlet specification
>>    requires that they are provided in decoded form. However, Tomcat has
>>    historically treated them as if they are provided in encoded form. In
>>    Tomcat 12, they will always be treated as if they are provided in
>>    decoded form. This setting enables migration from encoded form to
>>    decoded form on an application by application basis. This attribute
>>    will be removed in Tomcat 12 where it will effectively be hard-coded
>>    to true.
>> - Require every HTTP/2 request to provide an authority (either an
>>    :authority pseudo header or a Host header)
>> - Change the default encryptionAlgorithm for the EncryptInterceptor to
>>    AES/GCM/NoPadding. This is a breaking change for the
>>    EncryptInterceptor.
>>
>> For full details, see the change log:
>> https://nightlies.apache.org/tomcat/tomcat-11.0.x/docs/changelog.html
>>
>> Applications that run on Tomcat 9 and earlier will not run on Tomcat 
>> 11 without changes. Java EE applications designed for Tomcat 9 and 
>> earlier may be placed in the $CATALINA_BASE/webapps-javaee directory 
>> and Tomcat will automatically convert them to Jakarta EE and copy them 
>> to the webapps directory. Applications using deprecated APIs may 
>> require further changes.
>>
>> It can be obtained from:
>> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-11/v11.0.25/
>>
>> The Maven staging repo is:
>> https://repository.apache.org/content/repositories/orgapachetomcat-1600
>> The tag is:
>> https://github.com/apache/tomcat/tree/11.0.25
>> cbe6e15ee81e2fc6232954292a80cca5d1e84009
>>
>> The proposed 11.0.25 release is:
>> [ ] -1 Broken - do not release
>> [ ] +1 Stable - go ahead and release as 11.0.25
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: [email protected]
>> For additional commands, e-mail: [email protected]
>>
>