Re: [VOTE] Release Apache Tomcat 11.0.25

On 13/08/2026 01:03, Christopher Schultz wrote:
> Mark,
> 
> On 8/12/26 7:58 PM, Christopher Schultz wrote:
>>     [concat] Testsuites with failed tests:
>>     [concat] TEST-org.apache.tomcat.util.net.TestPQC.NIO.txt
>>     [concat] TEST-org.apache.tomcat.util.net.TestPQC.NIO2.txt
> 
> These failed because my openssl binary path was incorrect. Fixing that 
> has them passing.
> 
>>     [concat] TEST- 
>> org.apache.tomcat.util.net.ocsp.TestOcspSoftFail.NIO2.txt
> 
> 
> Testcase: testNoResponderWithoutSoftFail[JSSE with OpenSSL trust false] 
> took 0.97 sec
>          Caused an ERROR
> Unexpected exception, expected<javax.net.ssl.SSLHandshakeException> but 
> was<java.io.IOException>
> java.lang.Exception: Unexpected exception, 
> expected<javax.net.ssl.SSLHandshakeException> but was<java.io.IOException>
> Caused by: java.io.IOException: Error writing to server
> 
> This looks like a test that needs to be updated, though I'm not sure why 
> it's failing for me and not you.

I've seen intermittent issues like that before. I think it is a timing 
issue with where exactly the client code is when the TLS error / close 
is received.

I'll look into making this more robust.

> I'm also getting some "Connection refused" errors during the test. Maybe 
> timing-related? Or maybe those are expected?

I think those are expected variations of TLS connection issues.

> A second run of this test got it passing.

Almost certainly timing related then.

Mark

> 
> -chris
>> On 8/12/26 10:02 AM, Mark Thomas wrote:
>>> The proposed Apache Tomcat 11.0.25 release is now available for voting.
>>>
>>> The notable changes compared to 11.0.24 include:
>>>
>>> - Add a new attribute to the Context, urlPatternsProvidedInDecodedForm.
>>>    This attribute controls whether URLs and URL patterns provided in the
>>>    deployment descriptor (web.xml), annotations and/or their 
>>> programmatic
>>>    equivalents are treated as being provided in URL-encoded form (i.e.
>>>    using %nn encoding) or in decoded form. The Servlet specification
>>>    requires that they are provided in decoded form. However, Tomcat has
>>>    historically treated them as if they are provided in encoded form. In
>>>    Tomcat 12, they will always be treated as if they are provided in
>>>    decoded form. This setting enables migration from encoded form to
>>>    decoded form on an application by application basis. This attribute
>>>    will be removed in Tomcat 12 where it will effectively be hard-coded
>>>    to true.
>>> - Require every HTTP/2 request to provide an authority (either an
>>>    :authority pseudo header or a Host header)
>>> - Change the default encryptionAlgorithm for the EncryptInterceptor to
>>>    AES/GCM/NoPadding. This is a breaking change for the
>>>    EncryptInterceptor.
>>>
>>> For full details, see the change log:
>>> https://nightlies.apache.org/tomcat/tomcat-11.0.x/docs/changelog.html
>>>
>>> Applications that run on Tomcat 9 and earlier will not run on Tomcat 
>>> 11 without changes. Java EE applications designed for Tomcat 9 and 
>>> earlier may be placed in the $CATALINA_BASE/webapps-javaee directory 
>>> and Tomcat will automatically convert them to Jakarta EE and copy 
>>> them to the webapps directory. Applications using deprecated APIs may 
>>> require further changes.
>>>
>>> It can be obtained from:
>>> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-11/v11.0.25/
>>>
>>> The Maven staging repo is:
>>> https://repository.apache.org/content/repositories/orgapachetomcat-1600
>>> The tag is:
>>> https://github.com/apache/tomcat/tree/11.0.25
>>> cbe6e15ee81e2fc6232954292a80cca5d1e84009
>>>
>>> The proposed 11.0.25 release is:
>>> [ ] -1 Broken - do not release
>>> [ ] +1 Stable - go ahead and release as 11.0.25
>>>
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: [email protected]
>>> For additional commands, e-mail: [email protected]
>>>
>>
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]
>