xdocs/miscellaneous/changelog.xml (212 lines of code) (raw):
<?xml version="1.0" encoding="UTF-8"?>
<!--
Licensed to the Apache Software Foundation (ASF) under one or more
contributor license agreements. See the NOTICE file distributed with
this work for additional information regarding copyright ownership.
The ASF licenses this file to You under the Apache License, Version 2.0
(the "License"); you may not use this file except in compliance with
the License. You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
-->
<!DOCTYPE document [
<!ENTITY project SYSTEM "project.xml">
]>
<?xml-stylesheet type="application/xslt+xml" href="../style.xsl"?>
<document url="changelog.html">
&project;
<body>
<section name="Preface">
<p>
This is the Changelog for Apache Tomcat Native 2.0.x. The Tomcat Native 2.0.x
branch started from the 1.2.33 tag.
</p>
</section>
<section name="Changes in 2.0.9">
</section>
<section name="Changes in 2.0.8">
<changelog>
<fix>
Fix a crash on Windows when <code>SSLContext.setCACertificate()</code>
is invoked with a <code>null</code> value for <code>caCertificateFile</code>
and a non-<code>null</code> value for <code>caCertificatePath</code>
until properly addressed with
https://github.com/openssl/openssl/issues/24416. (michaelo)
</fix>
<add>
Use ERR_error_string_n with a definite buffer length as a named constant.
(schultz)
</add>
<add>
Ensure local reference capacity is available when creating new arrays
and Strings. (schultz)
</add>
<update>
Update the recommended minimum version of OpenSSL to 3.0.14. (markt)
</update>
</changelog>
</section>
<section name="Changes in 2.0.7">
<changelog>
<add>
<bug>67538</bug>: Make use of Ant's <code><javaversion /></code>
task to enforce the mininum Java build version. (michaelo)
</add>
<fix>
<bug>67615</bug>: Windows binary for version 2 has incorrect version
suffix compared to the GNU autoconf version. (michaelo)
</fix>
<update>
Align default pass phrase prompt with HTTPd on Windows as well. (michaelo)
</update>
<fix>
<bug>67616</bug>: o.a.tomcat.jni.SSL contains useless check for old
OpenSSL version. (michaelo)
</fix>
<update>
Drop useless <code>compile.optimize</code> option. (michaelo)
</update>
<update>
Align Java source compile configuration with Tomcat. (michaelo)
</update>
<add>
Add Ant version (1.10.2) requirement identical to Tomcat. (michaelo)
</add>
<update>
Remove an unreachable if condition around CRLs in sslcontext.c. (michaelo)
</update>
<fix>
<bug>67818</bug>: When calling <code>SSL.setVerify()</code> or
<code>SSLContext.setVerify()</code>, the default verify paths are no
longer set. Only the explicitly configured trust store, if any, will be
used. (michaelo)
</fix>
<update>
Update the recommended minimum version of OpenSSL to 3.0.13. (markt)
</update>
</changelog>
</section>
<section name="Changes in 2.0.6">
<changelog>
<fix>
<bug>67061</bug>: If the insecure optionalNoCA certificate verification
mode is used, disable OCSP if enabled else client certificates from
unknown certificate authorities will be rejected. (markt)
</fix>
<update>
Update the recommended minimum version of OpenSSL to 3.0.11. (markt)
</update>
</changelog>
</section>
<section name="Changes in 2.0.5">
<changelog>
<update>
<bug>66666</bug>: Remove non-reachable functions from ssl.c. (michaelo)
</update>
<update>
Align default pass phrase prompt with HTTPd. (michaelo)
</update>
<update>
Rename configure.in to modern autotools style configure.ac. (rjung)
</update>
<update>
Fix incomplete updates for autotools generated files during "buildconf" execution. (rjung)
</update>
<update>
Improve quoting in tcnative.m4. (rjung)
</update>
<update>
Update the minimum version of autoconf for releasing to 2.68. (rjung)
</update>
<fix>
<bug>66669</bug>: Fix memory leak in SNI processing. (markt)
</fix>
<update>
Update the recommended minimum version of OpenSSL to 3.0.10. (markt)
</update>
</changelog>
</section>
<section name="Changes in 2.0.4">
<changelog>
<update>
Update the recommended minimum version of APR to 1.7.4. (markt)
</update>
<update>
Update the recommended minimum version of OpenSSL to 3.0.9. (markt)
</update>
</changelog>
</section>
<section name="Changes in 2.0.3">
<changelog>
<update>
Update the recommended minimum version of APR to 1.7.2. (markt)
</update>
<update>
Update the recommended minimum version of OpenSSL to 3.0.8. (markt)
</update>
</changelog>
</section>
<section name="Changes in 2.0.2">
<changelog>
<update>
Update the minimum supported version of LibreSSL to 3.5.2. Based on pull
request <pr>13</pr> provided by orbea. (markt)
</update>
<fix>
Fix build when building with rlibtool. Pull request <pr>14</pr> provided
by orbea. (markt)
</fix>
</changelog>
</section>
<section name="Changes in 2.0.1">
<changelog>
<update>
Update recommended OpenSSL version to 3.0.5 or later. (markt)
</update>
</changelog>
</section>
<section name="Changes in 2.0.0">
<changelog>
<update>
Update the minimum required version of OpenSSL to 3.0.0 and make it a
madatory dependency. (markt)
</update>
<update>
Update the minimum required version of APR to 1.7.0. (markt)
</update>
<design>
Remove NPN support as NPN was never standardised and browser support was
removed in 2019. (markt)
</design>
<add>
Add support for using OpenSSL when the FIPS provider is configured as the
default provider. (markt)
</add>
<design>
Remove all API methods (and supporting code) that are not used by Tomcat
10.1.x to support the use of OpenSSL as a replacement for JSSE to provide
TLS functionality. (markt)
</design>
<docs>
Document the TLS rengotiation behaviour. (markt)
</docs>
<update>
Update the minimum required Java version to Java 11. (markt)
</update>
<update>
Remove support for Windows 2000, Windows XP, Windows Server 2003, Windows
Vista and Windows Server 2008. The minimum Windows version is now Windows
7 / Windows Server 2008 R2. (markt)
</update>
<docs>
Add HOWTO-RELEASE.txt that describes the release process. (markt)
</docs>
<fix>
Fix the autoconf warnings when creating a release. (markt)
</fix>
</changelog>
</section>
<section name="Changes in 1.3.x">
<p>Please see the <a href="../../native-1.3-doc/miscellaneous/changelog.html">1.3.x
changelog</a>.</p>
</section>
<section name="Changes in 1.2.x">
<p>Please see the <a href="../../native-1.2-doc/miscellaneous/changelog.html">1.2.x
changelog</a>.</p>
</section>
<section name="Changes in 1.1.x">
<p>Please see the <a href="../../native-1.1-doc/miscellaneous/changelog.html">1.1.x
changelog</a>.</p>
</section>
</body>
</document>