The Apache Tomcat Native Library 2.0 - Miscellaneous Documentation -

This is the Changelog for Apache Tomcat Native 2.0.x. The Tomcat Native 2.0.x branch started from the 1.2.33 tag.

Fix: Fix a crash on Windows when SSLContext.setCACertificate() is invoked with a null value for caCertificateFile and a non-null value for caCertificatePath until properly addressed with https://github.com/openssl/openssl/issues/24416. (michaelo)
Add: Use ERR_error_string_n with a definite buffer length as a named constant. (schultz)
Add: Ensure local reference capacity is available when creating new arrays and Strings. (schultz)
Update: Update the recommended minimum version of OpenSSL to 3.0.14. (markt)

Add: 67538: Make use of Ant's <javaversion /> task to enforce the mininum Java build version. (michaelo)
Fix: 67615: Windows binary for version 2 has incorrect version suffix compared to the GNU autoconf version. (michaelo)
Update: Align default pass phrase prompt with HTTPd on Windows as well. (michaelo)
Fix: 67616: o.a.tomcat.jni.SSL contains useless check for old OpenSSL version. (michaelo)
Update: Drop useless compile.optimize option. (michaelo)
Update: Align Java source compile configuration with Tomcat. (michaelo)
Add: Add Ant version (1.10.2) requirement identical to Tomcat. (michaelo)
Update: Remove an unreachable if condition around CRLs in sslcontext.c. (michaelo)
Fix: 67818: When calling SSL.setVerify() or SSLContext.setVerify(), the default verify paths are no longer set. Only the explicitly configured trust store, if any, will be used. (michaelo)
Update: Update the recommended minimum version of OpenSSL to 3.0.13. (markt)

Fix: 67061: If the insecure optionalNoCA certificate verification mode is used, disable OCSP if enabled else client certificates from unknown certificate authorities will be rejected. (markt)
Update: Update the recommended minimum version of OpenSSL to 3.0.11. (markt)

Update: 66666: Remove non-reachable functions from ssl.c. (michaelo)
Update: Align default pass phrase prompt with HTTPd. (michaelo)
Update: Rename configure.in to modern autotools style configure.ac. (rjung)
Update: Fix incomplete updates for autotools generated files during "buildconf" execution. (rjung)
Update: Improve quoting in tcnative.m4. (rjung)
Update: Update the minimum version of autoconf for releasing to 2.68. (rjung)
Fix: 66669: Fix memory leak in SNI processing. (markt)
Update: Update the recommended minimum version of OpenSSL to 3.0.10. (markt)

Update: Update the minimum supported version of LibreSSL to 3.5.2. Based on pull request #13 provided by orbea. (markt)
Fix: Fix build when building with rlibtool. Pull request #14 provided by orbea. (markt)

Update: Update the minimum required version of OpenSSL to 3.0.0 and make it a madatory dependency. (markt)
Update: Update the minimum required version of APR to 1.7.0. (markt)
Design: Remove NPN support as NPN was never standardised and browser support was removed in 2019. (markt)
Add: Add support for using OpenSSL when the FIPS provider is configured as the default provider. (markt)
Design: Remove all API methods (and supporting code) that are not used by Tomcat 10.1.x to support the use of OpenSSL as a replacement for JSSE to provide TLS functionality. (markt)
Docs: Document the TLS rengotiation behaviour. (markt)
Update: Update the minimum required Java version to Java 11. (markt)
Update: Remove support for Windows 2000, Windows XP, Windows Server 2003, Windows Vista and Windows Server 2008. The minimum Windows version is now Windows 7 / Windows Server 2008 R2. (markt)
Docs: Add HOWTO-RELEASE.txt that describes the release process. (markt)
Fix: Fix the autoconf warnings when creating a release. (markt)

Please see the 1.3.x changelog.

Please see the 1.2.x changelog.

Please see the 1.1.x changelog.