libtcnative-1-0-1.3.7-150600.16.3.1 < > , h i*Rp9|G : ~vLrne*/4ZB~9V|qRY 5ꮝZ?Zv6nSief i dϗr5#x%eDv/#n})dz.ZhUi^zaܴ)QJ2_\i Qۀ*zUږ7C6#H q{sj0 m<Z{a U"=\˾,ywT~ /4G/K > @ 2 ? 2 d & [ \ ` l p # ) 4 L X
d | B
t l } ( 8 9 : > .x @ . F . G . H . I . X . Y . \ /4 ] /L ^ / b / c 0 d 11 e 16 f 19 l 1; u 1P v 1h w 2 x 28 y 2P z 2 2 2 2 2 C libtcnative-1-0 1.3.7 150600.16.3.1 Tomcat resources for performance, compatibility, etc The Apache Tomcat Native Library is an optional component for use
with Apache Tomcat that allows Tomcat to use certain native
resources for performance, compatibility, etc.
Specifically, the Apache Tomcat Native Library gives Tomcat access
to the Apache Portable Runtime (APR) library's network connection
(socket) implementation and random-number generator. See the Apache
Tomcat documentation for more information on how to configure Tomcat
to use the APR connector.
Features of the APR connector:
* Non-blocking I/O for Keep-Alive requests (between requests)
* Uses OpenSSL for TLS/SSL capabilities (if supported by linked APR
library)
* FIPS 140-2 support for TLS/SSL (if supported by linked OpenSSL
library)
* Support for IPv4, IPv6 and Unix Domain Sockets i*Rh02-armsrv3 * SUSE Linux Enterprise 15 SUSE LLC Apache-2.0 https://www.suse.com/ Productivity/Networking/Web/Servers https://tomcat.apache.org/native-1.2-doc/index.html linux aarch64 X
A큤 i*Ri*Ri*Ri*Ri
9i
325e1eb4a33cbb02c2ea260bfc6890f262c2e37cb5f36ece77be73bd65d98760 066cd7a32d5edc573ae1c30da27467e842905940cf90e9a959b6c9041026bed1 97509be55905e5bdecc8329353731ac52d8ca179cf3bf130ae75828e9cabd06f libtcnative-1.so.0.3.7 libtcnative-1.so.0.3.7 root root root root root root root root root root root root libtcnative-1-0-1.3.7-150600.16.3.1.src.rpm libtcnative-1-0 libtcnative-1-0(aarch-64) libtcnative-1.so.0()(64bit) tcnative tomcat-native @ @ @ @ @ @ @ @ @ @ @
/sbin/ldconfig /sbin/ldconfig ld-linux-aarch64.so.1()(64bit) ld-linux-aarch64.so.1(GLIBC_2.17)(64bit) libapr-1.so.0()(64bit) libc.so.6()(64bit) libc.so.6(GLIBC_2.17)(64bit) libc.so.6(GLIBC_2.38)(64bit) libcrypto.so.1.1()(64bit) libcrypto.so.1.1(OPENSSL_1_1_0)(64bit) libssl.so.1.1()(64bit) libssl.so.1.1(OPENSSL_1_1_0)(64bit) libssl.so.1.1(OPENSSL_1_1_1)(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 i@fA@eYeSa@b]@]QT\ @Z@VT@T@pgajdos@suse.com fstrba@suse.com pmonreal@suse.com michele.bussolotto@suse.com pgajdos@suse.com malbu@suse.com malbu@suse.com malbu@suse.com fstrba@suse.com tchvatal@suse.com tchvatal@suse.com p.drouand@gmail.com - Update to 1.3.7: [bsc#1260322]
1.3.7
* Code: Refactor access to ASN1_OCTET_STRING to use setters to fix
errors when building against the latest OpenSSL 4.0.x code. (markt)
* Fix: Fix the handling of OCSP requests with multiple responder URIs.
(jfclere)
* Fix: Fix the handling of TRY_AGAIN responses to OCSP requests when
soft fail is disabled. (jfclere)
1.3.6
* Code: Refactor the SSL_CONF_CTX clean-up to align it with SSL and
SSL_CTX clean-up. (markt)
* Fix: Fix unnecessarily large buffer allocation when filtering out NULL
and export ciphers. Pull requests #35 and #37 provided by chenjp.
(markt)
* Fix: Fix a potential memory leak if an invalid OpenSSLConf is
provided. Pull request #36 provided by chenjp. (markt)
* Fix: Refactor setting of OCSP configuration defaults as they were only
applied if the SSL_CONF_CTX was used. While one was always used with
Tomcat versions aware of the OCSP configuration options, one was not
always used with Tomcat versions unaware of the OCSP configuration
options leading to OCSP verification being enabled by default when the
expected behaviour was disabled by default. (markt)
* Code: Improve performance for the rare case of handling large OCSP
responses. (markt)
1.3.5
* Fix: Remove group write permissions from the files in the tar.gz
source archive. (markt)
* Fix: Clear an additional error in OCSP processing that was preventing
OCSP soft fail working with Tomcat's APR/native connector. (markt)
1.3.4
* Fix: Correct logic error that prevented the configuration of TLS 1.3
cipher suites. (markt)
1.3.3
* Fix: Refactor the addition of TLS 1.3 cipher suite configuration to
avoid a regression when running a version of Tomcat that pre-dates
this change. (markt)
1.3.2
* Update: Rename configure.in to modern autotools style configure.ac.
(rjung)
* Update: Fix incomplete updates for autotools generated files during
"buildconf" execution. (rjung)
* Update: Improve quoting in tcnative.m4. (rjung)
* Update: Update the minimum version of autoconf for releasing to 2.68.
(rjung)
* Fix: Fix the autoconf warnings when creating a release. (markt)
* Update: The Windows binaries are now built with OCSP support enabled
by default. (markt)
* Add: Include a nonce with OCSP requests and check the nonce, if any,
in the OCSP response. (markt)
* Add: Expand verification of OCSP responses. (markt)
* Add: Add the ability to configure the OCSP checks to soft-fail - i.e.
if the responder cannot be contacted or fails to respond in a timely
manner the OCSP check will not fail. (markt)
* Add: Add a configurable timeout to the writing of OCSP requests and
reading of OCSP responses. (markt)
* Add: Add the ability to control the OCSP verification flags. (markt)
* Add: Configure TLS 1.3 connections from the provided ciphers list as
well as connections using TLS 1.2 and earlier. Pull request provided
by gastush. (markt)
* Update: Update the Windows build environment to use Visual Studio
2022. (markt)
1.3.1
* Fix: Fix a crash on Windows when SSLContext.setCACertificate() is
invoked with a null value for caCertificateFile and a non-null value
for caCertificatePath until properly addressed with
https://github.com/openssl/openssl/issues/24416. (michaelo)
* Add: Use ERR_error_string_n with a definite buffer length as a named
constant. (schultz)
* Add: Ensure local reference capacity is available when creating new
arrays and Strings. (schultz)
* Update: Update the recommended minimum version of OpenSSL to 3.0.14.
(markt)
1.3.0
* Update: Drop useless compile.optimize option. (michaelo)
* Update: Align Java source compile configuration with Tomcat.
(michaelo)
* Fix: Fix version set in DLL header on Windows. (michaelo)
* Update: Remove an unreachable if condition around CRLs in
sslcontext.c. (michaelo)
* Fix: 67818: When calling SSL.setVerify() or SSLContext.setVerify(),
the default verify paths are no longer set. Only the explicitly
configured trust store, if any, will be used. (michaelo)
* Update: Update the minimum supported version of LibreSSL to 3.5.2.
(markt)
* Design: Remove NPN support as NPN was never standardised and browser
support was removed in 2019. (markt)
* Update: Update the recommended minimum version of OpenSSL to 3.0.13.
(markt) - Fix build after removal of the default %%{java_home} define - Update to 1.2.39:
* Fix: 67061: If the insecure optionalNoCA certificate verification
mode is used, disable OCSP if enabled else client certificates
from unknown certificate authorities will be rejected.
* Update: Update the recommended minimum version of OpenSSL to
3.0.11.
* Change the hardcoded libopenssl-1_1-devel to libopenssl-devel
for distributions that have the right version - Version update to version 1.2.38:
* Align default pass phrase prompt with HTTPd.
* #66669: Fix memory leak in SNI processing.
* Update the recommended minimum version of OpenSSL to 1.1.1v.
* Update the recommended minimum version of APR to 1.7.4.
* Document the TLS rengotiation behaviour.
* Add HOWTO-RELEASE.txt that describes the release process.
* Refactor library initialization so it is compatible with Tomcat
10.1.x onwards where a number of Java classes have been removed.
* Map the OpenSSL 3.x FIPS behaviour to the OpenSSL 1.x API to
allow clients to determine if the FIPS provider is being used
when Tomcat Native is compiled against OpenSSL 3.x.
* #66035: Fix crash when attempting to read TLS session ID after
a handshake failure.
* Enable download_deps.sh to be called from any directory.
* Fix release script so it works with the current git layout.
* #65441: Correct previous fix that enabled building to continue
with OpenSSL 3.x.
* #65659: Remove remaining reference to pkg-config which is no
longer included in the Tomcat Native distribution.
* #65181: Additional changes required to provided support for
using OpenSSL Engines that use proprietary key formats.
* #65329: Correct handling of WINVER in make file to use correct
constant for Windows 7. Add constants for Windows 8, Windows 8.1
and Windows 10. Rename WINNT to WIN2k as it is used for Windows
2000 upwards, not Windows NT upwards.
* Add a patch for APR that fixes an issue where some Windows
systems in some configurations would only listen on IPv6
addresses on dual stack systems even though configured to listen
on both IPv6 and IPv4 addresses.
* Correct a regression in the fix for 65181 that prevented an
error message from being displayed if an invalid key file was
provided and no OpenSSL Engine was configured.
* #65181: Improve support for using OpenSSL Engines that use
proprietary key formats.
* Enable building to continue against OpenSSL 3.x and 1.1.1.
* Incomplete name mangling fix for C++ compilers in tcn_api.h.
* Improve OS-specific header include for native thread id.
* Disable keylog callback support for LibreSSL.
* Add support for SSLContext.addChainCertificateRaw() with
LibreSSL 2.9.1 and up.
* Add support for HP-UX's _lwp_self() in our ssl_thread_id(void).
* Remove default option passed for rpath to linker on HP-UX.
* Add an option to allow the OCSP responder check to be bypassed.
Note that if OCSP is enabled, a missing responder is now treated
as an error.
* #64429: Fix compilation with LibreSSL.
* #63671: libtcnative does not compile with OpenSSL < 1.1.0 and
APR w/o threading support.
* Correct configure message for OpenSSL libdir.
* #64260: Clean up install target.
* #64315: configure output for OpenSSL wrong/incomplete sometimes.
* Drop obsolete build time workarounds for HP-UX.
* Add support for FreeBSD's pthread_getthreadid_np() in our
ssl_thread_id(void).
* #64316: Introduce tcn_get_thread_id(void) to reduce code
duplication.
* Fix linking against OpenSSL in non-standard locations on FreeBSD.
- Removed patch:
* libtcnative-1-0-bsc1199170.patch
+ fix integrated - Fix for SG#63251, bsc#1199170 (thanks to ohollmann@suse.com)
- added patches
fix https://github.com/apache/tomcat-native/commit/5ac1175a0cf24aae2a285b3f3fb877ff83aef0c0
+ libtcnative-1-0-bsc1199170.patch - Add GPG keyring. - Version update to version 1.2.23:
* See changelog.html for in-depth upstream changes - Version update to version 1.2.21:
* See changelog.html for in-depth upstream changes
* Fix incompatibility with Tomcat (bsc#1130843) - Version update to version 1.2.16:
* See changelog.html for in-depth upstream changes
* Fixes build breakage with newer version of openssl - Version update to version 1.2.4:
* See changelog.html for in-depth upstream changes
* This connector to properly work requires openssl 1.0.2 or newer
so do not backport to other codestreams. - Remove keyring file as there is new keyring and I didn't find it
on the web - Update to version 1.1.32
* Fix: 53952: Add support for TLSv1.2 and TLSv1.1.
* Fix: 56844: Use OpenSSL 1.0.1j with Windows binaries.
* Update: Use APR 1.5.1 with Windows binaries
- Remove tomcat-native-nosslv2.patch; merged on upstream release
- Remove %gpg_verify tag and gpg-offline require; let OBS handles
gpg verification /sbin/ldconfig /sbin/ldconfig h02-armsrv3 1775118930 1.3.7-150600.16.3.1 1.3.7-150600.16.3.1 1.3.7 1.3.7 libtcnative-1.so libtcnative-1.so.0 libtcnative-1.so.0.3.7 libtcnative-1-0 CHANGELOG.txt README.txt /usr/lib64/ /usr/share/doc/packages/ /usr/share/doc/packages/libtcnative-1-0/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:43497/SUSE_SLE-15-SP6_Update/78d1db374aa497a48014ea827cce0962-libtcnative-1-0.SUSE_SLE-15-SP6_Update drpm xz 5 aarch64-suse-linux ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=cd9073fd402108018315599e37c4400ccb2c5e26, stripped directory ISO-8859 text ASCII text P R R R R R R R
R R R R a0v%K utf-8 50b45e00c3bf8e758069782591792705955a911690dfbeaacd94a2075ce192a0 ? 7zXZ
! t/S1\] "k%+ƒ+9pR{ǥN
z
NsB͛bADx7ѢȨ<e$m,h pGX
JS] ;solLͺQImp˕LۥTi.|C!9AYsL߆نKe߸[f$H-2
}M@ j^Γ8^o+M ao51
@,z>Lv_q*Wt2+ ]ԸQ3˫`>-hHnML~ o%p /HŚ Ng0o=j; ;VÎuw nVY1@?\Jbb:P/)CT=؋?DE+)N784=7L]U"bH! |D'7i`m,f_Bu(8KadVItF;1Ν(#.w(nExW:U$icdx :!}L'PGTپ;Qn-ϔ^TdoU ұޮCzy s9 CEߴ*\Jn:%$BQ5q,y&~!z?~O a <ŹMWO\ 99z@ 劑
3@/Zpي`P-YI .ToK,pAӪJ6G\3c{j d*#ng>W&L7
uWWk>|8 YNL,Uo2ʃĖ
&c7 nD'XAB1s2#H<]$CHFys؞ Kq pIbsղs n mSQ>7dպ{\tB_Ak' j;VoV H]ȓ-8)
V/T#f^L ~ tP:d* gאJfZl))U زvM>vm
'.^
lc0Y{]*-m'[҈ЕmcsߦgyBPI!%=5
.R%<jwLa
t6 )b&X!O£
Ê"N4f}4Kzuۯ9FxҊT qָ KM7|jIqwi:ʽz0FH5h`w9 Aݑ唋P
K g-H2*O&nXWd ɇ;g;<˨.L
֦y"F% Hך%p!dF p}/? V*. ÖiWM?^D!b8P T}ifW@zl'jPk4 jgn{'38el| Bf(i
_Մ%O1Rޔ! {-iKAqwqIj3#dT*ft!p vL3Uũ+_[0֤t@\qi@o#C1zY`mdaĬgLbh_Ǩr_\$ a1(;t#O!#ýْ
Kd(Roc&/x
rZ#pYT=\Q`A u63f_ _fѧ>l/g"0JE|V4~MKཇ-VNRHhOOoM
6w;1Npp^cm64AG}cW%eKM~&ѩh Cp(Z.
@^sټP\I^Åq K V+9s
DOw6ݦ gv?
ktP %B9/I2)c.3$ӞS1Z/%HAˣ,SoW`8]p=nncD&_
iw{g
3< D)|B7*=&~~_gWK !kT~@18@K@6]>]!Y0y9@1rm5xI7b J}~fֈj)*E'U[{^xV2Ofx7+
P9x>OXq(.^#Hfhm>j omoܴw=EFOR@U:8eM |ߋiHgwtTFʅ /n U'PLJGA`zc$+%_4:'I>hhm*Լ%a~07RJv6n6eP$KٯvojcE1X`De OFՈ*W_J~0 QP * IR5 vDO-J
-3XԳo%2a\^5, u8N{߫ jsB)lS~i7H {M/
5 "zOa#L*7!WCXE{Ѹ"Q4Վ'%;op qH^3{b=2nB+iYHj냯'1QWCGyPy6|U/Rno{[UFQp. {h f\'m>>\ WnO.uQ芅 hc j]w\(ymr
Ƞw1EcN>ў¨ ˾eX͔ExtzAdGVOF`
Uv0 9a n6@ŷrx88yֈVj= Tۺ{T4dt's&2j8;|y>'dyDgN;ٝǹ;/ ,-pU>]f=k5љkw~|1H2%;9 P7vT X Ԗڃյ 7Awl+ci[_Pvr8}[7*vAgrMN8M&J Ks/&[;k3k_Ryj"^ %bG!]x~:ipAYeďp<&BSkRf
7 iN %3D"G3L= |XLsOn\ݠNH!I*Ji/S
sX Wohati^l7?a|&d:~zhWF 0,.IE vEWyyÌ+16 RiZ YXS۸u^t6W 9hjGn`=X"TyٍINIZ-ѫ@]}gKaO]/Фm` Q5H!3Ya3J
X[۫ Tv(3^;9/G 'z2tSXQ|}1Rt
ࣱ)%7~uٕu8`5o]MBX2a
"HJʦake@5 #" ԿVgGS]q'}`5 Y/GwzIU Q)kwK `^b֔dxxdG uJ,
{##CD@{/o QA ݈TZ QApLFڳO y3EwV2@;jƹiǯB -J@19zfV>kEeA]ߞ!4>{vr5~ja~!ٝ_ɝ~ݙa&KOJ`G>VPL|͌OIm
#m /ʡm2-4 K4[@rZ 4Zw'tvCՑ\
~ g 3[3 fIB ʱG$?_`'m45PzpVNq
B}I`̡0}ەfMѬ[fӾJj89Gg#v V}I~}o-MV&
3 bs5dI \*VMXVG+S.j^tʯwݻzBOв# )[ƝVJqcY5M*>am WMҀZeЈeJF! OIEH[x Q!r:)C&h' i>OYnP9
| 7媰
#o 5͈м6nQ.]3/|sk@*ƲrLn 2 IfD.ھTø9
5y9N]Ѓ&.&XL4"5#L%$
X hI)Q,jo_ad2xܫޟ0b eTZWJ6@dTkOO ?$џB
Ӯ?rVpI$Vo}C4 "\aϻcgi}DNj:yxS×8Ֆt| '$2(])`ȯߙ dn9""
(2\iRePv牋8HΚTuE0g JOWEByxE+;dP=I 9\A4Rh5h"hY
"A*\jgD61vVbPAwmneUc WH@Ջk /J% /,AdR#n@ 'Y4 ׳?m; ICYfcr;7OjwX[L,r24
[)5Oʌ;m g`DK%e[.J!6:RhDy% rpD
=`uOoHٻl"8GqqP8ʂa |?!)j}ax`T R;~\<}4nMy5 '}Jeca^ *{
WJIbdDJ-PR9H'U%Vҭz n#3 LLp_We2݀f
l'fPnnҌ)um'om
:RW ȗ c\ cS S % HR ūIWQ^AwF
1wR5 bL'b_M ]Qw_̮MfF<3*m+6xdP\vAگkg\cMLk$* O|Ě&k̓[r\ZY`ͺ S11M憋ǥm(*$!a⧕ڒ+/];ke dIG2 4_֬) <]E|Wl[+U_R@]f%˶N2PoUlH^ظЯD:7.+ ~pmCNCXNJnw! ~M_ sRd,&(b7=_3Ս~? ]jb\q%\ '7B0\f `c^WdlCs3VM11u]J1714_.ö ~^`JɒHt~ƹQ'Moؔq syK%BP<~Jd~گɊs$;{!&]ǡ4Og/d N0h,?D BD@|;߄@"0&3H\;T)uOVXۘz3 Ͻwc-<.\T9V uӰaB7g]>}.n]owkb =&rcosG2U -cSB;2 OHacs/YHE?3iׁ ~: ~|!
4M*&kL:h Bj=x¥xq
#+tI|^9jؙ92_ 6UB?R?p!$IWXQaJ
B0&1a:̌vU
s }}MKY!"+vKTЈl.i2Os"Iŏ @`Bgij5(ί =g%Tpowj=5`D6D[g '9ցwS.8۽/BQי%:}bo^Yh3}P&u fv 8f4ĸPW,T6HYݸĬ|}Ie~eK}@7: {z ,? #jEdW519b@HK&);*o?V}> D)LTQ *Ф|LF[7ʎ
S.St#\r 쏀h/Hv![ּ_ Ym9ra]]W']뎼Rs Q \2 @: dh@ӳ SfgAdJ)%G}D*[κ#$w0^a
UC& ʤ34.
{)Y)sȬeT_S L)^A:8X I3Ir@),;@7jT@I\y)T3$0ipa m'MwE1oЛ.z<8!S=TKc>AIPqR10W_0`jG+ 2 QkhPΏR+x8ERQ{"* '?VvaH(V1YyrRE}>>~ ʏ S{xN
d&|)h{ 䀬!P^߂@9[ ME'9Ufr1R]M01kl?4bPO2;z6,jO9mp GA
g ^Wm?4+d~fQcgcj%3 y{ B*lQ НַiЙhKd y7w;$yA1UgoTez]w٭በU6E7
#ơQv@/y&s $r&f
9E\̃)IVO:[najǛfmjObYU{ 3oLr~[ &SAާ p7 ٜΨ͍ص9ST 6ǂ]ŧ"\Q I$Hz0VcW,F%-qSي9"#t@)vY 038!z9#rvSbtFy7 6v`g :AS2e/xV`-jrOaԉVDrԐEVɯQ H.sg@>lN!HM 3g9--|s>%WF~GRk<%T-**5?ik2ocjћQtf nlBN|$oy =X*K3 ~´H ' `8pߦ+:t tӆP'^I\{٭zFv/yVz;mjԋ ]
it
IZh4{v)p`
EV 65
g1 Oq ORb*ն%{2M2afwE v65E;y=EhEr6YQ(㺑U8bKhT
"RJNpMZ\m H9V )epv Pq&eyc*
#
".O87lXjDdr.z|mi-_#WL"d)(A Ŝ kq;G
W3;EXц: P|Fxv2ykY!g]q ~J ٠?tIdLSZg&5$VHf+6QP qϞe]|Qe!,䂊q%)rJrEr[]HQo0{(' |
!M$!L2N$YSM+/B%.[{nr4L/@ǔ (©KfaNa \)lR (eZ\q~/g7-M
>= J"}3{ʣ.>CԆ Ԩ`Jl| â,`UW`dEi_
% L1.ʡT[ L0]FM ϣț&Uj63P(ۚ&`3>U8$ >D>z'^9E[QZ^=ӁB . 䴐py$$>&ݑ(C+ηDa0&#nQcK-$\,KR'[/;X)'\Eݫ!F sH{M.m*ov) ݢ.'.O @恔s0**R@P,1t cjie6
ќ"+weLA
]vV 2EIIN
Vt
FyH'('wP~BzW͍]jˍ"]G4Mz1T]-Ef
E_pn1?#ѓޔ%x=ȇCΓ5}n䭽yֺfF
GP`s/C(QS =l ؓE(_
*pgVKEWI; R ,ۍ y}AxQ %㒋ḧ́~q[·e|g[|!w=Jk~A/ꬽHJ!];k(;'s _. %qDϴvѮl~g.Pb"Ev6,S pG`C〈~)[.?Z `m1
]mD6_.-4-1G̳&&DeFtigUyX=H@Έ]sYȴQ 26-ݯ Ռls"ϝϋ<\n'Q]kւ=o *)ΚWĵ̏mc4]` c ra:
YZ