On 11/12/2015 12:55, Thierry Guérin wrote: > Hi, > > I'm using Tomcat 8 and recently updated to 8.0.30. I saw that Tomcat > Native 1.2.2 has been released and is compatible with Tomcat 8, but it's > not packaged inside Tomcat 8.0.30 (for Windows) by default. Is there a > particular reason for this? Should I stick with the bundled 1.1.33?
Only that there have been a few changes and we want to be sure it it stable before packaging it. > Going with 1.2.2 seems the right choice given that it's built with > OpenSSL 1.0.2d (2015-06-02) which is more recent than OpenSSL > 1.0.1m(2015-03-19), but I may be missing something (I am by no means a > security expert). Tomcat Native 1.2.2 should be fine. 1.1.34 and 1.2.3 are currently in the release process built with the latest 1.0.0 and 1.0.1 OpenSSL releases respectively. The plan is that the next Tomcat 8.0.x release will ship with Tomcat Native 1.2.x HTH, Mark --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org