Changelog for libtcnative-1-0-1.2.39-1.1.x86_64.rpm :

* Tue Feb 13 2024 pmonrealAATTsuse.com- Update to 1.2.39:
* Fix: 67061: If the insecure optionalNoCA certificate verification mode is used, disable OCSP if enabled else client certificates from unknown certificate authorities will be rejected.
* Update: Update the recommended minimum version of OpenSSL to 3.0.11.
* Change the hardcoded libopenssl-1_1-devel to libopenssl-devel for distributions that have the right version
* Tue Nov 14 2023 michele.bussolottoAATTsuse.com- Version update to version 1.2.38:
* Align default pass phrase prompt with HTTPd.
* #66669: Fix memory leak in SNI processing.
* Update the recommended minimum version of OpenSSL to 1.1.1v.
* Update the recommended minimum version of APR to 1.7.4.
* Document the TLS rengotiation behaviour.
* Add HOWTO-RELEASE.txt that describes the release process.
* Refactor library initialization so it is compatible with Tomcat 10.1.x onwards where a number of Java classes have been removed.
* Map the OpenSSL 3.x FIPS behaviour to the OpenSSL 1.x API to allow clients to determine if the FIPS provider is being used when Tomcat Native is compiled against OpenSSL 3.x.
* #66035: Fix crash when attempting to read TLS session ID after a handshake failure.
* Enable download_deps.sh to be called from any directory.
* Fix release script so it works with the current git layout.
* #65441: Correct previous fix that enabled building to continue with OpenSSL 3.x.
* #65659: Remove remaining reference to pkg-config which is no longer included in the Tomcat Native distribution.
* #65181: Additional changes required to provided support for using OpenSSL Engines that use proprietary key formats.
* #65329: Correct handling of WINVER in make file to use correct constant for Windows 7. Add constants for Windows 8, Windows 8.1 and Windows 10. Rename WINNT to WIN2k as it is used for Windows 2000 upwards, not Windows NT upwards.
* Add a patch for APR that fixes an issue where some Windows systems in some configurations would only listen on IPv6 addresses on dual stack systems even though configured to listen on both IPv6 and IPv4 addresses.
* Correct a regression in the fix for 65181 that prevented an error message from being displayed if an invalid key file was provided and no OpenSSL Engine was configured.
* #65181: Improve support for using OpenSSL Engines that use proprietary key formats.
* Enable building to continue against OpenSSL 3.x and 1.1.1.
* Incomplete name mangling fix for C++ compilers in tcn_api.h.
* Improve OS-specific header include for native thread id.
* Disable keylog callback support for LibreSSL.
* Add support for SSLContext.addChainCertificateRaw() with LibreSSL 2.9.1 and up.
* Add support for HP-UX\'s _lwp_self() in our ssl_thread_id(void).
* Remove default option passed for rpath to linker on HP-UX.
* Add an option to allow the OCSP responder check to be bypassed. Note that if OCSP is enabled, a missing responder is now treated as an error.
* #64429: Fix compilation with LibreSSL.
* #63671: libtcnative does not compile with OpenSSL < 1.1.0 and APR w/o threading support.
* Correct configure message for OpenSSL libdir.
* #64260: Clean up install target.
* #64315: configure output for OpenSSL wrong/incomplete sometimes.
* Drop obsolete build time workarounds for HP-UX.
* Add support for FreeBSD\'s pthread_getthreadid_np() in our ssl_thread_id(void).
* #64316: Introduce tcn_get_thread_id(void) to reduce code duplication.
* Fix linking against OpenSSL in non-standard locations on FreeBSD.- Removed patch:
* libtcnative-1-0-bsc1199170.patch + fix integrated
* Fri Jul 29 2022 pgajdosAATTsuse.com- Fix for SG#63251, bsc#1199170 (thanks to ohollmannAATTsuse.com)- added patches fix https://github.com/apache/tomcat-native/commit/5ac1175a0cf24aae2a285b3f3fb877ff83aef0c0 + libtcnative-1-0-bsc1199170.patch
* Thu Nov 07 2019 malbuAATTsuse.com- Add GPG keyring.
* Mon Aug 12 2019 malbuAATTsuse.com- Version update to version 1.2.23:
* See changelog.html for in-depth upstream changes
* Thu Jun 06 2019 malbuAATTsuse.com- Version update to version 1.2.21:
* See changelog.html for in-depth upstream changes
* Fix incompatibility with Tomcat (bsc#1130843)
* Mon Nov 27 2017 fstrbaAATTsuse.com- Version update to version 1.2.16:
* See changelog.html for in-depth upstream changes
* Fixes build breakage with newer version of openssl
* Wed Feb 03 2016 tchvatalAATTsuse.com- Version update to version 1.2.4:
* See changelog.html for in-depth upstream changes
* This connector to properly work requires openssl 1.0.2 or newer so do not backport to other codestreams.
* Wed Feb 25 2015 tchvatalAATTsuse.com- Remove keyring file as there is new keyring and I didn\'t find it on the web
* Thu Feb 19 2015 p.drouandAATTgmail.com- Update to version 1.1.32
* Fix: 53952: Add support for TLSv1.2 and TLSv1.1.
* Fix: 56844: Use OpenSSL 1.0.1j with Windows binaries.
* Update: Use APR 1.5.1 with Windows binaries- Remove tomcat-native-nosslv2.patch; merged on upstream release- Remove %gpg_verify tag and gpg-offline require; let OBS handles gpg verification
* Sun Apr 27 2014 crrodriguezAATTopensuse.org- version 1.1.30
* Fixed double-free in ssl_ocsp_request. Patch provided by Aristotelis.
* Other minor bugfixes.- openSUSE: Fix build when openssl does not have SSLv2 support. (tomcat-native-nosslv2.patch)
* Fri Sep 13 2013 mvyskocilAATTsuse.com- Update to 1.1.27 (bugfix release)
* fix high CUP usage on client\'s IP address change
* add CPU information to OS info for Linux
* fix FIPS mode for listeners; resolves \'Low level API call to digest MD5 forbidden in FIPS mode!\' errors.
* update add clearOptions function to allow access to OpenSSL\'s SSL_CTX_clear_options function.
* fix regression in pollset return value.- add gpg verification- add javapackages-tools- drop config-guess-sub-update.patch
* Sun Mar 31 2013 schwabAATTsuse.de- config-guess-sub-update.patch: update config.guess/sub for aarch64
* Thu Dec 06 2012 kruberAATTzib.de- update to 1.1.24
* add support for per-socket timeouts inside poller
* Thu Mar 15 2012 mvyskocilAATTsuse.cz- update to 1.1.23 - latest upstream version
* autodetect java7
* better support for ipv6
* OCSP verification support
* explicit use in FIPS mode allowed
* and fixes many bugs, leaks and crashes- split the spec from tomcat6 sources as it was never needed
* Thu Aug 05 2010 mvyskocilAATTsuse.cz- fixes bnc#622430 - move .so file to main package
* Tue Mar 16 2010 roAATTsuse.de- build from tomcat-native-1.1.20-src.tar.gz- package needs work, does not have to live in tomcat src any more
* Wed Jun 03 2009 mvyskocilAATTsuse.cz- Tomcat update to 6.0.20- APR update to 1.3.3 - the bugfix release
* Fri Sep 12 2008 mvyskocilAATTsuse.cz- Tomcat update to 6.0.18
* Thu Aug 07 2008 mvyskocilAATTsuse.cz- move the .so file to -devel subpackage to prevent of an rpmlint error
* Wed Jul 09 2008 mvyskocilAATTsuse.cz- The first release in SUSE (1.2.12) - fix of enhancenment request [bnc#202339]