s3proxy icon indicating copy to clipboard operation
s3proxy copied to clipboard

Jetty 12 upgrade

Open gaul opened this issue 1 year ago • 6 comments

Jetty 11 reached end of community support earlier this year: https://jetty.org/download.html. Unfortunately Jetty 12 requires Java 17 so this may cause some user pain.

gaul avatar Dec 06 '24 04:12 gaul

There also now exists a first minor security issue with Jetty 11 - CVE-2024-6763 Which will not be fixed anymore in Jetty 11.

keos05 avatar Dec 17 '24 15:12 keos05

Bumping this one up, Java 11 and Jetty EOLs will be red flags. I took a crack at using co-pilot and Amazon Q for these PRs but they are beyond my skillset and it didn't go well

ryanfaircloth avatar Jan 23 '25 20:01 ryanfaircloth

First, thanks for the great work. Question: will jetty 12 upgrade happen anytime soon?

CS250073 avatar May 07 '25 14:05 CS250073

Any update on this? Turns out that a fix made in S3Proxy for UTF-8 content type being capitalised by jetty 9.4 onwards no longer works (setting the LEGACY mode) in Jetty 11. 12 has a working fix again. https://github.com/jetty/jetty.project/issues/12750

This Jetty issue (and bug with legacy mode) causes signature mismatches when sometimes uploading a file, as the charset S3Proxy uses is capitalised UTF-8 but the signature was generated with lowercase charset.

re1709 avatar Jul 16 '25 13:07 re1709

Any update on this? Turns out that a fix made in S3Proxy for UTF-8 content type being capitalised by jetty 9.4 onwards no longer works (setting the LEGACY mode) in Jetty 11. 12 has a working fix again. jetty/jetty.project#12750

PRs always welcome but this isn't my highest priority.

This Jetty issue (and bug with legacy mode) causes signature mismatches when sometimes uploading a file, as the charset S3Proxy uses is capitalised UTF-8 but the signature was generated with lowercase charset.

#837 addressed this symptom.

gaul avatar Jul 17 '25 05:07 gaul

Now Checkstyle 11 also requires Java 17 #855.

gaul avatar Sep 08 '25 20:09 gaul