Tag for release: jetty-9.4.8-SNAPSHOT

 + 212 HttpClient should support pluggable AuthenticationStore
 + 215 Add Conscrypt for native ALPN/TLS/SSL
 + 272 WebSocket hangs in blockingWrite
 + 487 JDK 9 build compatibility
 + 901 Overriding SSL context KeyStoreType requires explicit override of
   TrustStoreType
 + 922 Implements methods Connection.getBytes[In|Out]()
 + 1209 IllegalStateException when HTTP/2 push is disabled
 + 1213 Upgrade to ASM Version 6.0 for JDK9
 + 1509 Improve GZIPContentDecoder buffer pooling sizing
 + 1550 Resolve inconsistent Shutdown configuration with Jetty Runner
 + 1640 Introduce :run-distro goal for local jetty distribution deployment
 + 1692 Annotation scanning should ignore `module-info.class` files
 + 1696 Missing stacktraces on debug of WriteFlusher onFail
 + 1705 Rejected executions in QueuedThreadPool can lead to memory leaks
 + 1760 Update to apache jasper 8.5.20
 + 1768 Allow jetty properties to be set for the jetty:run-forked goal
 + 1782 Using assembly.tarLongFileMode=posix for jetty-home and
   jetty-distribution assembly
 + 1797 JEP 238 - Multi-Release JAR files break bytecode scanning
 + 1806 Improved ReservedThreads idle timeout
 + 1807 Add new HttpChannel listener and events for metrics libraries
 + 1814 Move JavaVersion to jetty-util for future Java 9 support requirements
 + 1818 Improve Infinispan support on JDK 9
 + 1819 Race condition during annotation parsing
 + 1823 ResourceHandler with ranged requests does not return Content-Type
   response header
 + 1829 OSGi webbundle classes scanned twice
 + 1833 Request.startAsync requires context path
 + 1835 Locker is not reentrant on ServerConnector#setConnectionFactories
 + 1836 Migrate Locker implementation to JVM ReentrantLock implementation
 + 1841 Reduce contention on ServletHolder
 + 1845 Allow null User-Agent in HttpClient
 + 1849 Refactoring of SelectorManager.defaultSchedulers()
 + 1851 Improve insufficient thread warnings/errors
 + 1854 Consistent IOException and timeout handling when extracting form
   parameters
 + 1856 ResourceHandler without ServletContext throws NPE for welcome files if
   used directly
 + 1857 GZIPContentTransformer fails to send entire message if used with
   BufferedContentTransformer
 + 1865 Improve Exception on invalid redirect usage
 + 1867 Improve Exception thrown during Expect 100 Continue
 + 1868 Need a way to randomly select ports for tests
 + 1871 JMXify SslContextFactory
 + 1878 Handle 100 Continue response without Expect header
 + 1879 'Bad tld url' seen during :jetty-run when running integration tests
 + 1881 Improve support of WebSocket over Unix Domain Socket
 + 1885 SessionHandler get/set maxInactiveInterval is not symmetric with
   negative values
 + 1888 Implement cookie matching on Path attribute per RFC 6265
 + 1891 Make HTTP/2 async error notifications configurable
 + 1892 NPE resulting from bad JEP 238 MultiReleaseJarFile structure
 + 1893 Add ability to set HttpClient Connection TTL
 + 1897 Introduce a round-robin connection pool for HttpClient
 + 1900 Update to CDI 2.0 for cdi module
 + 1901 Reimplement PathWatcher as scanner
 + 1909 Update to Apache Jasper 8.5.23
 + 1910 Remove unused jetty-jsp module
 + 1912 AbstractConnector EndPoint leak for failed SSL connections
 + 1914 HttpClient fails to parse Content-Type response header with RFC 2045
   charset="utf-8" syntax
 + 1919 Review LowResourceMonitor
 + 1920 Connect Timeouts with NonBlocking CreateEndPoint
 + 1924 ManagedSelector can livelock under high load
 + 1931 Expose RolloverOutputStream for pluggable behaviour
 + 1933 Use CLASSPATH for scanning java9 system classes
 + 1956 Store and report build information of Jetty
 + 1958 Blocking Timeout has different behavior in HttpInput vs HttpOutput
 + 1970 ManagedSelector can lose selector thread under high concurrent load
 + 1980 PushCacheFilter does not push TLS offloaded HTTP/2 requests
 + 1981 Loading resource content failed
 + 1984 Remove jetty-client dependency in jetty-rewrite

Updating to version 9.3.22.v20171030

jetty-9.3.21.v20170918 - 18 September 2017

 + 487 JDK 9 build compatibility
 + 1116 Support empty HTTP header values
 + 1357 RolloverFileOutputStream: No rollout performed at midnight
 + 1469 RolloverFileOutputStream: IllegalStateException Task already scheduled
 + 1507 RolloverFileOutputStream: Negative delay Timer.schedule exception
 + 1513 RolloverFileOutputStream: can't handle multiple instances
 + 1515 Improved RollOverFileOutputStream removeOldFiles() behavior
 + 1556 Remove a timing channel in Password matching
 + 1590 Improve RolloverFileOutputStream functionality with multiple TimeZones
 + 1655 Improve extensibility of ServerConnector
 + 1661 AbstractProxyServlet onProxyResponseFailure Error
 + 1664 IPAccessHandler CIDR IP range check is incorrect
 + 1685 Update ALPN support for Java 8u141
 + 1687 HTTP2: Correcting missing callback notification when channel not found
 + 1702 Update ALPN support for Java 8u144
 + 1703 Improve HttpInput failure logging
 + 1719 HTTP/2: Improve handling of queued requests
 + 1741 Java 9 javadoc failure in build
 + 1749 Dump HttpDestination exchange queue
 + 1750 PoolingHttpDestination creates ConnectionPool twice
 + 1759 HTTP/2: producer can block in onReset
 + 1790 HTTP/2: 100% CPU usage seen during close/shutdown of endpoint
 + 475546 ClosedChannelException when connection to HTTPS over HTTP proxy
   with CONNECT

jetty-9.4.7.v20170914 - 14 September 2017

 + 215 Consider native ALPN/SSL provider
 + 487 JDK 9 build compatibility
 + 1116 Support empty HTTP header values
 + 1200 Use PathWatcher in DeploymentManager
 + 1357 RolloverFileOutputStream: No rollout performed at midnight
 + 1416 GzipHandler generated ETag suffix has problems with If-Match header
   logic
 + 1468 Configure PKIX Revocation Checker for SslContextFactory
 + 1469 RolloverFileOutputStream: IllegalStateException Task already scheduled
 + 1498 Add JRTResource to support future Java 9 classloader behaviors
 + 1499 ClasspathPattern needs MODULE ruleset to support future Java 9
   classloader behaviors
 + 1503 IPv6 address needs normalization (without brackets) in
   ForwardedRequestCustomizer
 + 1507 RolloverFileOutputStream: Negative delay Timer.schedule exception
 + 1513 RolloverFileOutputStream: can't handle multiple instances
 + 1515 Improved RollOverFileOutputStream removeOldFiles() behavior
 + 1520 PropertyUserStore should extract packed config file
 + 1556 Remove a timing channel in Password matching
 + 1571 Support Hazelcast session management in 9.4
 + 1590 Improve RolloverFileOutputStream functionality with multiple TimeZones
 + 1591 JDBCSessionDataStore doesn't work with root context on Oracle DB
 + 1592 CompressedContentFormat.tagEquals() - incorrect comparison of entity
   tag hashes
 + 1595 HTTP/2: Avoid sending unnecessary stream WINDOW_UPDATE frames
 + 1600 Update jndi.mod and plus.mod
 + 1603 WebSocketServerFactory NPE in toString()
 + 1604 WebSocketContainer stop needs improvement
 + 1605 ContainerProvider.getWebSocketContainer() behavior is not to spec
 + 1618 AsyncContext.dispatch() does not use raw/encoded URI
 + 1622 HeaderFilter doesn't work if the response has been committed
 + 1623 JettyRunMojo use dependencies from reactor (outputdirectory)
 + 1625 Support new IANA declared Websocket Close Status Codes
 + 1637 Thread per connection retained in HTTP/2
 + 1638 Add it test for Maven Plugin
 + 1642 Using RewriteHandler with AsyncContext.dispatch() and
   HttpServletRequestWrapper not possible
 + 1643 ProxyServlet always uses default number of selector threads -
   constructor should allow to overwrite the default.
 + 1645 NotSerializableException: DoSFilter when using Non-Clustered Session
   Management: File System
 + 1655 Improve extensibility of ServerConnector
 + 1656 Improve configurability of ConnectionPools
 + 1661 AbstractProxyServlet onProxyResponseFailure Error
 + 1662 NPE with WebSocket Compress Extensions
 + 1664 IPAccessHandler CIDR IP range check is incorrect
 + 1671 Asymmetric usage of trailers in MetaData.Request
 + 1675 Session id should not be logged with INFO level in AbstractSessionCache
 + 1679 DeploymentManagerMBean not usable through JMX
 + 1682 Jetty-WarFragmentFolderPath directive has no effect in eclipse runtime
   mode except for the first launch
 + 1685 Update ALPN support for Java 8u141
 + 1687 HTTP2: Correcting missing callback notification when channel not found
 + 1692 Annotation scanning should ignore `module-info.class` files
 + 1698 Missing WWW-Authenticate from SpnegoAuthenticator when other
   Authorization header provided
 + 1702 Update ALPN support for Java 8u144
 + 1703 Improve HttpInput failure logging
 + 1706 Log Implementation ignored when executing under OSGi
 + 1709 SpnegoAuthenticator improperly handling case-insensitive Negotiate
   header
 + 1713 Do not over allocate selectors for small thread pools
 + 1715 Standardise properties and ids in jetty XML files
 + 1717 DoSFilter getRateTracker IP/Port loadId minor improvement
 + 1718 QueuedThreadPool not exposed on JMX
 + 1719 HTTP/2: Improve handling of queued requests
 + 1721 Async I/O POST fails with big files
 + 1724 Add dependency on jetty-annotations for apache-jsp
 + 1732 Allow pause accepting new connections during high load
 + 1737 DefaultServlet wrong welcome dispatcher using non-root URL path
 + 1738 jetty-bom fails oss.sonatype.org validation
 + 1741 Java 9 javadoc failure in build
 + 1749 Dump HttpDestination exchange queue
 + 1750 PoolingHttpDestination creates ConnectionPool twice
 + 1759 HTTP/2: producer can block in onReset
 + 1766 JettyClientContainerProvider does not actually use common objects
   correctly
 + 1789 PropertyUserStoreTest failures in Windows
 + 1790 HTTP/2: 100% CPU usage seen during close/shutdown of endpoint
 + 1792 Accept ISO-8859-1 characters in response reason
 + 1794 Config properties typos in session-store-cache.mod
 + 1795 Fix session id manager workerName
 + 1796 ReservedThreadExecutor defaulting to capacity=1 only
 + 1797 JEP 238 - Multi-Release JAR files break bytecode scanning
 + 1798 JMXify EatWhatYouKill
 + 1804 Make EndPoint creation and destroy a non-blocking task
 + 1805 ReservedThreadExecutor should start ReservedThreads lazily
 + 1809 NPE: StandardDescriptorProcessor.visitSecurityConstraint() with null/no
   security manager
 + 1814 Move JavaVersion to jetty-util for future Java 9 support requirements
 + 1816 HttpClientTest.testClientCannotValidateServerCertificate() hangs with
   JDK 9
 + 475546 ClosedChannelException when connection to HTTPS over HTTP proxy
   with CONNECT

jetty-9.4.7.RC0 - 16 August 2017

 + 487 JDK 9 build compatibility
 + 1357 RolloverFileOutputStream: No rollout performed at midnight
 + 1468 Configure PKIX Revocation Checker for SslContextFactory
 + 1469 RolloverFileOutputStream: IllegalStateException Task already scheduled
 + 1503 IPv6 address needs normalization (without brackets) in
   ForwardedRequestCustomizer
 + 1507 RolloverFileOutputStream: Negative delay Timer.schedule exception
 + 1513 RolloverFileOutputStream: can't handle multiple instances
 + 1571 Support Hazelcast session management in 9.4
 + 1591 JDBCSessionDataStore doesn't work with root context on Oracle DB
 + 1592 CompressedContentFormat.tagEquals() - incorrect comparison of entity
   tag hashes
 + 1595 Avoid sending unnecessary stream WINDOW_UPDATE frames
 + 1600 Update jndi.mod and plus.mod
 + 1603 WebSocketServerFactory NPE in toString()
 + 1604 Static WebSocketContainer should register shutdown hook
 + 1605 ContainerProvider.getWebSocketContainer() behavior is not to spec
 + 1618 AsyncContext.dispatch() does not use raw/encoded URI
 + 1622 HeaderFilter doesn't work if the response has been committed
 + 1623 JettyRunMojo use dependencies from reactor (outputdirectory)
 + 1625 Support new IANA declared Websocket Close Status Codes
 + 1637 Thread per connection retained in HTTP/2
 + 1642 Using RewriteHandler with AsyncContext.dispatch() and
   HttpServletRequestWrapper not possible
 + 1643 ProxyServlet always uses default number of selector threads -
   constructor should allow to overwrite the default.
 + 1645 NotSerializableException: DoSFilter when using Non-Clustered Session
   Management: File System
 + 1653 WebAppContext.add/prepend System/Server classes deprecations need
   descriptions
 + 1655 Improve extensibility of ServerConnector
 + 1656 Improve configurability of ConnectionPools
 + 1661 AbstractProxyServlet onProxyResponseFailure Error
 + 1664 IPAccessHandler CIDR IP range check is incorrect
 + 1671 Asymmetric usage of trailers in MetaData.Request
 + 1672 ProxyConnection NPE
 + 1675 Session id should not be logged with INFO level in AbstractSessionCache
 + 1679 DeploymentManagerMBean not usable through JMX
 + 1682 Jetty-WarFragmentFolderPath directive has no effect in eclipse runtime
   mode except for the first launch
 + 1685 Update ALPN support for Java 8u141
 + 1687 HTTP2: Correcting missing callback notification when channel not found
 + 1692 Annotation scanning should ignore `module-info.class` files
 + 1702 Update ALPN support for Java 8u144
 + 1703 Improve HttpInput failure logging
 + 1706 Log Implementation ignored when executing under OSGi
 + 1713 Do not over allocate selectors for small thread pools
 + 1714 exception reported in SessionEvictionFailureTest
 + 1715 Standardise properties and ids in jetty XML files
 + 1719 Improve handling of HTTP/2 queued requests
 + 1721 Async I/O POST fails with big files
 + 1724 Add dependency on jetty-annotations for apache-jsp
 + 1732 Support pause accepting new connections
 + 1737 DefaultServlet wrong welcome dispatcher using non-root URL path
 + 1738 jetty-bom fails oss.sonatype.org validation
 + 1741 Java 9 javadoc failure in build

jetty-9.3.21.RC0 - 16 August 2017

 + 487 JDK 9 build compatibility
 + 1719 Improve handling of HTTP/2 queued requests
 + 1741 Java 9 javadoc failure in build

jetty-9.3.21.M0 - 01 August 2017

 + 1357 RolloverFileOutputStream: No rollout performed at midnight
 + 1469 RolloverFileOutputStream: IllegalStateException Task already scheduled
 + 1507 RolloverFileOutputStream: Negative delay Timer.schedule exception
 + 1513 RolloverFileOutputStream: can't handle multiple instances
 + 1655 Improve extensibility of ServerConnector
 + 1661 AbstractProxyServlet onProxyResponseFailure Error
 + 1664 IPAccessHandler CIDR IP range check is incorrect
 + 1685 Update ALPN support for Java 8u141
 + 1687 HTTP2: Correcting missing callback notification when channel not found
 + 1702 Update ALPN support for Java 8u144
 + 1703 Improve HttpInput failure logging

jetty-9.2.22.v20170606 - 06 June 2017

 + 920 no main manifest attribute, in jetty-runner-9.2.19.v20160908.jar
 + 1108 Please improve logging in SslContextFactory when there are no approved
   cipher suites
 + 1357 RolloverFileOutputStream: No rollout performed at midnight
 + 1469 IllegalStateException in RolloverFileOutputStream
 + 1507 Negative delay Timer.schedule exception due to mismatched local and
   _logTimeZone values
 + 1532 RolloverFileOutputStream can't handle multiple instances
 + 1523 Update ALPN support for Java 8u131
 + 1556 A timing channel in Password.java
 + 1590 RolloverFileOutputStream not functioning in Jetty 9.2.21+

jetty-9.4.6.v20170531 - 31 May 2017

 + 523 TLS close behaviour breaking session resumption
 + 1108 Please improve logging in SslContextFactory when there are no approved
   cipher suites
 + 1505 Adding jetty.base.uri and jetty.home.uri
 + 1514 websocket dump badly formatted
 + 1516 Delay starting of WebSocketClient until an attempt to connect is made
 + 1520 PropertyUserStore should extract packed config file
 + 1526 MongoSessionDataStore old session scavenging is broken due to the
   missing $ sign in "and" operation
 + 1527 Jetty BOM should not depend on jetty-parent
 + 1528 Internal HttpClient usages should have common configurable technique
 + 1536 Jetty BOM should include more artifacts
 + 1538 NPE in Response.putHeaders
 + 1539 JarFileResource mishandles paths with spaces
 + 1544 Disabling JSR-356 doesn't indicate context it was disabled for
 + 1546 Improve handling of quotes in cookies
 + 1553 X509.isCertSign() can throw ArrayIndexOutOfBoundsException on
   non-standard implementations
 + 1556 A timing channel in Password.java
 + 1558 When creating WebAppContext without session-config and with NO_SESSIONS
   throws NPE
 + 1567 XmlConfiguration will start the same object multiple times
 + 1568 ServletUpgradeRequest mangles query strings containing percent-escapes
   by re-escaping them
 + 1569 Allow setting of maxBinaryMessageSize to 0 in WebSocketPolicy
 + 1579 NPE in Quoted Quality CSV

jetty-9.3.20.v20170531 - 31 May 2017

 + 523 TLS close behaviour breaking session resumption
 + 1108 Please improve logging in SslContextFactory when there are no approved
   cipher suites
 + 1527 Jetty BOM should not depend on jetty-parent
 + 1556 A timing channel in Password.java
 + 1567 XmlConfiguration will start the same object multiple times