Harmony eDelivery Access - Access Point v2.5.0 Release Notes

Release Info

Version number	2.5.0
Release date	13.02.2025
Supported versions	Access Point 2.5.0 2.4.0 2.3.0
Supported platforms	Access Point Ubuntu 24.04 LTS Ubuntu 22.04 LTS Ubuntu 20.04 LTS Docker
Official documentation	https://github.com/nordic-institute/harmony-common
Source code	https://github.com/nordic-institute/harmony-access-point
Software license	EUPL 1.2

On this page:

Changes in This Release

Summary

Merge changes from European Commission's Domibus 5.1.5 and 5.1.6 into Harmony Access Point.
Add support for Ubuntu 24.04 LTS operating system.
Update 3rd party dependencies.

New properties enabled by default

This version introduces two new properties that are enabled by default. These properties affect how MPC assignment and validation are handled in Domibus:

MPC Assignment Behavior:
- When the MPC attribute is missing in a message, Domibus will now automatically assign the MPC value from the matching leg configuration (as configured in the pMode).
- If you need to restore the previous behavior, where the default MPC was used instead, you can disable this property.
- Property name: domibus.pmode.legconfiguration.mpc.enabled
MPC Validation:
- Domibus will validate that the qualified name of the MPC in the received message on the MSH endpoint matches the qualified name configured in the pMode leg configuration.
- Property name: domibus.pmode.legconfiguration.mpc.validation.enabled

Completed Issues

Issue ID

Type

Summary

NEDS-188

Improvement

Merge changes from European Commission's Domibus 5.1.5 into Harmony Access Point.

New property to enforce strong rules for all Domibus properties of type password
Update the configuration of Weblogic datasource, eDeliveryDs, to disable support for global transactions
Security updates on the libraries and Domibus APIs

Copied from the Domibus 5.1.5 release notes published by the European Commission.

NEDS-188

Improvement

Merge changes from European Commission's Domibus 5.1.6 into Harmony Access Point.

Add support for custom properties in the JMS plugin
Improved the information provided in the BUSINESS logs and added more codes
Added property domibus.sender.trust.validation.signal.sync.onreceiving
If activated Domibus will verify before receiving syncronously a signal message following a push or pull request, that the sender certificate is valid and not revoked
Updated the description of default.domibus.sender.trust.validation.onreceiving
If activated Domibus will verify before receiving a User Message when using Push/Pull or a Signal Acknowledgement (NRR) when using Pull, that the sender certificate is valid and not revoked
When disabled, none of the other checks are performed on the sender's certificate
Fixed issue related to expired partition purging and added a new property to limit the number of partitions dropped in one run of the retention worker
Double click on a message should populate all fields for that message
Added diagnostic logging in case of a pMode mismatch or a submission error
Improved the sql scripts by removing the unnecessarily dropping and recreating an index
Fixed issue with message sanitizer failing at first message
Consider QUEUED batches in batch sanitiser
Upgraded Tomcat 9 to the latest version 9.0.91
Libraries upgrades to fix OWASP vulnerabilities

Copied from the Domibus 5.1.6 release notes published by the European Commission.

NEDS-200

New

Implement Ubuntu 24.04 LTS packaging.

Issue types: fix (bug fix or technical debt), improvement (improvement to an existing feature), new (a new feature).

New/Updated Dependencies

Dependency	Old Version	New Version	Notes
eu.europa.ec.dynamic-discovery:dynamic-discovery-client	2.1	-	moved to `org.niis.dynamic-discovery:dynamic-discovery-client`
jakarta.activation:jakarta.activation-api	-	2.1.1
org.apache.cxf:cxf-core	3.5.8	3.5.9
org.apache.cxf:cxf-rt-bindings-soap	3.5.8	3.5.9
org.apache.cxf:cxf-rt-features-logging	3.5.8	3.5.9
org.apache.cxf:cxf-rt-frontend-jaxws	3.5.8	3.5.9
org.apache.cxf:cxf-rt-security	3.5.8	3.5.9
org.apache.cxf:cxf-rt-transports-http	3.5.8	3.5.9
org.apache.cxf:cxf-rt-transports-local	3.5.8	3.5.9
org.apache.cxf:cxf-rt-ws-policy	3.5.8	3.5.9
org.apache.cxf:cxf-rt-ws-security	3.5.8	3.5.9
org.apache.cxf:cxf-rt-wsdl	3.5.8	3.5.9
org.apache.tomcat.embed:tomcat-embed-core	9.0.86	9.0.91
org.apache.tomcat.embed:tomcat-embed-websocket	9.0.86	9.0.91
org.niis.dynamic-discovery:dynamic-discovery-client	-	2.3	moved from `eu.europa.ec.dynamic-discovery:dynamic-discovery-client`
org.owasp:dependency-check-maven	9.1.0	10.0.4	maven plugin
org.springframework.security:spring-security-config	5.8.12	5.8.16
org.springframework.security:spring-security-core	5.8.12	5.8.16
org.springframework.security:spring-security-test	5.8.12	5.8.16
org.springframework.security:spring-security-web	5.8.12	5.8.16
org.springframework:spring-aop	5.3.34	5.3.39
org.springframework:spring-beans	5.3.34	5.3.39
org.springframework:spring-context	5.3.34	5.3.39
org.springframework:spring-context-support	5.3.34	5.3.39
org.springframework:spring-core	5.3.34	5.3.39
org.springframework:spring-jms	5.3.34	5.3.39
org.springframework:spring-orm	5.3.34	5.3.39
org.springframework:spring-test	5.3.34	5.3.39
org.springframework:spring-tx	5.3.34	5.3.39
org.springframework:spring-web	5.3.34	5.3.39
org.springframework:spring-webmvc	5.3.34	5.3.39

Contributors

The following developers have contributed to the development of this release version. A contribution means at least one Git commit that is included in the release.

GitHub Username
diemartin
petkivim

Other Notes

Package Repositories

Repository	URL
Focal	^{deb https://artifactory.niis.org/artifactory/harmony-release-deb focal-current main}
Jammy	^{deb https://artifactory.niis.org/artifactory/harmony-release-deb jammy-current main}
Noble	^{deb https://artifactory.niis.org/artifactory/harmony-release-deb noble-current main}
Docker	https://hub.docker.com/r/niis/harmony-ap

Debian Repository Sign Key Details

Download URL	https://artifactory.niis.org/api/gpg/key/public
Hash	935CC5E7FA5397B171749F80D6E3973B
Fingerprint	A01B FE41 B9D8 EAF4 872F A3F1 FB0D 532C 10F6 EC5B
3rd party key server	Ubuntu key server

Packages

Package	SHA256 checksum