Harmony eDelivery Access - Access Point v2.2.0 Release Notes

Release Info

Version number

2.2.0

Release date

11.10.2023

Supported versions

  • 2.2.0

  • 2.1.0

  • 2.0.0

Supported platforms

  • Ubuntu 20.04 LTS

  • Ubuntu 22.04 LTS

  • Docker

Official documentation

https://github.com/nordic-institute/harmony-common

Source code

https://github.com/nordic-institute/harmony-access-point

Software license

EUPL 1.2

 

On this page:



Changes in This Release

Summary

  • Add support for running the Harmony Access Point in a Docker container.

  • Change the Access Point default keystore type from JSK to PKCS12.

  • Add support for defining the TLS certificate and security (sign + encryption) certificate Distinguished Name (DN) field values separately.

  • Update 3rd party dependencies.

Completed Issues

Issue ID

Type

Summary

Issue ID

Type

Summary

NEDS-110

New

Add support for running the Harmony Access Point in a Docker container.

The Harmony Access Point Docker image is available here:

https://hub.docker.com/r/niis/harmony-ap

Full user guide is available here:

https://github.com/nordic-institute/harmony-common/blob/main/doc/harmony-ap_docker_installation_guide.md

NEDS-150

Improvement

Change the Access Point default keystore type from JKS to PKCS12. The change is applied to new Access Point installations only. Access Point installations that were originally installed before version 2.2.0 and are upgraded to version 2.2.0 are not affected by the change.

Add a new property domibus.security.bc.provider.order in /etc/harmony-ap/domibus.properties. The property can be used to set the preference order of the Bouncy Castle Java Cryptography Architecture cryptography provider. The preference order is the order in which security providers are searched for algorithms. The Bouncy Castle provider provides alternative implementations and some additional algorithms compared to the OpenJDK standard providers.

By default (when the property is not defined), the provider is added to the last position. To match the behavior of the Domibus Access Point, the provider can be inserted at position "3". However, that breaks standard PKCS12 keystores when using Java 11, and should only be used to resolve potential compatibility issues (no such issues are currently known). A restart of the harmony-ap is required after changing the property.

NEDS-151

Improvement

Add support for defining the TLS certificate and security (sign + encryption) certificate Distinguished Name (DN) field values separately during the installation process. Before version 2.2.0, a single DN value was defined during the installation process and the same value was used for both TLS and security certificates. Starting from version 2.2.0, the DN value for TLS and security certificates is defined separately.

NEDS-153

Fix

Update 3rd party dependencies.

Issue types: fix (bug fix or technical debt), improvement (improvement to an existing feature), new (a new feature).

New/Updated Dependencies

Dependency

Old Version

New Version

Notes

Dependency

Old Version

New Version

Notes

ch.qos.logback:logback-classic

1.2.11

1.2.12

 

ch.qos.logback:logback-core

1.2.11

1.2.12

 

com.fasterxml.jackson.core:jackson-annotations

2.14.2

2.14.3

 

com.fasterxml.jackson.core:jackson-core

2.14.2

2.14.3

 

com.fasterxml.jackson.core:jackson-databind

2.14.2

2.14.3

 

com.fasterxml.jackson.datatype:jackson-datatype-jdk8

2.14.2

2.14.3

 

com.fasterxml.jackson.datatype:jackson-datatype-jsr310

2.14.2

2.14.3

 

com.google.guava:guava

31.1-jre

32.1.2-jre

 

com.hazelcast:hazelcast-all

4.2.7

4.2.8

 

commons-codec:commons-codec

1.15

1.16.0

 

commons-io:commons-io

2.11.0

2.14.0

 

com.mysql:mysql-connector-j

8.0.32

-

 

com.smartbear.soapui:soapui

5.1.2

5.1.3

 

com.sun.activation:jakarta.activation

-

1.2.2

 

com.sun.mail:jakarta.mail

-

1.6.7

 

com.sun.mail:javax.mail

1.6.2

-

new: com.sun.mail:jakarta.mail

io.dropwizard.metrics:metrics-core

4.2.17

4.2.20

 

io.dropwizard.metrics:metrics-healthchecks

4.2.17

4.2.20

 

io.dropwizard.metrics:metrics-jmx

4.2.17

4.2.20

 

io.dropwizard.metrics:metrics-servlets

4.2.17

4.2.20

 

io.swagger.core.v3:swagger-annotations

2.2.4

2.2.16

 

io.swagger.core.v3:swagger-jaxrs2

2.2.4

2.2.16

 

jakarta.activation:jakarta.activation-api

2.1.1

1.2.2

 

jakarta.platform:jakarta.jakartaee-api

-

8.0.0

 

jakarta.xml.bind:jakarta.xml.bind-api

4.0.0

2.3.3

 

jakarta.xml.soap:jakarta.xml.soap-api

-

1.4.2

 

jakarta.xml.ws:jakarta.xml.ws-api

-

2.3.3

 

javax.activation:activation

1.1.1

-

new: com.sun.activation:jakarta.activation

javax.activation:javax.activation-api

1.2.0

-

new: jakarta.activation:jakarta.activation-api

javax:javaee-api

8.0.1

-

new: jakarta.platform:jakarta.jakartaee-api

javax.xml.bind:jaxb-api

2.3.1

-

new: jakarta.xml.bind:jakarta.xml.bind-api

javax.xml.soap:javax.xml.soap-api

1.4.0

-

new: jakarta.xml.soap:jakarta.xml.soap-api

javax.xml.ws:jaxws-api

2.3.1

-

new: jakarta.xml.ws:jakarta.xml.ws-api

net.minidev:json-smart

2.4.8

2.4.11

 

org.apache.activemq:activemq-broker

5.16.5

5.16.6

 

org.apache.activemq:activemq-client

5.16.5

5.16.6

 

org.apache.activemq:activemq-jaas

5.16.5

5.16.6

 

org.apache.activemq:activemq-kahadb-store

5.16.5

5.16.6

 

org.apache.activemq:activemq-spring

5.16.5

5.16.6

 

org.apache.commons:commons-lang3

3.12.0

3.13.0

 

org.apache.cxf:cxf-core

3.5.5

3.5.7

 

org.apache.cxf:cxf-rt-bindings-soap

3.5.5

3.5.7

 

org.apache.cxf:cxf-rt-features-logging

3.5.5

3.5.7

 

org.apache.cxf:cxf-rt-frontend-jaxws

3.5.5

3.5.7

 

org.apache.cxf:cxf-rt-security

3.5.5

3.5.7

 

org.apache.cxf:cxf-rt-transports-http

3.5.5

3.5.7

 

org.apache.cxf:cxf-rt-transports-local

3.5.5

3.5.7

 

org.apache.cxf:cxf-rt-wsdl

3.5.5

3.5.7

 

org.apache.cxf:cxf-rt-ws-policy

3.5.5

3.5.7

 

org.apache.cxf:cxf-rt-ws-security

3.5.5

3.5.7

 

org.apache.cxf:cxf-spring-boot-starter-jaxws

3.5.5

3.5.7

 

org.apache.santuario:xmlsec

2.3.0

2.3.3

 

org.apache.tomcat.embed:tomcat-embed-core

9.0.71

9.0.80

 

org.apache.tomcat.embed:tomcat-embed-websocket

9.0.71

9.0.80

 

org.apache.wss4j:wss4j-ws-security-common

2.4.1

2.4.2

 

org.apache.xbean:xbean-spring

4.22

4.23

 

org.aspectj:aspectjrt

1.9.9.1

1.9.20.1

 

org.aspectj:aspectjweaver

1.9.9.1

1.9.20.1

 

org.bouncycastle:bcpkix-jdk18on

1.72

1.76

 

org.bouncycastle:bcprov-jdk18on

1.72

1.76

 

org.liquibase:liquibase-core

4.17.0

4.17.2

 

org.mapstruct:mapstruct

1.5.3.Final

1.5.5.Final

 

org.springframework.security:spring-security-config

5.8.2

5.8.7

 

org.springframework.security:spring-security-core

5.8.2

5.8.7

 

org.springframework.security:spring-security-test

5.8.2

5.8.7

 

org.springframework.security:spring-security-web

5.8.2

5.8.7

 

org.springframework.session:spring-session-core

2.7.0

2.7.3

 

org.springframework.session:spring-session-jdbc

2.7.0

2.7.3

 

org.springframework:spring-aop

5.3.26

5.3.30

 

org.springframework:spring-beans

5.3.26

5.3.30

 

org.springframework:spring-context

5.3.26

5.3.30

 

org.springframework:spring-context-support

5.3.26

5.3.30

 

org.springframework:spring-core

5.3.26

5.3.30

 

org.springframework:spring-jms

5.3.26

5.3.30

 

org.springframework:spring-orm

5.3.26

5.3.30

 

org.springframework:spring-test

5.3.26

5.3.30

 

org.springframework:spring-tx

5.3.26

5.3.30

 

org.springframework:spring-web

5.3.26

5.3.30

 

org.springframework:spring-webmvc

5.3.26

5.3.30

 

Contributors

The following developers have contributed to the development of this release version. A contribution means at least one Git commit that is included in the release.

GitHub Username

GitHub Username

jhyoty

petkivim

Other Notes

-

Package Repositories

Repository

URL

Repository

URL

Focal

deb https://artifactory.niis.org/artifactory/harmony-release-deb focal-current main

Jammy

deb https://artifactory.niis.org/artifactory/harmony-release-deb jammy-current main

Docker

https://hub.docker.com/r/niis/harmony-ap

Debian Repository Sign Key Details

Download URL

https://artifactory.niis.org/api/gpg/key/public

Hash

935CC5E7FA5397B171749F80D6E3973B

Fingerprint

A01B FE41 B9D8 EAF4 872F A3F1 FB0D 532C 10F6 EC5B

3rd party key server

Ubuntu key server

Packages

Package

SHA256 checksum

Package

SHA256 checksum

harmony-ap_2.2.0-0.ubuntu20.04_all.deb

68b8740e7f82ba7610a0382c0165db460ecb1b17b44ebe2820e613c15e7a9708

harmony-ap_2.2.0-0.ubuntu22.04_all.deb

743077fe72598aab9fba2f206d3c29165422221d68b6f3b83cdd028bef380611