2025-05-15

1

Summary of development activities

Summary of ongoing development activities.

2

X-Road 8 status update

• Update the existing backup / restore feature to cover OpenBao's configuration.

  • OpenBao's configuration data is stored in a PostgreSQL database.

• Signer performance optimisations.

  • All previously blocking actions have been replaced with read/write locks. The change allows multiple sign/read (non-modifying) actions to occur in parallel.

  • Support for HSM session pooling. A configurable (optional) connection allows establishing multiple active sessions to an HSM.

  • Improving signer scalability is progressing overall, but there are still plenty of things to do.

• Implement storing application properties in the serverconf database.

• Start implementing the backup / restore feature on Kubernetes.

3

Changes in X-Road 7 and X-Road 8 development resourcing

Currently, the X-Road 7 development team has 4 developers while the X-Road 8 development has 3 developers. To be able to release the first production version of X-Road 8 in 2026 according to the planned release schedule, more effort needs to be allocated to the X-Road 8 development. Unfortunately, it means reducing the X-Road 7 development effort.

One developer from the X-Road 7 development team is moved to the X-Road 8 development team. After the allocation change, the X-Road 7 development team has 3 developers and the X-Road 8 development team has 4 developers.

4

Roadmap adjustments for 7.7.0 and 7.8.0

Work on the 7.6.0 hotfixes (7.6.1 and 7.6.2) has taken significantly more time than expected, mostly due to complex and hard-to-reproduce issues related to network connections. In addition, the X-Road 7 development team size is likely to decrease by one person (see item 3).

Due to this, we have decided to make the following changes to the 2025 roadmap:

• Postpone the initialiser script (Security Server installation customisation) to 7.8.0. While we would likely be able to complete the script before the 7.7.0 release window, we would not be able to test it fully. Since the change is big and the potential for it to cause issues is fairly large, we want to test it over a longer period of time.

• Drop the synchronising of ACL-s between Security Servers from 7.8.0. The ticket is fairly large and complex, and with further changes to the team we likely won’t be able to complete it in time for inclusion. Additionally, it is likely that the changes are at least to a degree conflicting with 8.0.0 in the future.

5

MISP2 status update

MISP2 will reach its end of life (EoL) on December 31 2025. Official maintenance by NIIS for MISP2 continues until then.

Before reaching the EoL, a new patch release will published. The release will include updates to 3rd party dependencies that do not require changes to the MISP2 source code. In general, it means updating the dependencies to the latest available patch version (or the latest minor version at most).

The last version of MISP2 source code remains available as a publicly archived repository on NIIS’ GitHub and it is also uploaded to the Estonian code repository in a publicly archived state.

6

Open topics

Discussion on open topics.

Next meetings

• Meeting 35, June 18 2025, 15:00-16:00 (EEST, UTC+3)

• Meeting 36, August 20 2025, 15:00-16:00 (EEST, UTC+3)

• Meeting 37, September 17 2025, 15:00-16:00 (EEST, UTC+3)

• Meeting 38, October 22 2025, 15:00-16:00 (EEST, UTC+3)

• Meeting 39, November 19 2025, 15:00-16:00 (EET, UTC+2)

• Meeting 40, December 17 2025, 15:00-16:00 (EET, UTC+2)

• Meeting 41, January 21 2026, 15:00-16:00 (EET, UTC+2)

• Meeting 42, February 18 2026, 15:00-16:00 (EET, UTC+2)

• Meeting 43, March 18 2026, 15:00-16:00 (EET, UTC+2)