2024-09-18

Date and Location

Sep 18, 2024 at 15:00-16:00 (EEST, UTC+3)

Location: Microsoft Teams

Attendees

  • Petteri Kivimäki (NIIS)

  • Raido Kaju (NIIS)

  • Aivar Meisterson

  • Jalmar Jerlei

  • Juhani Nuorteva

  • Oleksii Danyliuk

  • Tõnis Pihlakas

Discussion items

#

Item

Notes

#

Item

Notes

1

Summary of development activities

Summary of ongoing development activities.

2

X-Road 8 status update

  • Split up the EDC control plane and data place into two separate processes to make the implementation more modular.

  • Update the EDC version used by X-Road 8 to version 0.9.0.

    • Includes the change that enables the EDC to access private keys over the PKCS#11 interface instead of requiring direct access.

  • Refactor configuration client.

    • On the Security Server, provide access to the local copy of global configuration over a gRPC interface instead of different Security Server modules accessing the global configuration files directly.

    • Improve configuration client error handling and logging when Security Server is uninitialised.

      • The changes are included in X-Road 7.6.0 too.

  • HashiCorp Vault is used as a secret storage by the EDC. In X-Road 8, HashiCorp Vault is replaced with OpenBao because of licensing issues.

    • HashiCorp Vault is licensed under the Business Source License (BSL) that allows the use of the software for open source projects that meet certain criteria. However, the conditions are not 100% clear in case of X-Road. BSL is the same license used by Akka, but the requirements for open source projects are different. To mitigate any BSL-related licensing risks in the future, OpenBao (that’s licensed under the Mozilla Public License 2.0 license) is used instead. OpenBao is a fork of HashiCorp Vault that’s based on the Vault’s last open-source version.

The X-Road JIRA has a more detailed list of ongoing tasks.

3

Open topics

  • X-Road version 7.5.1 was published on September 3. The release notes are available here.

  • X-Road Community Event 2024 programme has been published and registration is now open.



Next meetings

  • Meeting 27, October 23 2024, 15:00-16:00 (EEST, UTC +3)

  • Meeting 28, November 20 2024, 15:00-16:00 (EET, UTC +2)

  • Meeting 29, December 18 2024, 15:00-16:00 (EET, UTC +2)

  • Meeting 30, January 22 2025, 15:00-16:00 (EET, UTC +2)

  • Meeting 31, February 19 2025, 15:00-16:00 (EET, UTC +2)

  • Meeting 32, March 19 2025, 15:00-16:00 (EET, UTC +2)