X-Road v6.23.0 Release Notes
- Petteri Kivimäki
- jarkkohyoty (Unlicensed)
Changes in This Release
Summary
Solution agnostic high availability (HA) support for Central Server.
More flexibility and alternatives how Central Server high availability can be implemented – X-Road operators may choose the preferred solution.
The support includes configuration instructions for the most common alternatives.
Support does not include automated out-of-the-box setup of a highly available Central Server cluster.
- A minor bug fix on Security Server.
Completed Issues
Access to the X-Road Backlog and issue details requires signing up for an account. Sign up now and get access to the backlog and issue details immediately.
| Issue ID | Type | Summary |
|---|---|---|
| XRDDEV-757 | Improvement | Add support for using an external database instead of a local database running on Central Server. Starting from version 6.23.0 it is possible to configure database connection details during Central Server installation. By default, local database is assumed during installation. |
| XRDDEV-760 | Fix | Remove explicit Postgres-BDR 1.0 (Bi-Directional Replication for PostgreSQL) dependency from Central Server. After the change Central Server does not provide out-of-the-box HA database solution, and therefore, setting up a HA database cluster is the responsibility of the Central Server operator. Review the Central Server HA installation guide before upgrading an existing HA cluster (< v6.23.0) to version >= v6.23.0. |
| XRDDEV-780 | Improvement | Add instructions for setting up an external PostgreSQL database cluster for Central Server HA. The instructions are available here. |
| XRDDEV-782 | Improvement | Add a migration guide for migrating from from the current BDR based Central Server HA setup to an external DB cluster based setup. The migration guide explains the steps that are required to migrate Central Server cluster from a BDR based HA setup to an external DB cluster based setup. The migration guide is available here. |
| XRDDEV-813 | Improvement | Add support for detecting during a version upgrade if Central Server uses PostgreSQL BDR 1.0, and update HA configuration to be compatible with the current HA support implementation. Review the Central Server HA installation guide before upgrading an existing HA cluster (< v6.23.0) to version >= v6.23.0. |
| XRDDEV-820 | Fix | Adjust the default heap and metaspace usage of X-Road components. |
| XRDDEV-821 | Fix | Fix a problem with Central Server external database support that caused external database properties defined by the user not being respected during a Central Server version upgrade. |
| XRDDEV-853 | Fix | Fix a problem on Security Server that caused environmental monitoring not to return X-Road process information on Ubuntu 18.04 LTS host. |
| XRDDEV-856 | Fix | Update external dependencies with known vulnerabilities. |
| XRDDEV-916 | Improvement | Add meta package for Iceland. |
| XRDDEV-917 | Fix | Update the Icelandic certificate profile implementation. |
Issue types: fix (bug fix or technical debt), improvement (improvement to an existing feature), new (a new feature).
New/Updated Dependencies
| Dependency | Old Version | New Version | Notes |
|---|---|---|---|
| org.apache.cxf:cxf-tools-validator | 3.2.6 | 3.2.12 | |
| com.fasterxml.jackson.core:jackson-databind | 2.9.10.1 | 2.9.10.2 | |
| org.quartz-scheduler:quartz | 2.3.1 | 2.3.2 | |
| activerecord-jdbc-adapter | 1.2.9.1 | 1.3.25 | |
| activerecord-jdbcpostgresql-adapter | 1.2.9 | 1.3.25 | |
| activerecord-jdbcsqlite3-adapter | 1.2.9 | 1.3.25 | |
| jdbc-postgres | 9.2.1002.1 | 9.4.1206 | |
| thor | 0.19.4 | 0.20.3 | |
| transaction_isolation | 1.0.3 | 1.0.5 |
Other Notes
Package Repositories
| Repository | URL |
|---|---|
| Bionic | deb https://artifactory.niis.org/xroad-release-deb bionic-<version> main |
| RPM | https://artifactory.niis.org/xroad-release-rpm/rhel/7/<version> |
Repository Sign Key Details
| Download URL | https://artifactory.niis.org/api/gpg/key/public |
|---|---|
| Hash | 935CC5E7FA5397B171749F80D6E3973B |
| Fingerprint | A01B FE41 B9D8 EAF4 872F A3F1 FB0D 532C 10F6 EC5B |
| 3rd party key server | SKS key servers |
Packages
Bionic
Package | SHA256 checksum |
|---|---|
xroad-addon-hwtokens_6.23.0-1.ubuntu18.04_all.deb | ca1712e0b6b8d1e9b21413e32ea831f8ee024db6434ad0a0dc644e7e4fa25d1f |
xroad-addon-messagelog_6.23.0-1.ubuntu18.04_all.deb | 1688764d850d2a259f1278d1b6d5968526e39fb33982ee113a7b216c1d8e268e |
xroad-addon-opmonitoring_6.23.0-1.ubuntu18.04_all.deb | e2f06cd9fd3242b9a29e4b413251f1c179ac673d68cbf561a959deef7f2855e1 |
xroad-addon-metaservices_6.23.0-1.ubuntu18.04_all.deb | 7fa45d3b0e0009f8b003eb762e754b1197fba539e35106a25169f1bae30f619f |
xroad-addon-proxymonitor_6.23.0-1.ubuntu18.04_all.deb | 8de13341328e0115b9213ddc6aad740e08037c4e446f79bd8f2747f97b703342 |
xroad-addon-wsdlvalidator_6.23.0-1.ubuntu18.04_all.deb | 750b2234bab972c233e0c34203103f94acf816af67435c7179b3dd1f9e646912 |
xroad-autologin_6.23.0-1.ubuntu18.04_all.deb | f0ad60bc92097d269fb383ffe0a6d43ed6e84d41925651f0be1bb8232bf6a3ad |
xroad-base_6.23.0-1.ubuntu18.04_amd64.deb | dc0ee699c3e05a90c60e70426d4092b435504b413c2d455ed183338b7edf1591 |
xroad-center-clusterhelper_6.23.0-1.ubuntu18.04_all.deb | 3f6abb8c6aeb06bde9f561a150345bbbbeeb7f6fae6141e141878d1938a54ff2 |
xroad-center_6.23.0-1.ubuntu18.04_all.deb | 3904c98991439724ac16041e4c7d5479494c09282a5b30cfa657a3d57bad9cc9 |
xroad-centralserver-monitoring_6.23.0-1.ubuntu18.04_all.deb | 8041afdaea367241895b28c1da4286746c09aa135748548471ec011c4305300c |
xroad-centralserver_6.23.0-1.ubuntu18.04_all.deb | 3471b076f18621fb6dcedaa202befcc35b86cfaaec8f9b04f929462c26ef411a |
xroad-confclient_6.23.0-1.ubuntu18.04_amd64.deb | 96ff119892bc297ae5a76dbc4e42e7db2e22431e86deea40a93a0b908fcb81bc |
xroad-confproxy_6.23.0-1.ubuntu18.04_all.deb | 5f05c05b1f323dfc8978c1e9a685a69ea332cb94bf30d265cd53167b591210da |
xroad-jetty9_6.23.0-1.ubuntu18.04_all.deb | 0fe990bf2d333c3e18ac1c53d377221b237005aa49233cb77977f69e2a886be4 |
xroad-monitor_6.23.0-1.ubuntu18.04_all.deb | 406356b393d9ac8d7ddd108b3acc51f8db19bb7a4673ec6d51a36e28c9c93a93 |
xroad-nginx_6.23.0-1.ubuntu18.04_amd64.deb | 55c49117b07a9a51d0a5b6ed278a216bf5e72de7e0fa39ea1869fdf0ec11f070 |
xroad-opmonitor_6.23.0-1.ubuntu18.04_all.deb | 8a5f99e4edec07cc816f20b7d178b9685e65e604f2812ee29180eff1fba8cd34 |
xroad-proxy_6.23.0-1.ubuntu18.04_all.deb | 0e6d033ab5de0d5571ed7887c2d1d44a2ee0d76dac6be57989b67f5abce7f0ed |
xroad-securityserver-ee_6.23.0-1.ubuntu18.04_all.deb | 81a11de95a44562c164e26cc48059f687c1b4ab2c75517fd188bd0971cfa4d9d |
xroad-securityserver-fi_6.23.0-1.ubuntu18.04_all.deb | 389ed8271f2fd6c1732ec99a9c6f679a7e0ac0d3094b7486427476d748daa784 |
xroad-securityserver_6.23.0-1.ubuntu18.04_all.deb | 4828d28c65598f340269cc9c6223511d9ed78c28edc430cfa59489d88e9e06a1 |
xroad-securityserver-is_6.23.0-1.ubuntu18.04_all.deb | 094da2e3b685d36dfe6e50efb0b430283aa0113978963dde9deb39e02c1a7786 |
xroad-signer_6.23.0-1.ubuntu18.04_amd64.deb | f40839e11e138a80cbb2b97e15222a8ff0ec941d76fb6dc74d83ea8c13f156dc |
RPM
Package | SHA256 checksum |
|---|---|
xroad-addon-messagelog-6.23.0-1.el7.x86_64.rpm | 3eed914f6f4e716bb8620546c5ce13549044755b6da5a47542468f260e7a5f8a |
xroad-addon-metaservices-6.23.0-1.el7.x86_64.rpm | b85049a15a3e3e51ae9e15123c341dfddd6d88904df0da8e5c22dae5c284447c |
xroad-addon-opmonitoring-6.23.0-1.el7.x86_64.rpm | c1c00693279704d9c60646d2b31fd27b45ecf84463b1d013d60f13450f4bb24d |
xroad-addon-proxymonitor-6.23.0-1.el7.x86_64.rpm | 182c3a093ee587f3ffd880f332557f19821da55078692e21abe8f17076e2acf0 |
xroad-addon-wsdlvalidator-6.23.0-1.el7.x86_64.rpm | 26097be04b3fd91f4b66aa61db79686699c9cb32a44a95bd8d467f812bbfa08d |
xroad-autologin-6.23.0-1.el7.noarch.rpm | 45f5e60fca520a40ec4194cdf4a310c4e26ee8fc9368c4420d5cb2594887beb9 |
xroad-base-6.23.0-1.el7.x86_64.rpm | 79de97005feb05676cb6fa5a0c5980253bf6e6c419a0348be8c1391f40c14e64 |
xroad-common-6.23.0-1.el7.x86_64.rpm | f00165c5ebd8649c53f14d73628632228131b1e236ff230ed7b185dfc7ed0f26 |
xroad-confclient-6.23.0-1.el7.x86_64.rpm | b7e402e16e7c01e75fe2bc038a35e1bd07379d7b8700fc6aa3615115104440d2 |
xroad-jetty9-6.23.0-1.el7.x86_64.rpm | 873109f6d0cd454217775b215dabc0a65dc6012378cfb5db07cb0a237af1da1b |
xroad-monitor-6.23.0-1.el7.x86_64.rpm | d36076d8181a76f4655b58ebe6131b7c623db8c07a303806bc0128a1417affcf |
xroad-nginx-6.23.0-1.el7.x86_64.rpm | b216c093908e2ac35c6f764e61a249d664bd66369d13ba5aeddf9e99c058cb12 |
xroad-opmonitor-6.23.0-1.el7.x86_64.rpm | 3cad62e217e585f6dcea66ff57205215d607b160423ccc7ca89d810f14439540 |
xroad-proxy-6.23.0-1.el7.x86_64.rpm | 96d9b70a8be57ef76ed518d7f9465b4e043be1673ed8d0f44bfa53d2f6e662d0 |
xroad-securityserver-6.23.0-1.el7.noarch.rpm | 0dc1d2bf4e8e40991eecd41eb4e54203f3ed8dd56477a008f77d3700d838d43b |
xroad-securityserver-fi-6.23.0-1.el7.noarch.rpm | 79b82b4e26e7f44a876682f9e768edea8159f846f0b521b6122e020dc8f82db9 |
xroad-securityserver-is-6.23.0-1.el7.noarch.rpm | 6371d6f445b8cbc41c1a04e08848de99ecf3789f5ccaae40db48c81f76244e94 |
xroad-signer-6.23.0-1.el7.x86_64.rpm | df44404b84bd25507032c44d61afe6a6aba88b1d2def05067995d12ecdaa42ab |