/
X-Road v7.2.0 Release Notes

X-Road v7.2.0 Release Notes

Release Info

Version number7.2.0
Release date13.12.2022
Supported versions
  • 7.2.0
  • 7.1.1
  • 7.0.4
Supported platforms

Central Server

  • Ubuntu 20.04 LTS
  • Ubuntu 22.04 LTS

Configuration Proxy

  • Ubuntu 20.04 LTS
  • Ubuntu 22.04 LTS

Security Server

  • Ubuntu 20.04 LTS
  • Ubuntu 22.04 LTS
  • RHEL 7
  • RHEL 8
  • Docker
Official documentationhttps://github.com/nordic-institute/X-Road/tree/master/doc
Source codehttps://github.com/nordic-institute/X-Road/tree/master
Software licenseMIT
On this page:

Changes in This Release

Summary

  • Support for Ubuntu 22.04 LTS.

    • Central Server, Security Server and Configuration Proxy can be migrated from Ubuntu 20.04 LTS to the latest Ubuntu 22.04 LTS version.

    • Ubuntu 22.04 LTS support includes installation packages, and instructions for fresh install and migration from Ubuntu 20.

  • Remove support for Ubuntu 18.04 LTS.

    • Ubuntu 18.04 versions of previous releases (v7.0.4, v7.1.1) are supported until the end of the release's official support period.

  • Experimental support for ARM64 processor architecture.

    • Publish a snapshot version of X-Road ARM64 packages that can be used for testing purposes.

  • Support for transferring data to object storages, e.g., AWS S3.

  • Minor enhancements and bug fixes based on user feedback.

Completed Issues

Issue IDTypeSummary
XRDDEV-2022Improvement

Add content-length HTTP header calculated based on the actual content on the producer side Security Server. This makes it possible for the receiving side information system to check the content length using the header and allows for uploading data to object storages, e.g., AWS S3.

Before the change, the producer side Security Server added the "Transfer-Encoding: chunked" HTTP header to the request sent to the receiving side information system. Instead, after the change the "Content-Length" header is added.

XRDDEV-2041Improvement

Update the operational monitoring Security Server add-on to store the "X-Road-Represented-Party" HTTP header from REST message exchange. Before the fix, the header was stored from SOAP message exchange only.

The format of the "X-Road-Represented-Party" HTTP header value is defined in the Third Party Representation Extension for the X-Road Message Protocol document.

XRDDEV-2097Fix

Fix an issue on the Security Server that caused re-importing a configuration anchor to fail with the error “Configuration anchor import failed: invalid anchor file”.

XRDDEV-2098New

Remove support for Ubuntu 18.04 LTS.

Ubuntu 18.04 LTS versions of previous releases (v7.0.4, v7.1.1) are supported until the end of the release's official support period.

XRDDEV-2100NewAdd support for Ubuntu 22.04 LTS in Security Server packages.
XRDDEV-2101NewAdd support for Ubuntu 22.04 LTS in Central Server packages.
XRDDEV-2102NewAdd support for Ubuntu 22.04 LTS in Configuration Proxy packages.
XRDDEV-2107New

Document the Central Server upgrade process from Ubuntu 20.04 LTS to Ubuntu 22.04 LTS. The documentation can be found here:

XRDDEV-2108New

Document the Configuration Proxy upgrade process from Ubuntu 20.04 LTS to Ubuntu 22.04 LTS. The documentation can be found here:

XRDDEV-2109New

Document the Security Server upgrade process from Ubuntu 20.04 LTS to Ubuntu 22.04 LTS. The documentation can be found here:

XRDDEV-2110New

Document the Security Server cluster upgrade process from Ubuntu 20.04 LTS to Ubuntu 22.04 LTS. The documentation can be found here:

XRDDEV-2111ImprovementDocumentation for setting up a Security Server cluster is updated for Ubuntu 22.04 LTS.
XRDDEV-2112FixFix an issue where removing access from one version of a SOAP service would remove access to other versions of the service as well.
XRDDEV-2114FixFix issues with the X-Road Security Server Sidecar that caused database migrations to fail. Improve the documentation to make the version upgrade steps clearer.
XRDDEV-2116Fix

Fix an issue where users could not log into the token on a secondary node of a Security Server cluster due to it being read-only.

In X-Road versions before 7.2.0 (<7.2.0), the secondary node UI user had to be a member of only one UI privilege group: "xroad-securityserver-observer". Instead, starting from version 7.2.0 (>=7.2.0), the secondary node UI user has to be a member of two UI privilege groups: "xroad-securityserver-observer" and "xroad-security-officer".

After upgrading to version 7.2.0, the secondary node UI user must be added to the "xroad-security-officer" privilege group manually by the Security Server administrator.

More information about managing the Security Server UI users is available here.

XRDDEV-2117Fix

Fix an issue with downloading the verification package using the Security Server’s "/verificationconf" interface. The verification package is required by the "asicverifier.jar" utility that's used for message log archive verfication.

XRDDEV-2127ImprovementAdd documentation about the Third Party Representation Extension for the X-Road Message Protocol in the X-Road source code repository.
XRDDEV-2131Fix

Fix an issue with adding sign keys to a HSM in a clustered Security Server setup. The issue required the secondary Security Server nodes to be restarted before they were able to see the new key. After the fix, the secondary Security Server nodes are able to see the new key without a restart.

XRDDEV-2132Improvement

Estonian national settings: Update default authentication and signing key length to 3072 bits (earlier 2048 bits).

XRDDEV-2160Fix

Marked the old "SkEsteIdCertificateProfileInfoProvider" as deprecated since the related profile is no longer used.

Please contact NIIS (x-road@niis.org) in case you are still using this profile. Unless NIIS receives further feedback on this deprecation, the profile will be completely removed in a future version.

XRDDEV-2161FixFix an issue with automatic backup generation that caused the automatic backup generation not to work in the X-Road Security Server Sidecar image.
XRDDEV-2167ImprovementIncrease the default maximum memory parameter (XROAD_MESSAGELOG_ARCHIVER_PARAMS) for the messagelog addon from 100mb to 200mb.

Issue types: fix (bug fix or technical debt), improvement (improvement to an existing feature), new (a new feature).

New/Updated Dependencies

DependencyOld VersionNew VersionNotes
rake13.0.313.0.6
tzinfo0.3.600.3.61
addressable2.4.02.8.0
concurrent-ruby1.1.81.1.10
thor1.1.01.2.1
apache-mime4j-core0.8.60.8.7
akka2.13:2.6.162.13:2.6.20
jackson2.13.32.13.4.20221013
spring-boot2.6.82.7.5
spring-cloud2021.0.12021.0.4

Contributors

The following developers have contributed to the development of this release version. A contribution means at least one Git commit that is included in the release. The full list of contributors of different X-Road® versions is available here.

Other Notes

Package Repositories

RepositoryURL
Bionic
deb https://artifactory.niis.org/xroad-release-deb bionic-<version> main
Focal
deb https://artifactory.niis.org/xroad-release-deb focal-<version> main
RPM / RHEL7
https://artifactory.niis.org/xroad-release-rpm/rhel/7/<version>
RPM / RHEL8
https://artifactory.niis.org/xroad-release-rpm/rhel/8/<version>
Dockerhttps://hub.docker.com/r/niis/xroad-security-server-sidecar

Repository Sign Key Details

Download URLhttps://artifactory.niis.org/api/gpg/key/public
Hash935CC5E7FA5397B171749F80D6E3973B
FingerprintA01B FE41 B9D8 EAF4 872F A3F1 FB0D 532C 10F6 EC5B
3rd party key serverUbuntu key server

Packages

Package

SHA256 checksum

xroad-addon-hwtokens_7.2.0-0.ubuntu20.04_amd64.deb

23a8de014ba6c9730c5510b61588dbe128e4b5b823a02d033db1e2a556a6c0ab

xroad-addon-messagelog_7.2.0-0.ubuntu20.04_all.deb

7aeb98f32cf57ca38692317500c784e9534bfdeaec62e56fd9150213dd2e95d9

xroad-addon-metaservices_7.2.0-0.ubuntu20.04_all.deb

e599969782af6cd81894f7a98431d824ee03f2a01326f98668bb5970ae0d36fe

xroad-addon-proxymonitor_7.2.0-0.ubuntu20.04_all.deb

cdcb5c391bb8fb58461d6647db87e52f7ecf63756d53eff3f2eda7a28ed50cce

xroad-addon-opmonitoring_7.2.0-0.ubuntu20.04_all.deb

346a47c7fea0774c603b136ab4e75052ab75a821f9621c68bdcbbe85bcbe6260

xroad-addon-wsdlvalidator_7.2.0-0.ubuntu20.04_all.deb

ff01f61c419ec8dcc745eade8d6e50eee2485474ba65f4dddbd7e6d9207bbfd6

xroad-autologin_7.2.0-0.ubuntu20.04_all.deb

859f3a5913f9eb64188212634b6913dabeafae28dbfae4767c71a3d585ebb854

xroad-base_7.2.0-0.ubuntu20.04_amd64.deb

00f9040ff1e5fb87fbd8425347d0fdbe100fc02590ff085394b408827e8dfa60

xroad-center_7.2.0-0.ubuntu20.04_all.deb

3a888a3028cc5dae663e93de52b6f3f0ba7bf26f4c657d4581ced7601dc7304b

xroad-centralserver_7.2.0-0.ubuntu20.04_all.deb

e5bde1b42da06e74760da2bb7b3107eb2f26bceefc235d773f89ce3a57c27e9c

xroad-centralserver-monitoring_7.2.0-0.ubuntu20.04_all.deb

13da7ffaa1b73c47252d27147c7ad6b622e577f1b9f79d8ea31f682a0693e609

xroad-confclient_7.2.0-0.ubuntu20.04_amd64.deb

bd4dc7e7512bd5a23f91c65dca5e7baa8cc1c950ac48fe7449d042afb953014f

xroad-confproxy_7.2.0-0.ubuntu20.04_all.deb

cbc4ff251489d8f3b1feb28e940c7e83fde9610dd16a5cbe05bb2ac3626916ea

xroad-database-local_7.2.0-0.ubuntu20.04_all.deb

063389b1d4aae4354302628c45a7c9a8e70136b80e86f074b51a3d71d2c0ca4b

xroad-database-remote_7.2.0-0.ubuntu20.04_all.deb

06193097880a55e819a48f7366775050f1c428a952a995951b6ba7be71cead75

xroad-jetty9_7.2.0-0.ubuntu20.04_all.deb

d221bcefec3284f1d13e834029b2090795a1d3394b68863c78e60106a82aadc6

xroad-monitor_7.2.0-0.ubuntu20.04_all.deb

c6a7d940f283653f404fb2c81f6381c877be8b3d66249836b15ff4f093f18db9

xroad-nginx_7.2.0-0.ubuntu20.04_amd64.deb

a6c899dda55adbc42782e9d1c66afa3ff952b5be0bf67221820a964f2dbfad56

xroad-opmonitor_7.2.0-0.ubuntu20.04_all.deb

0b3a68139b6b2d4bd0252b70e8f1dd93117c1b1e1d70828ebe0bbe07cf2c9504

xroad-proxy_7.2.0-0.ubuntu20.04_all.deb

4776b2c0d48da151b6239f15dca47b9c9869dd6f829d7b13b17290254b7e00fd

xroad-proxy-ui-api_7.2.0-0.ubuntu20.04_all.deb

bb31adde95c199db6b9a1b2e7beca0e2e897df45c8600756aa68ee0b26a3ee4b

xroad-securityserver_7.2.0-0.ubuntu20.04_all.deb

3c75436c7e1982dc43e033d3c02c886fefcbc2cde61d724e94dc8360bad70db9

xroad-securityserver-ee_7.2.0-0.ubuntu20.04_all.deb

aef9268f10c22f043859cc1d0e44d1f58c3934d14628179e075914d90ffb6afb

xroad-securityserver-fi_7.2.0-0.ubuntu20.04_all.deb

af70fb71450d7aeff276122515a32c11c8567217fe9101cc9df6318a647d71dc

xroad-securityserver-fo_7.2.0-0.ubuntu20.04_all.deb

d2a967dae8a01732ebbb81a63ea22def2aa59d21b468c6b6b21b3d40587f0fee

xroad-securityserver-is_7.2.0-0.ubuntu20.04_all.deb

</