Release eumw-2.2.3

Governikus · Sep 29, 2021 · 08fb1a7 · 08fb1a7
1 parent 0d173f7
commit 08fb1a7
Show file tree

Hide file tree

Showing 42 changed files with 951 additions and 948 deletions.
diff --git a/.hgtags b/.hgtags
@@ -57,3 +57,6 @@ ec017a16a9d5a904bc5da3cc58bea16ba67bb6a5 eumw-2.2.0-RC4
 32306996487071a78eb59f1ef536f4ab44e82740 eumw-2.2.1-RC1
 d3d9f09f5ed6d5a63e3bbdd5b0ae71fea0de0ac1 eumw-2.2.1-RC2
 f0a7904ab43d36580ae5452ec536a1aba1d6b629 eumw-2.2.1
+d14cac49af140383c0e21a6d5321af9e093277b6 eumw-2.2.2
+22f43397b2011d9ee14fe3a0bbade0e719cb8355 eumw-2.2.3-RC1
+d2932df2e87d2e2c9e4a11180f4b794c19ceea20 eumw-2.2.3-RC2
diff --git a/commitToGit.py b/commitToGit.py
@@ -1,4 +1,4 @@
-#!/usr/bin/env python
+#!/usr/bin/env python3
 
 import os.path
 import shutil
@@ -30,6 +30,23 @@ def pretty_print(message):
         sys.exit()
 
 call(["git", "clone", github_url, git_local_path])
+os.chdir(git_local_path)
+
+pretty_print('Select the github branch for the github commit')
+github_branch = input("github branch:\n")
+
+pretty_print('Specify if a new branch needs to be created for the github commit')
+github_new_branch = input("Will the commit be made on a new branch? (y/n):\n")
+
+if github_new_branch == 'y':
+    pretty_print('Specify the github tag that should be used to create the new branch on')
+    github_tag_for_new_branch = input("The github tag the new branch should be created on:\n")
+    call(["git", "checkout", github_tag_for_new_branch])
+    call(["git", "checkout", "-b", github_branch])
+else:
+    call(["git", "checkout", github_branch])
+
+os.chdir("/tmp")
 
 if os.path.exists(hg_tmp_path):
     pretty_print(hg_tmp_path + ' does already exist')

diff --git a/configuration-checker/pom.xml b/configuration-checker/pom.xml
@@ -14,7 +14,7 @@
     <parent>
         <artifactId>eumw</artifactId>
         <groupId>de.governikus.eumw</groupId>
-        <version>2.2.2</version>
+        <version>2.2.3</version>
     </parent>
 
     <artifactId>configuration-checker</artifactId>

diff --git a/configuration-wizard/pom.xml b/configuration-wizard/pom.xml
@@ -14,7 +14,7 @@
     <parent>
         <groupId>de.governikus.eumw</groupId>
         <artifactId>eumw</artifactId>
-        <version>2.2.2</version>
+        <version>2.2.3</version>
     </parent>
     <artifactId>configuration-wizard</artifactId>
 

diff --git a/databasemigration/pom.xml b/databasemigration/pom.xml
@@ -14,7 +14,7 @@
     <parent>
         <artifactId>eumw</artifactId>
         <groupId>de.governikus.eumw</groupId>
-        <version>2.2.2</version>
+        <version>2.2.3</version>
     </parent>
     <artifactId>database-migration</artifactId>
 

diff --git a/distribution/pom.xml b/distribution/pom.xml
@@ -15,11 +15,11 @@
     <parent>
         <groupId>de.governikus.eumw</groupId>
         <artifactId>eumw</artifactId>
-        <version>2.2.2</version>
+        <version>2.2.3</version>
     </parent>
 
     <artifactId>distribution</artifactId>
-    <version>2.2.2</version>
+    <version>2.2.3</version>
     <packaging>pom</packaging>
 
     <dependencies>

diff --git a/doc/source/chapter/Changelog.rst b/doc/source/chapter/Changelog.rst
@@ -131,3 +131,13 @@ Changelog
       they block the javascript requests to the AusweisApp2.
     - eIDAS Middleware: Fix a bug introduced with 2.1.0 where the country identifier in the address would be placed in
       ``adminunitSecondLine``
+
+* 2.2.2
+
+    - eIDAS Middleware: Security Patch
+
+* 2.2.3
+
+    - eIDAS Middleware: Change certificate chain building algorithm.
+    - eIDAS Middleware: Update xmlsec.
+    - eIDAS Middleware: Improve stability in trust anchor management.
diff --git a/doc/source/chapter/Configuration.rst b/doc/source/chapter/Configuration.rst
@@ -72,7 +72,7 @@ In case you are using your own environment, copy the JAR file to a folder of you
 
 You can start the application with the following command::
 
-    java -jar configuration-wizard-2.2.1.jar
+    java -jar configuration-wizard-2.2.3.jar
 
 In addition you can define the config folder with adding the parameter ``DconfigDirectory`` and its value to the
 command. This way the configuration wizard will be available at ``http://localhost:8080/config-wizard.``
@@ -102,7 +102,7 @@ to run the wizard again whenever you need it.
 To run the configuration wizard, execute the following command.
 It will mount the named volume in the container so that the configuration wizard can store the configuration in the volume. ::
 
-    docker run --rm -it -v eidas-configuration:/opt/eidas-middleware/configuration -p 8080:8080 --name eidas-configuration-wizard governikus/eidas-configuration-wizard:2.2.1
+    docker run --rm -it -v eidas-configuration:/opt/eidas-middleware/configuration -p 8080:8080 --name eidas-configuration-wizard governikus/eidas-configuration-wizard:2.2.3
 
 Running this command the configuration wizard will be available on http://localhost:8080/config-wizard.
 
@@ -116,7 +116,7 @@ with the alias ``localhost`` and the password ``123456`` for the keystore and th
 You can also use PKCS12 keystores,
 in this case you must change the value of ``SERVER_SSL_KEY_STORE_TYPE`` to ``PKCS12``. ::
 
-    docker run --rm -it -v eidas-configuration:/opt/eidas-middleware/configuration -v /home/user/keystore.jks:/opt/eidas-middleware/keystore.jks -p 443:8080 -e SERVER_SSL_KEY_STORE=file:/opt/eidas-middleware/keystore.jks -e SERVER_SSL_KEY_STORE_TYPE=JKS -e SERVER_SSL_KEY_STORE_PASSWORD=123456 -e SERVER_SSL_KEY_ALIAS=localhost -e SERVER_SSL_KEY_PASSWORD=123456 --name eidas-configuration-wizard governikus/eidas-configuration-wizard:2.2.1
+    docker run --rm -it -v eidas-configuration:/opt/eidas-middleware/configuration -v /home/user/keystore.jks:/opt/eidas-middleware/keystore.jks -p 443:8080 -e SERVER_SSL_KEY_STORE=file:/opt/eidas-middleware/keystore.jks -e SERVER_SSL_KEY_STORE_TYPE=JKS -e SERVER_SSL_KEY_STORE_PASSWORD=123456 -e SERVER_SSL_KEY_ALIAS=localhost -e SERVER_SSL_KEY_PASSWORD=123456 --name eidas-configuration-wizard governikus/eidas-configuration-wizard:2.2.3
 
 Because the application is now bound to the host in port 443,
 the configuration wizard is available at https://localhost/config-wizard.

diff --git a/doc/source/chapter/DemoApplication.rst b/doc/source/chapter/DemoApplication.rst
@@ -50,8 +50,8 @@ Using the eIDAS Demo Application
 To use the eIDAS Demo Application, start by running the eIDAS Demo Application.
 
 #. Change to the correct directory where the aforementioned configuration is present.
-#. If not present, copy the ``eidas-demo-2.2.1.jar`` file in this directory.
-#. Start the application by executing ``java -jar eidas-demo-2.2.1.jar``.
+#. If not present, copy the ``eidas-demo-2.2.3.jar`` file in this directory.
+#. Start the application by executing ``java -jar eidas-demo-2.2.3.jar``.
 
 Now you must configure your eIDAS Middleware to communicate with the eIDAS Demo Application.
 
@@ -93,7 +93,7 @@ Also bear in mind that you must use the path of the container file system in the
 
 To run the middleware, execute the following command after you have prepared the configuration, certificate and keystores::
 
-    docker run --rm -it -v /path/to/your/config-directory:/opt/eidas-middleware/config -p 8080:8080 governikus/eidas-demo-application:2.2.1
+    docker run --rm -it -v /path/to/your/config-directory:/opt/eidas-middleware/config -p 8080:8080 governikus/eidas-demo-application:2.2.3
 
 Now you can follow the steps above to configure and test the eIDAS Middleware.
 

diff --git a/doc/source/chapter/Operating.rst b/doc/source/chapter/Operating.rst
@@ -106,14 +106,14 @@ To run the eIDAS Middleware, execute the following command.
 It will mount the named volumes containing the database and configuration in the container
 and the application will be available on port 8443. ::
 
-    docker run --rm -it -v eidas-configuration:/opt/eidas-middleware/configuration -v eidas-database:/opt/eidas-middleware/database -p 8443:8443 --name eidas-middleware-application governikus/eidas-middleware-application:2.2.1
+    docker run --rm -it -v eidas-configuration:/opt/eidas-middleware/configuration -v eidas-database:/opt/eidas-middleware/database -p 8443:8443 --name eidas-middleware-application governikus/eidas-middleware-application:2.2.3
 
 To stop and remove the container, just hit ``CTRL+C``.
 
 To keep the container running longer without being attached to the STDOUT and STDERR, change the command to
 the following::
 
-    docker run -d -v eidas-configuration:/opt/eidas-middleware/configuration -v eidas-database:/opt/eidas-middleware/database -p 8443:8443 --name eidas-middleware-application governikus/eidas-middleware-application:2.2.1
+    docker run -d -v eidas-configuration:/opt/eidas-middleware/configuration -v eidas-database:/opt/eidas-middleware/database -p 8443:8443 --name eidas-middleware-application governikus/eidas-middleware-application:2.2.3
 
 For more information on starting and stopping containers and viewing the logs,
 see the `Docker Docs <https://docs.docker.com/engine/reference/run/>`_.
@@ -177,7 +177,7 @@ Scalability
 The performance of the eIDAS Middleware improves by adding more memory (RAM) and using a faster CPU.
 In case the memory configuration has changed, the server needs to be restarted.
 To start the JVM with more memory, add ``-Xmx`` with the new maximum memory size to the start command,
-e.g. ``java -Xmx8g -jar eidas-middleware-2.2.1.jar`` for 8 GB.
+e.g. ``java -Xmx8g -jar eidas-middleware-2.2.3.jar`` for 8 GB.
 
 
 Request Signer Certificate
@@ -269,7 +269,7 @@ Optional property for ``TRAP`` is ``poseidas.snmp.managementport`` (port 162 is
 set).
 
 All existing SNMP GET values are explained in detail in the MIB located at
-``https://github.com/Governikus/eidas-middleware/blob/2.2.1/poseidas/snmp/EIDASMW-SNMP-MIB.mib``.
+``https://github.com/Governikus/eidas-middleware/blob/2.2.3/poseidas/snmp/EIDASMW-SNMP-MIB.mib``.
 
 Global GET
 ''''''''''
@@ -369,6 +369,6 @@ Stop the eIDAS Middleware Application and copy the database file to your backup
 e.g. ``cp /opt/eidas-middleware/database/eidasmw.mv.db /path/to/your/backup-location/eidasmw.mv.db``.
 
 To perform the migration, copy the database migration JAR file to the directory where your
-configuration file is available and execute the command ``java -jar database-migration-2.2.1.jar``.
+configuration file is available and execute the command ``java -jar database-migration-2.2.3.jar``.
 If there are errors in the log output, please send the complete log output and some information on your environment to
 [email protected].
diff --git a/doc/source/chapter/POSeIDAS_TESTING.xml b/doc/source/chapter/POSeIDAS_TESTING.xml
@@ -21,7 +21,7 @@
                     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
                 </blackListTrustAnchor>
                 <masterListTrustAnchor>
-                    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
+                    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
                 </masterListTrustAnchor>
                 <policyImplementationId>govDvca</policyImplementationId>
                 <sslKeys id="testDVCA">

diff --git a/doc/source/conf.py b/doc/source/conf.py
@@ -55,9 +55,9 @@
 # built documents.
 #
 # The short X.Y version.
-version = '2.2.1'
+version = '2.2.3'
 # The full version, including alpha/beta/rc tags.
-release = '2.2.1'
+release = '2.2.3'
 
 # The language for content autogenerated by Sphinx. Refer to documentation
 # for a list of supported languages.

diff --git a/dvca-connection-configurator/pom.xml b/dvca-connection-configurator/pom.xml
@@ -14,7 +14,7 @@
     <parent>
         <groupId>de.governikus.eumw</groupId>
         <artifactId>eumw</artifactId>
-        <version>2.2.2</version>
+        <version>2.2.3</version>
     </parent>
     <artifactId>dvca-connection-configurator</artifactId>
     <name>dvca-connection-configurator</name>

diff --git a/eidas-base-container/pom.xml b/eidas-base-container/pom.xml
@@ -14,7 +14,7 @@
     <parent>
         <artifactId>eumw</artifactId>
         <groupId>de.governikus.eumw</groupId>
-        <version>2.2.2</version>
+        <version>2.2.3</version>
     </parent>
 
     <artifactId>eidas-base-container</artifactId>

diff --git a/eidas-common/pom.xml b/eidas-common/pom.xml
@@ -14,7 +14,7 @@
 	<parent>
 		<groupId>de.governikus.eumw</groupId>
 		<artifactId>eumw</artifactId>
-		<version>2.2.2</version>
+		<version>2.2.3</version>
 	</parent>
 	<artifactId>eidas-common</artifactId>
 

diff --git a/eidas-demo/pom.xml b/eidas-demo/pom.xml
@@ -14,7 +14,7 @@
     <parent>
         <groupId>de.governikus.eumw</groupId>
         <artifactId>eumw</artifactId>
-        <version>2.2.2</version>
+        <version>2.2.3</version>
     </parent>
     <artifactId>eidas-demo</artifactId>
 

diff --git a/eidas-middleware/pom.xml b/eidas-middleware/pom.xml
@@ -14,7 +14,7 @@
     <parent>
         <groupId>de.governikus.eumw</groupId>
         <artifactId>eumw</artifactId>
-        <version>2.2.2</version>
+        <version>2.2.3</version>
     </parent>
     <artifactId>eidas-middleware</artifactId>
 

diff --git a/eidas-middleware/src/main/java/de/governikus/eumw/eidasmiddleware/controller/TcToken.java b/eidas-middleware/src/main/java/de/governikus/eumw/eidasmiddleware/controller/TcToken.java
@@ -179,13 +179,13 @@ protected void tcTokenResponse(HttpServletResponse response, RequestSession reqP
             break;
 
           default:
-            log.warn("UNKNOWN Authrequest Attribute");
+            log.warn("UNKNOWN Authrequest Attribute: '{}'", key);
             break;
         }
       }
       else
       {
-        log.warn("UNKNOWN Authrequest Attribute");
+        log.warn("UNKNOWN Authrequest Attribute: '{}'", entry.getKey());
       }
     }
 

diff --git a/eidas-starterkit/pom.xml b/eidas-starterkit/pom.xml
@@ -14,7 +14,7 @@
     <parent>
         <groupId>de.governikus.eumw</groupId>
         <artifactId>eumw</artifactId>
-        <version>2.2.2</version>
+        <version>2.2.3</version>
     </parent>
     <artifactId>eidas-starterkit</artifactId>
 

diff --git a/password-generator/pom.xml b/password-generator/pom.xml
@@ -14,7 +14,7 @@
     <parent>
         <groupId>de.governikus.eumw</groupId>
         <artifactId>eumw</artifactId>
-        <version>2.2.2</version>
+        <version>2.2.3</version>
     </parent>
     <artifactId>password-generator</artifactId>