v2.3.2 release commit

Updates doc and release notes for v2.3.2.

Signed-off-by: David Enyeart <enyeart@us.ibm.com>

docs/source/install.rst

@@ -47,12 +47,12 @@ the binaries and images.
 
 .. note:: If you want a specific release, pass a version identifier for Fabric and Fabric-CA docker images.
           The command below demonstrates how to download the latest production releases -
-          **Fabric v2.3.1** and **Fabric CA v1.4.9**
+          **Fabric v2.3.2** and **Fabric CA v1.5.0**
 
 .. code:: bash
 
   curl -sSL https://bit.ly/2ysbOFE | bash -s -- <fabric_version> <fabric-ca_version>
-  curl -sSL https://bit.ly/2ysbOFE | bash -s -- 2.3.1 1.4.9
+  curl -sSL https://bit.ly/2ysbOFE | bash -s -- 2.3.2 1.5.0
 
 .. note:: If you get an error running the above curl command, you may
           have too old a version of curl that does not handle

docs/source/whatsnew.rst

@@ -275,6 +275,7 @@ announced in each of the v2.x releases.
 * `Fabric v2.2.2 release notes <https://github.com/hyperledger/fabric/releases/tag/v2.2.2>`_.
 * `Fabric v2.3.0 release notes <https://github.com/hyperledger/fabric/releases/tag/v2.3.0>`_.
 * `Fabric v2.3.1 release notes <https://github.com/hyperledger/fabric/releases/tag/v2.3.1>`_.
+* `Fabric v2.3.2 release notes <https://github.com/hyperledger/fabric/releases/tag/v2.3.2>`_.
 
 .. Licensed under Creative Commons Attribution 4.0 International License
    https://creativecommons.org/licenses/by/4.0/

release_notes/v2.3.2.md

@@ -1,22 +1,42 @@
-v2.3.2 <RELEASE DATE TBD>
-=========================
+v2.3.2 Release Notes - April 23, 2021
+=====================================
+
+Improvements
+------------
+
+**peer and orderer - Implement legacy name constraints verification for Go 1.15**
+
+These changes reproduce the Go 1.14 name constraint verification in the MSP.
+Without these changes, certificate chains that would fail verification in Go 1.14 would
+successfully validate in Go 1.15 due to the change mentioned in the [Go 1.15 release notes](https://golang.org/doc/go1.15#commonname).
+Specifically, if a signing certificate contains a name constraint, the leaf certificate
+does not include SAN extensions, and the leaf's common name looks like a host name,
+then the additional verification is performed to ensure deterministic behavior relative
+to prior Fabric releases.
+
 
 Fixes
 -----
 
+**FAB-18427: orderer - Report correct reason of stream abort in orderer cluster**
+
+This commit fixes a bug that makes the cluster communication infrastructure
+always report an "aborted" reason after a stream terminates.
+
 **FAB-18424: peer - Ledger snapshot request submission with special value "blockNumber 0"**
 
-If a ledger snapshot request is submitted with the special value "blockNumber 0",
-peer is expected to translate the request to last committed block. This patch fixes
-an issue where the request may be translated to block number 1 instead of last committed block.
+If a ledger snapshot request is submitted with the special value "blockNumber 0", peer is expected to translate the request to last committed block.
+This patch fixes the issue where, it may happen sometimes that the request is translated to block number 1 instead of last committed block.
 This leads to the situation where no snapshot gets generated, including any future snapshot requests.
-If you have used this special value on a snapshot request to a peer, check the list of pending snapshots
-requests by using "peer snapshot listpending" command. If you notice one or more pending
-requests that are for the the block numbers lower than the latest committed block,
-cancel such requests with "peer snapshot cancelrequest" command to enable subsequent snapshot
-requests to be processed.
+If you have ever used this special value, we encourage you to check the list of pending snapshots requests with `peer snapshot listpending`.
+If you notice one or more pending requests that are for the the block numbers lower than the latest committed block, cancel such requests with `peer snapshot cancelrequest` to enable the further snapshot requests to be processed.
+
+**FAB-18304: peer and orderer - Fix leveldb manifest corruption**
 
-<ADD OTHER FIX NOTES HERE UP UNTIL RELEASE DATE>
+This fix updates the version of goleveldb. The prior version of goleveldb had a bug which
+could cause manifest corruption in crash scenarios, especially in disk full crash scenarios.
+With a corrupted goleveldb database, the peer or orderer would fail to start with error
+"panic: Error opening leveldb: leveldb: manifest corrupted".
 
 
 Dependencies

scripts/bootstrap.sh

@@ -6,9 +6,9 @@
 #
 
 # if version not passed in, default to latest released version
-VERSION=2.3.1
+VERSION=2.3.2
 # if ca version not passed in, default to latest released version
-CA_VERSION=1.4.9
+CA_VERSION=1.5.0
 ARCH=$(echo "$(uname -s|tr '[:upper:]' '[:lower:]'|sed 's/mingw64_nt.*/windows/')-$(uname -m | sed 's/x86_64/amd64/g')")
 MARCH=$(uname -m)
 
@@ -21,8 +21,8 @@ printHelp() {
     echo "-s : bypass fabric-samples repo clone"
     echo "-b : bypass download of platform-specific binaries"
     echo
-    echo "e.g. bootstrap.sh 2.3.1 1.4.9 -s"
-    echo "will download docker images and binaries for Fabric v2.3.1 and Fabric CA v1.4.9"
+    echo "e.g. bootstrap.sh 2.3.2 1.5.0 -s"
+    echo "will download docker images and binaries for Fabric v2.3.2 and Fabric CA v1.5.0"
 }
 
 # dockerPull() pulls docker images from fabric and chaincode repositories