From da55272a75e66da2c91befe89430dee8b9580df9 Mon Sep 17 00:00:00 2001 From: David Enyeart Date: Wed, 30 Sep 2020 14:02:56 -0400 Subject: [PATCH] Release commit for v1.4.9 Update docs, scripts, and release notes for v1.4.9 Signed-off-by: David Enyeart --- CHANGELOG.md | 32 ++++++++++++++++++++++++++++++++ docs/source/install.rst | 4 ++-- docs/source/whatsnew.rst | 2 ++ release_notes/v1.4.9.md | 30 +++++++++++++++++++----------- scripts/bootstrap.sh | 8 ++++---- 5 files changed, 59 insertions(+), 17 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 2ad18db716d..94f21c6534d 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,35 @@ +## v1.4.9 +Wed Sep 30 14:01:41 EDT 2020 + +* [5146a9f](https://github.com/hyperledger/fabric/commit/5146a9f) Remove No Longer Relevant Release Note +* [4924294](https://github.com/hyperledger/fabric/commit/4924294) Update release notes with [FAB-18250](https://jira.hyperledger.org/browse/FAB-18250) +* [56a81f7](https://github.com/hyperledger/fabric/commit/56a81f7) [FAB-18250](https://jira.hyperledger.org/browse/FAB-18250) Check Error Before Returning Session to Pool (#1938) +* [17e171b](https://github.com/hyperledger/fabric/commit/17e171b) Remove escc and vscc from list of system chaincodes +* [2d63281](https://github.com/hyperledger/fabric/commit/2d63281) Remove GetSessionInfo Call +* [4f1e340](https://github.com/hyperledger/fabric/commit/4f1e340) Add release notes for v1.4.9 +* [40abeec](https://github.com/hyperledger/fabric/commit/40abeec) [FAB-18237](https://jira.hyperledger.org/browse/FAB-18237) always update stateInfo message upon chaincode update (#1915) +* [693cae5](https://github.com/hyperledger/fabric/commit/693cae5) Clarify tlsHandshakeTimeShift CLI help text (#1895) +* [d9a8bc9](https://github.com/hyperledger/fabric/commit/d9a8bc9) Peer CLI communicate with orderers with expired TLS certs +* [51ffd55](https://github.com/hyperledger/fabric/commit/51ffd55) Add extra queryexecutor nil checks +* [95e4cfd](https://github.com/hyperledger/fabric/commit/95e4cfd) [FAB-18208](https://jira.hyperledger.org/browse/FAB-18208) Do not sign gossip message if membership is empty +* [5201e86](https://github.com/hyperledger/fabric/commit/5201e86) Fix data race in gossip/discovery test (#1865) +* [11cbae9](https://github.com/hyperledger/fabric/commit/11cbae9) Add object handle and key cache to bccsp/pkcs11 +* [d626146](https://github.com/hyperledger/fabric/commit/d626146) Drain session pool before creating new sessions +* [d0c5065](https://github.com/hyperledger/fabric/commit/d0c5065) Fix Broken Doc Reference +* [d308fbf](https://github.com/hyperledger/fabric/commit/d308fbf) Re-enable Skipped PKCS11 Tests +* [80d3934](https://github.com/hyperledger/fabric/commit/80d3934) Fix broken pkcs11 tests +* [c8d124f](https://github.com/hyperledger/fabric/commit/c8d124f) [FAB-18073](https://jira.hyperledger.org/browse/FAB-18073) Add integration test for dev mode +* [9848841](https://github.com/hyperledger/fabric/commit/9848841) [FAB-18171](https://jira.hyperledger.org/browse/FAB-18171) Disregard certificate validity period in intra-orderer communication (#1825) +* [243dc0e](https://github.com/hyperledger/fabric/commit/243dc0e) [FAB-17539](https://jira.hyperledger.org/browse/FAB-17539) Always remember anchor peers in membership (#1422) (#1815) +* [f208ffe](https://github.com/hyperledger/fabric/commit/f208ffe) [FAB-18188](https://jira.hyperledger.org/browse/FAB-18188) Log orderer and peer cert expiration date upon startup (#1804) +* [a19c9ec](https://github.com/hyperledger/fabric/commit/a19c9ec) Remove Latest Tag Publishing +* [8c85f77](https://github.com/hyperledger/fabric/commit/8c85f77) Fix and improve discovery TLS authentication comments in document +* [dcba9b1](https://github.com/hyperledger/fabric/commit/dcba9b1) [FAB-18163](https://jira.hyperledger.org/browse/FAB-18163) TLS Timeshift w/o Separate Cluster Port (#1726) +* [4eaec1d](https://github.com/hyperledger/fabric/commit/4eaec1d) Use correct gossip SecretEnvelope reference +* [6361bff](https://github.com/hyperledger/fabric/commit/6361bff) Update release-1.4 for Fabric CA v1.4.8 release +* [d3c3aac](https://github.com/hyperledger/fabric/commit/d3c3aac) Fix link in Develop apps doc +* [a3486d3](https://github.com/hyperledger/fabric/commit/a3486d3) Prepare for Fabric v1.4.9 (#1627) + ## v1.4.8 Wed Jul 22 09:23:53 EDT 2020 diff --git a/docs/source/install.rst b/docs/source/install.rst index c7e83e557cd..0385e92806c 100644 --- a/docs/source/install.rst +++ b/docs/source/install.rst @@ -48,12 +48,12 @@ the binaries and images. .. note:: If you want a specific release, pass a version identifier for Fabric, Fabric-ca and thirdparty Docker images. - The command below demonstrates how to download **Fabric v1.4.8** + The command below demonstrates how to download **Fabric v1.4.9** .. code:: bash curl -sSL http://bit.ly/2ysbOFE | bash -s -- - curl -sSL http://bit.ly/2ysbOFE | bash -s -- 1.4.8 1.4.8 0.4.21 + curl -sSL http://bit.ly/2ysbOFE | bash -s -- 1.4.9 1.4.9 0.4.21 .. note:: If you get an error running the above curl command, you may have too old a version of curl that does not handle diff --git a/docs/source/whatsnew.rst b/docs/source/whatsnew.rst index 97e6e59129e..f73ec6df90d 100644 --- a/docs/source/whatsnew.rst +++ b/docs/source/whatsnew.rst @@ -182,6 +182,7 @@ with a link to the full release change log. * `Fabric v1.4.6 release notes `_. * `Fabric v1.4.7 release notes `_. * `Fabric v1.4.8 release notes `_. +* `Fabric v1.4.9 release notes `_. * `Fabric CA v1.4.0 release notes `_. * `Fabric CA v1.4.1 release notes `_. * `Fabric CA v1.4.2 release notes `_. @@ -191,6 +192,7 @@ with a link to the full release change log. * `Fabric CA v1.4.6 release notes `_. * `Fabric CA v1.4.7 release notes `_. * `Fabric CA v1.4.8 release notes `_. +* `Fabric CA v1.4.9 release notes `_. .. Licensed under Creative Commons Attribution 4.0 International License https://creativecommons.org/licenses/by/4.0/ diff --git a/release_notes/v1.4.9.md b/release_notes/v1.4.9.md index 2fd9885ca55..617f7d53dec 100644 --- a/release_notes/v1.4.9.md +++ b/release_notes/v1.4.9.md @@ -1,5 +1,12 @@ -v1.4.9 Release Notes - , , 2020 -==================================== +v1.4.9 Release Notes - September 30, 2020 +========================================= + +What's New in Hyperledger Fabric v1.4.9 +--------------------------------------- +Hyperledger Fabric v1.4.9 provides important improvements and fixes, with a focus on the following areas: +* Management of certificate expirations +* Hardware security module (HSM) efficiency + Fixes ----- @@ -48,6 +55,16 @@ This change suppresses the signing of gossip messages if the message will not ge sent regardless due to an empty gossip membership. The change reduces CPU consumption and eliminates unnecessary calls to an HSM. +**FAB-18250: peer and orderer PKCS#11 - Introduce error checking for evicting invalid PKCS#11 sessions** + +FAB-17722 introduced a call to the pkcs11 GetSessionInfo function for retrieving the current state of +the PKCS11 session. The result of this function was used to determine whether a session was still +valid to perform HSM operations or if it should be evicted from the session pool. Performance tests +showed that the call to GetSessionInfo was computationally prohibitively expensive. FAB-18242 reverted +this change and FAB-18250 introduced a new method for determining if the PKCS11 session is invalid. +Now when an HSM operation fails, we check the resultant error against the known session error codes and +evict the session from the pool if the error was the result of an invalid session. + **FAB-17539: peer - Always remember gossip anchor peers in membership** Gossip removes a peer from its membership cache if no new heartbeats are received from the peer within a timely manner. @@ -62,15 +79,6 @@ chaincodes always require a channel context. This fix ensures that a channel context is available for calls to user chaincodes, and returns an error if the client did not pass a channel name. -**FAB-18250: Introduce error checking for evicting invalid PKCS11 sessions** - -FAB-17722 introduced a call to the pkcs11 GetSessionInfo function for retrieving the current state of -the PKCS11 session. The result of this function was used to determine whether a session was still -valid to perform HSM operations or if it should be evicted from the session pool. Performance tests -showed that the call to GetSessionInfo was computationally prohibitively expensive. FAB-18242 reverted -this change and FAB-18250 introduced a new method for determining if the PKCS11 session is invalid. -Now when an HSM operation fails, we check the resultant error against the known session error codes and -evict the session from the pool if the error was the result of an invalid session. Dependencies ------------ diff --git a/scripts/bootstrap.sh b/scripts/bootstrap.sh index b418eabe745..31d27fe83fd 100755 --- a/scripts/bootstrap.sh +++ b/scripts/bootstrap.sh @@ -6,9 +6,9 @@ # # if version not passed in, default to latest released version -export VERSION=1.4.8 +export VERSION=1.4.9 # if ca version not passed in, default to latest released version -export CA_VERSION=1.4.8 +export CA_VERSION=1.4.9 # current version of thirdparty images (couchdb, kafka and zookeeper) released export THIRDPARTY_IMAGE_VERSION=0.4.21 export ARCH=$(echo "$(uname -s|tr '[:upper:]' '[:lower:]'|sed 's/mingw64_nt.*/windows/')-$(uname -m | sed 's/x86_64/amd64/g')") @@ -23,8 +23,8 @@ printHelp() { echo "-s : bypass fabric-samples repo clone" echo "-b : bypass download of platform-specific binaries" echo - echo "e.g. bootstrap.sh 1.4.8 -s" - echo "would download docker images and binaries for version 1.4.8" + echo "e.g. bootstrap.sh 1.4.9 -s" + echo "would download docker images and binaries for version 1.4.9" } dockerFabricPull() {