代码拉取完成，页面将自动刷新
No new features.
None.
Go MySQL driver updated to version 2019-05-10T10:23:35Z.
FABC-174 Commands can be manipulated to delete identities or affiliations
This vulnerability can be resolved in one of two ways:
Use HTTPS (TLS) so that the authorization header is not in clear text.
The token generation/authentication mechanism was improved to optionally prevent
token reuse. In v1.4 a more secure token can be used by setting environment variable:
FABRIC_CA_SERVER_COMPATIBILITY_MODE_V1_3=false
However, it cannot be set to false until all clients have
been updated to generate the more secure token and tolerate
FABRIC_CA_SERVER_COMPATIBILITY_MODE_V1_3=false.
The Fabric CA client has been updated in v1.4 to generate the more secure token.
The Fabric SDKs will be updated by v2.0 timeframe to generate the more secure token,
at which time the default for Fabric CA server will change to:
FABRIC_CA_SERVER_COMPATIBILITY_MODE_V1_3=false
None.
For the full list of improvements and fixes, refer to the release change log:
https://github.com/hyperledger/fabric-ca/blob/release-1.4/CHANGELOG.md#v143
No new features.
FABC-848 create table fails using Postgres with tls
Prior to the fix, when using Fabric CA with tls configured for Postres
database, the creation of the required tables fails upon initial
Fabric CA start.
FABC-837 Fabric CA panics when setup for multiple CAs
Prior to the fix, Fabric CA would panic upon start if configured
for multiple CAs (using --cafiles) and metric gathering.
None.
FABC-174 Commands can be manipulated to delete identities or affiliations
This vulnerability can be resolved in one of two ways:
Use HTTPS (TLS) so that the authorization header is not in clear text.
The token generation/authentication mechanism was improved to optionally prevent
token reuse. In v1.4 a more secure token can be used by setting environment variable:
FABRIC_CA_SERVER_COMPATIBILITY_MODE_V1_3=false
However, it cannot be set to false until all clients have
been updated to generate the more secure token and tolerate
FABRIC_CA_SERVER_COMPATIBILITY_MODE_V1_3=false.
The Fabric CA client has been updated in v1.4 to generate the more secure token.
The Fabric SDKs will be updated by v2.0 timeframe to generate the more secure token,
at which time the default for Fabric CA server will change to:
FABRIC_CA_SERVER_COMPATIBILITY_MODE_V1_3=false
None.
For the full list of improvements and fixes, refer to the release change log:
https://github.com/hyperledger/fabric-ca/blob/release-1.4/CHANGELOG.md#v142
FABC-408 Add support for CORS
CORS can be enabled in Fabric CA server using new server flags:
--cors.enabled Enable CORS for the fabric-ca-server
--cors.origins Comma-separated list of Access-Control-Allow-Origin domains
FABC-782
Fabric CA API operational metrics
FABC-789
Fabric CA database operations metrics
FABC-743
Fabric CA health check
None.
FABC-174 Commands can be manipulated to delete identities or affiliations
This vulnerability can be resolved in one of two ways:
Use HTTPS (TLS) so that the authorization header is not in clear text.
The token generation/authentication mechanism was improved to optionally prevent
token reuse. In v1.4 a more secure token can be used by setting environment variable:
FABRIC_CA_SERVER_COMPATIBILITY_MODE_V1_3=false
However, it cannot be set to false until all clients have
been updated to generate the more secure token and tolerate
FABRIC_CA_SERVER_COMPATIBILITY_MODE_V1_3=false.
The Fabric CA client has been updated in v1.4 to generate the more secure token.
The Fabric SDKs will be updated by v2.0 timeframe to generate the more secure token,
at which time the default for Fabric CA server will change to:
FABRIC_CA_SERVER_COMPATIBILITY_MODE_V1_3=false
None.
Updated to Go version 1.11.15
Updated baseimage version to 0.4.15
For the full list of improvements and fixes, refer to the release change log:
https://github.com/hyperledger/fabric-ca/blob/release-1.4/CHANGELOG.md#v141
FABC-408 Add support for CORS
CORS can be enabled in Fabric CA server using new server flags:
--cors.enabled Enable CORS for the fabric-ca-server
--cors.origins Comma-separated list of Access-Control-Allow-Origin domains
FABC-735 - Docker images with Alpine Linux
Hyperledger Fabric CA Docker image will now use Alpine Linux,
a security-oriented, lightweight Linux distribution.
FABC-782
Fabric CA API operational metrics
FABC-789
Fabric CA database operations metrics
FABC-743
Fabric CA health check
FAB-11096 - Docker images with Alpine Linux
Bash is no longer available in Fabric images. Utilize Alpine's built-in
sh or ash instead.
FABC-174 Commands can be manipulated to delete identities or affiliations
This vulnerability can be resolved in one of two ways:
Use HTTPS (TLS) so that the authorization header is not in clear text.
The token generation/authentication mechanism was improved to optionally prevent
token reuse. In v1.4 a more secure token can be used by setting environment variable:
FABRIC_CA_SERVER_COMPATIBILITY_MODE_V1_3=false
However, it cannot be set to false until all clients have
been updated to generate the more secure token and tolerate
FABRIC_CA_SERVER_COMPATIBILITY_MODE_V1_3=false.
The Fabric CA client has been updated in v1.4 to generate the more secure token.
The Fabric SDKs will be updated by v2.0 timeframe to generate the more secure token,
at which time the default for Fabric CA server will change to:
FABRIC_CA_SERVER_COMPATIBILITY_MODE_V1_3=false
None.
Updated to Go version 1.11.5
Updated baseimage version to 0.4.15
For the full list of improvements and fixes, refer to the release change log:
https://github.com/hyperledger/fabric-ca/blob/master/CHANGELOG.md#v200-alpha
No new features in Fabric CA v1.4. v1.4 is a maintenance release only,
with bug fixes, dependency updates, test improvements.
None.
FABC-174 Commands can be manipulated to delete identities or affiliations
This vulnerability can be resolved in one of two ways:
Use HTTPS (TLS) so that the authorization header is not in clear text.
The token generation/authentication mechanism was improved to optionally prevent
token reuse. In v1.4 a more secure token can be used by setting environment variable:
FABRIC_CA_SERVER_COMPATIBILITY_MODE_V1_3=false
However, it cannot be set to false until all clients have
been updated to generate the more secure token and tolerate
FABRIC_CA_SERVER_COMPATIBILITY_MODE_V1_3=false.
The Fabric CA client has been updated in v1.4 to generate the more secure token.
The Fabric SDKs will be updated by v2.0 timeframe to generate the more secure token,
at which time the default for Fabric CA server will change to:
FABRIC_CA_SERVER_COMPATIBILITY_MODE_V1_3=false
None.
Updated to Go version 1.11.1
Updated baseimage version to 0.4.14
For the full list of improvements and fixes, refer to the release change log:
https://github.com/hyperledger/fabric-ca/blob/release-1.4/CHANGELOG.md#v140
No new features in Fabric CA v1.4. v1.4 is a maintenance release only,
with bug fixes, dependency updates, test improvements.
None.
FABC-174 Commands can be manipulated to delete identities or affiliations
This vulnerability can be resolved in one of two ways:
Use HTTPS (TLS) so that the authorization header is not in clear text.
The token generation/authentication mechanism was improved to optionally prevent
token reuse. In v1.4 a more secure token can be used by setting environment variable:
FABRIC_CA_SERVER_COMPATIBILITY_MODE_V1_3=false
However, it cannot be set to false until all clients have
been updated to generate the more secure token and tolerate
FABRIC_CA_SERVER_COMPATIBILITY_MODE_V1_3=false.
The Fabric CA client has been updated in v1.4 to generate the more secure token.
The Fabric SDKs will be updated by v2.0 timeframe to generate the more secure token,
at which time the default for Fabric CA server will change to:
FABRIC_CA_SERVER_COMPATIBILITY_MODE_V1_3=false
None.
Updated to Go version 1.11.1
Updated baseimage version to 0.4.14
For the full list of improvements and fixes, refer to the release change log:
https://github.com/hyperledger/fabric-ca/blob/master/CHANGELOG.md#v140-rc2
No new features in Fabric CA v1.4. v1.4 is a maintenance release only,
with bug fixes, dependency updates, test improvements.
None.
FABC-174 Commands can be manipulated to delete identities or affiliations
This vulnerability can be resolved in one of two ways:
Use HTTPS (TLS) so that the authorization header is not in clear text.
The token generation/authentication mechanism was improved to optionally prevent
token reuse. In v1.4 a more secure token can be used by setting environment variable:
FABRIC_CA_SERVER_COMPATIBILITY_MODE_V1_3=false
However, it cannot be set to false until all clients have
been updated to generate the more secure token and tolerate
FABRIC_CA_SERVER_COMPATIBILITY_MODE_V1_3=false.
The Fabric CA client has been updated in v1.4 to generate the more secure token.
The Fabric SDKs will be updated by v2.0 timeframe to generate the more secure token,
at which time the default for Fabric CA server will change to:
FABRIC_CA_SERVER_COMPATIBILITY_MODE_V1_3=false
None.
Updated to Go version 1.11.1
Updated baseimage version to 0.4.14
For the full list of improvements and fixes, refer to the release change log:
https://github.com/hyperledger/fabric-ca/blob/master/CHANGELOG.md#v140-rc1
The following features/epics are included in this release:
FABC-592 - Identity Mixer for anonymous transactions
Fabric-CA can now issue Identity Mixer credentials to enable anonymous and
unlinkable client identities through the use of zero-knowledge proofs.
None.
None.
None.
Updated to Go version 1.10.4
Updated baseimage version to 0.4.13
For the full list of improvements and fixes, refer to the release change log:
https://github.com/hyperledger/fabric-ca/blob/master/CHANGELOG.md#v130
Update vendored version of BCCSP package.
none
none
none
https://github.com/hyperledger/fabric-ca/blob/release-1.2/CHANGELOG.md#v121
The following features/epics are included in this release:
FABC-592 - Identity Mixer for anonymous transactions
Fabric-CA can now issue Identity Mixer credentials to enable anonymous and
unlinkable client identities through the use of zero-knowledge proofs.
None.
None.
None.
Updated to Go version 1.10.4
Updated baseimage version to 0.4.12
For the full list of improvements and fixes, refer to the release change log:
https://github.com/hyperledger/fabric-ca/blob/master/CHANGELOG.md#v130-rc1
Added support for listing certificates based on various filter criteria.
Bug fixes, documentation and test coverage improvements, UX improvements
based on user feedback and changes to address a variety of static scan
findings (unused code, static security scanning, spelling, linting and more).
Updated to Go version 1.10
Updated baseimage version to 0.4.10
[FAB-9938] many commands can be manipulated to delete identities or affiliations
This vulnerability has a low severity because to exploit it, one would need to
access the authorization header of the requests. Using HTTPS (TLS) eliminates this
potential. We will be re-evaluating the authorization approach for the v1.3
release.
https://jira.hyperledger.org/browse/FAB-7534
none
https://github.com/hyperledger/fabric-ca/blob/master/CHANGELOG.md#v120
Added support for listing certificates based on various filter criteria.
Bug fixes, documentation and test coverage improvements, UX improvements
based on user feedback and changes to address a variety of static scan
findings (unused code, static security scanning, spelling, linting and more).
Updated to Go version 1.10
Updated baseimage version to 0.4.8
[FAB-9938] many commands can be manipulated to delete identities or affiliations
This vulnerability has a low severity because to exploit it, one would need to
access the authorization header of the requests. Using HTTPS (TLS) eliminates this
potential. We will be re-evaluating the authorization approach for the v1.3
release.
https://jira.hyperledger.org/browse/FAB-7534
none
https://github.com/hyperledger/fabric-ca/blob/master/CHANGELOG.md#v120-rc1
Added support for CRLs and attribute based access control.
Added support for dynamic configurtion of the fabric-ca-server without requiring restart.
Added capability to dynamically modify affiliations.
Bug fixes, documentation and test coverage improvements, UX improvements
based on user feedback and changes to address a variety of static scan
findings (unused code, static security scanning, spelling, linting and more).
Updated to Go version 1.9.2
Updated baseimage version to 0.4.6
none
https://jira.hyperledger.org/browse/FAB-5794
https://jira.hyperledger.org/browse/FAB-6871
https://jira.hyperledger.org/browse/FAB-7348
https://jira.hyperledger.org/browse/FAB-7465
https://jira.hyperledger.org/browse/FAB-7646
none
https://github.com/hyperledger/fabric-ca/blob/master/CHANGELOG.md#v110
Added capability to dynamically modify affiliations.
Bug fixes, documentation and test coverage improvements, UX improvements
based on user feedback and changes to address a variety of static scan
findings (unused code, static security scanning, spelling, linting and more).
Updated to Go version 1.9.2
Updated baseimage version to 0.4.6
none
none
none
https://github.com/hyperledger/fabric-ca/blob/master/CHANGELOG.md#v110-rc1
