0.91.0, December 16th 2021

0.91.0, December 16th 2021

Core:

• AcraWebConfig, AcraAuthManager:
  • Have been deprecated and not supported anymore #456. The following changes have been made:
    • removed docker/acra-authmanager.dockerfile, docker/acra-webconfig.dockerfile files.
    • removed acra-webconfig and acra-authmanager from docker/acra-build.dockerfile file that is base image for all
      other service's images.
    • removed acra-webconfig and acra-authmanager from all docker/docker-compose.*.yml files.
    • reserved event codes for log entries in range [550, 558] related to AcraWebConfig.
• AcraConnector:
  • Has been deprecated and will be removed in the next releases. AcraServer and AcraTranslator will accept only direct TLS. See Transport security/TLS.
    connections from applications.
  • Removed mentions and usage from acra-engineering-demos.
• AcraKeymaker:
  • Some keys can be configured without ClientID #454.
  • Removed --generate_acrawebconfig_keys flag according to AcraWebConfig/AcraAuthManager deprecation #456.
• AcraKeys:
  • read command supports symmetric encryption keys with ClientID and ZoneID #472.
  • generate command:
    • supports rotation for symmetric encryption keys with ZoneID #472.
    • deprecates next flags: --acraconnector_transport_key, --acraserver_transport_key, --acratranslator_transport_key.
    • removed --acrawebconfig_symmetric_key flag according to AcraWebConfig/AcraAuthManager deprecation #456.
  • Improved handling CLI parameters related to Redis #459.
• AcraServer:
  • Removed --auth_keys parameter according to AcraWebConfig/AcraAuthManager deprecation #456.
  • Removed /loadAuthData, /getConfig, /setConfig endpoints from HTTP API according to AcraWebConfig/AcraAuthManager deprecation #456.
• AcraTranslator:
  • Accepts POST HTTP request method additionally to GET for v2 API. Method GET marked as deprecated and warns with log message.
    Deprecated HTTP GET method was used. Please use HTTP POST method instead. if was used #466.

Infrastructure:

• Build binaries with -tags netgo flag, that forces usage of Go resolver to solve issues related to resolving hostnames.
  between Docker containers. Updated acra-build.dockerfile used as base image for all cossacklabs/acra-* images (#452).
• Added missing parameter --keystore=v1 for existing docker-compose files that caused errors (#452).

Documentation:

• Has been updated :)
• Improved guide about integration AcraTranslator into infrastructure.
• Extended description for AcraTranslator's HTTP API.

Example projects and demos:

• Python examples: now work with TLS connections to
  AcraServer/Database. Also has been updated sqlalchemy version and binary column type from Binary to LargeBinary #463.
• acra-engineering-demos don't illustrate AcraConnector usage anymore. All applications and services connect to AcraServer directly.