2.0.0-rc1
Pre-release
Pre-release
Added
- The new
endorsement
configuration entry lets operators set the desired TLS certificate endorsement, either service-endorsed or node-endorsed (self-signed), for each network RPC interface of a node, defaulting to service-endorsed (#2875). - A new governance action
request_ledger_chunk
to request the creation of a ledger chunk at the next signature (#3519).
Changed
- Node RPC interfaces do not transition anymore from node-endorsed to service-endorsed TLS certificates but are fixed to a single configured type. While a given endorsement is not available yet (typically at start-up for service-endorsed certificates) the interface rejects TLS sessions instead of defaulting to a node-endorsed certificate (#2875).
- Add request details with additional URL components to JS + TS API:
request.url
,request.route
,request.method
,request.hostname
(#3498). cchost
can now run both SGX and virtual enclave libraries.cchost.virtual
is no longer needed, and has been removed (#3476).
Dependencies
- Upgraded Open Enclave to 0.17.6.