Commit Graph

9969 Commits

Author SHA1 Message Date
Adel El-Beik
4638df0a69
Merge pull request #7252 from corda/cc/release/os/4.10/ent-7034/upgrade_apache_commons_text
ENT-7034 - Upgraded shiro and apache commons-text, to address security issues.
2022-10-18 09:43:30 +01:00
Rick Parker
b29713d7b9
ENT-6947 Intern common types to reduce heap footprint (#7239)
ENT-6947: Implement interning for SecureHash, CordaX500Name, PublicKey, AsbtractParty and SignatureAttachmentConstraint, including automatic detection of internable types off companion objects in AMQP & Kyro deserialization.  In some cases, add new factory methods to companion objects, and make main code base use them.

Performance tested in performance cluster with no negative impact visible (so default concurrency setting seems okay).

Testing suggests 5-6x memory saving for tokens in TokensSDK in memory selector.  Should see approx. 1 million tokens per GB or better (1.5 million for the tokens we tested with).
2022-10-18 09:28:41 +01:00
Chris Cochrane
64d31d3fb3
Upgraded shiro and apache commons-text, to address security issues. 2022-10-17 17:44:32 +01:00
Adel El-Beik
3238638f22
Merge pull request #7251 from corda/adel/ENT-6975
ENT-6975: Updated docker jdk version to 345 for zulu ubuntu and 8u342…
2022-10-17 16:51:44 +01:00
Adel El-Beik
c23f74bc3f ENT-6975: Updated docker jdk version to 345 for zulu ubuntu and 8u342-al2 for amazon corretto. 2022-10-14 12:09:34 +01:00
Adel El-Beik
670c7d49c1
Merge pull request #7249 from corda/cc/os/4.10/ent-6903/revert_netty_version
ENT-6903 - Reverted netty back to 4.1.77.Final
2022-10-06 15:02:03 +01:00
Chris Cochrane
1ec93f01e1
Reverted netty back to 4.1.77.Final 2022-10-06 12:33:36 +01:00
Chris Cochrane
0ab4ac94c8
ENT-6903 - address security issues reported by Snyk (#7244)
ENT-6903: Update versions of BC, Shiro, Netty okhttp
Also updated platform version to 12.
2022-09-30 17:49:21 +01:00
Adel El-Beik
70c9bbc30a
Merge pull request #7243 from corda/cc/os/4.10/ent-6856/tls_handshake_failure_retry
ENT-6856 - Do not black-list AMQP targets that suffer a handshake failure
2022-09-13 16:27:27 +01:00
Chris Cochrane
5ca5b8d096
Do not black-list AMQP targets that suffer a handshake failure 2022-09-13 11:41:19 +01:00
Ronan Browne
242d7d45c5
Merge pull request #7241 from corda/knguyen/INFRA-1856/update_pr_scanner_version
INFRA-1856: Update pr scanner version
2022-09-12 08:57:23 +01:00
Khoi Nguyen
f24fa96a53 INFRA-1856: Update pr scanner version
* Updated version use by pr scanner to v1.6.1
2022-09-09 16:20:56 +01:00
Jan Szkaradek
6f32d3d369
added modules for snyk scanning (#7231) 2022-09-02 14:17:53 +02:00
Jan Szkaradek
19c8dd5cfb
added modules for snyk scanning (#7232) 2022-09-02 14:17:31 +02:00
Jan Szkaradek
cb42ae2980
added modules for snyk scanning (#7233) 2022-09-02 14:17:03 +02:00
Jan Szkaradek
ea9f29e0bd
added modules for snyk scanning (#7234) 2022-09-02 14:16:39 +02:00
Jan Szkaradek
c89ce8e29d
added modules for snyk scanning (#7235) 2022-09-02 14:16:11 +02:00
Jan Szkaradek
eb50c8d22e
added modules for snyk scanning (#7236) 2022-09-02 14:15:36 +02:00
Ronan Browne
0ca969913a
Merge pull request #7229 from corda/jansz/INFRA-1844/snyk-scan-capsule-setup-4.10
INFRA-1844 Changed Snyk scan to check only the subprojects of node
2022-08-23 09:53:19 +01:00
Ronan Browne
8afcf57e38
INFRA-1844: tidy up and expand scanning of projects 2022-08-22 19:28:37 +01:00
Ronan Browne
1e5b18c3b7
NOTICK: scan runtime classpath 2022-08-19 14:22:32 +01:00
Adel El-Beik
ed94752680
Merge pull request #7228 from corda/cc/ent-6913/kdocs_update_quick_rpc
ENT-6913 - Updated KDoc for quick RPCs
2022-08-18 17:21:17 +01:00
JanSzkaradek
293af38e28 changed snyk scan target 2022-08-18 15:58:17 +01:00
Chris Cochrane
14e2ef3478
Updated KDoc for quick RPCs 2022-08-18 13:02:20 +01:00
Viktor Kolomeyko
6d0875076f
Merge pull request #7225 from corda/cc/merge/os-4.9/os-4.10/01-Aug-2022
ENT-6885 - cc/merge/os 4.9/os 4.10/01 aug 2022
2022-08-01 17:43:54 +01:00
Chris Cochrane
877e00f8d3
Fwd-merge from OS-4.9 2022-08-01 13:00:57 +01:00
Chris Cochrane
878f0bba8b
ENT-6885: Added build option to specify the version of Apache commons-configuration2 (#7224)
Added a build.gradle option to specify the version of Apache commons-configuration2 to build with, overriding whatever version is pulled in by Artemis Server.
This is to address Nexus security vulnerability reported for Apache commons-configuration2 v2.7.

This change was previously applied in Ent-4.9 and was shown to remove the critical security issues reported by Nexus. See [PR-4652](https://github.com/corda/enterprise/pull/4562) for more info about that.

The Corda jar was built locally and then scrutinised, revealing that it had Apache commons-configuration2 v2.8.0 included within.
2022-07-29 17:33:13 +01:00
Ronan Browne
f9b8af85c2
Merge pull request #7223 from corda/add-snyk-scan-4.10
INFRA-1805 Add snyk scan 4.10
2022-07-29 17:43:34 +02:00
ronanbrowne88
212cd2214c CORE-4769 add snyk scan open source 4.4 2022-07-29 09:30:16 +01:00
ronanbrowne88
cc929e3b5b INFRA-1805 add snyk scanning to corda os 4.4 2022-07-29 09:25:32 +01:00
Ronan Browne
24c3e53435
Merge pull request #7222 from corda/add-snyk-scan-4.9
INFRA-1820: add snyk scanning to 4.9
2022-07-28 09:25:09 +02:00
ronanbrowne88
8cf512e6e5 CORE-4769 add snyk scan open source 4.4 2022-07-27 21:41:25 +01:00
ronanbrowne88
8644ab38ff INFRA-1805 add snyk scanning to corda os 4.4 2022-07-27 21:40:44 +01:00
Ronan Browne
aff501fadb
Merge pull request #7221 from corda/add-snyk-scan-4.8
INFRA-1820 Add snyk scan 4.8
2022-07-27 18:41:36 +02:00
ronanbrowne88
d757682291 CORE-4769 add snyk scan open source 4.4 2022-07-27 12:49:53 +01:00
ronanbrowne88
b1afd88f13 INFRA-1805 add snyk scanning to corda os 4.4 2022-07-27 12:48:39 +01:00
Ronan Browne
89a4259c78
Merge pull request #7220 from corda/add-snyk-scan-4.7
INFRA-1805: Add snyk scan 4.7
2022-07-27 13:47:31 +02:00
ronanbrowne88
9425bb5c19 INFRA-1697 minor tidy up 2022-07-26 18:15:01 +01:00
ronanbrowne88
e4a19f4622 INFRA-1805 add snyk scanning to corda os 4.4 2022-07-26 18:11:51 +01:00
Ronan Browne
0b26ffa300
Merge pull request #7219 from corda/add-snyk-scan-4.6
INFRA-1805 Add snyk scan to 4.6 release job
2022-07-26 19:11:05 +02:00
ronanbrowne88
cd577afcd9 CORE-4769 add snyk scan open source 4.4 2022-07-26 16:06:05 +01:00
ronanbrowne88
121e67aa11 INFRA-1805 add snyk scanning to corda os 4.4 2022-07-26 16:06:05 +01:00
Adel El-Beik
ffc843b64d
ENT-6882: Upgraded shiro-core to 1.9.1. (#7217) 2022-07-13 14:40:55 +01:00
Ronan Browne
59775837a1
Merge pull request #7216 from corda/add-snyk-scan-4.5
INFRA-1805: Add snyk scan to 4.5 OS stream
2022-07-12 18:44:32 +02:00
Viktor Kolomeyko
c6197bbfaf
ENT-6784: Change Artemis Server logging to WARN (#7215) 2022-07-12 15:06:55 +01:00
ronanbrowne88
12bbf98de2 CORE-4769 add snyk scan open source 4.5 2022-07-12 13:06:02 +01:00
Ronan Browne
1b18f793ec
Merge pull request #7214 from corda/add-snyk-scan-4.4
INFRA-1805: Add snyk scan to 4.4 OS stream
2022-07-12 14:03:02 +02:00
ronanbrowne88
e35b755546 CORE-4769 add snyk scan open source 4.4 2022-07-11 22:01:25 +01:00
ronanbrowne88
d669d39e64 INFRA-1805 add snyk scanning to corda os 4.4 2022-07-10 19:33:37 +01:00
Chris Cochrane
54fdd12a2d
ENT-6866 support quick RPCs that are not processed via the RPC thread pool (#7213)
* ENT-6866 support quick RPCs that are not processed via the RPC thread pool
2022-07-07 12:33:51 +01:00