mirror of
https://github.com/corda/corda.git
synced 2024-12-18 20:47:57 +00:00
Corda is an open source blockchain project, designed for business from the start. Only Corda allows you to build interoperable blockchain networks that transact in strict privacy. Corda's smart contract technology allows businesses to transact directly, with value.
835321bb70
Fixes DDoS attack mentioned on the Jira ticket. PR upgrades Artemis library to version 2.19.1. This is our own release of Apache Artemis library which has vulnerability fix for v2.20 applied. **_Breaking changes discovered during Artemis upgrade:_** 1. When the queue is created as temporary, it needs to explicitly be specified as non-durable. 2. By default, Artemis Client performs Host DNS name check against the certificate presented by the server. Our TLS certificates fail this check and this verification has to be explicitly disabled, see use of: `TransportConstants.VERIFY_HOST_PROP_NAME`. 3. Artemis Server now caches login attempts, even unsuccessful ones. When we add RPC users dynamically via DB insert this may have an unexpected outcome if the user with the same `userName` and `password` was not available previously. To workaround permissions changing dynamically, authorization and authentication caches had to be disabled. 4. When computing `maxMessageSize`, the size of the headers content is now taken into account as well. 5. Artemis handling of start-up errors has changed. E.g. when the port is already bound. 6. A number of deprecated APIs like: `createTemporaryQueue`, `failoverOnInitialAttempt`, `NullOutputStream`, `CoreQueueConfiguration`. 7. Log warning message is produced like: `AMQ212080: Using legacy SSL store provider value: JKS. Please use either 'keyStoreType' or 'trustStoreType' instead as appropriate.` 8. As reported by QA, Artemis now produces more audit logging more details [here](https://r3-cev.atlassian.net/browse/ENT-6540). Log configuration been adjusted to reduce such output. |
||
|---|---|---|
| .ci | ||
| .github | ||
| .idea | ||
| buildSrc | ||
| client | ||
| common | ||
| confidential-identities | ||
| config | ||
| core | ||
| core-deterministic | ||
| core-tests | ||
| detekt-plugins | ||
| docker | ||
| docs | ||
| experimental | ||
| finance | ||
| gradle/wrapper | ||
| isolated | ||
| jdk8u-deterministic | ||
| lib | ||
| node | ||
| node-api | ||
| node-api-tests | ||
| release-tools | ||
| samples | ||
| serialization | ||
| serialization-deterministic | ||
| serialization-djvm | ||
| serialization-tests | ||
| testing | ||
| tools | ||
| .dockerignore | ||
| .gitignore | ||
| build.gradle | ||
| BUILD.md | ||
| buildCacheSettings.gradle | ||
| constants.properties | ||
| CONTRIBUTING.md | ||
| CONTRIBUTORS.md | ||
| detekt-baseline-config.yml | ||
| detekt-baseline.xml | ||
| detekt-config.yml | ||
| deterministic.gradle | ||
| gradle.properties | ||
| gradlew | ||
| gradlew.bat | ||
| java8.gradle | ||
| Jenkinsfile | ||
| LICENSE | ||
| README.md | ||
| SECURITY.md | ||
| settings.gradle | ||
| sizing.sh | ||
| TRADEMARK | ||
Corda
Corda is an open source blockchain project, designed for business from the start. Only Corda allows you to build interoperable blockchain networks that transact in strict privacy. Corda's smart contract technology allows businesses to transact directly, with value.
Features
- Smart contracts that can be written in Java and other JVM languages
- Flow framework to manage communication and negotiation between participants
- Peer-to-peer network of nodes
- "Notary" infrastructure to validate uniqueness and sequencing of transactions without global broadcast
- Enables the development and deployment of distributed apps called CorDapps
- Written in Kotlin, targeting the JVM
Getting started
- Read the Getting Started documentation
- Run the Example CorDapp
- Read about Corda's Key Concepts
- Follow the Hello, World! tutorial
Useful links
- Project Website
- Mailing List
- Documentation
- Stack Overflow Tag
- Slack Channel
- Meetups
- Training Courses
Contributing
Corda is an open-source project and contributions are welcome!
To find out how to contribute, please see our contributing docs.
License
Acknowledgements
YourKit supports open source projects with its full-featured Java Profiler.
YourKit, LLC is the creator of YourKit Java Profiler and YourKit .NET Profiler, innovative and intelligent tools for profiling Java and .NET applications.