# changelog

author: Mikhail Puzanov <mpuzanov@ripe.net> - 3.1
changelog:
  - Revert changes related to RRDP parallel processing to avoid potential deadlock. This also reverts
    all memory and metrics changes introduced in the previous release.


author: Mikhail Puzanov <mpuzanov@ripe.net> - 3.1
changelog:
  - Remove repositories from the cache if they are not referred by any certificate for long enough.
  - Make 'strict mode' enabled by `rpki.validator.strict-validation=true` more compliant with RFC 6486bis.
  - Multiple changes for improving parallel execution and fix potential deadlock.
  - Improvements in CPU and memory usage.
  - Improvements in storing ROAs in the cache to save space for big ROA objects.


author: Mikhail Puzanov <mpuzanov@ripe.net> - 3.2
changelog:
  **New minor release due to change in validation behaviour.**

  - Use strict validation (`rpki.validator.strict-validation=true`) by default,
    with minor differences from [draft-ietf-sidrops-6486bis-00](https://www.ietf.org/archive/id/draft-ietf-sidrops-6486bis-00.txt).
  - Use case insensitive URI schemes in object validations.
  - Validate that RPKI repository object was found at the correct location.
  - Stricter checking of certificate Subject and Issuer DN.
  - Decrease bootstrap time by checking rsync repositories earlier after they
    are first encountered, and by triggering revalidation when needed.
  - Fix Docker tag creation during the release.
  - Add docker image for rtr server.


author: Ties de Kock <tdekock@ripe.net> - 3.2
changelog:
  - Update of rpki-commons to 1.15: more specific check on file-names, bouncy castle update which fixes algorithm identifier mis-match.


author: Erik Rozendaal <erozendaal@ripe.net> - 3.2
changelog:
  - only fail full manifest when entries not found or hashes don't
    match, individual object validation no longer causes the complete
    manifest to fail.
  - Increased quartz threads from 10 to 32 to avoid deadlocks
  - update of rpki-commons to 1.17: strict manifest entry filename
    validation.
  - spring-boot 2.4.0


author: Ties de Kock <tdekock@ripe.net> - 3.2
changelog:
  - Change the default value for the cleanup of repositories that have not been
    referenced in a validation run to two days.
  - Change the default interval at which RRDP repositories are checked for
    updated to 10  minutes.


author: Ties de Kock <tdekock@ripe.net> - 3.2
changelog:
  - Included deprecation warning in front page.
  - Change the default value for the cleanup of repositories that have not been
    referenced in a validation run to two days.
  - Change the default interval at which RRDP repositories are checked for
    updated to 10  minutes.


author: Ties de Kock <tdekock@ripe.net> - 3.2
changelog:
  - Spring Boot 2.4.3
    This upgrades to Undertow 2.2.4.Final and prevents non-applicable warnings
    about CVE-2020-27782 in the projects dependencies. The CVE is a denial of
    service attack that is not applicable to RPKI Validator 3 because the AJP
    connector is not used.
  - Netty 4.1.59
    This upgrades to netty-handler 4.1.59 and prevents a non-applicable warning
    about CVE-2021-21290 which is a local information disclosure issue in netty
    iff the multipart decoder is used.


author: Ties de Kock <tdekock@ripe.net> - 3.2
changelog:
  No new RFCs and RIR policies will be implemented. Security updates will
  continue until the 1st of July 2021

  - Spring Boot 2.4.4
  - Updated the banner and README.md
  - Excluded xstream as a dependency (unused)
  - fix: Updated default settings to cleanup every 2 days on non-CentOS


