Adaptris

Interlok 4.8.0

Wed, 26 Apr 2023 00:00:00 +0000

Interlok 4.8.0 has reached GA. It is now available for download.

The 4.8.0 release is a small release that focused on some dependency upgrades and some initial work concerning Interlok supporting Java 17 in a future release.

The formal change log can be found here

Interlok 4.7.0

Wed, 01 Feb 2023 00:00:00 +0000

Interlok 4.7.0 has reached GA. It is now available for download.

The 4.7.0 release is a small release that focused on some dependency upgrades.

The formal change log can be found here

Interlok 4.6.0

Fri, 04 Nov 2022 00:00:00 +0000

Interlok 4.6.0 has reached GA. It is now available for download.

Interlok improvements include:
- interlok-elastic now has an initial implementation of the elastic search 7 SDK named interlok-elastic-sdk. This has been introduced as the elastic High Level Rest API is deprecated now in favour of the SDK API.
- interlok-azure has had many improvements; including added support for the search parameter in the O365MailConsumer and improvements to working with attachments from the multi payload message.
- The UI Component Search has been improved so it doesn’t require a connection to a hosted server to work, it has been refactored to use html, js and json instead of an elastic search server.

The formal change log can be found here

Interlok 4.5.0

Fri, 01 Jul 2022 00:00:00 +0000

Interlok 4.5.0 has reached GA. It is now available for download.

The 4.5.0 release is a small release that focused on some dependency upgrades.

The formal change log can be found here

Interlok 3.12.0.3

Wed, 06 Apr 2022 00:00:00 +0000

Interlok 3.12.0.3 has reached GA.

Version 3.12.0.3 is a mini release, which was published in December 2021. It includes a few bug fixes as well as added deprecation warnings. The latter eases migrating from the major version 3.x to 4.x. It is therefore strongly recommended to first upgrade to 3.12.0.3 before embarking on an upgrade to 4.x.

The formal change log can be found below for the respective versions released after 3.12.0, leading up to 3.12.0.3:

This post contains guidance on how to upgrade to 3.12.0.3.

The versions from 3.12.0.1 onwards don’t have installers, and only affect the following artifact jars since they are built from the same multi-module repository: interlok-boot.jar, interlok-client.jar, interlok-client-jmx.jar, interlok-common.jar, interlok-core.jar, interlok-core-apt.jar, interlok-logging.jar.

How to upgrade to version 3.12.0.3 depends on the way you build and deploy Interlok. Options include:

If using Gradle then simply build again using the updated V3 parent, which now refers to 3.12.0.3.
Update your dependency tree to use com.adaptris:interlok-core:3.12.0.3-RELEASE.
If installing manually, first install 3.12.0 as usual and then replace all the respective 3.12.0 jars with the following respective 3.12.0.3 versions:

Make sure to also visit Apache Log4j Security Vulnerabilities, which will help verify that the late-2021 Log4J vulnerability is also fully addressed.

Interlok 4.4.0

Wed, 02 Mar 2022 00:00:00 +0000

Interlok 4.4.0 has reached GA. It is now available for download.

The 4.4.0 release is a small release that focused on some dependency upgrades.

Note: Log4j provides support for JSR 223 scripting languages to be used in some of its components. As of Log4j 2.17.2 the languages to be supported must be specified as a comma separated list in the log4j2.Script.enableLanguages system property. Please refer to the Apache manual for the latest advice.

The formal change log can be found here

Apache Log4j Security Vulnerabilities

Tue, 14 Dec 2021 00:00:00 +0000

You may have heard that there has been a recently discovered vulnerability in Log4j 2. Are you affected? How does it work? and how do you fix it?

The vulnerability, named ‘CVE-2021-44228’, has the highest possible severity rating of 10. You can refer to this page on the apache.org site for full details concerning the Apache Log4j 2 security vulnerabilities.

Are you affected?

All versions of Log4j2 prior to 2.15.0 are affected. To test your version of Log4j2, you’ll need to decompress (with a standard zip tool) all jar files starting with log4j.* and view the /META-INF/MANIFEST.MF file.

You will probably see a line something like this:

Log4jReleaseVersion: 2.14.1

How does it work?

An attacker would need to have Log4j2 log a particularly formatted string. Log4j2 would then perform a lookup on this object allowing a remote code execution exploit.

How to fix it?

For Interlok users, we re-released Interlok 4.3.0 with the latest patched Log4j2 binaries. If you downloaded Interlok 4.3.0 before the 4th of January 2022, you should re-download. All 4.x users should upgrade to the latest release.

Note, if you’re currently a 3.x user, then there are configuration changes to upgrade to 4.x.

If you’re using the interlok-build-parent both the v3 and v4 build.gradle have been upgraded to use the latest patched Log4j2 binaries. You should rebuild and redeploy.

If you cannot upgrade, then the best solution is to manually patch all java libraries that start “log4j” in the “./interlok/lib/” and download the latest versions from maven, replacing the older libraries.

For Interlok, these java libraries would be (including download link for the latest patched versions);

log4j-api.jar - 2.17.1 version
log4j-core.jar - 2.17.1 version
log4j-slf4j-impl.jar - 2.17.1 version
log4j-1.2-api - 2.17.1 version

Alternatively, if you’re running log4j versions 2.10.0 - 2.14.x, then you can disable these lookups by adding the following JVM switch;

log4j2.formatMsgNoLookups=true

For Interlok users that would mean modifying the start script to include the new switch:

java -Dlog4j2.formatMsgNoLookups=true -jar ./lib/interlok-boot.jar

Interlok 4.3.0

Mon, 06 Dec 2021 00:00:00 +0000

Interlok 4.3.0 has reached GA. It is now available for download.

Interlok improvements include:
- There is a new ‘Interlok Component Search’ feature in our documentation allowing you to discover all our configurable components
- A new service collection editor has been added to the Config Page that changes the nested display of services in the list container (needs the User Preference ‘enable technical preview features’ to be enabled)
- UI Templates now display the list of required optional components to use the given template
- New documentation page that explains how to auto register an adapter to remote UI Dashboard
- The Solace JCSMP has had many improvements, including updates to use their latest API and add advanced connection/session properties; Reworking of the per-message-properties to be resolvable items, so we can use static and dynamic values; and improvements to the async event handler.
- A new command line installer is available to download
- New ‘proxy’ management component that allows you, for example, to have an API endpoint serviced by Interlok and have Jolokia enabled

The formal change log can be found here Or you can check the usual sway presentation

Interlok 4.2.0

Mon, 06 Sep 2021 00:00:00 +0000

Interlok 4.2.0 has reached GA. It is now available for download.

Interlok improvements include:
- New UI Config Page Pagination features on the channel-list, workflow-list and service-list containers
- New UI Filtering features have been added to those collection containers
- The loading time of large configurations on the UI has been cut down
- Interlok AWS S3 now allows for custom object ACLs to be set during upload operations
- Service Tester now supports testing of services within conditions
- Service Tester has been improved to allow binary files in a test-case

The formal change log can be found here Or you can check the usual sway presentation

Screenshots

UI Pagination :

Interlok 4.1.0

Tue, 22 Jun 2021 00:00:00 +0000

Interlok 4.1.0 has reached GA. It is now available for download.

Interlok improvements include:
- A new interlok-jdbc component that aims to simplify the syntax when writing SQL statements, part of its goal is to make statement-parameters redundant.
- The interlok-build-parent project has been promoted from adaptris-labs to the adaptris github organisation.
- Interlok service tester has been improved so each test you configure can have a default globally defined ‘MainSource’, making it easier to setup and re-configure.
- The Interlok service tester UI page now supports opening and publishing projects from VCS, like how the UI Config Page works.
- The Interlok UI now allows adding a new (interlok-jolokia management enabled) adapter on the dashboard page using a http jolokia url.
- Added JSON path service that uses JSON Surfer to parse JSON as a stream and extract data using JSON path syntax.
- A new ftp-recursive-consumer that will recursively descend into any sub directories it finds to consume files.
- The UI Widgets that display static data have been removed from the widgets page, and their data has been relocated to the UI dashboard information modal.
- We now offer the ability to publish metrics to Datadog and NewRelic

The formal change log can be found here Or you can check the usual sway presentation