Releases: cea-sec/openwec
Releases · cea-sec/openwec
v0.3.0
Added
- Multiple Kafka output drivers that connect to the same Kafka cluster can use a single Kafka client (#155)
Changed
- Files output drivers use a single thread (for all outputs) to write to files. Multiple Files outputs can write to the same file (which was not safe before) (#155)
- A garbage collector runs regularly to close unused opened files (#155)
- Files output driver is now configured using a unique
path
value which can be customized using variables. Warning: this require a databatase migration. (#156)
Fixed
- Added a 'WWWW-Authenticate' header when sending a HTTP response with status 401 (#154)
Deprecated
- Using commands to manage subscriptions and there outputs is deprecated and will be removed in future releases. Use subscription configuration files instead. (#156)
Commits
- Fix clippy warnings assigning_clones and to_string_trait_impl by @vruello in #139
- Update libgssapi to 0.7.2 to fix panic with rust 1.78 by @vruello in #153
- Add WWW-Authenticate header in HTTP 401 responses by @vruello in #154
- Bump itertools from 0.12.1 to 0.13.0 by @dependabot in #133
- Bump roxmltree from 0.19.0 to 0.20.0 by @dependabot in #135
- Bump deadpool-postgres from 0.13.0 to 0.14.0 by @dependabot in #138
- Bump quick-xml from 0.31.0 to 0.36.0 by @dependabot in #150
- Initialize globally Files and Kafka output drivers by @vruello in #155
- Change Files driver configuration to "path" by @vruello in #156
- Windows clients do not support queries with strictly more than 256 channels by @WilliamBruneau in #162
- Bump tempfile from 3.10.1 to 3.12.0 by @dependabot in #165
- Bump openssl from 0.10.64 to 0.10.66 by @dependabot in #158
- Bump GitHub actions by @vruello in #168
- Prepare for release v0.3.0 by @vruello in #157
- Fix package build in release workflow by @vruello in #169
Full Changelog: v0.2.1...v0.3.0
v0.2.1
What's Changed
- Bump deadpool-postgres from 0.12.1 to 0.13.0 by @dependabot in #128
- Bump env_logger from 0.10.2 to 0.11.3 by @dependabot in #129
- Bump base64 from 0.21.7 to 0.22.0 by @dependabot in #130
- Bump redis from 0.24.0 to 0.25.3 by @dependabot in #127
- Add Dockerfile by @vruello in #126
- Bump version to v0.2.1 by @vruello in #131
Full Changelog: v0.2.0...v0.2.1
v0.2.0
Added
- Add OpenWEC node name (if configured) in JSON format output (#2)
- Make ContentFormat of subscriptions configurable (#1)
- Add IgnoreChannelError option to subscriptions (#6)
- Add Kerberos principals filter to subscriptions (#18)
- Add a setting to configure
heartbeats_queue_size
(#37) - Add Tls support for encryption and authentication (#36)
- Add support for output events to redis list (#45)
- Add TCP keepalive settings (with sensible defaults) in server settings (#56)
- Add support for output events to unix domain socket (#60)
- Add configuration files for subscriptions coming with two openwec cli subcommands (
subscriptions load
andsubscriptions skell
) (#108) - Add
cli.read_only_subscriptions
setting to disable the cli features which edit subscriptions (exceptsubscriptions load
) (#108) - Add
RawJson
format which enables to retrieve events in raw format while also getting the metadata added by OpenWEC (#108) - Add the subscription revision in OpenWEC events metadata (#108)
- Add
locale
anddata_locale
subscriptions parameters (#108) - Add support for Proxy Protocol to allow openwec to be used behind a layer 4 load balancer whilst preserving the client IP address and port. (#108)
- Add Nxlog format (#124)
Changed
- Server log responses payload in TRACE level (#37)
- Remove
OperationID
from responses because we don't support "Robust Connection" (#37) - Clear in-memory subscriptions when a SIGHUP signal is received, resulting in all file descriptors used by subscriptions being closed (#37)
heartbeats_queue_size
now defaults to 2048 instead of 32 (#37)- Breaking change: Keytab file path must be specified only once for all collectors (using Kerberos authentication)
- A malformed event will no longer stop the event stream (for a computer/subscription) because formatters are not allowed to fail. In problematic cases, some work is done to try to recover the raw data of the event, and an
OpenWEC.Error
field is added (in the JSON formatter) to help catch the problem (#47) - Breaking change: Split access and server logs. Configuration file format has been updated. (#52)
- Ensure that openwecd shutdowns gracefully even if hyper server is not responding (#65)
- Improve the logging of failed Kerberos authentications: missing authorization header warning is now in DEBUG level (#65)
- Rework output drivers and output formats architecture (#108)
- Change the outputs storage format in database (#108)
- Rework the import/export format to enable compatibility between OpenWEC versions (#108)
- Each subscription has now two "versions": a public one sent to clients (derived from subscription parameters) and a private one used for synchronization between openwec nodes (#108)
Fixed
- Fixed an issue that could result in an inconsistent state when a client unexpectedly closes an HTTP connection.
New Contributors
- @JTKU made their first contribution in #36
- @dvas0004 made their first contribution in #45
- @MrAnno made their first contribution in #60
- @satta made their first contribution in #92
Full Changelog: v0.1.0...v0.2.0