Product Documentation

Fixes and Changes in SAKA 4.13.0

#

Explanation

RFE-205

Update glassfish and mysql aliases to payara and mariadb equivalents

All aliases, allowed 'strongauth' user sudo commands, and other references to older `glassfish` and `mysql` in scripts have been changed to `payara` and `mariadb` equivalents, respectively.

 

The 'strongauth' user will now be able to run the following `systemctl` commands along with the original `sudo service ... ` commands.

sudo systemctl start/stop/restart payara
sudo systemctl start/stop/restart mariadb
sudo systemctl start/stop/restart sladp

RFE-206

Migrate SKFS to Jakarta Enterprise Edition (JEE) 10

All SAKA modules have been updated to use Jakarta EE, which entails replacing almost all `javax` dependencies (with some exceptions listed here) with the `jakarta`-equivalent dependencies for both api and web-api.

Other minor changes (that have no affects on the SAKA from an API standpoint) have been made to ensure a smooth Jakarta EE transition such as updates to persistence (JPA) files, XSD files, WSDL files, soap stubs, serialization, and generated package names.

NOTE: If existing applications are connecting to any of the SOAP endpoints, regenerate any soap stubs used by clients when upgrading to SAKA version 4.13.0.

RFE-207

Update MariaDB to version 11.4.2

MariaDB has been upgraded from version 10.6.8 to 11.4.2.

 

This newer version of MariaDB now highly recommends using `mariadb` commands as a replacement to the conventional `mysql` commands. As such, some changes have been made in RFE-205 to apply this recommendation to the appliance.

 

In addition to upgrading MariaDB, the MariaDB java client has been upgraded from 2.2.6 to 3.4.0.

RFE-210

Change SAKA default JDK version from JDK 11 to JDK 21

With the OpenJDK 11 reaching end of life later this year, the StrongAuth KeyAppliance (SAKA) software has been upgraded to use OpenJDK 21 by default - (version 21.0.3.0.9-1 at the time of release).

RFE-211

Update Payara to version 6.2024.4

Payara has been upgraded from version 5.2021.6 to 6.2024.4.

 

While the new Payara software does not have any mention of changing commands like in RFE-207, the SAKA software has used "Payara" and "GlassFish" interchangably in documentation, commands, scripts, and code. As a step in the right direction, any aliases, commands, or references to `glassfish` in scripts have been replaced with `payara` in RFE-205.

BUG-100

Fix TPM_MFR check failing in HSM environments

Fixed a bug that had been introduced with RFE-174, where the install script would exit prematurely when installing SAKA on an appliance with a HSM during the TPM certificate check.

BUG-102

Fix protecttoolkit version differences in SAKA install

Fixed an issue where the SAKA install script made some assumptions about versions for protecttoolkit, a utility bundled with Thales ProtectServer HSM. This has now been changed to a variable in the installation script: “CRYPTOKI_VER”, defaulted to 7.

BUG-103

Fix update query in HMAC key rotation

Fixed the update query that retires HMAC keys which had an error in SQL syntax.

 

Click here for StrongKey FIDO Server (SKFS) release notes.