2.0.0-rc1
Pre-release
Pre-release
Added
- The new
endorsementconfiguration entry lets operators set the desired TLS certificate endorsement, either service-endorsed or node-endorsed (self-signed), for each network RPC interface of a node, defaulting to service-endorsed (#2875). - A new governance action
request_ledger_chunkto request the creation of a ledger chunk at the next signature (#3519).
Changed
- Node RPC interfaces do not transition anymore from node-endorsed to service-endorsed TLS certificates but are fixed to a single configured type. While a given endorsement is not available yet (typically at start-up for service-endorsed certificates) the interface rejects TLS sessions instead of defaulting to a node-endorsed certificate (#2875).
- Add request details with additional URL components to JS + TS API:
request.url,request.route,request.method,request.hostname(#3498). cchostcan now run both SGX and virtual enclave libraries.cchost.virtualis no longer needed, and has been removed (#3476).
Dependencies
- Upgraded Open Enclave to 0.17.6.