Release notes

Enforce confidential transport Set sslmode verify-full and ssl true for jdbc transport Prepare jdk10 support

Cloudformation updates Drop oracle java use openjdk-9 Add parameter WebServerAppLogAppender valid options console/elasticsearch/cloudwatch Publish linux metrics cloudwatch Kill ssh access(force run command using aws ssm) Enable awslogs (syslog,user-data,ufw,auth) logs https-only, remove support for port 80. Add aws inspector, scheduled nightly Use unattended-upgrades Enable loadbalancer logging Enable vpc flow logs Disable quicksight access for non supported regions. Add parameter WebServerAmi, recommend ebs encrypted ami based on ubuntu/images/hvm-ssd/ubuntu-xenial-16.04-amd64-server Https-only alb -> webfleet Calculate java heap size (total_mem - 1280x1024kb) "rds.force_ssl":"1" force postgres rds ssl Use DBEncryptionKmsAlias for encryption of rds htmlunit-driver 2.28.5 -> 2.29.0 htmlunit 2.28 -> 2.29

Dependency updates xerces:xercesImpl 2.11.0.SP5 -> 2.11.0-22 com.amazonaws 1.11.264 -> 1.11.268 cglib 3.2.5 -> 3.2.6 org.hibernate 5.2.12.Final -> 5.3.0.Beta1 org.apache.httpcomponents 4.5.4 -> 4.5.5 org.apache.httpcomponents:httpcore 4.4.8 -> 4.4.9 com.vaadin:vaadin-spring 3.0.0.alpha1 -> 3.0.0 postgresql jdbc 42.1.4 -> 42.2.0 com.gu:kinesis-logback-appender 1.2.0 -> 1.4.2 om.vaadin 8.2.0 -> 8.3.0.beta1 asm 6.0 -> 6.1-beta org.bouncycastle 1.58 -> 1.59 io.github.bonigarcia:webdrivermanager 2.0.1 -> 2.1.0 jboss-transaction-spi 7.6.0.Final -> 7.6.0.Final-redhat-1 net.java.dev.jna:jna-platform 4.5.0 -> 4.5.1

Aws cloudformation template available https://oss.sonatype.org/content/repositories/releases/com/hack23/cia/cia-dist-cloudformation/2018.1.20/cia-dist-cloudformation-2018.1.20.template , also provides sample data using a public rds snapshot arn:aws:rds:eu-west-1:172017021075:snapshot:cia-demo-20170711 supplied DBUsername,DBPassword need to be eris,discord23 .

Demo https://www.hack23.com/cia/

Still prototype, live demo running at https:/www.hack23.com/cia/.

Example Screenshots

Screenshots from test

Resources

Project documentation https://hack23.github.io/cia/

Github source code location https://github.com/Hack23/cia

Build server, jenkins https://www.hack23.com/jenkins/

QA report, sonarqube https://www.hack23.com/sonar/

Repository manager, nexus https://www.hack23.com/nexus/

Installing Debian/Ubuntu package

Currently only build a debian package, works with debian and ubuntu 16.04,16.10,17.04,17.10

1. Installing database(postgres) and openjdk

   $ sudo apt-get install openjdk-8-jdk postgresql pgadmin3

2. Installing Oracle JDK 9 on Ubuntu

First you need to add webupd8team Java PPA repository in your system and install Oracle Java 8 using following set of commands.

$ sudo add-apt-repository ppa:webupd8team/java
$ sudo apt-get update
$ sudo apt-get install oracle-java9-installer oracle-java8-installer oracle-java8-unlimited-jce-policy

1. Create empty database

Below description set the default username/password and database name used for development, recommend using custom credentials and update the configuration at /opt/cia/webapps/cia/WEB-INF/database.properties to define your own username/password and database name.

$ sudo su - postgres
$ psql
postgres=# CREATE USER eris WITH password 'discord';
postgres=# CREATE DATABASE cia_dev;
postgres=# GRANT ALL PRIVILEGES ON DATABASE cia_dev to eris;

1. Modify postgres setting, enable prepared transactions

Edit file "/etc/postgresql/9.6/main/postgresql.conf" set

max_prepared_transactions = 100

1. Modify postgres setting Edit file "/etc/postgresql/9.6/main/pg_hba.conf" add line

   host all all ::1/128 md5

2. Restart postgres

   $ service postgresql restart

3. Get cia debian package and

   $ wget https://oss.sonatype.org/content/repositories/releases/com/hack23/cia/cia-dist-deb/2018.1.20/cia-dist-deb-2018.1.20.deb

4. Install debian package

   $ sudo dpkg -i cia-dist-deb-2018.1.20.deb

5. Access the server at http://localhost:2323/cia/ .

Application package diagram overview

Cloudformation template diagram