Release 0.14.3

Cargo.toml

@@ -1,7 +1,7 @@
 [package]
 # Note: some of these values are also used when building Debian packages below.
 name = "krill"
-version = "0.15.0-dev"
+version = "0.14.3"
 edition = "2018"
 rust-version = "1.65"
 authors = ["NLnet Labs <rpki-team@nlnetlabs.nl>"]
@@ -21,7 +21,7 @@ exclude = [
 ]
 
 [dependencies]
-backoff = { version = "0.3.0", optional = true }
+backoff = { version = "0.4.0", optional = true }
 base64 = "^0.13"
 basic-cookies = { version = "^0.1", optional = true }
 bytes = "1"
@@ -38,7 +38,7 @@ jmespatch = { version = "^0.3", features = ["sync"], optional = true }
 kmip = { version = "0.4.2", package = "kmip-protocol", features = [
     "tls-with-openssl",
 ], optional = true }
-kvx = { version = "0.9.1", features = ["macros"] }
+kvx = { version = "0.9.2", features = ["macros"] }
 # kvx = { version = "0.9.0", git = "https://github.com/nlnetlabs/kvx", branch = "lockfiles-outside-scope", features = [
 #     "macros",
 # ] }
@@ -57,8 +57,12 @@ regex = { version = "1.5.5", optional = true, default_features = false, features
 ] }
 reqwest = { version = "0.11", features = ["json"] }
 rpassword = { version = "^5.0", optional = true }
-rpki = { version = "0.17.2", features = ["ca", "compat", "rrdp"] }
-# rpki                  = { version = "0.16.0-dev", git = "https://github.com/nLnetLabs/rpki-rs", branch = "csr-ca-repo-trailing-slash", features = [ "ca", "compat", "rrdp" ] }
+rpki = { version = "0.18.0", features = ["ca", "compat", "rrdp"] }
+# rpki = { version = "0.17.3-dev", git = "https://github.com/nLnetLabs/rpki-rs", branch = "ring-0.17", features = [
+#     "ca",
+#     "compat",
+#     "rrdp",
+# ] }
 scrypt = { version = "^0.6", optional = true, default-features = false }
 serde = { version = "^1.0", features = ["derive", "rc"] }
 serde_json = "^1.0"
@@ -69,7 +73,8 @@ tokio = { version = "1", features = [
     "signal",
     "time",
 ] }
-tokio-rustls = "^0.22"
+tokio-rustls = "0.24.1"
+rustls-pemfile = "1.0.4" # needed to parse pem files for use in our HTTPS listener
 toml = "^0.5"
 unicode-normalization = { version = "^0.1", optional = true }
 url = { version = "2.3.1", features = ["serde"] }

README.md

@@ -25,7 +25,22 @@ in this [blog post](https://blog.nlnetlabs.nl/testing-the-waters-with-krill/).
 
 # Changelog
 
-## Unreleased Version
+## 0.14.3 'Temp'
+
+This release fixes a number of issues found in 0.14.0 through 0.14.2:
+
+- Use rpki-rs 0.18.0 to support builds on more platforms #1166
+- Fix aspa migration issues #1163
+- Depend on kvx 0.9.2 to ensure temp files are used properly #1160
+
+Most importantly, Krill will now use temp files for *all* data that it
+stores to avoid issues with half-written files in case the disk is full,
+or the server is rebooted in the middle of writing. This issue was introduced
+in release 0.14.0, and we recommend that all users upgrade to this version
+to avoid issues.
+
+This release also includes:
+- Updated German UI translations krill-ui/#51
 
 ## 0.14.2 'Extra, Extra, Extra!'
 

src/commons/crypto/signing/signers/kmip/signer.rs

@@ -951,7 +951,7 @@ impl From<backoff::Error<SignerError>> for SignerError {
     fn from(err: backoff::Error<SignerError>) -> Self {
         match err {
             backoff::Error::Permanent(err) => err,
-            backoff::Error::Transient(err) => err,
+            backoff::Error::Transient { err, .. } => err,
         }
     }
 }
@@ -961,7 +961,7 @@ where
     E: From<kmip::client::Error>,
 {
     if err.is_connection_error() {
-        backoff::Error::Transient(err.into())
+        backoff::Error::transient(err.into())
     } else {
         backoff::Error::Permanent(err.into())
     }