You are viewing an old version of this page. View the current version.
Compare with Current
View Page History
« Previous
Version 31
Next »
Release Notes
Issues discovered in testing
Issues discovered in testing:
Discovered by | Issue | bb | db | nw | af |
---|
Andy | The only issue I’ve found so far is that the looping task producers emit an error to STDERR on every run. I have set up cron jobs to run the loopers daily and send us an email if there are errors, so now we’re receiving this error for every looper every day. WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by org.springframework.cglib.core.ReflectUtils$1 (file:/var/lib/duracloud/auditlog-generator.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int,java.security.ProtectionDomain) WARNING: Please consider reporting this to the maintainers of org.springframework.cglib.core.ReflectUtils$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release
This is a known issue with Spring and Java 9+. https://github.com/spring-projects/spring-framework/issues/20414 It looks like this is addressed in more recent version of the Spring framework. The workaround is to add these parameters to the JVM. --add-opens java.base/java.lang=ALL-UNNAMED --add-opens java.base/java.lang.invoke=ALL-UNNAMED |
|
|
|
|
Danny | opening duracloudsync-6.3.0-SNAPSHOT-osx-installer.app on my machine is failing (due to openjdk 13.0 security issue) . After removing the offending cask I am getting this: ![](/download/attachments/195167945/Screen%20Shot%202021-01-29%20at%209.50.31%20AM.png?version=1&modificationDate=1611939103149&api=v2)
I'm pretty sure this is a local issue, but it would be good if Nicholas Woodward can confirm that it works on his machine. |
|
|
|
|
Testing of Completed Issues
Item | bb | db | nw | af |
---|
Unable to locate Jira server for this macro. It may be due to Application Link configuration.
|
| ![(tick)](/s/h9vz60/9012/1phy4ty/_/images/icons/emoticons/check.svg) |
|
|
Unable to locate Jira server for this macro. It may be due to Application Link configuration.
|
| ![(tick)](/s/h9vz60/9012/1phy4ty/_/images/icons/emoticons/check.svg) |
|
|
Unable to locate Jira server for this macro. It may be due to Application Link configuration.
|
| ![(tick)](/s/h9vz60/9012/1phy4ty/_/images/icons/emoticons/check.svg) |
|
|
Unable to locate Jira server for this macro. It may be due to Application Link configuration.
|
|
|
|
|
Unable to locate Jira server for this macro. It may be due to Application Link configuration.
|
|
|
|
|
Unable to locate Jira server for this macro. It may be due to Application Link configuration.
|
| ![(tick)](/s/h9vz60/9012/1phy4ty/_/images/icons/emoticons/check.svg) |
|
|
Unable to locate Jira server for this macro. It may be due to Application Link configuration.
|
| ![(tick)](/s/h9vz60/9012/1phy4ty/_/images/icons/emoticons/check.svg) |
|
|
Unable to locate Jira server for this macro. It may be due to Application Link configuration.
|
| ![(tick)](/s/h9vz60/9012/1phy4ty/_/images/icons/emoticons/check.svg) |
|
|
Unable to locate Jira server for this macro. It may be due to Application Link configuration.
|
|
|
|
|
Unable to locate Jira server for this macro. It may be due to Application Link configuration.
|
|
|
|
|
Unable to locate Jira server for this macro. It may be due to Application Link configuration.
|
|
|
|
|
Unable to locate Jira server for this macro. It may be due to Application Link configuration.
|
|
|
|
|
Unable to locate Jira server for this macro. It may be due to Application Link configuration.
|
|
|
|
|
Unable to locate Jira server for this macro. It may be due to Application Link configuration.
|
|
|
|
|
Unable to locate Jira server for this macro. It may be due to Application Link configuration.
|
|
|
|
|
Unable to locate Jira server for this macro. It may be due to Application Link configuration.
|
|
|
|
|
Unable to locate Jira server for this macro. It may be due to Application Link configuration.
|
|
|
|
|
Unable to locate Jira server for this macro. It may be due to Application Link configuration.
|
|
|
|
|
Unable to locate Jira server for this macro. It may be due to Application Link configuration.
|
|
|
|
|
Unable to locate Jira server for this macro. It may be due to Application Link configuration.
|
|
|
|
|
Unable to locate Jira server for this macro. It may be due to Application Link configuration.
|
|
|
|
|
Unable to locate Jira server for this macro. It may be due to Application Link configuration.
|
| ![(tick)](/s/h9vz60/9012/1phy4ty/_/images/icons/emoticons/check.svg) |
|
|
Regression Testing
Task | bb | db | nw | af |
---|
Perform Regression Tests | Verified: UI functions across user levels and browsers, media streaming, synctool, retrieval tool, rest api To be verified: Audit, Manifest, Storage Stats, Snapshot actions |
|
|
|
Use ZAProxy to perform a security analysis
- Use a test DuraCloud account with very little content
- Start an Automated Scan
- Remove any sites not relevant to DuraCloud from the "Sites" list
- Generate an HTML and XML report and attach to this page
| ZAProxy Report (html, xml) - Medium risk:
- jquery, version 1.7.1 is vulnerable
- Low risk:
- Missing anti-CSFR tokens on login form
- Missing cookie settings (AWS cookies): HttpOnly flag, SameSite attribute, Secure flag
- Missing X-Content-Type-Options header
|
|
|
|
Build Tests
Release Actions - for each baseline (in this order): DB, DuraCloud, MC, Mill, Snapshot