Version 6.3.0 (Beta)

Applicability Statement 3 (AS/3)

  • Added support for the Applicability Statement 3 (AS/3) file transfer protocol. The AS3 tasks work with the existing GoAnywhere FTP/S server as the message transport mechanism.
    • Added a new AS3 Resource for defining partner information, such as IDs, authentication, certificates, etc...
    • Added a new Create AS3 Message File task for generating messages to be sent to a trading partner.
    • Added a new Process AS3 Message task for processing messages received from a trading partner.
    • Added a new Create AS3 MDN task used to generate the Message Disposition Notifications, or receipts, to be sent back to the trading partner after a message is received.
    • Added a new AS3 Message Integrity Check task that generates the message digest for nonrepudiation checks.

EDI X12 and EDIFACT Data Translations

  • Added the ability to edit EDI X12 and EDIFACT Transaction Set definitions.
  • Added support for Network Share files in the Read EDI X12 and Read EDIFACT tasks.
  • Updated references of 'X12' to 'EDI X12' in the Read and Write EDI X12 tasks.
  • Removed the invalid 'Add Segment' option from group menus in the Write EDI X12 and Write EDIFACT tasks.

User Authentication

  • Added support for multiple SAML IDP configurations that are now defined per HTTP/S listener. Each HTTP/S listener can have a unique SAML IDP configured for handling authentication of users that access that endpoint.
  • Added a new login routing policy that can be used to dynamically determine how admin and web users authenticate based on their user name.
  • Added the ability for Admin Users to authenticate using digital X.509 certificates.

Language Support

  • Added support for the Dutch language in the Admin Client and Web Client.
  • Added support for the Italian language in the Admin Client and Web Client.
  • Added missing translated messages when configuring an Admin User Group.
  • Enhanced German translations for the Admin Client.

Other Enhancements

  • Added new global SSL/TLS security configuration options to enforce client and server certificate validation.
    • Added a new verification check for X.509 CA certificate Basic Constraints.
    • Added support for Certificate Revocation Lists (CRLs) verification for all SSL/TLS connections.
    • Implemented new certificate extended key usage validation for server authentication, client authentication, and email encryption and signature certificates.
    • Added a date validity check to ensure certificates are valid and not expired.
    • Added user name and email SAN/DN validation for Admin Users and Web Users that authenticate using digital X.509 certificates.
  • Added process upon startup to rotate the Agent Server Certificate if it expires within one year.
  • Added a Software Identification (SWID) tag.
  • Added the ability to specify a custom configuration directory during installation on Windows, Linux, and Unix operating systems.
  • Added support for encrypting the shared secret password in the gateway.xml configuration file.
  • Added support for encrypted key store passwords in the server.xml of the embedded Tomcat webserver.
  • Added the ability to define the encryption sub key algorithm and size for PGP keys.
  • Enhanced clustering communication to use stronger encryption.
  • Enhanced clustering communication to use external source for authentication tokens.
  • Added the ability to run upgrades using a signed executable (exe) upgrade file for Windows installations
  • Improved the performance of event ID generation for Service Audit Logs.

Other Updates and Fixes

  • Upgraded Apache Tomcat from version 7.0.94 to 7.0.96.
  • Updated JSTL libraries from version 1.2.0 to 1.2.3.
  • Updated the AWS S3 libraries from version 1.11.14 to version 1.11.631.
  • Updated the JGroups API from version 3.3.3 to 4.1.2.
  • Upgraded the Netty library from version 4.1.33 to 4.1.42.
  • Upgraded Jackson Databind, Core, and Annotations libraries from version 2.9.9 to 2.10.1.
  • Upgraded PostgreSQL JDBC library from version 9.4.1212 to version 42.2.7.
  • Upgraded the Apache HTTP Client libraries from versions 4.5.2 to version 4.5.3.
  • Upgraded the Apache POI Excel libraries from version 3.17 to version 4.1.1.
  • Upgraded Apache Commons File Upload library from version 1.3.3 to 1.4.
  • Upgraded the embedded Apache Derby database from version to version
  • Upgraded the UnboundID LDAP SDK from version 4.0.5 to 4.0.11.
  • Removed the dom4j XML parsing library as it was no longer needed.
  • Fixed a potential cross-site scripting issue on the Compose page for Secure Mail.
  • Fixed an issue where preferred algorithms weren't listing correctly when adding a PGP key pair in KMS.
  • Fixed an issue where the version number in the Write EDI X12 task was being written improperly.
  • Fixed an issue when using AddWebUserIP or RemoveWebUserIP GACMD commands would inadvertently remove web groups from the web user.
  • Fixed an issue with REST APIs where an invalidated session ID was being returned to client.
  • Fixed an issue where the same Project or Trigger SLA can fail when processing at the same time in certain situations.
  • Fixed an issue with formatting of the 'Last Updated' label on the System Resources tab.