Upgrading from v0.6.2 can use a rolling update.
Until every node runs v0.6.3, a v0.6.2 node can still acquire a cell whose ownership record was lost and start it empty.
- Outbound TLS no longer trusts emSign ECC Root CA - G3, and it rejects any certificate chain through one of the eight eMudhra intermediate CA certificates whose private keys are public.
- rustls 0.23.46 fixes GHSA-2mjx-qc3c-rqvc, where a TLS 1.3 handshake message was accepted across an encryption level boundary.
- A node refuses to acquire a cell whose ownership record (
cells/<cell>/own.json) is missing while its LTX is still in the bucket, instead of starting the cell at epoch 1 with an empty database. Requests that need the record fail, and the node logscelld ownership record lostat most once every 10 seconds per cell. The guarantees documentation describes how to restore the record.
Issues fixed:
- #293: Outbound TLS distrusts the compromised eMudhra CA certificates (webpki-roots 1.0.10, rustls-webpki 0.103.16).