v0.14.0-rc3

This is the third release candidate for the coming 0.14.0 release. We invite all interested users to test this version, but please do not upgrade your production environment until 0.14.0 has been released.

This release adds support for the updated ASPA v1 profile (issue #1080). Existing ASPA objects will be re-issued when migrating from 0.13.1 or lower to this version. NOTE: you cannot upgrade from 0.14.0-rc1 or 0.14.0-rc2 to this release if you have existing ASPA objects.

In addition, this release introduces the following small features and fixes:

• Add traditional and simplified Chinese translations #1075
• Let the testbed automatically renew the TA manifest and CRL #1095
• Show the delete icon for AS0 ROA when there is another existing announcement #1109
• Show delete ROA button when no BGP preview is available #1139 (fixed in 0.14.0-rc2)

But, we spent the main effort in this release on improving how Krill stores its data. This will help improve robustness today and pave the way for introducing support for Krill clustering using a database back-end in a future release. For now, these issues were done:

• Improve transactionality of changes (e.g. #1076-1078, #1085, #1108, #1090)
• Remove no longer needed 'always_recover_data' function #1086
• Improve upgrade failed error: tell users to downgrade #1042
• Crash Krill if the task scheduler encounters a fatal error. #1132
• Add support for importing delegated child CAs #1133

Note that this release still uses the now outdated ASPA object syntax. We plan to make another focused release to address this immediately after 0.14.0 is released. See issue #1080.

Note that if you were running 0.13.1 as a testbed, you may have symlinked the "signer" directory to "ta_signer" to support a manual workaround for re-signing the trust anchor CRL and manifest (issue #1095). If you did, you may need to delete any surplus files and directories under "/var/lib/krill/data/ta_signer" other than the " ta " directory.