eDelivery September 2022 OMB Report

Date:  

Reporting period:    to  

Project Owner (PO): DG CNECT 

Business Manager (BM): Maya Madrid

Solution Provider (SP): DIGIT

Project Manager (PM): Bogdan Dumitriu

Attendees: 

Maya MADRID (chair, MM)

Bogdan DUMITRIU (BD)

Marcio SAMPAIO (MS)

Michal PILCH (MP)

Monika KOKSTAITE (MK)

Radoslav JAKUB (RJ)

Olha KOSHCHIYENKO (OK)

Dragos SERBAN (DS)

Adrien GOHY (AG)

Kristof POPGEORGIJEV (KP)

Zsombor NAGY (ZN)

Todor TODOROV (TT)

Section 1: Project Management


Milestones Progress


Milestone TitleStart DateEnd Date% completeStatus Comments
Domibus 4.1.713/Jan/2117/Feb/21  100%

COMPLETED

Postponed from the 12th to the 17th Feb | Upgrade specific libraries to lasts possible versions to address OWASP detected threats | fix double decompressing of payloads issue
Domibus 4.1.810/Mar/2122/Jun/21100%

COMPLETED

bug fix release | CXF library upgrade

Release currently on hold due to a dependency with a upcoming release of a 3rd party library


Domibus 4.1.926/Jul/2129/Jul/21100%

COMPLETED

Security fix release | 3rd Party library upgrade | OWASP detected threats 

Domibus 4.2 RC

12/Nov/1921/Sep/20100%

COMPLETED



Domibus 4.2 FR22/Sep/2017/Dec/20100%

COMPLETED

released on the 17th Dec, instead of the planned date of the 10th, due to a last minute detection of a bug
Domibus 4.2.115/Jan/2123/Mar/21

100%

COMPLETED

Postponed from the 29th Jan | Bug fix release -UUM&DS caching issue | Deletion policy extension fix | CXF library upgrade
Domibus 4.2.225/Mar/21 26/May/21100%

COMPLETED

Bug fix release | OWASP detected threats 
Domibus 4.2.323/Jul/2104/Aug/21100%

COMPLETED

Bug fix release
Domibus 4.2.423/Aug/2103/Sep/21100%

COMPLETED

Bug fix release
Domibus 4.2.5

13/Oct/21

29/Oct/21100%

COMPLETED

Bug fix release | OWASP detected threats 
Domibus 4.2.613/Oct/2117/Dec/21

100%

COMPLETED

Bug fix release
Domibus 4.2.726/Jan/2231/Jan/22100%

COMPLETED

Libraries Upgrade | OWASP detected threats 
Domibus 4.2.815/Mar/2221/Mar/22100%

COMPLETED

Bug fix release (https://ec.europa.eu/digital-building-blocks/tracker/browse/EDELIVERY-9051)
Domibus 4.2.901/Apr/2204/Apr/22100%

COMPLETED

Security fix release due to the Spring RCE library vulnerability
Domibus 4.2.10-13/Jun/22100%

COMPLETED

bug and security fix release (domain case insensitive issue | bug when Domibus accepts messages signed with key corresponding to a different party | Updated Wildfly version to 26.1.0 | Update several libraries to the latest version)


Domibus 4.2.11-24/Aug/22100%

COMPLETED

Bug fix release 

Domibus 5.0 RC

14/Sep/20

14/Mar/22100%

COMPLETED

Release to be postponed from 28/Feb/22 to a new date (see table)
Domibus 5.0 FR1/Mar/22

7/Jun/22100%

COMPLETED

Release to be postponed from 29th April to new date (see table).

Release postponed once again from the 31st May due to vulnerabilities detected in 3rd party libraries


Domibus 5.0.1

-

26/Sept/22100%

COMPLETED

Bug fix release (Correct Split & Join issue | Provide support for UUM&DS X.509 identifiers in addition to EORI (Support for CESOP project))



Domibus 5.1 RC03/May/2213/Jan/2335%

ONGOING



Domibus 5.1 FR

16/Jan/23

13/Mar/23-

NOT STARTED



SML 4.1 Acceptance12/Oct/2018/Jan/21100%

COMPLETED

Postponed from 10/Nov/20 to 18Jan/21 due to an important security enhancement that became possible due to a policy change at SNET level.

Security features and updates | Upgrade libraries to latest possible versions and fix OWASP threats


SML 4.1 Production release20/Jan/2116/Feb/21100%

COMPLETED



SML 4.2 RC01/Jul/2215/Sep/22100%

COMPLETED



SML 4.2 FR16/Sep/2214/Oct/2225%

ONGOING



SMP 4.2 RC

01/Oct/212/Jun/22100%

COMPLETED

Use EU Login for SMP console | Upgrade libraries to latest possible versions and fix OWASP threats | Security features and updates (new release dates set)

Release postponed from the 27th May due to issues detected in the final testing stages


SMP 4.2 FR26/Jun/2130/Jun/22100%

COMPLETED



eDelivery Access Point - e-TrustEx Backend Plugin 1.3 RC04/Feb/2229/Apr/22100%


COMPLETED


 Security enhancement  | Support for Domibus 4.2.X | Bug fixes (Release postponed from the 31st March to 1st April)
eDelivery Access Point - e-TrustEx Backend Plugin 1.3 FR1/May/22TBD-

NOT STARTED

To be released following the UAT to be conducted by the DECIDE project


eDelivery Access Point - e-TrustEx Backend Plugin 2.0 RC2/May/2218/Nov/2225%

ONGOING

Plugin upgrade to support Domibus 5.0

eDelivery Access Point - e-TrustEx Backend Plugin 2.0 FR3/Oct/22TBD-

NOT STARTED

Plugin upgrade to support Domibus 5.0


Project Progress 

DOMIBUS:

  • Domibus 4.2.11 version released on the (bug fix and 3rd party libraries updates)
  • Domibus 5.0.1 version a bug fix release (Correct Split & Join issue | Provide support for UUM&DS X.509 identifiers in addition to EORI (Support for CESOP project)) released on the  
  • Domibus 5.1 RC development activities are ongoing.


SMP:

  • No activities foreseen


SML:

  • SML 4.2 RC released on the   
  • SML 4.2 FR activities are ongoing, release foreseen for the  


eDelivery Access Point - e-TrustEx Backend Plugin: 

  • eDelivery Access Point - e-TrustEx Backend Plugin 2.0 RC (Plugin upgrade to support Domibus 5.0) activities are ongoing.
  • Due to operational issues, it has been requested to equate the implementation of several RfCs by the EUSEND support team, if the confirmation from SecGen is received the work on version to 2.0 will be put on hold, and the RfCs implementation will be initiated. leading to a 1.3.4 version of the plugins.  Version 1.3.4 estimated conclusion date would be the and 2.0 would be pushed to mid-January.


eDelivery Conf testing platform:

  • PoC  in the context of the migration from the current custom build conformance testing platform to the EC GITB (generic interoperable test bed) platform concluded. 
  • Required customizations for the execution of the eDelivery AS4 conformance tests in the EC GITB implemented.
  • Migration of the existing test cases to the new EC GITB platform ongoing.
  • Recreation of the current conformance testing setup in the GITB platform expected to be concluded by the  

Section 2: Evolutive Maintenance


Change Requests

Release Calendar 

eDelivery 2022-2023 roadmap

Section 3: Support Office

Incident Management :


 In terms of created tickets and JIRA’s, we see that August 2022 is similar to July 2022. The higher number of handled and resolved tickets is due to the fact that SO worked on the backlog of tickets in August 2022.


  • Requests for AS4 connectivity test with Cyprus post, Onnera
  • Conformance testing request for Descartes
  • List of Peppol participant ID’s sent to Peppol
  • GTC’s for CommisSign certificates were signed to all domains, except for the 2 following ones: SE-DIGG and TOOP.
  • Questions from users: Domibus (Domibus upgrade from 4.2.0 to 5.0, Domibus 5.0 installation with MySQL, question on Pmode, ), SML/SMP (participants registrations update, SMP certificate update, SMP 4.2 version installation, question on migration of 3000+ Peppol-Participant-IDs on the SMK to another SMP), BRIS (PKI certificate), DE4A (PKI certificates), ECDB (PKI certificate renewal), EDELGOVCY (PKI certificates), CiXP (certificate requests), EUDAMED (certificates request), IRI (PKI certificates requests), EUCEG (PKI certificates), TAPAS (scheduled archive batch does not work properly, high CPU consumption issue)
  • There was a total of 641 emails in the FMB. We have removed 63 emails for SML Inconsistency, 75 Run deck automation, 12 from xmatters, 30 emails from T-systems from the count, which makes a total of 461 received mails for the reporting month.


In August 2022, 55 certificates were issued: 1 UDB, 1 EUDAMED, 5 CiXP, 12 DE4A, 1 PCN, 1 EUCEG, 1 ECDB, 33 BRIS - none rejected.


Section 4: Additional Topics

Operations management:

  • No labels