0.95.0, March 06rd 2023

0.95.0, March 3rd 2023

Core:

• AcraServer:

  • Changed default tokenization settings: consistent_tokenization is now used by default for tokenization #614
  • Improved processing of packets related to transparent encryption/tokenization #628, #630, #637
  • Improved searchable encryption:
    • Added support of NotEqual/Like/ILike operators #605 , #606, #607, #609
    • Improved handling of the response_on_fail option for error cases #612
    • Added the response_on_fail option in encryptor config #618
  • Improved SQL parser:
    • Added support of non-aliased columns with aliased queries #602
    • Improved support of limit/offset for PostgreSQL #603
    • Added support of RETURNING statement for INSERT/UPDATE/DELETE #610
    • Added support of RESET packets for MySQL binary protocol #611
    • Added support of schema() functions, thanks to the new contributor @jercheng #634
  • Added new and deprecated some of existing prometheus metrics #632
    • Added the acra_decryptions_total with labels: {"status": [ "success", "fail"], "type": [ "acrastruct", "acrablock", "acrablock_searchable", "acrastruct_searchable"]}
    • Added the acra_encryptions_total with labels: {"status": [ "success", "fail"], "type": [ "acrastruct", "acrablock", "acrablock_searchable", "acrastruct_searchable"]]}
    • Added the acra_tokenizations_total with labels: {"status": [ "success", "fail"], "token_type": "{token_type}"}
    • Added the acra_detokenizations_total with labels: {"status": [ "success", "fail"], "token_type": "{token_type}"}
    • Deprecated the acra_acrastruct_decryptions_total
    • Deprecated the acra_api_encryptions_total
  • Removed building and testing Acra binaries for old golang versions: now Acra supports only the latest version of golang #624

• AcraTranslator:

  • Changed default HTTP API settings: --http_api_enable is now true by default starting from 0.96.0 #627

• AcraServer, AcraTranslator, AcraKeys:

  • Improved support of tls_ocsp_*/tls_crl_* options if the options tls_ocsp_[client|database]_*/tls_crl_[client|database]_* were not specified #617

• AcraRollback, AcraRotate:

  • Added support of TLS configuration options for connections to the database #623
  • Improved parsing of connection strings with complicated usernames #642, #643

• AcraTokens:

  • Added support of TLS configuration options for Redis storage #619

• AcraKeys:

  • acra-keys destroy command supports destroying poison record symmetric keys and keypairs, searchable and storage keypairs and symmetric keys #625
  • acra-keys destroy command supports destroying rotated key with the new flag --index=<index:int> #641. You can find examples on the documentation page
  • acra-keys import/acra-keys export supports keystore v1 #629
  • acra-keys list lists the rotated keys for keystore v1 & v2 with the new flag --rotated-keys #636. The formats of listed keys are updated. You can find examples on the documentation page/