ISL Conference Proxy 4.4.2210.93 for Windows and Linux (2022-09-20)

ISL Conference Proxy 4.4.2210.93 for for Windows 64bit (Platform=win64, Revision=b81bbc65910e074e7c7a93d3b12fb0abf73884e0, release_date=2022-09-13, req_os_version=0x06011db1-0x7fffffff)
ISL Conference Proxy 4.4.2210.93 for for Linux 64bit (Platform=linux64, Revision=b81bbc65910e074e7c7a93d3b12fb0abf73884e0, release_date=2022-09-13, req_os_version=0x0206200000-0xffffffffff)

Modules

Administration 4.4.2210.93 (revision=b81bbc65910e074e7c7a93d3b12fb0abf73884e0, release_date=2022-09-13)
Audit 4.4.2210.93 (revision=b81bbc65910e074e7c7a93d3b12fb0abf73884e0, release_date=2022-09-13)
Authentication 4.4.2210.93 (revision=b81bbc65910e074e7c7a93d3b12fb0abf73884e0, release_date=2022-09-13)
Backup 4.4.2210.93 (revision=b81bbc65910e074e7c7a93d3b12fb0abf73884e0, release_date=2022-09-13)
Core Login 4.4.2210.93 (revision=b81bbc65910e074e7c7a93d3b12fb0abf73884e0, release_date=2022-09-13)
DNS 4.4.2210.93 (revision=b81bbc65910e074e7c7a93d3b12fb0abf73884e0, release_date=2022-09-13)
GeoIP 4.4.2210.93 (revision=b81bbc65910e074e7c7a93d3b12fb0abf73884e0, release_date=2022-09-13)
Integrator 4.4.2210.93 (revision=b81bbc65910e074e7c7a93d3b12fb0abf73884e0, release_date=2022-09-13)
ISL AlwaysOn 4.4.2210.93 (revision=b81bbc65910e074e7c7a93d3b12fb0abf73884e0, release_date=2022-09-13)
ISL Groop 4.4.2210.93 (revision=b81bbc65910e074e7c7a93d3b12fb0abf73884e0, release_date=2022-09-13)
ISL Light 4.4.2210.93 (revision=b81bbc65910e074e7c7a93d3b12fb0abf73884e0, release_date=2022-09-13)
ISL Pronto 4.4.2210.93 (revision=b81bbc65910e074e7c7a93d3b12fb0abf73884e0, release_date=2022-09-13)
Locale 4.4.2210.93 (revision=b81bbc65910e074e7c7a93d3b12fb0abf73884e0, release_date=2022-09-13)
NTP 4.4.2210.93 (revision=b81bbc65910e074e7c7a93d3b12fb0abf73884e0, release_date=2022-09-13)
PostgreSQL 4.4.2210.93 (revision=b81bbc65910e074e7c7a93d3b12fb0abf73884e0, release_date=2022-09-13)
Reports 4.4.2210.93 (revision=b81bbc65910e074e7c7a93d3b12fb0abf73884e0, release_date=2022-09-13)
SSL 4.4.2210.93 (revision=b81bbc65910e074e7c7a93d3b12fb0abf73884e0, release_date=2022-09-13)
Storage 4.4.2210.93 (revision=b81bbc65910e074e7c7a93d3b12fb0abf73884e0, release_date=2022-09-13)
System Monitor 4.4.2210.93 (revision=b81bbc65910e074e7c7a93d3b12fb0abf73884e0, release_date=2022-09-13)

Translations

administration_20220913_20220913_104933.translation
backup_20220913_20220913_104933.translation
core_login_20220913_20220913_104933.translation
integrator_20220913_20220913_104933.translation
isl_alwayson_20220913_20220913_104933.translation
isl_conference_proxy_20220913_20220913_104933.translation
isl_groop_20220913_20220913_104933.translation
isl_light_20220913_20220913_104933.translation
isl_pronto_20220913_20220913_104933.translation
reports_20220913_20220913_104933.translation
ssl_20220913_20220913_104933.translation

Translations (newer translations, released on 2022-12-08)

administration_20221206_20221206_160906.translation
backup_20221206_20221206_160906.translation
core_login_20221206_20221206_160906.translation
integrator_20221206_20221206_160906.translation
isl_alwayson_20221206_20221206_160906.translation
isl_conference_proxy_20221206_20221206_160906.translation
isl_groop_20221206_20221206_160906.translation
isl_light_20221206_20221206_160906.translation
isl_pronto_20221206_20221206_160906.translation
reports_20221206_20221206_160906.translation
ssl_20221206_20221206_160906.translation

Update availability

All updates have release date set to 2022-09-13. Your ESS will need to be same or higher to be able to update your server. This release is available to all countries except Japan.

Upgrading to new version

This are server side updates so hosted service users do not need to do anything.

Server license users please check Upgrading Server License

Improvements

[INTERNAL] ISL Conference Proxy - Core - Run translation sources through libxml parser for better checks in recorder (FEATURE) [ISLCONFPROXY-2338] More

Description
Translation sources are now run also through libxml parser to check for invalid XML.

ISL Conference Proxy - Core - Remove ISL WebStart (FEATURE) [ISLCONFPROXY-2379] More

Description
ISL WebStart was removed from downloads. Online updater will remove the program from file storage.

ISL Conference Proxy - Integrator - Register integrator/lic/user/custom/get/2 which also returns 2FA status (FEATURE) [ISLCONFPROXY-2571] More

Description
New internal webapi "internal/security/login/tfa/enabled/1" was registered which returns users 2FA status. Version 2 of existing webapi was registered: "integrator/lic/user/custom/get/2" which also reports/dumps users 2FA status. New right "read_icp_user_2fa_status" is required to read users 2FA status.

ISL Conference Proxy - Core - internal/user/login/unthrottled/2 and use a higher webtoken creation limit for integrators (FEATURE) [ISLCONFPROXY-2665] More

Description
Web session throttle with separate state/counters for integrator calls was extended. Two new settings to control the integrator web session throttling were added to /conf -> Web server -> Web Session Throttling -> Application Integrator Sessions: "Max web session per application integrator IP in 10 seconds", "Max web session application integrator penalty in seconds".

[INTERNAL] ISL Conference Proxy - Core - Use PS256 jwt alg in internal lib/tools (FEATURE) [ISLCONFPROXY-2671] More

Description
JWT signing algorithm was changed from RS256 to PS256 in internal code. This change has no impact on integrators.

ISL Light - Module - Add support for inviting guest operators (FEATURE) [ISLCONFPROXY-2757] More

Description
Support for guest operators was added to ISL Light Module. Guest operators can join session without login. When creating invite it can be required that original operator needs to allow invited operator (through popup in active session) to join session before joining. View only mode can also be set for the invited operator. Inviting to ISL AlwaysOn sessions is only possible when "Download client" option was enabled when starting session. Invitation can be modified until revoked/used. Each user can have at most 10 open invites (not revoked or used) for active sessions.
To invite guest operators user that is creating invite must have "Skip login authentication (guest operator)" permission set in /conf -> ISL Light -> Permissions. Setting is enabled by default.

ISL Conference Proxy - Core - Support mixed case names in program start URLs (FEATURE) [ISLCONFPROXY-2774] More

Description
Customization resolver was fixed to map URL program name to real program using case insensitive match.

ISL Light - Module - Expose session invites in session info (FEATURE) [ISLCONFPROXY-2797] More

Description
New webapi "isllight/session/info/4" was registered which returns basic info about opened session invites created by user for specific ISL Light session. Only sessions created by the calling user are returned. Full session info (with config) is now available through "isllight/session/invite/info/1". User can only see info of sessions that he created.

ISL Light - Module - Add separate setting for session timeout (FEATURE) [ISLCONFPROXY-2808] More

Description
New server level setting that controls ISL Light session timeout was now added to /conf -> ISL Light -> Session Management: "Timeout to terminate disconnected session (time limit in seconds)" with default value of 300 seconds. Administrator can set the time limit (in seconds) after which the session is automatically terminated when disconnected from the server (no endpoint is connected to the server). The minimum value is 60 seconds.

ISL Conference Proxy - Core - Set default moduleapp address to 127.0.0.1 (FEATURE) [ISLCONFPROXY-2813] More

Description
Old behaviour by using IPv6 for localhost address for moduleapps and downgrading to IPv4 if TCP bind does not succeed (for example on machines without IPv6 enabled), was simplified to just IPv4 by default. Devflag file "moduleapp_address_ipv6" (Use IPv6 localhost address for moduleapps) was added.

ISL Light - Module - Add endpoints status to isllight/session/info webapi (FEATURE) [ISLCONFPROXY-2814] More

Description
Tracking for ISL Light session endpoints was implemented. For each endpoint (desk and client) we track if it is connected, count number of reconnects and the time of last changed - connect/disconnect. Data is exposed in new webapi "isllight/session/info/4" and also in session details (active and history sessions).

ISL Conference Proxy - Core - Add logs for broken http event queue file (FEATURE) [ISLCONFPROXY-2830] More

Description
When corrupt/invalid file is read from http event queue new log was added that will show that file could not be read from queue. Administrator then needs to manually fix the issue (remove file, restart ICP) to resume http event sending.

ISL Light - Module - Expose (guest) session invites in session list (FEATURE) [ISLCONFPROXY-2838] More

Description
ISL Light session list was updated to expose guest session invites. Invite/transfer page was also updated to support editing of session invites, with new options: "Disable mouse and keyboard control", "Require consent to join from operator", "Skip login authentication (guest operator)".

ISL Conference Proxy - Core - Fix order of HTTP event OBJECT_CHANGED (FEATURE) [ISLCONFPROXY-2840] More

Description
In previous versions the order of HTTP events was previously not well defined. This was now redesigned, HTTP event OBJECT_CHANGED will now be strictly ordered. Every change is put into an ordered queue and duplicate sequential events will be compressed into one.

ISL Conference Proxy - Core - confproxy_server process diagnostic exit error codes (FEATURE) [ISLCONFPROXY-2843] More

Description
Diagnostic error codes with description were added to confproxy_service.log:

confproxy_server: exit 100: restart failed

(Linux) confproxy_server: exit 110: upgrade fork failed

(Linux) confproxy_server: exit 111: upgrade waitpid failed

(Linux) confproxy_server: exit 120: drop root failed

(Linux) confproxy_server: exit 121: file access permission check failed

(Linux) confproxy_server SIGKILL: signal 9: stop

(Linux) confproxy_service SIGINT: signal 2: stop

(Linux) confproxy_service SIGTERM: signal 15: stop

(Windows) confproxy_server: exit 0x30000: stop

ISL Conference Proxy - PostgreSQL - Upgrade to PostgreSQL 9.3.25 (FEATURE) [ISLCONFPROXY-2847] More

Description
PostgreSQL was upgraded to 9.3.25.

ISL Conference Proxy - Core - Handle X-Forwarded-For and X-Forwarded-Host according to recommendations (FEATURE) [ISLCONFPROXY-2850] More

Description
Handling of "X-Forwarded-For" and "X-Forwarded-Host" request headers was updated according to recommendations.

ISL Conference Proxy - Core - Add X-Islcp-Proxy-Token support to HTTP frontend (FEATURE) [ISLCONFPROXY-2851] More

Description
Two new settings were added to: /conf -> Web server: "Require matching X-Islcp-Proxy-Token header in HTTP frontend" and "Require matching X-Islcp-Proxy-Token header in FastCGI frontend". If the value is set, all requests coming on HTTP frontend ports (7620, 7621) or FastCGI frontend ports (7622, 7623) will need to have the "X-Islcp-Proxy-Token" header set to the same value. This setting is used to improve security against unauthorized connections directly to ISL Conference Proxy. This setting is especially useful in case when HTTP proxy does not have a well defined internal IP address like public cloud providers and when "Allowed IP addresses for frontends" is set to a very permissive value. Recommended value for this header is randomly generated UUID.

ISL Conference Proxy - Core - Log HTTP header parse errors in more detail (FEATURE) [ISLCONFPROXY-2852] More

Description
HTTP request and response parser was improved with better error messages. Contextual location for HTTP parse actions in web server was also added to error messages.

ISL Conference Proxy - Core - OpenSSL 1.1.1q (FEATURE) [ISLCONFPROXY-2855] More

Description
OpenSSL was upgraded to 1.1.1q.

ISL Conference Proxy - Core - Use Administration style on ICP web pages (FEATURE) [ISLCONFPROXY-2858] More

Description
ISL Conference Proxy web templates were updated to use latest style consistently. Some changes:

page content is now full width (max width set to 2560px)

consistent inputs (focus changes color of border and label)

consistent tables (header and rows style, sort icons, bold first cell), bulk actions are moved into separate dropdown

ISL AlwaysOn: Add This/Remote Computer were moved into dropdown: "Set Unattended Access"

new secondary navigation (third level of products, changes in order and texts)

footer sticks to bottom when not enough content

new date picker (same version and style is used in Pronto, Reports, Groop and Administration)

downloads page (removed Windows Phone option)

modal positioning (not centered but moved to top) and height (auto)

Groop sessions in license usage no longer have prefix "Session"

primary navigation is removed on Administration pages

ISL Conference Proxy - Core - Update Open Sans fonts to newest version v13>v34 (FEATURE) [ISLCONFPROXY-2883] More

Description
Open Sans fonts were updated to version v34.

ISL Conference Proxy - Core - Remove XML1 input/output format in WebAPI2 (FEATURE) [ISLCONFPROXY-2886] More

Description
XML1 input (he=XML1) and output types (heo=XML1) were removed from WebAPI2 handlers.

ISL AlwaysOn - Module - Update computer count in computer group when migrating computers (DEFECT) [ISLCONFPROXY-2752] More

Description
In previous versions computer count in computer groups was sometimes not shown correctly when migrating computers to/from/between computer groups. This was now redesigned, count is also updated when changing owner of the group. In previous versions "Remove from group" bulk action was incorrectly hidden in computer groups. This was now redesigned and bulk action should be correctly shown.

The defect was fixed.

ISL Pronto - Module - Decapitalize datepicker month label and add padding (DEFECT) [ISLCONFPROXY-2771] More

Description
Several design improvements to datepicker were made. Month labels are no longer in uppercase, only first letter is capitalized. Padding was added to datepicker for better readability. Position both of start and end datepicker is now on same spot. Start datepicker now correctly marks start date.

The defect was fixed.

ISL Conference Proxy - Reports - Fix translation strings (DEFECT) [ISLCONFPROXY-2777] More

Description
In previous versions some strings were not correctly declared in Reports pages and as a result they were not translated. This was now redesigned and strings should be correctly translated.

The defect was fixed.

ISL Conference Proxy - Administration - Settings export download handler doesn't handle download requests for other server (DEFECT) [ISLCONFPROXY-2792] More

Description
In previous versions settings export download did not work correctly and empty file was downloaded, when request was for other server. This was redesigned, check was added if request was sent on correct server and correct data should be now returned.

The defect was fixed.

ISL AlwaysOn - Module - Connect option in dropdown will open Edit dialog (DEFECT) [ISLCONFPROXY-2795] More

Description
In previous versions when saving "Edit Computer" dialog, first item in computer dropdown was overridden with click handler for edit computer which caused click on "Connect" to open Edit modal. This was now redesigned and click on "Connect" starts download and Edit modal has no effect on behavior of dropdowns.

The defect was fixed.

ISL AlwaysOn - Module - Hide shared with icon when no shared with users/domains to show (DEFECT) [ISLCONFPROXY-2807] More

Description
In previous versions icon for shared with was shown on computer in some cases when there was actually 0 such items to show. There was also inconsistent state when computers shared with was updated, count of shared with and number of popup items was not correct. This was now redesigned and correct values should be shown.

The defect was fixed.

ISL AlwaysOn - Module - Port connection error notification to HAG (DEFECT) [ISLCONFPROXY-2818] More

Description
In previous versions when trying to open ISL AlwaysOn file shares URL where user did not have access, error was shown in /conf and email was sent, but nothing was shown to user. This was now redesigned, error message "You don't have access to this computer." is now shown to user and error is logged.

The defect was fixed.

ISL Conference Proxy - Core - Do not make double logs when creating error in /conf and use appropriate subsystem (DEFECT) [ISLCONFPROXY-2856] More

Description
In previous versions errors on NTP synchronization were duplicated in logs. This was now redesigned and only one error should be logged. In previous versions when creating /conf errors, "core_runtime" was always used. This was now redesigned and log subsystem of caller is now used.

The defect was fixed.

ISL Conference Proxy - Core - Convert removed customization system settings into regular settings (DEFECT) [ISLCONFPROXY-2864] More

Description
In previous version when providing customization system settings, for example additional server addresses via start/download URLs, settings were not used correctly. This was now redesigned, system settings "server_address", "service_address_additional::*", "ie_trusted_domains", "ie_trusted_ips" were converted into regular string settings and should now be used correctly when set in start and downloads URLs.

The defect was fixed.

ISL Conference Proxy - Core - myip and EDNS Client Subnet support for intranet DNS servers (DEFECT) [ISLCONFPROXY-2865] More

Description
In previous versions when both client and DNS server are in intranet and GeoIP does not resolve, DNS server was used by load balancer. The behavior was now fixed and client IP should now be used by load balancer.

The defect was fixed.

ISL AlwaysOn - Module - Expand computer description column (DEFECT) [ISLCONFPROXY-2889] More

Description
In previous versions ISL AlwaysOn pages did not use all available space for computers with long description. This was now redesigned and computer description column was extended.

The defect was fixed.

ISL Conference Proxy - Reports - Report type icons are not customizable (DEFECT) [ISLCONFPROXY-2892] More

Description
In previous versions report type icons were not customizable. This was redesigned and product icons can now be customized by overriding "background-image" in customization.

The defect was fixed.