Sep
08
2026
Webhook notification, Jetty update
- Added webhook support to the notification mechanism. The messages could be configured, templates for Gotify, Teams, Slack, Telegram and Discord are included
- Added an automatic certificate filter to the certificate/key load mechanism that will prevent corrupt, bad structured or inconsistent certificates and keys into the system which may cause problems in cryptographic operations later. These are:
- Syntax errors in URIs within the Subject Alternative Names (e.g. invalid spaces or special characters)
- Invalid IP address formats in the Subject Alternative Names (e.g. malformed bytes for IPv4/IPv6)
- Faulty ASN.1 encoding of the Subject Alternative Names extension in the certificate
- Invalid string formatting or incorrect escapes in the Distinguished Name (DN) of the Subject
- Unknown or invalid OIDs (Object Identifiers) in the Subject of the certificate
- Mismatched Algorithms (algorithm conflict between Private Key and Public Key in the end-entity certificate)
- Incorrect password or corrupt encryption of the specific Private Key in the keystore
- Structurally faulty certificate chains in key entries
- Integrated webserver: There was no section "ExcludedProtocols" in the jetty.xml even if the help stated it should be there
- Integrated webserver: The HTTP server configuration display showed the possible TLS protocols of the security engine but not the filtered list by the jetty.xml section "ExcludedProtocols"
- The file encoding guess mechanism has set UTF-16 detection before ISO-8859-1 detection - this is not useful because UTF-16 does match quiet often. The result was an unusal encoding in some payload displays
- Dependencies: Updated jetty to 12.0.38 (integrated HTTP server), this fixes the security problems CVE-2024-7708, CVE-2026-8384, CVE-2026-6790, CVE-2026-10051, CVE-2026-10050, CVE-2026-5795
- Dependencies: Updated HikariCP to 7.1.0
- Dependencies: Updated Postgres jdbc driver to 42.7.12
- Dependencies: Updated Flatlaf to 3.7.2 (dark mode support)
- Dependencies: Updated Jackson/JSON to 2.22.0 (REST API, Client-server serialization)
- Dependencies: Updated dnsjava to 3.6.5 (DNS access, automatic mail setup detection)