Switch to SLF4J, Implement DB pool for external DB's, Remove Java 8 s…

…upport (OpenAS2#395)

* Use the Hakari JDBC pool for performance

* Change to SLF4J logger

* FRemove Remote project and custom commons logging implementation

* Remove loggers elements

* Upggrade logging to SLF4J

* Remove remote project

* REmove testing for Java 8 and add Java 21

* Adapt to use the new logging system

* Default logging config for Logback

* Remove the logging properties that are now no longer handled within
OpenAS2 code

* Update documentation

* Remove Sentry

* Release notes

* Change to a GPLv3 license.

* Fix batch files

* Add the header

* Update to latest version

* Prevent jakarta.ws and grizzly libraries from using v4 because of
Windows (GRRR)

.github/workflows/actions.yml

@@ -6,7 +6,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        java_version: [8, 11, 17, 21]
+        java_version: [11, 17, 21]
         os: [windows-latest, ubuntu-latest]
     steps:
       - name: Checkout

.github/workflows/codeql-analysis.yml

@@ -38,11 +38,11 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v2
+      uses: github/codeql-action/init@v3
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -56,7 +56,7 @@ jobs:
     # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@v2
+      uses: github/codeql-action/autobuild@v3
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -69,4 +69,4 @@ jobs:
     #   ./location_of_script_within_repo/buildscript.sh
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v2
+      uses: github/codeql-action/analyze@v3

RELEASE-NOTES.md

@@ -1,28 +1,37 @@
 #              OpenAS2 Server
-#              Version 3.12.0
+#              Version 4.0.0
 #              RELEASE NOTES
 -----
-The OpenAS2 project is pleased to announce the release of OpenAS2 3.12.0
+The OpenAS2 project is pleased to announce the release of OpenAS2 4.0.0
 
-The release download file is: OpenAS2Server-3.12.0.zip
+The release download file is: OpenAS2Server-4.0.0.zip
 
 The zip file contains a PDF document (OpenAS2HowTo.pdf) providing information on installing and using the application.
-## NOTE: Testing covers Java 8 to 17. See Java Compatibility section of the OpenAS2 documentation for using Java 8.
+## NOTE: Testing covers Java 11 to 21.
+##       Java 8 is NO LONGER SUPPORTED.
 
-Version 3.12.0 - 2024-10-15
-This is a minor enhancement and bugfix release:
+Version 4.0.0 - 2024-10-15
+
+This is an major change and enhancement release.
        **IMPORTANT NOTE**: Please review upgrade notes below if you are upgrading
 
-1. Change the property name in config.xml from javax.mail.properties to jakarta.mail.properties
-2. 
+1. Java 8 is NO LONGER supported. Support is for Java 11 and newer releases only.
+2. The logging facade was switched from Jakarta Commons Logging to SLF4J and the default implementation uses the Logback framework.
+3. The DB state logging for external databases now uses an Hikari connection pool and persists to the database using a separate thread to improve performance.
+4. Switch to Jakarta package for mail and REST API implementations
+5. Remove the insecure "remote" socket command processor and associated support class in the OpenAS2 server.
+6. Remove redundant packages from maven build.
+7. Fix MDN cleanup occurring when resend mode is entered.
 
 ##Upgrade Notes
  See the openAS2HowTo appendix for the general process on upgrading OpenAS2.
 
-### Upgrading to 3.12 or newer any older version:
-      1. The property in the config.xml changed:
+### Upgrading to 4.0 or newer any older version:
+      1. Ensure you implement all logging that you had configured for ealrier versions using the logback configuration or replace with another framework that works with SLF4J facade. See the OpenAS2HowTo.pdf logging section for more details.
+      2. The property for email configuration in the config.xml changed:
           Change ALL occurrences of javax.mail.properties to jakarta.mail.properties in config.xml and the .properties file if you implemented it.
-      2. Completely replace all library files in the existing "lib" folder wit hthe ones supplied in the new install package (per recommended standard procedure in the user guide).
+      3. If using an external database for message state tracking, make sure that your configuration will work with the new Hikari JDBC pool that improves performance. See the OpenAS2HowTo.pdf message state tracking section for more details.
+      4. Completely replace all library files in the existing "lib" folder wit hthe ones supplied in the new install package (per recommended standard procedure in the user guide).
 
 ### Upgrading to 3.6 or newer from 3.5 (or older) version:
       1. Run the following command after the upgrade of the code base is complete and BEFORE you start the OpenAS2 server: