EJBCA 8.2.0.1 recommends to use Wildfly 26.1.3.Final but it's a very old version

[fco-code-org]

Hello,

The recommended version which is 26.1.3 has a lot high CVEs :-(
The more recent Wildfly version is 31.0.1.Final.

Is there some plan to upgrade the recomended Wildfly version for EJBCA ?

Maybe the EJBCA Enterprise version recommends more recent Wildfly version ?

Best Regards.

[primetomas]

See arlier discussions #569

[fco-code-org]

Hello Guys,

Sorry I don't understand you.
As you said JBoss 8 based on Wildfly 30 so it is Jakarta 10 compatible.

So we have:
- Wildfly 30 (base of JBoss 8) which is Jakarta 10 compatible
- JBoss 8 which is Jakarta 10 compatible

Maybe I over simplified but we might have a single EJBCA version compatible with either JBoss8 and Wildfly 30.

Best regards.

[mike-agrenius-kushner]

Yeah, exactly. It's been out for under two months and Redhat gave no prior warning to the release. Moving from Jakarta8 to Jakarta10 is a major refactoring of our code, so it's going to be a few months until we put out EJBCA 9, which is going to be Jakarta10.

[fco-code-org]

Hello,

As far as I have understood the gap is less important I would say as EJBCA (8.2.0.1) is currently Jakarta 9 or 9.1 compatible if I am not mistaken.
So the gap to fill is between Jakarta 9 or 9.1 and Jakarta 10 ;-) which would be less huge that filling the gap between Jakarta 8 and Jakarta 10, I guess.

One suggestion: name it EJBCA 10. Then it will be understandable for everyone that this EJBCA version is in line with this Jakarta version.

Best regards.

[mike-agrenius-kushner]

No, EJBCA is at JEE8/Jakarta8.

As you can see from https://docs.wildfly.org/, Wildfly essentially skipped proper support for Jakarta9 and skipped straight to 10 with WF27.

And believe me, I did the conversion as a PoC, it's a ton of work and nothing we could plan in on our roadmap in a moment's notice.

[fco-code-org]

Hello,

It's misleading.
Looking at https://jakarta.ee/compatibility/certification/9.1/: Wildfly preview 23.0.2 and 25.0.0 are Jakarta 9.1 compatible.
Implicitly, my guess is that Wildfly 26.1.3 might be Jakarta 9.1 compatible.

But according to the link you provided my guess is wrong: Wildfly 26.1.3 is just Jakarta 9.1 preview :-(

Best Regards.