WebCrossing Server Security Upgrade

March 26, 2019

We always try to stay on top of security! This new version includes the latest SSL security upgrades, and ensures we maintain our “A” rating from testing sites, such as SSL Labs.

Specifically, the new upgrade deals with these previously known issues: Timing vulnerability in DSA signature generation; Timing vulnerability in ECDSA signature generation; Fixed a bug in DTLS over SCTP which broke interoperability with older versions of OpenSSL like OpenSSL 1.1.0 and OpenSSL 1.0.2; Changed the info callback signals for the start and end of a post-handshake message exchange in TLSv1.3; 

If you are interested in using SSL encryption for the security of your site we recommend this upgrade.

The latest release version is now WebCrossing 6.4-1349 2019-03-19.

All self-hosted customers with valid support and maintenance contracts can download this new version at no cost.

If you are a self-hosted customer and have a valid support and maintenance contract, please contact support for access to the new server. If your support and maintenance contract has expired, please contact us to renew so we can provide you with this important update.

Comments are closed

WebCrossing Server Maintenance Upgrade

March 1, 2019

The purpose of this update is to make it easier for large sites to do a database repack offline without worrying about a live server’s daily backup interfering in the meanwhile. The new feature is a “suspend backups for 10 days” option to ensure the roll-forward file keeps on growing until the repack is done.

This is rather technical. Please bear with me as I explain!

Regular maintenance of large databases is highly recommended. One maintenance activity is “repacking” – a procedure which can substantially reduce the size of a database by reclaiming space no longer in use. While a certain amount of database re-use occurs automatically, repacking actually helps reducethe total size of the database. 

Repacking can be done offline on a separate server, to avoid impacting on the live server process. During repacking it is best to suspend daily backups. When repacking is completed, you can then update your server with the repacked database and it will include transactions which occurred during the repack by reading in the roll-forward filing containing those transactions. So it’s important to ensure that your roll-forward transactions continue to get recording normally until the last step. 

If you have no idea what I’m talking about, but are interested in doing a repack of your large database then please contact support and we will help you if you have an up-to-date maintenance agreement or are hosted in one of our data centers.

The latest release version is now WebCrossing 6.4-1348 2019-02-18.

All self-hosted customers with valid support and maintenance contracts can download this new version at no cost.

If you are a self-hosted customer and have a valid support and maintenance contract, please contact support for access to the new server. If your support and maintenance contract has expired, please contact us to renew so we can provide you with this important update.

Comments are closed

WebCrossing Server New Major Security Upgrade for TLS 1.3

November 8, 2018

We have a new major upgrade of our encrypted security for sites using SSL certificates. Transport Layer Security (TLS) version 1.3 has been approved by the Internet Engineering Task Force (IETF), making it the new industry standard for secure connections. We are keeping up with the latest security standards (safety is number one!) and now the latest WebCrossing Server release supports TLS 1.3.

With the newest version set to become the standard model for securing internet connections, users can expect connections to complete faster due to less clutter in computer-to-computer communication. That same speed increase will also make TLS more secure because much of what was eliminated was old, obsolete encryption.

The security and speed improvements that TLS 1.3 brings are dependent on each other: It’s secure because it’s faster, and it’s faster because of security improvements.

The latest release version is now WebCrossing 6.4-1347 2018-10-31

If you are running a self-hosted site we strongly recommend upgrading your WebCrossing server to this new build. If you are a self-hosted customer and have a valid support and maintenance contract, please contact support for access to the new server. If your support and maintenance contract has expired, please contact us to renew so we can provide you with this important update.

Comments are closed

WebCrossing Server Stability Upgrade for Large and Busy Sites

September 11, 2018

This upgrade is mainly for very large and busy sites. We have optimized the way connections are checked and cleared to ensure the smallest interruption possible in the rare event sockets become cluttered. With other recent optimizations, this reduces potential restart times, in those rare cases, from a few minutes to a few seconds.

We also added a minor bug fix for Neighbors sites in the way automatic redirection is handled by the WebCrossing server to member personal home pages. That’s where users have profiles, blogs, files, and other resources.

Also, we want to remind you of our most recent, major upgrade of our encrypted security for sites using SSL certificates. This includes (1) a thorough and complete upgrade of server-side supported protocols, through TLSv1.2; (2) an upgrade of certificate and CSR generation features, upgrading from MD5 to SHA256, (3) and all the cipher suites have been upgraded to support connectivity from the latest secure browsers.

That upgrade includes not just server-side protocol upgrades. Your WebCrossing server is also capable of acting like a client and making API calls to other servers. Those servers also are requiring higher protocol TLS 1.2 connections these days. With this major upgrade, now your WebCrossing server can make those calls.

The latest release version is now WebCrossing 6.4-1346 2018-09-05.

If you are running a self-hosted site we strongly recommend upgrading your WebCrossing server to this new build. If you are a self-hosted customer and have a valid support and maintenance contract, please contact support for access to the new server. If your support and maintenance contract has expired, please contact us to renew so we can provide you with this important update.

Comments are closed

WebCrossing Server – Not Secure? We can help!

August 21, 2018

We received the following email from a customer this week –

“We need our Online Community site to be secure, we have gotten concerns from our members because when they login though their browsers they see Not Secure.”

How timely! We sent out a newsletter recently about exactly this issue. Security levels are being increased all over the Internet. Browsers, such as Chrome, have been upgraded and are more picky about where they connect. And of course we all need to be more and more careful about how data is handled.

If you are not careful with security at your site, browsers will eventually refuse to connect, or they will give your users scary warnings, like the new one above. Also, starting last month, TLSv1.0 is no longer accepted by financial institutions, so users with old browsers will need to update. Sites only supporting TLSv1.0 are now considered non-secure.

We recently made a special effort and accomplished a major upgrade of our encrypted security for sites using SSL certificates. This includes (1) a thorough and complete upgrade of server-side supported protocols, through TLSv1.2; (2) an upgrade of certificate and CSR generation features, upgrading from MD5 to SHA256, (3) and all the cipher suites have been upgraded to support connectivity from the latest secure browsers.

And it’s not just server-side protocol upgrades. Your WebCrossing server is also capable of acting like a client and making API calls to other servers. Those servers also are requiring higher protocol TLS 1.2 connections these days. With this major upgrade, now your WebCrossing server can make those calls.

We can help you upgrade your site if you are a hosted customer or have a self-hosted site with a current support contract. We can help you get the “CSR” needed to obtain an SSL certificate and help you install it. You can even purchase SSL certificates (and domains too) from us at ellipticsdomains.comAlso note that certain certificate sources, such as Symantec, will no longer be trusted as of September. Please be sure your SSL certificates are issued from a trusted source. SSL certificates purchased from us remain trusted certificates.

All self-hosted customers with valid support and maintenance contracts can download the latest new version at no cost.If you are running a self-hosted site we strongly recommend upgrading your WebCrossing server to the latest new build. If you are a self-hosted customer and have a valid support and maintenance contract, please contact support for access to the new server. If your support and maintenance contract has expired, please contact us to renew so we can provide you with this important update.

Comments are closed

WebCrossing server – Targeted Neighbors Upgrade and Major Security Upgrades

July 17, 2018

This upgrade is targeted towards very large Neighbors sites. Until now, Neighbors has made use of WebCrossing’s “web map” feature to redirect to member personal home pages. That’s where members see activity feeds, people view their profiles, preferences are set, and where you find their personal blogs, files, and photo albums. Please read about Neighbors for more information about this private label, complete social network system.

With this new build, the special Neighbors web map no longer needs to be maintained. It’s gone. Poof! The needed redirections are instead done internally, making start times blazingly faster, freeing up cached memory, and making the web map available for other uses.

Also, we want to remind you of our most recent, major upgrade of our encrypted security for sites using SSL certificates. This includes (1) a thorough and complete upgrade of server-side supported protocols, through TLSv1.2; (2) an upgrade of certificate and CSR generation features, upgrading from MD5 to SHA256, (3) and all the cipher suites have been upgraded to support connectivity from the latest secure browsers.

That upgrade includes not just server-side protocol upgrades. Your WebCrossing server is also capable of acting like a client and making API calls to other servers. Those servers also are requiring higher protocol TLS 1.2 connections these days. With this major upgrade, now your WebCrossing server can make those calls.

The latest release version is now WebCrossing 6.4-1343 2018-07-01.

All self-hosted customers with valid support and maintenance contracts can download this new version at no cost.

If you are running a self-hosted site we strongly recommend upgrading your WebCrossing server to this new build. If you are a self-hosted customer and have a valid support and maintenance contract, please contact support for access to the new server. If your support and maintenance contract has expired, please contact us to renew so we can provide you with this important update.

Comments are closed

WebCrossing Server – Major Security Upgrades

June 19, 2018

Times they are a changing. And security levels are being increased all over the Internet. Just read the news. Browsers are being upgraded and becoming more picky about where they connect. Sites need to be more and more careful about how data is viewed.

If you are not careful with security at your site, browsers will eventually refuse to connect, or they will give your users scary warnings. In fact, starting in July 2018, TLSv1.0 will no longer be accepted by financial institutions, and users with old browsers will need to update. Sites only supporting TLSv1.0 will be considered non-secure.

We made a special effort and accomplished a major upgrade of our encrypted security for sites using SSL certificates. This includes (1) a thorough and complete upgrade of server-side supported protocols, through TLSv1.2; (2) an upgrade of certificate and CSR generation features, upgrading from MD5 to SHA256, (3) and all the cipher suites have been upgraded to support connectivity from the latest secure browsers.

And it’s not just server-side protocol upgrades. Your WebCrossing server is also capable of acting like a client and making API calls to other servers. Those servers also are requiring higher protocol TLS 1.2 connections these days. With this major upgrade, now your WebCrossing server can make those calls.

The latest release version is now WebCrossing 6.4-1341 2018-06-11.

All self-hosted customers with valid support and maintenance contracts can download this new version at no cost.

If you are running a self-hosted site we strongly recommend upgrading your WebCrossing server to this new build. If you are a self-hosted customer and have a valid support and maintenance contract, please contact support for access to the new server. If your support and maintenance contract has expired, please contact us to renew so we can provide you with this important update.

Comments are closed

WebCrossing Server – Discussion Archiving Bug Fix Release

April 24, 2018

Did you know you can set archiving for old discussions in WebCrossing? Well, yes you can!

For any folder containing discussions, you can optionally set a timeout in days for discussions with no activity. And you can decide what happens to the old discussions: have them moved to an archive folder, delete with a backup, or just purge them.

This build fixes an issue we found in the archiving settings, involving the scheduling of archiving – which are under your complete control.

The latest release version is now WebCrossing 6.4-1440 2018-04-19.

All self-hosted customers with valid support and maintenance contracts can download this new version at no cost.

If you are running a self-hosted site we recommend upgrading your WebCrossing server to this new build. If you are a self-hosted customer and have a valid support and maintenance contract, please contact support for access to the new server. If your support and maintenance contract has expired, please contact us to renew so we can provide you with this important update.

Comments are closed

WebCrossing Server – Bug Fix Upgrade for Customized Sites

March 26, 2018

This update is highly recommended for all sites using a WebCrossing Server which have customized override templates.

WebCrossing allows complete customization of the existing user interface, even allowing sites to override basic features such as the standard “edit folder” template, allowing sites to add customized features.

In some recent builds, we added a new feature to allow secure email connections to POP3 servers for sites retrieving email from email lists (another cool WebCrossing feature). At that time we disabled the ability to override the customization of the default folder edit template. This fix restores that feature so sites can use their own customized folder edit templates and also take advantage of secure POP3 email list mirroring.

The latest release version is now WebCrossing 6.4-1339 2018-03-20.

All self-hosted customers with valid support and maintenance contracts can download this new version at no cost.

If you are running a self-hosted site we recommend upgrading your WebCrossing server to this new build. If you are a self-hosted customer and have a valid support and maintenance contract, please contact support for access to the new server. If your support and maintenance contract has expired, please contact us to renew so we can provide you with this important update.

Comments are closed

Elliptics Newsletter: WebCrossing Server – Important Stability Upgrade

February 13, 2018

This update is highly recommended for all sites using a WebCrossing Server.

The WebCrossing server constantly checks TCP connections to make sure they are alive and responding to activity.

In previous versions, if WebCrossing tested and detected clogged connections the default solution was to to generate an internal restart. The consequent restart time was negligible at most sites, but with larger, highly customized sites it sometimes caused a startup delay of several minutes.

This new build avoids this problem by approaching the issue in an entirely new way. A new method is now used to close-and-reopen problem TCP sockets, and only uses an internal restart as a last resort. The result is a more responsive server during these rare events.

The previous several builds also use newer libraries when compiling, for added stability.

This is a recommended upgrade for everybody. We will make sure sites hosted by us are upgraded as needed.

The latest release version is now WebCrossing 6.4-1338 2018-02-5.

All self-hosted customers with valid support and maintenance contracts can download this new version at no cost.

If you are running a self-hosted site we recommend upgrading your WebCrossing server to this new build. If you are a self-hosted customer and have a valid support and maintenance contract, please contact support for access to the new server. If your support and maintenance contract has expired, please contact us to renew so we can provide you with this important update.

Comments are closed
« Page 1, 2, 3 ... 6, »