Release commit for v1.4.9

Update docs, scripts, and release notes for v1.4.9

Signed-off-by: David Enyeart <enyeart@us.ibm.com>

Author: denyeart

CHANGELOG.md

@@ -1,3 +1,35 @@
+## v1.4.9
+Wed Sep 30 14:01:41 EDT 2020
+
+* [5146a9f](https://github.com/hyperledger/fabric/commit/5146a9f) Remove No Longer Relevant Release Note
+* [4924294](https://github.com/hyperledger/fabric/commit/4924294) Update release notes with [FAB-18250](https://jira.hyperledger.org/browse/FAB-18250)
+* [56a81f7](https://github.com/hyperledger/fabric/commit/56a81f7) [FAB-18250](https://jira.hyperledger.org/browse/FAB-18250) Check Error Before Returning Session to Pool (#1938)
+* [17e171b](https://github.com/hyperledger/fabric/commit/17e171b) Remove escc and vscc from list of system chaincodes
+* [2d63281](https://github.com/hyperledger/fabric/commit/2d63281) Remove GetSessionInfo Call
+* [4f1e340](https://github.com/hyperledger/fabric/commit/4f1e340) Add release notes for v1.4.9
+* [40abeec](https://github.com/hyperledger/fabric/commit/40abeec) [FAB-18237](https://jira.hyperledger.org/browse/FAB-18237) always update stateInfo message upon chaincode update (#1915)
+* [693cae5](https://github.com/hyperledger/fabric/commit/693cae5) Clarify tlsHandshakeTimeShift CLI help text (#1895)
+* [d9a8bc9](https://github.com/hyperledger/fabric/commit/d9a8bc9) Peer CLI communicate with orderers with expired TLS certs
+* [51ffd55](https://github.com/hyperledger/fabric/commit/51ffd55) Add extra queryexecutor nil checks
+* [95e4cfd](https://github.com/hyperledger/fabric/commit/95e4cfd) [FAB-18208](https://jira.hyperledger.org/browse/FAB-18208) Do not sign gossip message if membership is empty
+* [5201e86](https://github.com/hyperledger/fabric/commit/5201e86) Fix data race in gossip/discovery test (#1865)
+* [11cbae9](https://github.com/hyperledger/fabric/commit/11cbae9) Add object handle and key cache to bccsp/pkcs11
+* [d626146](https://github.com/hyperledger/fabric/commit/d626146) Drain session pool before creating new sessions
+* [d0c5065](https://github.com/hyperledger/fabric/commit/d0c5065) Fix Broken Doc Reference
+* [d308fbf](https://github.com/hyperledger/fabric/commit/d308fbf) Re-enable Skipped PKCS11 Tests
+* [80d3934](https://github.com/hyperledger/fabric/commit/80d3934) Fix broken pkcs11 tests
+* [c8d124f](https://github.com/hyperledger/fabric/commit/c8d124f) [FAB-18073](https://jira.hyperledger.org/browse/FAB-18073) Add integration test for dev mode
+* [9848841](https://github.com/hyperledger/fabric/commit/9848841) [FAB-18171](https://jira.hyperledger.org/browse/FAB-18171) Disregard certificate validity period in intra-orderer communication (#1825)
+* [243dc0e](https://github.com/hyperledger/fabric/commit/243dc0e) [FAB-17539](https://jira.hyperledger.org/browse/FAB-17539) Always remember anchor peers in membership (#1422) (#1815)
+* [f208ffe](https://github.com/hyperledger/fabric/commit/f208ffe) [FAB-18188](https://jira.hyperledger.org/browse/FAB-18188) Log orderer and peer cert expiration date upon startup (#1804)
+* [a19c9ec](https://github.com/hyperledger/fabric/commit/a19c9ec) Remove Latest Tag Publishing
+* [8c85f77](https://github.com/hyperledger/fabric/commit/8c85f77) Fix and improve discovery TLS authentication comments in document
+* [dcba9b1](https://github.com/hyperledger/fabric/commit/dcba9b1) [FAB-18163](https://jira.hyperledger.org/browse/FAB-18163) TLS Timeshift w/o Separate Cluster Port (#1726)
+* [4eaec1d](https://github.com/hyperledger/fabric/commit/4eaec1d) Use correct gossip SecretEnvelope reference
+* [6361bff](https://github.com/hyperledger/fabric/commit/6361bff) Update release-1.4 for Fabric CA v1.4.8 release
+* [d3c3aac](https://github.com/hyperledger/fabric/commit/d3c3aac) Fix link in Develop apps doc
+* [a3486d3](https://github.com/hyperledger/fabric/commit/a3486d3) Prepare for Fabric v1.4.9 (#1627)
+
 ## v1.4.8
 Wed Jul 22 09:23:53 EDT 2020
 

docs/source/install.rst

@@ -48,12 +48,12 @@ the binaries and images.
 
 .. note:: If you want a specific release, pass a version identifier for Fabric,
           Fabric-ca and thirdparty Docker images.
-          The command below demonstrates how to download **Fabric v1.4.8**
+          The command below demonstrates how to download **Fabric v1.4.9**
 
 .. code:: bash
 
   curl -sSL http://bit.ly/2ysbOFE | bash -s -- <fabric_version> <fabric-ca_version> <thirdparty_version>
-  curl -sSL http://bit.ly/2ysbOFE | bash -s -- 1.4.8 1.4.8 0.4.21
+  curl -sSL http://bit.ly/2ysbOFE | bash -s -- 1.4.9 1.4.9 0.4.21
 
 .. note:: If you get an error running the above curl command, you may
           have too old a version of curl that does not handle

docs/source/whatsnew.rst

@@ -182,6 +182,7 @@ with a link to the full release change log.
 * `Fabric v1.4.6 release notes <https://github.com/hyperledger/fabric/releases/tag/v1.4.6>`_.
 * `Fabric v1.4.7 release notes <https://github.com/hyperledger/fabric/releases/tag/v1.4.7>`_.
 * `Fabric v1.4.8 release notes <https://github.com/hyperledger/fabric/releases/tag/v1.4.8>`_.
+* `Fabric v1.4.9 release notes <https://github.com/hyperledger/fabric/releases/tag/v1.4.9>`_.
 * `Fabric CA v1.4.0 release notes <https://github.com/hyperledger/fabric-ca/releases/tag/v1.4.0>`_.
 * `Fabric CA v1.4.1 release notes <https://github.com/hyperledger/fabric-ca/releases/tag/v1.4.1>`_.
 * `Fabric CA v1.4.2 release notes <https://github.com/hyperledger/fabric-ca/releases/tag/v1.4.2>`_.
@@ -191,6 +192,7 @@ with a link to the full release change log.
 * `Fabric CA v1.4.6 release notes <https://github.com/hyperledger/fabric-ca/releases/tag/v1.4.6>`_.
 * `Fabric CA v1.4.7 release notes <https://github.com/hyperledger/fabric-ca/releases/tag/v1.4.7>`_.
 * `Fabric CA v1.4.8 release notes <https://github.com/hyperledger/fabric-ca/releases/tag/v1.4.8>`_.
+* `Fabric CA v1.4.9 release notes <https://github.com/hyperledger/fabric-ca/releases/tag/v1.4.9s>`_.
 
 .. Licensed under Creative Commons Attribution 4.0 International License
    https://creativecommons.org/licenses/by/4.0/

release_notes/v1.4.9.md

@@ -1,5 +1,12 @@
-v1.4.9 Release Notes - <Month>, <Day>, 2020
-====================================
+v1.4.9 Release Notes - September 30, 2020
+=========================================
+
+What's New in Hyperledger Fabric v1.4.9
+---------------------------------------
+Hyperledger Fabric v1.4.9 provides important improvements and fixes, with a focus on the following areas:
+* Management of certificate expirations
+* Hardware security module (HSM) efficiency
+
 
 Fixes
 -----
@@ -48,6 +55,16 @@ This change suppresses the signing of gossip messages if the message will not ge
 sent regardless due to an empty gossip membership. The change reduces CPU consumption
 and eliminates unnecessary calls to an HSM.
 
+**FAB-18250: peer and orderer PKCS#11 - Introduce error checking for evicting invalid PKCS#11 sessions**
+
+FAB-17722 introduced a call to the pkcs11 GetSessionInfo function for retrieving the current state of
+the PKCS11 session. The result of this function was used to determine whether a session was still
+valid to perform HSM operations or if it should be evicted from the session pool. Performance tests
+showed that the call to GetSessionInfo was computationally prohibitively expensive. FAB-18242 reverted
+this change and FAB-18250 introduced a new method for determining if the PKCS11 session is invalid.
+Now when an HSM operation fails, we check the resultant error against the known session error codes and
+evict the session from the pool if the error was the result of an invalid session.
+
 **FAB-17539: peer - Always remember gossip anchor peers in membership**
 
 Gossip removes a peer from its membership cache if no new heartbeats are received from the peer within a timely manner.
@@ -62,15 +79,6 @@ chaincodes always require a channel context. This fix ensures that
 a channel context is available for calls to user chaincodes, and
 returns an error if the client did not pass a channel name.
 
-**FAB-18250: Introduce error checking for evicting invalid PKCS11 sessions**
-
-FAB-17722 introduced a call to the pkcs11 GetSessionInfo function for retrieving the current state of
-the PKCS11 session. The result of this function was used to determine whether a session was still
-valid to perform HSM operations or if it should be evicted from the session pool. Performance tests
-showed that the call to GetSessionInfo was computationally prohibitively expensive. FAB-18242 reverted 
-this change and FAB-18250 introduced a new method for determining if the PKCS11 session is invalid.
-Now when an HSM operation fails, we check the resultant error against the known session error codes and 
-evict the session from the pool if the error was the result of an invalid session. 
 
 Dependencies
 ------------

scripts/bootstrap.sh

@@ -6,9 +6,9 @@
 #
 
 # if version not passed in, default to latest released version
-export VERSION=1.4.8
+export VERSION=1.4.9
 # if ca version not passed in, default to latest released version
-export CA_VERSION=1.4.8
+export CA_VERSION=1.4.9
 # current version of thirdparty images (couchdb, kafka and zookeeper) released
 export THIRDPARTY_IMAGE_VERSION=0.4.21
 export ARCH=$(echo "$(uname -s|tr '[:upper:]' '[:lower:]'|sed 's/mingw64_nt.*/windows/')-$(uname -m | sed 's/x86_64/amd64/g')")
@@ -23,8 +23,8 @@ printHelp() {
   echo "-s : bypass fabric-samples repo clone"
   echo "-b : bypass download of platform-specific binaries"
   echo
-  echo "e.g. bootstrap.sh 1.4.8 -s"
-  echo "would download docker images and binaries for version 1.4.8"
+  echo "e.g. bootstrap.sh 1.4.9 -s"
+  echo "would download docker images and binaries for version 1.4.9"
 }
 
 dockerFabricPull() {