Corda Enterprise Edition 4.12 release notes

Corda Enterprise Edition 4.12.3 is a patch release of Corda Enterprise Edition focused on resolving issues.

As a developer or node operator, you should upgrade to the latest released version of Corda as soon as possible. The latest Corda Enterprise release notes are on this page, and for the latest upgrade guide, refer to Corda Enterprise Edition 4.11 to 4.12 upgrade guide.

The steps from this guide only work for direct upgrades from Corda 4.11 to 4.12. If you have any nodes on versions 4.10 or below, you must upgrade them to 4.11 first. To do that, consult the relevant release upgrade documentation.

  • Fixed an issue where CorDapp builds may fail to build with the error java.lang.NoSuchFieldError: id_ml_dsa_44. This issue arose from a version mismatch in Bouncy Castle libraries. A new LTS version of Bouncy Castle introduced this field, and it was being picked up due to version ranges specified in the Bouncy Castle dependencies. The issue has now been resolved by locking the Bouncy Castle dependencies to a specific version within Corda.

  • A ClassNotFound error, causing transaction verification to fail, does no longer occur when deserializing commands from a legacy transaction in the external verifier. This would sometimes happen because the class loader used during deserialization did not include any CorDapps and the missing class could not be auto-constructed. In cases where it did work, it was only because Corda managed to construct the missing class. This issue has now been resolved by ensuring that CorDapp classes are available during deserialization. Additionally, the external verifier’s ability to auto-construct missing classes has been disabled.

  • Transactions with the in-flight transaction state, introduced in Corda version 4.11 to support transaction recovery, are no longer included when the Ledger Graph CorDapp builds a transaction graph. Instead, the CorDapp now ignores any transactions with an in-flight status.

  • The notary health check client tool now starts without any issues.

  • The Transaction Validator Utility (TVU) with a provided reverification file accurately reports the number of discovered transactions, even when the provided reverification file includes blank lines.

Corda Enterprise Edition 4.12.2 is a patch release of Corda Enterprise Edition focused on resolving issues.

As a developer or node operator, you should upgrade to the latest released version of Corda as soon as possible. The latest Corda Enterprise release notes are on this page, and for the latest upgrade guide, refer to Corda Enterprise Edition 4.11 to 4.12 upgrade guide.

The steps from this guide only work for direct upgrades from Corda 4.11 to 4.12. If you have any nodes on versions 4.10 or below, you must upgrade them to 4.11 first. To do that, consult the relevant release upgrade documentation.

The following section describes the updated requirements for running the Transaction Validator Utility (TVU) and Corda 4.12 nodes. It clarifies and enhances the previous documentation. The current patch release documentation has been updated to reflect the following:

  • Legacy contracts directory: The legacy contracts directory is no longer required when running the TVU or when running 4.12 nodes, provided all nodes on the network are version 4.12 nodes.

  • 4.12 environment requirement: You must run the TVU in a 4.12 environment (excluding the database). Specifically, the cordapps directory must contain only 4.12-compatible CorDapps. See point 1 below.

  • Purpose of legacy contracts directory: The legacy contracts directory is now only needed for enabling 4.12 nodes to build transactions that include legacy contracts. This is only applicable in a mixed network of 4.12 nodes and pre-4.12 nodes.

  • Legacy JARs directory: You may need to include a legacy-jars directory when running both the TVU and the node. See point 4 below for further details.

The purpose of the TVU is to mimic what a 4.12 node would do when verifying a legacy transaction, and report any errors found.

  1. You must run the TVU in a 4.12 node directory, using the 4.11 database to be validated (or a database upgraded to 4.11). Ensure that the CorDapps directory contains 4.12 CorDapps, and include any pre-4.12 dependencies in the legacy-jars directory if required by existing contract attachments on the ledger (see point 4 below). Note that the legacy-contracts directory is not necessary.
  1. If your network includes a mix of 4.12 nodes and pre-4.12 nodes, each 4.12 node must have a legacy-contracts directory containing pre-4.12 contract CorDapps. This allows 4.12 nodes to build transactions that include pre-4.12 contracts, enabling interoperability with pre-4.12 nodes. In this scenario, you may also need a legacy-jars directory - see point 4 below.

  2. If your network consists solely of upgraded 4.12 nodes, there is no need for the legacy-contracts directory. The 4.12 nodes will create transactions without legacy contracts, which is fine as there are no pre-4.12 nodes in the network. In this scenario, since the ledger already contains pre-4.12 transactions, you may still need a legacy-jars directory - see point 4 below.

  3. Pre-4.12 transactions are verified in an external verifier process when encountered. This process does not, by default, include all third-party libraries that shipped with Corda 4.11 and earlier, nor does it have the drivers directory on the classpath. If your contracts in the ledger attachments depend on such third-party libraries or any contents from the drivers directory in Corda 4.11 or earlier, you can place the necessary JAR files in a directory called legacy-jars within the node directory. Any JARs in this directory will be added to the classpath of the external verifier. The TVU will assist you in identifying and verifying the resolution of such issues.

  • There is no need for the external verifier to use the legacy-contracts folder anymore. The external verifier verifies pre-4.12 transactions and now solely uses the database to retrieve the contract attachments.
  • An open telemetry span has been added around the Send to Multiple Parties and Receive from Multiple Parties operations.
  • Previously, the transaction builder would log any failed verification attempts when trying to add missing dependencies. Now, these failed attempts are no longer logged if they occur while determining the missing dependencies.
  • This release contains AMQP serialisation performance improvements.
  • It is now possible to create two nodes whose X.500 names have the same Organisation (O) field value but different Organisation Unit (OU) values when using the driver DSL for testing.
  • There is no longer a memory leak when creating a series of mock networks for testing purposes.
  • The transaction builder no longer attaches legacy attachments to a transaction if the minimum platform version is 140 (i.e., 4.12).
  • If the expected subject name does not match the actual subject name and the Float disconnects, a warning is logged.
  • The TVU now includes the CorDapps class loader when deserializing output states as part of its deserialization test. Additionally, the TVU now also includes the same set of add-opens options as the node.
  • The TVU is no longer writing the JDK17 attachments to the database when verifying transactions.
  • A memory leak in the TVU has been resolved.
  • A null pointer exception from the TVU (when resolving some parent paths) has been resolved.
  • The TVU is no longer raising an exception when outputting a JSON representation of another exception.
  • The TVU now parses configuration files in the same way as the node.
  • A new legacy-jars directory has been introduced to improve backward compatibility with earlier versions of Corda. See the description above and the upgrade guide for details.
  • Contract JAR signing key rotation of R3-provided CorDapps is included in this patch release.

The following table lists the dependency version changes between 4.12.1 and 4.12.2 Enterprise Editions:

DependencyNameVersion 4.12.1 EnterpriseVersion 4.12.2 Enterprise
org.eclipse.jetty:*Jetty12.0.712.0.14
commons-io:commons-iocommons IO2.72.17.0
org.apache.commons:commons-configuration2commonsConfiguration22.10.12.11.0
org.apache.sshd:sshd-commonsshd2.12.12.13.2
org.apache.zookeeper:*Zookeeper3.8.33.8.4

Corda Enterprise Edition 4.12.1 is a patch release of Corda Enterprise Edition focused on resolving issues.

As a developer or node operator, you should upgrade to the latest released version of Corda as soon as possible. The latest Corda Enterprise release notes are on this page, and for the latest upgrade guide, refer to Corda Enterprise Edition 4.11 to 4.12 upgrade guide.

The steps from this guide only work for direct upgrades from Corda 4.11 to 4.12. If you have any nodes on versions 4.10 or below, you must upgrade them to 4.11 first. To do that, consult the relevant release upgrade documentation.

  • ReceiveFinalityFlow was returning a transaction that was missing the notary signature. This has now been fixed. The returned transaction now includes the notary signature.
  • ReceiveTransactionFlow was checking that the network parameters on the transaction existed before ResolveTransactionFlow was executed. This could cause a problem in certain scenarios; for example, when sending a top-level transaction to a new node in a migrated network, as the old network parameters would not exist on this new node. This has now been fixed.
  • When resolving a party, in some code paths, wellKnownPartyFromAnonymous did not consider notaries from network parameters when trying to resolve an X.500 name. This scenario could occur when introducing a new node to a newly-migrated network as the new node would not have the old notary in its network map. This has now been fixed. Notaries from network parameters are now considered in the check.

The Corda Enterprise Edition 4.12 release introduces upgrades to the Java and Kotlin versions, along with associated upgrade support. Apart from the features supporting the Java and Kotlin upgrade, no other major new features have been introduced. In this release, Java has been upgraded to Java 17 from Java 8 and Kotlin has been upgraded to Kotlin 1.9.20 from 1.2.71.

When a CorDapp(s) and a node are successfully upgraded to 4.12, you are able to seamlessly interoperate 4.12 and 4.11 (or earlier) nodes on the same network, including the existing transactions on the ledger.

Supporting new Java and Kotlin versions is a major feature, as we must also handle legacy contracts from existing backchains. The upgraded Java and Kotlin versions also have implications for CorDapp developers. Simply replacing the Corda JAR without introducing other changes is not possible.

As a developer or node operator, you should upgrade to the latest released version of Corda as soon as possible. The latest Corda Enterprise release notes are on this page, and for the latest upgrade guide, refer to Corda Enterprise Edition 4.11 to 4.12 upgrade guide.

The steps from this guide only work for direct upgrades from Corda 4.11 to 4.12. If you have any nodes on versions 4.10 and below, you must upgrade them to 4.11 first. To do that, consult the relevant release upgrade documentation.

Corda 4.12 uses platform version 140.

For more information about platform versions, see Versioning.

Corda 4.12 requires Java 17 and Kotlin 1.9.20. This means that you must recompile any legacy CorDapps written for 4.11 or earlier to work with Java 17 and Kotlin 1.9.20 to be compatible with Corda 4.12. These upgrades enhance the supportability and security of Corda.

The base Corda package includes several SDKs and libraries. These SDKs and libraries are compatible with Java 17 and Kotlin 1.9.20:

SDK/libraryJava 17 compatible release
corda-shell4.12
r3-libs1.4
confidential-identities1.2
accounts1.1
token-sdk1.3
reissue-cordapp1.1
archiving1.2
ledger-graph1.3
r3-tools4.12

The Collaborative Recovery solution, along with the associated CorDapps (LedgerSync and LedgerRecover), is deprecated, and has been removed in Corda 4.12. You are now advised to use the new recovery tools introduced in version 4.11, as described in the Corda Enterprise Edition 4.11 release notes.

Corda 4.12 introduces the Transaction Validator Utility (TVU), a tool that validates transactions committed to the database to avoid post-migration errors when upgrading to Corda 4.12. For more information, see Transaction Validator Utility.

Only CorDapps using signature constraints are supported in Corda 4.12; hash constraints are not supported. Using signature constraints has been recommended in previous releases of Corda as it eases the CorDapp upgrade process. If you have any 4.11 CorDapps using hash constraints, you must migrate them to signature constraints on 4.11 before upgrading to 4.12.

Once you have recompiled your 4.12 CorDapps for Java 17 and Kotlin 1.9.20, you must sign them using the same set of keys used by the 4.11 CorDapp.

Explicit contract upgrade is not supported in Corda 4.12.

You must review your CorDapps and check for any making the following calls:

  • SignedTransaction.toLedgerTransaction().verify()
  • WireTransaction.toLedgerTransaction().verify()
  • TransactionBuilder.toLedgerTransaction().verify()

CorDapps that make the above calls will not work for legacy transactions. To make those CorDapps compatible, change them to SignedTransaction.verify().

The node explorer has not been converted to use Java 17 and is not provided in the release packs. If you wish to use a node explorer, the only current option is to use a 4.11 node explorer and use it to connect to a 4.12 node.

The following two public repositories provide various CorDapp samples (branch: release/4.12):

Most samples have been converted over to Java 17, Kotlin 1.9.20, and Gradle 7.6.4.

The samples have been written to work with Corda Open Source. To convert a sample to work with Corda Enterprise, then at a minimum you need to point to a repository where your enterprise artifacts are installed. Also, the artifact group name for ENT (com.r3) must be different from OS (net.corda). For example, switch net.corda:corda-node-driver:4.12 (Corda OS) to com.r3.corda:corda-node-driver:4.12 (Corda ENT).

The following dependencies have been used in samples and can be switched from Corda OS to Corda Enterprise:

  • corda
  • corda-confidential-identities
  • corda-core-test-utils
  • corda-finance-workflows
  • corda-jackson
  • corda-node
  • corda-node-api
  • corda-node-driver
  • corda-rpc
  • corda-shell
  • corda-test-utils
  • corda-testserver-impl

The samples listed below have been converted to and tested with Java 17 and Kotlin 1.9.20:

CorDapp typeCorDapp
Accountsobligation-accounts
sharestatewithaccount
supplychain
worldcupticketbooking
Advancedduediligence-cordapp
negotiation-cordapp
obligation-cordapp
superyacht-cordapp
syndicated-lending
Basiccordapp-example
flow-database-access
flow-http-access
opentelemetry-cordapp-example
ping-pong
tutorial-applestamp
tutorial-jarsigning
tutorial-networkbootrstrapper
Featuresattachment-blacklist
attachment-sendfile
confidentialIdentity-whistleblower
contractsdk-recordplayers
cordaService-autopayroll
customlogging-yocordapp
customquery-carinsurance
dockerform-yocordapp
encumbrance-avatar
multioutput-transaction
notarychange-iou
observableStates-tradereporting
oracle-primenumber
postgres-cordapp
queryableState-carinsurance
referenceStates-sanctionsBody
schedulableState-heartbeat
state-reissuance
Tokensbikemarket
dollartohousetoken
fungiblehousetoken
stockpaydividend
tokentofriend

The following Kotlin and Java CorDapp templates have been converted to Java 17, Kotlin 1.9.20, and Gradle 7.6.4. They have been written to work with Corda Open Source Edition (branch: release/4.12):

The optional gateway plugins release pack contains the flow and node management plugins used by the CENM gateway service. These plugins provide GUI-based flow and node management functionality. Since CENM has not yet been converted to use Java 17, these plugins are not included in the 4.12 release. Once CENM and plugins have been converted, they will be added in a future release. If you wish to use flow and node management functionality, you can obtain the plugins from the 4.11 optional-gateway-plugins release pack and use them with the CENM gateway service.

If your CorDapp is using internal APIs or reflective access, then you may need to explicitly open the module on the command line. You can do this by adding one or more –add-opens options when starting Corda.

Previously, if a flow was resuming on node startup, the thread context class loader was not set, potentially causing ClassNotFound issues for CorDapp classes. This has been fixed now.

If you start the node with log level set to trace via the command line option --logging-level=TRACE, then you will see some Unable to format stack trace outputs from Log4j caused by a bug in Artemis. These can be ignored and have no effect on node operation. They can be removed via a custom log4j.xml where trace output from the org.apache.activemq.artemis.core.paging.cursor.impl.PageCursorProviderImpl logger is removed.

At node startup with the default Log4j, the following message appears: main WARN The use of package scanning to locate plugins is deprecated and will be removed in a future release. This is a warning only and can be safely ignored. We are currently investigating alternatives.

The Corda 4.12 notaryhealthcheck-client fails to start. This will be fixed in a future patch release. As an alternative, you can use the notaryhealthcheck-client provided with the Corda 4.11 release.

When running the Gradle task deployNodes, you may occasionally see the following warning message:

exception in disposal thread: org/bouncycastle/util/dispose/DisposalDaemon$3

This is a warning message from the LTS version of Bouncy Castle we are currently using. There is no user impact and it is related to disposing of references with native code. This will be fixed in a future patch release.

The following table lists the dependency version changes between 4.11 and 4.12 Enterprise Editions:

DependencyNameVersion 4.11 EnterpriseVersion 4.12 Enterprise
com.google.guava:guavaGuava28.0-jre33.1.0-jre
co.paralleluniverse:quasar-coreQuasar0.7.16_r30.9.0_r3
org.bouncycastleBouncy Castlejdk18on:1.75lts8on:2.73.6
pro com.guardsquare:proguard-gradleProGuard6.1.17.3.1
org.yaml:snakeyamlSnakeYAML1.332.2
com.github.ben-manes.caffeine:caffeineCaffeine2.9.33.1.8
io.netty:netty-tcnative-boringssl-staticTC Native2.0.48.Final2.0.65.Final
org.apache.commons:commons-configuration2Commons Configuration22.10.02.10.1
co.paralleluniverse:capsuleCapsule1.0.31.0.4_r3
org.ow2.asm:asmASM7.19.5
org.apache.activemq:*Artemis2.19.12.32.0
com.fasterxml.jackson.*Jackson XML2.13.52.17.0
org.eclipse.jetty.ee10:jetty-ee10-*Jetty9.4.53.v2023100912.0.7
org.glassfish.jersey.*Jersey2.253.1.6
javax.validation:validation-apiValidation-2.0.1.Final
org.slf4j:* SimpeLog4J1.7.302.0.12
org.apache.logging.log4j:*Log4j2.17.12.23.1
com.squareup.okhttp3:okhttpOK HTTP3.14.94.12.0
io.netty:*Netty4.1.77.Final4.1.109.Final
org.apache.commons:commons-fileupload2-jakartaFile Upload1.42.0.0-M1
com.esotericsoftware:kryoKryo4.0.25.5.0
org.mockito:mockito-coreMockito2.28.25.5.0
org.mockito.kotlin:mockito-kotlinMockito for Kotlin1.6.05.2.1
org.jetbrains.dokka:dokka-gradle-pluginDokka for Gradle0.10.11.8.20
net.i2p.crypto:eddsaEddSA0.3.0-
com.zaxxer:HikariCPHikari3.3.15.1.0
org.iq80.snappy:snappySnappy0.40.5
commons-io:commons-ioCommons I/O2.62.7
org.javassist:javassistJava Assist3.27.0-GA3.29.2-GA
org.jooq:joorJoor-0.9.15
org.apache.curator:*Apache Curator5.1.05.6.0
org.apache.zookeeper:zookeeperApache Zookeeper-3.8.3
org.apache.commons:commons-dbcp2Apache Commons-2.12.0

Was this page helpful?

Thanks for your feedback!

Chat with us

Chat with us on our #docs channel on slack. You can also join a lot of other slack channels there and have access to 1-on-1 communication with members of the R3 team and the online community.

Propose documentation improvements directly

Help us to improve the docs by contributing directly. It's simple - just fork this repository and raise a PR of your own - R3's Technical Writers will review it and apply the relevant suggestions.

We're sorry this page wasn't helpful. Let us know how we can make it better!

Chat with us

Chat with us on our #docs channel on slack. You can also join a lot of other slack channels there and have access to 1-on-1 communication with members of the R3 team and the online community.

Create an issue

Create a new GitHub issue in this repository - submit technical feedback, draw attention to a potential documentation bug, or share ideas for improvement and general feedback.

Propose documentation improvements directly

Help us to improve the docs by contributing directly. It's simple - just fork this repository and raise a PR of your own - R3's Technical Writers will review it and apply the relevant suggestions.