Cleo Harmony v5.5 Release Notes

Cleo VersaLex is the platform that powers the Cleo family of Secure Data Integration (SDI) products—The Cleo LexiCom® product is a desktop-based client solution for communication with major trading networks. The Cleo VLTrader™ product is a server-level solution designed to meet the needs of mid-enterprise organizations. The Cleo Harmony™ product is tailored for large enterprise needs. Enterprise capabilities include system monitoring, enhanced business-level dashboards, VLTracker, SNMP traps, dynamic blacklisting, and whitelisting.

Public REST API Expansion

Since their introduction in version 5.4, the Cleo Harmony public REST APIs have enabled users to configure and manage the product in a “lights out” manner. To provide additional flexibility in operating the Cleo Harmonyinstallation, new REST API endpoints for provisioning users and managing nodes have been introduced. In addition, several existing endpoints have been further improved and expanded.

Beyond the updates to the endpoints themselves, both OAuth and Basic authentication is now supported by the REST APIs.

Support for Cross-Origin Resource Sharing (CORS) is supported in version 5.5.

For more detailed information visit the updated developer.cleo.com.

New Web Admin User Interface

Beginning with this release, an updated user interface for the web admin is introduced. The new user interface is designed to improve not just usability of existing functions, but also improve the responsiveness of the user interface and decrease the required resource overhead for logged in users.

In this release, the Event Log, Transfers, and Scheduler interfaces have been significantly improved. Additional areas of the user interface will be released in phases in future updates and releases.

Ad-hoc file sharing for Cleo Portal

Increasingly, there is a need for end users to be consumers or producers of data movement orchestrations. In an effort to facilitate simpler and ad-hoc file sharing, Cleo Portal now supports sharing files and folders between end users through a separately licensable set of functionality called Unify in Portal.

The Cleo Portal UI now includes up to three spaces for sharing - Home, Connections, and Shared with me:

• Users with the Cleo Unify privilege enabled at the host level can initiate sharing from their Home space.
• Administrator (VLNavigator) users can also initiate sharing from the Connections space.
• Files and folders that have been shared with other users appear in those users' Shared with me spaces.

Existing Cleo Unify customers entitled to the Unify in Portal licensable set and encouraged to upgrade and utilize the updated Cleo Portal functionality.

Database schema updates

The VLUsers table now contains the field, UID. Values in this field are used to uniquely identify VLNavigator users so that they can share folders and files in Cleo Portal.

There are some upgrades made available in version 5.5 that might affect your system in ways you might not anticipate and that you should be aware of.

Cleo Portal custom branding

If you implemented custom branding in the Cleo Portal, you might need to modify your implementation as follows:

• Replace instances of

  #top-banner .banner-text

  with

  #top-banner .banner-text a

• Replace instances of

  .navbar-brand

  with

  app.portal .navbar-brand

Update to Cleo VLNavigator native users

Email address, user UID and LDAP connector

Email addresses and user UIDs are now required for end users when using the new Unify in Cleo Portal. To this end, an LDAP connector now requires both email and user UID attributes. Pre-existing native users and system options still operate as before, but when they are edited or created new, they might require that email attributes or UID attributes be provided.

New default for Replicate Log Event in Cluster setting

The default setting for Administration > Logs > Replicate Log Event in Cluster is now set to true. This is because the new UI components, along with Cleo Portal and the REST API, rely on the data within the associated distributed NoSQL database.

Scheduler automatic start in new location

The option to start the Scheduler automatically has been refactored. Before version 5.5, it was on the Scheduler page. Now, it is a system property called Run Scheduler Automatically At Startup and you can find it in Administration > System > Other. By default, the Scheduler starts automatically. If, however, a customer had the Scheduler off by default and upgrades, that setting is honored after upgrade.

REST API updates

• All API endpoints: All time stamps now contain a SSS (millisecond) component. Note that the time stamps still conform to ISO-8601.
• api/events: The "job" event record has now been reclassified as "run", to more closely match the underlying VersaLex event type.
• api/events: The "attibutes.alias" property, which contains the event's source path, was formerly specified only on the "job" events (which are now reclassified as "run" events). Now, the "attibutes.alias" property is specified on all events associated with a thread.
• api/transfers. Re-receive transfers are now more correctly classified with the "incoming" direction. Before, they were classified with the "local" direction.
• api/transfers: Transfers with a direction of "local" (for LCOPYs) will now report two entries…one for inbound and one for outbound. Formerly, only one entry was reported.
• GET api/users/{userId} used to return an array called "permissions". It now returns an object called "privileges".
• GET api/folders used to return an object containing information about the current user's home folder. It now returns a Collection object, and the home folder information can be found in the "resources" array.

Synchronizing instances of ElasticSearch and GraphDB

VersaLex now allows clustering for ElasticSearch and GraphDB. You can configure ports using the following system.properties. This is useful when running multiple instances of VersaLex on the same machine. However, running multiple instances on the same machine is not recommended, but can be done for testing purposes.

ElasticSearch

VL.elastic.search.http.port=portnumber

Default value is 9200.

VL.elastic.search.data.port=portnumber

Default value is 9300.

GraphDB

VL.graphdb.coordination.port=portnumber

Default value is 5001.

VL.graphdb.data.port=portnumber

Default value is 6001.

SMB and FIPS

Support for SMB version 2, which is not compatible with FIPS, is new in Cleo Harmony and Cleo VLTrader version 5.5. If you want to use an SMB connector in FIPS mode, you must use SMB version 1.

Clustering considerations for Unify in Portal

You can safely add one or more instances to an existing instance of Unify in Portal without intervention provided the additional instances have had no previous Portal activity.

You can create a cluster from two or more instances that have each had previous activity. However, because there is no way to merge the underlying databases, all but one of the databases must be wiped. By default, the database with the most recent transaction is used moving forward and the others are wiped. Alternatively, you can choose to manually wipe all but one of them and use the remaining one moving forward. In either case, the remaining database is the basis for all databases moving forward.

You can back up the database on the instance in question by saving the contents of the directory, <install>/core/data/cleo.neo-store. To wipe the database, delete the directory, <install>/core/data/cleo.neo-store.

If you already have two or more instances of Cleo Harmony clustered and upgrade using a license that adds Unify in Portal, the clustering for Unify in Portal will work properly without any intervention.

The following sections contain descriptions of issues fixed in Version 5.5 and subsequent patch releases:

The following issues are fixed in Version 5.5.0.10:

Enhancements - Portal

• Enabled adding and modifying user access expiration dates on shared items.

Bug Fixes - Framework

• Fixed a problem where mailboxes configured to authenticate using "Connector Host" authentication were unable to login correctly. This problem was introduced in patch 5.5.0.7.
• Fixed a problem that could cause deadlocks to occur, for example, suspended AS2 actions and suspended scheduler processing. This problem was introduced in patch 5.5.0.7.
• Fixed an issue where a ConcurrentModificationException was seen intermittently under high load against the VersaLex SOAP web service endpoint.
• Updated the Event Logs' advanced Event Type filter dialog box to fix an issue where response errors were not filtered correctly.
• Fixed an issue where breadcrumbs were not being populated appropriately when displaying Administration User Management features.

Bug Fixes - OFTP

• Fixed an issue in which, when an OFTP trading partner was sending to a VersaLex OFTP 'Server Only' host but disconnected before the host sent all its files to the trading partner, a NullPointerException was being thrown while the host attempted to re-establish the connection.

Bug Fixes - Portal

• Cleo Harmony and Cleo VLTrader only: Removed default minimum date on datepickers in Cleo Portal.

Bug Fixes - Connector

• Fixed an issue where having multiple EEI connectors in use could eventually cause socket exceptions with "No buffer space available".

The following issues are fixed in Version 5.5.0.9:

Enhancement - Framework

• Reduced the number of times the file system is accessed when resolving a unique filename to increase performance on file systems with high latency.
• Added new Retry All Failed Scheduled Actions property to the Administration > System > Other menu. When enabled, the scheduler automatically retries actions that fail. Retries occur after the Autosend Restart time (in minutes) has elapsed. By default, when some actions fail (both autosend and periodic), the user is instructed to correct the action and either run it interactively or restart the schedule. Enable this option to avoid this manual intervention.

Bug Fixes - Framework

• Fixed an issue where using inline filtering could leave the page in an invalid state.

The following issues are fixed in Version 5.5.0.8:

Bug Fixes - Framework

• Fixed an issue where synchronization over HTTP/s could cause performance related issues when there are more than several thousand CA certificates loaded.
• Cleo Harmony and Cleo VLTrader only: Fixed an issue with authentication against Lotus LDAP.
• Fixed an issue where an Access is Denied error was being logged on startup while attempting to read the host files.
• Fixed an issue where a store-and-forward file could remain on the active IO list, causing the trading partner to see an error if the file is resent very quickly (within a few seconds).

Bug Fixes - AS2/AS3

• Fixed a problem where a large, AS2 compressed message containing compressed in the source file name could not be successfully decompressed.

Enhancement - Framework

• Added the ability to export CA certificates that contain an OpenPGP or SSH FTP public key.

The following issues are fixed in Version 5.5.0.7:

Major Enhancements - Framework

• Cleo Harmony and Cleo VLTrader only: Added the new Storage connector, which provides an internally managed, encrypted file system. See the Info tab within the Templates > Generic > Generic Storage host for more details. For uploads to the storage connector when Cleo Harmony or Cleo VLTrader software is installed on a Linux system, it is recommended to have ~3000 available entropy whether generated locally or by an entropy generator.

Enhancements - Framework

• Cleo Harmony and Cleo VLTrader only: Synchronized Cleo Harmony and Cleo VLTrader nodes can now be organized into logical groups that designate how production and backup systems will respond when production systems go offline. Supported group configurations are multiple production/backup groups or one all-production group and one all-backup group. See the Synchronization section of the User's Guide for further details.
• Cleo Harmony and Cleo VLTrader only: Added support for URL parameters in virtual subfolders in Users hosts. Additionally, the %username% macro is supported in the URL parameter. Example: MyHome=Smb:SmbHost?smb.SharePath=//filsvr01/users/home/%username%

Enhancements - Portal

• Cleo Harmony and Cleo VLTrader only: Added the ability to enable both SAML and local login for Cleo Portal users at the same time.

Bug Fixes - Framework

• Updated expired test.cleo.com SSL and signing/encryption certificate used for Support Bundles and Cleo System Test hosts.
• Cleo Harmony and Cleo VLTrader only: Fixed an issue where a NullPointerException would occur when attempting to log in to the FTP server through LDAP, but the LDAP server was not configured. This issue would only occur when Cleo Harmony or Cleo VLTrader contained a Users host configured to use a VLNav connector.
• Fixed an issue in the UI where the user was blocked from updating a host Inbox/Outbox/Sentbox/Receivedbox setting from an invalid path to a valid path value. This was most often seen when using URI values for theInbox/Outbox values.
• Fixed an issue where duplicate Email entries were being added when importing a Users host and merging it with an existing Users host. Related incident #389280.
• Fixed an issue where certain scheduled items could throw a NullPointerException when run on a slave node of a cluster. This would only occur for actions that were not scheduled for autosend. Furthermore, this problem would not block the action from ultimately running, as the master node would recover and run the action.
• Fixed an issue where a remote user would not be able to log in after the host was deleted outside the product and imported again using the same name with a different combination of uppercase and lowercase characters.
• Fixed an issue where an action would get scheduled twice if a host was imported with the same alias as an existing host, but using a different combination of uppercase and lowercase characters.
• Fixed an issue where when you tried to change the case of any character in a host name from uppercase to lowercase or vice versa, a hidden window would open and cause the service to become locked.
• Fixed an issue where the software update function would not use proxies other than the system default as a forward proxy, even if they are available.
• Cleo Harmony and Cleo VLTrader only: Fixed an issue where the user to be impersonated (typically identified by either email address or username) could not be identified by email address.

Bug Fixes - SSH FTP

• Cleo Harmony and Cleo VLTrader only: Fixed an issue where some SFTP clients connecting to the Cleo Harmony or Cleo VLTrader SFTP server would see a 12-hour timestamp instead of a 24-hour timestamp.

Bug Fixes - SMTP

• Fixed a problem with SMTP where the string, null, was preceding the source file string when using a %sourcefilebase% macro in the Subject field. This condition would only occur when the message also contained "Inline" text.

Bug Fixes Portal

• Cleo Harmony and Cleo VLTrader only: Fixed an issue where a newly added LDAP user would not be able to login to Cleo Portal without a long wait or triggering an LDAP update through the UI.

Bug Fixes - Connector

• Fixed an issue where a % followed by a hexadecimal value in an action name could result in an exception or incorrect values in the database when using LogTransfersForPutAndGet=%this% in a URI path.

Bug Fixes - Router

• Fixed an issue where a file transferred using the Router connector would incorrectly show the timestamp of the file as 01/01/1970 00:00:00.

The following issues are fixed in Version 5.5.0.6:

Enhancements - Connector

• Cleo Harmony and Cleo VLTrader only: Added the ability for the S3 connector to use transfer acceleration with an S3 bucket enabled with accelerate mode

Enhancements - Framework

• Added more debug logging when exceptions occur while the UI is attempting to add a host.

Bug Fixes - Framework

• Fixed an issue where LDAP users configured in Cleo VLNavigator were not able to log into the admin web UI.
• Fixed a problem where a native AS/400 sign-on dialog box could unexpectedly be displayed on the user's computer.
• Cleo Harmony and Cleo VLTrader only: Fixed an issue where a PGP certificate would cause an incorrect error message during a certificate expiration check.

The following issues are fixed in Version 5.5.0.3:

Enhancements - Framework

• Cleo Harmony and Cleo VLTrader only: Added a new page in the Web UI allowing administrators to view all Portal users.
• Cleo Harmony and Cleo VLTrader only: Updated the /users/{userId} REST API endpoint to provide more user information. The endpoint /users/{userId} now returns login and sharing information if Unify in Portal is licensed and enabled. Added the endpoint /users for administrators to obtain a list of users they can view.
• Cleo Harmony and Cleo VLTrader only: Added a new design for the VersaLex event logs report.
• Cleo Harmony and Cleo VLTrader only: Added option for two-factor authentication for User Hosts when Unify in Portal is licensed.

Enhancements - Portal

• Cleo Harmony and Cleo VLTrader only: Updated the /folders and /folders/{folderId}/children responses to return an object called sharing.sharedByType to indicate how the Resource was shared with this user. Renamed the sharing.sharedBy object to sharing.sharedByUser.

Enhancements - Connector

• Added source deletion monitoring feature to connector hosts.
• Cleo Harmony and Cleo VLTrader only: Added the ability for the S3 connector to use the default credentials provider chain when running VersaLex on an EC2 instance. In this case, if an IAM role is defined, the Access Key and Secret Access Key properties become optional.
• Added a store-and-forward feature that is available when configuring an EEI connector URI as the inbox. When the Store And Forward connector property is enabled and the host's receivedbox is configured, if a failure occurs on an inbound transfer while attempting to access the EEI queue on the AS/400, the receivedbox copy is still completely stored and then forwarded later when the EEI queue is available again.
  Note: For this feature to work, Administration > Other > Disable Date/Time Portion Of Filenames In Sent/Received Box must be unchecked.

Bug Fixes - Framework

• Cleo Harmony and Cleo VLTrader only: Fixed a problem in the web UI where transfer events were not being sorted correctly.
• Cleo Harmony and Cleo VLTrader only: Fixed an issue where /api/actions would return a NullPointerException after an outbox file is downloaded through the REST API.
• Changed method for passing stable files lists to scheduled autosend actions, making the process more reliable.
• Cleo Harmony and Cleo VLTrader only: Fixed an issue where a bad trading partner certificate used in a mailbox could prevent the Local Listener from properly starting.
• Fixed a problem where, when running natively on the AS/400 and using the Browse button to select a new certificate, a dialog box would be displayed incorrectly stating that the certificate was a duplicate.

Bug Fixes - Portal

• Cleo Harmony and Cleo VLTrader only: Fixed bug where single quotes in folder names caused these names to be appended to child folder names.
• Cleo Harmony and Cleo VLTrader only: Fixed a problem where file uploads through Portal failed to fire triggers which were configured to respond to the uploads.

Bug Fixes - Connector

• Cleo Harmony and Cleo VLTrader only: Fixed an issue where a Connector Action with a SET command would not properly be triggered.
• Cleo Harmony and Cleo VLTrader only: Fixed a problem where a property change in a newly imported Connector Host is not seen on the first run of an action within that host.

Bug Fixes - Router

• Cleo Harmony and Cleo VLTrader only: Fixed a problem where a URI (for example, smb:Fileserver01/...) could not be used as a destination in the new Router connector.

Security - Framework

• Access tokens in URL query strings are no longer accepted as valid authorization for any endpoints except /files and /folders GET requests.
• Addressed an issue where a fuzzing operation performed on the user invitation functionality corrupted a host file, which subsequently prevented the user from logging in to the web UI.
  Note: Although Cleo was not able to reproduce this error, extra checks were added to better verify the integrity of email addresses for user invitation operations. Further, more descriptive messaging has been added to better inform you in the event of file corruption.
• Cleo Harmony and Cleo VLTrader only: Added the header Cache-Control: no-cache, no-store to all REST API responses to prevent the client from caching login information.

Security - HTTP

• Cleo Harmony and Cleo VLTrader only: Fixed a problem where the IP address of a Local HTTPs User logging in using SSL client authentication would not be compared to the configured whitelist. Requires Cleo VLProxy3.7.0.3. Related incident #380639.

Security - SSH FTP

• Cleo Harmony and Cleo VLTrader only: Fixed a problem where the IP address of a user logging in through SSH FTP using PKA would not be compared to the configured whitelist. Requires Cleo VLProxy 3.7.0.3. Related incident #380639.

The following issues are fixed in Version 5.5.0.2:

Major Enhancements - Framework

• Cleo Harmony and Cleo VLTrader only: Added a new inbound/outbound Router connector that can be used to route files based on filenames and/or file content. Common routing tokens are natively extracted for EDI (X12, EDIFACT, TRADACOMS) and HL7 files; tokens can be extracted from other text files using regular expressions. Route destinations can be file systems or other connectors, and destination filenames can make use of any of the extracted tokens. Refer to the Info tab within the Templates > Generic > Generic Router host connection for more details.

Enhancements - Framework

• When a New License is available email is generated, the email now contains all the differences between the active and available license. Related incident #364379.
• Cleo Harmony and Cleo VLTrader only: Added Administration > Other > LDAP SSL Minimum Protocol Version and Administration > Other > LDAP SSL Maximum Protocol Version properties, allowing client connections to LDAP servers to be negotiated with SSL protocol versions other than the default settings of SSL 3.0 for the minimum value and TLS 1.2 for the maximum value.
• The %date% macro is now supported in default inbox/outbox/sentbox/receivedbox directories defined under the host General tabs and the sentbox and receivedbox archive directories defined under the local user host Generaltabs. Be careful using the %date% macro in the default outbox because files in the date-stamped outbox subdirectory will not be sent if the send action occurs after midnight. Likewise, archiving entries in the sentbox, receivedbox,sentbox archive and receivedbox archive date-stamped directories will only occur for the current date.

Bug Fixes - Framework

• Cleo Harmony and Cleo VLTrader only: Fixed a problem on the Scheduler page in the web UI where the host filter options contained out-of-date values.
• Fixed a problem where the %sourcefile% macro was not resolving in the Execute On Successful Copy command.
• Fixed a problem that caused a PUT command to erroneously delete the source when a preceding PUT -DEL command failed during its source deletion phase.
• Cleo Harmony and Cleo VLTrader only: Fixed an issue where access to the admin web UI via Cleo VLProxy was being allowed even though it was configured to be disabled. This occurred when Cleo VLProxy was being accessed through the portal web UI. Requires Cleo VLProxy 3.7.0.2.
• Cleo Harmony and Cleo VLTrader only: Fixed a database payload issue where updating the VLSend table could result in a SQL syntax exception after a failed send attempt.
• Cleo Harmony and Cleo VLTrader only: Fixed a problem where the Scheduler table did not correctly restore the saved column states.
• Cleo Harmony and Cleo VLTrader only: Fixed a problem where scrolling through the date filter's calendar did not display the correct months.
• Cleo Harmony and Cleo VLTrader only: Fixed a problem where listening on server ports would be delayed if the local user folder creation was slow.
• Cleo Harmony and Cleo VLTrader only: Fixed a problem in the FIPS edition of the product where you could neither configure nor use SAML.
• Cleo Harmony and Cleo VLTrader only: Fixed an issue where any logged-in user could see all host actions when performing a search regardless of permissions.
• Cleo Harmony and Cleo VLTrader only: Fixed a problem where updating a connector table property through the REST API would have an issue if special characters like { and } appeared in the table property value.

Bug Fixes - FTP

• Fixed a problem where the Source.Directory property was not being included as part of the properties that can be retrieved through the Java API's ILexiComIncoming interface.

Bug Fixes - SSH FTP

• Fixed a problem where the Source.Directory property was not being included as part of the properties that can be retrieved through the Java API's ILexiComIncoming interface.

Bug Fixes - OFTP

• Fixed a problem where back-to-back CD requests should be allowed following an EFPA(Speaker=Yes) request, as per RFC 5024 Section 3.3.4.2 Rule 4.

The following issues are fixed in Version 5.5.0.1:

Major Enhancements - Framework

• Cleo Harmony only: Added a new connector to allow communication with Microsoft Azure Blob Storage. Refer to the Info tab within the Templates > Generic > Generic AzureBlob host for more details.

Enhancements - Framework

• Cleo Harmony and Cleo VLTrader only: Added ability to Schedule and Unschedule multiple Actions in a single operation on the web UI Scheduler page.
• Cleo Harmony and Cleo VLTrader only: Changed the behavior in Cleo Portal and the web admin UI so that a session timeout while logged in with SAML now causes the user to be taken to the same thank you page as when explicitly logging out. The thank you page contains a link to log in again. Previously a session timeout would cause the user to be taken back through the SAML login flow immediately.
• Cleo Harmony and Cleo VLTrader only: Implemented shortcuts for unscheduling actions on the web UI Scheduler page.
• Cleo Harmony and Cleo VLTrader only: Added ability to resize and reposition certain dialog boxes in the new web UI.
• Cleo Harmony and Cleo VLTrader only: The session powering the classic pages in the web admin UI (for example, the Hosts page) is now prevented from timing out while using the non-classic pages. This means that a user will no longer experience delays (identified by the "spinning wheel") when transitioning from the Scheduler, Transfers, Logs, or Administration pages back to the Hosts page or another classic page.
• Cleo Harmony and Cleo VLTrader only: Increased the database payload VLIncoming.Filename column size from 100 to 255.
• Cleo Harmony and Cleo VLTrader only: Added the ability for VLNavigator users to impersonate other non-administrator users. Added the property Allow User Impersonation to the VLNav connector to permit impersonation of users. See VLNav connector and developer.cleo.com for more information.
• Cleo Harmony and Cleo VLTrader only: Improved the connector property table editor, adding cloning and search capabilities. Also added a table row editor for larger tables and fields. Additionally, added row order controls for certain connectors.
• Cleo Harmony and Cleo VLTrader only: Added ability to customize the FTP server's SYST command response. See the User's Guide for further details.
  Note: Cleo VLProxy 3.7.0.1 is needed if using Cleo VLProxy.
• Cleo Harmony and Cleo VLTrader only: Added the ability in IP Filters to add an IP or IP range that should never be blacklisted.
  Note: Cleo VLProxy 3.7.0.1 is needed if using Cleo VLProxy.

Enhancements - Portal

• Reduce loading time for initial logins to Portal when Unify in Portal is enabled.

Enhancements - Connector

• Added a System Public property for connectors that permits access to a connector from any folder branch.

Bug Fixes - Framework

• Cleo Harmony and Cleo VLTrader only: Fixed problem where a Users Privileges panel would not update appropriately after a new product license was applied.
• Fixed an issue in the web admin UI where inapplicable pages were shown when an anonymous user was logged in.
• Fixed a problem where downloading an installer through software update would fail at the end of the download with an EOFException.
• Cleo Harmony and Cleo VLTrader only: Fixed a problem where an LDAP user could not be added to a non-LDAP user group in Cleo VLNavigator because an Email Address was required.
• Cleo Harmony and Cleo VLTrader only: Added proper support for SAML deflate encoding/decoding with signatures.
• Cleo Harmony and Cleo VLTrader only: Fixed a potential problem with the ability to log into the web admin UI if the Local Listener host had been manually deleted.
• Cleo Harmony and Cleo VLTrader only: Fixed an issue where apostrophes in file names would cause child folder listings to fail in Portal.
• Cleo Harmony and Cleo VLTrader only: Fixed an issue where autosend actions would not run if there was an error with any Connector Host used within any autosend action.
• Improved appearance of pointer when hovering over a selectable table row.

Bug Fixes - OFTP

• Fixed a problem where if the server successfully received a file but the client sent an ESID right after the transfer finished, the transfer was not being marked as completed.
• When VersaLex returns an OFTP EERP or NERP, now in all cases a hash value is only included if either the ERRP or NERP is signed or if the 'Always Include EERP Hash' advanced property is on.

Bug Fixes - Portal

• Cleo Harmony and Cleo VLTrader only: Fixed an issue with concurrent downloads through Portal on the same file causing an exception.
• Cleo Harmony and Cleo VLTrader only: Fixed an issue where only the 'administrator' user of the Administrators group could login directly to the web admin UI with SAML enabled.

Bug Fixes - Connector

• Cleo Harmony and Cleo VLTrader only: Fixed an issue with the SMB connector where SMB1 only shares would incorrectly show all files as 0 bytes in Portal.

Bug Fixes - HSP

• Fixed an issue with HSP where the transfer would fail if the inbox on the receiver was using a Connector Host.

The following issues are fixed in Version 5.5.0.0:

Major Enhancements - Framework

• Cleo Harmony and Cleo VLTrader only: A new VLNav host connector can be used to allow VLNavigator users to toggle between end user (aka Portal) and admin user (aka Cleo Harmony and Cleo VLTrader ) web UIs. Configure an activated VLNav host as the authentication connector host in a User mailbox. An admin user is able to access Cleo Harmony or Cleo VLTrader host connection files/folders via Cleo Portal including S3, HDFS, SMB, and File host connections. Since Cleo Portal supports SAML for Single Sign On, VLNavigator users can now also be required to login using SSO, even when they are not given end user protocol access (in this case, the Cleo Harmony or Cleo VLTrader UI is immediately shown when a VLNav user logs into Cleo Portal). As part of this enhancement, the VLNavigator web UI components were absorbed into the Cleo Harmony and Cleo VLTrader web UI (within Administration: Network > Clustering > User Management > Admin Users, and License & Registration > Applications).

Enhancements - Framework

• Cleo Harmony and Cleo VLTrader only: Added a unique identifier (UID) to VLNavigator native users so they can share folders and files in Cleo Portal.
  Note: This includes a new field, UID, in the VLUsers table in the database.
• Updated the recommended signature algorithm from SHA-1 to SHA-256 and the private key size from 1024 to 2048 when generating new RSA certificates via the Certificate Manager or Listener Wizard.
• Whereas before a mismatched host ID in a license_key.txt file would be rejected outright, now license.cleo.com will be queried because floating host IDs are now allowed depending on the deployment.
• Cleo Harmony and Cleo VLTrader only: The list of supported SSH FTP Key Exchange Algorithms set via the SSH FTP Key Exchange Pattern Local Listener advanced property is now presented to the connecting SSH FTP client from most secure to least secure.
• A new option, Allow Overlapping Key Usage, has been added to the Schedule Local Packaging Certificates dialog box. When scheduling a new Local PGP Partner Packaging Signing/Encryption Key for future use (using theCertificate Exchange dialog box via the My Certs tab), this new option allows the new key to be used when it has been scheduled but not yet activated in cases where decrypting an inbound file using the installed key fails. Additionally, during this overlap period, outbound files are signed using both the installed and scheduled keys to avoid possible signature verification errors by the trading partner. By default, the Allow Overlapping Key Usageoption is selected.
• Cleo Harmony only: Added support for all connector hosts within the REST API /connections end point. This includes file system connectors (for example, s3, hdfs, smb, and plain file), integration connectors (for example, clarify and eei), and auth connectors (for example, ldap and vlnav). Look for corresponding updates on developer.cleo.com.
• Software update within product now uses a secure port when communicating with update.cleo.com.
• Cleo Harmony and Cleo VLTrader only: Added support for Cross-Origin Resource Sharing (CORS) response headers in the VersaLex REST API (refer to developer.cleo.com), specifically Access-Control-Allow-Origin andAccess-Control-Allow-Methods. The Access-Control-Allow-Origin response header is configurable; go to REST within the Web Service under the Local Listener. And an OPTIONS request against any of the REST endpoints is now supported, where the response includes the Access-Control-Allow-Methods header.
• Cleo Harmony and Cleo VLTrader only: Added the ability to configure user permissions in a Users host as part of the Home Directory, User Download Folder, User Upload Folder, and Other Folders.
• Cleo Harmony and Cleo VLTrader only: Added the ability to configure virtual subfolders for users in a Users host as part of the User Download Folder, User Upload Folder, and Other Folders. Use the following format to specify the virtual subfolders: virtualFolderName=actualFolder where virtualFolderName is the name displayed to the user and actualFolder is an absolute path, a relative path, a UNC path, or a connector URI path. Also, added the ability to have additional folders specified at the User level through an Add Folders button at the user level.
• Cleo Harmony and Cleo VLTrader only: Added a new SSH FTP server key exchange algorithm -- curve25519-sha256@libssh.org.
• Cleo Harmony and Cleo VLTrader only: Added /api/nodes REST endpoint to allow for performing synchronization commands via the REST API. Six endpoints were added including GET "/api/nodes" to list all nodes in the cluster, POST "/api/nodes" to add a nodes to the cluster, GET "/api/nodes/<Serial Number>" to get information on one node in the cluster and its viewpoint of the other nodes, POST "/api/nodes/<From Serial Number>/initilize/<To Serial Number>" to initialize syncing from one node to another, PUT "/api/nodes/<Serial Number>" to update that node with new information, and DELETE "/api/nodes/<Serial Number>" to remove that node from the syncing cluster.
• Cleo Harmony and Cleo VLTrader only: Added more support for the Cross-Origin Resource Sharing (CORS) specification, specifically Access-Control-Request-Method and Access-Control-Request-Headers in the request and the resulting Access-Control-Allow-Headers in the response.
  Note: Cleo VLProxy 3.6.1.7 is required if using Cleo VLProxy.
• Cleo Harmony and Cleo VLTrader only: Added a new system option, Cluster Network Not Fully Reachable, that prevents the document DB from attempting to replicate. This is for cases where the synced VersaLexes are not fully able to connect with each other over the required document DB ports (for example, failover VersaLex cannot connect back to the primary VersaLex). Turning on this option keeps the document DB from restarting over and over, but does mean the failover VersaLex will not include events and transfers for the primary VersaLex should it become active (without some scripting outside of the product).
• Cleo Harmony and Cleo VLTrader only: Updated documentation for database change made in 5.4.1.0: Added new StartDTInt and EndDTInt columns to VLTransfers database table. Columns are millisecond epoch time. Data types are BIGINT or equivalent.
• Added speed improvements when re-displaying large host trees using the View > Search function.
• Added speed improvements when displaying the Export Dialog for systems with many hosts.
• Cleo Harmony and Cleo VLTrader only: Added new LDAP connector that can be used in addition to or instead of the one system options LDAP server. This allows Cleo Harmony and Cleo VLTrader to pull from multiple LDAP servers for Portal/FTP/SFTP user provisioning and authentication.
• Cleo Harmony only: Added a service,kill option to stop the Harmony service without waiting for user sessions to terminate.
• When viewing a VLProxy log in the UI, you can now view the log events relative to a specific user session or request thread together by double-clicking on any of the thread's events. This matches functionality already available when viewing the main log.
• Added a new property, System From Email Address. When a value is specified for this property, it is used as the FROM address in email sent from the system. If no value is specified, the system uses the value specified for the System Administrator Email Address property.

Enhancements - FTP

• FTP only: For security reasons, no longer report the number of current logins during FTP sessions.

Enhancements - HHTP, FTP, SSH FTP

• Cleo Harmony and Cleo VLTrader only: Added support for Load Balancers that add the Proxy Protocol Header to TCP traffic and the X-Forwarded-For header for HTTP traffic. This allows for automatic blacklisting to block the correct IP and not the load balancer IP. To use this feature, the advanced property ProxyProtocol: Regex To Match Load Balancer must be set to match the External Load balancer with Proxy Protocol Capabilities.
  Note: Cleo VLProxy 3.6.1.5 is required if using Cleo VLProxy.

Enhancements - AS2/AS3

• Enhanced the AS2 server to handle scenarios where a non-compliant AS2 trading partner includes either a space or a NULL character before the Disposition header in the MDN.

Enhancements - SSH FTP

• SSH FTP Key Exchange Algorithms are now displayed in the Preferred Key Exchange Algorithm host advanced property from most secure to least secure. Additionally, the default Key Exchange Algorithm has been changed from diffie-hellman-group-exchange-sha256 to curve25519-sha256@libssh.org.
• Added a new SSH FTP key exchange algorithm -- curve25519-sha256@libssh.org.
• Added ability to allow a password or public key to be used for authentication in User hosts for SSHFTP.
  Note: Cleo VLProxy 3.6.1.3 or greater is needed if using Cleo VLProxy.

Enhancements - Portal

• Added a timeout for uploads in Cleo Portal when there is no progress for 150 seconds. The timeout ensures that an upload cannot become stuck in progress if the client is somehow not made aware that the upload was interrupted.
• Cleo Harmony and Cleo VLTrader only: Added the ability for a user to cancel a file upload after it has been started in Cleo Portal. This is for cases where the wrong file was selected, or the upload itself has stalled.
• You can now configure a custom "forgot password" URL for Cleo Portal to send the user to the given URL (rather than displaying the default dialog) when the Forgot your password?' link is clicked.
• You can now configure an application name for Cleo Portal to override the default name used in Cleo Portal user sessions and emails.

Enhancements - Connector

• Made improvements to SMB connector to reduce the number of requests to the server, thus improving performance.
• Cleo Harmony and Cleo VLTrader only: Added new Home: connector which can be used to access files in a User's home folder or subfolders.
• Cleo Harmony and Cleo VLTrader only: When the EEI connector's inbound queue is full and an outbound payload message has been successfully processed, the status message intended for the inbound queue is now stored under the IFS outbound directory in a new INQUEUE subdirectory for later processing when the inbound queue is no longer full. As a side-effect of this enhancement, deletion of the payload file is no longer dependent on the status message being successfully sent to the inbound queue.
• Added a store-and-forward feature that is available when configuring a Clarify connector URI as the inbox. When the Store And Forward connector property is set to true and the host's receivedbox is configured, if a failure occurs on an inbound transfer when attempting to send the file to Cleo Clarify, the receivedbox copy is still completely stored and then forwarded later when Cleo Clarify is operational again.
  Note: For this feature to be work, Administration > Other > Disable Date/Time Portion Of Filenames In Sent/Received Box must be unchecked.
• Cleo Harmony and Cleo VLTrader only: Added the ability to allow multiple EEI trading partners to use the same host. To use this feature, the outbox URI must include the trading partners as a comma-separated list, for example,EEI:Prod/partner1,partner2,partner3,partner4. All outbound trading partner files are placed in the same IFS folder identified by the first partner in the list. If desired, the first partner can be a pseudo name used to specify the IFS folder for the trading relationship. Please note: there is currently no folder or partner duplicate checking for either enabled or disabled hosts. If duplicates occur, the last host containing that folder or trading partner will be used.
• Cleo Harmony and Cleo VLTrader only: When there is an outbound EEI message for a trading partner that is unknown or disabled in VersaLex and ESX Migration is not activated, a failure response is now returned on the EEI inbound queue and an error result is logged in VersaLex.

Enhancements - SMB

• The SMB host connector now supports both SMB1 and SMB2, with SMB2 being preferred. Refer to the Connector Info tab for more information.

Bug Fixes - Framework

• Cleo Harmony and Cleo VLTrader only: Fixed a problem where the ready status of local user hosts that referenced connector hosts would not get updated correctly when the connector host was imported, renamed, or removed.
• Fixed problems where, when configuration changes were made but not saved in certain pages or dialog boxes (Proxies, AS/400 Directory, Database Connections, Database File/EDI Tracking and Monitoring), they might appear to be saved but would not be in effect. When a new session was started, the original values would be displayed again.
• Cleo Harmony and Cleo VLTrader only: Fixed a problem where a triggered new file event would not resolve correctly within action commands when the original source file was a relative path rather than an absolute path.
• Fixed an issue where, when scheduling an action to run every day of the month and the first occurrence of that month was in the following year, the next schedule time would be the last day of that month instead of the first day of the month.
• Multiple actions run through the REST API via separate, concurrent requests will now be run concurrently rather than sequentially. Also an /actions/{id}/run?timeout=x request parameter (where x is number of seconds) can now be used to change the default timeout of 300 seconds. And finally /actions/{id}/interrupt can now be used to interrupt a running action.
• Fixed a problem where, when an SSH FTP transfer was invoked using the curve25519-sha256@libssh.org key exchange algorithm before any use of PGP Packaging encryption, PGP Packaging encryption would fail thereafter with org.bouncycastle.openpgp.PGPException: exception encrypting session key.
• Fixed a problem where sentbox/receivedbox archiving was not appending to existing archive zip files as configured.
• In FIPS mode, SSL now has a minimum of TLS 1.0 (SSL 3.1) and a maximum of TLS 1.1 (SSL 3.2). Previously only TLS 1.0 was supported in FIPS mode. This can be further limited by setting the SSL Minimum Protocol Version and SSL Maximum Protocol Version advanced properties.
• Cleo Harmony and Cleo VLTrader only: Fixed a problem where a Cleo VLNavigator user with view-only schedule privilege could modify an action's schedule.
• Fixed an issue where the Add Mailbox Alias To Inbox and Add Mailbox Alias to Outbox advanced properties did not automatically create the mailbox subdirectories when importing a host.
• Moved the scheduler setting used to automatically run at startup from the schedule itself to system other options. The current value for this setting is migrated on upgrade. The Java API also changed accordingly; for example,ISchedule.setAutoStartup(true) would now be Options.setOther(Options.RunSchedulerAutomaticallyAtStartup, "true").
• Cleo Harmony and Cleo VLTrader only: Fixed a problem so local user hosts that reference a custom directory variable no longer need to be updated in order to take effect after the custom directory variable is changed.
• Fixed a problem where the SSL Server would throw the exception Server selected AEAD suite not supported for versions < TLS 1.2! during the SSL handshake when ECDHE ciphers were presented but the negotiated SSL protocol version was older than TLS 1.2 / SSL 3.3.
• Fixed a problem where when Cleo VLProxy was configured with an SMTP proxy that had MIN/MAX values set to TLS 1.2, the internal connection attempts to Cleo VLProxy would continuously fail and the message iaik.security.ssl.SSLException: Server selected SSL version 3.1 not enabled or not valid! would be logged.
• Fixed a problem where user certificates that were synced from another instance of the product could not be exported from the command line on the synced instance.
• Cleo Harmony and Cleo VLTrader only: Fixed a small memory leak caused by javascript action execution.
• Cleo Harmony and Cleo VLTrader only: Updated intra-process management to better ensure the OSGi and VersaLex processes are kept in sync.
• Cleo Harmony and Cleo VLTrader only: Fixed a problem where an upload through Portal (or REST) that took longer than 60 minutes would not get a complete response back from VersaLex, causing the client side to timeout.
• Cleo Harmony and Cleo VLTrader only: Fixed a problem where the status of a transfer expecting an asynchronous response through REST would remain as receiptPending even after the response had timed out.
• Cleo Harmony and Cleo VLTrader only: Fixed a problem where after an asynchronous MDN has timed out, the transferred file could not be retrieved from the Sentbox through REST.
• Fixed a problem where non-pertinent properties would be displayed in the Local Listener Advanced panel after an update was made by another user.
• Cleo Harmony and Cleo VLTrader only: Fixed a problem where a connection alias could not be renamed through the REST API successfully.
• Cleo Harmony and Cleo VLTrader only: Fixed a problem where temporary host or mailbox actions created as part of SOAP web service requests were not getting cleaned up.
• Cleo Harmony and Cleo VLTrader only: Fixed a problem where changes to the local listener would not be synchronized after the local listener was renamed.
• Cleo Harmony and Cleo VLTrader only: Fixed a problem where a memory leak resulted from an End event not being logged for event-triggered host/mailbox actions.
• Cleo Harmony and Cleo VLTrader only: Fixed a problem with the SOAP web service where if a standalone action was being invoked, a new host was being created and synced and then removed. This was causing unnecessary synchronization across nodes. If the SOAP web service was being repeatedly invoked, this also exposed a memory leak.
• Fixed a problem where unchecking Allow Actions To Run Concurrently could cause the scheduler to stop operating for synchronized systems.
• Cleo Harmony and Cleo VLTrader only: Fixed a problem where an empty Access-Control-Allow-Origin value in the REST web service was not being persisted correctly and would revert to * on a restart.
• Cleo Harmony and Cleo VLTrader only: Fixed a problem when routing an EDI file with a non-ASCII terminator where the ending segments could be corrupted.
• Fixed problem where a modification made to a host on a node of a synchronized system would cause the host's mailbox to become unstable on the synced node. A similar problem could occur if a modification was made to a mailbox, causing the mailbox's action to become unstable on the synced node.
• Fixed a problem where user or CA certificates were not able to be imported from the command line.
• Now avoid re-reading the CA certificates store whenever creating or updating a mailbox with OpenPGP packaging configured.
• Fixed an issue where overriding the BASE DN or Search Filter for VLNavigator LDAP Users was not honored when logging in.
• Cleo Unify only: Fixed a problem where users without permission to do so could set a folder with an expiration to never expire.
• Cleo Harmony and Cleo VLTrader only: Fixed a problem where FTP and SSH FTP transfers showed the resolved source/destination file paths for symbolic links in the server-side system logs.
• Cleo Harmony and Cleo VLTrader only: Fixed a problem where VersaLex would not start if a connector was configured in the Custom Directory Variables and the Authorized Roots feature was enabled.
• Fixed an issue where one of the External IP address finder websites was no longer in service and would sometimes return the incorrect IP address. Changed the website from http://automation.whatismyip.com/n09230945.asp to http://api.ipify.org.
• Cleo Harmony and Cleo VLTrader only: Fixed a problem where symbolic links for SFTP user files and directories were not being resolved correctly.
• Fixed an issue where the HTTPS trusted certificates in the SSL connection were not the same between VersaLex and Cleo VLProxy.
  Note: Cleo VLProxy 3.6.1.2 is recommended.
• Fixed a problem where, when running natively on the AS/400, CA certificates were not visible through the Certificate Manager.
• Fixed a problem where initial connections with an S3 connector were throwing an exception regarding the protocol (HTTP/HTTPS) setting.
• Cleo Harmony and Cleo VLTrader only: Fixed a problem where the Transfer Report sorting was not working correctly causing the HTML report to not group all transfers with the same host/mailbox together.
• Fixed a problem where a filename containing double percent signs (%%) could be stripped to a single percent sign (%) under some circumstances (for example, when the filename was passed through a URI reference).
• Cleo Harmony and Cleo VLTrader only: Fixed an issue where, when log events are being replicated, a very large incoming or outgoing multipart message (>1000 parts) would cause DocumentDBExceptions because of the immense transmission transferId. After installation, the fix takes effect when a new days' log index is created, which is typically one or two days ahead.
• Cleo Harmony and Cleo VLTrader only: Fixed an issue where the VersaLex service/daemon would take a very long time to fully start if the VLNavigator database was down.
• Cleo Harmony and Cleo VLTrader only: Fixed an issue where users would not be able to log into the administrator web UI if the VLNavigator database was down.
• Updated JCIFS library to 1.3.18 to resolve potential deadlocks when using Win/Unix folders or SMB hosts with a DFS.
• Improved performance when host/mailbox/action objects are initially read into memory to help avoid timeout conditions in the web UI.

Bug Fixes - FTP

• Fixed an issue where an exception was not being properly logged for a PGP decryption failure on inbound server-side FTP transfers.
• Cleo Harmony and Cleo VLTrader only: Fixed a problem where, when logging an exception that a configured FTP listener port was already in use, a NullPointerException was also being thrown.
• Cleo Harmony and Cleo VLTrader only: Fixed a problem where the Trigger At Upload Completion and Ignore Exception Without Quit FTP user advanced property settings were not being honored when the user's group was LDAP or Custom.
• Fixed a problem where, when retrieving files in binary mode with the Resume Failed Transfers advanced property enabled and Command Retries > 0, the transfer would fail with a File is open for output error.
• Fixed problem where FTP commands like CD would not be retried even with Command Retries set.

Bug Fixes - HTTP

• Fixed an issue where HTTP connections using Cleo VLProxy would cause a NullPointerException.
• Cleo Harmony and Cleo VLTrader only: Fixed a problem where, when HTTPs clients attempting to connect to an HTTPs server configured to require client authentication, the connections would fail with authentication errors even though the Local HTTP User was properly configured with the appropriate client authentication certificate.
• Fixed HTTPS issue where, when forwarding requests through Cleo VLProxy with the Check certificate server name option enabled, the check would fail when it should succeed.
• Fixed an issue where PUT+GET actions would fail due to a Transfer ID not being generated properly.

Bug Fixes - AS2/AS3

• Fixed a problem where, when an inbound message containing a Disposition-Notification-Options message header and a signed-receipt-micalg attribute that did not contain an importance parameter (optional or required), but only contained the MIC algorithm parameter, the AS2 server failed to correctly process the message and was placing the payload in the product's root directory.
• AS2 only: Fixed a problem where AS2 unsigned/unencrypted/uncompressed autoroute Send actions to an unreachable trading partner endpoint would never return a response and would hang indefinitely, causing the host to be blocked from user changes until the service was restarted.
• Fixed a problem where an Unparseable date exception was being thrown when attempting to convert a date string containing a day of the week shorter than three characters.

Bug Fixes - SSH FTP

• Cleo Harmony and Cleo VLTrader only: Fixed an issue for SFTP where a client requesting a prime key of 4096 for the diffie-hellman-group-exchange-SHA256 key exchange would result in a NullPointerException.
• Cleo Harmony and Cleo VLTrader only: Fixed an issue where, when a Local User Mailbox contains invalid LDAP configuration, users cannot authenticate through other Local User Mailboxes even though they contain valid LDAP configuration.
• Fixed an issue where, when FIPS mode is enabled, using the diffie-hellman-group-exchange-sha256 key exchange algorithm for SFTP client connections could cause connections to non-FIPS SFTP servers to fail.
• Fixed an issue where, when FIPS mode is enabled, using diffie-hellman-group-exchange-sha256 for the key exchange algorithm would cause the SSHFTP connection to fail.
• Fixed a problem where, when Resume Failed Transfers is turned on, a second GET * in an action would try to incorrectly resume if the failure was before an actual transfer started.
• Fixed a potential high CPU usage issue when an invalid SSH packet was encountered.

Bug Fixes - OFTP

• Fixed a problem where if the server successfully received a file but the client disconnected right after the transfer finished, the transfer was not being marked as completed.
• Cleo Harmony and Cleo VLTrader only: Fixed a problem where the VLIncoming table would not have a filename value for a received OFTP file when using the database payload feature for an OFTP host set for server only.
• Cleo Harmony and Cleo VLTrader only: Fixed an issue with transfer logging for a specific scenario when an OFTP host is set for server only. When connecting, if the trading partner first requested that Cleo Harmony or Cleo VLTrader send files and then afterwards sent its own files, the transfer log entries for the files received by Cleo Harmony or Cleo VLTrader would not be associated with any host/mailbox and would be left as in progress.

Bug Fixes - RNIF

• Fixed an issue where completed RNIF outbound transfers were being reported as In Progress. Note that this could only occur when viewing historical data that was generated prior to Release 5.5.
• Fixed an issue where the transfer IDs associated with outbound transfers were being prefixed with HTTP rather than RNIF.

Bug Fixes - Portal

• Cleo Harmony and Cleo VLTrader only: Fixed an issue where importing a partial Users host would leave the users merged in incapable of using Portal or the REST API.
• Cleo Harmony and Cleo VLTrader only: Fixed a problem where bandwidth throttling wasn't working for uploads and downloads through Portal.
• Fixed a problem where certain users would always see an In Progress status for their uploads and downloads in the Portal transfers view, instead of the current status.
• Cleo Harmony and Cleo VLTrader only: Fixed a problem where REST file upload failure trigger gets fired when an upload was never started.
• Cleo Harmony and Cleo VLTrader only: Fixed a problem where zip downloads through Portal would not exclude temp files in the zipped directory.
• Cleo Harmony and Cleo VLTrader only: Fixed an issue where incorrectly parsed Set-Cookie headers might cause failures for Portal requests through Cleo VLProxy.
  Note: Cleo VLProxy 3.6.1.5 is required if using Cleo VLProxy.
• Fixed a problem accessing Portal accounts (over HTTPs) when SMB file shares are configured as the account's home directory and as Windows/Unix folders.
  Note: Cleo VLProxy 3.6.1.5 is required if using Cleo VLProxy.
• Cleo Harmony and Cleo VLTrader only: Fixed an issue where symbolic links were not being resolved correctly in Portal.
• Cleo Harmony and Cleo VLTrader only: Fixed a problem where making a request to Cleo Portal sometime after an initially successful single sign on via IPortalUserAuthentication could in some cases incorrectly force a user to reauthenticate.
• Cleo Harmony and Cleo VLTrader only: Fixed a problem where attempting to log in to Cleo Portal with a username or password containing a plus sign (+) would fail.
• Cleo Harmony and Cleo VLTrader only: Fixed an issue where selecting an arbitrarily large number of items for a zip download in Cleo Portal could cause a browser error due to the download URL exceeding the maximum length supported by the browser or the web server, depending on the items selected and the browser being used. A zip download is now prevented with an error if its URL is determined to be too long.
• Cleo Harmony and Cleo VLTrader only: Fixed an issue where attempting to upload a large file (4 GB or larger) or cancel such an upload in Cleo Portal using Internet Explorer would eventually cause the browser to crash. Upload attempts for files exceeding the size limit are now prevented with an error message indicating the reason.
• Cleo Harmony and Cleo VLTrader only: Fixed an issue in Cleo Portal where a generic error message might appear momentarily before sending the user to the login page after the session expires when using SSO.

Bug Fixes - Connector

• Cleo Harmony and Cleo VLTrader only: Fixed an issue where a trailing slash at the end of a home directory when using a connector path would cause failures.
• Fixed an issue where Connectors would not show up in the Debug Options.
• Cleo Harmony and Cleo VLTrader only: Removed the dependency on the AS/400 Sign-on Service to determine and maintain stable connections between the EEI connector and the AS/400. Instead, a known directory on IFS is used to check connection stability. This addresses an issue where a large number of as-signon jobs were being started on the AS/400.
• Cleo Harmony and Cleo VLTrader only: Fixed a problem where messages on the EEI Connector's outbound queue would stop being processed if: 1) it encountered an entry on the queue for a payload file that had been previously sent and 2) the file already existed in the TP subfolder and 3) the trading partner's host contained multiple trading partners and 4) this trading partner was not the first item in the EEI URI.
• Cleo Harmony and Cleo VLTrader only: When a file is designated for an EEI trading partner defined in multiple enabled host outboxes, a failure response is now returned on the EEI inbound queue and an error result is logged in VersaLex. This addresses the known issue related to duplicate EEI partner configurations reported in 5.4.1.8.
• Cleo Harmony and Cleo VLTrader only: Fixed a problem where the EEI connector was not correctly updating the trading partner status used by the EEI back-end process to 'disabled' after an enabled host was disabled.
• Cleo Harmony and Cleo VLTrader only: Fixed an issue where the File connector could be used to access files and folders outside of the configured authorized roots.
• Cleo Harmony and Cleo VLTrader only: Fixed a problem where the EEI connector would allow inclusion of a subdirectory in the outbox path, which is not valid. Now, if subdirectories are specified in the outbox path, an exception is thrown when applying those changes or when the action runs.
• Fixed a problem where an exception was being thrown that prevented users from using an LCOPY action when the source is a Clarify Connector URI.
• Added HTTP response code checks when communicating with the Cleo Clarify server.
• Cleo Harmony and Cleo VLTrader only: Fixed an issue where files were not being transferred correctly when a connector was used as the folder location for a file whose name contained URL encoding (Example:test%2Dfile.edi).

Bug Fixes - AS2

• Cleo Harmony and Cleo VLTrader only: Fixed an error in the REST API where retrieval of a single file that was originally part of multi-file transfer was off by one, thereby fetching the wrong file.

Bug Fixes - HSP

• Adding client support for servers behind an Amazon Elastic Load Balancer (ELB).
• Fixed a problem where, when a Sentbox, a Receivedbox, or both are configured, sent and received files are not archived properly.

Bug Fixes - ICAP

Bug Fixes - S3

• Cleo Harmony and Cleo VLTrader only: Fixed an issue with S3 Connector where multipart transfers using SSE would fail.
• Cleo Harmony and Cleo VLTrader only: Fixed a problem in the admin UI where the Server Side Encryption property in the S3 connector host was not providing the proper possible values for selection.

The following are known issues in Cleo Harmony 5.5:

• If you attempt to start a Cleo product (Cleo Harmony, Cleo VLTrader and Cleo LexiCom) while you have an inbox defined on a network share that is not connected to your server, your Cleo product will not start properly.
• In some situations, an inbound HSP transfer shows In Progress in the transfer report even though the sending side failed.
• The UI freezes when you create a mailbox that expects use an SMB connector to access a network location that is not accessible.
• On certain machines that are relatively slow, you might get an OSGI error on when you start up Cleo Harmony.
• In the native UI, on the Privileges tab for the Users host, the Assign invited users to line does not display when the window is too small.
• In the new web UI, filesize for an inbound ebXML transfer is not displayed in the Details section.
• In the new web UI, on the Logs page, for an inbound AS2 transfer, two transfer records are displayed.
• You cannot change an inbox or outbox if it is referencing a connector that does not exist, for example, if the connector was removed after the inbox or outbox was originally created.
• In the web UI, the Operator Audit Trail is displayed in red and looks disabled although it has been enabled.
• In some cases, in the web UI, the links in the banner will not display correctly if the browser is not fully maximized.
• The Logs > System Counters page throws an exception under certain conditions – for example, when you go to Logs > System Counters, then go to another page and back to Logs > System Counters.