From: Rob Meijer <capibara@xs...> - 2011-12-20 20:21:37
We just published the fifth and hopefully last release candidate for the
2.3.0 release of OCFA.
This release has just a single change. This moves any case specific
configurations from /usr/local/digiwash/etc/ to the case specific
directory /var/ocfa/$OCFACASE/etc/. This should make it easier to put
investigations away on central storage, upgrade or re-install your OCFA
servers and make the investigations active again. There are some
additional tools for moving an investigation off-line and for putting it
back online again.
Please note that installation and usage documents are still not updated.
The wiki holds some installation and usage notes that should get you on
Its been nine months since the last release candidate and due to shifting
priorities, the 2.3.0 release is still pending its final integration
Given that OCFA has over the last year due to shifting priorities become a
rather low priority project that might in fact end up being completely
abandoned after the 2.3.0 release, we've now also put the open source part
of OCFA on github. Hopefully this will help and stimulate the usage and/or
continued development of OCFA and/or OCFA modules by other parties.
Note that this git repositories links to 7 sub repositories that together
make up OCFA and its home-brew dependencies
OcfaModules). This should hopefully, given the low and still declining
priority for OCFA at the dutch national police, make it easier for
spin-off projects to fork relevant parts.
From: Rob Meijer <capibara@xs...> - 2011-12-22 11:43:02
In my last mail I might have misrepresented the maturity level of the 2.3
On Tue, December 20, 2011 21:21, Rob Meijer wrote:
> Its been nine months since the last release candidate and due to shifting
> priorities, the 2.3.0 release is still pending its final integration
My apologies, the integration tests were concluded just before release
candidate 3 last march. I should have said 'acceptance tests'.
A short history of the 2.3 for some context:
In 2010 we worked on the integration of CarvFS into the Open Computer
Forensics Architecture. This integration together with some other fixes
went into the 2.3.0RC1 in November last year. 2.3.0RC2 (the same day)
fixed a minor Makefile problem.
In the first few months of 2011 we did extensive integration testing and a
lot of bugs were found and fixed. This resulted that in march 2011 we
released 2.3.0RC3 with a lot of QA driven bugfixes.
Again a few days later some (sleuthkit versions related) issues with
installation arose and were fixed in 2.3.0RC4.
While since march 2011 OCFA was awaiting its acceptance tests, a new
feature was requested and implemented ( the ability to put a case offline,
replace or re-install the server and OCFA installation and putting the
case online again). We did some integration testing on this additional
feature and afterwards released 2.3.0RC5.