Knowledge Discovery 26.3.0
26.3 Release Notes

# ACI Server Framework

Many Knowledge Discovery components are built on the ACI server framework. This section lists the changes in the ACI server layer, which affect all ACI servers.

## 26.3.0

### New Features

- The third-party OpenSSL library has been upgraded to version 3.5.6.

### Resolved Issues

- An ACI server that was installed as a service could crash on shutdown, resulting in a crash dump being generated.
- The `GetVersion` action did not report Windows 11 and Windows Server 2025 platforms correctly.

- Sending a malformed ACI action request could result in the ACI server returning an error page that contained unescaped, sender-controlled content, such as non-valid XML or HTML tags.

## 26.2.0

### New Features

- The new `-getconfig` command-line parameter has been added to command the ACI server to print the application configuration to the console, and then exit. When you use config include syntax to use sections or parameters from other configuration files, the printed output includes the expanded form that the server uses.

  This option can help you to diagnose configuration issues, particularly when you cannot use the `GetConfig` service action because the server cannot start.

### Resolved Issues

There were no resolved issues in this release.

## 26.1.0

### New Features

- The third-party libxml library has been upgraded to version 2.15.0.

  This change affects ACI server compatibility of the autnxslt shared library. You must not use the version of the autnxslt library with an ACI server with a version older than 26.1, and you must not use a version of the autnxslt library earlier than 26.1 with an ACI server version 26.1 or later.

- The packaged FIPS provider shared library (fips.so/fips.dll) has been updated to OpenSSL 3.1.2.

### Resolved Issues

There were no resolved issues in this release.

## 25.4.0

There were no new features or resolved issues in this release.

## 25.3.0

### New Features

There were no new features in this release.

### Resolved Issues

- (Security update) The third-party OpenSSL library was updated to version 3.4.1.

- (Security update) The third-party expat library has been updated to version 2.7.1 to resolve known vulnerabilities, including CVE-2024-8176.

- (Security update) The third-party libxml2 library has been updated to version 2.14.3 to resolve known vulnerabilities, including CVE-2024-56171 and CVE-2025-24928.

- (Security update) The third-party libxslt library has been updated to version 1.1.43.

### Notes

- The system requirements have changed: running Knowledge Discovery on Linux now requires GLIBC_2.34. You can run Knowledge Discovery on, for example, RHEL 9 or Ubuntu 22.04, but earlier versions are no longer supported. For a full list of supported platforms and operating systems, refer to the Getting Started Guide.

## 25.2.0

### New Features

There were no new features in this release.

### Resolved Issues

- Values imported into the application configuration as secrets, for example from environment variables, or HashiCorp® Vault, were displayed in the results of service actions that return a configuration file. Imported values are now removed or obscured in the results of service actions:

  - The `GetConfig` action replaces the value with ******, and annotates the key with a comment showing the original import line.

  - The configuration files packaged in the zip created by the `Diagnostic` are similarly redacted.

  - The `ValidateConfig` action does not include secret values in the response. Instead, these keys have a tag `<autn:keysecret>true</autn:keysecret>`.

## 25.1.0

### New Features

- Your configuration files can now include values to read from an external source. This option allows your system to inject sensitive settings, such as passwords, at run time, rather than storing them in the configuration file.

  ACI servers can read values from environment variables. This functionality can be used to access, for example, Kubernetes Secrets. A shared library is provided that can retrieve values from a key/value secrets engine in a HashiCorp® Vault installation.

  When you include a parameter from another configuration file, you can use a different name parameter name in the source and target files.

  For more information, refer to the Introduction to Configuration topic in the help for your component.

### Resolved Issues

- An `actions` directory was sometimes created at start up, even when the `Path` configuration parameter in the `[Actions]` section was configured to use a different location. This issue could affect all ACI servers that supported asynchronous actions.

## 24.4.0

### New Features

- The `autpassword` utility can encrypt configuration parameter values using a HashiCorp Vault Transit secrets engine. The encryption and decryption key is stored in the vault. You can add the encrypted string to an ACI server configuration file, and the server can decrypt the value when it is needed, by making a request to the vault.

### Resolved Issues

- The `QueueInfo` action did not return the correct number of results when the `MaxResults` parameter was set and the `Start` parameter was greater than 1.

  IMPORTANT: The `MaxResults` parameter specifies the maximum number of results to return (`&Start=2&MaxResults=3` returns results 2, 3 and 4, not 2 and 3). Applications depending on the incorrect behavior might need to be updated.

## 24.3.0

### New Features

There were no new features in this release.

### Resolved Issues

- The Lua function `send_http_request` sent a plain HTTP request (not HTTPS) when an HTTPS URL was specified in parts by using the `site`, `port`, and `uri` named parameters.

## 24.2.0

There were no new features or resolved issues in this release.

## 24.1.0

### New Features

There were no new features in this release.

### Resolved Issues

- Sending a long unknown action to an ACI server could cause an interruption of service.

## 23.4.0

### New Features

- ACI servers no longer reflect a null origin request header in their Access-Control-Allow-Origin response header (in line with W3C guidance).

### Resolved Issues

- The `BackupServer` action could fail to backup the datastore files for connector tasks.

## 23.3.0

### New Features

There were no new features in this release.

### Resolved Issues

- An IDOL ACI server (running on Linux) would stop if it received a SIGPIPE signal.
- An IDOL ACI server would fail to start if the fully-qualified host name could not be resolved to an IP address.

- Attempting to POST a large file (larger than 2GB) to an ACI server (for example Media Server) resulted in an error.

## 23.2.0

### New Features

- IDOL ACI servers now use OpenSSL3 to provide FIPS 140-2 support on both Windows and Linux. This change means that you can run FIPS-enabled IDOL components with the standard component downloads and installers.

  For information about how to configure FIPS with these new packages, refer to the FIPS Enablement Technical Note.

  NOTE: The FIPS-enabled packages for Red Hat Enterprise Linux (RHEL) 7 and RHEL8 platforms are still available, with the existing configuration. These packages use the system version of OpenSSL (expected to be in the 1.0.x series for RHEL7 and the 1.1.x series for RHEL8).

- When the `LogEcho` configuration parameter is set to `True`, components now print license and service errors to stdout, as well as the log file. This change makes it easier to view these errors, particularly when using components in containers.

### Resolved Issues

- Links in the ACI server `GetRequestLog` HTML now work correctly when the server is behind a reverse proxy.

## Deprecated Features

The following features are deprecated and might be removed in a future release.

Category | Deprecated Feature | Deprecated Since
--- | --- | ---
Configuration parameter | `FIPSMode` parameter for configuring FIPS with the separate Red Hat Enterprise Linux (RHEL) 7 and RHEL8 platform packages. | 26.1.0

Copyright 2026 Open Text
Version 26.3.0 | Last updated July 2026

Send documentation feedback

Close

Send documentation feedback

To send feedback using your default email client, open an email window.

Otherwise, send your feedback and the information below to MFI-swpdl.idoldocsfeedback@opentext.com.

We appreciate your feedback!

Product: Knowledge Discovery 26.3.0

Topic Title: ACI Server Framework