A new INI option has been added rest-api-admin-password which acts as an alias for the existing rest-api-admin-pass option.

Issues: CT-2246

A new command, tungsten_mysql_ssl_setup, has been introduced to create all needed security files for the MySQL database server. tungsten_mysql_ssl_setup will act as a direct replacement for the mysql_ssl_rsa_setup command which is not included with either Percona Server or MariaDB. This command will now be called by tpm cert gen mysqlcerts instead of mysql_ssl_rsa_setup.

Issues: CT-2188

The tpm diag command now captures the output of sestatus and getenforce.

Issues: CT-2243

A new filter, binarystringconversionfilter, was added to provide a way to convert varchar data from one charset into another.

Issues: CT-981

The tpm update command now properly recognizes the INI option dataservice-composite-datasources as an alias for composite-datasources.

Issues: CT-2241

Fixed an issue where the shard name of an event could be badly identified, which could potentially lead to deadlocks when parallel applier was enabled.

Issues: CT-2266

Fixed an issue caused by a MySQL behavior change in how a DROP TABLE is logged in the binlog, that made the replicator unable to identify correctly if the query had tungsten metadata in it.

Issues: CT-2269

Fixed an issue where some applications won't be able to connect to the connector under bridge mode and ip filtering in place through authorized_hosts.

Issues: CT-2261

Fixes an issue with data source monitoring when client and server don't share the same default authentication plugins.

Issues: CT-2233

The tpm diag command no longer errors out on witness hosts installed with the Staging method.

Issues: CT-2262

Fixes a bug that would cause a switch to fail if the cluster had been idle for more than 15 minutes.

Issues: CT-2263