The Ignite Realtime community has just released Spark 2.8.2 and it can be downloaded from Ignite Realtime: Downloads .
This is a regular update. But there is a change, which can affect new users. “Accept all certificates” option on the Adanced menu on the Login screen won’t be enabled by default for new users from now on. This option makes Spark automatically accept expired, self-signed and other incorrect TLS certificates. Which makes it less secure. If you are using self-signed certificates, your new users will have to enable this option manually (once). Or you can add this option to a preconfigured spark.properties file, if you distribute it to new users. Old users won’t be affected by this (those upgrading straight from 2.7 version will still be affected). We encourage server admins to use certificates from trusted authorities (e.g. Let’s Encrypt). This version also includes 4.1.9 update for Smack, which has a fix for a critical security vulnerability.
UPDATE (2016/11/29): it looks like Spark is not saving settings on Advanced menu, if a user has never opened it. For such users “Accept all certificates” setting will be disabled after updating to 2.8.2 from any version. They will have to go to Advanced menu and enable it, if they encounter “Unable to verify a certificate” error.
Those who are using Client Control plugin will have to update it to version 2.1.0 as Spark 2.8.2 is already modified to work with that version and it will miss many menus and checkboxes if being used with an older version of that plugin. 2.1.0 version requires Openfire 4.0.0 at least. If you are using older version of Openfire and want to keep using Client Control, you might want to hold of updating to Spark 2.8.2.
We also would like to mention SparkMeet plugin provided by our long time contributor @Dele Olajide. Hopefully we will find a way to bundle this plugin with Spark or provide other options to use it. You can also vote here and tell what you think about it. Initial commit is done and its in Spark’s source code sparkmeet plugin - initial release by deleolajide · Pull Request #253 · igniterealtime/Spark · GitHub.
For a complete list of changes please check Spark Changelog
As usually we encourage new developers to join Spark project and provide patches. Those familiar with Smack can join the development easier, as we are now using the latest stable version (4.1.9). Patches can be attached in the forums or submitted as PRs on GitHub.
Here are the contributors to this release (besides myself):
freeseawind · GitHub contributed new skin for Spark - LittleLuck
Alexander198961 (Aleksander Kovtunenko) · GitHub fixed the issue with Spark freezing on exit because of a faulty plugin
@Michael added more settings to default.properties and Client Control plugin, fixed showing of an empty Unfiled group and a few other issues
@Martini26 updated Polish translation
@speedy fixed an issue with systray icon switching to regular one when it should be DND or Away and a few issues with invisible mode
nicoben (Nico Ben) · GitHub updated Italian translation
Here are sha1 checksums for the downloads: