Author

Christopher Kujawa

Zbchaos — A new fault injection tool for Zeebe

During Summer Hackdays 2022, I worked on a project called “Zeebe chaos” (zbchaos), a fault injection command-line interface (CLI) tool. This allows us engineers to more easily run chaos experiments against Zeebe, build up confidence in the system’s capabilities, and discover potential weaknesses. Requirements To understand this blog post, it is useful to have a certain understanding of Kubernetes and Zeebe itself. Summer Hackdays: Hackdays are a regular event at Camunda, where people from different departments (engineering, consulting, DevRel, etc.) work together on new ideas, pet projects, and more. Check out previous Summer Hackdays here: Summer Hackdays 2020 Summer Hackdays 2019 Zeebe chaos CLI Working on the Zeebe project is not only about engineering a distributed system or a process…

By Christopher Kujawa

Argon2 as password-hashing function in Camunda

Introduction On the new version of the Camunda Engine Platform (7.7) the user passwords, which are stored in the database, are by default hashed with a SHA-2 family algorithm. Before the passwords are hashed, they are concated with an individual random generated salt for each user, to prevent dictionary and rainbow table attacks. For someone who needs a more secure hashing algorithm Camunda introduce a new API, which allows to customize and exchange the default hashing algorithm. In this blog post I will present this customization and will use argon2 as hashing algorithm. Argon2 is a password-hashing function 1, which is considered as state of the art and also won the Password Hashing Competition at the end of 2015 2….

By Christopher Kujawa

Camunda BPM 7.6.0-alpha5 Released

Camunda 7.6.0-alpha5 is here and it is packed with new features. The highlights are: Implementation of the BPMN Conditional Event Batch Cancellation of Historic Process Instances Huge performance improvements due to caching of Scripting Engines and Compiled Scripts in DMN Engine Expressions in Signal and Message Event Names Cockpit Usability Improvements Pluggable Deployment Cache 10 Bug Fixes List of known Issues The complete release notes are available in Jira. You can Download Camunda For Free or Run it with Docker.

By Christopher Kujawa

Try All Features of Camunda