OpenMRS as a global good software

[dta (Daniel Aba)]

I need to know somethings about openMRS is it true that the software has been packaged for one or more common operating systems or platforms and software upgrades can largely be achieved without manual intervention?

is unit or integration testing is part of the release process?

Have you guys done any penetration tests in the last 12 months?

[mksd (Dimitri R)]

Hi @dta, welcome here.

software upgrades can largely be achieved without manual intervention

That’s possible yes, but it would depend on the quality of the delivery pipelines of the OpenMRS service provider you would work with. As such OpenMRS is just a web app deployed on Tomcat, so it’s easily upgraded with all automation possible in general for web apps deployed on Tomcat.

is unit or integration testing is part of the release process?

Yes of course.

Have you guys done any penetration tests in the last 12 months?

What do you mean by ‘penetration tests’?

[dta (Daniel Aba)]

Thanks alot… penetration test as per an independent security audit performed on open MRS by an external firm in the last 12 months

[mksd (Dimitri R)]

I don’t think so, but others might weigh in. The latest that I’m aware of is this:

Report from course assignment assessing security of OpenMRS

Students in my Computer Security course assessed the security of OpenMRS as a class project. I have compiled the results into a report. I have attached it to this post. What is the best way to contribute this report to OpenMRS? For your convenience, I have included the executive summary of the report below. The full report is nearly 200 pages long, currently available in Word format or PDF, or I can convert it to a WIKI format. I am also happy to discuss any of the results. – Dr. Steven P. Cr…

[dta (Daniel Aba)]

Thanks a mil!