History of Changes
Introduction and explanation of symbols
Changes are sorted by "type" and then chronologically with the most recent at the top. These symbols denote the various action types:=add,
=fix,
=remove,
=update
Version Java 1.4.2 (June 2008)
java_general
-
Add support for more XMLDSig algorithms listed in RFC 4051 Committed by SM. See Issue 44810.
-
Add support for C14N 1.1 to Java implementation. Committed by SM. Thanks to Sean Mullan. See Issue 42653.
-
Library does not allow specify provider for private key operations. Committed by SM. Thanks to Alon Bar-Lev. See Issue 43056.
-
Method to disable XMLUtils.addReturnToElement. Committed by SM. Thanks to Michael McIntosh. See Issue 42061.
-
Add XMLCipher.encryptData method that takes serialized data as parameter. Committed by SM. Thanks to Vladmir Ionescu. See Issue 38668.
-
DOMException is thrown at XMLSignature creation. Committed by SM. Thanks to Giedrius Noreikis. See Issue 44999.
-
Concurrent creation of a XMLSignature instance produces an ArrayIndexOutOfBoundsException. Thanks to Giedrius Noreikis Committed by RB. Thanks to Giedrius Noreikis. See Issue 44956.
-
Concurrent invocation of KeyInfo.getX509Certificate() occasionally fails Committed by RB. Thanks to Giedrius Noreikis. See Issue 44991.
-
Switch order of XML Signature validation steps Committed by SM. See Issue 44629.
-
Regression when processing XPath transform (additional fix) Committed by SM. See Issue 44617.
-
XMLX509IssuerSerial.getIssuerName incorrectly escapes '#' in hex values Committed by SM. See Issue 44586.
-
XMLX509Certificate.getX509Certificate() results in certificate parsing error. Committed by SM. Thanks to Vishal Mahajan. See Issue 44205.
-
When using xslt transformation there is problem with xalan newline. Small refactor for ElementProxy to get rid of the state, it was an old vestige that where taking space and obfuscating the code. Committed by RB. Thanks to Matej Spiller. See Issue 44177.
-
String comparisons using '==' causes validation errors with some parsers Committed by RB. Thanks to Vishal Mahajan. See Issue 40897.
-
XMLCipher loadEncryptedKey error. Committed by SM. Thanks to Butler. See Issue 44102.
-
No installed provider supports this key when checking a RSA signature against a DSA key before RSA key. Committed by SM. Thanks to Matthias Germann. See Issue 43239.
-
Unnecessary namespace declarations on Signature children. Committed by SM. Thanks to Brent Putnam. See Issue 43597.
-
Problem with empty BaseURI in ResolverLocalFilesystem. Committed by SM. Thanks to Frank Cornelis. See Issue 42865.
-
Inclusive C14n doesn't always handle xml:space and xml:lang attributes correctly Committed by SM. See Issue 42230.
-
Error when removing encrypted content in 1.4.1. Committed by SM. Thanks to Julien Taupin, Daniele Gagliardi. See Issue 42866.
-
ClassLoader issue causing NoSuchAlgorithmException loading Provider Implementation. Committed by SM. Thanks to James Washington. See Issue 42820.
-
Improved logging in signature handling. Thanks to Wally Dennis. Committed by SM. Thanks to Wally Dennis. See Issue 44863.
Contributors to this release
We thank the following people for their contributions to this release.
This is a list of all people who participated as committers:
Raul Benito Garcia (RB), Sean Mullan (SM).
This is a list of other contributors:
Alon Bar-Lev, Brent Putnam, Butler, Frank Cornelis, Giedrius Noreikis, James Washington, Julien Taupin, Daniele Gagliardi, Matej Spiller, Matthias Germann, Michael McIntosh, Sean Mullan, Vishal Mahajan, Vladmir Ionescu, Wally Dennis.
Version C++ 1.4.0 (November 2007)
c_rel
-
Add const specifiers and methods to various classes Committed by SC.
-
Add better extraction of openssl build settings using pkg-config Committed by SC.
-
Fix exclusive c14n namespace bug (rev. 526939) Committed by BL.
-
Fix XSECnew macro to stop catching arbitrary errors and report crypto exceptions instead of turning them into allocation errors Committed by SC.
-
Add various missing files to dist target Committed by SC.
Contributors to this release
We thank the following people for their contributions to this release.
This is a list of all people who participated as committers:
Berin Lautenbach (BL), Scott Cantor (SC).
Version Java 1.4.1 (May 2007)
java_general
-
XML Security 1.4.0 does not build with IBM's JDK. Committed by SM. Thanks to Derek Morr. See Issue 41892.
-
Cannot canonicalize with XSLT transform. Committed by SM. Thanks to Lijun Liao. See Issue 41927.
-
Resolution of SAML 1.x ID attributes, incorrect namespace. Committed by SM. Thanks to Brent Putman. See Issue 41805.
-
Two text nodes with the value '\n' in succession within <ds:SignedInfo> and <ds:X509IssuerSerial>. Committed by SM. Thanks to Lijun Liao. See Issue 41474.
-
org.apache.xml.security.keys.content.KeyValue.getPublicKey() returns null for DSA key. Committed by SM. Thanks to Stepan Hrbacek. See Issue 41510.
-
XMLCipher StackOverflowError. Committed by SM. Thanks to Marek Jablonski. See Issue 41573.
-
Cannot specify dynamically a specific JCE Provider with the DSA Signature. Committed by SM. Thanks to Julien Pasquier. See Issue 41569.
-
ECDSA signature value interoperability patch. Committed by RB. Thanks to Wolfgang Glas. See Issue 42239.
-
Cannot generate signatures with the same key but different algorithms in sucession. Committed by RB. Thanks to Lijun Liao. See Issue 41520.
-
Xml canonization - UTF-8 encoding issue in Xml security 1.4.0. Committed by RB. Thanks to Karol Rewera. See Issue 41462.
Contributors to this release
We thank the following people for their contributions to this release.
This is a list of all people who participated as committers:
Raul Benito Garcia (RB), Sean Mullan (SM).
This is a list of other contributors:
Brent PutmanDerek Morr, Julien Pasquier, Karol Rewera, Lijun Liao, Marek Jablonski, Stepan Hrbacek, Wolfgang Glas.
Version C++ 1.3.1 (January 2007)
c_rel
-
Initial support for API changes in Xerces 3.0 Committed by BL.
-
Fix bug in autoconf that would prevent proper detection of Xerces ability to set Id attributes Committed by BL.
-
Fix bug 40085 - incorrect OIDs on non SHA1 based RSA sigs Committed by BL.
-
Remove redundant code in SignedInfo that was preventing the loading of signatures with algorithms not hard coded Committed by BL.
-
Fix bug in Envelope transform Committed by BL.
-
Fix bug in DSIGXPathFilterExpr with non-initalised vars. Reported by Ralf "Sabo" Saborowski. Committed by BL.
-
Refactor NIX build to use automake and libtool Committed by BL.
Contributors to this release
We thank the following people for their contributions to this release.
This is a list of all people who participated as committers:
Berin Lautenbach (BL).
Version Java 1.4 (January 2007)
java_general
-
JSR 105 implementation. Committed by SM.
-
Add XMLCipher.encryptData method that takes serialized data as parameter Committed by SM. See Issue 38668.
-
NPE in ResolverDirectHTTP.engineCanResolve. Committed by SM. Thanks to Frank Cornelis. See Issue 40783.
-
AxisSigner.java doesn't work out of the box Committed by RB. Thanks to Jean-Luc Cooke. See Issue 40360.
-
Impossible to add X509 subelements for signing Committed by RB. Thanks to Jean-Luc Cooke. See Issue 40404.
-
Base64 does not work in EBCDIC machines. Committed by RB. Thanks to ACastro. See Issue 40215.
-
Subtree canonicalization produce incorrect results in certain cases. Committed by RB. Thanks to Bob Shanahan . See Issue 40032.
-
Internal. Cannot sign-verify twice in the same thread with different XMLSignature instances. Committed by RB. Thanks to Ruchith Fernando. See Issue 40896.
-
Internal. KeyResolverSpi derived classes require default constructor. Committed by RB. Thanks to Frank Cornelis. See Issue 40796.
-
Different behaviour with NodeSet and RootNode with InclusiveNamespaces Committed by SM. Thanks to Pete Hendry. See Issue 37708.
-
Signing throws an exception if custom resource resolver is registered Committed by SM. Thanks to Vishal Mahajan. See Issue 37456.
-
Canonicalizer gets exception in many namespaces. Committed by RB. Thanks to katoy. See Issue 38655.
-
Transform TRANSFORM_XPATH2FILTER subtract filter does not work correctly. Committed by RB. Thanks to Stefano Del Sal. See Issue 38444.
-
X509CertificateResolver does not work in multithread environment Committed by RB. Thanks to Peter Bacik. See Issue 38605.
-
XMLCipher-loadEncryptedKey() doesn't set the correct CarriedKeyName element. Committed by RB. Thanks to Yvan Hess. See Issue 39200.
-
Findbugs reporting fixed. Committed by SM. Thanks to Sean Mullan. See Issue 39685.
-
Major optimizations for signatures that use node-set transformations(xpath,xpath2,etc), 20-40% speed-up. Committed by RB.
-
Major optimizations for signatures that use xpath2 transformation. Committed by RB.
-
Major optimizations in inclusive c14n when using xml:* attributtes. Committed by RB.
-
Memory footprint reduction: Less object creation. Reuse of "expensive" objects between operations in the same thread. Committed by RB.
-
Minor Optimizations. Reuse the same Signature object if the key are identical. Committed by RB.
Contributors to this release
We thank the following people for their contributions to this release.
This is a list of all people who participated as committers:
Raul Benito Garcia (RB), Sean Mullan (SM).
This is a list of other contributors:
ACastro, Bob Shanahan , Frank Cornelis, Jean-Luc Cooke, katoy, Pete Hendry, Peter Bacik, Ruchith Fernando, Sean Mullan, Stefano Del Sal, Vishal Mahajan, Yvan Hess.
Version C++ 1.3 (September 2006)
c_rel
-
Implemented algorithm handlers for the digital signature classes, to provide algorithm extensibility Committed by BL.
-
Initial import of beta NSS crypto support Committed by MT.
-
Complete implementation of XKMS message set Committed by BL.
-
Methods to allow loading of encrypted data without doing decrypt and to process a decrypt/encrypt operation without replacing the original nodes Committed by BL.
-
Provide MS VC++ 2005 project files Committed by BL.
-
Performance improvements in canonicalisation Committed by BL.
-
Fix memory leaks in OpenSSL wrapping code Committed by BL.
-
Provide some stability if the Apache keystore is corrupted under Windows. Committed by BL.
-
Fix bug when encrypting small input docs Committed by BL.
-
Update signature classes to pass in requested algorithms as URIs rather than enums. Enum based methods are now deprecated. Committed by BL.
-
Provide ability for calling application to define whether references are interlocking. Committed by BL.
-
Implement checks for broken OpenSSL support under Solaris 10 Committed by BL.
-
Add --with-xalan, --with-openssl, --with-xerces and --enable-warnerror flags in configure Committed by BL.
-
Configure now detects if Xalan is installed rather than having XALANCROOT being a pointer to the compile directory Committed by BL.
Contributors to this release
We thank the following people for their contributions to this release.
This is a list of all people who participated as committers:
Berin Lautenbach (BL), Milan Tomic (MT).
Version Java 1.3 (October 2005)
java_c14n
-
Performance improvement in C14n, due to changes in internal structure, and a non recursive algorithm. Committed by RB.
-
Reduce memory consumption in c14n. Committed by RB.
java_general
-
Add new msg id named decoding.divisible.four and fix bug in Base64 Transform to throw Base64DecodingExc with this msg id instead of "It should be dived by four". Committed by SM.
-
Canonicalizing an empty node-set throws an ArrayIndexOutOfBoundsException. Also added new unit test for generating signatures. Committed by SM. See Issue 36044.
-
Fixed NullPointerException bugs in engineCanonicalize. Committed by SM.
-
Fix bug when parsing reference lists during decryption; properly handle relative URIs and lists of more than one element. Committed by SM. Thanks to Clive Brettingham-Moore.
-
Make XMLCipher.encryptData(Document, Element, boolean) public so it can be used by applications. Committed by SM.
-
Error in CarriedKeyNameDefinition EncryptedKeyImpl. Committed by SM. Thanks to Julien Taupin. See Issue 35917.
-
Change logging message in XMLCipher.decryptKey from info to debug level (too noisy for info level). Committed by SM.
-
Fix file descriptor leak in XMLSignatureInput. Committed by SM. Thanks to Rune Friis-Jensen. See Issue 35580.
-
Fix NullPointerException in TransformXPathFilter2.engineTransform if XMLSignatureInput is a node-set (instead of an element subtree). Committed by SM.
-
Fix condition in ElementProxy.guaranteeThatElementInCorrectSpace(). Committed by SM. Thanks to bodiguillaume-dev@yahoo.fr.
-
Fix NullPointerException in log message emitted by ResolverDirectHTTP.engineCanResolve. Committed by SM.
-
Fix NullPointerException bug in ResolverXPointer.engineResolve; check if BaseURI is null before setting source URI. Committed by SM.
-
Fix NPE when an unknown transform algorithm is used. Committed by RB. Thanks to Lee Coomber. See Issue 34743.
-
Removed system.err.println to a real log. Committed by RB. Thanks to Raymond Wong. See Issue 33936.
-
Fix a bug in Xpath and Base64 transform is used together. Committed by RB. Thanks to Luda. See Issue 35919.
-
Canonicalization of a DocumentFragment node always throws a c14n exception Committed by VM. See Issue 36638.
-
KeyValue.getPublicKey does not work Committed by VM. See Issue 36639.
-
Signature verification ignores the inclusive namespaces parameter of a excl c14n ds:CanonicalizationMethod Committed by VM. See Issue 36640.
-
Remove of PRNG, HexDump, X509CertificateValidator classes. Committed by RB.
-
Out of the box j2se 1.5 ready(no adding xalan in the classpath or endorsed if no xpath transformation is needed) Committed by RB.
-
General small optimizations(b64 speed-ups, list instead of vector, etc...). Committed by RB.
java_transformations
-
Removed http://www.nue.et-inf.uni-siegen.de/~geuer-pollmann/#xpathFilter transformation. Committed by RB.
Contributors to this release
We thank the following people for their contributions to this release.
This is a list of all people who participated as committers:
Raul Benito Garcia (RB), Sean Mullan (SM), Vishal Mahajan (VM).
This is a list of other contributors:
bodiguillaume-dev@yahoo.fr, Clive Brettingham-Moore, Julien Taupin, Lee Coomber, Luda, Raymond Wong, Rune Friis-Jensen.
Version C++ 1.2.1 (July 2005)
c_rel
-
Add xklient "No Xalan" builds in VC 6.0 project files Committed by BL.
-
Fix version suffixes on DLL files in VC 6.0 "No Xalan" build. Committed by BL.
-
Add "No Xalan" support into VC 7.0 project files. Committed by BL.
Contributors to this release
We thank the following people for their contributions to this release.
This is a list of all people who participated as committers:
Berin Lautenbach (BL).
Version C++ 1.2.0 (June 2005)
c_rel
-
Implemented XKMS Message generation and processing Committed by BL.
-
Implemented command line XKMS tool for generating and dumping XKMS messages Committed by BL.
-
Add support for SHA224/256/384/512 (requires OpenSSL 0.9.8 Beta) Committed by BL.
-
Patch for Mac OS X compile - provided by Scott Cantor - See Bugzilla #34920 Committed by BL. See Issue 34920.
-
Added complete KeyInfo handling for XENCEncryptedType Committed by MT.
-
Remove MFC dependency and clean up memory debugging Committed by BL.
-
Support for DESTDIR as provided by Ville Skytta in Bugzilla 28520 Committed by BL. See Issue 28520.
-
Update to Apache licence 2.0. Committed by MT.
-
Fix bug with NULL pointer when validating or signing empty reference lists - fix as suggested by Jesse Pelton on 23 March 2005 on security-dev Committed by BL.
-
Change to allow apps to calculate and obtain signed info hash - from Eckehard Hermann - see email of 2 March 2005 on security-dev Committed by BL.
-
Patch for long RSA keys provided by Michael Braunoeder to security-dev on 16 Nov 2005 Committed by BL.
-
Memory leak in OpenSSLCryptoBase64 reported by Jesse Pelton fixed. Committed by BL.
-
Move to internal Base64 decoder in a number of methods to handle non-wrapping data Committed by BL.
-
Resize buffer in OpenSSLCryptoKeyRSA for larger RSA keys - as submitted by Vadim Ismailov 3 December 2005 Committed by BL.
-
Remove redundant m_keyType class variable from OpenSSLCryptoKeyRSA as reported by Jesse Pelton on security-dev Committed by BL.
-
Don't throw an exception when an RSA decrypt fails during sig validation - this is a failed validate, not an error Committed by BL.
-
Shutdown OpenSSL properly - as suggested by Jesse Pelton in e-mail to security-dev on 9 March 2005 Committed by BL.
-
Changed scope of WinCapiCryptoKey::importKey() from private to public. It returns key now, instead of void. Committed by BL.
-
Fix problem in Windows CAPI where XSEC doesn't work if user doesn't have admin rights. Committed by BL.
-
Bug fix in Windows CAPI code for some W2K machines - reported by Andrzej Matejko 4/5/2004 Committed by BL.
-
Fix build on non WINCAPI systems, as reported by Milan Tomic on 22/4/2004 Committed by MT.
-
New constructor added to WinCapiX509 Committed by MT.
-
Fixed Bug in encode() XSCryptCryptoBase64. Committed by BL.
-
Fix bug in XPathFilter transform when checking if an attribute is in the input node set. Committed by BL.
-
Fix bug in in UTF transcoder for counting of transcoded characters (count characters not bytes) reported by Milan Tomic Committed by BL.
-
Move function definitions in the Windows BinInput stream class to static to avoid conflicts with Xerces. As suggested by Jesse Pelton on 2 Feb 2005 in security-dev Committed by BL.
-
Fix to stop re-use of derived key encrypting key when decrypting multiple elements in a document Committed by BL.
-
Fix to ignore encryption exceptions during a private key decrypt Committed by BL.
-
Remove dynamic_casts and RTTI requirement Committed by BL.
-
Updates to compile against Xalan 1.9 Committed by BL.
-
Backport to compile with Xerces 2.1 Committed by BL.
-
Provided support for nominating namespace based Id attributes Committed by BL.
Contributors to this release
We thank the following people for their contributions to this release.
This is a list of all people who participated as committers:
Berin Lautenbach (BL), Milan Tomic (MT).
Version Java 1.2.1 (February 2005)
build
-
Clean unused build*.xml files. Committed by RB.
external-libs
-
Clean unused jar (xmlParserAPI.jar,etc) and check and stored new versions. Committed by RB.
-
Generated the dist jar with version (i.e. xmlsec-1.2.1.jar instead of plain xmlsec.jar) Committed by RB.
java_general
-
Fix a memory leak when using xpath or using ResourceResolver and not hitting getElementByIdUsingDOM() Committed by RB. Thanks to Sylvain Dusart. See Issue 32836.
-
Fix erroneous creation/verification when using XPath2Filter and inclusive c14n. Committed by RB.
-
Library now throws an exception when asked to sign/verify an inexistent fragment. Committed by RB. Thanks to Raymond Wong. See Issue 23554.
-
Restore reset behaviour as default when reusing Canonicalizers(but an append one can still be used). Committed by RB.
-
Fix a bug when using base64transformation and external resources. Committed by RB. Thanks to Sean Mullan. See Issue 33393.
-
Fix a bug when passing XMLsignatureInput(InputStream) streams that don't acknowledge reset() as expected. Committed by RB.
-
Added i14n Base64 error message. Committed by RB. Thanks to Sean Mullan. See Issue 32996.
Contributors to this release
We thank the following people for their contributions to this release.
This is a list of all people who participated as committers:
Raul Benito Garcia (RB).
This is a list of other contributors:
Raymond Wong, Sean Mullan, Sylvain Dusart.
Version Java 1.2 (December 2004)
java_c14n
-
Rework the canonicalization for speed-up common cases Committed by RB.
java_csp
-
Update the JCE algorith mechanism Committed by VM.
java_general
-
General memory footprint improvements Committed by RB.
-
General speed optimizations Committed by RB.
Contributors to this release
We thank the following people for their contributions to this release.
This is a list of all people who participated as committers:
Raul Benito Garcia (RB), Vishal Mahajan (VM).
Version C++ 1.10 (March 2004)
c_rel
-
- Bug fixes for signature code
- Beta implementation of XML Encryption
- Initial implementation of pluggable algorithm handlers
Contributors to this release
We thank the following people for their contributions to this release.
This is a list of all people who participated as committers:
Berin Lautenbach (BL).
Version C++ 1.00 (July 2003)
c_rel
-
- First stable release
- Support for FreeBSD, NetBSD and Cygwin builds
- All KeyInfo elements now available
- Various bug fixes
Contributors to this release
We thank the following people for their contributions to this release.
This is a list of all people who participated as committers:
Berin Lautenbach (BL).
Version C++ 0.20 (May 2003)
c_rel
-
- Windows Crypto API interface
- Basic functions to extract information from signature objects
- Various bug fixes
Contributors to this release
We thank the following people for their contributions to this release.
This is a list of all people who participated as committers:
Berin Lautenbach (BL).
Version Java 1.0.5 (unreleased)
docs
-
Ported the docs to Forrest
Committed by KW.
Contributors to this release
We thank the following people for their contributions to this release.
This is a list of all people who participated as committers:
Karel Wouters (KW).
Version C++ 0.10 (unreleased)
c_rel
-
First release of a Beta for the C++ library.
Committed by BL.
Contributors to this release
We thank the following people for their contributions to this release.
This is a list of all people who participated as committers:
Berin Lautenbach (BL).
Version Java 1.0.4 (15 July 2002)
java_csp
-
Java - We use the most recent version of the BouncyCastle JCE now.
Committed by CGP.
java_jdk
-
Java - People who did not install Xalan properly under JDK 1.4.0 now get a more specific error message.
Committed by CGP.
Contributors to this release
We thank the following people for their contributions to this release.
This is a list of all people who participated as committers:
Christian Geuer-Pollmann (CGP).
Version Java 1.0.3 (unknown)
java_exc_c14n
-
Java - Added support Exclusive XML Canonicalization Version 1.0, W3C Recommendation 18 July 2002 . (There is no interop to test vector Y4 because of a problem in Xalan)
Canonicalization is written completely new: it's about 5-80 times faster than the implementation in version 1.0.2. It's highly recommended to upgrade to the new version.
Committed by CGP.
java_xpath2
-
Java - Added support for XML-Signature XPath Filter 2.0, W3C Candidate Recommendation 18 July 2002
Committed by CGP.
Contributors to this release
We thank the following people for their contributions to this release.
This is a list of all people who participated as committers:
Christian Geuer-Pollmann (CGP).
All Committers
This is a list of all people who have ever participated as committers on this project.
- Christian Geuer-Pollmann (CGP)
- Berin Lautenbach (BL)
- Axl Mattheus (AXL)
- Erwin van der Koogh (EK)
- Karel Wouters (KW)
- Raul Benito Garcia (RB)
- Vishal Mahajan (VM)
- Milan Tomic (MT)
- Sean Mullan (SM)
- Scott Cantor (SC)