Apache Rampart Release Notes

This is the 1.6.2 release of Apache Rampart.

Apache Rampart is a toolkit that provides implementations of the WS-Sec* specifications for Apache Axis2, based on Apache WSS4J and the Apache Axiom DOOM implementation.

Apache Rampart 1.6.2 is a maintenance release that updates WSS4J to version 1.6.4 and OpenSAML to version 2.5.1. Rampart 1.6.2 is compatible with Axis2 1.6.2. Please note that Rampart 1.6.2 will not work with Axis2 1.6.0 and that users of Axis2 1.6.2 are required to update to Rampart 1.6.2, i.e. Rampart 1.6.0 doesn't work with Axis2 1.6.1/Axis2 1.6.2.

Complete list of issues fixed for this release can be found here

There are two main Apache Axis2 modules provided with this release.

• rampart-1.6.x.mar
This provides support for WS-Security and WS-SecureConversation features.
• rahas-1.6.x.mar
This module provides the necessary components to enable SecurityTokenService functionality on a service.

Apache Rampart uses a configuration model based on WS-Policy and WS-Security Policy and it is important to note that Apache Rampart 1.0 style configuration is also available even though being marked as deprecated.

Apache Rampart can be successfully used with Apache Sandesha2 to configure WS-SecureConversation + WS-ReliableMessaging scenarios.

The rampart module was successfully tested for interoperability with other WS-Security implementations.

WS - Sec* specifications supported by Apache Rampart are as follows:

• WS - Security 1.0
• WS - Secure Conversation - February 2005
• WS - Security Policy - 1.1 - July 2005
• WS - Trust - February 2005
• WS - Trust - WS-SX specification
• SAML Specification - 1.1
• SAML Specification - 2.0

Thank you for using Apache Rampart.

Apache Rampart Team