/
githubmirror
/
xmlsec
Обзор
Документация
Войти
/
githubmirror
/
xmlsec
Код
Запросы
0
Пакеты
0
Релизы
0
Аналитика
Безопасность
1.3.10
docs/index.html
212 строк
11 KB
lsh123
Preparations for 1.3.10 (#1085)
18 мар 2026, 20:51
Не верифицирован
18 мар 2026, 20:51
5ac4215
Код
Авторство
О чём код?
<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <title>XML Security Library</title> <link rel="stylesheet" href="css/main.css"> </head> <body><table width="100%" valign="top"><tr valign="top"> <td valign="top" align="left" width="210"> <img src="images/logo.gif" alt="XML Security Library" border="0"><p></p> <ul> <li><a href="index.html">Home</a></li> <li><a href="download.html">Download</a></li> <ul><li><a href="https://github.com/lsh123/xmlsec">GitHub</a></li></ul> <li><a href="news.html">News</a></li> <li><a href="documentation.html">Documentation</a></li> <ul> <li><a href="faq.html">FAQ</a></li> <li><a href="api/xmlsec-notes.html">Tutorial</a></li> <li><a href="api/xmlsec-reference.html">API reference</a></li> <li><a href="api/xmlsec-examples.html">Examples</a></li> </ul> <li><a href="xmldsig.html">XML Digital Signature</a></li> <li><a href="xmlenc.html">XML Encryption</a></li> <li><a href="c14n.html">XML Canonicalization</a></li> <li><a href="bugs.html">Reporting Bugs</a></li> <li><a href="mailing-list.html">Mailing list</a></li> <li><a href="related.html">Related</a></li> <li><a href="authors.html">Authors</a></li> </ul> <table width="100%"> <tr> <td width="15"></td> <td><a href="http://xmlsoft.org/"><img src="images/libxml2-logo.png" alt="LibXML2" border="0"></a></td> </tr> <tr> <td width="15"></td> <td><a href="http://xmlsoft.org/XSLT"><img src="images/libxslt-logo.png" alt="LibXSLT" border="0"></a></td> </tr> <tr> <td width="15"></td> <td><a href="http://www.openssl.org/"><img src="images/openssl-logo.png" alt="OpenSSL" border="0"></a></td> </tr> <!--Links - start--><!--Links - end--> </table> </td> <td valign="top"><table width="80%" valign="top" style="margin-left:10px;"><tr><td valign="top" align="left" id="xmlsecContent"> <div align="center"> <h1>XML Security Library</h1> </div> <p> XML Security Library is a C library based on <a href="http://xmlsoft.org/">LibXML2</a>. The library supports major XML security standards: </p> <ul> <li><a href="xmldsig.html">XML Signature</a></li> <li><a href="xmlenc.html">XML Encryption</a></li> <li> <a href="http://www.w3.org/TR/xml-c14n">Canonical XML</a> (part of the <a href="http://xmlsoft.org">LibXML2</a>)</li> <li> <a href="http://www.w3.org/TR/xml-exc-c14n">Exclusive Canonical XML</a> (part of the <a href="http://xmlsoft.org">LibXML2</a>)</li> </ul> <p> XML Security Library is released under the <a href="http://www.opensource.org/licenses/mit-license.html">MIT Licence</a> see the Copyright file in the distribution for details.<br><br></p> <p><b>News</b></p> <ul> <li>April 2, 2026<br> The <a href="download.html">XML Security Library 1.3.10</a> release includes the following changes: <ul> <li>The minimum supported versions for dependencies are now: LibXML2 >= 2.9.13 (February 19, 2022), LibXSLT >= 1.1.35 (February 16, 2022), OpenSSL >= 3.0.13 (January 30, 2024), LibreSSL >= 3.9.0 (March 9, 2024), NSS >= 3.91 (June 26, 2023), NSPR >= 4.34.1 (June 26, 2023), GnuTLS >= 3.8.3 (January 1, 2024).</li> <li>(xmlsec-core) Disabled all key value data for all key types by default (use '--enabled-key-data' flag to re-enable if needed).</li> <li>(xmlsec-core) Added '--enable-asn1-signatures-hack' option to allow generation / verification of ASN1 signature values.</li> <li>(xmlsec-core) Added '--verify-crls' option to verify CRLs when loading from command line.</li> <li>(xmlsec-openssl) Added support for EdDSA signature algorithm; XDH (X25519 and X448) key agreement algorithms; HKDF key derivation algorithm; Camellia block cipher and key wrap algorithms; ChaCha20 and ChaCha20-Poly1305 encryption algorithms; and <b>experimental</b> ML-DSA and SLH-DSA-SHA2 signature algorithms. </li> <li>(xmlsec-gnutls) Added support for EdDSA signature algorithms; ECDH and XDH (X25519 and X448) key agreement algorithms; ConcatKDF, PBKDF2, and HKDF key derivation algorithms; ChaCha20 and ChaCha20-Poly1305 encryption algorithms; SHA2-224 and SHA3-224 digest algorithms; and <b>experimental</b> support for ML-DSA signature algorithms. </li> <li>(xmlsec-nss) Added support for EdDSA (Ed25519) signature algorithms; ECDH and XDH (X25519) key agreement algorithms; ConcatKDF and HKDF key derivation algorithms; and ChaCha20-Poly1305 encryption algorithm. Camellia block cipher and key wrap algorithms.</li> <li>(xmlsec-mscng) Added support for DSA-SHA256 signature algorithm; XDH (X25519) and DH (X9.42 DHX) key agreement algorithms; HKDF key derivation algorithm; and SHA3 digest algorithms. </li> <li>(xmlsec-mscng) Added support for loading CRLs from command line.</li> <li>(xmlsec-test) Created scripts to generate keys, regenerated all keys with standard names, and updated tests accordingly.</li> <li>Several other small fixes (see <a href="https://github.com/lsh123/xmlsec/commits/xmlsec_1_3_10">more details</a>).</li> </ul> </li> <br> <li>November 10, 2025<br> The <a href="download.html">XML Security Library 1.3.9</a> release includes the following changes: <ul> <li>(xmlsec-openssl) Added pub/priv key type check for EC and DH keys; improved non-memory EVP keys detection.</li> <li>(xmlsec-openssl) Fixed memory leak in X509 certs verification code.</li> <li>(xmlsec-openssl) Added octet parser in X509 names.</li> <li>(xmlsec-msncg) Added support for non-persistent PKCS12 keys.</li> <li>(xmlsec-windows) Simplified windows build and removed 'with-dl' option for 'configure.js'.</li> <li>Several other small fixes (see <a href="https://github.com/lsh123/xmlsec/commits/master">more details</a>).</li> </ul> </li> <br> <li>October 15, 2025<br> The <a href="download.html">XML Security Library 1.3.8</a> release includes the following changes: <ul> <li>(xmlsec-openssl) Deprecated support for OpenSSL 1.1.1 (<a href="https://openssl-corporation.org/post/2023-09-11-eol-111/">reached its End of Life in September, 2023</a>).</li> <li>(xmlsec-openssl) Added AWS-LC support.</li> <li>(xmlsec-openssl, xmlsec-gnutls, xmlsec-mscng) Added support for longer than expected DSA and ECDSA sigantures to support broken Java implementations.</li> <li>(xmlsec command line tool) Added option "--add-id-attr" to add ID attributes by name to all nodes in the document.</li> <li>(xmlsec-core) Added RSA MGF1 and digest template API.</li> <li>(xmlsec-core) Added example of signing / verifying signature by ID attribute.</li> <li>Several other small fixes (see <a href="https://github.com/lsh123/xmlsec/commits/master">more details</a>).</li> </ul> </li> <br> <li> June 16, 2025<br> The legacy <a href="download.html">XML Security Library 1.2.42</a> release includes the following changes: <ul> <li>(xmlsec-openssl) Ensured that only certificates from XML file are returned after verification.</li> <li>(xmlsec-core) Fixed includes to support latest LibXML2 / LibXSLT.</li> <li>Several other small fixes (see <a href="https://github.com/lsh123/xmlsec/commits/xmlsec-1_2_x">more details</a>).</li> </ul> </li> <br> <li>February 11, 2025<br> The <a href="download.html">XML Security Library 1.3.7</a> release includes the following changes: <ul> <li>(xmlsec-core) Added XMLSEC_TRANSFORM_FLAGS_USER_SPECIFIED flag to the xmlSecTransform to differentiate transforms specified in the input XML file vs transforms automatically added by XMLSec library.</li> <li>(xmlsec-core) Added signature result verification to the examples to demonstrate the need to ensure the correct data is actually signed.</li> <li>(xmlsec-core) Disabled old crypto algorithms (MD5, RIPEMD160) and the old crypto engines (MSCrypto, GCrypt) by default (use "--with-legacy-features" option to reenable everything).</li> <li>(xmlsec-openssl) Fixed excess padding in ECDSA signature generation.</li> <li>(xmlsec-openssl) Fixed build warnings for BoringSSL / AWS-LC.</li> <li>(xmlsec-nss) Fixed certificates search in NSS DB.</li> <li>(xmlsec-openssl, xmlsec-gnutls, xmlsec-mscng) Added an option to skip timestamp checks for certificates and CLRs.</li> <li>(xmlsec-windows) Disabled old crypto algorithms (MD5, RIPEMD160), made "mscng" the default crypto engine on Windows, and added support for "legacy-features" flag for "configure.js".</li> <li>Several other small fixes (see <a href="https://github.com/lsh123/xmlsec/commits/master">more details</a>).</li> </ul> </li> <br> <li>October 22, 2024<br> The <a href="download.html">XML Security Library 1.3.6</a> release includes the following changes: <ul> <li>(xmlsec-openssl) Fixed build if OpenSSL 3.0 doesn't have engines support enabled.</li> <li>(xmlsec-mscng, xmlsec-mscrypto) Added support for multiple trusted certs with the same subject.</li> <li>(windows) Disabled iconv support by default (use 'iconv=yes' option for 'configure.js' to re-enable it).</li> <li>Several other small fixes (see <a href="https://github.com/lsh123/xmlsec/commits/master">more details</a>).</li> </ul> </li> <br> <li>July 19, 2024<br> The <a href="download.html">XML Security Library 1.3.5 and legacy 1.2.41</a> releases include the following changes: <ul> <li>(xmlsec-mscng,xmlsec-mscrypto) Improved certificates verification.</li> <li>(xmlsec-gnutls) Added support for self-signed certificates.</li> <li>(xmlsec-core) Fix deprecated functions in LibXML2 2.13.1 including disabling HTTP support by default (use ''--enable-http' option to re-enable it).</li> <li>Several other small fixes (see <a href="https://github.com/lsh123/xmlsec/commits/xmlsec-1_2_x">more details</a>).</li> </ul> </li> <br> <li>July 11, 2024<br> The legacy <a href="https://www.aleksey.com/xmlsec/download/xmlsec1-1.2.40.tar.gz">XML Security Library 1.2.40</a> release includes the following changes: <ul> <li>(xmlsec-core) Fixed functions deprecated in LibXML2 2.13.1 (including disabling HTTP support by default).</li> <li>(xmlsec-nss) Increased keys size in all tests to support NSS 3.101.</li> <li>(windows) Added "ftp" and "http" flags in 'configure.js' (both are disabled by default).</li> <li>Several other small fixes (<a href="https://github.com/lsh123/xmlsec/commits/xmlsec-1_2_x">more details</a>).</li> </ul> </li> <br> <li>April 9, 2024<br> The <a href="download.html">XML Security Library 1.3.4</a> release includes the following changes: <br> <br> <ul> <li>(xmlsec-openssl) Support cert dates before unix epoch start.</li> <li>(xmlsec-openssl) Fix build for LibreSSL or BoringSSL.</li> <li>(xmlsec-nss) Ensure NSS algorithms are initialized.</li> <li>Several other small fixes (see <a href="https://github.com/lsh123/xmlsec/commits/master">more details</a>).</li> </ul> </li> <br> </ul> <br><br><a href="news.html">News page</a> </td></tr></table></td> </tr></table></body> </html>