/
githubmirror
/
xmlsec
Обзор
Документация
Войти
/
githubmirror
/
xmlsec
Код
Запросы
0
Пакеты
0
Релизы
0
Аналитика
Безопасность
1.3.10
docs/news.html
1 340 строк
60 KB
lsh123
Preparations for 1.3.10 (#1085)
18 мар 2026, 20:51
Не верифицирован
18 мар 2026, 20:51
5ac4215
Код
Авторство
О чём код?
<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <title>XML Security Library: News</title> <link rel="stylesheet" href="css/main.css"> </head> <body><table width="100%" valign="top"><tr valign="top"> <td valign="top" align="left" width="210"> <img src="images/logo.gif" alt="XML Security Library" border="0"><p></p> <ul> <li><a href="index.html">Home</a></li> <li><a href="download.html">Download</a></li> <ul><li><a href="https://github.com/lsh123/xmlsec">GitHub</a></li></ul> <li><a href="news.html">News</a></li> <li><a href="documentation.html">Documentation</a></li> <ul> <li><a href="faq.html">FAQ</a></li> <li><a href="api/xmlsec-notes.html">Tutorial</a></li> <li><a href="api/xmlsec-reference.html">API reference</a></li> <li><a href="api/xmlsec-examples.html">Examples</a></li> </ul> <li><a href="xmldsig.html">XML Digital Signature</a></li> <li><a href="xmlenc.html">XML Encryption</a></li> <li><a href="c14n.html">XML Canonicalization</a></li> <li><a href="bugs.html">Reporting Bugs</a></li> <li><a href="mailing-list.html">Mailing list</a></li> <li><a href="related.html">Related</a></li> <li><a href="authors.html">Authors</a></li> </ul> <table width="100%"> <tr> <td width="15"></td> <td><a href="http://xmlsoft.org/"><img src="images/libxml2-logo.png" alt="LibXML2" border="0"></a></td> </tr> <tr> <td width="15"></td> <td><a href="http://xmlsoft.org/XSLT"><img src="images/libxslt-logo.png" alt="LibXSLT" border="0"></a></td> </tr> <tr> <td width="15"></td> <td><a href="http://www.openssl.org/"><img src="images/openssl-logo.png" alt="OpenSSL" border="0"></a></td> </tr> <!--Links - start--><!--Links - end--> </table> </td> <td valign="top"><table width="80%" valign="top" style="margin-left:10px;"><tr><td valign="top" align="left" id="xmlsecContent"> <div align="center"> <h1>XML Security Library News</h1> </div> <ul> <li>April 2, 2026<br> The <a href="download.html">XML Security Library 1.3.10</a> release includes the following changes: <ul> <li>The minimum supported versions for dependencies are now: LibXML2 >= 2.9.13 (February 19, 2022), LibXSLT >= 1.1.35 (February 16, 2022), OpenSSL >= 3.0.13 (January 30, 2024), LibreSSL >= 3.9.0 (March 9, 2024), NSS >= 3.91 (June 26, 2023), NSPR >= 4.34.1 (June 26, 2023), GnuTLS >= 3.8.3 (January 1, 2024).</li> <li>(xmlsec-core) Disabled all key value data for all key types by default (use '--enabled-key-data' flag to re-enable if needed).</li> <li>(xmlsec-core) Added '--enable-asn1-signatures-hack' option to allow generation / verification of ASN1 signature values.</li> <li>(xmlsec-core) Added '--verify-crls' option to verify CRLs when loading from command line.</li> <li>(xmlsec-openssl) Added support for EdDSA signature algorithm; XDH (X25519 and X448) key agreement algorithms; HKDF key derivation algorithm; Camellia block cipher and key wrap algorithms; ChaCha20 and ChaCha20-Poly1305 encryption algorithms; and <b>experimental</b> ML-DSA and SLH-DSA-SHA2 signature algorithms. </li> <li>(xmlsec-gnutls) Added support for EdDSA signature algorithms; ECDH and XDH (X25519 and X448) key agreement algorithms; ConcatKDF, PBKDF2, and HKDF key derivation algorithms; ChaCha20 and ChaCha20-Poly1305 encryption algorithms; SHA2-224 and SHA3-224 digest algorithms; and <b>experimental</b> support for ML-DSA signature algorithms. </li> <li>(xmlsec-nss) Added support for EdDSA (Ed25519) signature algorithms; ECDH and XDH (X25519) key agreement algorithms; ConcatKDF and HKDF key derivation algorithms; and ChaCha20-Poly1305 encryption algorithm. Camellia block cipher and key wrap algorithms.</li> <li>(xmlsec-mscng) Added support for DSA-SHA256 signature algorithm; XDH (X25519) and DH (X9.42 DHX) key agreement algorithms; HKDF key derivation algorithm; and SHA3 digest algorithms. </li> <li>(xmlsec-mscng) Added support for loading CRLs from command line.</li> <li>(xmlsec-test) Created scripts to generate keys, regenerated all keys with standard names, and updated tests accordingly.</li> <li>Several other small fixes (see <a href="https://github.com/lsh123/xmlsec/commits/xmlsec_1_3_10">more details</a>).</li> </ul> </li> <br> <li>November 10, 2025<br> The <a href="download.html">XML Security Library 1.3.9</a> release includes the following changes: <ul> <li>(xmlsec-openssl) Added pub/priv key type check for EC and DH keys; improved non-memory EVP keys detection.</li> <li>(xmlsec-openssl) Fixed memory leak in X509 certs verification code.</li> <li>(xmlsec-openssl) Added octet parser in X509 names.</li> <li>(xmlsec-msncg) Added support for non-persistent PKCS12 keys.</li> <li>(xmlsec-windows) Simplified windows build and removed 'with-dl' option for 'configure.js'.</li> <li>Several other small fixes (see <a href="https://github.com/lsh123/xmlsec/commits/master">more details</a>).</li> </ul> </li> <br> <li>October 15, 2025<br> The <a href="download.html">XML Security Library 1.3.8</a> release includes the following changes: <ul> <li>(xmlsec-openssl) Deprecated support for OpenSSL 1.1.1 (<a href="https://openssl-corporation.org/post/2023-09-11-eol-111/">reached its End of Life in September, 2023</a>).</li> <li>(xmlsec-openssl) Added AWS-LC support.</li> <li>(xmlsec-openssl, xmlsec-gnutls, xmlsec-mscng) Added support for longer than expected DSA and ECDSA sigantures to support broken Java implementations.</li> <li>(xmlsec command line tool) Added option "--add-id-attr" to add ID attributes by name to all nodes in the document.</li> <li>(xmlsec-core) Added RSA MGF1 and digest template API.</li> <li>(xmlsec-core) Added example of signing / verifying signature by ID attribute.</li> <li>Several other small fixes (see <a href="https://github.com/lsh123/xmlsec/commits/master">more details</a>).</li> </ul> </li> <br> <li> June 16, 2025<br> The legacy <a href="download.html">XML Security Library 1.2.42</a> release includes the following changes: <ul> <li>(xmlsec-openssl) Ensured that only certificates from XML file are returned after verification.</li> <li>(xmlsec-core) Fixed includes to support latest LibXML2 / LibXSLT.</li> <li>Several other small fixes (see <a href="https://github.com/lsh123/xmlsec/commits/xmlsec-1_2_x">more details</a>).</li> </ul> </li> <br> <li>February 11, 2025<br> The <a href="download.html">XML Security Library 1.3.7</a> release includes the following changes: <ul> <li>(xmlsec-core) Added XMLSEC_TRANSFORM_FLAGS_USER_SPECIFIED flag to the xmlSecTransform to differentiate transforms specified in the input XML file vs transforms automatically added by XMLSec library.</li> <li>(xmlsec-core) Added signature result verification to the examples to demonstrate the need to ensure the correct data is actually signed.</li> <li>(xmlsec-core) Disabled old crypto algorithms (MD5, RIPEMD160) and the old crypto engines (MSCrypto, GCrypt) by default (use "--with-legacy-features" option to reenable everything).</li> <li>(xmlsec-openssl) Fixed excess padding in ECDSA signature generation.</li> <li>(xmlsec-openssl) Fixed build warnings for BoringSSL / AWS-LC.</li> <li>(xmlsec-nss) Fixed certificates search in NSS DB.</li> <li>(xmlsec-openssl, xmlsec-gnutls, xmlsec-mscng) Added an option to skip timestamp checks for certificates and CLRs.</li> <li>(xmlsec-windows) Disabled old crypto algorithms (MD5, RIPEMD160), made "mscng" the default crypto engine on Windows, and added support for "legacy-features" flag for "configure.js".</li> <li>Several other small fixes (see <a href="https://github.com/lsh123/xmlsec/commits/master">more details</a>).</li> </ul> </li> <br> <li>October 22, 2024<br> The <a href="download.html">XML Security Library 1.3.6</a> release includes the following changes: <ul> <li>(xmlsec-openssl) Fixed build if OpenSSL 3.0 doesn't have engines support enabled.</li> <li>(xmlsec-mscng, xmlsec-mscrypto) Added support for multiple trusted certs with the same subject.</li> <li>(windows) Disabled iconv support by default (use 'iconv=yes' option for 'configure.js' to re-enable it).</li> <li>Several other small fixes (see <a href="https://github.com/lsh123/xmlsec/commits/master">more details</a>).</li> </ul> </li> <br> <li>July 19, 2024<br> The <a href="download.html">XML Security Library 1.3.5 and legacy 1.2.41</a> releases include the following changes: <ul> <li>(xmlsec-mscng,xmlsec-mscrypto) Improved certificates verification.</li> <li>(xmlsec-gnutls) Added support for self-signed certificates.</li> <li>(xmlsec-core) Fix deprecated functions in LibXML2 2.13.1 including disabling HTTP support by default (use ''--enable-http' option to re-enable it).</li> <li>Several other small fixes (see <a href="https://github.com/lsh123/xmlsec/commits/xmlsec-1_2_x">more details</a>).</li> </ul> </li> <br> <li>July 11, 2024<br> The legacy <a href="https://www.aleksey.com/xmlsec/download/xmlsec1-1.2.40.tar.gz">XML Security Library 1.2.40</a> release includes the following changes: <ul> <li>(xmlsec-core) Fixed functions deprecated in LibXML2 2.13.1 (including disabling HTTP support by default).</li> <li>(xmlsec-nss) Increased keys size in all tests to support NSS 3.101.</li> <li>(windows) Added "ftp" and "http" flags in 'configure.js' (both are disabled by default).</li> <li>Several other small fixes (<a href="https://github.com/lsh123/xmlsec/commits/xmlsec-1_2_x">more details</a>).</li> </ul> </li> <br> <li>April 9, 2024<br> The <a href="download.html">XML Security Library 1.3.4</a> release includes the following changes: <br> <br> <ul> <li>(xmlsec-openssl) Support cert dates before unix epoch start.</li> <li>(xmlsec-openssl) Fix build for LibreSSL or BoringSSL.</li> <li>(xmlsec-nss) Ensure NSS algorithms are initialized.</li> <li>Several other small fixes (see <a href="https://github.com/lsh123/xmlsec/commits/master">more details</a>).</li> </ul> </li> <br> <li>January 4, 2024<br> The <a href="download.html">XML Security Library 1.3.3</a> release includes the following changes: <br> <br> <ul> <li> (xmlsec-core) Disabled KeyValue and DEREncodedKeyValue XML nodes by default. Use the '--enabled-key-data' option for the xmlsec command line utility or update the 'keyInfoCtx.enabledKeyData' parameter if you need to re-enable these nodes (also see <a href="faq.html#section_3_5">question 3.5 in the FAQ</a>). </li> <li>(xmlsec-core) Removed '--enable-size-t' ('size_t' for MSVC builds) option and made 'xmlSecSize' to always be the same as 'size_t'.</li> <li>(xmlsec-core) Removed previously deprecated functions, defines, etc.</li> <li>(xmlsec-core) Fixed build for libxml2 v2.12.0.</li> <li> (xmlsec-openssl) Removed support for OpenSSL 1.1.0 (<a href="https://endoflife.date/openssl">end of life in Aug 2016</a>). The minimum OpenSSL supported version is 1.1.1; the version 3.0.0 or greater is recommended. </li> <li>(xmlsec-nss) Added runtime check for the enabled algorithms in NSS.</li> <li>(xmlsec-mscrypto) Removed NT4 support.</li> <li>Several other small fixes (see <a href="https://github.com/lsh123/xmlsec/commits/master">more details</a>).</li> </ul> </li> <br> <li>December 12, 2023<br> The legacy <a href="download/">XML Security Library 1.2.39</a> release includes the following changes: <ul> <li>Added options to enable/disable local files, HTTP, and FTP support. FTP is disabled by default.</li> <li>Several other small fixes (<a href="https://github.com/lsh123/xmlsec/commits/xmlsec-1_2_x">more details</a>).</li> </ul> </li> <br> <li>October 31, 2023<br> The <a href="download.html">XML Security Library 1.3.2</a> release includes the following changes: <br> <br> <ul> <li>(xmlsec-openssl) Fixed padding for GOST 2001 and 2012 signatures.</li> <li>(xmlsec-nss) Added support for reading PEM certificates.</li> <li>(xmlsec-nss) Added a check to ensure that the key certificate matches the key.</li> <li>(xmlsec-nss) Added support for xmlsec command line tool '--verify-keys' option.</li> <li>(xmlsec-gnutls) Added support for GOST R 34.11-94, GOST R 34.11-2012 256 bit, and GOST R 34.11-2012 512 bit digest algorithms.</li> <li>(xmlsec-gnutls) Added support for GOST R 34.10-2001, GOST R 34.11-2012 256 bit, and GOST R 34.11-2012 512 bit signature algorithms.</li> <li>(xmlsec-gnutls) Added support for xmlsec command line tool '--verify-keys' option.</li> <li>(xmlsec-gnutls) Added check to ensure that the key certificat matches the key.</li> <li>(xmlsec-mscng) Added support for xmlsec command line tool '--verify-keys' option.</li> <li>(xmlsec-mscng) Replaced windows.h includes with wincrypt.h includes where possible.</li> <li>(xmlsec-mscrypto) Replaced windows.h includes with wincrypt.h includes where possible.</li> <li>(xmlsec command line tool) Added '--base64-line-size' option to control the base64 encoding line size.</li> <li>(MSVC build) Added 'ftp' and 'http' options to control FTP and HTTP support. FTP support is disabled by default.</li> <li>(MinGW build) The xmlsec-mscrypto is moved down in the default crypto library selection list as it is now in maintanance mode (use '--with-default-crypto' option to force the selection). </li> <li>(MinGW build) Fixed the static libraries build with "--enable-static-linking" option.</li> <li>Several other small fixes (see <a href="https://github.com/lsh123/xmlsec/commits/master">more details</a>).</li> </ul> </li> <br> <li>July 5, 2023<br> The legacy <a href="download/">XML Security Library 1.2.38</a> release includes the following changes: <ul> <li>Fixed static linking with MinGW.</li> <li>(xmlsec-mscng) Fixed block ciphers key size.</li> <li>Several other small fixes (<a href="https://github.com/lsh123/xmlsec/commits/xmlsec-1_2_x">more details</a>).</li> </ul> </li> <br> <li>June 6, 2023<br> The <a href="download.html">XML Security Library 1.3.1</a> release includes the following changes: <br> <br> <ul> <li>Added "--with-libltdl" option for ./configure to allow custom libltdl installations and deprecated "--enable-crypto-dl" option.</li> <li>Added support for cclang compiler on non-MacOSX platforms.</li> <li>(xmlsec-openssl) Restored support for LibreSSL and bumped minimum required version to 3.5.0.</li> <li>(xmlsec-nss) Restored minimum supported NSS version to 3.35.</li> <li>Several other small fixes (<a href="https://github.com/lsh123/xmlsec/commits/master">more details</a>).</li> </ul> </li> <br> <li>April 12, 2023<br> The <a href="download.html">XML Security Library 1.3.0</a> release includes the following changes: <br> <br> <ul> <li> <b>core xmlsec and all xmlsec-crypto libraries:</b> <ul> <li>(<b>ABI breaking change</b>) Added support for the <a href="https://www.w3.org/TR/xmldsig-core1/#sec-KeyInfoReference">KeyInfoReference Element</a>.</li> <li>(<b>ABI breaking change</b>) Switched xmlSecSize to use size_t by default. Use "--enable-size-t=no" configure option ("size_t=no" on Windows) to restore the old behaviour (note that support for xmlSecSize being different from size_t will be removed in the future).</li> <li>(<b>API breaking change</b>) Changed the key search to strict mode: only keys referenced by KeyInfo are used. To restore the old "lax" mode, set XMLSEC_KEYINFO_FLAGS_LAX_KEY_SEARCH flag on xmlSecKeyInfoCtx or use '--lax-key-search' option for XMLSec command line utility. </li> <li>(<b>API breaking change</b>) The KeyName element content is now trimmed before key search is performed.</li> <li>(<b>API breaking change</b>) Disabled FTP support by default. Use "--enable-ftp" configure option to restore it. Also added "--enable-http" and "--enable-files" configure options to control support for loading files over HTTP or locally.</li> <li>(<b>API/ABI breaking change</b>) Disabled MD5 digest method by default. Use "--enable-md5" configure options ("legacy-crypto" option on Windows) to re-enable MD5.</li> <li>(<b>ABI breaking change</b>) Added "failureReason" file to xmlSecDSigCtx and xmlEncCtx to provide more granular operation failure reason.</li> <li>(<b>ABI breaking change</b>) Removed deprecated functions.</li> <li>Added support for loading keys through <a href="https://www.openssl.org/docs/man3.0/man7/ossl_store.html">ossl-store</a> interface (e.g. for using keys from an HSM). Also see '--privkey-openssl-store' and '--pubkey-openssl-store ' command line options for XMLSec utility.</li> <li>Added ability to control transforms binary chunk size to improve performance (see '--transform-binary-chunk-size' command line option for XMLSec utility).</li> <li>Fixed all potentially unsafe integer conversions and all the other warnings.</li> <li>Added <a href="https://www.w3.org/TR/2012/NOTE-xmldsig-core1-interop-20121113/">XML Signature 1.1 interop (2012)</a> and <a href="https://www.w3.org/TR/2012/NOTE-xmlenc-core1-interop-20121113/">XML Encryption 1.1 interop (2012)</a> tests. </li> </ul> </li> <li> <b>xmlsec-openssl library:</b> <ul> <li>Added support for <a href="https://www.ietf.org/rfc/rfc9231.html#name-sha-3-algorithms">SHA3 digests</a>.</li> <li>Added support for <a href="https://www.ietf.org/rfc/rfc9231.html#name-ecdsa-sha-ecdsa-ripemd160-e">ECDSA-SHA3 signatures</a>.</li> <li>Added support for <a href="https://www.ietf.org/rfc/rfc9231.html#section-2.3.10">RSA PSS signatures (withtout parameters)</a>.</li> <li> Added support for <a href="https://www.w3.org/TR/xmlenc-core1/#sec-ConcatKDF">ConcatKDF key</a> and <a href="https://www.w3.org/TR/xmlenc-core1/#sec-PBKDF2">PBKDF2</a> derivation algorithms. </li> <li>(<b>ABI breaking change</b>) Added support for <a href="https://www.w3.org/TR/xmlenc-core1/#sec-ECDH-ES">ECDH-ES Key Agreement algorithm</a>.</li> <li>(<b>ABI breaking change</b>) Added support for <a href="https://www.w3.org/TR/xmlenc-core1/#sec-DHKeyAgreementExplicitKDF">DH-ES Key Agreement algorithm</a> with explicit KDF.</li> <li>Added support for <a href="https://www.w3.org/TR/xmlenc-core1/#sec-RSA-OAEP">MGF1 algorithm to RSA OAEP key transport</a>.</li> <li>Added support for <a href="https://www.w3.org/TR/xmldsig-core1/#sec-X509Data">X509Digest</a> element and ability to lookup keys using other X509Data elements.</li> <li>Added support for <a href="https://www.w3.org/TR/xmldsig-core1/#sec-DEREncodedKeyValue">DEREncodedKeyValue</a> element.</li> <li>Automatically set key name from PKCS12 key name.</li> <li>Removed support for OpenSSL 1.0.0 and LibreSSL before 2.7.0.</li> </ul> </li> <li> <b>xmlsec-nss library:</b> <ul> <li>Added support for <a href="https://www.ietf.org/rfc/rfc9231.html#section-2.3.10">RSA PSS signatures (withtout parameters)</a>.</li> <li>Added support for <a href="https://www.w3.org/TR/xmlenc-core1/#sec-RSA-OAEP">RSA OAEP key transport including MGF1 algorithms</a>.</li> <li>Added support for <a href="https://www.w3.org/TR/xmlenc-core1/#sec-AES-GCM">AES GCM ciphers</a>.</li> <li>Added support for <a href="https://www.w3.org/TR/xmlenc-core1/#sec-PBKDF2">PBKDF2</a> derivation algorithm.</li> <li>Added support for <a href="https://www.w3.org/TR/xmldsig-core1/#sec-X509Data">X509Digest</a> element and ability to lookup keys using other X509Data elements.</li> <li>Added support for <a href="https://www.w3.org/TR/xmldsig-core1/#sec-DEREncodedKeyValue">DEREncodedKeyValue</a> element.</li> <li>Automatically set key name from PKCS12 key name.</li> </ul> </li> <li> <b>xmlsec-gnutls library:</b> <ul> <li>(<b>API/ABI breaking change</b>) Removed dependency on xmlsec-gcrypt and libgcrypt libraries (including API functions) to enable support for different GnuTLS backends.</li> <li>Bumped minimal GnuTLS version to 3.6.13.</li> <li>Added support for <a href="https://www.ietf.org/rfc/rfc9231.html#name-sha-3-algorithms">SHA3 digests</a>.</li> <li>Added support for <a href="https://www.w3.org/TR/xmldsig-core1/#sec-ECDSA">ECDSA signatures</a>.</li> <li>Added support for <a href="https://www.w3.org/TR/xmlenc-core1/#sec-RSA-OAEP">DSA-SHA256 signatures</a>.</li> <li>Added support for <a href="https://www.ietf.org/rfc/rfc9231.html#section-2.3.10">RSA PSS signatures (withtout parameters)</a>.</li> <li>Added support for <a href="https://www.w3.org/TR/xmlenc-core1/#sec-RSA-1_5">RSA PKCS 1.5 key transport</a>.</li> <li>Added support for <a href="https://www.w3.org/TR/xmlenc-core1/#sec-AES-GCM">AES GCM ciphers</a>.</li> <li>Added support for <a href="https://www.w3.org/TR/xmlenc-core1/#sec-PBKDF2">PBKDF2</a> derivation algorithm.</li> <li>Added support for <a href="https://www.w3.org/TR/xmldsig-core1/#sec-X509Data">X509Digest</a> element and ability to lookup keys using other X509Data elements.</li> <li>Added support for <a href="https://www.w3.org/TR/xmldsig-core1/#sec-DEREncodedKeyValue">DEREncodedKeyValue</a> element.</li> <li>Automatically set key name from PKCS12 key name.</li> </ul> </li> <li> <b>xmlsec-mscng library:</b> <ul> <li>Added support for <a href="https://www.ietf.org/rfc/rfc9231.html#section-2.3.10">RSA PSS signatures (withtout parameters)</a>.</li> <li>Added support for <a href="https://www.w3.org/TR/xmlenc-core1/#sec-RSA-OAEP">MGF1 algorithm to RSA OAEP key transport</a>.</li> <li>(<b>ABI breaking change</b>) Added support for <a href="https://www.w3.org/TR/xmlenc-core1/#sec-ECDH-ES">ECDH-ES Key Agreement algorithm</a>.</li> <li> Added support for <a href="https://www.w3.org/TR/xmlenc-core1/#sec-ConcatKDF">ConcatKDF key</a> and <a href="https://www.w3.org/TR/xmlenc-core1/#sec-PBKDF2">PBKDF2</a> derivation algorithms. </li> <li>Added support for <a href="https://www.w3.org/TR/xmldsig-core1/#sec-X509Data">X509Digest</a> element for keys and certificates lookup from the system stores (only SHA1 is supported).</li> <li>Added support for <a href="https://www.w3.org/TR/xmldsig-core1/#sec-DEREncodedKeyValue">DEREncodedKeyValue</a> element.</li> <li>Automatically set key name from PKCS12 key name.</li> </ul> </li> <li> <b>xmlsec-mscrypto library:</b> <ul> <li>In maintenance mode starting from this release.</li> <li>Disabled by default support for NT4. Use "nt4=yes" configure option on Windows to re-enable it.</li> </ul> </li> <li> <b>xmlsec-gcrypt library:</b> <ul> <li>In maintenance mode starting from this release.</li> <li>Added support for <a href="https://www.ietf.org/rfc/rfc9231.html#name-sha-3-algorithms">SHA3 digests</a>.</li> <li>Added support for <a href="https://www.w3.org/TR/xmldsig-core1/#sec-ECDSA">ECDSA signatures</a>.</li> <li>Added support for <a href="https://www.ietf.org/rfc/rfc9231.html#section-2.3.10">RSA PSS signatures (withtout parameters)</a>.</li> <li>Added support for <a href="https://www.w3.org/TR/xmlenc-core1/#sec-RSA-1_5">RSA PKCS 1.5 key transport</a>.</li> <li>Added support for <a href="https://www.w3.org/TR/xmlenc-core1/#sec-RSA-OAEP">RSA OAEP key transport including MGF1 algorithms</a>.</li> </ul> </li> <li> <b>xmlsec command line utility:</b> <ul> <li>(<b>API breaking change</b>) The XMLSec command line utility is using 'strict' key search mode by default. To restore the old 'lax' key search mode, use the new '--lax-key-search' option.</li> <li>(<b>API breaking change</b>) The XMLSec command line utility is no longer prints detailed errors by default. To restore the detailed errors, use the new '--verbose' option.</li> <li>Added '--transform-binary-chunk-size' option to control transforms binary chunk size (increasing the chunk size should improve performance at the expense of memory usage. </li> <li>Added support for loading keys through <a href="https://www.openssl.org/docs/man3.0/man7/ossl_store.html">ossl-store</a> interface (e.g. for using keys from an HSM). Also see '--privkey-openssl-store' and '--pubkey-openssl-store ' command line options for XMLSec utility.</li> <li>Added '--enabled-key-info-reference-uris' option to control processing of the the <a href="https://www.w3.org/TR/xmldsig-core1/#sec-KeyInfoReference">KeyInfoReference Element</a>. </li> <li>Added '--pbkdf2-key' option for loading PBKDF2 keys.</li> <li>Added '--concatkdf-key' option for loading ConcatKDF keys.</li> <li>Added '--hmac-min-out-len' option to control the min accepted HMAC Output length.</li> <li>Added '--pubkey-openssl-engine' option to load public keys from OpenSSL engine.</li> <li>Added '--crl-pem' and '--crl-der' options to load CRLs.</li> <li>Added '--verify-keys' option to verify key's certificate before loading into Keys Manager (only supported for OpenSSL currently).</li> <li>Enabled templatized output filenames to facilitate batch operations on multiple input files.</li> </ul> </li> </ul> <p>Detailed information about supported algorithms can be found here: <a href="xmldsig.html">XMLDsig</a> and <a href="xmlenc.html">XMLEnc</a> interoperability reports.</p> </li> <br> <li>November 30, 2022<br> The <a href="download.html">XML Security Library 1.2.37</a> release includes the following changes: <ul> <li>Fixed two regressions from 1.2.36 release: <a href="https://github.com/lsh123/xmlsec/issues/437">issue #437</a> and <a href="https://github.com/lsh123/xmlsec/issues/449">issue #449</a>.</li> </ul> </li> <br> <li> October 31, 2022<br> The <a href="download.html">XML Security Library 1.2.36</a> release includes the following changes: <ul> <li>Retired the XMLSec mailing list "xmlsec@aleksey.com" and the <a href="xmldsig-verifier.html">XMLSec Online Signature Verifier</a>.</li> <li>Several other small fixes (<a href="https://github.com/lsh123/xmlsec/commits/master">more details</a>).</li> </ul> </li> <br> <li> October 25, 2022<br> The <a href="download.html">XML Security Library 1.2.35</a> release includes the following changes: <ul> <li> Migration to OpenSSL 3.0 API (based on PR by @snargit). Note that OpenSSL engines are disabled by default when XMLSec library is compiled against OpenSSL 3.0. To re-enable OpenSSL engines, use "--enable-openssl3-engines" configure flag (there will be a lot of deprecation warnings). </li> <li> The OpenSSL before 1.1.0 and LibreSSL before 2.7.0 are now deprecated and will be removed in the future versions of XMLSec Library. </li> <li> Refactored all the integer casts to ensure cast-safety. Fixed all warnings and enabled "-Werror" and "-pedantic" flags on CI builds. </li> <li> Added configure flag to use size_t for xmlSecSize (currently disabled by default for backward compatibility). </li> <li>Moved all CI builds to GitHub actions.</li> <li>Several other small fixes (<a href="https://github.com/lsh123/xmlsec/commits/master">more details</a>).</li> </ul> </li> <br> <li> May 3, 2022<br> The <a href="download.html">XML Security Library 1.2.34</a> release includes the following changes: <ul> <li>Support for OpenSSL compiled with OPENSSL_NO_ERR.</li> <li>Full support for LibreSSL 3.5.0 and above (@vishwin).</li> <li>Several other small fixes (<a href="https://github.com/lsh123/xmlsec/commits/master">more details</a>).</li> </ul> </li> <br> <li> October 25, 2021<br> The <a href="download.html">XML Security Library 1.2.33</a> release includes the following changes: <ul> <li>Added --privkey-openssl-engine option to enhance openssl engine support (Leonardo Secci).</li> <li>Fixed decrypting session key for two recipients.</li> <li>Several other small fixes (<a href="https://github.com/lsh123/xmlsec/commits/master">more details</a>).</li> </ul> </li> <br> <li> April 21, 2021<br> The <a href="download.html">XML Security Library 1.2.32</a> release includes the following changes: <ul> <li>Several small fixes (<a href="https://github.com/lsh123/xmlsec/commits/master">more details</a>).</li> </ul> </li> <br> <li> October 29, 2020<br> The <a href="download.html">XML Security Library 1.2.31</a> release includes the following changes: <ul> <li>Added configure option to ensure memset() securely erases memory (gcc).</li> <li>Several other small fixes (<a href="https://github.com/lsh123/xmlsec/commits/master">more details</a>).</li> </ul> </li> <br> <li> April 21, 2020<br> The <a href="download.html">XML Security Library 1.2.30</a> release includes the following changes: <ul> <li>Enabled XML_PARSE_HUGE for all xml parsers.</li> <li>Added s390x support for travis (nayana-ibm).</li> <li>Several other small fixes (<a href="https://github.com/lsh123/xmlsec/commits/master">more details</a>).</li> </ul> </li> <br> <li> October 15, 2019<br> The <a href="download.html">XML Security Library 1.2.29</a> release includes the following changes: <ul> <li>Various build and tests fixes and improvements.</li> <li>Move remaining private header files away from xmlsec/include/ folder.</li> <li>Several other small fixes (<a href="https://github.com/lsh123/xmlsec/commits/master">more details</a>).</li> </ul> </li> <br> <li> April 16, 2019<br> The <a href="download.html">XML Security Library 1.2.28</a> release includes the following changes: <ul> <li>Added BoringSSL support (chenbd).</li> <li>Added gnutls-3.6.x support (alonbl).</li> <li>Added DSA and ECDSA key size getter for MSCNG (vmiklos).</li> <li>Added --enable-mans configuration option (alonbl).</li> <li>Added coninuous build integration for MacOSX (vmiklos).</li> <li>Several other small fixes (<a href="https://github.com/lsh123/xmlsec/commits/master">more details</a>).</li> </ul> </li> <br> <li> October 23, 2018<br> The <a href="download.html">XML Security Library 1.2.27</a> release includes the following changes: <ul> <li>Added AES-GCM support for OpenSSL and MSCNG (snargit).</li> <li>Added DSA-SHA256 and ECDSA-SHA384 support for NSS (vmiklos).</li> <li>Added RSA-OAEP support for MSCNG (vmiklos).</li> <li>Continuous build integration in Travis and Appveyor.</li> <li>Several other small fixes (<a href="https://github.com/lsh123/xmlsec/commits/master">more details</a>).</li> </ul> </li> <br> <li> June 5, 2018<br> The <a href="download.html">XML Security Library 1.2.26</a> release includes the following changes: <ul> <li>Added xmlsec-mscng module based on <a href="https://msdn.microsoft.com/en-us/library/windows/desktop/aa376210(v=vs.85).aspx">Microsoft Cryptography API: Next Generation</a> (vmiklos).</li> <li>Added support for GOST 2012 and fixed CryptoPro CSP provider for GOST R 34.10-2001 in xmlsec-mscrypto (ipechorin).</li> <li>Added LibreSSL 2.7 support (vishwin).</li> <li>Upgraded documentation build process to support the latest gtk-doc.</li> <li>Several other small fixes (<a href="https://github.com/lsh123/xmlsec/commits/master">more details</a>).</li> </ul> </li> <br> <li> September 12, 2017<br> The <a href="download.html">XML Security Library 1.2.25</a> release includes the following changes: <ul> <li>Removed OpenSSL 0.9.8 support and several previously deprecated functions.</li> <li>Added SHA224 support for xmlsec-nss (vmiklos).</li> <li>Added configurable default linefeed for xmltree module (pablogallardo).</li> <li>Several other small fixes (<a href="https://github.com/lsh123/xmlsec/commits/master">more details</a>).</li> </ul> </li> <br> <li> April 20, 2017<br> The <a href="download.html">XML Security Library 1.2.24</a> release includes the following changes: <ul> <li>Added ECDSA-SHA1, ECDSA-SHA256, ECDSA-SHA512 support for xmlsec-nss (vmiklos).</li> <li>Fixed XMLSEC_KEYINFO_FLAGS_X509DATA_DONT_VERIFY_CERTS handling (vmiklos).</li> <li>Disabled external entities loading by xmlsec utility app by default to prevent XXE attacks (d-hat).</li> <li>Improved OpenSSL version and features detection.</li> <li>Cleaned up, simplified, and standardized internal error reporting.</li> <li> Marked as deprecated all the functions in xmlsec/soap.h file and a couple other functions no longer required by xmlsec. These functions will be removed in the future releases. </li> <li>Fixed a few Coverity-discovered bugs (<a href="https://scan.coverity.com/projects/xmlsec">report</a>).</li> <li>Several other small fixes (<a href="https://github.com/lsh123/xmlsec/commits/master">more details</a>).</li> </ul> Please note that OpenSSL 0.9.8 support will be removed in the next release of XMLSec library. </li> <br> <li> October 16, 2016<br> The <a href="download.html">XML Security Library 1.2.23</a> release includes the following changes: <ul> <li>Full support for OpenSSL 1.1.0.</li> <li>Several other small fixes (<a href="https://github.com/lsh123/xmlsec/commits/master">more details</a>).</li> </ul> </li> <br> <li> April 20, 2016<br> The <a href="download.html">XML Security Library 1.2.22</a> release includes the following changes: <ul> <li>Restored SOAP parser to support backward compatibility for Lasso project.</li> </ul> </li> <br> <li> April 12, 2016<br> The <a href="download.html">XML Security Library 1.2.21</a> release includes the following changes: <ul> <li>Added OOXML Relationships Transform Algorithm (patch from <a href="https://github.com/vmiklos">Miklos Vajna</a>).</li> <li>Added experimental GOST2012 support for xmlsec-openssl (patch from Nikolay Shaplov).</li> <li>Migrated XMLSec to <a href="https://github.com/lsh123/xmlsec">GitHub</a>.</li> <li> Added OpenSSL 1.1.0 (pre 2) API support (major re-factoring for all OpenSSL based implementations of the block ciphers and the DSA/ECDSA signatures). </li> <li>Removed support for legacy OpenSSL 0.9.6 (last release: March, 2004) and 0.9.7 (last release: February, 2007).</li> <li>Completely revamped manpages/documentation build to completely pass 'make distcheck' tests.</li> <li>Deprecated XMLSEC_CRYPTO define in favor of xmlSecGetDefaultCrypto() function.</li> <li> Implemented several other smaller features; fixed several other minor bugs, code cleanups: (<a href="https://github.com/lsh123/xmlsec/commits/master">more details</a>). </li> </ul> </li> <br> <li> January 28, 2016<br> The XML Security Library was migrated to <a href="https://github.com/lsh123/xmlsec">GitHub</a>. Please use GitHub for accessing source code and reporting issues. </li> <br> <li> May 27, 2014<br> The <a href="download.html">XML Security Library 1.2.20</a> release fixes a number of miscellaneous bugs and updates expired or soon-to-be-expired certificates in the test suite. </li> <br> <li> March 24, 2013<br> The <a href="download.html">XML Security Library 1.2.19</a> release adds support for DSA-SHA256, ECDSA-SHA1, ECDSA-SHA224, ECDSA-SHA256, ECDSA-SHA384, ECDSA-SHA512 and fixes a number of miscellaneous bugs. </li> <br> <li> May 11, 2011<br> The <a href="download.html">XML Security Library 1.2.18</a> release fixes a serious crasher. All users are advised to upgraded as soon as possible. </li> <br> <li> March 31, 2011<br> Changes in <a href="download.html">XML Security Library 1.2.17</a> release: <ul> <li>Fixed security issue with libxslt (CVE-2011-1425, reported by Nicolas Gregoire).</li> <li>Fixed a number of build configuration problems, pkcs12 file loading, and gcrypt init/shutdown.</li> </ul> </li> <br> <li> May 26, 2010<br> Changes in <a href="download.html">XML Security Library 1.2.16</a> release: <ul> <li>New xmlsec-gcrypt library.</li> <li> xmlsec-gcrypt: Added RSA with SHA1/SHA256/SHA384/SHA512/MD5/RIPEMD160, DSA with SHA1, AES/DES KW support. </li> <li> xmlsec-gnutls: Added X509 support and converted the library to use xmlsec-gcrypt library for all crypto operations. </li> <li>xmlsec-mscrypto: RSA/OAEP and AES/DES KW support.</li> <li>Several minor bug fixes and code cleanups.</li> </ul> </li> <br> <li> April 29, 2010<br> Changes in <a href="download.html">XML Security Library 1.2.15</a> release: <ul> <li> xmlsec-mscrypto: Added HMAC with MD5, SHA1, SHA256/384/512; RSA with MD5, SHA256/384/512 support. </li> <li>xmlsec-mscrypto: Converted to Unicode (the non-Unicode builds are still available as compile time option).</li> <li> xmlsec-nss: Added MD5 and SHA256/384/512 support for digest, HMAC and RSA (the new minimum required version for NSS library is 3.9). </li> <li> xmlsec-gnutls: Added SHA256/384/512 for digest and HMAC; MD5 and RIPEMD160 digests support (the new minimum required version for GnuTLS library is 2.8.0). </li> <li>Fixed typo: "Copyrigth" should be "Copyright".</li> <li>Several critical bug fixes and code cleanups.</li> </ul> </li> <br> <li> December 5, 2009<br> Changes in <a href="download.html">XML Security Library 1.2.14</a> release: <ul> <li> XMLSec library is switched from built-in LTDL library to the system LTDL library on Linux/Unix and native calls on Windows to fix <a href="https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-3736"> security issue </a> in LTDL. </li> <li> Fixed minor bugs (see <a href="https://github.com/lsh123/xmlsec/commits/master">commits log</a> for complete list). </li> </ul> </li> <br> <li> September 12, 2009<br> Changes in <a href="download.html">XML Security Library 1.2.13</a> release: <ul> <li> <a href="http://xmlsoft.org/">LibXML2</a> version 2.7.4 is now required </li> <li> Implemented support for <a href="http://www.w3.org/TR/xml-c14n11/">C14N version 1.1</a> </li> <li>Increase default minimum hmac size to 80 bits</li> <li>Added support for --with-libxml-src and --with-libxslt-src ./configure options</li> <li>Fixed XML dump output</li> </ul> </li> <br> <li> July 14, 2009<br> The new <a href="download.html">XML Security Library 1.2.12</a> release includes the following changes (see ChangeLog for the complete list of changes): <ul> <li> Fixed HMAC vulnerability with small values of HMAC length (<a href="http://www.kb.cert.org/vuls/id/466161">CERT VU #466161</a>). </li> <li> Added support for the GOST implemented by Russian Crypto Pro CSP (patch from Dennis Prochko) </li> <li>Added an option to return the replaced node (based on the patch from Frank Gross)</li> <li> Added new function xmlSecNodeEncodeAndSetContent for encoding special chars in the node content. </li> <li>Added configurable Base64 line length.</li> <li>Bug fixes.</li> </ul> </li> <br> <li> November 6, 2007<br> The new <a href="download.html">XML Security Library 1.2.11</a> release includes the following changes: <ul> <li>Mingw port (Roumen Petrov).</li> <li>Better support for non micorsoft CSP's (Wouter and Ed Shallow).</li> <li>Bug fixes.</li> </ul> </li> <br> <li> June 12, 2006<br> The new <a href="download.html">XML Security Library 1.2.10</a> release includes the following changes: <ul> <li>GOST algorithms support (Dmitry Belyavsky)</li> <li> Ability to disable system trusted certs in xmlsec-mscrypto (Dmitry Belyavsky) </li> <li> New functions for adding X509IssuerName and X509SerialNumber nodes to the template (Dmitry Belyavsky) </li> <li>Better packaging support for Fedora and Debian (Daniel Veillard, John Belmonte)</li> <li>Cleanups from Coverity tool reports</li> <li>Bug fixes</li> </ul> </li> <br> <li> July 12, 2005<br> The new <a href="download.html">XML Security Library 1.2.9</a> release includes few bug fixes and adds support for the recently released <a href="http://www.openssl.org">OpenSSL 0.9.8</a> including several new algorithms for <a href="xmldsig.html">xmlsec-openssl</a>: <ul> <li>SHA224/SHA256/SHA384/SHA512</li> <li>HMAC-SHA224/SHA256/SHA384/SHA512</li> <li>RSA-MD5/RIPEMD160/SHA224/SHA256/SHA384/SHA512</li> </ul> </li> <br> <li> March 30, 2005<br> The new <a href="download.html">XML Security Library 1.2.8</a> release merges OpenOffice.org changes to xmlsec-mscrypto and xmlsec-nss into main xmlsec source tree. </li> <br> <li> February 23, 2005<br> The new <a href="download.html">XML Security Library 1.2.7</a> release includes several bug fixes and minor enchancements: <ul> <li>(core) added xmlSecSimpleKeysStoreGetKeys() function;</li> <li> (core) added functions to create <X509Data/> node children in the signature template; </li> <li>(core) fixed xmlSecGenerateID() function;</li> <li> (core) fixed dynamic linking initialization/shutdown when custom memory allocation functions are used; </li> <li>(core) fixed encrypted text parsing and xmlParseInNodeContext() function;</li> <li>(openssl) fixed parsing quoted values in the certificate subject;</li> <li>(mscrypto) negative numbers support in xmlSecBnFromString()/xmlSecBnToString() functions.</li> </ul> </li> <br> <li> August 25, 2004<br> The new <a href="download.html">XML Security Library 1.2.6</a> fixes several minor bugs and adds support for loading keys and certificates from memory. </li> <br> <li> July 27, 2004<br> Created a <a href="related.html#books">list of books</a> about cryptography and security that covers most of the topics needed for using XML Security Library. </li> <br> <li> April 15, 2004<br> The new <a href="download.html">XML Security Library 1.2.5</a> includes a simple XKMS server implementation and fixes a nasty bug with encrypting/decrypting nodes with an empty content. </li> <br> <li> January 27, 2004<br> The new <a href="download.html">XML Security Library 1.2.4</a> release fixes many configuration and installation problems found by John. </li> <br> <li> January 6, 2004<br> The new <a href="download.html">XML Security Library 1.2.3</a> release upgrades xmlsec-gnutls code to support latest gnutls library version (1.0.4) and fixes several configuration and installation problems. </li> <br> <li> November 11, 2003<br> The new <a href="download.html">XML Security Library 1.2.2</a> release includes several improvements in ./configure script (Daniel, Roumen) and a bug fix for certificates serial number processing in xmlsec-mscrypto. </li> <br> <li> October 14, 2003<br> The new <a href="download.html">XML Security Library 1.2.1</a> release includes a special "hack" for supporting ID attributes with invalid values in Visa 3D; fixed processing of root element node siblings (bug #124245); template functions for creating <enc:KeyReference/> and <enc:DataReference/&gt nodes (Wouter); new "XMLSEC_DOCDIR" environment variable for ./configure script; updated README files for xmlsec-crypto libraries. </li> <br> <li> September 30, 2003<br> The major change in the new <a href="download.html">XML Security Library 1.2.0</a> release is the MS Crypto API support implemented by Wouter. Other changes include loading public keys from certificates and improved namespaces support for start node selection with "--node-xpath" command line option for xmlsec command line utility; updated online XML DSig Verifier; updated docs and man pages. </li> <br> <li> September 17, 2003<br> The new <a href="download.html">XML Security Library 1.1.2</a> release introduces dynamical crypto engines loading based on ltdl library (including tutorial, API reference and documentation updates); adds an ability to build multiple xmlsec-crypto libraries in one build on Windows; fixes minor problems in test suite and multiple warnings when building on Sun Solaris. </li> <br> <li> August 21, 2003<br> The new <a href="download.html">XML Security Library 1.1.1</a> release adds <X509Data/> node templates support to xmlsec-nss (Tej); includes new functions for reading keys and certificates from memory for xmlsec-core and xmlsec-openssl (Joachim); fixes several problems in xmlsec configuration files (Roumen) and a bug in URI attribute XInclude processing. </li> <br> <li> August 5, 2003<br> A great patch from Tej that dramaticaly improves xmlsec-nss functionality deserves a minor version number update :). In addition to that, the new <a href="download.html">XML Security Library 1.1.0</a> release includes <X509Data/> node templates support for xmlsec-openssl (Roumen); separate pkg-config files for xmlsec-crypto libraries and minor documentation updates (including coding style and some useful commands for xmlsec developers in a new "HACKING" file). </li> <br> <li> July 15, 2003<br> There were several minor patches during last month and it's time to do a new <a href="download.html">XML Security Library 1.0.4</a> release to pick up them: x509 certificates names comparison function now supports multiple entries woth the same object name (Roumen); multiple build fixes; documentation mistypes fixes.<br> Also I gave an XML Security presentation at <a href="http://oreillynet.com/oscon2003/">OSCON 2003</a> last week. You can download slides <a href="http://www.aleksey.com/xmlsec/extra/xmlsec_oscon_2003.ppt">here</a>. </li> <br> <li> June 17, 2003<br> The <a href="download.html">XML Security Library 1.0.3</a> release adds PKCS#8 support for xmlsec-openssl (Tej) and fixes several configuration and portability problems. </li> <br> <li> June 03, 2003<br> The <a href="download.html">XML Security Library 1.0.2</a> release includes several fixes in xmlsec-nss configuration and linking options (Tej), PKCS21 files reading improvements, minor documentation and help file fixes. Also this release includes some code for XKMS support. This is absolutely not usable right now and not configured in by default. Please, don't use or even compile it in. </li> <br> <li> April 28, 2003<br> The <a href="download.html">XML Security Library 1.0.1</a> release is a maintanance release. It fixes several compilation problems found in 1.0.0 release on the following platforms: OpenBSD/sparc64, Win32 Wacom C, Sun Workshop CC 6.0. Also from now on Win32 MSVC port enables the threading support by default (this is a part of the Igor's change to LibXML2/LibXSLT/XMLSec libraries).If you don't use one of these platforms then you'll see no difference. </li> <br> <li> April 17, 2003<br> The <a href="download.html">XML Security Library 1.0.0</a> release is the major upgrade from 0.0.X version. The new version includes multiple crypto engines support (with "out of the box" support for OpenSSL, GnuTLS and NSS); simplified and cleaned internal structure and API; several performance and memory usage improvements; new or updated documentation (tutorial, API reference manual and examples). </li> <br> <li> April 10, 2003<br> The final release candidate <a href="download.html"> XML Security Library 1.0.0rc1 </a> is available for download. This release includes minor API polishing, complete <a href="api/xmlsec-ref.html">API Reference Manual</a>, new chapters in the <a href="api/xmlsec-notes.html">tutorial</a> and several new <a href="api/xmlsec-examples.html">examples</a>. Another big change is using major version number in library files to prevent collisions between different library versions.<br> If no major problems will be found then the 1.0.0 release should happen in a week from now. </li> <br> <li> April 8, 2003<br> The new <a href="download.html">XML Security Library 0.0.15</a> release is a preparation for the upcomming 1.0.0 release and provides an ability to have both versions installed together on the same box. Also this release includes updated expired certificates for the regression test suite and a fix for minor bug in reading binary keys on Windows. </li> <li> March 26, 2003<br><a href="download.html">XML Security Library 0.1.1</a> release is the first release candidate for the new stable version of XML Security Library. A lot of internal changes including enchanced processing controls, performance improvements for XML transforms, <a href="api/index.html">new documentation</a>, updated <a href="api/xmlsec-examples.html">examples</a> and many many other small things.<br> Please try this release and report bugs. Again, it's the first release candidate and it's very important for me to get your feedback about it. Also if you are missing some features in the library it's the best time to ask! </li> <br> <li> March 19, 2003<br><a href="download.html">XML Security Library 0.0.14</a> release includes several minor bugfixes in references URI processing, binary transforms processing and xmlsec command line utility. </li> <br> <li> March 5, 2003<br> The <a href="download.html">XML Security Library 0.1.0</a> release creates a framework for integrating XML Security Library with almost any crypto engine and even combining multiple crypto engines in one application. As an example, basic support for GnuTLS and NSS libraries is provided (digests, hmac and block ciphers).<br> This is a pre-alpha release <b>not recommended</b> for production (please use the <a href="download.html">stable 0.0.X</a> releases instead). The new 0.1.X API and ABI will defenetly change. However, if you plan to use XML Security Library with a new crypto engine and plan to write some code then you can start now. The "backend" API is pretty stable and I do not expect major changes. </li> <br> <li> February 21, 2003<br><a href="download.html">XML Security Library 0.0.13</a> release fixes incorrect processing of signatures with more than 3 binary transforms in a row, improved pkcs12 files support and minor documentation update. </li> <br> <li> January 26, 2003<br> Two major fixes in <a href="http://www.aleksey.com/pipermail/xmlsec/2003/000507.html">HMAC</a> and <a href="http://www.aleksey.com/pipermail/xmlsec/2003/000516.html">DES/AES</a> algorithms are the reason for the new <a href="download.html">XML Security Library 0.0.12</a> release. Also there are few other minor features and bug fixes (see Changelog in the distribution for more details). </li> <br> <li> December 3, 2002<br> New <a href="download.html">XML Security Library 0.0.11</a> release fixes a <a href="http://www.aleksey.com/pipermail/xmlsec/2002/000368.html"> major problem </a> in Reference URI attribute processing. This release also includes several Win32 build process fixes from Igor. </li> <br> <li> October 20, 2002<br> Almost two months from previous release and a lot of minor enchancements are good reasons for the new <a href="download.html">XML Security Library 0.0.10</a> release: <ul> <li> Added a way to specify "current time" to verify certificates expiration against it; </li> <li> Implemented XML results output format for the xmlsec command line utility; </li> <li> Fixed XMLDSig examples and added a new one (thanks to Devin Heitmueller); </li> <li> Resolved static link issue and a bunch of other improvements for Win32 platform builds (Igor Zlatkovic); </li> <li> Added dynamic linking option for xmlsec command line utility to help Debian port (John Belmonte); </li> <li>Minor bug fixes.</li> </ul> </li> <br> <li> August 26, 2002<br> I've completelly screwed up. The release 0.0.8 was totally broken (I've simply packaged files from wrong CVS :) ) and I am doing a new <a href="download.html">0.0.9 release</a> to fix all the problems. Please upgrade to the new version if you use any of previous XML Security Library releases.<br> I am really sorry for my stupid mistakes and I promise to never do releases on Friday :(<br> And special thanks to Ferrell Moultrie for pointing this out. </li> <br> <li> August 23, 2002 <br><a href="download.html">XML Security Library 0.0.8</a> is released: <ul> <li>New errors reporting system is created and all the code is updated;</li> <li>Added XPointer transform support;</li> <li>Major enveloped and XPath transforms performance improvements;</li> <li>Updated XPath 2 Filter implementation to reflect latest W3C specifications;</li> <li> <a href="xmlsec-man.html">Man page</a> for xmlsec utility is written; </li> <li> Automatically generated <a href="documentation.html">API Reference</a> </li> <li>Manual (more than 370 symbols) is created;</li> <li>Minor Win32 bug fixes from Igor;</li> <li>Debian port from John Belmonte.</li> </ul> </li> <br> <li> July 11, 2002<br> XML Security Library <a href="documentation.html">documentation</a> created. </li> <br> <li> July 10, 2002<br> A new <a href="download.html">XML Security Library 0.0.7</a> release includes all small bug fixes for last month and a new LibXML2 library with improved canonicalization. </li> <br> <li> May 28, 2002<br> New LibXML 2.4.22 is <a href="http://xmlsoft.org/news.html">released</a> and new <a href="download.html">XML Security Library 0.0.6</a> is released: <ul> <li> Win32 port is added: the idea and most of the configuration scripts code was taken from LibXML2 (written by Igor Zlatkovic). I modified original files so all errors are mine, not Igor's. </li> <li> Many different performance optimizations (especially for RSA/DSA algorithms and enveloped signatures). </li> <li> <a href="http://www.w3.org/TR/xmldsig-filter2/">XPath Filter 2</a> and <a href="http://lists.w3.org/Archives/Public/w3c-ietf-xmldsig/2002AprJun/0001.html"> Alternative XPath Filter </a> (not compiled by default, use --enable-altxpath configuration switch if you need this transform) support is added. </li> <li> Custom network protocol handler support is added. It is similar to custom protocol handlers in LibXML2 but applied to binary files. </li> <li> Separated XML Security Library RPM into xmlsec and xmlsec-devel (suggested by Devin Heitmueller). </li> </ul> </li> <br> <li> May 14, 2002<br> I've checked in new code for plugging in custom input handlers (similar to ones that exist in LibXML2). The downside is that you have to use <a href="ftp://xmlsoft.org/cvs-snapshot.tar.gz"> daily LibXML2 snapshot </a> to compile daily XML Security Library snapshot. </li> <br> <li> April 28, 2002<br><a href="download.html">XMLSec 0.0.5</a> released: <ul> <li> Big external and internal cleanup. Now the API looks much more consistent and I hope simple. I hope to declare API frozen in the next couple weeks. Meantime, all comments and suggestions are welcome! </li> <li> Added <a href="http://www.w3.org/TR/xmlenc-core/#sec-Alg-SymmetricKeyWrap"> symmetric key wrap </a> (aes, des) support. </li> <li>Added RIPEMD-160 support.</li> </ul> </li> <br> <li> April 19, 2002<br> Minor release <a href="download.html">XMLSec 0.0.4</a> with main goal to fix broken RPM: <ul> <li> The RPM is recompiled using OpenSSL 0.9.6. The previous version was compiled with OpenSSL 0.9.7 but I got few complains that there are no RPMs for 0.9.7 yet. The downsides of using 0.9.6 are some functionality limitations for XML Encryption (no AES support, incorrect padding mode for DES, etc.). If you want to use XML Encryption it is better to compile the library from sources and use OpenSSL 0.9.7 </li> <li> The testDSig, testEnc and testKeys scripts merged into standalone "xmlsec" application. </li> <li>A couple minor bugs fixed.</li> </ul> </li> <br> <li> April 17, 2002<br> Installed <a href="http://www.aleksey.com/pipermail/xmlsec"> xmlsec mailing list. </a> </li> <br> <li> April 16, 2002<br> A lot of changes and time for new release <a href="download.html">XMLSec 0.0.3</a>: <ul> <li> The first release that includes <a href="xmlenc.html">XML Encryption support</a>! The bad news is that most of new features require <a href="download.html">OpenSSL 0.9.7</a> which is not officially released yet. </li> <li> Options to enable/disable support for particular algorithms were added to the <code>./configure</code> script. </li> <li>All transforms header files were consolidated in "transforms.h".</li> </ul> </li> <br> <li> April 6, 2002<br> The <a href="download.html">RPM packages</a> are now available. </li> <br> <li> April 5, 2002<br> Test suite updates and new minor release <a href="download.html"> XML Security Library 0.0.2a. </a><br> New <a href="http://lists.w3.org/Archives/Public/w3c-ietf-xmldsig/2002AprJun/0017.html"> interoperability tests </a> were provided by Merlin Hughes. XML Security Library successfully passed <b>all tests </b>after small test program tweaking and adding workaround for <a href="http://groups.google.com/groups?hl=en&threadm=96uofi%2417gh%241%40FreeBSD.csie.NCTU.edu.tw&rnum=2&prev=/groups%3Fq%3DX509_STORE_add_crl%26hl%3Den%26selm%3D96uofi%252417gh%25241%2540FreeBSD.csie.NCTU.edu.tw%26rnum%3D2"> OpenSSL CRL problem. </a> These new tests are included into the distribution and previous Merlin's test suites are removed. Because of these changes I decided to generate a new package that also will include the <a href="xmldsig-verifier.html"> Online XML Digital Signature Verifier </a> code. </li> <br> <li> April 3, 2002<br> The <a href="xmldsig-verifier.html"> Online XML Digital Signature Verifier </a> is available! You can use this tool to verify your XML Digital Signatures from online Web form or using a simple Perl script. The idea was stolen from <a href="http://lists.w3.org/Archives/Public/w3c-ietf-xmldsig/2002AprJun/0006.html"> Manoj K. Srivastava. </a> </li> <br> <li> March 31, 2002<br> Some major changes and a time for new release: <a href="download.html"> XML Security Library 0.0.2 </a>. Now XML Security Library supports <b>all</b> MUST/SHOULD/MAY <a href="xmldsig-interop.html">features</a> from XMLDSig standard! <ul> <li>Added X509 certificates and certificate chains support</li> <li> The detailed signature generation/verification results are made available to the application </li> <li> RetrievalMethod, Manifests and <a href="http://www.ietf.org/internet-drafts/draft-eastlake-xmldsig-uri-02.txt"> additional algorithms </a> are added </li> <li> The Transforms and KeyInfo code was significantly re-writen with a goal to separate it from XMLDSig logic for better re-usability (in XML Encryption, etc.) </li> </ul> </li> <br> <li> March 18, 2002<br><ul> <li> Fixed wrong way shift of the DSA digest result bug found by Philipp G�hring. This bug is critical and I have to do a <a href="download/xmlsec-0.0.1a.tar.gz"> new build. </a> </li> <li> Added "--with-pedantic" configuration option and fixed all but "unused variable" warnings (bug reported by Daniel Veillard). </li> </ul> </li> <br> <li> March 17, 2002<br> The <a href="download.html">XML Security Library 0.0.1</a> is released and available for download! Please try it out and send me your comments/suggestions. </li> <br> </ul> </td></tr></table></td> </tr></table></body> </html>