Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Wiki Markup
h1. Welcome to Apache Santuario

h3. The Project

The {tm}Apache Santuario{tm} project is aimed at providing implementation of the primary security standards for XML

   * XML-Signature Syntax and Processing
   * XML Encryption Syntax and Processing.

Two libraries are currently available.

   * Apache XML Security for Java: This library includes a mature Digital Signature and Encryption implementation. It also includes the standard JSR 105 (Java XML Digital Signature) API. Applications can use the standard JSR 105 API or the Apache Santuario API to create and validate XML Signatures.
   * Apache XML Security for C\+\+: This library includes a mature Digital Signature and Encryption implementation using a proprietary C\+\+ API on top of the Xerces-C XML Parser's DOM API. It includes a pluggable cryptographic layer, but support for alternatives to OpenSSL are less complete and less mature.

Apache Santuario, Apache, and the Apache feather logo are trademarks of The Apache Software Foundation.

h3. News

h5. JanuaryFebruary 2012

Version 1.5.01 of the Apache XML Security for Java library has been released. This is a major new release and is not binary compatible with the 1.4.x releasesrelease fixes two important bugs -  a bug in XMLSignatureInput when using a BufferedInputStream, as well as a bug which caused 1.5.0 to continue to require Xalan. It also contains some
performance improvements for encryption and decryption.

Please see the [release notes|java_1_5_01_release_notes] for more information.

h5. October 2011

The Apache Santuario team are pleased to announce the release of version 1.4.6 of the Apache XML Security for Java library. This release fixes a thread safety issue with XML Signature, a bug fix for the Canonical XML 1.1 algorithm, as well as a number of other bug fixes.

Please see the [release notes|java_1_4_6_release_notes] for more information.

h5. July 2011

A security advisory, [CVE-2011-2516|secadv], affecting Apache XML-Security for C++ versions prior to 1.6.1, has been issued.

The Apache Santuario team are pleased to announce the release of version 1.6.1 of the Apache XML Security for C++ library. This release provides bug fixes and addresses [CVE-2011-2516|secadv].

h3. Old News

See [here|old_news] for older news.