The Java section

Version 1.4.4 Released

Version 1.4.4 of the Java library has been released. This release contains some enhancements to the resolver API's. It also fixes some longstanding issues with interned Strings, as well as a number of bug fixes.

Version 1.4.3 Released

Version 1.4.3 of the Java library has been released. This is mainly a bugfix release but also contains a fix for the recently announced HMAC vulnerability in the XML Signature specification.

Version 1.4.2 Released

Version 1.4.2 of the Java library has been released. This is mainly a bugfix release but also contains a few new enhancements including support for XML Canonicalization 1.1.

Version 1.4.1 Released

Version 1.4.1 of the Java library has been released. This is a bugfix release that contains a major bugfix to the canonicalization engine introduced in the 1.4 release. It is recommended that 1.4 users upgrade to the new version as signatures containing non ascii characters created by this library are not according to the standard, and will be only validated by 1.4 library.

Version 1.4 Released

Version 1.4 of the Java library has been released. The main changes for this version are:

• Implementation of the standard API JSR105
• Rewritten c14n that increases performance for signature with node-set transformations.
• Memory footprint reduction and several bugfixes

Refer to the changelog for more information.

Overview of the Java Library

The Apache-XML-Security-J 1.4 supports XML-Signature Syntax and Processing, W3C Recommendation 12 February 2002 and XML Encryption Syntax and Processing, W3C Recommendation 10 December 2002.

As of version 1.4, the Java library supports the standard Java API JSR-105: XML Digital Signature APIs for creating and validating XML Signatures. A standard Java API for XML Encryption JSR-106: XML Digital Encryption APIs is in progress and is not final, so this API is not yet supported. You can continue to use the existing non-standard APIs in the Java Library (there are no plans to discontinue or deprecate them), but you should consider moving to the standard APIs.

Old News

Version 1.3 released on 28 October 2005. Improves performance and memory usage over 1.2, and includes several bugfixes.

Version 1.2.1 released on 28 February 2005. It is a bugfix version over 1.2 and it is recomended to upgrade to this version.

Version 1.2 released on 11 December 2004. Improves the performance and memory usage over 1.1 release together with an easier integration of JCE providers.

Version 1.1 released on 7 April 2004. Includes a beta implementation of XML Encryption together with minor bug fixes for the XML Signature code.
J

JDK 1.4 issues

If you use JDK 1.4 and want to use this software, be sure that Xalan is properly installed