XML Security Library

XML Security Library

XML Security Library is a C library based on LibXML2 and OpenSSL. The library was created with a goal to support major XML security standards: XML Security Library is released under the MIT Licence see the Copyright file in the distribution for details.

News (all news )
  • April 28 2002
    XMLSec 0.0.5 released:
    - Big external and internal cleanup. Now the API looks much more consistent and I hope simple. I hope to declare API frozen in the next couple weeks. Meantime, all comments and suggestions are welcome!
    - Added symmetric key wrap (aes, des) support.
    - Added RIPEMD-160 support.

  • April 19 2002
    Minor release XMLSec 0.0.4 with main goal to fix broken RPM:
    - The RPM is recompiled using OpenSSL 0.9.6. The previous version was compiled with OpenSSL 0.9.7 but I got few complains that there are no RPMs for 0.9.7 yet. The downsides of using 0.9.6 are some functionality limitations for XML Encryption (no AES support, incorrect padding mode for DES, etc.). If you want to use XML Encryption it is better to compile the library from sources and use OpenSSL 0.9.7
    - The testDSig, testEnc and testKeys scripts merged into standalone "xmlsec" application.
    - A couple minor bugs fixed.

  • April 17 2002
    Installed xmlsec mailing list.

  • April 16 2002
    A lot of changes and time for new release XMLSec 0.0.3 :
    - The first release that includes XML Encryption support ! The bad news is that most of new features require OpenSSL 0.9.7 which is not officially released yet.
    - Options to enable/disable support for particular algorithms were added to the ./configure script.
    - All transforms header files were consolidated in transforms.h

  • April 6 2002
    The RPM packages are now available.

  • April 5 2002
    Test suite updates and new minor release XML Security Library 0.0.2a.
    New interoperability tests were provided by Merlin Hughes. XML Security Library successfully passed all tests after small test program tweaking and adding workaround for OpenSSL CRL problem. These new tests are included into the distribution and previous Merlin's test suites are removed. Because of these changes I decided to generate a new package that also will include the Online XML Digital Signature Verifier code.

  • April 3 2002
    The Online XML Digital Signature Verifier is available! You can use this tool to verify your XML Digital Signatures from online Web form or using a simple Perl script. The idea was stolen from Manoj K. Srivastava.

Aleksey Sanin