summaryrefslogtreecommitdiff
path: root/docs/index.html
diff options
context:
space:
mode:
Diffstat (limited to 'docs/index.html')
-rw-r--r--docs/index.html104
1 files changed, 57 insertions, 47 deletions
diff --git a/docs/index.html b/docs/index.html
index 8c07d09a..3ca9ed15 100644
--- a/docs/index.html
+++ b/docs/index.html
@@ -43,67 +43,77 @@
</table>
</td>
<td valign="top"><table width="100%" valign="top"><tr><td valign="top" align="left" id="xmlsecContent">
-<div align="center">
-<h1>XML Security Library</h1>
-</div>
+<div align="Center">
+ <h1>XML Security Library</h1>
+ </div>
<p>
-XML Security Library is a C library based on <a href="http://xmlsoft.org/">LibXML2</a>.
-The library supports major XML security standards:
-</p>
+ XML Security Library is a C library based on
+ <a href="http://xmlsoft.org/">LibXML2</a>.
+ The library supports major XML security standards:
+ </p>
<ul>
-<li><a href="http://www.w3.org/TR/xmldsig-core">XML Signature</a></li>
-<li><a href="http://www.w3.org/TR/xmlenc-core/">XML Encryption</a></li>
-<li>
-<a href="http://www.w3.org/TR/xml-c14n">Canonical XML</a> (part of the
-<a href="http://xmlsoft.org">LibXML2</a>)</li>
<li>
+<a href="http://www.w3.org/TR/xmldsig-core">XML Signature</a>
+ </li>
+ <li>
+<a href="http://www.w3.org/TR/xmlenc-core/">XML Encryption</a>
+ </li>
+ <li>
+<a href="http://www.w3.org/TR/xml-c14n">Canonical XML</a>
+ (was included in <a href="http://xmlsoft.org">LibXML2</a>)</li>
+ <li>
<a href="http://www.w3.org/TR/xml-exc-c14n">Exclusive Canonical XML</a>
-(part of the <a href="http://xmlsoft.org">LibXML2</a>)</li>
-</ul>
+ (was included in <a href="http://xmlsoft.org">LibXML2</a>)</li>
+
+ </ul>
<p>
-XML Security Library is released under the
-<a href="http://www.opensource.org/licenses/mit-license.html">MIT Licence</a>
-see the Copyright file in the distribution for details.<br><br></p>
+ XML Security Library is released under the
+ <a href="http://www.opensource.org/licenses/mit-license.html">MIT Licence</a>
+ see the Copyright file in the distribution for details.<br><br></p>
<p><b>News</b></p>
<ul>
-<li>May 11 2011<br>
- The <a href="download.html">XML Security Library 1.2.18</a> release fixes
- a serious crasher. All users are advised to upgraded as soon as possible.
-</li>
-<li>March 31 2011<br>
- Changes in <a href="download.html">XML Security Library 1.2.17</a> release:
- <ul>
-<li>Fixed security issue with libxslt (CVE-2011-1425, reported by Nicolas Gregoire).</li>
- <li>Fixed a number of build configuration problems, pkcs12 file loading, and gcrypt init/shutdown.</li>
- </ul>
+<li>December 5 2009<br>
+ Changes in <a href="download.html">XML Security Library 1.2.14</a> release:
+ <ul>
+<li>XMLSec library is switched from built-in LTDL library to the system
+ LTDL library on Linux/Unix and native calls on Windows to fix
+ <a href="https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-3736">security
+ issue</a> in LTDL.</li>
+ <li>Fixed minor bugs (see <a href="http://git.gnome.org/cgit/xmlsec/log/">log</a>
+ for complete list).</li>
+ </ul>
</li>
-<li>May 26 2010<br>
- Changes in <a href="download.html">XML Security Library 1.2.16</a> release:
+
+<li>September 12 2009<br>
+ Changes in <a href="download.html">XML Security Library 1.2.13</a> release:
<ul>
-<li>New xmlsec-gcrypt library.</li>
- <li>xmlsec-gcrypt: Added RSA with SHA1/SHA256/SHA384/SHA512/MD5/RIPEMD160,
- DSA with SHA1, AES/DES KW support.</li>
- <li>xmlsec-gnutls: Added X509 support and converted the library to use
- xmlsec-gcrypt library for all crypto operations.</li>
- xmlsec-mscrypto: RSA/OAEP and AES/DES KW support.</ul>
+<li>
+ <a href="http://xmlsoft.org/">LibXML2</a> version 2.7.4 is now required</li>
+ <li>Implemented support for <a href="http://www.w3.org/TR/xml-c14n11/">C14N version 1.1</a>
</li>
- <li>Several minor bug fixes and code cleanups.</li>
+ <li>Increase default minimum hmac size to 80 bits</li>
+ <li>Added support for --with-libxml-src and --with-libxslt-src ./configure options</li>
+ <li>Fixed XML dump output</li>
</ul>
-<li>April 29 2010<br>
- Changes in <a href="download.html">XML Security Library 1.2.15</a> release:
+</li>
+
+<li>July 14 2009<br>
+ The new <a href="download.html">XML Security Library 1.2.12</a> release
+ includes the following changes (see ChangeLog for the complete list of changes):
<ul>
-<li>xmlsec-mscrypto: Added HMAC with MD5, SHA1, SHA256/384/512;
- RSA with MD5, SHA256/384/512 support.</li>
- <li>xmlsec-mscrypto: Converted to Unicode (the non-Unicode builds are still available as compile time option).</li>
- <li>xmlsec-nss: Added MD5 and SHA256/384/512 support for digest, HMAC
- and RSA (the new minimum required version for NSS library is 3.9).</li>
- <li>xmlsec-gnutls: Added SHA256/384/512 for digest and HMAC;
- MD5 and RIPEMD160 digests support (the new minimum required version for
- GnuTLS library is 2.8.0).</li>
- <li>Fixed typo: "Copyrigth" should be "Copyright".</li>
- <li>Several critical bug fixes and code cleanups.</li>
+<li>Fixed HMAC vulnerability with small values of HMAC length
+ (<a href="http://www.kb.cert.org/vuls/id/466161">CERT VU #466161</a>).</li>
+ <li>Added support for the GOST implemented by Russian Crypto Pro CSP
+ (patch from Dennis Prochko)</li>
+ <li>Added an option to return the replaced node (based on the patch from Frank Gross)</li>
+ <li>Added new function xmlSecNodeEncodeAndSetContent for encoding
+ special chars in the node content.</li>
+ <li>Added configurable Base64 line length.</li>
+ <li>Bug fixes.</li>
</ul>
</li>
+
+</ul>
</td></tr></table></td>
</tr></table></body>
</html>