xmlsectool

[Ian Young]

> On 9 Feb 2024, at 20:16, Lohr, Donald A - lohrda via users <users at shibboleth.net> wrote:
> 
> I'm being asked to find out why the xmlsectool utility is still at v3.0.0 (last updated 2020-12-15 15:49).

There hasn't been a change in its requirements or functionality, or any reported issues that we have felt it necessary to publish a new version to address.

That might be surprising for a more sophisticated tool, but xmlsectool is very simple.

The most likely thing to be done in a v4 would be to shift its baseline requirements to Java 17 to match the IdP but there's no real functional benefit to that for an application of this kind.


> Is it considered an supported or unsupported tool?

It's supported, at least on the platforms mentioned in its System Requirements page ([1]). In addition to that, it should work fine on any subsequent version of Java to date; the big change was the 8->11 transition where the mechanism for using PKCS#11 tokens in Java changed in an incompatible way. Our regular internal testing runs the v3 trunk against Java 11, 17, 21 and 22.

    -- Ian


[1] https://shibboleth.atlassian.net/wiki/spaces/XSTJ3/pages/2369683699/System+Requirements

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20240211/e074ff69/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3883 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20240211/e074ff69/attachment.p7s>