[RAMPART-101] Rampart uses xmlsec-1.4.0

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.3
• Fix Version/s: 1.4
• Component/s: rampart-core
• Environment: Rampart 1.3 release.
• Assignee: Unassigned
• Reporter: Hans G Knudsen
• Created: 31/Oct/07 11:44
• Updated: 27/May/08 05:12
• Resolved: 07/Apr/08 06:06

Description

Rampart 1.3 distribution includes xmlsec-1.4.0.

On the xmlsec homepage :

http://santuario.apache.org/

The following is mentioned about the 1.4(.0) version :

=================
May 2007

Version 1.4.1 of the Java library has been released. This a bugfix release that contains a major bugfix to the canonicalization engine introduced in the 1.4 release. It is recommended that 1.4 users upgrade to the new version as signatures containing non ascii characters created by this library are not according to the standard, and will be only validated by 1.4 library.
=================

Is this a valid concern ?

/hans