Apache Rampart 2.0.0 Release Notes

Apache Rampart 2.0.0 is a major release that moves the project to the Jakarta EE namespace, builds against Apache Axis2 2.0.1, and bumps the minimum runtime to OpenJDK 17 (also tested on OpenJDK 21 and OpenJDK 25). It continues support for the WS-Security, WS-Trust, and WS-SecureConversation specifications for Apache Axis2.

Runtime Requirements

  • Java: OpenJDK 17 minimum; tested on OpenJDK 17, 21, and 25.
  • Apache Axis2: 2.0.1 (Jakarta-based).

Current Dependency Versions

This release uses the following updated dependency versions:

  • Apache Axis2: 2.0.1 - Jakarta-based Axis2 release
  • Apache Axiom: 2.0.0 - Jakarta-based XML object model used by Axis2
  • Apache WSS4J: 4.0.1 - Jakarta-based WS-Security implementation
  • OpenSAML: 5.2.2 - SAML token support and processing
  • Apache Santuario XMLSec: 4.0.4 - XML security primitives
  • Bouncy Castle: 1.84 (bcprov-jdk18on / bcpkix-jdk18on) - Cryptographic operations

Key Features

Apache Rampart implements the following WS-Security specifications:

  • WS-Security 1.0 and 1.1
  • WS-Trust
  • WS-SecureConversation
  • WS-SecurityPolicy

Dependencies

For complete dependency information, see the project's Maven POM files.