| <!DOCTYPE html> |
| |
| |
| <!-- |
| | Generated by Apache Maven Doxia Site Renderer 2.0.0 from src/site/markdown/release-notes/1.8.0.md at 01 Dec 2024 |
| | Rendered using Apache Maven Fluido Skin 2.0.0-M11 |
| --> |
| <html xmlns="http://www.w3.org/1999/xhtml" lang="en"> |
| <head> |
| <meta charset="UTF-8" /> |
| <meta name="viewport" content="width=device-width, initial-scale=1" /> |
| <meta name="generator" content="Apache Maven Doxia Site Renderer 2.0.0" /> |
| <title>Apache Rampart 1.8.0 Release Notes – Apache Rampart</title> |
| <link rel="stylesheet" href="../css/apache-maven-fluido-2.0.0-M11.min.css" /> |
| <link rel="stylesheet" href="../css/site.css" /> |
| <link rel="stylesheet" href="../css/print.css" media="print" /> |
| <script src="../js/apache-maven-fluido-2.0.0-M11.min.js"></script> |
| </head> |
| <body> |
| <div class="container-fluid container-fluid-top"> |
| <header> |
| <div id="banner"> |
| <div class="pull-left"><div id="bannerLeft"><h1><img class="class java.lang.Object" src="../images/apache-rampart-logo.jpg" /></h1></div></div> |
| <div class="pull-right"><div id="bannerRight"><h1><a href="http://www.apache.org"><img class="class java.lang.Object" src="http://www.apache.org/images/asf_logo_wide.png" /></a></h1></div></div> |
| <div class="clear"><hr/></div> |
| </div> |
| |
| <div id="breadcrumbs"> |
| <ul class="breadcrumb"> |
| <li id="publishDate">Last Published: 01 Dec 2024<span class="divider">|</span> |
| </li> |
| <li id="projectVersion">Version: 1.8.0</li> |
| <li class="pull-right"><a href="../../core/">Apache Axis2/Java</a></li> |
| </ul> |
| </div> |
| </header> |
| <div class="row-fluid"> |
| <header id="leftColumn" class="span2"> |
| <nav class="well sidebar-nav"> |
| <ul class="nav nav-list"> |
| <li class="nav-header">Apache Rampart</li> |
| <li><a href="../index.html">Home</a></li> |
| <li><a href="javascript:void(0)"><span class="icon-chevron-down"></span>Downloads</a> |
| <ul class="nav nav-list"> |
| <li><a href="../download.html">Releases</a></li> |
| </ul></li> |
| <li><a href="javascript:void(0)"><span class="icon-chevron-down"></span>Release Notes</a> |
| <ul class="nav nav-list"> |
| <li><a href="../release-notes/1.6.1.html">1.6.1</a></li> |
| <li><a href="../release-notes/1.6.2.html">1.6.2</a></li> |
| <li><a href="../release-notes/1.6.3.html">1.6.3</a></li> |
| <li><a href="../release-notes/1.6.4.html">1.6.4</a></li> |
| <li><a href="../release-notes/1.7.0.html">1.7.0</a></li> |
| <li class="active"><a>1.8.0</a></li> |
| </ul></li> |
| <li class="nav-header">Documentation</li> |
| <li><a href="../quick-start.html">Getting Started</a></li> |
| <li><a href="../samples.html">Samples</a></li> |
| <li><a href="http://wiki.apache.org/ws/FrontPage/Rampart/FAQ" class="externalLink">FAQ</a></li> |
| <li><a href="../rampartconfig-guide.html">Rampart Configuration</a></li> |
| <li><a href="../setting-up-sts.html">STS Configuration</a></li> |
| <li><a href="../developer-guide.html">Developer Guide</a></li> |
| <li class="nav-header">Resources</li> |
| <li><a href="../articles.html">Articles</a></li> |
| <li><a href="../specifications.html">Specifications</a></li> |
| <li><a href="../apidocs/index.html">Online Javadocs</a></li> |
| <li class="nav-header">Project Information</li> |
| <li><a href="../team.html">Project Team</a></li> |
| <li><a href="http://issues.apache.org/jira/browse/Rampart" class="externalLink">Issue Tracking</a></li> |
| <li><a href="../mailing-lists.html">Mailing Lists</a></li> |
| <li><a href="https://github.com/apache/axis-axis2-java-rampart" class="externalLink">Source Code</a></li> |
| <li><a href="http://www.apache.org/licenses/" class="externalLink">License</a></li> |
| <li><a href="http://www.apache.org/foundation/sponsorship.html" class="externalLink">Sponsorship</a></li> |
| <li><a href="http://www.apache.org/foundation/thanks.html" class="externalLink">Thanks</a></li> |
| <li><a href="http://www.apache.org/security/" class="externalLink">Security</a></li> |
| </ul> |
| </nav> |
| <div class="well sidebar-nav"> |
| <div id="poweredBy"> |
| <div class="clear"></div> |
| <div class="clear"></div> |
| <a href="https://maven.apache.org/" class="builtBy" target="_blank"><img class="builtBy" alt="Built by Maven" src="../images/logos/maven-feather.png" /></a> |
| </div> |
| </div> |
| </header> |
| <main id="bodyColumn" class="span10"> |
| <section><section><a id="Apache_Rampart_1.8.0_Release_Notes"></a> |
| <h2>Apache Rampart 1.8.0 Release Notes</h2> |
| <p>Apache Rampart 1.8.0 is a major release designed for compatibility with Axis2 |
| 1.8.2.</p> |
| <p>A huge amount of effort went into upgrading everything possible up to jakarta - |
| namely opensaml to 4.3 and ws-wss4j to 3.0.3.</p> |
| <p>This will be the last javax based release. The next Rampart release will be 2.0.0 |
| and will support Axis2 2.0.0, Jakarta, servlet 6.0 and EE 10. This should happen |
| soon as the hardwork in Axis2 2.0.0 has been done already. The |
| biggest expected challenge will be the OpenSAML upgrade from |
| 4.x which supports javax, to 5.x which supports jakarta.</p> |
| <p>The Apache Rampart project and our top level Axis project covering Axis2 needs committers!</p> |
| <p>GitHub PR's are welcome too. If you have an interest in a feature that Rampart |
| lacks or simply found a bug you can help with, please think about contributing.</p> |
| <p>Jira issues completed for 1.8.0:</p> |
| </section><section><a id="Sub-task"></a> |
| <h2> Sub-task |
| </h2> |
| |
| <ul> |
| |
| <li>[<a href="https://issues.apache.org/jira/browse/RAMPART-234" class="externalLink">RAMPART-234</a>] - Allow custom https listeners to populate the client certificate chain in the message context |
| </li> |
| </ul> |
| </section><section><a id="Bug"></a> |
| <h2> Bug |
| </h2> |
| |
| <ul> |
| |
| <li>[<a href="https://issues.apache.org/jira/browse/RAMPART-325" class="externalLink">RAMPART-325</a>] - NullPointerException with UsernameToken Policy and MTOM Policy without Rampart Config in WSDL |
| </li> |
| |
| <li>[<a href="https://issues.apache.org/jira/browse/RAMPART-331" class="externalLink">RAMPART-331</a>] - Unreachable code in org.apache.rahas.STSMessageReceiver.invokeBusinessLogic() - "dispatcher" is never null at end of try |
| </li> |
| |
| <li>[<a href="https://issues.apache.org/jira/browse/RAMPART-361" class="externalLink">RAMPART-361</a>] - Rampart can not accept Username token which is generated from WCF client. Due to name space qualified password type attribute in username token |
| </li> |
| |
| <li>[<a href="https://issues.apache.org/jira/browse/RAMPART-374" class="externalLink">RAMPART-374</a>] - Not Able to use custom validator for USERNAME_TOKEN during server side validation |
| </li> |
| |
| <li>[<a href="https://issues.apache.org/jira/browse/RAMPART-388" class="externalLink">RAMPART-388</a>] - NPE in RampartUtil#setKeyIdentifierType (line #1389) wss (web service security options assertion) is null. |
| </li> |
| |
| <li>[<a href="https://issues.apache.org/jira/browse/RAMPART-390" class="externalLink">RAMPART-390</a>] - SupportingToken assertions do not support multiple nested protection assertions |
| </li> |
| |
| <li>[<a href="https://issues.apache.org/jira/browse/RAMPART-396" class="externalLink">RAMPART-396</a>] - NullPointerException using STS, Trust and entropy |
| </li> |
| |
| <li>[<a href="https://issues.apache.org/jira/browse/RAMPART-423" class="externalLink">RAMPART-423</a>] - STS implementation may lead to performance reduction |
| </li> |
| |
| <li>[<a href="https://issues.apache.org/jira/browse/RAMPART-432" class="externalLink">RAMPART-432</a>] - Axis2 BSP compliance |
| </li> |
| |
| <li>[<a href="https://issues.apache.org/jira/browse/RAMPART-435" class="externalLink">RAMPART-435</a>] - Unable to set timestampTTLand timestampMaxSkew values through a rampart callbackorg.apache.axis2.AxisFault: The message has expired |
| </li> |
| |
| <li>[<a href="https://issues.apache.org/jira/browse/RAMPART-437" class="externalLink">RAMPART-437</a>] - SHA256 not supported for DigestAlgorithm for TransportBinding when specified correctly in policy.xml |
| </li> |
| |
| <li>[<a href="https://issues.apache.org/jira/browse/RAMPART-441" class="externalLink">RAMPART-441</a>] - rampart-config.xsd is outdated |
| </li> |
| |
| <li>[<a href="https://issues.apache.org/jira/browse/RAMPART-448" class="externalLink">RAMPART-448</a>] - NullPointerException in RampartUtil.setKeyIdentifierType() when signing response |
| </li> |
| |
| <li>[<a href="https://issues.apache.org/jira/browse/RAMPART-449" class="externalLink">RAMPART-449</a>] - NoClassDefFoundError with Axis2 1.8.0 |
| </li> |
| |
| <li>[<a href="https://issues.apache.org/jira/browse/RAMPART-452" class="externalLink">RAMPART-452</a>] - Rampart Dependency on Outdated Version of WSS4J 1.6.x |
| </li> |
| </ul> |
| </section><section><a id="New_Feature"></a> |
| <h2> New Feature |
| </h2> |
| |
| <ul> |
| |
| <li>[<a href="https://issues.apache.org/jira/browse/RAMPART-261" class="externalLink">RAMPART-261</a>] - Ability to Toggle "mustUnderstand" flag in security header. |
| </li> |
| |
| <li>[<a href="https://issues.apache.org/jira/browse/RAMPART-417" class="externalLink">RAMPART-417</a>] - Support for transport binding Kerberos v5 authentication |
| </li> |
| |
| <li>[<a href="https://issues.apache.org/jira/browse/RAMPART-433" class="externalLink">RAMPART-433</a>] - Support for Kerberos v5 delegated authentication |
| </li> |
| </ul> |
| </section><section><a id="Improvement"></a> |
| <h2> Improvement |
| </h2> |
| |
| <ul> |
| |
| <li>[<a href="https://issues.apache.org/jira/browse/RAMPART-205" class="externalLink">RAMPART-205</a>] - Setting WSSConfig properties from RampartConfig |
| </li> |
| |
| <li>[<a href="https://issues.apache.org/jira/browse/RAMPART-335" class="externalLink">RAMPART-335</a>] - X509V3 KeyIdentifier cannot be set dynmaically |
| </li> |
| |
| <li>[<a href="https://issues.apache.org/jira/browse/RAMPART-339" class="externalLink">RAMPART-339</a>] - Sample 09 for rampart policy samples -(different security policies to secure request and response messages with policy attachments) |
| </li> |
| |
| <li>[<a href="https://issues.apache.org/jira/browse/RAMPART-369" class="externalLink">RAMPART-369</a>] - Rampart project need a DOAP file. |
| </li> |
| |
| <li>[<a href="https://issues.apache.org/jira/browse/RAMPART-420" class="externalLink">RAMPART-420</a>] - Allow WS-Security timestamps to be spoofed and BSP checking disabled |
| </li> |
| |
| <li>[<a href="https://issues.apache.org/jira/browse/RAMPART-440" class="externalLink">RAMPART-440</a>] - update OpenSAML to 2.6.1 |
| </li> |
| |
| <li>[<a href="https://issues.apache.org/jira/browse/RAMPART-451" class="externalLink">RAMPART-451</a>] - remove xalan dependency due to it being end of life |
| </li> |
| </ul> |
| </section><section><a id="Request"></a> |
| <h2> Request |
| </h2> |
| |
| <ul> |
| |
| <li>[<a href="https://issues.apache.org/jira/browse/RAMPART-453" class="externalLink">RAMPART-453</a>] - Request to release the next latest rampart-trust version |
| </li> |
| </ul> |
| </section><section><a id="Question"></a> |
| <h2> Question |
| </h2> |
| |
| <ul> |
| |
| <li>[<a href="https://issues.apache.org/jira/browse/RAMPART-436" class="externalLink">RAMPART-436</a>] - Proper settings to use WS-Security(UsernameToken) with Rampart 1.7.0 |
| </li> |
| |
| <li>[<a href="https://issues.apache.org/jira/browse/RAMPART-442" class="externalLink">RAMPART-442</a>] - Help ASAP |
| </li> |
| </ul> |
| </section><section><a id="Documentation"></a> |
| <h2> Documentation |
| </h2> |
| |
| <ul> |
| |
| <li>[<a href="https://issues.apache.org/jira/browse/RAMPART-425" class="externalLink">RAMPART-425</a>] - Links not found |
| </li> |
| </ul> |
| </section></section> </main> |
| </div> |
| </div> |
| <hr/> |
| <footer> |
| <div class="container-fluid"> |
| <div class="row-fluid"> |
| <p>© 2005–2024 |
| <a href="http://www.apache.org">Apache Software Foundation</a> |
| </p> |
| </div> |
| </div> |
| </footer> |
| </body> |
| </html> |
