Google Git Google Git
Sign in
apache/ws-wss4j/HEAD
  1. 82012ac Rename DerivedKeyTests so Surefire runs it (#761) by Sharang Gupta · 15 hours ago master
  2. 651b2d9 Bump ossf/scorecard-action from 2.4.4 to 2.5.0 (#760) by dependabot[bot] · 32 hours ago
  3. a9479c1 Bump the codeql-action group with 3 updates (#758) by dependabot[bot] · 32 hours ago
  4. 69ca76e Bump actions/setup-java from 6.0.1 to 6.1.0 (#759) by dependabot[bot] · 32 hours ago
  5. 83015b5 Downgrading scorecards to run twice weekly by Colm O hEigeartaigh · 2 days ago
  6. d27f522 Bump actions/upload-artifact from 7.0.1 to 7.0.2 (#756) by dependabot[bot] · 7 days ago
  7. e65de96 Bump the codeql-action group with 3 updates (#757) by dependabot[bot] · 7 days ago
  8. 8c73e3c Some remaining codeql fixes (#755) by Colm O hEigeartaigh · 8 days ago
  9. fbdf0d3 More test codeql fixes (#754) by Colm O hEigeartaigh · 9 days ago
  10. 158961c Fix build version comment (#753) by Colm O hEigeartaigh · 9 days ago
  11. f1d8d7c Fixing some useless parameter warnings in the tests (#752) by Colm O hEigeartaigh · 9 days ago
  12. 042edea Bump com.fasterxml.woodstox:woodstox-core from 7.2.2 to 7.3.0 (#740) by dependabot[bot] · 9 days ago
  13. 4cf53a0 Javadoc test fixes (#751) by Colm O hEigeartaigh · 10 days ago
  14. 695d637 WSS-721 - Search the truststore before the keystore when verifying trust (#750) by Colm O hEigeartaigh · 10 days ago
  15. cc151c6 WSS-712 - SignatureDigestAlgorithm of SAMLCallback not taken into account (#749) by Colm O hEigeartaigh · 10 days ago
  16. 00c53f3 [WSS-733] Fall back to URL/classpath lookup when the file system probe is denied (#746) by Colm O hEigeartaigh · 10 days ago
  17. 2cf22b4 WSS-688 - Signatures created with Merlin start being invalid after changing key-store a few times (#748) by Colm O hEigeartaigh · 10 days ago
  18. 10fad7d WSS-713 - Support SubjectConfirmationData for SAML-SV v1 (#747) by Colm O hEigeartaigh · 10 days ago
  19. a0994ee WSS-731 - StAX SignedElements policy rejects a SAML assertion signed through STR-Transform (#745) by Colm O hEigeartaigh · 14 days ago
  20. 96e587b Bump org.apache.commons:commons-secure-xml from 1.0.0 to 1.1.0 (#743) by dependabot[bot] · 2 weeks ago
  21. cc19ac3 Bump com.google.guava:guava from 33.7.1-jre to 33.7.2-jre (#739) by dependabot[bot] · 2 weeks ago
  22. f3fe152 IBM JRE > 8 doesn't have IBM JGSS anymore (#741) by Andreas Martens · 2 weeks ago
  23. 2bfa60e Bump the codeql-action group with 3 updates (#742) by dependabot[bot] · 2 weeks ago
  24. 952c4cc Updating website for release by Colm O hEigeartaigh · 3 weeks ago
  25. 1450557 Bump org.apache:apache from 39 to 40 (#732) by dependabot[bot] · 3 weeks ago
  26. f6b6954 Bump slf4j.version from 2.0.19 to 2.0.20 (#737) by dependabot[bot] · 3 weeks ago
  27. 1e1a0b0 Bump xmlunit.version from 2.13.0 to 2.14.0 (#734) by dependabot[bot] · 3 weeks ago
  28. dd6a549 Bump the codeql-action group with 3 updates (#733) by dependabot[bot] · 3 weeks ago
  29. ea22fc0 WSS4J messages now render correctly even if Santuario is never initialised at all. (#731) by Colm O hEigeartaigh · 4 weeks ago
  30. f3aa317 [maven-release-plugin] prepare for next development iteration by Colm O hEigeartaigh · 4 weeks ago
  31. 9d5d7b3 [maven-release-plugin] prepare release wss4j-4.0.2 by Colm O hEigeartaigh · 4 weeks ago wss4j-4.0.2
  32. 57b4294 Fix regression with KeyUtils by Colm O hEigeartaigh · 4 weeks ago
  33. 3a31b65 Revert "[maven-release-plugin] prepare release wss4j-4.0.2" by Colm O hEigeartaigh · 4 weeks ago
  34. 8053e71 Revert "[maven-release-plugin] prepare for next development iteration" by Colm O hEigeartaigh · 4 weeks ago
  35. a14046a [maven-release-plugin] prepare for next development iteration by Colm O hEigeartaigh · 4 weeks ago
  36. e2546cd [maven-release-plugin] prepare release wss4j-4.0.2 by Colm O hEigeartaigh · 4 weeks ago
  37. fa77967 Updating NOTICE year by Colm O hEigeartaigh · 4 weeks ago
  38. 96a9a91 Using AttachmentUtil as well for attachment signature transform by Colm O hEigeartaigh · 4 weeks ago
  39. 1e2ec39 WSS-727 - Minor cleanup (#730) by Colm O hEigeartaigh · 4 weeks ago
  40. 75a28f6 Fixing AKI bug (#729) by Colm O hEigeartaigh · 4 weeks ago
  41. 6726da9 WSS-727 Do not cache SwA attachment References when verifying a Signature (#640) by shunkica · 4 weeks ago
  42. 3b402c9 Xop hardening fix (#728) by Colm O hEigeartaigh · 4 weeks ago
  43. 347cead Backwards compatibly sig-conf fix by Colm O hEigeartaigh · 4 weeks ago
  44. add6d92 Finishing DER work (#727) by Colm O hEigeartaigh · 4 weeks ago
  45. 32887ed Follow-on from last DER patch (#726) by Colm O hEigeartaigh · 4 weeks ago
  46. 2d4a0e7 Switch to use BASE-64 encoding rather than 32 bit hash values for signature confirmation (#725) by Colm O hEigeartaigh · 4 weeks ago
  47. 291c723 StAX SAML subject confirmation skipped for an empty SOAP Body (#724) by Colm O hEigeartaigh · 4 weeks ago
  48. 2816faf Remove Bouncy Castle from key identifier parsing (#647) by araiprof · 4 weeks ago
  49. e12589e Check CertificateStore for validity by Colm O hEigeartaigh · 4 weeks ago
  50. 48ca363 Bump bcprov.version from 1.84 to 1.86 (#694) by dependabot[bot] · 4 weeks ago
  51. 9629b62 Update certs that are failing with the Bouncycastle update (#723) by Colm O hEigeartaigh · 4 weeks ago
  52. 11bd693 Fix timestamp parsing (#722) by Colm O hEigeartaigh · 4 weeks ago
  53. c7284e7 Bump org.apache.felix:maven-bundle-plugin from 6.1.2 to 6.2.0 (#716) by dependabot[bot] · 4 weeks ago
  54. d84b482 Revert "Align StaX sender vouches with DOM layer (#720)" by Colm O hEigeartaigh · 4 weeks ago
  55. 6de1f27 Revert "Fix SenderVouches EncryptedKey case (#718)" by Colm O hEigeartaigh · 4 weeks ago
  56. 6b4ebdf Fix SAML Conditions parsing (#721) by Colm O hEigeartaigh · 4 weeks ago
  57. d656ae4 Docs update for SAML audience by Colm O hEigeartaigh · 4 weeks ago
  58. 2044186 Align StaX sender vouches with DOM layer (#720) by Colm O hEigeartaigh · 4 weeks ago
  59. 79cc522 More docs updates by Colm O hEigeartaigh · 4 weeks ago
  60. 4fc06f5 Extend the EncryptedKey random-key fallback beyond decryptDataRef (#719) by Colm O hEigeartaigh · 4 weeks ago
  61. 4050df2 Fix SenderVouches EncryptedKey case (#718) by Colm O hEigeartaigh · 4 weeks ago
  62. 240c68a Improving kerberos docs by Colm O hEigeartaigh · 4 weeks ago
  63. 2a67fc3 Properly wire UsernameToken + RSA15 flags for the streaming layer (#717) by Colm O hEigeartaigh · 4 weeks ago
  64. a8fb5fe Better document REQUIRE_SIGNED_ENCRYPTED_DATA_ELEMENTS by Colm O hEigeartaigh · 5 weeks ago
  65. 623bfb8 Stricter policy enforcement (#715) by Colm O hEigeartaigh · 5 weeks ago
  66. d2a7450 Updating threat model with bounds by Colm O hEigeartaigh · 5 weeks ago
  67. c9cddda Document streaming policy enforcement (#714) by Colm O hEigeartaigh · 5 weeks ago
  68. efbcbfc Bound the encrypted data nesting depth (#713) by Colm O hEigeartaigh · 5 weeks ago
  69. 77d665e Redact passwords from UsernameToken toString (#711) by Colm O hEigeartaigh · 5 weeks ago
  70. d7d6fb0 Javadoc updates by Colm O hEigeartaigh · 5 weeks ago
  71. 277e554 Updating Neethi to 3.2.4 (#710) by Colm O hEigeartaigh · 5 weeks ago
  72. 720a401 Additional Bleichenbacher fix (#709) by Colm O hEigeartaigh · 5 weeks ago
  73. 3ae19b5 Adding some derived key tests by Colm O hEigeartaigh · 5 weeks ago
  74. d6323f3 Set trust when there is no KeyInfo and the certificate comes from a local keystore (#708) by Colm O hEigeartaigh · 5 weeks ago
  75. a52aaee Putting max on UsernameToken stax iterations (#707) by Colm O hEigeartaigh · 5 weeks ago
  76. d2939c8 Adding docs about trust credentials for BST (#706) by Colm O hEigeartaigh · 5 weeks ago
  77. aa028e6 Only set trust validation for Signature when we have a trusted source (#705) by Colm O hEigeartaigh · 5 weeks ago
  78. e2fdad6 Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.2 to 2.9.3 (#700) by dependabot[bot] · 5 weeks ago
  79. b838b11 Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.6 to 3.6.0 (#701) by dependabot[bot] · 5 weeks ago
  80. 4d50f22 Bump org.apache:apache from 37 to 39 (#702) by dependabot[bot] · 5 weeks ago
  81. a2f8e4f Fix nonce encoding issue (#704) by Colm O hEigeartaigh · 5 weeks ago
  82. a078048 Fix StAX replaycache tests (#703) by Colm O hEigeartaigh · 5 weeks ago
  83. ac28aff Fix signature replay caching (#699) by Colm O hEigeartaigh · 5 weeks ago
  84. 54a2938 Bump org.apache.maven.plugins:maven-jar-plugin from 3.5.0 to 3.5.1 (#692) by dependabot[bot] · 5 weeks ago
  85. cfa370b Bump slf4j.version from 2.0.18 to 2.0.19 (#693) by dependabot[bot] · 5 weeks ago
  86. 8af9017 Bump org.apache.felix:maven-bundle-plugin from 6.1.0 to 6.1.2 (#695) by dependabot[bot] · 5 weeks ago
  87. 9a1b7a6 Bump com.google.guava:guava from 33.6.0-jre to 33.7.1-jre (#696) by dependabot[bot] · 5 weeks ago
  88. a004fdf Bump the codeql-action group with 3 updates (#697) by dependabot[bot] · 5 weeks ago
  89. 9b8f8e6 Bump actions/setup-java from 6.0.0 to 6.0.1 (#698) by dependabot[bot] · 5 weeks ago
  90. bf28484 Disabling errorprone by Colm O hEigeartaigh · 5 weeks ago
  91. c961141 Bump jakarta.servlet:jakarta.servlet-api from 5.0.0 to 6.0.0 (#600) by dependabot[bot] · 5 weeks ago
  92. db2b8e22 Bump com.fasterxml.woodstox:woodstox-core from 7.1.1 to 7.2.2 (#660) by dependabot[bot] · 5 weeks ago
  93. 3b15f39 Bump org.apache.maven.plugins:maven-compiler-plugin (#676) by dependabot[bot] · 5 weeks ago
  94. b621c16 Fix bug with signature policy validation for STR Transform (#691) by Colm O hEigeartaigh · 5 weeks ago
  95. b08d04e Improving docs for subject cert constraint (#690) by Colm O hEigeartaigh · 5 weeks ago
  96. ea0ca8a Harden XML parsing via commons-secure-xml (#673) by Gary Gregory · 5 weeks ago
  97. 6c3257a Harden Loader to only load from file + jar by default (#689) by Colm O hEigeartaigh · 5 weeks ago
  98. 3ad7085 Make sure for Attachment-Complete the mime type is read from the encrypted header (#688) by Colm O hEigeartaigh · 5 weeks ago
  99. 64c78ee EncryptedHeader child confusion causing wrong protected-header selection (#687) by Colm O hEigeartaigh · 6 weeks ago
  100. 144367b Make sure we can't register a fake SOAP Body for lookup (#686) by Colm O hEigeartaigh · 6 weeks ago