You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@santuario.apache.org by co...@apache.org on 2024/06/21 08:56:54 UTC
(santuario-xml-security-java) branch 3.0.x-fixes updated (883ff16b -> 5a93f811)
This is an automated email from the ASF dual-hosted git repository.
coheigea pushed a change to branch 3.0.x-fixes
in repository https://gitbox.apache.org/repos/asf/santuario-xml-security-java.git
from 883ff16b Implementation of the HKDF derivation function (#271)
new 95e8a336 Bump org.apache.maven.plugins:maven-surefire-plugin from 3.2.5 to 3.3.0 (#333)
new be84bb47 Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.6.3 to 3.7.0 (#328)
new 21d43f37 Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.4.1 to 3.5.0 (#326)
new b8060f13 Bump org.apache.maven.plugins:maven-release-plugin from 3.0.1 to 3.1.0 (#335)
new 5a93f811 Fixed KeyValue construction for ECC keys (#334)
The 5 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
pom.xml | 10 +++++-----
.../java/org/apache/jcp/xml/dsig/internal/dom/DOMKeyValue.java | 2 +-
2 files changed, 6 insertions(+), 6 deletions(-)
(santuario-xml-security-java) 04/05: Bump org.apache.maven.plugins:maven-release-plugin from 3.0.1 to 3.1.0 (#335)
Posted by co...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
coheigea pushed a commit to branch 3.0.x-fixes
in repository https://gitbox.apache.org/repos/asf/santuario-xml-security-java.git
commit b8060f133ccdda2efe842a5363478540826f831f
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Wed Jun 19 09:32:12 2024 +0100
Bump org.apache.maven.plugins:maven-release-plugin from 3.0.1 to 3.1.0 (#335)
Bumps [org.apache.maven.plugins:maven-release-plugin](https://github.com/apache/maven-release) from 3.0.1 to 3.1.0.
- [Release notes](https://github.com/apache/maven-release/releases)
- [Commits](https://github.com/apache/maven-release/compare/maven-release-3.0.1...maven-release-3.1.0)
---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-release-plugin
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
---
pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/pom.xml b/pom.xml
index 77ddcec6..8c7b1f87 100644
--- a/pom.xml
+++ b/pom.xml
@@ -285,7 +285,7 @@
</plugin>
<plugin>
<artifactId>maven-release-plugin</artifactId>
- <version>3.0.0</version>
+ <version>3.1.0</version>
<configuration>
<useReleaseProfile>false</useReleaseProfile>
<preparationGoals>clean install</preparationGoals>
(santuario-xml-security-java) 02/05: Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.6.3 to 3.7.0 (#328)
Posted by co...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
coheigea pushed a commit to branch 3.0.x-fixes
in repository https://gitbox.apache.org/repos/asf/santuario-xml-security-java.git
commit be84bb47e8c8804cf44ed675036453e3247374bf
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Tue Jun 18 11:13:23 2024 +0100
Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.6.3 to 3.7.0 (#328)
Bumps [org.apache.maven.plugins:maven-javadoc-plugin](https://github.com/apache/maven-javadoc-plugin) from 3.6.3 to 3.7.0.
- [Release notes](https://github.com/apache/maven-javadoc-plugin/releases)
- [Commits](https://github.com/apache/maven-javadoc-plugin/compare/maven-javadoc-plugin-3.6.3...maven-javadoc-plugin-3.7.0)
---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-javadoc-plugin
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
---
pom.xml | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/pom.xml b/pom.xml
index b99dd5d6..5cfb9556 100644
--- a/pom.xml
+++ b/pom.xml
@@ -260,7 +260,7 @@
<plugins>
<plugin>
<artifactId>maven-javadoc-plugin</artifactId>
- <version>3.5.0</version>
+ <version>3.7.0</version>
<executions>
<execution>
<goals>
@@ -570,7 +570,7 @@
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-javadoc-plugin</artifactId>
- <version>3.5.0</version>
+ <version>3.7.0</version>
<executions>
<execution>
<goals>
(santuario-xml-security-java) 03/05: Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.4.1 to 3.5.0 (#326)
Posted by co...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
coheigea pushed a commit to branch 3.0.x-fixes
in repository https://gitbox.apache.org/repos/asf/santuario-xml-security-java.git
commit 21d43f3739b1f353a55a3e7aa085a35f7f4f5dd1
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Tue Jun 18 11:13:33 2024 +0100
Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.4.1 to 3.5.0 (#326)
Bumps [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer) from 3.4.1 to 3.5.0.
- [Release notes](https://github.com/apache/maven-enforcer/releases)
- [Commits](https://github.com/apache/maven-enforcer/compare/enforcer-3.4.1...enforcer-3.5.0)
---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-enforcer-plugin
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
---
pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/pom.xml b/pom.xml
index 5cfb9556..77ddcec6 100644
--- a/pom.xml
+++ b/pom.xml
@@ -317,7 +317,7 @@
<plugins>
<plugin>
<artifactId>maven-enforcer-plugin</artifactId>
- <version>3.3.0</version>
+ <version>3.5.0</version>
<configuration>
<rules>
<requireMavenVersion>
(santuario-xml-security-java) 01/05: Bump org.apache.maven.plugins:maven-surefire-plugin from 3.2.5 to 3.3.0 (#333)
Posted by co...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
coheigea pushed a commit to branch 3.0.x-fixes
in repository https://gitbox.apache.org/repos/asf/santuario-xml-security-java.git
commit 95e8a3369f405f7a273ca873578a773f03c4fa0d
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Tue Jun 18 11:12:28 2024 +0100
Bump org.apache.maven.plugins:maven-surefire-plugin from 3.2.5 to 3.3.0 (#333)
Bumps [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) from 3.2.5 to 3.3.0.
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](https://github.com/apache/maven-surefire/compare/surefire-3.2.5...surefire-3.3.0)
---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
---
pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/pom.xml b/pom.xml
index d43b2c89..b99dd5d6 100644
--- a/pom.xml
+++ b/pom.xml
@@ -502,7 +502,7 @@
</plugin>
<plugin>
<artifactId>maven-surefire-plugin</artifactId>
- <version>3.1.0</version>
+ <version>3.3.0</version>
<configuration>
<reportFormat>brief</reportFormat>
<!-- We need to reinitialize classes based on the configuration -->
(santuario-xml-security-java) 05/05: Fixed KeyValue construction for ECC keys (#334)
Posted by co...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
coheigea pushed a commit to branch 3.0.x-fixes
in repository https://gitbox.apache.org/repos/asf/santuario-xml-security-java.git
commit 5a93f8115faecbfa30aac9f98bfad9eac56d7ad6
Author: Carlos Gamuci <ca...@gmail.com>
AuthorDate: Fri Jun 21 10:35:57 2024 +0200
Fixed KeyValue construction for ECC keys (#334)
- The signature KeyValue construction was wrong when an ECC key was used. The namespace was declared in the "NamedCurve" element, instead of "ECKeyValue". (See https://www.w3.org/TR/xmldsig-core1/#sec-ECKeyValue)
- The fix is needed in Apache Santuario 3.0.x too.
---
src/main/java/org/apache/jcp/xml/dsig/internal/dom/DOMKeyValue.java | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/src/main/java/org/apache/jcp/xml/dsig/internal/dom/DOMKeyValue.java b/src/main/java/org/apache/jcp/xml/dsig/internal/dom/DOMKeyValue.java
index 3cbb042e..5cb602d3 100644
--- a/src/main/java/org/apache/jcp/xml/dsig/internal/dom/DOMKeyValue.java
+++ b/src/main/java/org/apache/jcp/xml/dsig/internal/dom/DOMKeyValue.java
@@ -550,7 +550,7 @@ public abstract class DOMKeyValue<K extends PublicKey> extends DOMStructure impl
DOMUtils.setAttribute(namedCurveElem, "URI", "urn:oid:" + oid);
String qname = (prefix == null || prefix.length() == 0)
? "xmlns" : "xmlns:" + prefix;
- namedCurveElem.setAttributeNS("http://www.w3.org/2000/xmlns/",
+ ecKeyValueElem.setAttributeNS("http://www.w3.org/2000/xmlns/",
qname, XMLDSIG_11_XMLNS);
ecKeyValueElem.appendChild(namedCurveElem);
String encoded = XMLUtils.encodeToString(ecPublicKey);