Skip to content

Releases: XML-Security/signxml

v3.2.2: - Update upper bound on lxml dependency to allow lxml 5

29 Jan 00:35
Compare
Choose a tag to compare
  • Update upper bound on lxml dependency to allow lxml 5

    • Bump minimum dependency versions to align with Ubuntu 20.04

    • Test and release infrastructure improvements

v3.2.1

06 Aug 18:22
Compare
Choose a tag to compare
  • Use dataclass.replace in SignatureReference construction. Fixes #231

v3.2.0: - Roundtrip referenced XML nodes before c14n to detach them from pare…

13 Apr 06:22
v3.2.0
c342260
Compare
Choose a tag to compare
  • Roundtrip referenced XML nodes before c14n to detach them from parent document when verifying (#225)

v3.1.1

08 Apr 17:05
Compare
Choose a tag to compare
  • Add type attribute to XAdES signed properties reference (#224)

v3.1.0

04 Jan 08:53
v3.1.0
115e9c1
Compare
Choose a tag to compare
  • Use distinct default for payload c14n. Fixes #217

  • Deprecate SHA1

  • Test and documentation improvements

v3.0.2

29 Nov 02:13
Compare
Choose a tag to compare
  • Remove incorrect deprecation of xml-c14n11 URI

v3.0.1

27 Nov 23:32
Compare
Choose a tag to compare
  • Mark SHA1 as deprecated

    • Aggregate verification settings in SignatureConfiguration dataclass

    • Mark all dataclasses in API as frozen

    • Add ability to assert expected signature location

    • Add ability to assert expected signature algorithms

    • Add ability to assert expected digest algorithms

    • Add MGF1 ("RSASSA-PSS without parameters") algorithm identifiers

    • Remove PSS ("RSASSA-PSS with parameters") and EdDSA algorithm
      identifiers (given low usage and no interop examples, we will not be
      implementing PSS parameters for now; EdDSA key info additionally has
      no standardized way to serialize it)

    • Add debug logging of canonicalization outputs

    • Documentation and formatting improvements

v3.0.0

14 Nov 00:42
Compare
Choose a tag to compare
  • Add XAdES support

    • Migrate all configuration inputs to enums (string identifiers are still supported, but will be deprecated in a future version)

    • Migrate structured data inputs to dataclasses

    • Deprecate excise_empty_xmlns_declarations

    • Documentation and test infrastructure improvements

    • Clean up top level signxml and signxml.xades namespaces

    • Stop using default_backend for cryptography, it is no longer required

    • Drop Python 3.6 support (#200)

v2.10.1

09 Sep 23:05
Compare
Choose a tag to compare
  • Do not excise any empty xmlns="" declarations by default. This behavior is now configurable as follows

    ```
    signer = XMLSigner()
    signer.excise_empty_xmlns_declarations = True
    signer.sign(...)
    ```
    ```
    verifier = XMLVerifier()
    verifier.excise_empty_xmlns_declarations = True
    verifier.verify(...)
    ```
    
    • Documentation and autoformatting improvements

v2.10.0

21 Aug 04:49
Compare
Choose a tag to compare
  • Excise empty xmlns declarations only in signature, not in payload

    • Add pyinstaller support to signxml (#188)

    • Documentation, test infrastructure, and code organization improvements