CHANGELOG.txt 6.8 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200
  1. xmlseclibs.php
  2. |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
  3. 15, Nov 2018, 3.0.3
  4. Bug Fixes:
  5. - Fix casing of class name. (Willem Stuursma-Ruwen)
  6. - Fix Xpath casing. (Tim van Dijen)
  7. Improvements:
  8. - Make PCRE2 compliant. (Stefan Winter)
  9. - Add PHP 7.3 support. (Stefan Winter)
  10. 27, Sep 2018, 3.0.2
  11. Security Improvements:
  12. - OpenSSL is now a requirement rather than suggestion. (Slaven Bacelic)
  13. - Filter input to avoid XPath injection. (Jaime Pérez)
  14. Bug Fixes:
  15. - Fix missing parentheses (Tim van Dijen)
  16. Improvements:
  17. - Use strict comparison operator to compare digest values. (Jaime Pérez)
  18. - Remove call to file_get_contents that doesn't even work. (Jaime Pérez)
  19. - Document potentially dangerous return value behaviour. (Thijs Kinkhorst)
  20. 31, Aug 2017, 3.0.1
  21. Bug Fixes:
  22. - Fixed missing () in function call. (Dennis Væversted)
  23. Improvements:
  24. - Add OneLogin to supported software.
  25. - Add .gitattributes to remove unneeded files. (Filippo Tessarotto)
  26. - Fix bug in example code. (Dan Church)
  27. - Travis: add PHP 7.1, move hhvm to allowed failures. (Thijs Kinkhorst)
  28. - Drop failing extract-win-cert test (Thijs Kinkhorst). (Thijs Kinkhorst)
  29. - Add comments to warn about return values of verify(). (Thijs Kinkhorst)
  30. - Fix tests to properly check return code of verify(). (Thijs Kinkhorst)
  31. - Restore support for PHP >= 5.4. (Jaime Pérez)
  32. 25, May 2017, 3.0.0
  33. Improvements:
  34. - Remove use of mcrypt (skymeyer)
  35. 08, Sep 2016, 2.0.1
  36. Bug Fixes:
  37. - Strip whitespace characters when parsing X509Certificate. fixes #84
  38. (klemen.bratec)
  39. - Certificate 'subject' values can be arrays. fixes #80 (Andreas Stangl)
  40. - HHVM signing node with ID attribute w/out namespace regenerates ID value.
  41. fixes #88 (Milos Tomic)
  42. Improvements:
  43. - Fix typos and add some PHPDoc Blocks. (gfaust-qb)
  44. - Update lightSAML link. (Milos Tomic)
  45. - Update copyright dates.
  46. 31, Jul 2015, 2.0.0
  47. Features:
  48. - Namespace support. Classes now in the RobRichards\XMLSecLibs\ namespace.
  49. Improvements:
  50. - Dropped support for PHP 5.2
  51. 31, Jul 2015, 1.4.1
  52. Bug Fixes:
  53. - Allow for large digest values that may have line breaks. fixes #62
  54. Features:
  55. - Support for locating specific signature when multiple exist in
  56. document. (griga3k)
  57. Improvements:
  58. - Add optional argument to XMLSecurityDSig to define the prefix to be used,
  59. also allowing for null to use no prefix, for the dsig namespace. fixes #13
  60. - Code cleanup
  61. - Depreciated XMLSecurityDSig::generate_GUID for XMLSecurityDSig::generateGUID
  62. 23, Jun 2015, 1.4.0
  63. Features:
  64. - Support for PSR-0 standard.
  65. - Support for X509SubjectName. (Milos Tomic)
  66. - Add HMAC-SHA1 support.
  67. Improvements:
  68. - Add how to install to README. (Bernardo Vieira da Silva)
  69. - Code cleanup. (Jaime Pérez)
  70. - Normalilze tests. (Hidde Wieringa)
  71. - Add basic usage to README. (Hidde Wieringa)
  72. 21, May 2015, 1.3.2
  73. Bug Fixes:
  74. - Fix Undefined variable notice. (dpieper85)
  75. - Fix typo when setting MimeType attribute. (Eugene OZ)
  76. - Fix validateReference() with enveloping signatures
  77. Features:
  78. - canonicalizeData performance optimization. (Jaime Pérez)
  79. - Add composer support (Maks3w)
  80. 19, Jun 2013, 1.3.1
  81. Features:
  82. - return encrypted node from XMLSecEnc::encryptNode() when replace is set to
  83. false. (Olav)
  84. - Add support for RSA SHA384 and RSA_SHA512 and SHA384 digest. (Jaime PŽrez)
  85. - Add options parameter to the add cert methods.
  86. - Add optional issuerSerial creation with cert
  87. Bug Fixes:
  88. - Fix persisted Id when namespaced. (Koen Thomeer)
  89. Improvements:
  90. - Add LICENSE file
  91. - Convert CHANGELOG.txt to UTF-8
  92. 26, Sep 2011, 1.3.0
  93. Features:
  94. - Add param to append sig to node when signing. Fixes a problem when using
  95. inclusive canonicalization to append a signature within a namespaced subtree.
  96. ex. $objDSig->sign($objKey, $appendToNode);
  97. - Add ability to encrypt by reference
  98. - Add support for refences within an encrypted key
  99. - Add thumbprint generation capability (XMLSecurityKey->getX509Thumbprint() and
  100. XMLSecurityKey::getRawThumbprint($cert))
  101. - Return signature element node from XMLSecurityDSig::insertSignature() and
  102. XMLSecurityDSig::appendSignature() methods
  103. - Support for <ds:RetrievalMethod> with simple URI Id reference.
  104. - Add XMLSecurityKey::getSymmetricKeySize() method (Olav)
  105. - Add XMLSecEnc::getCipherValue() method (Olav)
  106. - Improve XMLSecurityKey:generateSessionKey() logic (Olav)
  107. Bug Fixes:
  108. - Change split() to explode() as split is now depreciated
  109. - ds:References using empty or simple URI Id reference should never include
  110. comments in canonicalized data.
  111. - Make sure that the elements in EncryptedData are emitted in the correct
  112. sequence.
  113. 11 Jan 2010, 1.2.2
  114. Features:
  115. - Add support XPath support when creating signature. Provides support for
  116. working with EBXML documents.
  117. - Add reference option to force creation of URI attribute. For use
  118. when adding a DOM Document where by default no URI attribute is added.
  119. - Add support for RSA-SHA256
  120. Bug Fixes:
  121. - fix bug #5: createDOMDocumentFragment() in decryptNode when data is node
  122. content (patch by Francois Wang)
  123. 08 Jul 2008, 1.2.1
  124. Features:
  125. - Attempt to use mhash when hash extension is not present. (Alfredo Cubitos).
  126. - Add fallback to built-in sha1 if both hash and mhash are not available and
  127. throw error for other for other missing hashes. (patch by Olav Morken).
  128. - Add getX509Certificate method to retrieve the x509 cert used for Key.
  129. (patch by Olav Morken).
  130. - Add getValidatedNodes method to retrieve the elements signed by the
  131. signature. (patch by Olav Morken).
  132. - Add insertSignature method for precision signature insertion. Merge
  133. functionality from appendSignature in the process. (Olav Morken, Rob).
  134. - Finally add some tests
  135. Bug Fixes:
  136. - Fix canonicalization for Document node when using PHP < 5.2.
  137. - Add padding for RSA_SHA1. (patch by Olav Morken).
  138. 27 Nov 2007, 1.2.0
  139. Features:
  140. - New addReference/List option (overwrite). Boolean flag indicating if URI
  141. value should be overwritten if already existing within document.
  142. Default is TRUE to maintain BC.
  143. 18 Nov 2007, 1.1.2
  144. Bug Fixes:
  145. - Remove closing PHP tag to fix extra whitespace characters from being output
  146. 11 Nov 2007, 1.1.1
  147. Features:
  148. - Add getRefNodeID() and getRefIDs() methods missed in previous release.
  149. Provide functionality to find URIs of existing reference nodes.
  150. Required by simpleSAMLphp project
  151. Bug Fixes:
  152. - Remove erroneous whitespace causing issues under certain circumastances.
  153. 18 Oct 2007, 1.1.0
  154. Features:
  155. - Enable creation of enveloping signature. This allows the creation of
  156. managed information cards.
  157. - Add addObject method for enveloping signatures.
  158. - Add staticGet509XCerts method. Chained certificates within a PEM file can
  159. now be added within the X509Data node.
  160. - Add xpath support within transformations
  161. - Add InclusiveNamespaces prefix list support within exclusive transformations.
  162. Bug Fixes:
  163. - Initialize random number generator for mcrypt_create_iv. (Joan Cornadó).
  164. - Fix an interoperability issue with .NET when encrypting data in CBC mode.
  165. (Joan Cornadó).