123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200 |
- xmlseclibs.php
- |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
- 15, Nov 2018, 3.0.3
- Bug Fixes:
- - Fix casing of class name. (Willem Stuursma-Ruwen)
- - Fix Xpath casing. (Tim van Dijen)
- Improvements:
- - Make PCRE2 compliant. (Stefan Winter)
- - Add PHP 7.3 support. (Stefan Winter)
- 27, Sep 2018, 3.0.2
- Security Improvements:
- - OpenSSL is now a requirement rather than suggestion. (Slaven Bacelic)
- - Filter input to avoid XPath injection. (Jaime Pérez)
- Bug Fixes:
- - Fix missing parentheses (Tim van Dijen)
- Improvements:
- - Use strict comparison operator to compare digest values. (Jaime Pérez)
- - Remove call to file_get_contents that doesn't even work. (Jaime Pérez)
- - Document potentially dangerous return value behaviour. (Thijs Kinkhorst)
- 31, Aug 2017, 3.0.1
- Bug Fixes:
- - Fixed missing () in function call. (Dennis Væversted)
- Improvements:
- - Add OneLogin to supported software.
- - Add .gitattributes to remove unneeded files. (Filippo Tessarotto)
- - Fix bug in example code. (Dan Church)
- - Travis: add PHP 7.1, move hhvm to allowed failures. (Thijs Kinkhorst)
- - Drop failing extract-win-cert test (Thijs Kinkhorst). (Thijs Kinkhorst)
- - Add comments to warn about return values of verify(). (Thijs Kinkhorst)
- - Fix tests to properly check return code of verify(). (Thijs Kinkhorst)
- - Restore support for PHP >= 5.4. (Jaime Pérez)
- 25, May 2017, 3.0.0
- Improvements:
- - Remove use of mcrypt (skymeyer)
- 08, Sep 2016, 2.0.1
- Bug Fixes:
- - Strip whitespace characters when parsing X509Certificate. fixes #84
- (klemen.bratec)
- - Certificate 'subject' values can be arrays. fixes #80 (Andreas Stangl)
- - HHVM signing node with ID attribute w/out namespace regenerates ID value.
- fixes #88 (Milos Tomic)
- Improvements:
- - Fix typos and add some PHPDoc Blocks. (gfaust-qb)
- - Update lightSAML link. (Milos Tomic)
- - Update copyright dates.
- 31, Jul 2015, 2.0.0
- Features:
- - Namespace support. Classes now in the RobRichards\XMLSecLibs\ namespace.
- Improvements:
- - Dropped support for PHP 5.2
- 31, Jul 2015, 1.4.1
- Bug Fixes:
- - Allow for large digest values that may have line breaks. fixes #62
- Features:
- - Support for locating specific signature when multiple exist in
- document. (griga3k)
- Improvements:
- - Add optional argument to XMLSecurityDSig to define the prefix to be used,
- also allowing for null to use no prefix, for the dsig namespace. fixes #13
- - Code cleanup
- - Depreciated XMLSecurityDSig::generate_GUID for XMLSecurityDSig::generateGUID
- 23, Jun 2015, 1.4.0
- Features:
- - Support for PSR-0 standard.
- - Support for X509SubjectName. (Milos Tomic)
- - Add HMAC-SHA1 support.
- Improvements:
- - Add how to install to README. (Bernardo Vieira da Silva)
- - Code cleanup. (Jaime Pérez)
- - Normalilze tests. (Hidde Wieringa)
- - Add basic usage to README. (Hidde Wieringa)
- 21, May 2015, 1.3.2
- Bug Fixes:
- - Fix Undefined variable notice. (dpieper85)
- - Fix typo when setting MimeType attribute. (Eugene OZ)
- - Fix validateReference() with enveloping signatures
- Features:
- - canonicalizeData performance optimization. (Jaime Pérez)
- - Add composer support (Maks3w)
- 19, Jun 2013, 1.3.1
- Features:
- - return encrypted node from XMLSecEnc::encryptNode() when replace is set to
- false. (Olav)
- - Add support for RSA SHA384 and RSA_SHA512 and SHA384 digest. (Jaime Prez)
- - Add options parameter to the add cert methods.
- - Add optional issuerSerial creation with cert
- Bug Fixes:
- - Fix persisted Id when namespaced. (Koen Thomeer)
- Improvements:
- - Add LICENSE file
- - Convert CHANGELOG.txt to UTF-8
- 26, Sep 2011, 1.3.0
- Features:
- - Add param to append sig to node when signing. Fixes a problem when using
- inclusive canonicalization to append a signature within a namespaced subtree.
- ex. $objDSig->sign($objKey, $appendToNode);
- - Add ability to encrypt by reference
- - Add support for refences within an encrypted key
- - Add thumbprint generation capability (XMLSecurityKey->getX509Thumbprint() and
- XMLSecurityKey::getRawThumbprint($cert))
- - Return signature element node from XMLSecurityDSig::insertSignature() and
- XMLSecurityDSig::appendSignature() methods
- - Support for <ds:RetrievalMethod> with simple URI Id reference.
- - Add XMLSecurityKey::getSymmetricKeySize() method (Olav)
- - Add XMLSecEnc::getCipherValue() method (Olav)
- - Improve XMLSecurityKey:generateSessionKey() logic (Olav)
- Bug Fixes:
- - Change split() to explode() as split is now depreciated
- - ds:References using empty or simple URI Id reference should never include
- comments in canonicalized data.
- - Make sure that the elements in EncryptedData are emitted in the correct
- sequence.
- 11 Jan 2010, 1.2.2
- Features:
- - Add support XPath support when creating signature. Provides support for
- working with EBXML documents.
- - Add reference option to force creation of URI attribute. For use
- when adding a DOM Document where by default no URI attribute is added.
- - Add support for RSA-SHA256
- Bug Fixes:
- - fix bug #5: createDOMDocumentFragment() in decryptNode when data is node
- content (patch by Francois Wang)
- 08 Jul 2008, 1.2.1
- Features:
- - Attempt to use mhash when hash extension is not present. (Alfredo Cubitos).
- - Add fallback to built-in sha1 if both hash and mhash are not available and
- throw error for other for other missing hashes. (patch by Olav Morken).
- - Add getX509Certificate method to retrieve the x509 cert used for Key.
- (patch by Olav Morken).
- - Add getValidatedNodes method to retrieve the elements signed by the
- signature. (patch by Olav Morken).
- - Add insertSignature method for precision signature insertion. Merge
- functionality from appendSignature in the process. (Olav Morken, Rob).
- - Finally add some tests
- Bug Fixes:
- - Fix canonicalization for Document node when using PHP < 5.2.
- - Add padding for RSA_SHA1. (patch by Olav Morken).
- 27 Nov 2007, 1.2.0
- Features:
- - New addReference/List option (overwrite). Boolean flag indicating if URI
- value should be overwritten if already existing within document.
- Default is TRUE to maintain BC.
- 18 Nov 2007, 1.1.2
- Bug Fixes:
- - Remove closing PHP tag to fix extra whitespace characters from being output
- 11 Nov 2007, 1.1.1
- Features:
- - Add getRefNodeID() and getRefIDs() methods missed in previous release.
- Provide functionality to find URIs of existing reference nodes.
- Required by simpleSAMLphp project
- Bug Fixes:
- - Remove erroneous whitespace causing issues under certain circumastances.
- 18 Oct 2007, 1.1.0
- Features:
- - Enable creation of enveloping signature. This allows the creation of
- managed information cards.
- - Add addObject method for enveloping signatures.
- - Add staticGet509XCerts method. Chained certificates within a PEM file can
- now be added within the X509Data node.
- - Add xpath support within transformations
- - Add InclusiveNamespaces prefix list support within exclusive transformations.
- Bug Fixes:
- - Initialize random number generator for mcrypt_create_iv. (Joan Cornadó).
- - Fix an interoperability issue with .NET when encrypting data in CBC mode.
- (Joan Cornadó).
|