1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
|
<html>
<head>
<meta name="generator" content="HTML Tidy for HTML5 for Linux version 5.6.0">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<title>XML Security Library: Download</title>
<link rel="stylesheet" href="css/main.css">
</head>
<body><table width="100%" valign="top"><tr valign="top">
<td valign="top" align="left" width="210">
<img src="images/logo.gif" alt="XML Security Library" border="0"><p></p>
<ul>
<li><a href="index.html">Home</a></li>
<li><a href="download.html">Download</a></li>
<ul><li><a href="https://github.com/lsh123/xmlsec">GitHub</a></li></ul>
<li><a href="news.html">News</a></li>
<li><a href="documentation.html">Documentation</a></li>
<ul>
<li><a href="faq.html">FAQ</a></li>
<li><a href="api/xmlsec-notes.html">Tutorial</a></li>
<li><a href="api/xmlsec-reference.html">API reference</a></li>
<li><a href="api/xmlsec-examples.html">Examples</a></li>
</ul>
<li><a href="xmldsig.html">XML Digital Signature</a></li>
<li><a href="xmlenc.html">XML Encryption</a></li>
<li><a href="c14n.html">XML Canonicalization</a></li>
<li><a href="bugs.html">Reporting Bugs</a></li>
<li><a href="mailing-list.html">Mailing list</a></li>
<li><a href="related.html">Related</a></li>
<li><a href="authors.html">Authors</a></li>
</ul>
<table width="100%">
<tr>
<td width="15"></td>
<td><a href="http://xmlsoft.org/"><img src="images/libxml2-logo.png" alt="LibXML2" border="0"></a></td>
</tr>
<tr>
<td width="15"></td>
<td><a href="http://xmlsoft.org/XSLT"><img src="images/libxslt-logo.png" alt="LibXSLT" border="0"></a></td>
</tr>
<tr>
<td width="15"></td>
<td><a href="http://www.openssl.org/"><img src="images/openssl-logo.png" alt="OpenSSL" border="0"></a></td>
</tr>
<!--Links - start--><!--Links - end-->
</table>
</td>
<td valign="top"><table width="80%" valign="top" style="margin-left:10px;"><tr><td valign="top" align="left" id="xmlsecContent">
<div align="center"><h1>Download</h1></div>
<div align="left">
<h2>Stable releases</h2>
<p>The latest stable XML Security Library version is <b>1.3.7</b>:</p>
<ul>
<li>
<a href="https://www.aleksey.com/xmlsec/download/xmlsec1-1.3.7.tar.gz">Sources</a>
and <a href="https://www.aleksey.com/xmlsec/download/xmlsec1-1.3.7.sig">signature</a>
for the latest version (<a href="https://scan.coverity.com/projects/xmlsec">Coverity report</a>).
</li>
<li>
<a href="https://www.aleksey.com/xmlsec/download/win64/"> WIN64
binaries</a> for XMLSec Library (as well as LibXML2, LibXSLT and OpenSSL).
</li>
<li>XMLSec Library is included as part of Debian GNU/Linux. For more information see
the <a href="http://memebeam.org/toys/DebianXmlsec">coordination page</a>.
</li>
<li>XMLSec Library <a href="http://www.freebsd.org/cgi/cvsweb.cgi/ports/security/xmlsec/">FreeBSD
and</a> <a href="http://www.openbsd.org/cgi-bin/cvsweb/ports/security/xmlsec/">OpenBSD</a>
ports.
</li>
</ul>
<p>The <a href="http://www.aleksey.com/xmlsec/download/">previous releases</a> are also
available.</p>
<p>The releases <a href="https://www.aleksey.com/xmlsec/download/aleksey%40aleksey.com.gpg">signature key</a> fingerprint is:
<code>00FD D6A7 DFB8 1C88 F34B 9BF0 E63E CDEF 9E1D 829E</code>
(<a href="https://www.cyberciti.biz/faq/pgp-tarball-file-signature-keys-verification/">how to verify release tarball signature</a>).</p>
</div>
<div align="left">
<h2>Source code on GitHub</h2>
<p>XML Security Library source code is available on <a href="https://github.com/lsh123/xmlsec">GitHub</a>.</p>
</div>
<div align="left">
<h2>Requirements</h2>
<p>The XML Security Library requires <a href="http://xmlsoft.org/downloads.html">LibXML</a> library,
<a href="http://xmlsoft.org/XSLT/downloads.html">LibXSLT</a> library (optional) and one of the
following cryptographic libraries:
</p>
<table style="width: 85%;" border="1" cellpadding="2" cellspacing="2">
<thead>
<tr valign="top">
<th width="20%">XMLSec library</th>
<th>Cryptographic library</th>
<th>Supported formats</th>
<th>Notes</th>
</tr>
</thead>
<tbody>
<tr valign="top">
<td><b>xmlsec-openssl</b></td>
<td>
<ul>
<li>
<a href="http://www.openssl.org/">OpenSSL</a> 1.1.1 or above, 3.0.0 or above is recommended</li>
<li>
<a href="https://www.libressl.org/">LibreSSL</a> 3.5 or above</li>
<li>
<a href="https://boringssl.googlesource.com/boringssl/">BoringSSL</a> 1.1.0 or above</li>
</ul>
</td>
<!-- key formats -->
<td>
<ul>
<li>Private keys: pkcs12, pkcs8 (pem/der), unencrypted keys (pem/der)</li>
<li>Public keys: x509 certificates (pem/der), standalone keys (pem/der)</li>
<li>x509 certificates: pem/der</li>
<li>x509 CRLs: pem/der</li>
</ul>
</td>
<!-- notes -->
<td>
<ul>
<li>
<b>xmlsec-openssl with OpenSSL 3.0.0 or greater is recommended</b> (supports all REQUIRED and all RECOMMENDED
<a href="xmldsig.html">XML Digital Signature 1.1</a> and <a href="xmlenc.html">XML Encryption 1.1</a> algorithms).</li>
<li>BoringSSL API is unstable and the latest versions might not work with XMLSec Library.</li>
</ul>
</td>
</tr>
<tr valign="top">
<td><b>xmlsec-gnutls</b></td>
<td>
<a href="http://www.gnu.org/software/gnutls/">GnuTLS</a> 3.6.13 or above</td>
<!-- key formats -->
<td>
<ul>
<li>Private keys: pkcs12, pkcs8 (pem/der), unencrypted keys (pem/der)</li>
<li>Public keys: x509 certificates (pem/der), standalone keys (pem/der)</li>
</ul>
</td>
<!-- notes -->
<td>Supports multiple cryptographic backends, the exact features set for xmlsec-gnutls
depends on the backend in use.</td>
</tr>
<tr valign="top">
<td><b>xmlsec-nss</b></td>
<td>
<a href="http://www.mozilla.org/projects/security/pki/nss/">NSS</a>
(Mozilla cryptographic library) 3.35 or above
</td>
<!-- key formats -->
<td>
<ul>
<li>Private keys: pkcs12</li>
<li>Public keys: x509 certificates (pem/der), standalone keys (der)</li>
<li>x509 certificates: pem/der</li>
<li>x509 CRLs: der</li>
</ul>
</td>
<!-- notes -->
<td>Requires <a href="https://firefox-source-docs.mozilla.org/nspr/index.html">NSPR</a> 4.25.0 or above</td>
</tr>
<tr valign="top">
<td><b>xmlsec-mscng</b></td>
<td>
<a href="https://learn.microsoft.com/en-us/windows/win32/seccng/cng-portal">Microsoft
Cryptography API: Next Generation</a> (requires Windows 7, Windows Server 2008 R2, or above)
</td>
<!-- key formats -->
<td>
<ul>
<li>Private keys: pkcs12</li>
<li>Public keys: x509 certificates (der)</li>
<li>x509 certificates: der</li>
<li>x509 CRLs: none</li>
</ul>
</td>
<!-- notes -->
<td>
xmlsec-mscng is the recommended version on Windows platform.
</td>
</tr>
<tr valign="top">
<td><b>xmlsec-mscrypto</b></td>
<td>
<a href="https://learn.microsoft.com/en-us/windows/win32/seccrypto/cryptography--cryptoapi--and-capicom">Microsoft
CryptogAPI: (MSCrypto)</a> (requires Windows XP, Windows Server 2003, or above)
</td>
<!-- key formats -->
<td>
<ul>
<li>Private keys: pkcs12</li>
<li>Public keys: x509 certificates (der)</li>
<li>x509 certificates: der</li>
<li>x509 CRLs: none</li>
</ul>
</td>
<!-- notes -->
<td>In maintenance mode starting from xmlsec 1.3.0, April 2023.</td>
</tr>
<tr valign="top">
<td><b>xmlsec-gcrypt</b></td>
<td>
<a href="http://www.gnu.org/directory/security/libgcrypt.html">LibGCrypt</a> 1.4.0 or above
</td>
<!-- key formats -->
<td>
<ul>
<li>Private keys: limited unencrypted keys (der)</li>
<li>Public keys: limited standalone keys (der)</li>
<li>x509 certificates: none</li>
<li>x509 CRLs: none</li>
</ul>
</td>
<!-- notes -->
<td>Limited functionality without built-in x509 certificates support in LibGCrypt. In maintenance
mode starting from xmlsec 1.3.0, April 2023.</td>
</tr>
</tbody>
</table>
<p>The <a href="xmldsig.html">XML Digital Signature Interoperability report</a> and <a href="xmlenc.html">XML Encryption
Interoperability report</a> provide detailed information about the features supported by each library.</p>
</div>
<div align="left">
<h2>Build and install</h2>
<p>All steps are the usual Unix/Linux build steps (see readme file in <code>xmlsec-<version>/win32</code>
folder for Windows instructions):
</p>
<blockquote><code>
gunzip -c xmlsec-<version>.tar.gz | tar xvf - <br>
cd xmlsec-<version> <br>
mkdir build <br>
cd build <br>
../configure --help <br>
../configure [configure options] <br>
make <br>
make check <br>
make install <br>
</code></blockquote>
</div>
<div align="left">
<h2>Other languages</h2>
<ul>
<li>
<a href="https://github.com/mehcode/python-xmlsec">Python xmlsec module</a>
</li>
<li>
<a href="https://github.com/estrelow/Perl-LibXML-Sec">Perl LibXML-Sec module</a>
</li>
</ul>
</div>
</td></tr></table></td>
</tr></table></body>
</html>
|
