Apache Ramaprt/C Archived News
This page contains information on previous releases running up to the
latest.
13th May 2008 - Apache Rampart/C Version 1.2.0 Released
Download 1.2
Key Features
- Ability to send and verify UsernameTokens with
     
    - Username and PlainText password
    
- Username and Digested password
    
 
- Ability to send Timestamp tokens
- SOAP message encryption
    
    -  With derived key support for improved security
    
-  Symmetric and Asymmetric modes of operations
    
-  Support for AES and Tripple DES encryption
    
-  Signature encryption
    
-  Keys encryption
    
 
- SOAP message signature
    
    -  XML signature with RSA-SHA1
    
-  Message authentication with HMAC-SHA1
    
-  Signature confirmation support
    
-  SOAP Header signing
    
 
- WS-Security Policy (spec 1.1) based configurations
    
    -  Support for both Symmetric as well as Asymmetric policy bindings
    
-  Support for different modes of key identifiers
    
-  Support for different algorithm suites
 [Basic128, Basic 192, Basic256, TrippleDES, Basic128Rsa15, Basic192Rsa15,Basic256Rsa15, TripleDesRsa15]
 
- Replay detection support
    
    -  Easy to use built-in replay detection module
    
-  Ability to deploy a customized replay detection module
    
 
- Different protection orders
    
    -  Encrypt before signing
    
-  Sign before encrypting
    
 
- Extensible modules
    
    -  Password callback module
    
-  Authentication module
    
-  Credentials module
    
 
- Keys management
    
    -  Support for X509 token profile
    
-  Support for Key identifiers, Thumb prints, Issuer/Serial pairs, Embedded and Direct references
    
 
-  WS-Secure Conversation Language support (Experimental)
    
    -  Establishing Security Context and thereby maintaining a session
    
-  Per message key derivation
    
-  Support for stored securtiy context token
    
 
-  WS-Trust Language support (Experimental)
    
    -  Security Token Services (STS)
    
-  STS Client
    
-  Server and Client entrophy support
    
 
- Other
    
    -  Easy to use deployment scripts
    
-  A comprehensive set of samples
    
 
Major Changes Since Last Release
    -  WS-Secure Conversation Language support (Experimental)
    
-  WS-Trust Language support (Experimental)
    
-  SAML Support
    
-  Memory leak fixes
-  Many bug fixes
16th Jan 2008 - Apache Rampart/C Version 1.1 Released
    Download 1.1
    Key Features
- Ability to send and verify UsernameTokens with
     
    - Username and PlainText password
    
- Username and Digested password
    
 
- Ability to send Timestamp tokens
- SOAP message encryption
    
    -  With derived key support for improved security
    
-  Symmetric and Asymmetric modes of operations
    
-  Support for AES and Tripple DES encryption
    
-  Signature encryption
    
-  Keys encryption
    
 
- SOAP message signature
    
    -  XML signature with RSA-SHA1
    
-  Message authentication with HMAC-SHA1
    
-  Signature confirmation support
    
-  SOAP Header signing
    
 
- WS-Security Policy (spec 1.1) based configurations
    
    -  Support for both Symmetric as well as Asymmetric policy bindings
    
-  Support for different modes of key identifiers
    
-  Support for different algorithm suites
 [Basic128, Basic 192, Basic256, TrippleDES, Basic128Rsa15, Basic192Rsa15,Basic256Rsa15, TripleDesRsa15]
 
- Replay detection support
    
    -  Easy to use built-in replay detection module
    
-  Ability to deploy a customized replay detection module
    
 
- Different protection orders
    
    -  Encrypt before signing
    
-  Sign before encrypting
    
 
- Extensible modules
    
    -  Password callback module
    
-  Authentication module
    
-  Credentials module
    
 
- Keys management
    
    -  Support for X509 token profile
    
-  Support for Key identifiers, Thumb prints, Issuer/Serial pairs, Embedded and Direct references
    
 
- Other
    
    -  Easy to use deployment scripts
    
-  A comprehensive set of samples
    
 
Major Changes Since Last Release
    -  MAC support with HMAC-SHA1
    
- Derrived key encryption
    
- Derived key signing
    
- Symmetric policy bindings
    
- New security header processor based on SOAP header layout
    
- Security policy validator
    
- Extensible Replay detection module
    
- Signature confirmation support
    
- Support for X509 thumb prints
    
- Easy to use deployment scripts
	
- Memory leak fixes
- Many bug fixes
05th Oct 2007 - Apache Rampart/C Version 1.0 Released
    Download 1.0
    Key Features
    - SOAP message encryption : Allows different parts of a SOAP message to be encrypted to keep the confidentiality of the message
- SOAP message signature : Allows different parts of a SOAP message to be signed to keep the integrity of the message
- Ability to send and verify UsernameTokens with
        - PlainText password
- Digested password
Allows users to send Username tokens for authentication purposes as per Web services security username token profile
    
- Ability to send Timestamp tokens : Allows users to add timestamps to their SOAP messages in order to ensure the freshness
- WS-Security Policy (spec 1.1) Policy based configurations as per WS-Security Policy : Allows users to express their security related requirements and constraints
- Replay detection support
- Improvements to the context model
- Authentication module implementation
- Credentials module implementation
- Improvements to Key/Certificate loading mechanisms
- Easy to use deployment scripts
11th May 2007 - Apache Rampart/C Version 0.90 Released
    Download 0.90
    Key Features
   
    - SOAP message encryption : Allows different parts of the body of SOAP message to be encrypted to keep the confidentiality of the message
- SOAP message signature : Allows different parts of a SOAP message to be signed to keep the integrity of the message
- Ability to send and verify UsernameTokens with
        - PlainText password
- Digested password
Allows users to send Username tokens for authentication purposes as per Web services security username token profile
    
- Ability to send Timestamp tokens : Allows users to add timestamps to their SOAP messages in order to ensure the freshness
- Policy based configurations: Allows clients and services to express their security related requirements and constraints