commits  

Messages by Thread

• (ws-wss4j) branch 3_0_x-fixes updated: EncryptedHeader child confusion causing wrong protected-header selection (#687) coheigea
• (ws-wss4j) branch coheigea/encrypted-header deleted (was 4470928b9) coheigea
• (ws-wss4j) branch master updated: EncryptedHeader child confusion causing wrong protected-header selection (#687) coheigea
• (ws-wss4j) branch coheigea/encrypted-header updated (fd7215dc2 -> 37a413e26) coheigea
• (ws-wss4j) branch 2_4_x-fixes updated: Make sure we can't register a fake SOAP Body for lookup (#686) coheigea
• (ws-wss4j) branch 3_0_x-fixes updated: Make sure we can't register a fake SOAP Body for lookup (#686) coheigea
• (ws-wss4j) branch coheigea/dom-soap-body deleted (was c4c1be9a9) coheigea
• (ws-wss4j) branch master updated: Make sure we can't register a fake SOAP Body for lookup (#686) coheigea
• (ws-wss4j) branch coheigea/dom-soap-body updated (e186fdb52 -> c4c1be9a9) coheigea
• (ws-wss4j) branch 2_4_x-fixes updated: Fix sender-vouches signature referencing (#685) coheigea
• (ws-wss4j) branch 3_0_x-fixes updated: Fix sender-vouches signature referencing (#685) coheigea
• (ws-wss4j) branch coheigea/dom-soap-body created (now e186fdb52) coheigea
  • (ws-wss4j) 02/02: Make sure we can't register a fake SOAP Body for lookup coheigea
  • (ws-wss4j) 01/02: Updating replay cache docs coheigea
• (ws-wss4j) branch master updated: Docs update coheigea
• (ws-wss4j) branch master updated: Fix sender-vouches signature referencing (#685) coheigea
• (ws-wss4j) branch 2_4_x-fixes updated (cbb4ecc7d -> 087c46598) coheigea
  • (ws-wss4j) 01/01: Fix sender-vouches signature referencing (#685) coheigea
  • (ws-wss4j) branch 2_4_x-fixes updated (cbb4ecc7d -> 087c46598) coheigea
  • (ws-wss4j) 01/01: Fix sender-vouches signature referencing (#685) coheigea
• (ws-wss4j) branch coheigea/sender-vouches deleted (was 8a283166c) coheigea
• (ws-wss4j) branch coheigea/sender-vouches created (now 8a283166c) coheigea
  • (ws-wss4j) 01/01: Fix sender-vouches signature referencing coheigea
• (ws-wss4j) branch 2_4_x-fixes updated: Reject duplicate C14N settings + Detect unknown top-level policy assertions (#684) coheigea
• (ws-wss4j) branch coheigea/policy-fixes deleted (was cb9a1ea74) coheigea
• (ws-wss4j) branch 3_0_x-fixes updated: Reject duplicate C14N settings + Detect unknown top-level policy assertions (#684) coheigea
• (ws-wss4j) branch master updated: Reject duplicate C14N settings + Detect unknown top-level policy assertions (#684) coheigea
• (ws-wss4j) branch coheigea/policy-fixes created (now cb9a1ea74) coheigea
  • (ws-wss4j) 01/01: Reject duplicate C14N settings + Detect unknown top-level policy assertions coheigea
• (ws-xmlschema) branch master updated: Bump slf4j.version from 2.0.18 to 2.0.19 (#144) coheigea
• (ws-wss4j) branch master updated: WSS-729 Switch default JasyptPasswordEncryptor algorithm to PBEWithHmacSHA512AndAES_256 (#683) coheigea
• (ws-xmlschema) branch dependabot/maven/slf4j.version-2.0.19 deleted (was 3bfb0c76) github-bot
• (ws-wss4j) branch coheigea/WSS-729 deleted (was 470124c4f) coheigea
• (ws-xmlschema) branch dependabot/maven/slf4j.version-2.0.19 created (now 3bfb0c76) github-bot
• (ws-wss4j) branch coheigea/xpath deleted (was 47d247e22) coheigea
• (ws-wss4j) branch coheigea/WSS-729 created (now 470124c4f) coheigea
  • (ws-wss4j) 01/01: WSS-729 Switch default JasyptPasswordEncryptor algorithm to PBEWithHmacSHA512AndAES_256 coheigea
• (ws-wss4j) branch 2_4_x-fixes updated: Add security documentation for StAX (#679) coheigea
• (ws-wss4j) branch 3_0_x-fixes updated: Fix issues with SignedElements / EncryptedElements (#682) coheigea
• (ws-wss4j) branch 2_4_x-fixes updated: Fix issues with SignedElements / EncryptedElements (#682) coheigea
• (ws-wss4j) branch master updated: Fix issues with SignedElements / EncryptedElements (#682) coheigea
• (ws-wss4j) branch master updated: Correct XOP javadoc (#680) coheigea
• (ws-wss4j) branch coheigea/xop deleted (was 10457ad50) coheigea
• (ws-wss4j) branch coheigea/stax-doc deleted (was e0f26cb3b) coheigea
• (ws-wss4j) branch coheigea/xpath created (now 47d247e22) coheigea
• (ws-wss4j) branch 2_4_x-fixes updated (9f3b863e7 -> 0e9eb943d) coheigea
  • (ws-wss4j) 02/02: PMD test fix coheigea
  • (ws-wss4j) 01/02: Check the SOAPAction matches the body for the StAX policy case (#678) coheigea
• (ws-wss4j) branch coheigea/xop created (now 10457ad50) coheigea
  • (ws-wss4j) 01/01: Correct XOP javadoc coheigea
• (ws-wss4j) branch master updated: Add security documentation for StAX (#679) coheigea
• (ws-wss4j) branch 2_4_x-fixes updated (a884b65c4 -> 1748ba77c) coheigea
  • (ws-wss4j) 01/02: Correct XOP javadoc (#680) coheigea
  • (ws-wss4j) 02/02: Removing duplicate ReplayCache call coheigea
• (ws-wss4j) branch 3_0_x-fixes updated (29e956d99 -> aed8f7d44) coheigea
  • (ws-wss4j) 01/02: Correct XOP javadoc (#680) coheigea
  • (ws-wss4j) 02/02: Removing duplicate ReplayCache call coheigea
• (ws-wss4j) branch master updated: Removing duplicate ReplayCache call coheigea
• (ws-wss4j) branch coheigea/stax-doc created (now e0f26cb3b) coheigea
  • (ws-wss4j) 01/01: Add security documentation for StAX coheigea
• (ws-wss4j) branch 3_0_x-fixes updated: Add security documentation for StAX (#679) coheigea
• (ws-wss4j) branch 3_0_x-fixes updated: PMD test fix coheigea
• (ws-wss4j) branch master updated: PMD test fix coheigea
• (ws-wss4j) branch 3_0_x-fixes updated: Check the SOAPAction matches the body for the StAX policy case (#678) coheigea
• (ws-wss4j) branch master updated: Check the SOAPAction matches the body for the StAX policy case (#678) coheigea
• (ws-wss4j) branch dependabot/maven/org.apache.kerby-kerb-simplekdc-2.1.2 deleted (was f73f8b702) github-bot
• (ws-wss4j) branch coheigea/stax-policy-operation created (now 1ea5c2cbd) coheigea
  • (ws-wss4j) 01/01: Check the SOAPAction matches the body for the StAX policy case coheigea
• (ws-wss4j) branch 2_4_x-fixes updated: Reject mismatched symmetric key lengths to prevent cross-algorithm key reuse (#677) coheigea
• (ws-wss4j) branch 3_0_x-fixes updated: Reject mismatched symmetric key lengths to prevent cross-algorithm key reuse (#677) coheigea
• (ws-wss4j) branch coheigea/keyutils deleted (was d7f727bc4) coheigea
• (ws-wss4j) branch master updated: Reject mismatched symmetric key lengths to prevent cross-algorithm key reuse (#677) coheigea
• (ws-wss4j) branch 3_0_x-fixes updated: Bump org.apache.kerby:kerb-simplekdc from 2.1.1 to 2.1.2 (#675) coheigea
• (ws-wss4j) branch coheigea/keyutils created (now d7f727bc4) coheigea
  • (ws-wss4j) 01/01: Reject mismatched symmetric key lengths to prevent cross-algorithm key reuse coheigea
• (ws-wss4j) branch master updated: Bump org.apache.kerby:kerb-simplekdc from 2.1.1 to 2.1.2 (#675) coheigea
• (ws-wss4j) branch dependabot/maven/org.apache.kerby-kerb-simplekdc-2.1.2 created (now f73f8b702) github-bot
• (ws-wss4j) branch dependabot/maven/org.apache.maven.plugins-maven-compiler-plugin-3.16.0 created (now 2914c6af9) github-bot
• (ws-axiom) branch dependabot/maven/jetty.version-12.1.13 created (now df1c8bcc8) github-bot
• (ws-axiom) branch dependabot/maven/groovy.version-5.1.2 created (now 269cc06ab) github-bot
• (ws-axiom) branch dependabot/maven/org.slf4j-slf4j-bom-2.0.19 created (now 009d382d7) github-bot
• (ws-axiom) branch dependabot/maven/com.diffplug.spotless-spotless-maven-plugin-3.10.2 created (now 7f4f96d4a) github-bot
• (ws-xmlschema) branch dependabot/maven/org.apache.maven.plugins-maven-surefire-plugin-3.6.0 created (now ed7a5040) github-bot
• (ws-wss4j) branch 3_0_x-fixes updated: Enforce isAllowRSA15KeyTransportAlgorithm for the StAX layer (#674) coheigea
• (ws-wss4j) branch 2_4_x-fixes updated: Enforce isAllowRSA15KeyTransportAlgorithm for the StAX layer (#674) coheigea
• (ws-wss4j) branch coheigea/rsa-1.5-stax deleted (was 328305ed3) coheigea
• (ws-wss4j) branch master updated: Enforce isAllowRSA15KeyTransportAlgorithm for the StAX layer (#674) coheigea
• (ws-wss4j) branch dependabot/maven/org.apache.felix-maven-bundle-plugin-6.1.0 deleted (was b066441b1) github-bot
• (ws-wss4j) branch master updated: Bump org.apache.felix:maven-bundle-plugin from 6.0.2 to 6.1.0 (#659) coheigea
• (ws-axiom) branch dependabot/maven/checkerframework.version-4.2.3 created (now 1bb5e5acd) github-bot
• (ws-axiom) branch dependabot/maven/surefire.version-3.6.0 deleted (was 0ed49af5a) github-bot
• (ws-axiom) branch master updated: Bump surefire.version from 3.5.6 to 3.6.0 veithen
• (ws-axiom) branch dependabot/maven/org.apache.maven.plugins-maven-compiler-plugin-3.16.0 deleted (was 61ec77b11) github-bot
• (ws-axiom) branch dependabot/maven/org.apache.felix-maven-bundle-plugin-6.1.2 deleted (was e248ce1d6) github-bot
• (ws-axiom) branch master updated: Bump org.apache.felix:maven-bundle-plugin from 6.1.0 to 6.1.2 veithen
• (ws-wss4j) branch 2_4_x-fixes updated: Put a max bound on Derived Key offset + length (#669) coheigea
• (ws-wss4j) branch 3_0_x-fixes updated: Only set the StAX RSA 1.5 + UsernameToken No Password properties if we have a corresponding policy (#672) coheigea
• (ws-wss4j) branch 2_4_x-fixes updated: Only set the StAX RSA 1.5 + UsernameToken No Password properties if we have a corresponding policy (#672) coheigea
• (ws-wss4j) branch master updated: Only set the StAX RSA 1.5 + UsernameToken No Password properties if we have a corresponding policy (#672) coheigea
• (ws-wss4j) branch coheigea/policy deleted (was 194f168f1) coheigea
• (ws-wss4j) branch coheigea/policy created (now 194f168f1) coheigea
  • (ws-wss4j) 01/01: Only set the StAX RSA 1.5 + UsernameToken No Password properties if we have a corresponding policy coheigea
• (ws-wss4j) branch coheigea/stax-security-header deleted (was 4226a9925) coheigea
• (ws-wss4j) branch 2_4_x-fixes updated: Align StAX security header processing with the DOM code (#671) coheigea
• (ws-wss4j) branch 3_0_x-fixes updated: Align StAX security header processing with the DOM code (#671) coheigea
• (ws-wss4j) branch master updated: Align StAX security header processing with the DOM code (#671) coheigea
• (ws-wss4j) branch coheigea/stax-security-header created (now 4226a9925) coheigea
  • (ws-wss4j) 01/01: Align StAX security header processing with the DOM code coheigea
• (ws-wss4j) branch 2_4_x-fixes updated: Fix a potential NPE with HSM based Crypto instances in the derived key parser (#670) coheigea
• (ws-wss4j) branch 3_0_x-fixes updated: Fix a potential NPE with HSM based Crypto instances in the derived key parser (#670) coheigea
• (ws-wss4j) branch master updated: Fix a potential NPE with HSM based Crypto instances in the derived key parser (#670) coheigea
• (ws-wss4j) branch coheigea/dkt-npe deleted (was cca9ef27c) coheigea
• (ws-wss4j) branch coheigea/dkt-npe created (now cca9ef27c) coheigea
  • (ws-wss4j) 01/01: Fix a potential NPE with HSM based Crypto instances in the derived key parser coheigea
• (ws-wss4j) branch 3_0_x-fixes updated: Put a max bound on Derived Key offset + length (#669) coheigea
• (ws-wss4j) branch coheigea/max-length-dkt deleted (was dc2b6e08d) coheigea
• (ws-wss4j) branch master updated: Put a max bound on Derived Key offset + length (#669) coheigea
• (ws-wss4j) branch coheigea/max-length-dkt created (now dc2b6e08d) coheigea
  • (ws-wss4j) 01/01: Put a max bound on Derived Key offset + length coheigea
• (ws-axiom) branch dependabot/maven/surefire.version-3.6.0 created (now 0ed49af5a) github-bot
• (ws-wss4j) branch 2_4_x-fixes updated: Put a lower bound of 16 bytes on minimum derived key length (#667) coheigea
• (ws-wss4j) branch coheigea/dk-algorithm-suite deleted (was 243c26e0c) coheigea
• (ws-wss4j) branch 2_4_x-fixes updated: Enable and fix derived key WS-SecurityPolicy validation in the DOM code (#668) coheigea
• (ws-wss4j) branch 3_0_x-fixes updated: Enable and fix derived key WS-SecurityPolicy validation in the DOM code (#668) coheigea
• (ws-wss4j) branch master updated: Enable and fix derived key WS-SecurityPolicy validation in the DOM code (#668) coheigea
• (ws-wss4j) branch coheigea/dk-algorithm-suite created (now 243c26e0c) coheigea
  • (ws-wss4j) 01/01: Enable and fix derived key WS-SecurityPolicy validation in the DOM code coheigea
• (ws-wss4j) branch coheigea/minimum-derived-keylength deleted (was 886483fcf) coheigea
• (ws-wss4j) branch 3_0_x-fixes updated: Put a lower bound of 16 bytes on minimum derived key length (#667) coheigea
• (ws-wss4j) branch master updated: Put a lower bound of 16 bytes on minimum derived key length (#667) coheigea
• (ws-wss4j) branch coheigea/minimum-derived-keylength created (now 886483fcf) coheigea
  • (ws-wss4j) 01/01: Put a lower bound of 16 bytes on minimum derived key length coheigea
• (ws-wss4j) branch 2_4_x-fixes updated: Enforce signature protection as well for SOAP 12 streaming (#666) coheigea
• (ws-wss4j) branch 3_0_x-fixes updated: Enforce signature protection as well for SOAP 12 streaming (#666) coheigea
• (ws-wss4j) branch coheigea/soap12-sigprotection deleted (was bb1fb5933) coheigea
• (ws-wss4j) branch master updated: Enforce signature protection as well for SOAP 12 streaming (#666) coheigea
• (ws-wss4j) branch 2_4_x-fixes updated: updating Junit to 5.14.1 coheigea
• (ws-axiom) branch dependabot/maven/org.apache.felix-maven-bundle-plugin-6.1.2 created (now e248ce1d6) github-bot
• (ws-axiom) branch dependabot/maven/org.apache.maven.plugins-maven-compiler-plugin-3.16.0 created (now 61ec77b11) github-bot
• (ws-wss4j) branch coheigea/soap12-sigprotection created (now bb1fb5933) coheigea
  • (ws-wss4j) 01/01: Enforce signature protection as well for SOAP 12 streaming coheigea
• (ws-wss4j) branch dependabot/github_actions/actions/setup-java-6.0.0 deleted (was 528e2a197) github-bot
• (ws-wss4j) branch coheigea/codeql-group deleted (was cc0a08b7b) coheigea
• (ws-wss4j) branch master updated (52d6ae3dc -> ca3cb9345) coheigea
• (ws-neethi) branch master updated (fd74114 -> 3add82b) coheigea
  • (ws-neethi) 01/01: Merge pull request #83 from apache/coheigea/group-codeql coheigea
• (ws-neethi) branch coheigea/group-codeql deleted (was 04bf26f) coheigea
• (ws-wss4j) branch master updated: Group codeql updates (#665) coheigea
• (ws-wss4j) branch master updated: Bump github/codeql-action/init from 4.37.7 to 4.37.9 (#661) coheigea
• (ws-wss4j) branch coheigea/codeql-group created (now cc0a08b7b) coheigea
  • (ws-wss4j) 01/01: Group codeql updates coheigea
• (ws-wss4j) branch dependabot/github_actions/github/codeql-action/upload-sarif-4.37.9 deleted (was a7123af29) github-bot
• (ws-wss4j) branch dependabot/github_actions/github/codeql-action/init-4.37.9 deleted (was 4ac3e10a6) github-bot
  • (ws-wss4j) branch dependabot/github_actions/github/codeql-action/init-4.37.9 deleted (was 4ac3e10a6) github-bot
• (ws-wss4j) branch master updated: Bump github/codeql-action/upload-sarif from 4.37.7 to 4.37.9 (#663) coheigea
• (ws-wss4j) branch master updated: Bump github/codeql-action/analyze from 4.37.7 to 4.37.9 (#664) coheigea
• (ws-wss4j) branch dependabot/github_actions/github/codeql-action/analyze-4.37.9 deleted (was f40fe0efb) github-bot
• (ws-neethi) branch coheigea/group-codeql created (now 04bf26f) coheigea
  • (ws-neethi) 01/01: Group codeql updates coheigea
• (ws-xmlschema) branch coheigea/codeql-group deleted (was e3ab1751) coheigea
• (ws-xmlschema) branch master updated: Group codeql updates (#142) coheigea
• (ws-xmlschema) branch coheigea/codeql-group created (now e3ab1751) coheigea
  • (ws-xmlschema) 01/01: Group codeql updates coheigea
• (ws-neethi) branch dependabot/github_actions/actions/setup-java-6.0.0 deleted (was c95acbb) github-bot
• (ws-neethi) branch dependabot/github_actions/github/codeql-action/analyze-4.37.9 deleted (was 0ffb803) github-bot
• (ws-neethi) branch master updated (467997b -> fd74114) coheigea
  • (ws-neethi) 01/01: Merge pull request #82 from apache/dependabot/github_actions/github/codeql-action/analyze-4.37.9 coheigea
• (ws-xmlschema) branch master updated (6255190d -> cc33df7f) coheigea
• (ws-neethi) branch dependabot/github_actions/github/codeql-action/init-4.37.9 deleted (was cfbe79e) github-bot
• (ws-xmlschema) branch dependabot/github_actions/actions/setup-java-6.0.0 deleted (was 1d639155) github-bot
• (ws-neethi) branch master updated (7499a68 -> 467997b) coheigea
  • (ws-neethi) 01/01: Merge pull request #81 from apache/dependabot/github_actions/github/codeql-action/init-4.37.9 coheigea
• (ws-xmlschema) branch master updated: Bump github/codeql-action/init from 4.37.8 to 4.37.9 (#141) coheigea
• (ws-xmlschema) branch dependabot/github_actions/github/codeql-action/init-4.37.9 deleted (was d2e776a1) github-bot
• (ws-neethi) branch master updated (0e879e1 -> 7499a68) coheigea
  • (ws-neethi) 01/01: Merge pull request #80 from apache/dependabot/github_actions/actions/setup-java-6.0.0 coheigea
• (ws-xmlschema) branch dependabot/github_actions/github/codeql-action/analyze-4.37.9 deleted (was 3a86cc17) github-bot
• (ws-xmlschema) branch master updated: Bump github/codeql-action/analyze from 4.37.8 to 4.37.9 (#140) coheigea
• (ws-neethi) branch dependabot/github_actions/github/codeql-action/init-4.37.9 created (now cfbe79e) github-bot
• (ws-xmlschema) branch dependabot/github_actions/github/codeql-action/analyze-4.37.9 created (now 3a86cc17) github-bot
• (ws-xmlschema) branch dependabot/github_actions/github/codeql-action/init-4.37.9 created (now d2e776a1) github-bot
• (ws-xmlschema) branch dependabot/github_actions/actions/setup-java-6.0.0 created (now 1d639155) github-bot
• (ws-neethi) branch dependabot/github_actions/github/codeql-action/analyze-4.37.9 created (now 0ffb803) github-bot
• (ws-neethi) branch dependabot/github_actions/actions/setup-java-6.0.0 created (now c95acbb) github-bot
• (ws-wss4j) branch dependabot/github_actions/github/codeql-action/init-4.37.9 created (now 4ac3e10a6) github-bot
• (ws-wss4j) branch dependabot/github_actions/actions/setup-java-6.0.0 created (now 528e2a197) github-bot
• (ws-axiom) branch master updated: Bump org.wildfly:wildfly-preview-dist from 41.0.0.Final to 41.0.1.Final veithen
• (ws-axiom) branch dependabot/maven/org.wildfly-wildfly-preview-dist-41.0.1.Final created (now c3149c2cf) github-bot
• (ws-axiom) branch dependabot/maven/com.diffplug.spotless-spotless-maven-plugin-3.10.1 created (now 808516ceb) github-bot
• (ws-axiom) branch master updated: Remove eclipse-settings-maven-plugin configuration veithen
• (ws-axiom) branch master updated: Bump org.apache.xmlbeans:xmlbeans from 5.3.0 to 5.4.0 veithen
• (ws-axiom) branch dependabot/maven/org.apache.xmlbeans-xmlbeans-5.4.0 deleted (was 45d87e9af) github-bot
• (ws-axiom) branch dependabot/maven/groovy.version-5.1.1 deleted (was a39910d29) github-bot
• (ws-axiom) branch master updated: Bump groovy.version from 5.1.0 to 5.1.1 veithen
• (ws-axiom) branch dependabot/github_actions/actions/setup-java-6 deleted (was ef526b5ad) github-bot
• (ws-axiom) branch master updated: Bump actions/setup-java from 5 to 6 veithen
• (ws-xmlschema) branch coheigea/domsource created (now ac4381bb) coheigea
  • (ws-xmlschema) 01/01: Fix DOMSource correctness bug coheigea
• (ws-xmlschema) branch coheigea/domsource deleted (was ac4381bb) coheigea
• (ws-xmlschema) branch master updated: Fix DOMSource correctness bug (#138) coheigea

• Earlier messages
• Later messages