xmlsectool is a Java command line tool that can download, check well-formedness, schema validity, and signature of an XML document. It can also create enveloped signatures of an XML document.
This space describes the xmlsectool V3.x series of releases. The current stable release of xmlsectool is V3.0.0.
The previous stable release of xmlsectool is V2.0.0. As of December 31, 2020, all security maintenance for xmlsectool V2.0.0 will cease. At that point V3.0.0, described here, will become the only supported release.
All software, including archived releases, is available from https://shibboleth.net/downloads/tools/xmlsectool/. Each release is accompanied by a detached PGP signature using one of the keys listed in the project's PGP_KEYS file.
All our software is licensed under the Apache 2.0 open source software license.
All deployers should subscribe to the Shibboleth Announcement mailing list. This is where announcements about new releases, end of life of past releases, and security advisories are distributed.
