Home
xmlsectool is a Java command line tool that can download, check well-formedness, schema validity, and signature of an XML document. It can also create enveloped signatures of an XML document.
This space describes the xmlsectool V3.x series of releases. The current stable release of xmlsectool is V3.0.0.
As of December 31, 2020, all security maintenance for the previous stable release xmlsectool V2.0.0 has ceased. V3.0.0, described here, is now the only supported release.
All software, including archived releases, is available from https://shibboleth.net/downloads/tools/xmlsectool/. Each release is accompanied by a detached PGP signature using one of the keys listed in the project's PGP_KEYS file.
All our software is licensed under the Apache 2.0 open source software license.
All deployers should subscribe to the Shibboleth Announcement mailing list. This is where announcements about new releases, end of life of past releases, and security advisories are distributed.
Developer Resources