Apache Rampart/C 1.3.0 Released!

Apache Rampart/C 1.3.0 released today. You can find the release note below:

We are pleased to announce the release of Apache Rampart/C version 1.3.0.
You can download this release from
http://ws.apache.org/rampart/c/download.cgi

Key features
-------------
1. Ability to send and verify UsernameTokens with
- Username and PlainText password
- Username and Digested password

2. Ability to send Timestamp tokens

3. SOAP message encryption
- With derived key support for improved security
- Symmetric and Asymmetric modes of operations
- Support for AES and Tripple DES encryption
- Signature encryption
- Keys encryption

4. SOAP message signature
- XML signature with RSA-SHA1
- Message authentication with HMAC-SHA1
- Signature confirmation support
- SOAP Header signing

5. WS-Security Policy (spec 1.1 & spec 1.2) based configurations
- Support for both Symmetric as well as Asymmetric policy bindings
- Support for different modes of key identifiers
- Support for different algorithm suites
[Basic128, Basic 192, Basic256, TrippleDES, Basic128Rsa15,
Basic192Rsa15,Basic256Rsa15, TripleDesRsa15]
- Support for IssuedToken assertion in client side.
- Support for SAMLToken assertion.

6. Replay detection support
- Easy to use built-in replay detection module
- Ability to deploy a customized replay detection module

7. Different protection orders
- Encrypt before signing
- Sign before encrypting

8. Extensible modules
- Password callback module
- Authentication module
- Credentials module
- Replay detection module
- Secure conversation token module

9. Keys management
- Support for X509 token profile
- Support for Key identifiers, Thumb prints, Issuer/Serial pairs,
Embedded and Direct references
- Support for PKCS12 keystore

10. WS-Secure Conversation Language support
- Establishing Security Context and thereby maintaining a session
- Per message key derivation
- Support for stored securtiy context token
- Rahas module support to give STS functionality to a service

11. WS-Trust Language support
- Security Token Services (STS)
- STS Client
- Server and Client entrophy support

12. SAML Support
- Support for Creation and Processing of SAML Core 1.1 Assertions
- SAML Token as Sign Supporting Token
- Signing and Encryption with SAML

10. Other
- Easy to use deployment scripts
- A comprehensive set of samples

Major Changes Since Last Release
------------------------------

--
1. WS-Secure Conversation Language support
2. WS-Trust Language support
3. Rahas module to give STS support to a service
4. PKCS12 Keystore support
5. Security Policy 1.2 support
6. Memory leak fixes
7. Many bug fixes

Apache Rampart/C 1.3.0 works with the Apache Axis2/C 1.6.0
http://ws.apache.org/axis2/c/download.cgi

Issues can be reported here.
http://issues.apache.org/jira/browse/RAMPARTC

We welcome your early feedback.
Thank you for your interest in Rampart/C.

--Apache Rampart/C Team--
http://ws.apache.org/rampart/c/

Axis2/C 1.6.0 Released

Axis2/C 1.6.0 is released today. Release note is given below;

We are pleased to announce the release of Apache Axis2/C version 1.6.0.
You can download this release from
http://ws.apache.org/axis2/c/download.cgi

Key Features
============

1. Support for one-way messaging (In-Only) and
request response messaging (In-Out)
2. Client APIs : Easy to use service client API and
more advanced operation client API
3. Transports supported : HTTP
* Inbuilt HTTP server called simple axis server
* Apache2 httpd module called mod_axis2 for server side
* IIS module for server side. Supports IIS 5.1, 6 and 7.
* Client transport with ability to enable SSL support
* Basic HTTP Authentication
* Digest HTTP Authentication
* libcurl based client transport
* CGI interface
4. Transports supported : HTTPS
* HTTPS Transport implementation using OpenSSL
5. Transports supported : TCP
* for both client and server side
6. Transports supported : AMQP
* AMQP Transport implementation using Apache Qpid
* Available only in Linux platforms.
* At an experimental stage. Please refer the INSTALL file to
build this.
7. Transport proxy support (HTTP)
* Proxy Authentication (Basic/Digest)
8. Module architecture, mechanism to extend the SOAP processing
model.
9. WS-Addressing support, both the submission (2004/08) and
final (2005/08) versions, implemented as a module.
10. MTOM/XOP support.
11. AXIOM, an XML object model optimized for SOAP 1.1/1.2 messages;
This has complete XML infoset support.
12. XPath support for Axiom XML Object model
13. XML parser abstraction
* Libxml2 wrapper
* Guththila pull parser support
14. Both directory based and archive based deployment models for
deploying services and modules
15. Description hierarchy providing access to static data of Axis2/C
runtime (configuration, service groups, services, operations and
messages)
16. Context hierarchy providing access to dynamic
Axis2/C runtime information (corresponding contexts to map to
each level of description hierarchy)
17. Message receiver abstraction
* Inbuilt raw XML message receiver
18. Code generation tool for stub and skeleton generation for a given
WSDL (based on Java tool)
* Axis Data Binding (ADB) support
19. REST support (more POX like) using HTTP POST, GET, HEAD, PUT and
DELETE
* Support for RESTful Services
20. Comprehensive documentation
* Axis2/C Manual
21. WS-Policy implementation called Neethi/C, with WS-SecurityPolicy
extension

Major Changes Since Last Release
==============================

==

1. XPath support for Axiom XML object model
2. CGI support
3. Improvements to MTOM to send, receive very large attachments
4. Improvements to AMQP transport
5. Improvements to WSDL2C codegen tool
6. Many bug fixes.
7. Memory leak fixes

We welcome your early feedback on this implementation.

Thanks for your interest in Axis2/C !!!

-- Apache Axis2/C Team --

Memory Handling conventions in Axis2/C

Memory Handling conventions in Axis2/C

Axis2/C Performance

Axis2/C benchmark performance test results are published here

Axis2/C 1.5 Released.

I am very happy to see that Axis2/C team has done yet another release yesterday. In my view 1.5 is a very important release because it has come a long way in terms of stability and performance through it's frequent previous releases.

You can download it from here

New Features.

1. Support for one-way messaging (In-Only) and request response messaging (In-Out)
2. Client APIs: Easy to use service client API and more advanced operation client API
3. Transports supported: HTTP
   • Inbuilt HTTP server called simple axis server
   • Apache2 httpd module called mod_axis2 for server side
   • IIS module for server side. Supports IIS 5.1, 6 and 7
   • Client transport with ability to enable SSL support
   • Basic HTTP Authentication
   • AMQP Transport based on Apache Qpid (Experimental)
   • 
     
   • libcurl based client transport
4. Module architecture, mechanism to extend the SOAP processing model
5. WS-Addressing support, both the submission (2004/08) and final (2005/08) versions, implemented as a module
6. MTOM/XOP support
7. AXIOM, an XML object model optimized for SOAP 1.1/1.2 messages; This has complete XML infoset support
8. XML parser abstraction
   • Libxml2 wrapper
   • Guththila pull parser support
9. Both directory based and archive based deployment models for deploying services and modules
10. Description hierarchy providing access to static data of Axis2/C runtime (configuration, service groups, services, operations and messages)
11. Context hierarchy providing access to dynamic Axis2/C runtime information(corresponding contexts to map to each level of description hierarchy)
12. Message receiver abstraction
    • Inbuilt raw XML message receiver
13. Code generation tool for stub and skeleton generation for a given WSDL (based on Java tool)
    • Axis Data Binding (ADB) support
14. Transport proxy support
15. REST support (more POX like) using both HTTP POST and GET
16. Comprehensive documentation
    • Axis2/C Manual
17. WS-Policy implementation called Neethi/C, with WS-SecurityPolicy extension
18. TCP Transport, for both client and server side

Changes since last release.

1. AMQP Transport support with Apache Qpid. (At an experimental stage and not working under Windows)
2. Modifications to IIS Module to support IIS 6 & 7.
3. Added a JScript file to automate IIS module registry configuration
4. Specifying the MEP in the services.xml for non in-out messages made mandatory
5. Improved the in-only message handling
6. Improvements to Guthtila for better performance
7. Improvements to TCPMon tool
8. Memory leak fixes
9. Many bug fixes

Benchmark testing tools for Web Services

Useful tools for benchmarking web services. I have explained here some tools I played with for benchmarking Axis2/C.

WSO2 Web Services Framework for PHP 1.3.0 Released

On 22 May 2008 Wso2 WSF/C team released version 1.3.0 of WSO2 WSF/PHP Release. Following is the release note.



WSO2 Web Services Framework for PHP (WSO2 WSF/PHP), is an open source,
enterprise grade, PHP extension for providing and consuming Web Services
in PHP. WSO2 WSF/PHP is a complete solution for building and deploying
Web services and is the only PHP extension with the widest range of
WS-* specification implementations.

It's Key features include, secure services and clients with WS-Security
support, binary attachments with MTOM, automatic WSDL generation (code
first model), WSDL mode for both services and clients (contract first
model) and interoperability with .NET and J2EE.

You can download the release from:
http://wso2.org/downloads/wsf/php

Project home page:
http://wso2.org/projects/wsf/php

------------
Key Features
============

1. Client API to consume Web services
* WSMessage class to handle message level options
* WSClient class with both one way and two way service invocation
support
* Option of using functions in place of object oriented API with
ws_request

2. Service API to provide Web services
* WSMessage class to handle message level options
* WSService class with support for both one way and two way
operations
* Option of using functions in place of object oriented API with
ws_reply

3. Attachments with MTOM
* Binary optimized
* Non-optimized (Base64 binary)

4. WS-Addressing
* Version 1.0
* Submission

5. WS-Security
* UsernameToken and Timestamp
* Encryption
* Signing
* WS-SecurityPolicy based configuration

6. WS-Reliable Messaging
* Single channel two way reliable messaging

7. WSDL Generation for Server Side
* WSDL generation based on annotations and function signatures,
and serving on ?wsdl or ?wsdl2 requests

8. WSDL mode support for both client and server side
* Write services and client based on a given WSDL
* WS-Addressing and WS-SecurityPolicy is supported in WSDL mode

9. REST Support
* Expose a single service script both as SOAP and REST service

10. Provide easy to use classes for common services
* Consume some well known services such as Yahoo search and Flickr
and Amazon services using predefined classes

11. wsdl2php.php script. This script can generate PHP classes for
services and clients for a given WSDL to be used with WSDL Mode .

--------------------------------
Major Changes Since Last Release
================================
1. Schema constructs support improvements for WSDL mode including
SimpleType restricitons, ComplexType restrictions/extensions and
attributes.
2. WSDL Import support.
3. Support for WSDLs with multiple bindings, API is provided to pick
the preferred bindings.
4. wsdl2php code generation improvements to support the improvements
done in WSDL mode.
5. HTTP Basic Authentication Support added.
6. SOAP Messages with Attachments support (SWA) added.
7. Custom Security token support added.

-------------------
Reporting Problems
===================
Issues can be reported using the public JIRA available at:
https://wso2.org/jira/browse/WSFPHP

------------
Contact Us
============

Please subscribe to our user or developer mailing lists. For details on
how to subscribe please visit: http://wso2.org/mail#wsfphp

We welcome your early feedback on this implementation.
Thank you for your interest in WSO2 WSF/PHP.

-- WSO2 WSF/PHP Team --