This space describes xmlsectool v3.0.0, which is no longer supported. Refer to the xmlsectool v4.0.0 space for the currently supported version.
Home
xmlsectool
is a Java command line tool that can download, check well-formedness, schema validity, and signature of an XML document. It can also create enveloped signatures of an XML document.
This space describes the xmlsectool
V3.x series of releases. The current stable release of xmlsectool
is V4.0.0.
As of 2025-04-16, all security maintenance xmlsectool
V3.0.0 and earlier has ceased. V4.0.0 is now the only supported release.
All software, including archived releases, is available from https://shibboleth.net/downloads/tools/xmlsectool/. Each release is accompanied by a detached PGP signature using one of the keys listed in the project's PGP_KEYS file.
All our software is licensed under the Apache 2.0 open source software license.
All deployers should subscribe to the Shibboleth Announcement mailing list. This is where announcements about new releases, end of life of past releases, and security advisories are distributed.
Developer Resources