This space describes xmlsectool v3.0.0, which is no longer supported. Refer to the xmlsectool v4.0.0 space for the currently supported version.

Home

xmlsectool is a Java command line tool that can download, check well-formedness, schema validity, and signature of an XML document. It can also create enveloped signatures of an XML document.

This space describes the xmlsectool V3.x series of releases. The current stable release of xmlsectool is V4.0.0.

As of 2025-04-16, all security maintenance xmlsectool V3.0.0 and earlier has ceased. V4.0.0 is now the only supported release.

All software, including archived releases, is available from https://shibboleth.net/downloads/tools/xmlsectool/. Each release is accompanied by a detached PGP signature using one of the keys listed in the project's PGP_KEYS file.

All our software is licensed under the Apache 2.0 open source software license.

All deployers should subscribe to the Shibboleth Announcement mailing list. This is where announcements about new releases, end of life of past releases, and security advisories are distributed.