<div class="colwrapper skeleton" id="breadcrumb-container"></div>

Download DSS 5.13.RC1 

Here, you can download the latest version of the Digital Signature Services open-source library released in November 2023. You can read more about DSS and how it can help you here.

Source code is available in .zip and tar.gz

New features

  • [DSS-2511] XAdES manifest signature : mime type of referenced entries
  • [DSS-2775] JAdES please add support for x5u header
  • [DSS-2972] Add optional check verifying a presence and validity of a signature timestamp
  • [DSS-3024] XAdES : add support of EdDSA algo
  • [DSS-3064] Add docker compose file to demonstrations project
  • [DSS-3069], [DSS-3120], [DSS-3146] Introduce offline PKI Factory module to DSS
  • [DSS-3090] Add support of XML Evidence Recods

Improvements

  • [DSS-2517] XAdES: dss doesn't validate xades:DataObjectFormat
  • [DSS-2913] ASiC : introduce CONTAINER_TIMESTAMP type
  • [DSS-3017] Add links to referenced standards within cookbook
  • [DSS-3044] Add qualification messages to HTML/PDF simple certificate reports
  • [DSS-3045] TLValidationJob : extract OtherTSLPointer information to a TL DTO
  • [DSS-3056] Add a possibility to define a wildcard within proxy configuration
  • [DSS-3060] Align implementation per TS 119 615 v1.2.1
  • [DSS-3082] OCSP fails when server does not support "nonce" extension
  • [DSS-3096] Make DSSErrorHandlerAlert to retrieve column/line numbers for an error
  • [DSS-3098] Process detached timestamp validation with lowest POE time
  • [DSS-3099] Add rotation processing on add an empty signature field
  • [DSS-3110] Ease signature policy validation constraints
  • [DSS-3114] Add support of NoRotate flag on existing annotation position extraction
  • [DSS-3158] OCSP error handling
  • [DSS-3161] Improve ASiC container type determination

Bug fixes / Issues

  • [DSS-2994] Name restriction on an unsupported name form
  • [DSS-3004] DSS demo bundle webapp startup time
  • [DSS-3036] Utils.fromBase64 condition is not covered
  • [DSS-3067] Problem iwth the certificate validation tool at DSS/webapp-demo/certificate-validation
  • [DSS-3076] OnlineOCSPSource and nonce length
  • [DSS-3083] Default SecureRandomNonceSource should generate nonces of at least 16 octets
  • [DSS-3089] Wrong Javadoc for eu.europa.esig.dss.enumerations.Indication.TOTAL_FAILED
  • [DSS-3097] ManifestFilePresentCheck shall allow manifest presence for ASIC-S container
  • [DSS-3105] esig-dss generates an invalid enveloped XML signature if the origin XML has comments before the root node
  • [DSS-3106] esig-dss generates an invalid enveloped XML signature if the origin XML is encoded in latin-1
  • [DSS-3111] PAdES : improve LT-level validation
  • [DSS-3113] NPE in Diagnostic data builder
  • [DSS-3117] Calls that utilize the ZipUtils class is not thread safe
  • [DSS-3119] XAdES Enveloping signature does not incorporate comments within root element
  • [DSS-3141] esig-dss generates an invalid enveloped XML signature when using URI "#xpointer(/)" if the origin XML has comments
  • [DSS-3148] Wrong RefURI check
  • [DSS-3162] ASiC-S : SignedFilesPresentCheck verifies across all files, while should check only root level files

Tasks / Other

  • [DSS-2898] Create a key store TSPSource implementation
  • [DSS-3009] Upgrade BouncyCastle
  • [DSS-3042] Fix TrustService element wording in Diagnostic Data XSD
  • [DSS-3061] Update ETSI validation report per TS 119 102-2 v1.4.1
  • [DSS-3087] Update maven-jaxb plugin to version 2.x
  • [DSS-3163] Upgrade to OpenPdf 1.3.32