[
https://issues.apache.org/jira/browse/RAMPART-452?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17605473#comment-17605473
]
Robert Lazarski commented on RAMPART-452:
-----------------------------------------
A Rampart release is a goal by the end of the year.
The problem is that there are no committers AFAIK using Rampart, so it relies
on the Axis team as a whole and we are all volunteers.
A lot of updates need to happen. I am expecting my time to free up soon so I
can help but it is hard to say for sure exactly when.
> Rampart Dependency on Outdated Version of WSS4J 1.6.x
> -----------------------------------------------------
>
> Key: RAMPART-452
> URL: https://issues.apache.org/jira/browse/RAMPART-452
> Project: Rampart
> Issue Type: Bug
> Affects Versions: 1.7.1
> Reporter: Troy Harris
> Priority: Major
> Fix For: 1.8.0
>
>
> Rampart depends on WSS4J 1.6.x which was released over 7 years ago. This
> creates a problem for projects that use related technologies such as Spring.
> A project that uses the current version of Spring 5.3.x will need Spring-WS
> 3.x or higher for full compatibility. Spring-WS 3.x requires WSS4J 2.x.
> which is a conflict with the version of WSS4J requires by Rampart.
> For many developers using the newer versions of these libraries is a
> requirement due to security bugs.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: java-dev-unsubscr...@axis.apache.org
For additional commands, e-mail: java-dev-h...@axis.apache.org
