I've just tag & upload a new release candidate of apache java xmlsec library. This version is very likely to be rename to 1.4 in a week if no bugs are found. You can download it here: http://people.apache.org/~raul/dist/xmlsec-1.4.RC2a.jar
The changes from last announced version are: New in 1.4RC2a Fixed bug 40783 New in 1.4RC2 Fixed bug 40512. Made TransformSPI backward compatible. Now it is possible to use implementations for the >1.3 versions paying the performance hit of the old implementation. Fix a small & unneeded java 1.4 dependecy. KeyResolver & ResourceResolver can work like <1.3 mode when used with old implementations. Regards, -- http://r-bg.com