Re: Plans for release 4.0.4?

2024-02-13 Thread Peter Palaga
Thanks, great to hear that, Andriy. It would be great if we could get https://github.com/apache/cxf/pull/1660 merged in some form before the release. The main motivation is to be able to run CXF on FIPS-enabled systems. If the customized algo suite, that the PR proposes, is questionable, I'd b

Re: [PR] Introduction of CustomerizedAlgorithmSuite (CXF-8971) [cxf]

2024-02-13 Thread via GitHub
JiriOndrusek commented on PR #1660: URL: https://github.com/apache/cxf/pull/1660#issuecomment-1941354036 PR requires update of **wss4j** to **3.0.3** before merging -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the U

Re: Plans for release 4.0.4?

2024-02-13 Thread Jiri Ondrusek
Hi, just for your information, the PR (https://github.com/apache/cxf/pull/1660) requires version of wss4f to be 3.0.3 (to contain https://issues.apache.org/jira/browse/WSS-709) Best regards, Jiri On Tue, Feb 13, 2024 at 10:53 AM Peter Palaga wrote: > Thanks, great to hear that, Andriy. > > It

[PR] CXF-8977: add support for MTOM Serialization Policy Assertion 1.1 [cxf]

2024-02-13 Thread via GitHub
daspilker opened a new pull request, #1685: URL: https://github.com/apache/cxf/pull/1685 (no comment) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail

Re: Plans for release 4.0.4?

2024-02-13 Thread Freeman Fang
+1 to release Apache CXF 4.0.4 @Colm O hEigeartaigh Any chance we could have a WSS4J 3.0.3 release soon? Thanks! Freeman On Tue, Feb 13, 2024 at 7:15 AM Jiri Ondrusek wrote: > Hi, > > just for your information, the PR (https://github.com/apache/cxf/pull/1660 > ) > requires version of wss4f to

Re: Plans for release 4.0.4?

2024-02-13 Thread Colm O hEigeartaigh
Yes, I'll call a vote today on WSS4J 3.0.3. Colm. On Tue, Feb 13, 2024 at 2:28 PM Freeman Fang wrote: > > +1 to release Apache CXF 4.0.4 > > @Colm O hEigeartaigh Any chance we could have a WSS4J 3.0.3 release soon? > > Thanks! > Freeman > > On Tue, Feb 13, 2024 at 7:15 AM Jiri Ondrusek wrote: >

Re: [PR] Introduction of CustomerizedAlgorithmSuite (CXF-8971) [cxf]

2024-02-13 Thread via GitHub
JiriOndrusek commented on code in PR #1660: URL: https://github.com/apache/cxf/pull/1660#discussion_r1488064493 ## rt/ws/security/src/main/java/org/apache/cxf/ws/security/policy/custom/DefaultAlgorithmSuiteLoader.java: ## @@ -53,6 +59,8 @@ public AlgorithmSuite getAlgorithmSuite

Re: [PR] Introduction of CustomerizedAlgorithmSuite (CXF-8971) [cxf]

2024-02-13 Thread via GitHub
JiriOndrusek commented on PR #1660: URL: https://github.com/apache/cxf/pull/1660#issuecomment-1941774951 @ffang I removed the null AlgorithmSuiteType from the suite loader. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and u

Re: [PR] Introduction of CustomerizedAlgorithmSuite (CXF-8971) [cxf]

2024-02-13 Thread via GitHub
ffang commented on code in PR #1660: URL: https://github.com/apache/cxf/pull/1660#discussion_r1480553067 ## rt/ws/security/src/main/java/org/apache/cxf/ws/security/policy/custom/DefaultAlgorithmSuiteLoader.java: ## @@ -140,9 +164,116 @@ protected void parseCustomAssertion(Assert

Re: [PR] Introduction of CustomerizedAlgorithmSuite (CXF-8971) [cxf]

2024-02-13 Thread via GitHub
ffang commented on PR #1660: URL: https://github.com/apache/cxf/pull/1660#issuecomment-1941778643 > @ffang I removed the null AlgorithmSuiteType from the suite loader. Thanks @JiriOndrusek ! -- This is an automated message from the Apache Git Service. To respond to the message, plea

Re: [PR] Introduction of CustomerizedAlgorithmSuite (CXF-8971) [cxf]

2024-02-13 Thread via GitHub
JiriOndrusek commented on code in PR #1660: URL: https://github.com/apache/cxf/pull/1660#discussion_r1488072808 ## rt/ws/security/src/main/java/org/apache/cxf/ws/security/policy/custom/DefaultAlgorithmSuiteLoader.java: ## @@ -140,9 +164,116 @@ protected void parseCustomAssertion

Re: Plans for release 4.0.4?

2024-02-13 Thread Freeman Fang
Thanks Colm! On Tue, Feb 13, 2024 at 10:18 AM Colm O hEigeartaigh wrote: > Yes, I'll call a vote today on WSS4J 3.0.3. > > Colm. > > On Tue, Feb 13, 2024 at 2:28 PM Freeman Fang > wrote: > > > > +1 to release Apache CXF 4.0.4 > > > > @Colm O hEigeartaigh Any chance we could have a WSS4J 3.0.3 r

Re: Plans for release 4.0.4?

2024-02-13 Thread Colm O hEigeartaigh
Sorry it turns out I'll need to get Santuario 3.0.4 out first. Do I have time to do this and WSS4J before the next CXF release? Colm. On Tue, Feb 13, 2024 at 3:28 PM Freeman Fang wrote: > > Thanks Colm! > > On Tue, Feb 13, 2024 at 10:18 AM Colm O hEigeartaigh > wrote: >> >> Yes, I'll call a vo

Re: Plans for release 4.0.4?

2024-02-13 Thread Freeman Fang
Thanks for the update Colm! Please go ahead to release Santuario then WSS4J, and I believe the next CXF release needs those changes anyway. Best Regards Freeman On Tue, Feb 13, 2024 at 10:51 AM Colm O hEigeartaigh wrote: > Sorry it turns out I'll need to get Santuario 3.0.4 out first. Do I > h

Re: Plans for release 4.0.4?

2024-02-13 Thread Andrey Redko
Thanks Colm! Best Regards, Andriy Redko On Tue, Feb 13, 2024, 10:18 AM Colm O hEigeartaigh wrote: > Yes, I'll call a vote today on WSS4J 3.0.3. > > Colm. > > On Tue, Feb 13, 2024 at 2:28 PM Freeman Fang > wrote: > > > > +1 to release Apache CXF 4.0.4 > > > > @Colm O hEigeartaigh Any chance

Re: Plans for release 4.0.4?

2024-02-13 Thread Andriy Redko
Hi Colm, I think it would be good to have a release soon-ish, but by and large, I don't think we have hard deadline for it, please feel free to proceed as per your judgement. Thank you.   Best Regards,     Andriy Redko  > Sorry it turns out I'll need to get Santuario 3.0.4 out first. Do I > ha

[PR] Bump cxf.netty.version from 4.1.106.Final to 4.1.107.Final [cxf]

2024-02-13 Thread via GitHub
dependabot[bot] opened a new pull request, #1686: URL: https://github.com/apache/cxf/pull/1686 Bumps `cxf.netty.version` from 4.1.106.Final to 4.1.107.Final. Updates `io.netty:netty-codec-http` from 4.1.106.Final to 4.1.107.Final Commits https://github.com/netty/netty/commit/

[PR] Bump cxf.brave.version from 5.17.1 to 6.0.1 [cxf]

2024-02-13 Thread via GitHub
dependabot[bot] opened a new pull request, #1687: URL: https://github.com/apache/cxf/pull/1687 Bumps `cxf.brave.version` from 5.17.1 to 6.0.1. Updates `io.zipkin.brave:brave` from 5.17.1 to 6.0.1 Release notes Sourced from https://github.com/openzipkin/brave/releases";>io.zipkin.

[PR] Bump cxf.aspectj.version from 1.9.21 to 1.9.21.1 [cxf]

2024-02-13 Thread via GitHub
dependabot[bot] opened a new pull request, #1688: URL: https://github.com/apache/cxf/pull/1688 Bumps `cxf.aspectj.version` from 1.9.21 to 1.9.21.1. Updates `org.aspectj:aspectjweaver` from 1.9.21 to 1.9.21.1 Release notes Sourced from https://github.com/eclipse/org.aspectj/releas