v1.6.0

• #175 - Support validation of signatures without KeyInfo. In this case, if the SigningCertificate property contains a single reference, it will be used to select the signing certificate during validation.
• #207 - Update Apache Santuario (xmlsec) to version 2.2.0.
  • This version of xmlsec includes some important bugfixes and a couple of new features that xades4j should be able to leverage, namely support for RSASSA-PSS with parameters and support for embedding elliptic curve public keys in the KeyValue element (allows using BasicSignatureOptions.includePublicKey() with EC keys). For more information see Apache Santuario release notes.
  • Unfortunately, this version of xmlsec introduces a breaking change on the API (not behavior) due to a refactoring of ResourceResolvers. For that reason, the following two methods of xades4j have changed in this release to accept ResourceResolverSpi instead of ResourceResolver. Changes for consumers are minimal; just use Spi classes directly instead of wrapping them in a ResourceResolver.
    • SignedDataObjects.withResourceResolver
    • SignatureSpecificVerificationOptions.useResourceResolver
• #212 - Add JAXB dependencies.