Mailing-List: contact security-dev-help@xml.apache.org; run by ezmlm
Precedence: bulk
Reply-To: security-dev@xml.apache.org
Received-SPF: pass (athena.apache.org: domain of jdmarshall@gmail.com
 designates 64.233.184.228 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
        b=EaBwmsmwahbJLS+eV26nXa2b/66buxw1x9Z5hdeQetbO10V3ohAZU9PIUdmYcp4KtfSVjmdJ42BehTXy5qL8wdCpxdzJOBBGGvG7v2VVHLMuK9OnEsNSoK/RBi1KEd1oFOEZ6fPRyJocxKOkad0rGkXJXQ3qBnRQQ+LjR2GZgUw=
Message-ID: <3cf41bb90804220112l5b0f10a2te18ea7b879b10c85@mail.gmail.com>
Date: Tue, 22 Apr 2008 01:12:03 -0700
From: "jason marshall" <jdmarshall@gmail.com>
To: security-dev@xml.apache.org
Subject: Re: 1.4.2 beta2 release
In-Reply-To: <4803AA17.7060001@sun.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: <4803AA17.7060001@sun.com>

I'm a little troubled by the fact that after all this time, the
download and install instructions still fail to mention the ten or so
libraries you have to go find on your own in order to get the ant
script to work.

Specifically:

The website doesn't mention them at all.  It says download the source
zip and run ant.  Um, no, that won't work, you'll just get a compile
error.

Alternatively, the INSTALL file still refers to XML-Sec 1.1, which
would be a little offputting.  It then goes on to describe which
libraries you'll need, but then doesn't mention what to call them.
Now I can read build.xml files just fine, but are you assuming that
understanding them is a prerequisite?

You fetch Bouncy Castle for people (which I don't think is entirely
legal, is it?), but you don't fetch the others?  Why the dichotomy?
Or to say it another way, why do you need to circumvent export on an
export controlled library, when you're not exporting any other
libraries?

Thanks,
Jason Marshall


On Mon, Apr 14, 2008 at 12:01 PM, Sean Mullan <Sean.Mullan@sun.com> wrote:
> Hi all,
>
>  I have uploaded a jar file for the 1.4.2 beta2 release. Please download
>  it and test it and report any bugs or problems. In about 2 weeks, we
>  will take a vote to see if we should have another beta release or if it
>  is ready for a release candidate.
>
>  http://people.apache.org/~mullan/dist/xmlsec-1.4.2beta2.jar
>
>  Thanks!
>  Sean
>


-- 
- Jason