The following page is a manifest of all libraries used in SignServer, including licenses. 

Jars-list

*These jars have been patched.

Library Name

Version

Project

DeployTools-Ant

2.2.1

SignServer

DeployTools-CLI

2.2.1

SignServer

DeployTools-Common

2.2.1

SignServer

DeployTools-Maven

2.2.1

SignServer

FastInfoset

1.2.15

Hibernate dependencies

SparseBitSet

1.2

SparseBitSet

antlr

2.7.7

Hibernate dependencies

aopalliance

1.0

AOP Alliance

apksig

30.0.2-signserver5-1*

Android

asm

9.4

ASM

bcpg

jdk18on-1.78

Bouncy Castle

bcpkix

jdk18on-1.78

Bouncy Castle

bcprov

jdk18on-1.78

Bouncy Castle

bcutil

jdk18on-1.78

Bouncy Castle

byte-buddy

1.10.10

Hibernate dependencies

cert-cvc

1.4.6

EJBCA

/ext/cesecore-ce/cesecore-common

7.0.0.1signserver6.2.0*

CESeCore

/ext/cesecore-ce/cesecoreejb

7.0.0.1

CESeCore

/ext/cesecore-ce/cesecore-entity

7.0.0.1

CESeCore

/ext/cesecore-ce/cesecore-interfaces

7.0.0.1

CESeCore

cesecore-common

7.0.0.1signserver6.2.0*

CESeCore

cesecore-ejb

7.0.0.1

CESeCore

cesecore-entity

7.0.0.1

CESeCore

cesecore-interfaces

7.0.0.1

CESeCore

classmate

1.5.1

Hibernate dependencies

commons-cli

1.4

Apache Commons

commons-codec

1.15

Apache Commons

commons-collections

3.2.2

Apache Commons

commons-collections

4-4.4

Apache Commons

commons-configuration

1.10

Apache Commons

commons-digester

2.1

Apache Commons

commons-el

1.0

Apache Commons

commons-fileupload

1.5

Apache Commons

commons-io

2.8.0

Apache Commons

commons-lang

2.6

Apache Commons

commons-lang3

3.11

Apache Commons

commons-logging

1.2

Apache Commons

commons-math3

3.6.1

Apache Commons

commons-net

3.9.0

Apache Commons

cxf-core

3.5.8

Apache CXF

cxf-rt-bindings-soap

3.5.8

Apache CXF

cxf-rt-databinding-jaxb

3.5.8

Apache CXF

cxf-rt-frontend-jaxws

3.5.8

Apache CXF

cxf-rt-frontend-simple

3.5.8

Apache CXF

cxf-rt-transports-http

3.5.8

Apache CXF

cxf-rt-transports-http-jetty

3.5.8

Apache CXF

cxf-rt-wsdl

3.5.8

Apache CXF

dnsjava

3.5.3

DNS Java

dnssecjava

1.2.0

DNSSEC Java

dom4j

2.1.3

Hibernate dependencies

dss-alert

5.9

DSS

dss-cades

5.9

DSS

dss-crl-parser

5.9signserver6.2.0*

DSS

dss-crl-parser-x509crl

5.9

DSS

dss-detailed-report-jaxb

5.9

DSS

dss-diagnostic-jaxb

5.9

DSS

dss-document

5.9

DSS

dss-enumerations

5.9

DSS

dss-i18n

5.9

DSS

dss-jaxb-common

5.9

DSS

dss-jaxb-parsers

5.9

DSS

dss-model

5.9signserver6.2.0*

DSS

dss-pades

5.9

DSS

dss-pades-openpdf

5.9

DSS

dss-policy-jaxb

5.9

DSS

dss-service

5.9

DSS

dss-simple-certificate-report-jaxb

5.9

DSS

dss-simple-report-jaxb

5.9

DSS

dss-spi

5.9signserver6.2.0*

DSS

dss-token

5.9

DSS

dss-utils

5.9

DSS

dss-utils-apache-commons

5.9

DSS

dss-xades

5.9

DSS

geckodriver

0.21.0

Geckodriver

hamcrest-core

1.3

Hamcrest

jakarta.jakartaee-api

8.0.0

Jakarta EE

junit

4.12

JUnit

selenium-server-standalone

3.13.0

Selenium

failureaccess

1.0.1

Guava

geronimo-osgi-locator

1.1

Apache Geronimo

groovy

4.0.12

Groovy

groovy-json

4.0.12

Groovy

guava

32.1.2

Guava

guice

5.1.0

Guice

guice-multibindings

4.2.3

Guice

hamcrest

2.2

Hamcrest

hibernate-commons-annotations

5.1.0

Hibernate

hibernate-core

5.4.21

Hibernate

httpclient

4.5.14

Apache HttpComponents

httpcore

4.4.16

Apache HttpComponents

httpmime

4.5.14

Apache HttpComponents

istack-commons-runtime

3.0.8

Hibernate dependencies

jacknji11

1.2.7

JackNJI11

jackson-annotations

2.12.6

Jackson

jackson-core

2.12.6

Jackson

jackson-databind

2.12.7.1

Jackson

jackson-module-jaxb-annotations

2.12.6

Jackson

jakarta.activation

1.2.2

Jakarta EE

jakarta.jakartaee-api

8.0.0

Jakarta EE

jakarta.jws-api

2.1.0

Jakarta EE

jakarta.xml.bind-api

2.3.3

Jakarta EE

jakarta.xml.soap-api

1.4.2

Jakarta EE

jakarta.xml.ws-api

2.3.3

Jakarta EE

jandex

2.1.3

Hibernate dependencies

javassist

3.24.0-GA

Hibernate dependencies

javax.activation-api

1.2.0

Hibernate dependencies

javax.persistence-api

2.2

Hibernate dependencies

jaxb-core

3.0.2

JAXB

jaxb-impl

3.0.2

JAXB

jaxb-runtime

2.3.3

Hibernate dependencies

jboss-logging

3.3.2

Hibernate dependencies

jboss-transaction-api_1.2_spec

1.1.1

Hibernate dependencies

jetty-http

9.4.51.v20230217

Eclipse Jetty

jetty-io

9.4.51.v20230217

Eclipse Jetty

jetty-server

9.4.51.v20230217

Eclipse Jetty

jetty-util

9.4.51.v20230217

Eclipse Jetty

jjwt-api

0.11.5

Java JWT

jjwt-impl

0.11.5

Java JWT

jjwt-jackson

0.11.5

Java JWT

jldap

4.3

OpenLDAP

jna

5.6.0

JNA

jnr-ffi

0.6.0

jnr-ffi

jsign-core

5.0

Jsign

json-path

5.3.0

json-path

json-simple

1.1.1

json-simple

log4j-1.2-api

2.17.1

Log4j

log4j-api

2.17.1

Log4j

log4j-core

2.17.1

Log4j

clover

-

SignServer

openpdf

1.3.30signserver6.2.0*

OpenPDF

p11ng

0.21.9

Keyfactor Commons

poi

4.1.2

Apache POI

quartz

2.3.2

Quartz Scheduler

rest-assured

5.3.0

REST-Assured

rest-assured-common

5.3.0

REST-Assured

serializer

2.7.3

Santuario

slf4j-api

2.0.6

SLF4J

slf4j-reload4j

2.0.6

SLF4J

specs-trusted-list

5.8

DSS

specs-validation-report

5.9

DSS

specs-xades

5.9

DSS

specs-xmldsig

5.9

DSS

stax-ex

1.8.1

Hibernate dependencies

stax2-api

3.1.4

Stax2 API

txw2

2.3.2

Hibernate dependencies

validation-policy

5.9

DSS

woodstox-core-asl

4.4.1

Codehaus Woodstox

wsdl4j

1.6.3

WSDL4J

x509-common-util

0.10.5

EJBCA

xades4j

2.0.0

XAdES4j

xalan

2.7.3

Apache Xalan

xercesImpl

2.12.2

Apache Xerces

xml-apis

1.4.01

Apache Xerces

xml-path

5.3.0

xml-path

xml-resolver

1.2

Apache Xerces

xmlpull

1.1.3.1

XmlPull

xmlschema-core

2.3.0

Apache XmlSchema Core

xmlsec

2.2.6

Santuario

xpp3_min

1.1.4c

Xpp3

Projects-list

Project Name

License

Library Source

AOP Alliance

Public Domain

http://aopalliance.sourceforge.net

ASM

BSD-3-Clause

https://asm.ow2.io/

Android

Apache 2.0

https://android.googlesource.com/

Apache CXF

Apache 2.0

https://cxf.apache.org/

Apache Commons

Apache 2.0

http://commons.apache.org

Apache Geronimo

Apache 2.0

https://geronimo.apache.org/

Apache HttpComponents

Apache 2.0

https://hc.apache.org

Apache POI

Apache 2.0

https://poi.apache.org

Apache Xalan

Apache 2.0

https://xalan.apache.org/xalan-j/

Apache Xerces

Apache 2.0

https://xerces.apache.org/

Apache XmlSchema Core

Apache 2.0

https://ws.apache.org/xmlschema/xmlschema-core/

Bouncy Castle

BSD

http://www.bouncycastle.org

CESeCore

LGPLv2.1+

https://www.cesecore.eu

Codehaus Woodstox

Apache 2.0, BSD, LGPLv2.1

https://github.com/codehaus/woodstox

DNS Java

BSD-2-Clause

https://github.com/dnsjava/dnsjava

DNSSEC Java

Eclipse Public License

https://github.com/ibauersachs/dnssecjava

DSS

LGPLv2.1+

https://ec.europa.eu/cefdigital/wiki/display/CEFDIGITAL/DSS

EJBCA

LGPLv2.1+

http://ejbca.org

Eclipse Jetty

Eclipse Public License

https://www.eclipse.org/jetty/

Geckodriver

MPL 2.0

https://hg.mozilla.org/mozilla-central/file/tip/testing/geckodriver

Groovy

Apache 2.0

https://groovy-lang.org/

Guava

Apache 2.0

https://github.com/google/guava

Guice

Apache 2.0

https://github.com/google/guice

Hamcrest

BSD

http://hamcrest.org

Hibernate dependencies

Apache/MIT/BSD like

http://hibernate.org

Hibernate

LGPLv2.1

http://hibernate.org

JAXB

CDDL + GPLv2 with classpath exception

https://github.com/javaee/jaxb-v2

JNA

Apache 2.0

https://github.com/java-native-access/jna

JUnit

Eclipse Public License

http://junit.org

JackNJI11

MIT

https://github.com/joelhockey/jacknji11/

Jackson

Apache 2.0

https://github.com/FasterXML/

Jakarta EE

Eclipse Public License

https://jakarta.ee

Java JWT

Apache 2.0

https://java.jsonwebtoken.io

Jsign

Apache 2.0

https://ebourg.github.io/jsign

Keyfactor Commons

Proprietary

-

Log4j

Apache 2.0

http://logging.apache.org/log4j

OpenLDAP

OpenLDAP Public License

http://www.openldap.org

OpenPDF

MPL or LGPLv2+

https://github.com/LibrePDF/OpenPDF

Quartz Scheduler

Apache 2.0

http://www.opensymphony.com

REST-Assured

Apache 2.0

https://rest-assured.io/

SLF4J

MIT

https://www.slf4j.org/

Santuario

Apache 2.0

http://santuario.apache.org

Selenium

Apache 2.0

https://www.seleniumhq.org

SignServer

LGPLv2.1+

http://signserver.org

SparseBitSet

Apache 2.0

https://github.com/brettwooldridge/SparseBitSet

Stax2 API

BSD

https://github.com/FasterXML/stax2-api

WSDL4J

CPL 1.0

https://sourceforge.net/projects/wsdl4j/

XAdES4j

LGPLv3+

https://code.google.com/p/xades4j

XmlPull

Public Domain

http://www.xmlpull.org/

Xpp3

BSD

https://x-stream.github.io/

jnr-ffi

Apache 2.0

https://github.com/jnr/jnr-ffi

json-simple

Apache 2.0

https://github.com/fangyidong/json-simple