Library Manifest
The following page is a manifest of all libraries used in SignServer, including licenses.
Jars-list
*These jars have been patched.
| Library Name | Version | Project | 
|---|---|---|
| DeployTools-Ant | 2.2.1 | SignServer | 
| DeployTools-CLI | 2.2.1 | SignServer | 
| DeployTools-Common | 2.2.1 | SignServer | 
| DeployTools-Maven | 2.2.1 | SignServer | 
| FastInfoset | 1.2.15 | Hibernate dependencies | 
| SparseBitSet | 1.2 | SparseBitSet | 
| antlr | 2.7.7 | Hibernate dependencies | 
| aopalliance | 1.0 | AOP Alliance | 
| apksig | 30.0.2-signserver5-1* | Android | 
| asm | 9.4 | ASM | 
| bcpg | jdk18on-1.78 | Bouncy Castle | 
| bcpkix | jdk18on-1.78 | Bouncy Castle | 
| bcprov | jdk18on-1.78 | Bouncy Castle | 
| bcutil | jdk18on-1.78 | Bouncy Castle | 
| byte-buddy | 1.10.10 | Hibernate dependencies | 
| cert-cvc | 1.4.6 | EJBCA | 
| /ext/cesecore-ce/cesecore-common | 7.0.0.1signserver6.2.0* | CESeCore | 
| /ext/cesecore-ce/cesecoreejb | 7.0.0.1 | CESeCore | 
| /ext/cesecore-ce/cesecore-entity | 7.0.0.1 | CESeCore | 
| /ext/cesecore-ce/cesecore-interfaces | 7.0.0.1 | CESeCore | 
| cesecore-common | 7.0.0.1signserver6.2.0* | CESeCore | 
| cesecore-ejb | 7.0.0.1 | CESeCore | 
| cesecore-entity | 7.0.0.1 | CESeCore | 
| cesecore-interfaces | 7.0.0.1 | CESeCore | 
| classmate | 1.5.1 | Hibernate dependencies | 
| commons-cli | 1.4 | Apache Commons | 
| commons-codec | 1.15 | Apache Commons | 
| commons-collections | 3.2.2 | Apache Commons | 
| commons-collections | 4-4.4 | Apache Commons | 
| commons-configuration | 1.10 | Apache Commons | 
| commons-digester | 2.1 | Apache Commons | 
| commons-el | 1.0 | Apache Commons | 
| commons-fileupload | 1.5 | Apache Commons | 
| commons-io | 2.8.0 | Apache Commons | 
| commons-lang | 2.6 | Apache Commons | 
| commons-lang3 | 3.11 | Apache Commons | 
| commons-logging | 1.2 | Apache Commons | 
| commons-math3 | 3.6.1 | Apache Commons | 
| commons-net | 3.9.0 | Apache Commons | 
| cxf-core | 3.5.8 | Apache CXF | 
| cxf-rt-bindings-soap | 3.5.8 | Apache CXF | 
| cxf-rt-databinding-jaxb | 3.5.8 | Apache CXF | 
| cxf-rt-frontend-jaxws | 3.5.8 | Apache CXF | 
| cxf-rt-frontend-simple | 3.5.8 | Apache CXF | 
| cxf-rt-transports-http | 3.5.8 | Apache CXF | 
| cxf-rt-transports-http-jetty | 3.5.8 | Apache CXF | 
| cxf-rt-wsdl | 3.5.8 | Apache CXF | 
| dnsjava | 3.5.3 | DNS Java | 
| dnssecjava | 1.2.0 | DNSSEC Java | 
| dom4j | 2.1.3 | Hibernate dependencies | 
| dss-alert | 5.9 | DSS | 
| dss-cades | 5.9 | DSS | 
| dss-crl-parser | 5.9signserver6.2.0* | DSS | 
| dss-crl-parser-x509crl | 5.9 | DSS | 
| dss-detailed-report-jaxb | 5.9 | DSS | 
| dss-diagnostic-jaxb | 5.9 | DSS | 
| dss-document | 5.9 | DSS | 
| dss-enumerations | 5.9 | DSS | 
| dss-i18n | 5.9 | DSS | 
| dss-jaxb-common | 5.9 | DSS | 
| dss-jaxb-parsers | 5.9 | DSS | 
| dss-model | 5.9signserver6.2.0* | DSS | 
| dss-pades | 5.9 | DSS | 
| dss-pades-openpdf | 5.9 | DSS | 
| dss-policy-jaxb | 5.9 | DSS | 
| dss-service | 5.9 | DSS | 
| dss-simple-certificate-report-jaxb | 5.9 | DSS | 
| dss-simple-report-jaxb | 5.9 | DSS | 
| dss-spi | 5.9signserver6.2.0* | DSS | 
| dss-token | 5.9 | DSS | 
| dss-utils | 5.9 | DSS | 
| dss-utils-apache-commons | 5.9 | DSS | 
| dss-xades | 5.9 | DSS | 
| geckodriver | 0.21.0 | Geckodriver | 
| hamcrest-core | 1.3 | Hamcrest | 
| jakarta.jakartaee-api | 8.0.0 | Jakarta EE | 
| junit | 4.12 | JUnit | 
| selenium-server-standalone | 3.13.0 | Selenium | 
| failureaccess | 1.0.1 | Guava | 
| geronimo-osgi-locator | 1.1 | Apache Geronimo | 
| groovy | 4.0.12 | Groovy | 
| groovy-json | 4.0.12 | Groovy | 
| guava | 32.1.2 | Guava | 
| guice | 5.1.0 | Guice | 
| guice-multibindings | 4.2.3 | Guice | 
| hamcrest | 2.2 | Hamcrest | 
| hibernate-commons-annotations | 5.1.0 | Hibernate | 
| hibernate-core | 5.4.21 | Hibernate | 
| httpclient | 4.5.14 | Apache HttpComponents | 
| httpcore | 4.4.16 | Apache HttpComponents | 
| httpmime | 4.5.14 | Apache HttpComponents | 
| istack-commons-runtime | 3.0.8 | Hibernate dependencies | 
| jacknji11 | 1.2.7 | JackNJI11 | 
| jackson-annotations | 2.12.6 | Jackson | 
| jackson-core | 2.12.6 | Jackson | 
| jackson-databind | 2.12.7.1 | Jackson | 
| jackson-module-jaxb-annotations | 2.12.6 | Jackson | 
| jakarta.activation | 1.2.2 | Jakarta EE | 
| jakarta.jakartaee-api | 8.0.0 | Jakarta EE | 
| jakarta.jws-api | 2.1.0 | Jakarta EE | 
| jakarta.xml.bind-api | 2.3.3 | Jakarta EE | 
| jakarta.xml.soap-api | 1.4.2 | Jakarta EE | 
| jakarta.xml.ws-api | 2.3.3 | Jakarta EE | 
| jandex | 2.1.3 | Hibernate dependencies | 
| javassist | 3.24.0-GA | Hibernate dependencies | 
| javax.activation-api | 1.2.0 | Hibernate dependencies | 
| javax.persistence-api | 2.2 | Hibernate dependencies | 
| jaxb-core | 3.0.2 | JAXB | 
| jaxb-impl | 3.0.2 | JAXB | 
| jaxb-runtime | 2.3.3 | Hibernate dependencies | 
| jboss-logging | 3.3.2 | Hibernate dependencies | 
| jboss-transaction-api_1.2_spec | 1.1.1 | Hibernate dependencies | 
| jetty-http | 9.4.51.v20230217 | Eclipse Jetty | 
| jetty-io | 9.4.51.v20230217 | Eclipse Jetty | 
| jetty-server | 9.4.51.v20230217 | Eclipse Jetty | 
| jetty-util | 9.4.51.v20230217 | Eclipse Jetty | 
| jjwt-api | 0.11.5 | Java JWT | 
| jjwt-impl | 0.11.5 | Java JWT | 
| jjwt-jackson | 0.11.5 | Java JWT | 
| jldap | 4.3 | OpenLDAP | 
| jna | 5.6.0 | JNA | 
| jnr-ffi | 0.6.0 | jnr-ffi | 
| jsign-core | 5.0 | Jsign | 
| json-path | 5.3.0 | json-path | 
| json-simple | 1.1.1 | json-simple | 
| log4j-1.2-api | 2.17.1 | Log4j | 
| log4j-api | 2.17.1 | Log4j | 
| log4j-core | 2.17.1 | Log4j | 
| clover | - | SignServer | 
| openpdf | 1.3.30signserver6.2.0* | OpenPDF | 
| p11ng | 0.21.9 | Keyfactor Commons | 
| poi | 4.1.2 | Apache POI | 
| quartz | 2.3.2 | Quartz Scheduler | 
| rest-assured | 5.3.0 | REST-Assured | 
| rest-assured-common | 5.3.0 | REST-Assured | 
| serializer | 2.7.3 | Santuario | 
| slf4j-api | 2.0.6 | SLF4J | 
| slf4j-reload4j | 2.0.6 | SLF4J | 
| specs-trusted-list | 5.8 | DSS | 
| specs-validation-report | 5.9 | DSS | 
| specs-xades | 5.9 | DSS | 
| specs-xmldsig | 5.9 | DSS | 
| stax-ex | 1.8.1 | Hibernate dependencies | 
| stax2-api | 3.1.4 | Stax2 API | 
| txw2 | 2.3.2 | Hibernate dependencies | 
| validation-policy | 5.9 | DSS | 
| woodstox-core-asl | 4.4.1 | Codehaus Woodstox | 
| wsdl4j | 1.6.3 | WSDL4J | 
| x509-common-util | 0.10.5 | EJBCA | 
| xades4j | 2.0.0 | XAdES4j | 
| xalan | 2.7.3 | Apache Xalan | 
| xercesImpl | 2.12.2 | Apache Xerces | 
| xml-apis | 1.4.01 | Apache Xerces | 
| xml-path | 5.3.0 | xml-path | 
| xml-resolver | 1.2 | Apache Xerces | 
| xmlpull | 1.1.3.1 | XmlPull | 
| xmlschema-core | 2.3.0 | Apache XmlSchema Core | 
| xmlsec | 2.2.6 | Santuario | 
| xpp3_min | 1.1.4c | Xpp3 | 
Projects-list
| Project Name | License | Library Source | 
|---|---|---|
| AOP Alliance | Public Domain | |
| ASM | BSD-3-Clause | |
| Android | Apache 2.0 | |
| Apache CXF | Apache 2.0 | |
| Apache Commons | Apache 2.0 | |
| Apache Geronimo | Apache 2.0 | |
| Apache HttpComponents | Apache 2.0 | |
| Apache POI | Apache 2.0 | |
| Apache Xalan | Apache 2.0 | |
| Apache Xerces | Apache 2.0 | |
| Apache XmlSchema Core | Apache 2.0 | |
| Bouncy Castle | BSD | |
| CESeCore | LGPLv2.1+ | |
| Codehaus Woodstox | Apache 2.0, BSD, LGPLv2.1 | |
| DNS Java | BSD-2-Clause | |
| DNSSEC Java | Eclipse Public License | |
| DSS | LGPLv2.1+ | |
| EJBCA | LGPLv2.1+ | |
| Eclipse Jetty | Eclipse Public License | |
| Geckodriver | MPL 2.0 | https://hg.mozilla.org/mozilla-central/file/tip/testing/geckodriver | 
| Groovy | Apache 2.0 | |
| Guava | Apache 2.0 | |
| Guice | Apache 2.0 | |
| Hamcrest | BSD | |
| Hibernate dependencies | Apache/MIT/BSD like | |
| Hibernate | LGPLv2.1 | |
| JAXB | CDDL + GPLv2 with classpath exception | |
| JNA | Apache 2.0 | |
| JUnit | Eclipse Public License | |
| JackNJI11 | MIT | |
| Jackson | Apache 2.0 | |
| Jakarta EE | Eclipse Public License | |
| Java JWT | Apache 2.0 | |
| Jsign | Apache 2.0 | |
| Keyfactor Commons | Proprietary | - | 
| Log4j | Apache 2.0 | |
| OpenLDAP | OpenLDAP Public License | |
| OpenPDF | MPL or LGPLv2+ | |
| Quartz Scheduler | Apache 2.0 | |
| REST-Assured | Apache 2.0 | |
| SLF4J | MIT | |
| Santuario | Apache 2.0 | |
| Selenium | Apache 2.0 | |
| SignServer | LGPLv2.1+ | |
| SparseBitSet | Apache 2.0 | |
| Stax2 API | BSD | |
| WSDL4J | CPL 1.0 | |
| XAdES4j | LGPLv3+ | |
| XmlPull | Public Domain | |
| Xpp3 | BSD | |
| jnr-ffi | Apache 2.0 | |
| json-simple | Apache 2.0 |