Update release notes and code signature timestamping URL-s (#617)

IB-7900

Signed-off-by: Raul Metsma <[email protected]>

Author: metsma

COPYING

@@ -15,14 +15,13 @@ Schema for XML Signatures
     [2] http://www.w3.org/Consortium/Legal/IPR-FAQ-20000620.html#DTD
 
 _______________________________________________________________________________
-etc/schema/OpenDocument_manifest.rng
-
-	OASIS OpenDocument v1.0
-	OASIS standard, 1 May 2005
-	Relax-NG Manifest Schema
-	$Id$
-	© 2002-2005 OASIS Open
-	© 1999-2005 Sun Microsystems, Inc.
+etc/schema/OpenDocument_dsig.rng
+
+  OASIS OpenDocument v1.2
+  Committee Draft 05 Rev 02, 11 November 2010
+  Digital Signatures Relax-NG Schema
+  
+  Copyright © OASIS Open 2008-2010. All Rights Reserved.
 
 _______________________________________________________________________________
 etc/schema/OpenDocument_manifest_v1_2.rng

RELEASE-NOTES.md

@@ -1,3 +1,23 @@
+Libdigidocpp library [3.18.0](https://github.com/open-eid/libdigidocpp/releases/tag/v3.18.0) release notes
+--------------------------------------
+- Major rewrite of library internals due upstream dependecy xalan-c and xml-security-c package has been retired.
+  https://shibboleth.atlassian.net/wiki/spaces/DEV/pages/3726671873/Santuario
+  https://lists.apache.org/thread/tls9xgp45zbhzc9k8jhd3m49r6npbrql
+- Update libraries and platform support
+  (#572, #565, #571, #570, #574, #578, #581, #582, #583, #579, #587, #589, #590, #563, #592, #597, #605, #608, #616)
+- Improve signature and container compatibility
+  (#573, #585, #586, #588, #591, #584, #596, #593, #595, #603, #604, #607, #613, #609)
+- Other fixes and optimizations
+  (#564, #577, #580, #599, #606, #612, #614, #611, #610)
+
+[Full Changelog](https://github.com/open-eid/libdigidocpp/compare/v3.17.0...v3.18.0)
+
+Libdigidocpp library [3.17.1](https://github.com/open-eid/libdigidocpp/releases/tag/v3.17.1) release notes
+--------------------------------------
+- Keep previous signature in memory to avoid changing its structure
+
+[Full Changelog](https://github.com/open-eid/libdigidocpp/compare/v3.17.0...v3.17.1)
+
 Libdigidocpp library [3.17.0](https://github.com/open-eid/libdigidocpp/releases/tag/v3.17.0) release notes
 --------------------------------------
 - Update libraries and platform support (#549, #554, #558, #553)

build.ps1

@@ -64,7 +64,7 @@ foreach($type in @("Debug", "RelWithDebInfo")) {
 
 if($sign) {
   & $vcvars $platform "&&" signtool.exe sign /a /v /s MY /n "$sign" /fd SHA256 /du http://installer.id.ee `
-    /tr http://sha256timestamp.ws.symantec.com/sha256/timestamp /td SHA256 `
+    /tr http://timestamp.digicert.com /td SHA256 `
     $vcpkg_installed_platform/$platform-windows/bin/*.dll `
     $vcpkg_installed_platform/$platform-windows/debug/bin/*.dll
 }
@@ -81,5 +81,5 @@ if($sign) {
 
 if($sign) {
   & $vcvars $platform "&&" signtool.exe sign /a /v /s MY /n "$sign" /fd SHA256 /du http://installer.id.ee `
-    /tr http://sha256timestamp.ws.symantec.com/sha256/timestamp /td SHA256 "$msi_name"
+    /tr http://timestamp.digicert.com /td SHA256 "$msi_name"
 }

libdigidocpp.wxs

@@ -37,8 +37,6 @@
     <ComponentGroup Id="Runtime"
         Source="$(env.VCTOOLSREDISTDIR)\$(sys.BUILDARCH)\Microsoft.VC$(var.VCVER).CRT">
       <File Name="msvcp140.dll" />
-      <File Name="msvcp140_1.dll" />
-      <File Name="msvcp140_2.dll" />
       <File Name="vcruntime140.dll" />
 <?if $(sys.BUILDARCH) != x86 ?>
       <File Name="vcruntime140_1.dll" />
@@ -70,8 +68,6 @@
     <ComponentGroup Id="RuntimeDev"
         Source="$(env.VCTOOLSREDISTDIR)\Debug_NonRedist\$(sys.BUILDARCH)\Microsoft.VC$(var.VCVER).DebugCRT">
       <File Name="msvcp140d.dll" />
-      <File Name="msvcp140_1d.dll" />
-      <File Name="msvcp140_2d.dll" />
       <File Name="vcruntime140d.dll" />
 <?if $(sys.BUILDARCH) != x86 ?>
       <File Name="vcruntime140_1d.dll" />

src/CMakeLists.txt

@@ -107,6 +107,7 @@ add_library(digidocpp
     crypto/TS.cpp
     crypto/X509Cert.cpp
     crypto/X509CertStore.cpp
+    $<$<PLATFORM_ID:Windows>:crypto/WinSigner.cpp>
     util/ZipSerialize.cpp
 )
 
@@ -229,7 +230,6 @@ install( TARGETS digidocpp
 
 if(WIN32)
     list(APPEND CRYPTO_HEADER crypto/WinSigner.h)
-    target_sources(digidocpp PRIVATE crypto/WinSigner.cpp)
     target_compile_options(digidocpp PUBLIC "/guard:cf")
     target_link_options(digidocpp PUBLIC "/guard:cf")
     target_link_libraries(digidocpp PRIVATE Crypt32 cryptui ncrypt)
@@ -242,7 +242,7 @@ if(WIN32)
             add_custom_command(TARGET ${TARGET} POST_BUILD
                 COMMAND signtool.exe sign /a /v /s MY /n "${SIGNCERT}" /fd SHA256 /du http://installer.id.ee
                     "$<$<BOOL:${CROSSSIGNCERT}>:/ph;/ac;${CROSSSIGNCERT}>"
-                    /tr http://sha256timestamp.ws.symantec.com/sha256/timestamp /td SHA256 $<TARGET_FILE:${TARGET}>
+                    /tr http://timestamp.digicert.com /td SHA256 $<TARGET_FILE:${TARGET}>
                 COMMAND_EXPAND_LISTS
             )
         endforeach()

vcpkg.json

@@ -1,6 +1,6 @@
 {
     "name": "libdigidocpp",
-    "version": "3.18.0",
+    "version": "4.0.0",
     "dependencies": [
       {
         "name": "libxml2",