The Apache Software Foundation

[C++ Broker]
 * [QPID-1567] - Queue replication (asynchronous) between two sites
 * [QPID-1669] - Client connection management in the qpid-cluster CLI utility
 * [QPID-1673] - Dynamic Library Build on Windows (DLL)

[Java Broker]
 * [QPID-1583] - IP White/Black lists for virtual hosts
 * [QPID-1648] - Enable live reconfiguration of Log4J settings for the Java broker via JMX
 * [QPID-1699] - Reload security section in configuration files through JMX

[C++ Client]
 * [QPID-1673] - Dynamic Library Build on Windows (DLL)

[Java Client]
 * [QPID-1649] - FailoverExchange support

[Ruby Client]
 * [QPID-1602] - SASL Support

[Java Management : JMX Console]
 * [QPID-1500] - Mac OS X Build
 * [QPID-1648] - Enable live reconfiguration of Log4J settings for the Java broker via JMX
 * [QPID-1691] - Linux x86-64 and Solaris builds

[Java Management : QMan]
 * [QPID-1574] - QMan WS-DM Adapter

1. Ability to send and verify UsernameTokens with
   - Username and PlainText password
   - Username and Digested password

2. Ability to send Timestamp tokens

3. SOAP message encryption
   - With derived key support for improved security
   - Symmetric and Asymmetric modes of operations
   - Support for AES and Tripple DES encryption
   - Signature encryption
   - Keys encryption

4. SOAP message signature
   - XML signature with RSA-SHA1
   - Message authentication with HMAC-SHA1
   - Signature confirmation support
   - SOAP Header signing

5. WS-Security Policy (spec 1.1 & spec 1.2) based configurations
   - Support for both Symmetric as well as Asymmetric policy bindings
   - Support for different modes of key identifiers
   - Support for different algorithm suites
     [Basic128, Basic 192, Basic256, TrippleDES, Basic128Rsa15, Basic192Rsa15,Basic256Rsa15, TripleDesRsa15]
   - Support for IssuedToken assertion in client side.
   - Support for SAMLToken assertion.

6. Replay detection support
   - Easy to use built-in replay detection module
   - Ability to deploy a customized replay detection module

7. Different protection orders
   - Encrypt before signing
   - Sign before encrypting

8. Extensible modules
   - Password callback module
   - Authentication module
   - Credentials module
   - Replay detection module
   - Secure conversation token module

9. Keys management
   - Support for X509 token profile
   - Support for Key identifiers, Thumb prints, Issuer/Serial pairs, Embedded and Direct references
   - Support for PKCS12 keystore

10. WS-Secure Conversation Language support
   - Establishing Security Context and thereby maintaining a session
   - Per message key derivation
   - Support for stored securtiy context token
   - Rahas module support to give STS functionality to a service

11. WS-Trust Language support
   - Security Token Services (STS)
   - STS Client
   - Server and Client entrophy support

12. SAML Support
   - Support for Creation and Processing of SAML Core 1.1 Assertions
   - SAML Token as Sign Supporting Token
   - Signing and Encryption with SAML

13. Other
   - Easy to use deployment scripts
   - A comprehensive set of samples

1. WS-Secure Conversation Language support
2. WS-Trust Language support
3. Rahas module to give STS support to a service
4. PKCS12 Keystore support
5. Security Policy 1.2 support
6. Memory leak fixes
7. Many bug fixes

Apache Rampart/C

Apache Rampart/C는 Apache Axis2/C를 위한 보안모듈(security module)로써, 이 모듈은 SOAP 메시지 교환(messages exchanged) 프로젝트를 위한 SOAP 메시지 인크립션(encryption)과 WS-Security 규정(Specification)의 기술(specified)과 같은 서명(signature)과 같은 여러가지 기능으로 구성되어 있습니다.

Apache Rampart/C 설정(configuration) 또한 WS-Security 정책 규정(Policy specificatoin)을 기반으로 구성되어 있습니다.

It can be used to:

• generate test loads
• test functional behaviour
• measure performance.
  
  

It includes support for protocols such as HTTP(S), JDBC, JMS, FTP, and others.
It can also be extended with user-written code.
See http://jakarta.apache.org/jmeter/