The following page is a manifest of all libraries used in SignServer, including licenses.

Jars-list

*These jars have been patched.

Library Name	Version	Project
DeployTools-Ant	2.2.1	SignServer
DeployTools-CLI	2.2.1	SignServer
DeployTools-Common	2.2.1	SignServer
DeployTools-Maven	2.2.1	SignServer
FastInfoset	1.2.15	Hibernate dependencies
SparseBitSet	1.2	SparseBitSet
antlr	2.7.7	Hibernate dependencies
aopalliance	1.0	AOP Alliance
apksig	30.0.2-signserver5-1*	Android
asm	9.4	ASM
bcpg	jdk18on-1.78	Bouncy Castle
bcpkix	jdk18on-1.78	Bouncy Castle
bcprov	jdk18on-1.78	Bouncy Castle
bcutil	jdk18on-1.78	Bouncy Castle
byte-buddy	1.10.10	Hibernate dependencies
cert-cvc	1.4.6	EJBCA
/ext/cesecore-ce/cesecore-common	7.0.0.1signserver6.2.0*	CESeCore
/ext/cesecore-ce/cesecoreejb	7.0.0.1	CESeCore
/ext/cesecore-ce/cesecore-entity	7.0.0.1	CESeCore
/ext/cesecore-ce/cesecore-interfaces	7.0.0.1	CESeCore
cesecore-common	7.0.0.1signserver6.2.0*	CESeCore
cesecore-ejb	7.0.0.1	CESeCore
cesecore-entity	7.0.0.1	CESeCore
cesecore-interfaces	7.0.0.1	CESeCore
classmate	1.5.1	Hibernate dependencies
commons-cli	1.4	Apache Commons
commons-codec	1.15	Apache Commons
commons-collections	3.2.2	Apache Commons
commons-collections	4-4.4	Apache Commons
commons-configuration	1.10	Apache Commons
commons-digester	2.1	Apache Commons
commons-el	1.0	Apache Commons
commons-fileupload	1.5	Apache Commons
commons-io	2.8.0	Apache Commons
commons-lang	2.6	Apache Commons
commons-lang3	3.11	Apache Commons
commons-logging	1.2	Apache Commons
commons-math3	3.6.1	Apache Commons
commons-net	3.9.0	Apache Commons
cxf-core	3.5.8	Apache CXF
cxf-rt-bindings-soap	3.5.8	Apache CXF
cxf-rt-databinding-jaxb	3.5.8	Apache CXF
cxf-rt-frontend-jaxws	3.5.8	Apache CXF
cxf-rt-frontend-simple	3.5.8	Apache CXF
cxf-rt-transports-http	3.5.8	Apache CXF
cxf-rt-transports-http-jetty	3.5.8	Apache CXF
cxf-rt-wsdl	3.5.8	Apache CXF
dnsjava	3.5.3	DNS Java
dnssecjava	1.2.0	DNSSEC Java
dom4j	2.1.3	Hibernate dependencies
dss-alert	5.9	DSS
dss-cades	5.9	DSS
dss-crl-parser	5.9signserver6.2.0*	DSS
dss-crl-parser-x509crl	5.9	DSS
dss-detailed-report-jaxb	5.9	DSS
dss-diagnostic-jaxb	5.9	DSS
dss-document	5.9	DSS
dss-enumerations	5.9	DSS
dss-i18n	5.9	DSS
dss-jaxb-common	5.9	DSS
dss-jaxb-parsers	5.9	DSS
dss-model	5.9signserver6.2.0*	DSS
dss-pades	5.9	DSS
dss-pades-openpdf	5.9	DSS
dss-policy-jaxb	5.9	DSS
dss-service	5.9	DSS
dss-simple-certificate-report-jaxb	5.9	DSS
dss-simple-report-jaxb	5.9	DSS
dss-spi	5.9signserver6.2.0*	DSS
dss-token	5.9	DSS
dss-utils	5.9	DSS
dss-utils-apache-commons	5.9	DSS
dss-xades	5.9	DSS
geckodriver	0.21.0	Geckodriver
hamcrest-core	1.3	Hamcrest
jakarta.jakartaee-api	8.0.0	Jakarta EE
junit	4.12	JUnit
selenium-server-standalone	3.13.0	Selenium
failureaccess	1.0.1	Guava
geronimo-osgi-locator	1.1	Apache Geronimo
groovy	4.0.12	Groovy
groovy-json	4.0.12	Groovy
guava	32.1.2	Guava
guice	5.1.0	Guice
guice-multibindings	4.2.3	Guice
hamcrest	2.2	Hamcrest
hibernate-commons-annotations	5.1.0	Hibernate
hibernate-core	5.4.21	Hibernate
httpclient	4.5.14	Apache HttpComponents
httpcore	4.4.16	Apache HttpComponents
httpmime	4.5.14	Apache HttpComponents
istack-commons-runtime	3.0.8	Hibernate dependencies
jacknji11	1.2.7	JackNJI11
jackson-annotations	2.12.6	Jackson
jackson-core	2.12.6	Jackson
jackson-databind	2.12.7.1	Jackson
jackson-module-jaxb-annotations	2.12.6	Jackson
jakarta.activation	1.2.2	Jakarta EE
jakarta.jakartaee-api	8.0.0	Jakarta EE
jakarta.jws-api	2.1.0	Jakarta EE
jakarta.xml.bind-api	2.3.3	Jakarta EE
jakarta.xml.soap-api	1.4.2	Jakarta EE
jakarta.xml.ws-api	2.3.3	Jakarta EE
jandex	2.1.3	Hibernate dependencies
javassist	3.24.0-GA	Hibernate dependencies
javax.activation-api	1.2.0	Hibernate dependencies
javax.persistence-api	2.2	Hibernate dependencies
jaxb-core	3.0.2	JAXB
jaxb-impl	3.0.2	JAXB
jaxb-runtime	2.3.3	Hibernate dependencies
jboss-logging	3.3.2	Hibernate dependencies
jboss-transaction-api_1.2_spec	1.1.1	Hibernate dependencies
jetty-http	9.4.51.v20230217	Eclipse Jetty
jetty-io	9.4.51.v20230217	Eclipse Jetty
jetty-server	9.4.51.v20230217	Eclipse Jetty
jetty-util	9.4.51.v20230217	Eclipse Jetty
jjwt-api	0.11.5	Java JWT
jjwt-impl	0.11.5	Java JWT
jjwt-jackson	0.11.5	Java JWT
jldap	4.3	OpenLDAP
jna	5.6.0	JNA
jnr-ffi	0.6.0	jnr-ffi
jsign-core	5.0	Jsign
json-path	5.3.0	json-path
json-simple	1.1.1	json-simple
log4j-1.2-api	2.17.1	Log4j
log4j-api	2.17.1	Log4j
log4j-core	2.17.1	Log4j
clover	-	SignServer
openpdf	1.3.30signserver6.2.0*	OpenPDF
p11ng	0.21.9	Keyfactor Commons
poi	4.1.2	Apache POI
quartz	2.3.2	Quartz Scheduler
rest-assured	5.3.0	REST-Assured
rest-assured-common	5.3.0	REST-Assured
serializer	2.7.3	Santuario
slf4j-api	2.0.6	SLF4J
slf4j-reload4j	2.0.6	SLF4J
specs-trusted-list	5.8	DSS
specs-validation-report	5.9	DSS
specs-xades	5.9	DSS
specs-xmldsig	5.9	DSS
stax-ex	1.8.1	Hibernate dependencies
stax2-api	3.1.4	Stax2 API
txw2	2.3.2	Hibernate dependencies
validation-policy	5.9	DSS
woodstox-core-asl	4.4.1	Codehaus Woodstox
wsdl4j	1.6.3	WSDL4J
x509-common-util	0.10.5	EJBCA
xades4j	2.0.0	XAdES4j
xalan	2.7.3	Apache Xalan
xercesImpl	2.12.2	Apache Xerces
xml-apis	1.4.01	Apache Xerces
xml-path	5.3.0	xml-path
xml-resolver	1.2	Apache Xerces
xmlpull	1.1.3.1	XmlPull
xmlschema-core	2.3.0	Apache XmlSchema Core
xmlsec	2.2.6	Santuario
xpp3_min	1.1.4c	Xpp3

Projects-list

Project Name	License	Library Source
AOP Alliance	Public Domain	http://aopalliance.sourceforge.net
ASM	BSD-3-Clause	https://asm.ow2.io/
Android	Apache 2.0	https://android.googlesource.com/
Apache CXF	Apache 2.0	https://cxf.apache.org/
Apache Commons	Apache 2.0	http://commons.apache.org
Apache Geronimo	Apache 2.0	https://geronimo.apache.org/
Apache HttpComponents	Apache 2.0	https://hc.apache.org
Apache POI	Apache 2.0	https://poi.apache.org
Apache Xalan	Apache 2.0	https://xalan.apache.org/xalan-j/
Apache Xerces	Apache 2.0	https://xerces.apache.org/
Apache XmlSchema Core	Apache 2.0	https://ws.apache.org/xmlschema/xmlschema-core/
Bouncy Castle	BSD	http://www.bouncycastle.org
CESeCore	LGPLv2.1+	https://www.cesecore.eu
Codehaus Woodstox	Apache 2.0, BSD, LGPLv2.1	https://github.com/codehaus/woodstox
DNS Java	BSD-2-Clause	https://github.com/dnsjava/dnsjava
DNSSEC Java	Eclipse Public License	https://github.com/ibauersachs/dnssecjava
DSS	LGPLv2.1+	https://ec.europa.eu/cefdigital/wiki/display/CEFDIGITAL/DSS
EJBCA	LGPLv2.1+	http://ejbca.org
Eclipse Jetty	Eclipse Public License	https://www.eclipse.org/jetty/
Geckodriver	MPL 2.0	https://hg.mozilla.org/mozilla-central/file/tip/testing/geckodriver
Groovy	Apache 2.0	https://groovy-lang.org/
Guava	Apache 2.0	https://github.com/google/guava
Guice	Apache 2.0	https://github.com/google/guice
Hamcrest	BSD	http://hamcrest.org
Hibernate dependencies	Apache/MIT/BSD like	http://hibernate.org
Hibernate	LGPLv2.1	http://hibernate.org
JAXB	CDDL + GPLv2 with classpath exception	https://github.com/javaee/jaxb-v2
JNA	Apache 2.0	https://github.com/java-native-access/jna
JUnit	Eclipse Public License	http://junit.org
JackNJI11	MIT	https://github.com/joelhockey/jacknji11/
Jackson	Apache 2.0	https://github.com/FasterXML/
Jakarta EE	Eclipse Public License	https://jakarta.ee
Java JWT	Apache 2.0	https://java.jsonwebtoken.io
Jsign	Apache 2.0	https://ebourg.github.io/jsign
Keyfactor Commons	Proprietary	-
Log4j	Apache 2.0	http://logging.apache.org/log4j
OpenLDAP	OpenLDAP Public License	http://www.openldap.org
OpenPDF	MPL or LGPLv2+	https://github.com/LibrePDF/OpenPDF
Quartz Scheduler	Apache 2.0	http://www.opensymphony.com
REST-Assured	Apache 2.0	https://rest-assured.io/
SLF4J	MIT	https://www.slf4j.org/
Santuario	Apache 2.0	http://santuario.apache.org
Selenium	Apache 2.0	https://www.seleniumhq.org
SignServer	LGPLv2.1+	http://signserver.org
SparseBitSet	Apache 2.0	https://github.com/brettwooldridge/SparseBitSet
Stax2 API	BSD	https://github.com/FasterXML/stax2-api
WSDL4J	CPL 1.0	https://sourceforge.net/projects/wsdl4j/
XAdES4j	LGPLv3+	https://code.google.com/p/xades4j
XmlPull	Public Domain	http://www.xmlpull.org/
Xpp3	BSD	https://x-stream.github.io/
jnr-ffi	Apache 2.0	https://github.com/jnr/jnr-ffi
json-simple	Apache 2.0	https://github.com/fangyidong/json-simple