You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@cxf.apache.org by "Colm O hEigeartaigh (JIRA)" <ji...@apache.org> on 2015/09/22 13:39:04 UTC

[jira] [Assigned] (CXF-6597) Invalid Policy Exception on valid on WS-Policy

     [ https://issues.apache.org/jira/browse/CXF-6597?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Colm O hEigeartaigh reassigned CXF-6597:
----------------------------------------

    Assignee: Colm O hEigeartaigh

> Invalid Policy Exception on valid on WS-Policy
> ----------------------------------------------
>
>                 Key: CXF-6597
>                 URL: https://issues.apache.org/jira/browse/CXF-6597
>             Project: CXF
>          Issue Type: Bug
>          Components: JAX-WS Runtime
>    Affects Versions: 3.0.6
>         Environment: WildFly 8.2.1.Final
>            Reporter: Bas Nossing
>            Assignee: Colm O hEigeartaigh
>
> A recent bugreport (https://issues.apache.org/jira/browse/CXF-6473 to be exact) was fixed in CXF version 3.0.6
> However, when we tried to update our WildFly to version 8.2.1 to incorporate this bugfix we ran into a new issue: http://pastebin.com/ezewT9Mw
> It seems CXF version 3.0.6 introduces an issue with WS-Policy parsing that no longer allows the following definition:
> {code:xml}
> <wsp:Policy wsu:Id="X509EndpointPolicy">
> 	<wsp:ExactlyOne>
> 	...
> 		<sp:AlgorithmSuite>
> 				<wsp:Policy>
> 						<sp:Basic128Rsa15/>
> 						<sp:Basic256Rsa15/>
> 						<sp:TripleDesRsa15/>
> 				</wsp:Policy>
> 		</sp:AlgorithmSuite>
> 	...
> 	</wsp:ExactlyOne>
> </wsp:Policy>
> {code}
> (excerpt from WSDL http://pastebin.com/BSMais7F and accompanying XSD http://pastebin.com/DRXc0Tfa)
> However, according to W3C (http://www.w3.org/Submission/WS-Policy/) it is allowed to specify multiple key-transport-algorithms for a single policy.
> Removing two of the key-transport-algorithms (leaving one remaining algorithm) from our definition makes the invalid policy exception disappear.
> For example removing Basic128Rsa15 and TripleDesRsa15 and leaving Basic256Rsa15 will make CXF accept his WS-Policy as a valid one.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)