You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@cxf.apache.org by "Anubhav Sharma (JIRA)" <ji...@apache.org> on 2011/09/26 17:33:26 UTC

[jira] [Updated] (CXF-3827) Cancelling a SCT with STS is missing verification of proof of possession key

     [ https://issues.apache.org/jira/browse/CXF-3827?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Anubhav Sharma updated CXF-3827:
--------------------------------

    Attachment: 0009-fixed-failing-test.patch
                0008-implemented-verification-of-proof-of-possession-for-.patch

The patch implements verification of proof of possession key while cancelling a SCT. This verification can be switched on/off. The second patch fixes some failing tests for Cancel usecase.

> Cancelling a SCT with STS is missing verification of proof of possession key
> ----------------------------------------------------------------------------
>
>                 Key: CXF-3827
>                 URL: https://issues.apache.org/jira/browse/CXF-3827
>             Project: CXF
>          Issue Type: Improvement
>          Components: Services
>    Affects Versions: 2.4.2
>            Reporter: Anubhav Sharma
>             Fix For: 2.4.3, 2.5
>
>         Attachments: 0008-implemented-verification-of-proof-of-possession-for-.patch, 0009-fixed-failing-test.patch
>
>
> While cancelling a SCT with STS, the STS should verify the proof of possession key, most ideally in a configurable way where this verification can be switched on and off.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira