You are viewing a plain text version of this content. The canonical link for it is here.
Posted to wss4j-dev@ws.apache.org by "Colm O hEigeartaigh (JIRA)" <ji...@apache.org> on 2009/04/30 12:58:30 UTC
[jira] Updated: (WSS-182) Encryption with symmetric key with
encryptSymmKey set to false generates invalid xml without xenc defined
[ https://issues.apache.org/jira/browse/WSS-182?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Colm O hEigeartaigh updated WSS-182:
------------------------------------
Fix Version/s: 1.6
1.5.8
> Encryption with symmetric key with encryptSymmKey set to false generates invalid xml without xenc defined
> ---------------------------------------------------------------------------------------------------------
>
> Key: WSS-182
> URL: https://issues.apache.org/jira/browse/WSS-182
> Project: WSS4J
> Issue Type: Bug
> Components: WSS4J Core
> Affects Versions: 1.5.7
> Environment: tomcat + axis 1.4 + wss4j 1.5.7
> Reporter: Nitin Handa
> Assignee: Ruchith Udayanga Fernando
> Priority: Blocker
> Fix For: 1.5.8, 1.6
>
>
> WSSecEncrypt.java below function doesn't define xenc prefix being used. if encryptSymmKey set to false then ReferenceList is the only element which is inserted in soap response.
> public Element encryptForInternalRef(Element dataRef, List references)
> throws WSSecurityException {
> List encDataRefs =
> doEncryption(document, symmetricKey, references);
> Element referenceList = dataRef;
> if (referenceList == null) {
> referenceList =
> document.createElementNS(
> WSConstants.ENC_NS,
> WSConstants.ENC_PREFIX + ":ReferenceList"
> );
> }
> createDataRefList(document, referenceList, encDataRefs);
> return referenceList;
> }
> It should call set namespace like createEncryptedKey function (of WSSecEncryptedKey.java) does:
> WSSecurityUtil.setNamespace(encryptedKey, WSConstants.ENC_NS, WSConstants.ENC_PREFIX);
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org