[jira] [Commented] (RAMPART-396) NullPointerException using STS, Trust and entropy

["Suresh Attanayake (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/RAMPART-396?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13774023#comment-13774023 ] 

Suresh Attanayake commented on RAMPART-396:
-------------------------------------------

AlgorithmSuite is read from the sts_policy. AlgorithmSuit is a mandatory policy assertion for all bindings[transport, symmetric, asymmetric]. So if the policy is correct the algorithmSuite cannot be null. Anyways better to have this check befor the NPE, hence attaching a patch. 
                
> NullPointerException using STS, Trust and entropy
> -------------------------------------------------
>
>                 Key: RAMPART-396
>                 URL: https://issues.apache.org/jira/browse/RAMPART-396
>             Project: Rampart
>          Issue Type: Bug
>          Components: rampart-core
>    Affects Versions: 1.6.2
>         Environment: All
>            Reporter: Artyom Kurbatsky
>         Attachments: policy.xml, stackTrace.txt
>
>
> Actually NullPointerException comes from Rahas STSClient->createIssueRequest:
> {code}
> this.requestorEntropy =
>                             WSSecurityUtil.generateNonce(this.algorithmSuite.
>                                     getMaximumSymmetricKeyLength()/8);
> {code} 
> this.algorithmSuite is always null. You can see from stack trace that this STSClient instance is created in RampartUtil->getToken and there is no place where algorithmSuite can be set.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

---------------------------------------------------------------------
To unsubscribe, e-mail: java-dev-unsubscribe@axis.apache.org
For additional commands, e-mail: java-dev-help@axis.apache.org