You are viewing a plain text version of this content. The canonical link for it is here.
Posted to wss4j-dev@ws.apache.org by "Colm O hEigeartaigh (JIRA)" <ji...@apache.org> on 2008/10/15 18:40:46 UTC
[jira] Commented: (WSS-140) WSSecEncryptedKey produces EncryptedKey
element with invalid Id attribute
[ https://issues.apache.org/jira/browse/WSS-140?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12639895#action_12639895 ]
Colm O hEigeartaigh commented on WSS-140:
-----------------------------------------
Gary, can you confirm that the revision #700415 fixed the bug?
[WSS-140] - Removed "urn:uuid:" String from EncryptedKey ID
- This should now pass validation as an NCName
- Gary, does this simple fix meet your requirements?
Files Changed
MODIFY /webservices/wss4j/trunk/src/org/apache/ws/security/util/UUIDGenerator.java
> WSSecEncryptedKey produces EncryptedKey element with invalid Id attribute
> -------------------------------------------------------------------------
>
> Key: WSS-140
> URL: https://issues.apache.org/jira/browse/WSS-140
> Project: WSS4J
> Issue Type: Bug
> Components: WSS4J Core
> Affects Versions: 1.5.4
> Environment: Axis2 1.4, Rampart 1.4, wss4j 1.5.4
> Reporter: Gary Snider
> Assignee: Colm O hEigeartaigh
> Priority: Blocker
> Fix For: 1.5.5
>
>
> org.apache.ws.security.message.WSSecEncryptedKey.prepareInternal calls UUIDGenerator to set the Id attribute of EncryptedKey.
> The problem is that the Id attribute is an xml Id and should be a NCName (non-colonized name). The output generated from WSSecEncryptedKey is:
> <xenc:EncryptedKey Id="EncKeyId-urn:uuid:8673283BB2856861F7121847399704618">
> Any validating parser would fail based on that value. Bottom line: wss4j generates invalid xml because of the Id attribute and the fact that it is not a NCName.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org