You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@santuario.apache.org by bu...@apache.org on 2009/06/30 15:22:28 UTC
DO NOT REPLY [Bug 47459] New: c14n11 does include parent xml:id
attributes in encrypted data
https://issues.apache.org/bugzilla/show_bug.cgi?id=47459
Summary: c14n11 does include parent xml:id attributes in
encrypted data
Product: Security
Version: Java 1.4.2
Platform: All
OS/Version: All
Status: NEW
Keywords: RFC
Severity: normal
Priority: P2
Component: Canonicalization
AssignedTo: security-dev@xml.apache.org
ReportedBy: staible@keyon.ch
Created an attachment (id=23913)
--> (https://issues.apache.org/bugzilla/attachment.cgi?id=23913)
debug log
xml:id attributes are still not correctly handled when using c14n11 for
encryption.
Example:
When I encrypt the <data> element in the following xml document, the xml:id
attribute is added to the canonical form of the data tag during encryption.
<?xml version="1.0" encoding="UTF-8"?><test xml:id="ref1234">
<data>12345678</data>
</test>
encrypt/decrypt using c14n11 creates the following:
<?xml version="1.0" encoding="UTF-8"?><test xml:id="ref1234">
<data xml:id="ref1234">12345678</data>
</test>
See also attached debug log.
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
DO NOT REPLY [Bug 47459] c14n11 does include parent xml:id
attributes in encrypted data
Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=47459
--- Comment #2 from sstaible <st...@keyon.ch> 2009-07-01 10:34:06 PST ---
Created an attachment (id=23917)
--> (https://issues.apache.org/bugzilla/attachment.cgi?id=23917)
Testcase
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
[Bug 47459] c14n11 does include parent xml:id attributes in
encrypted data
Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=47459
pmaccess <pr...@att.net> changed:
What |Removed |Added
----------------------------------------------------------------------------
Blocks| |57030
--
You are receiving this mail because:
You are the assignee for the bug.
[Bug 47459] c14n11 does include parent xml:id attributes in
encrypted data
Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=47459
Chuck Caldarale <ch...@unisys.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |premieragent@att.net
--- Comment #4 from Chuck Caldarale <ch...@unisys.com> ---
*** Bug 57030 has been marked as a duplicate of this bug. ***
--
You are receiving this mail because:
You are the assignee for the bug.
DO NOT REPLY [Bug 47459] c14n11 does include parent xml:id
attributes in encrypted data
Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=47459
sstaible <st...@keyon.ch> changed:
What |Removed |Added
----------------------------------------------------------------------------
Attachment #23913|0 |1
is obsolete| |
--- Comment #3 from sstaible <st...@keyon.ch> 2009-07-01 10:35:38 PST ---
Created an attachment (id=23918)
--> (https://issues.apache.org/bugzilla/attachment.cgi?id=23918)
debug log of test case
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
DO NOT REPLY [Bug 47459] c14n11 does include parent xml:id
attributes in encrypted data
Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=47459
--- Comment #1 from coheigea <co...@apache.org> 2009-07-01 04:08:07 PST ---
Can you provide a test-case?
Colm.
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.