You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@santuario.apache.org by "Ian Young (JIRA)" <ji...@apache.org> on 2016/05/24 17:04:13 UTC

[jira] [Created] (SANTUARIO-443) Java library generates schema invalid KeyValue for EC credentials

Ian Young created SANTUARIO-443:
-----------------------------------

             Summary: Java library generates schema invalid KeyValue for EC credentials
                 Key: SANTUARIO-443
                 URL: https://issues.apache.org/jira/browse/SANTUARIO-443
             Project: Santuario
          Issue Type: Bug
          Components: Java
    Affects Versions: Java 2.0.6, Java 1.5.6
            Reporter: Ian Young
            Assignee: Colm O hEigeartaigh


The constructor for {{KeyValue}} includes the following:

{code}
if (pk instanceof java.security.interfaces.DSAPublicKey) {
    DSAKeyValue dsa = new DSAKeyValue(getDocument(), pk);
    ...
} else if (pk instanceof java.security.interfaces.RSAPublicKey) {
    RSAKeyValue rsa = new RSAKeyValue(getDocument(), pk);
    ...
}
{code}

This means that passing a public key which is not one of those types (e.g., a {{ECPublicKey}}) will generate an empty {{<KeyValue>}} element. This is not schema-valid.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)