[jira] [Resolved] (CXF-5083) Failure in checkEndorsed() when timestamp is not signed with EndorsingSupportingTokens

["Colm O hEigeartaigh (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/CXF-5083?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Colm O hEigeartaigh resolved CXF-5083.
--------------------------------------

    Resolution: Duplicate
      Assignee: Colm O hEigeartaigh


Should be fixed by CXF-5056.

Colm.
                
> Failure in checkEndorsed() when timestamp is not signed with EndorsingSupportingTokens
> --------------------------------------------------------------------------------------
>
>                 Key: CXF-5083
>                 URL: https://issues.apache.org/jira/browse/CXF-5083
>             Project: CXF
>          Issue Type: Bug
>          Components: WS-* Components
>    Affects Versions: 2.7.5
>         Environment: All platforms
>            Reporter: Syed Abdul Wadood
>            Assignee: Colm O hEigeartaigh
>             Fix For: 2.7.5
>
>   Original Estimate: 48h
>  Remaining Estimate: 48h
>
> In AbstractSupportingTokenPolicyValidator.java, the checkEndorsed() method is failing when TLS is used and timestamp is not signed.  In my scenario, I am using EndorsingSupportingTokens with SymmetricBinding and the client request is sent over SSL, so TLS is used. The problem is the SOAP request generated does not have timestamp signed, it only has <ds:Signature> signed, but the checkEndorsed routine is failing as it requires timestamp to be signed with TLS is in use.
> I am not sure if this problem will be fixed by CXF-5056.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira