You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@santuario.apache.org by "L. Tanguy (JIRA)" <ji...@apache.org> on 2015/12/21 01:02:46 UTC

[jira] [Commented] (SANTUARIO-424) Multiple Signatures cause a NPE on verification in the streaming code

    [ https://issues.apache.org/jira/browse/SANTUARIO-424?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15065933#comment-15065933 ] 

L. Tanguy commented on SANTUARIO-424:
-------------------------------------

Hi Marc,

I'm not sure to correctly understand what you mean by chaining the XMLStreamReaders. I would be interested to have some details. Will it work if one signature is covered by another one ?


> Multiple Signatures cause a NPE on verification in the streaming code
> ---------------------------------------------------------------------
>
>                 Key: SANTUARIO-424
>                 URL: https://issues.apache.org/jira/browse/SANTUARIO-424
>             Project: Santuario
>          Issue Type: Bug
>            Reporter: Colm O hEigeartaigh
>            Assignee: Marc Giger
>             Fix For: Java 2.0.6
>
>
> Multiple Signatures cause a NPE on verification with the streaming code. The XMLSecurityInputProcessor is only really designed to process a single Signature (i.e. the internalBufferProcessor gets removed on processing a single signature). Not sure how feasible it is to support multiple signatures here.
> Ignored Test case added as part of this commit: http://svn.apache.org/viewvc?view=revision&revision=1693244



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)