[jira] [Updated] (CXF-5083) Failure in checkEndorsed() when timestamp is not signed with EndorsingSupportingTokens

["Syed Abdul Wadood (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/CXF-5083?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Syed Abdul Wadood updated CXF-5083:
-----------------------------------

    Attachment: SymEndorsingPolicy.xml

Here is the policy which is causing failure in checkEndorsed in AbstractSupportingTokenPolicyValidator.java.
                
> Failure in checkEndorsed() when timestamp is not signed with EndorsingSupportingTokens
> --------------------------------------------------------------------------------------
>
>                 Key: CXF-5083
>                 URL: https://issues.apache.org/jira/browse/CXF-5083
>             Project: CXF
>          Issue Type: Bug
>          Components: WS-* Components
>    Affects Versions: 2.7.5
>         Environment: All platforms
>            Reporter: Syed Abdul Wadood
>            Assignee: Colm O hEigeartaigh
>             Fix For: 2.7.5
>
>         Attachments: SymEndorsingPolicy.xml
>
>   Original Estimate: 48h
>  Remaining Estimate: 48h
>
> In AbstractSupportingTokenPolicyValidator.java, the checkEndorsed() method is failing when TLS is used and timestamp is not signed.  In my scenario, I am using EndorsingSupportingTokens with SymmetricBinding and the client request is sent over SSL, so TLS is used. The problem is the SOAP request generated does not have timestamp signed, it only has <ds:Signature> signed, but the checkEndorsed routine is failing as it requires timestamp to be signed with TLS is in use.
> I am not sure if this problem will be fixed by CXF-5056.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira