You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@santuario.apache.org by bu...@apache.org on 2007/11/26 17:47:56 UTC

DO NOT REPLY [Bug 43964] New: - version 1.4.0 : wrong xmlns in function XENCEncryptionMethodImpl::setDigestMethod

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=43964>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=43964

           Summary: version 1.4.0  : wrong xmlns in function
                    XENCEncryptionMethodImpl::setDigestMethod
           Product: Security
           Version: unspecified
          Platform: PC
        OS/Version: Windows XP
            Status: NEW
          Keywords: PatchAvailable
          Severity: blocker
          Priority: P1
         Component: C++ Signature
        AssignedTo: security-dev@xml.apache.org
        ReportedBy: jerome.clavieras@data.fr


DigestMethod element is not described in http://www.w3.org/2001/04/xmlenc# but
in http://www.w3.org/2000/09/xmldsig#

shouldn't code on line 337 of file XENCEncryptionMethodImpl.cpp 

e->setAttributeNS(DSIGConstants::s_unicodeStrURIXMLNS,					         
str.rawXMLChBuffer(),
          DSIGConstants::s_unicodeStrURIXENC);

be replaced by this one

e->setAttributeNS(DSIGConstants::s_unicodeStrURIXMLNS,					         
str.rawXMLChBuffer(),
          DSIGConstants::s_unicodeStrURIDSIG);

Thank you in advance for your (quick) answer about what seems to be a bug to me
and once  corrected allows interoperability with xmlsec library.

Jerome

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.