You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@santuario.apache.org by bu...@apache.org on 2007/11/26 17:47:56 UTC
DO NOT REPLY [Bug 43964] New: - version 1.4.0 : wrong xmlns in function XENCEncryptionMethodImpl::setDigestMethod
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=43964>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.
http://issues.apache.org/bugzilla/show_bug.cgi?id=43964
Summary: version 1.4.0 : wrong xmlns in function
XENCEncryptionMethodImpl::setDigestMethod
Product: Security
Version: unspecified
Platform: PC
OS/Version: Windows XP
Status: NEW
Keywords: PatchAvailable
Severity: blocker
Priority: P1
Component: C++ Signature
AssignedTo: security-dev@xml.apache.org
ReportedBy: jerome.clavieras@data.fr
DigestMethod element is not described in http://www.w3.org/2001/04/xmlenc# but
in http://www.w3.org/2000/09/xmldsig#
shouldn't code on line 337 of file XENCEncryptionMethodImpl.cpp
e->setAttributeNS(DSIGConstants::s_unicodeStrURIXMLNS,
str.rawXMLChBuffer(),
DSIGConstants::s_unicodeStrURIXENC);
be replaced by this one
e->setAttributeNS(DSIGConstants::s_unicodeStrURIXMLNS,
str.rawXMLChBuffer(),
DSIGConstants::s_unicodeStrURIDSIG);
Thank you in advance for your (quick) answer about what seems to be a bug to me
and once corrected allows interoperability with xmlsec library.
Jerome
--
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.