You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@cxf.apache.org by "Hugo Trippaers (JIRA)" <ji...@apache.org> on 2015/06/16 14:35:00 UTC

[jira] [Created] (CXF-6464) The derived key versions of sign/encrypt in SymmetricBindingHandler don't support attachments

Hugo Trippaers created CXF-6464:
-----------------------------------

             Summary: The derived key versions of sign/encrypt in SymmetricBindingHandler don't support attachments
                 Key: CXF-6464
                 URL: https://issues.apache.org/jira/browse/CXF-6464
             Project: CXF
          Issue Type: Bug
          Components: WS-* Components
    Affects Versions: 3.1.1
            Reporter: Hugo Trippaers
             Fix For: 3.1.2


Adding a sp:Attachment policy to the binding policy eventually causes client requests to fail with the following exception.

Caused by: org.apache.wss4j.common.ext.WSSecurityException: Cannot setup signature data structure
Original Exception was org.apache.wss4j.common.ext.WSSecurityException: no attachment callbackhandler supplied
	at org.apache.wss4j.dom.message.WSSecSignatureBase.addReferencesToSign(WSSecSignatureBase.java:204)
	at org.apache.wss4j.dom.message.WSSecDKSign.addReferencesToSign(WSSecDKSign.java:189)
	at org.apache.cxf.ws.security.wss4j.policyhandlers.SymmetricBindingHandler.doSignatureDK(SymmetricBindingHandler.java:732)
	at org.apache.cxf.ws.security.wss4j.policyhandlers.SymmetricBindingHandler.doSignature(SymmetricBindingHandler.java:757)
	at org.apache.cxf.ws.security.wss4j.policyhandlers.SymmetricBindingHandler.doSignBeforeEncrypt(SymmetricBindingHandler.java:342)
	at org.apache.cxf.ws.security.wss4j.policyhandlers.SymmetricBindingHandler.handleBinding(SymmetricBindingHandler.java:126)
	at org.apache.cxf.ws.security.wss4j.PolicyBasedWSS4JOutInterceptor$PolicyBasedWSS4JOutInterceptorInternal.handleMessageInternal(PolicyBasedWSS4JOutInterceptor.java:174)
	at org.apache.cxf.ws.security.wss4j.PolicyBasedWSS4JOutInterceptor$PolicyBasedWSS4JOutInterceptorInternal.handleMessage(PolicyBasedWSS4JOutInterceptor.java:108)
	at org.apache.cxf.ws.security.wss4j.PolicyBasedWSS4JOutInterceptor$PolicyBasedWSS4JOutInterceptorInternal.handleMessage(PolicyBasedWSS4JOutInterceptor.java:95)



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)