[prev in list] [next in list] [prev in thread] [next in thread] 

List:       xmlrpc-user
Subject:    [jira] [Commented] (WSS-448) OnlySignEntireHeadersAndBody policy validation is incorrect
From:       "Marc Giger (JIRA)" <jira () apache ! org>
Date:       2013-06-12 7:42:20
Message-ID: JIRA.12649678.1369739719759.102747.1371022940805 () arcas
[Download RAW message or body]


    [ https://issues.apache.org/jira/browse/WSS-448?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13681019#comment-13681019 \
] 

Marc Giger commented on WSS-448:
--------------------------------

Oh, this change is not API compatible, so you have to adapt the changes in CXF:

The PolicyEnforcer constructor expects an new additional parameter...
                
> OnlySignEntireHeadersAndBody policy validation is incorrect
> -----------------------------------------------------------
> 
> Key: WSS-448
> URL: https://issues.apache.org/jira/browse/WSS-448
> Project: WSS4J
> Issue Type: Bug
> Reporter: Colm O hEigeartaigh
> Assignee: Marc Giger
> Fix For: 2.0
> 
> 
> OnlySignEntireHeadersAndBody policy validation is incorrect. For example, the SOAP \
> Body does not have to be signed if this property is set. However, a child Element \
> of the SOAP Body cannot be signed, the Signature must be over the entire Body. The \
> policy validation code is enforcing that the SOAP Body must be signed with this \
> property.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@ws.apache.org
For additional commands, e-mail: dev-help@ws.apache.org


[prev in list] [next in list] [prev in thread] [next in thread]