Return-Path: 
 <java-dev-return-92010-apmail-axis-java-dev-archive=axis.apache.org@axis.apache.org>
X-Original-To: apmail-axis-java-dev-archive@www.apache.org
Delivered-To: apmail-axis-java-dev-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [140.211.11.3])
	by minotaur.apache.org (Postfix) with SMTP id 61AC1C0C1
	for <apmail-axis-java-dev-archive@www.apache.org>;
 Thu, 12 Sep 2013 14:59:03 +0000 (UTC)
Received: (qmail 59383 invoked by uid 500); 12 Sep 2013 14:58:57 -0000
Delivered-To: apmail-axis-java-dev-archive@axis.apache.org
Received: (qmail 59198 invoked by uid 500); 12 Sep 2013 14:58:56 -0000
Mailing-List: contact java-dev-help@axis.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:java-dev-help@axis.apache.org>
List-Unsubscribe: <mailto:java-dev-unsubscribe@axis.apache.org>
List-Post: <mailto:java-dev@axis.apache.org>
List-Id: <java-dev.axis.apache.org>
Reply-To: java-dev@axis.apache.org
Delivered-To: mailing list java-dev@axis.apache.org
Received: (qmail 58846 invoked by uid 99); 12 Sep 2013 14:58:55 -0000
Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28)
    by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 12 Sep 2013 14:58:55 +0000
Date: Thu, 12 Sep 2013 14:58:55 +0000 (UTC)
From: "Suresh Attanayake (JIRA)" <jira@apache.org>
To: java-dev@axis.apache.org
Message-ID: <JIRA.12552718.1335384593574.122760.1378997935545@arcas>
In-Reply-To: <JIRA.12552718.1335384593574@arcas>
References: <JIRA.12552718.1335384593574@arcas>
Subject: [jira] [Updated] (RAMPART-366) sp:EncryptBeforeSigning protection
 order does not work
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394


     [ https://issues.apache.org/jira/browse/RAMPART-366?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Suresh Attanayake updated RAMPART-366:
--------------------------------------

    Attachment: RAMPART-366.xml

Attaching the request with sp:SignedEncryptedSupportingTokens 
                
> sp:EncryptBeforeSigning protection order does not work
> ------------------------------------------------------
>
>                 Key: RAMPART-366
>                 URL: https://issues.apache.org/jira/browse/RAMPART-366
>             Project: Rampart
>          Issue Type: Bug
>          Components: rampart-policy
>    Affects Versions: 1.7.0
>            Reporter: Philippe A
>         Attachments: policy.xml, RAMPART-366.xml, tested-policy.xml
>
>
> Specifying <sp:EncryptBeforeSigning/> protection order in my <sp:SymmetricBinding> security binding results in my Axis server returning the following fault:
> org.apache.axis2.AxisFault: An unsupported signature or encryption algorithm was used (WSSecurityEngine: EncryptedData does not contain xenc:EncryptedKey)
> My requests go through if I comment out <sp:EncryptBeforeSigning/> from my policy. My requests also go through with similar security options <sp:SignBeforeEncrypting/> + <sp:EncryptSignature/>.  
> In Axis 1.5.2 + Rampart 1.5.2 and in 1.6.1, the symptom is the following:
> 2012-04-24 17:41:43,604 [main] DEBUG org.apache.rampart.MESSAGE  - *********************** RampartReceiver received
> <?xml version='1.0' encoding='utf-8'?>
> <soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/">
>   <soapenv:Body>
>     <soapenv:Fault>
>       <faultcode>soapenv:Server</faultcode>
>       <faultstring>Missing argument</faultstring>
>       <detail />
>     </soapenv:Fault>
>   </soapenv:Body>
> </soapenv:Envelope>
> Lastly, I looked for a Rampart example using sp:EncryptBeforeSigning  but found none. I wonder if this is supported at all?

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

---------------------------------------------------------------------
To unsubscribe, e-mail: java-dev-unsubscribe@axis.apache.org
For additional commands, e-mail: java-dev-help@axis.apache.org