cxf-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Colm O hEigeartaigh (JIRA)" <j...@apache.org>
Subject [jira] Created: (CXF-1436) Error in WS-Security 1.1 Signature Confirmation handling
Date Fri, 15 Feb 2008 15:10:09 GMT
Error in WS-Security 1.1 Signature Confirmation handling
--------------------------------------------------------

                 Key: CXF-1436
                 URL: https://issues.apache.org/jira/browse/CXF-1436
             Project: CXF
          Issue Type: Bug
          Components: WS-* Components
    Affects Versions: 2.1
            Reporter: Colm O hEigeartaigh
            Priority: Minor
             Fix For: 2.1



WS-Security 1.1 Signature Confirmation is a mechanism whereby a receiver of a signed SOAP
message attaches a "SignatureConfirmation" blob in the responding SOAP message containing
the signature that was received. In this way the initiator knows that the signature was received
correctly.

In CXF, support for signature confirmation is provided via the WSS4J*Interceptors. However,
there's a minor boolean bug in the WSS4JOutInterceptor that mixes up the roles of the requestor
and the responder, and hence this feature is broken.

See attached patch for fix and unit test.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


Mime
View raw message