Mailing-List: contact cxf-issues-help@incubator.apache.org; run by ezmlm
Precedence: bulk
Reply-To: cxf-dev@incubator.apache.org
Message-ID: <14567073.1203088209275.JavaMail.jira@brutus>
Date: Fri, 15 Feb 2008 07:10:09 -0800 (PST)
From: "Colm O hEigeartaigh (JIRA)" <jira@apache.org>
To: cxf-issues@incubator.apache.org
Subject: [jira] Created: (CXF-1436) Error in WS-Security 1.1 Signature
 Confirmation handling
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit

Error in WS-Security 1.1 Signature Confirmation handling
--------------------------------------------------------

                 Key: CXF-1436
                 URL: https://issues.apache.org/jira/browse/CXF-1436
             Project: CXF
          Issue Type: Bug
          Components: WS-* Components
    Affects Versions: 2.1
            Reporter: Colm O hEigeartaigh
            Priority: Minor
             Fix For: 2.1


WS-Security 1.1 Signature Confirmation is a mechanism whereby a receiver of a signed SOAP message attaches a "SignatureConfirmation" blob in the responding SOAP message containing the signature that was received. In this way the initiator knows that the signature was received correctly.

In CXF, support for signature confirmation is provided via the WSS4J*Interceptors. However, there's a minor boolean bug in the WSS4JOutInterceptor that mixes up the roles of the requestor and the responder, and hence this feature is broken.

See attached patch for fix and unit test.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.