Mailing-List: contact issues-help@cxf.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@cxf.apache.org
Message-ID: <1513515902.1226325524458.JavaMail.jira@brutus>
Date: Mon, 10 Nov 2008 05:58:44 -0800 (PST)
From: "Daniel Kulp (JIRA)" <jira@apache.org>
To: issues@cxf.apache.org
Subject: [jira] Resolved: (CXF-1904) CLONE -MTOM does not work when add
 WSS4J interceptors(UsernameToken and Timestamp)
In-Reply-To: <900525976.1226314124633.JavaMail.jira@brutus>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit


     [ https://issues.apache.org/jira/browse/CXF-1904?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Daniel Kulp resolved CXF-1904.
------------------------------

       Resolution: Won't Fix
    Fix Version/s:     (was: 2.0.8)
                       (was: 2.1.2)
                   Invalid


This is as designed, but it's controllable.   

For security reasons, WSS4JOutInterceptor turns off the MTOM support so that any data will get properly encrypted.  WSS4J doesn't encrypt or sign attachments, thus, we turn off mtom so it gets inlined and thus properly signed/encrypted.

However, with 2.1.3 you can turn off that behavoir.   The WSS4JOutInterceptor has a setAllowMTOM(boolean) method that you can call to re-enable mtom. 


> CLONE -MTOM does not work when add WSS4J interceptors(UsernameToken and Timestamp)
> ----------------------------------------------------------------------------------
>
>                 Key: CXF-1904
>                 URL: https://issues.apache.org/jira/browse/CXF-1904
>             Project: CXF
>          Issue Type: Bug
>          Components: WS-* Components
>    Affects Versions: 2.1
>         Environment: Windows Xp,
> JDK 1.5 update 11
> apache CXF 2.1 release
>            Reporter: naveen kumar
>            Assignee: Daniel Kulp
>             Fix For: Invalid
>
>   Original Estimate: 72h
>  Remaining Estimate: 72h
>
> I have wriitten an Apache CXF client with the following specification,
> 1. MTOM attachment enabled(implemented by refering http://cwiki.apache.org/CXF20DOC/mtom.html link).
> 2. WS-Secuirty features namely, UsernameToken and Timestamp (implemented by refering   http://cwiki.apache.org/CXF20DOC/ws-security.html link)
> As per my observation, i see that the MTOM attachment gets inlined in the soap body of request, when i enable either of  WS-Security features(UsernameToken or Timestamp).But when i disable WSS4J interceptors i see that client sends the data as MTOM attachment.
> I suspect  WSS4J interceptor is causing the problem.Kindly help me in this regard.
> Note: I added WSS4J interceptors programmatically.
> Thanks in advance,
> Navin Bhat
>  

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.