cxf-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Colm O hEigeartaigh (Commented) (JIRA)" <>
Subject [jira] [Commented] (CXF-4049) Check external CryptoProvider from message context properties in Wss4jInInterceptor
Date Fri, 20 Jan 2012 14:57:40 GMT


Colm O hEigeartaigh commented on CXF-4049:

Hi Andrei,

I would be ok with this patch if you moved the functionality into the protected "computeAction"
method instead. That way it doesn't override the PolicyBasedWSS4JInInterceptor. A patch for
the latter is available on CXF-4034 for this issue.

> Check external CryptoProvider from message context properties in Wss4jInInterceptor
> -----------------------------------------------------------------------------------
>                 Key: CXF-4049
>                 URL:
>             Project: CXF
>          Issue Type: Improvement
>          Components: Core
>    Affects Versions: 2.5.1
>         Environment: Windows
>            Reporter: Andrei Shakirin
>         Attachments: WSS4JInInterceptor.patch
> Hi,
> Just a small improvements in Wss4jInInterceptor.
> Normally CryptoProvider doesn't instantiated directly via CryptoFactory, but firstly
tried to obtained from message context properties (SecurityConstants.ENCRYPT_CRYPTO, SecurityConstants.SIGNATURE_CRYPTO).
And only if the properties are not set, CryptoProvider is instantiated via CryptoFactory.
This gives the possibility to replace Merlin CryptoProvider to custom one (probably non keystore
> AbstractBindingBuilder, XmlSignHandler, SAMLUtils are working in this way.
> Unfortunatelly it is not the case for Wss4jInInterceptor. It doesn't initializes crypto
provider in RequestData and crypto provider is always created via CryptoFactory. It makes
impossible to use custom implementation of CryptoProvider in incoming chain.
> Patch is attached.
> Regards,
> Andrei.

This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:!default.jspa
For more information on JIRA, see:


View raw message