cxf-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Colm O hEigeartaigh (JIRA)" <>
Subject [jira] [Resolved] (CXF-6468) Secure Conversation Renew is missing Instance creation
Date Mon, 22 Jun 2015 11:41:00 GMT


Colm O hEigeartaigh resolved CXF-6468.
    Resolution: Fixed

I applied a modified version of the patch. Can you confirm that this is working ok please?


> Secure Conversation Renew is missing Instance creation
> ------------------------------------------------------
>                 Key: CXF-6468
>                 URL:
>             Project: CXF
>          Issue Type: Bug
>    Affects Versions: 3.0.5, 3.1.1
>            Reporter: Freddy Exposito
>            Assignee: Colm O hEigeartaigh
>            Priority: Minor
>             Fix For: 3.0.6, 3.1.2
>         Attachments: cxf-sct-with-instance.patch
> Secure Conversation Renew is not working from a .NET client because <ws:Instance>
is missing in the SecurityContextToken.
> Reading into the standard here ->
> says the following: 
> "The initial issuance need not contain a wsc:Instance element, however, all subsequent
issuances with different keys MUST have a wsc:Instance element with a unique value."
> Also a reference seems to be required in the SecurityTokenRefernce according to this:

> "If a specific key instance needs to be referenced, then the global attribute wsc:Instance
is included in the <wsse:Reference> sub-element (only when using <wsc:Identifier>
> The attached patch works for us

This message was sent by Atlassian JIRA

View raw message