cxf-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Michal Sabo (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (CXF-6715) SAMLProtocolResponseValidator fails to decrypt an assertion
Date Thu, 17 Dec 2015 10:38:46 GMT

     [ https://issues.apache.org/jira/browse/CXF-6715?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Michal Sabo updated CXF-6715:
-----------------------------
    Description: 
During the decryption of the SAML assertion a WSSecurityException exception is thrown, when
it fails to load X509 certificate for an EncryptedKey element (org.apache.cxf.rs.security.saml.sso.SAMLProtocolResponseValidator:451).
However it seems that the EncryptedKey element is correct according to the XML Encryption
Syntax schema.

This is the problematic containment of the EncryptedKey element:

<xenc:EncryptedKey xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" Id="id-dG6qwCA9nALpsqno8mQK3XEyx2c-"><xenc:EncryptionMethod
Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>U4sqaCa/VuWVwBDuGXLwu8mzjVW6iJ1+GUEpyGFWE/gfXJ0hWFOu/Y+1qSjNweyEaRPimjppGMMqD9HBV0ieGazKNXftSGSoRoUXC+Uq1F9BVN5f5HgF5Ga/z2MYCfDaItQuMVuar53CBSxTPkRmgU/Pej8C5kpJNRS029FxWAYeHlTB03YqjR0xFFEhqf2vRzQjX5IglOQP7rSKeQhgacmkVz3/r3TA6JeCZ9TBDb5xIPNq7kJYn8jZYpGV/iV68cPBdjDmcva3E6NVCK4D/Sa3biV8fBFxvvIBoXeCRXwNwnqoowrqUxSb+qCtYxeuV+BVLe1OrDuqrzkipRiAIw==</xenc:CipherValue></xenc:CipherData><xenc:ReferenceList><xenc:DataReference
URI="#id-23qweVuzWC19vHEC-8kpWmk-4bY-"/></xenc:ReferenceList></xenc:EncryptedKey>

  was:
During the decryption of the SAML assertion a WSSecurityException exception is thrown, when
it fails to load X509 certificate for an EncryptedKey element (org.apache.cxf.rs.security.saml.sso.SAMLProtocolResponseValidator:451).
However, it seems that the EncryptedKey element is correct according to the XML Encryption
Syntax schema.

This is the problematic containment of the EncryptedKey element:

<xenc:EncryptedKey xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" Id="id-dG6qwCA9nALpsqno8mQK3XEyx2c-"><xenc:EncryptionMethod
Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>U4sqaCa/VuWVwBDuGXLwu8mzjVW6iJ1+GUEpyGFWE/gfXJ0hWFOu/Y+1qSjNweyEaRPimjppGMMqD9HBV0ieGazKNXftSGSoRoUXC+Uq1F9BVN5f5HgF5Ga/z2MYCfDaItQuMVuar53CBSxTPkRmgU/Pej8C5kpJNRS029FxWAYeHlTB03YqjR0xFFEhqf2vRzQjX5IglOQP7rSKeQhgacmkVz3/r3TA6JeCZ9TBDb5xIPNq7kJYn8jZYpGV/iV68cPBdjDmcva3E6NVCK4D/Sa3biV8fBFxvvIBoXeCRXwNwnqoowrqUxSb+qCtYxeuV+BVLe1OrDuqrzkipRiAIw==</xenc:CipherValue></xenc:CipherData><xenc:ReferenceList><xenc:DataReference
URI="#id-23qweVuzWC19vHEC-8kpWmk-4bY-"/></xenc:ReferenceList></xenc:EncryptedKey>


> SAMLProtocolResponseValidator fails to decrypt an assertion
> -----------------------------------------------------------
>
>                 Key: CXF-6715
>                 URL: https://issues.apache.org/jira/browse/CXF-6715
>             Project: CXF
>          Issue Type: Bug
>          Components: JAX-RS Security
>    Affects Versions: 3.0.7
>            Reporter: Michal Sabo
>         Attachments: samlResponse.xml
>
>
> During the decryption of the SAML assertion a WSSecurityException exception is thrown,
when it fails to load X509 certificate for an EncryptedKey element (org.apache.cxf.rs.security.saml.sso.SAMLProtocolResponseValidator:451).
However it seems that the EncryptedKey element is correct according to the XML Encryption
Syntax schema.
> This is the problematic containment of the EncryptedKey element:
> <xenc:EncryptedKey xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" Id="id-dG6qwCA9nALpsqno8mQK3XEyx2c-"><xenc:EncryptionMethod
Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>U4sqaCa/VuWVwBDuGXLwu8mzjVW6iJ1+GUEpyGFWE/gfXJ0hWFOu/Y+1qSjNweyEaRPimjppGMMqD9HBV0ieGazKNXftSGSoRoUXC+Uq1F9BVN5f5HgF5Ga/z2MYCfDaItQuMVuar53CBSxTPkRmgU/Pej8C5kpJNRS029FxWAYeHlTB03YqjR0xFFEhqf2vRzQjX5IglOQP7rSKeQhgacmkVz3/r3TA6JeCZ9TBDb5xIPNq7kJYn8jZYpGV/iV68cPBdjDmcva3E6NVCK4D/Sa3biV8fBFxvvIBoXeCRXwNwnqoowrqUxSb+qCtYxeuV+BVLe1OrDuqrzkipRiAIw==</xenc:CipherValue></xenc:CipherData><xenc:ReferenceList><xenc:DataReference
URI="#id-23qweVuzWC19vHEC-8kpWmk-4bY-"/></xenc:ReferenceList></xenc:EncryptedKey>



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message