Mailing-List: contact dev-help@geronimo.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@geronimo.apache.org
Received-SPF: pass (athena.apache.org: domain of jgawor@gmail.com designates
 209.85.221.198 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:date:message-id:subject:from:to:content-type
         :content-transfer-encoding;
        b=w2rFm5jy290+IxW+xtj1e1UdQdCdDe3fTkfhslyJgRndvENjZyElxTZ9UgY0Ek9u4l
         UDQ0dAW46rczhZnlp3VP1q8/uVKqEZQtmRtQFfrFOz8b8ZoHu4uooXIK295YcQblvd7c
         GySfRk/qjDYxUwZZVgjSeNc3rfeAAipbZbk50=
MIME-Version: 1.0
Date: Thu, 4 Jun 2009 17:15:13 -0400
Message-ID: <5eb405c70906041415h41afd756h97abd282387cfcc8@mail.gmail.com>
Subject: problems with enforcing transport security constraint in trunk?
From: Jarek Gawor <jgawor@gmail.com>
To: dev <dev@geronimo.apache.org>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

Hey,

I wrote simple tests that test secure access to servlet-based web
services (see http://svn.apache.org/viewvc/geronimo/server/trunk/testsuite/webservices-testsuite/jaxws-tests/jaxws-war-sec/).
The tests test 1) basic authentication and 2) enforcing transport
(CONFIDENTIAL) guarantee. The basic authentication tests work as
expected but the transport guarantee do not on both tomcat and jetty.
It acts like the transport guarantee wasn't performed at all.

I deployed the same tests on 2.1.5-SNAPSHOT and things are working as
expected in all cases. So I'm not sure if this is a new bug in trunk,
or if I missed something.

Any ideas?

Thanks,
Jarek