Return-Path: 
 <dev-return-16597-apmail-ws-dev-archive=ws.apache.org@ws.apache.org>
X-Original-To: apmail-ws-dev-archive@www.apache.org
Delivered-To: apmail-ws-dev-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [140.211.11.3])
	by minotaur.apache.org (Postfix) with SMTP id E44BF18E84
	for <apmail-ws-dev-archive@www.apache.org>;
 Sat, 22 Aug 2015 01:22:46 +0000 (UTC)
Received: (qmail 17634 invoked by uid 500); 22 Aug 2015 01:22:46 -0000
Delivered-To: apmail-ws-dev-archive@ws.apache.org
Received: (qmail 17438 invoked by uid 500); 22 Aug 2015 01:22:46 -0000
Mailing-List: contact dev-help@ws.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:dev-help@ws.apache.org>
List-Unsubscribe: <mailto:dev-unsubscribe@ws.apache.org>
List-Post: <mailto:dev@ws.apache.org>
List-Id: <dev.ws.apache.org>
Reply-To: dev@ws.apache.org
Delivered-To: mailing list dev@ws.apache.org
Received: (qmail 17428 invoked by uid 99); 22 Aug 2015 01:22:46 -0000
Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28)
    by apache.org (qpsmtpd/0.29) with ESMTP; Sat, 22 Aug 2015 01:22:46 +0000
Date: Sat, 22 Aug 2015 01:22:46 +0000 (UTC)
From: "Wladislaw Mitzel (JIRA)" <jira@apache.org>
To: dev@ws.apache.org
Message-ID: <JIRA.12858017.1440206564000.135977.1440206566079@Atlassian.JIRA>
In-Reply-To: <JIRA.12858017.1440206564000@Atlassian.JIRA>
References: <JIRA.12858017.1440206564000@Atlassian.JIRA>
 <JIRA.12858017.1440206564632@arcas>
Subject: [jira] [Created] (WSS-551) Property passwordEncryptorInstance is
 not honored
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394

Wladislaw Mitzel created WSS-551:
------------------------------------

             Summary: Property passwordEncryptorInstance is not honored
                 Key: WSS-551
                 URL: https://issues.apache.org/jira/browse/WSS-551
             Project: WSS4J
          Issue Type: Bug
    Affects Versions: 2.0.5
            Reporter: Wladislaw Mitzel
            Assignee: Colm O hEigeartaigh


The configuration documentation says
|| Tag name || Tag value || Tag meaning ||
| *WSS4J 2.0.0* PASSWORD_ENCRYPTOR_INSTANCE | passwordEncryptorInstance |	A PasswordEncryptor instance used to decrypt encrypted passwords in Crypto properties files. The default is the JasyptPasswordEncryptor. |

When configuring a {{passwordEncryptorInstance}} for {{WSS4JOutInterceptor}} (line 20) the property is not honored. 
{code:xml|linenumbers=true}
<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
  xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:jaxws="http://cxf.apache.org/jaxws"
  xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.2.xsd
		http://cxf.apache.org/jaxws http://cxf.apache.org/schemas/jaxws.xsd">

  <jaxws:endpoint id="hello" address="/hello"
    implementor="de.wlami.wss4jexample.Service">
    <jaxws:outInterceptors>
      <bean id="TimestampSignEncrypt_Response"
        class="org.apache.cxf.ws.security.wss4j.WSS4JOutInterceptor">
        <constructor-arg>
          <map>
            <entry key="action" value="Timestamp Signature" />
            <entry key="user" value="servicekey" />
            <entry key="signaturePropFile" value="serviceKeystore.properties" />
            <entry key="encryptionPropFile" value="serviceKeystore.properties" />
            <entry key="encryptionUser" value="useReqSigCert" />
            <entry key="passwordCallbackClass" value="de.wlami.wss4jexample.PasswordCallback" />
            <entry key="passwordEncryptorInstance" value-ref="customPasswordEncrypter" />
          </map>
        </constructor-arg>
      </bean>
    </jaxws:outInterceptors>
  </jaxws:endpoint>

  <bean id="customPasswordEncrypter" class="de.wlami.wss4jexample.CustomPasswordEncrypter"></bean>

</beans>
{code}

The only code which seems to use the documented property is located in {{org.apache.wss4j.stax.ConfigurationConverter.parseCrypto(Map<String, Object>, WSSSecurityProperties)}}. However this method is only called from test classes as far as i could see. Using the given configuration the default {{JasyptPasswordEncryptor}} is created instead of the configured class. 



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@ws.apache.org
For additional commands, e-mail: dev-help@ws.apache.org