Mailing-List: contact wss4j-dev-help@ws.apache.org; run by ezmlm
Precedence: bulk
Message-ID: <649748361.1120849393821.JavaMail.jira@ajax.apache.org>
Date: Fri, 8 Jul 2005 21:03:13 +0200 (CEST)
From: "Davanum Srinivas (JIRA)" <jira@apache.org>
To: wss4j-dev@ws.apache.org
Subject: [jira] Moved: (WSS-3) .NET WSE signature validation of SAML Assertion
 throws exception
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit

     [ http://issues.apache.org/jira/browse/WSS-3?page=all ]

Davanum Srinivas moved WSFX-51 to WSS-3:
----------------------------------------

      Project: WSS4J  (was: WSFX)
          Key: WSS-3  (was: WSFX-51)
    Component:     (was: WSS4J)

> .NET WSE signature validation of SAML Assertion throws exception
> ----------------------------------------------------------------
>
>          Key: WSS-3
>          URL: http://issues.apache.org/jira/browse/WSS-3
>      Project: WSS4J
>         Type: Improvement
>  Environment: Windows XP, .Net 2003 WSE 2.0 
>     Reporter: Ted X Toth
>  Attachments: WSSecurityUtil.diff, WSSignEnvelope.diff
>
> The .NET WSE SecurityInputFilter throws a signature validation exception when checking the signature of a SAML Assertion. The exception occurs because the filter uses the signature reference to look up the assertion by its AssertionID and  the look up fails because wss4j assumes the lookup is done on the wsu:Id. The purposed solution is to make the wsu:Id the same as the AssertionId.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org