Details
-
Bug
-
Status: Closed
-
Minor
-
Resolution: Fixed
-
3.1.3
-
None
-
cxf 3.1.2, wss4j 2.1.2, spring boot 1.2.6
-
Unknown
Description
This is happening when using SamlTokenInterceptor to validate the inbound saml token via WS-SecurityPolicy.
It seems that the crypto get back from SamlTokenInterceptor is always having null PasswordEncryptor. The keystore password is not therefore decrypted properly.
SamlTokenInterceptor.java line 320:
crypto = CryptoFactory.getInstance(properties);