Details
-
Bug
-
Status: Closed
-
Major
-
Resolution: Cannot Reproduce
-
3.5.2
-
None
-
None
-
- Apache Maven 3.8.5
- Java version: 11.0.12, vendor: Eclipse Foundation
- Apache Tomcat 9.0.62
- openSUSE Tumbleweed 20220509
-
Moderate
Description
Hello colleagues,
I probably found a bug in org.apache.cxf.ws.security.wss4j.CryptoCoverageChecker.
- Issue: SOAP XML message encryption coverage checking for more than 1 XML elements does not work. If only 1 XML element encryption coverage is checked, everything works fine.
- Symptoms: CryptoCoverageUtil.matchElement(Collection<WSDataRef>, CoverageScope, Element) compares objects via references (r.getProtectedElement() == el) but they are always different objects
- Reproducer JUnit tests are provided on GitHub: greatit/crypto-coverage-test
Fixing the issue would be much appreciated. Thank you.