Uploaded image for project: 'WSS4J'
  1. WSS4J
  2. WSS-482

EncryptedElements + SignedElements validation not working

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Fixed
    • None
    • 2.0.0
    • None
    • None

    Description

      A negative testcase in CXF, where the server policy requires a wsa:To header to be encrypted is not failing. The policy is:

      <sp:EncryptedElements
      xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702">
      <sp:XPath xmlns:wsa="http://www.w3.org/2005/08/addressing"
      xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"
      >/soap:Envelope/soap:Header/wsa:To</sp:XPath>
      </sp:EncryptedElements>

      Attachments

        Activity

          People

            coheigea Colm O hEigeartaigh
            coheigea Colm O hEigeartaigh
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: