WSS4J 1.6 incorrectly using XML-Security ResourceResolvers
----------------------------------------------------------

                 Key: WSS-301
                 URL: https://issues.apache.org/jira/browse/WSS-301
             Project: WSS4J
          Issue Type: Bug
    Affects Versions: 1.6.1
            Reporter: Colm O hEigeartaigh
            Assignee: Colm O hEigeartaigh
             Fix For: 1.6.2



WSS4J 1.6.x is incorrectly using XML-Security ResourceResolvers to "resolve" 
DOM Elements for use in signature creation and verification. WSS4J uses a 
custom IdResolver implementation to call a custom ResourceResolverSpi instance. 
This IdResolver implementation uses "internal" org.jcp.* classes, and this is 
causing problems when using JDK 1.6 for signature creation and validation in 
some containers (Jetty).

WSS4J should be using the JSR-105 API instead to find and supply elements for 
signature/creation.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to