Impossible to sign BST since 1.6.x
----------------------------------

                 Key: WSS-328
                 URL: https://issues.apache.org/jira/browse/WSS-328
             Project: WSS4J
          Issue Type: Bug
          Components: WSS4J Core
    Affects Versions: 1.6.3
            Reporter: Willem Salembier
            Assignee: Colm O hEigeartaigh


The org.apache.ws.security.message.WSSecSignature::build method has been 
changed to first compute the signature and afterwards prepend the BST to the 
security header. If the requirement is to sign the BST, the computeSignature 
doesn't find the BST.

        Vector<WSEncryptionPart> parts = new Vector<WSEncryptionPart>();
        parts.add(new WSEncryptionPart(WSConstants.BINARY_TOKEN_LN, 
WSConstants.WSSE_NS, "Element"));
        signature.setParts(parts);

In 1.5.x there was also a wildcard "Token" to sign the security token, but this 
is not supported anymore in 1.6.x.

        Vector<WSEncryptionPart> parts = new Vector<WSEncryptionPart>();
        parts.add(new WSEncryptionPart("Token", null, "Element"));
        signature.setParts(parts);



--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: 
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to