[
https://issues.apache.org/jira/browse/WSS-626?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16417200#comment-16417200
]
Roman Urich commented on WSS-626:
---------------------------------
I found out that if I transform a SOAPPart to Document the Header node has the
attribute _xmlns:S12="http://www.w3.org/2003/05/soap-envelope"; too:_
{code:xml}
<?xml version="1.0" encoding="UTF-8"?>
<S12:Envelope xmlns:S12="http://www.w3.org/2003/05/soap-envelope";
xmlns:ds="http://www.w3.org/2000/09/xmldsig#";
xmlns:eb="http://docs.oasis-open.org/ebxml-msg/ebms/v3.0/ns/core/200704/";
xmlns:ebbp="http://docs.oasis-open.org/ebxml-bp/ebbp-signals-2.0";
xmlns:ns5="http://www.w3.org/1999/xlink";>
<S12:Header xmlns:S12="http://www.w3.org/2003/05/soap-envelope";>
...
{code}
This leads to duplicate prefixes in the PrefixList by message signing.
Why wss4j uses internal a List instead of a Set to build PrefixList?
> Duplicates in the PrefixList
> ----------------------------
>
> Key: WSS-626
> URL: https://issues.apache.org/jira/browse/WSS-626
> Project: WSS4J
> Issue Type: Bug
> Components: WSS4J Core
> Affects Versions: 2.2.1
> Reporter: Roman Urich
> Assignee: Colm O hEigeartaigh
> Priority: Major
>
> Every time when I sign a SOAP Message with wss4j I get duplicate prefixes:
> PrefixList="*S12 S12* ds eb ebbp ns5"
> Sample SOAP Message:
> {code:xml}
> <?xml version='1.0' encoding='utf-8'?>
> <S12:Envelope xmlns:S12="http://www.w3.org/2003/05/soap-envelope";
> xmlns:ns5="http://www.w3.org/1999/xlink";
> xmlns:ebbp="http://docs.oasis-open.org/ebxml-bp/ebbp-signals-2.0";
> xmlns:eb="http://docs.oasis-open.org/ebxml-msg/ebms/v3.0/ns/core/200704/";
> xmlns:ds="http://www.w3.org/2000/09/xmldsig#";>
> <S12:Header>
> <eb:Messaging S12:mustUnderstand="true"
> id="id-82ea2564-ce1e-4f2b-a7dc-6059b62b5f55">
> <eb:UserMessage>
> <eb:MessageInfo>
>
> <eb:Timestamp>2018-03-26T11:30:29.769+02:00</eb:Timestamp>
>
> <eb:MessageId>[email protected]</eb:MessageId>
> </eb:MessageInfo>
> <eb:PartyInfo>
> <eb:From>
> <eb:PartyId
> type="AS4-Name">pontonxp</eb:PartyId>
>
> <eb:Role>http://docs.oasis-open.org/ebxml-msg/ebms/v3.0/ns/core/200704/defaultRole</eb:Role>
> </eb:From>
> <eb:To>
> <eb:PartyId
> type="AS4-Name">domibus_plain</eb:PartyId>
>
> <eb:Role>http://docs.oasis-open.org/ebxml-msg/ebms/v3.0/ns/core/200704/defaultRole</eb:Role>
> </eb:To>
> </eb:PartyInfo>
> <eb:CollaborationInfo>
>
> <eb:AgreementRef>http://domibus.eu/agreement/plain</eb:AgreementRef>
> <eb:Service
> type="http://docs.oasis-open.org/ebxml-msg/as4/200902/service";>sendMessageService</eb:Service>
>
> <eb:Action>http://docs.oasis-open.org/ebxml-msg/as4/200902/action</eb:Action>
>
> <eb:ConversationId>[email protected]</eb:ConversationId>
> </eb:CollaborationInfo>
> <eb:PayloadInfo>
> <eb:PartInfo
> href="cid:payload-1522056629904">
> <eb:Schema
> location="http://www.efet.org/schemas/V3R2/EFET-BCN-V3R2.xsd"; version="3.20"/>
> <eb:Description
> xml:lang="en">Payload</eb:Description>
> <eb:PartProperties>
> <eb:Property
> name="MimeType">text/xml</eb:Property>
> </eb:PartProperties>
> </eb:PartInfo>
> </eb:PayloadInfo>
> </eb:UserMessage>
> </eb:Messaging>
> </S12:Header>
> <S12:Body/>
> </S12:Envelope>
> {code}
> Signature part:
> {code:xml}
> <ds:CanonicalizationMethod
> Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";>
> <ec:InclusiveNamespaces
> xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"; PrefixList="S12 S12 ds eb
> ebbp ns5"/>
> </ds:CanonicalizationMethod>
> <ds:SignatureMethod
> Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
> <ds:Reference URI="#id-34c330d2-a31b-43e5-939e-a3bcc45c7003">
> <ds:Transforms>
> <ds:Transform
> Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";>
> <ec:InclusiveNamespaces
> xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"; PrefixList="ds eb ebbp
> ns5"/>
> </ds:Transform>
> </ds:Transforms>
> <ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
> {code}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
