STSClient can't process EncryptedKey elements received from an STS
------------------------------------------------------------------
Key: CXF-3761
URL: https://issues.apache.org/jira/browse/CXF-3761
Project: CXF
Issue Type: Bug
Affects Versions: 2.4.2, 2.3.6
Reporter: Colm O hEigeartaigh
Assignee: Colm O hEigeartaigh
Fix For: 2.3.7, 2.4.3, 2.5
There is a bug in the STSClient when processing a RequestedProofToken received
from an STS. This element can contain an EncryptedKey child, but the STSClient
searches in the wrong namespace and so never finds the element.
Secondly, the STSClient doesn't support the scenario where a
RequestedProofToken contains a ComputedKey, and the associated Entropy element
has an EncryptedKey child (instead of a BinarySecret).
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira