CXF does not always respect SecurityPolicy TokenInclusion for the
AsymmetricBinding
-----------------------------------------------------------------------------------
Key: CXF-4166
URL: https://issues.apache.org/jira/browse/CXF-4166
Project: CXF
Issue Type: Bug
Affects Versions: 2.5.2, 2.4.6
Reporter: Colm O hEigeartaigh
Assignee: Colm O hEigeartaigh
Fix For: 2.4.7, 2.5.3
CXF does not always respect the SecurityPolicy TokenInclusion for the
AsymmetricBinding. In particular, if an X509Token is used as an InitiatorToken,
a direct reference to the token is always used for Always* inclusion policies,
even if the policy specifies a Thumbprint or IssuerSerial requirement.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
