[
https://issues.apache.org/jira/browse/CXF-6464?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Colm O hEigeartaigh resolved CXF-6464.
--------------------------------------
Resolution: Fixed
> The derived key versions of sign/encrypt in SymmetricBindingHandler don't
> support attachments
> ---------------------------------------------------------------------------------------------
>
> Key: CXF-6464
> URL: https://issues.apache.org/jira/browse/CXF-6464
> Project: CXF
> Issue Type: Bug
> Components: WS-* Components
> Affects Versions: 3.1.1
> Reporter: Hugo Trippaers
> Assignee: Colm O hEigeartaigh
> Fix For: 3.0.6, 3.1.2
>
>
> Adding a sp:Attachment policy to the binding policy eventually causes client
> requests to fail with the following exception.
> Caused by: org.apache.wss4j.common.ext.WSSecurityException: Cannot setup
> signature data structure
> Original Exception was org.apache.wss4j.common.ext.WSSecurityException: no
> attachment callbackhandler supplied
> at
> org.apache.wss4j.dom.message.WSSecSignatureBase.addReferencesToSign(WSSecSignatureBase.java:204)
> at
> org.apache.wss4j.dom.message.WSSecDKSign.addReferencesToSign(WSSecDKSign.java:189)
> at
> org.apache.cxf.ws.security.wss4j.policyhandlers.SymmetricBindingHandler.doSignatureDK(SymmetricBindingHandler.java:732)
> at
> org.apache.cxf.ws.security.wss4j.policyhandlers.SymmetricBindingHandler.doSignature(SymmetricBindingHandler.java:757)
> at
> org.apache.cxf.ws.security.wss4j.policyhandlers.SymmetricBindingHandler.doSignBeforeEncrypt(SymmetricBindingHandler.java:342)
> at
> org.apache.cxf.ws.security.wss4j.policyhandlers.SymmetricBindingHandler.handleBinding(SymmetricBindingHandler.java:126)
> at
> org.apache.cxf.ws.security.wss4j.PolicyBasedWSS4JOutInterceptor$PolicyBasedWSS4JOutInterceptorInternal.handleMessageInternal(PolicyBasedWSS4JOutInterceptor.java:174)
> at
> org.apache.cxf.ws.security.wss4j.PolicyBasedWSS4JOutInterceptor$PolicyBasedWSS4JOutInterceptorInternal.handleMessage(PolicyBasedWSS4JOutInterceptor.java:108)
> at
> org.apache.cxf.ws.security.wss4j.PolicyBasedWSS4JOutInterceptor$PolicyBasedWSS4JOutInterceptorInternal.handleMessage(PolicyBasedWSS4JOutInterceptor.java:95)
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
