[
https://issues.apache.org/jira/browse/CXF-6597?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14875895#comment-14875895
]
Colm O hEigeartaigh commented on CXF-6597:
------------------------------------------
That formulation is not valid IMO. It should be something like this instead:
<sp:AlgorithmSuite>
<wsp:Policy>
<wsp:ExactlyOne>
<sp:Basic128Rsa15/>
<sp:Basic256Rsa15/>
<sp:TripleDesRsa15/>
</wsp:ExactlyOne>
</wsp:Policy>
</sp:AlgorithmSuite>
> Invalid Policy Exception on valid on WS-Policy
> ----------------------------------------------
>
> Key: CXF-6597
> URL: https://issues.apache.org/jira/browse/CXF-6597
> Project: CXF
> Issue Type: Bug
> Components: JAX-WS Runtime
> Affects Versions: 3.0.6
> Environment: WildFly 8.2.1.Final
> Reporter: Bas Nossing
>
> A recent bugreport (https://issues.apache.org/jira/browse/CXF-6473 to be
> exact) was fixed in CXF version 3.0.6
> However, when we tried to update our WildFly to version 8.2.1 to incorporate
> this bugfix we ran into a new issue: http://pastebin.com/ezewT9Mw
> It seems CXF version 3.0.6 introduces an issue with WS-Policy parsing that no
> longer allows the following definition:
> {code:xml}
> <wsp:Policy wsu:Id="X509EndpointPolicy">
> <wsp:ExactlyOne>
> ...
> <sp:AlgorithmSuite>
> <wsp:Policy>
> <sp:Basic128Rsa15/>
> <sp:Basic256Rsa15/>
> <sp:TripleDesRsa15/>
> </wsp:Policy>
> </sp:AlgorithmSuite>
> ...
> </wsp:ExactlyOne>
> </wsp:Policy>
> {code}
> (excerpt from WSDL http://pastebin.com/BSMais7F and accompanying XSD
> http://pastebin.com/DRXc0Tfa)
> However, according to W3C (http://www.w3.org/Submission/WS-Policy/) it is
> allowed to specify multiple key-transport-algorithms for a single policy.
> Removing two of the key-transport-algorithms (leaving one remaining
> algorithm) from our definition makes the invalid policy exception disappear.
> For example removing Basic128Rsa15 and TripleDesRsa15 and leaving
> Basic256Rsa15 will make CXF accept his WS-Policy as a valid one.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
