[
https://issues.apache.org/jira/browse/RAMPART-449?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17778678#comment-17778678
]
Bill Looby commented on RAMPART-449:
------------------------------------
Hi [~robertlazarski]
A good few more fixes - sufficient to (almost*) get past the Test Suite stage
of the build. I've divided it into 5 pull requests to make it easier to review.
[1. Conversation constant
update|https://github.com/apache/axis-axis2-java-rampart/pull/7]
The default namespace for a derived key token now uses the Oasis URL, so
references need to be changed accordingly in test code.
2. [Use explicit symmetric
key|https://github.com/apache/axis-axis2-java-rampart/pull/8]
A symmetric key needs to be passed into BindingBuilder.getEncryptedKeyBuilder()
so that the encoded contents of that key can be used in a generated key
afterwards in both AsymmetricBindingBuilder and SymmetricBindingBuilder
[3. Need to extend the class that can be correctly cast for validation
usage|https://github.com/apache/axis-axis2-java-rampart/pull/9]
Since the Wss4j update there was a change in class to use and the stax one
can't be cast correctly later
[4. re-introduced simple filtering of results instead of security header
validation|https://github.com/apache/axis-axis2-java-rampart/pull/10]
fetchActionResults() was removed from Wss4j, so security header validation was
introduced to return the same set of results. However this often failed as not
everything was set up for it, so the original method was reintroduced (as it
was just a very simple filter anyway)
[5. Miscellaneous
fixes|https://github.com/apache/axis-axis2-java-rampart/pull/11]
* _RampartEngine.java_ - Allow RSA15 (which the latest update of wss4j had now
defaulted to not supported)
* _TestCBHandler.java_ - USERNAME_TOKEN_UNKNOWN no longer available so
USERNAME_TOKEN was used, should have been WSPasswordCallback.UNKNOWN (as
USERNAME_TOKEN is actually used)
* _AsymmetricBindingBuilder.java_ - Removed unnecessary key addition (in
recently added code - not present in earlier releases) that was causing issue
There are two Test Suite tests still failing as the certificate stored in
resources is out of date as of 2018 - not sure the preferred approach of
addressing.
> NoClassDefFoundError with Axis2 1.8.0
> -------------------------------------
>
> Key: RAMPART-449
> URL: https://issues.apache.org/jira/browse/RAMPART-449
> Project: Rampart
> Issue Type: Bug
> Components: rampart-core
> Affects Versions: 1.7.1
> Reporter: Matthias Kraaz
> Priority: Major
>
> Axis2 1.8.0 updated Axiom to 1.3 thereby breaking rampart, which uses an
> Axiom API that has been removed:
>
> {noformat}
> java.lang.NoClassDefFoundError:
> org/apache/axiom/soap/impl/builder/StAXSOAPModelBuilder
> at
> org.apache.rampart.util.Axis2Util.getDocumentFromSOAPEnvelope(Axis2Util.java:159)
>
> at org.apache.rampart.RampartMessageData.<init>(RampartMessageData.java:280)
> at org.apache.rampart.MessageBuilder.build(MessageBuilder.java:61)
> at org.apache.rampart.handler.RampartSender.invoke(RampartSender.java:65)
> at org.apache.axis2.engine.Phase.invokeHandler(Phase.java:335)
> at org.apache.axis2.engine.Phase.invoke(Phase.java:308)
> at org.apache.axis2.engine.AxisEngine.invoke(AxisEngine.java:250)
> at org.apache.axis2.engine.AxisEngine.send(AxisEngine.java:415)
> at
> org.apache.axis2.description.OutInAxisOperationClient.send(OutInAxisOperation.java:399)
>
> at
> org.apache.axis2.description.OutInAxisOperationClient.executeImpl(OutInAxisOperation.java:225)
>
> at org.apache.axis2.client.OperationClient.execute(OperationClient.java:150)
> at pls.soap.client.SOAPClient.sendRequest(SOAPClient.java:284)
> at pls.soap.client.SOAPClient.handleRequest(SOAPClient.java:143)
> at pls.soap.client.SOAPClient.processSendJob(SOAPClient.java:101)
> at
> pls.soap.client.SendJobProcessorImpl.processSendJob(SendJobProcessorImpl.java:10)
>
> at ls.osis.server.prot.SendJobQueue.process(SendJobQueue.java:139)
> at ls.osis.server.prot.SendJobQueue$SendJobTask.run(SendJobQueue.java:108)
> at
> java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515)
>
> at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
> at
> java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
>
> at
> java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
>
> at java.base/java.lang.Thread.run(Thread.java:834)
> Caused by: java.lang.ClassNotFoundException:
> org.apache.axiom.soap.impl.builder.StAXSOAPModelBuilder
> at
> java.base/jdk.internal.loader.BuiltinClassLoader.loadClass(BuiltinClassLoader.java:583)
> at
> java.base/jdk.internal.loader.ClassLoaders$AppClassLoader.loadClass(ClassLoaders.java:178)
>
> at java.base/java.lang.ClassLoader.loadClass(ClassLoader.java:521) ...
> 22 more
> {noformat}
>
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: java-dev-unsubscr...@axis.apache.org
For additional commands, e-mail: java-dev-h...@axis.apache.org
