[jira] [Closed] (WSS-418) Cannot configure SAML properties in WSS4JOutInterceptor without having to add that config file in the classpath

2014-10-07 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-418?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-418. --- Cannot configure SAML properties in WSS4JOutInterceptor without having to add that config file in

[jira] [Closed] (WSS-475) Issue with multiple processing of ReferenceList in EncryptedKey element

2014-10-07 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-475?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-475. --- Issue with multiple processing of ReferenceList in EncryptedKey element

[jira] [Closed] (WSS-467) Support creating SAML 2.0 Tokens with the AuthnStatement SessionNotOnOrAfter attribute.

2014-10-07 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-467?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-467. --- Support creating SAML 2.0 Tokens with the AuthnStatement SessionNotOnOrAfter attribute.

[jira] [Closed] (WSS-474) Missing the 'EncodingType' attribute in element built by STRTransformUtil#createBSTX509

2014-10-07 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-474?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-474. --- Missing the 'EncodingType' attribute in element built by STRTransformUtil#createBSTX509

[jira] [Closed] (WSS-401) Concurrency issue in generating signature under high load

2014-10-07 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-401?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-401. --- Concurrency issue in generating signature under high load

[jira] [Closed] (WSS-328) Impossible to sign BST since 1.6.x

2014-10-07 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-328?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-328. --- Impossible to sign BST since 1.6.x -- Key:

[jira] [Closed] (WSS-402) Message not being signed correctly when using RSA (2048 bit ) certs

2014-10-07 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-402?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-402. --- Message not being signed correctly when using RSA (2048 bit ) certs

[jira] [Closed] (WSS-493) NPE calling org.apache.ws.security.components.crypto.Crypto.loadCertificate(java.io.InputStream)

2014-10-07 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-493?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-493. --- NPE calling org.apache.ws.security.components.crypto.Crypto.loadCertificate(java.io.InputStream)

[jira] [Closed] (WSS-338) should set com....security.enableCRLDP when enableRevocation is true

2014-10-07 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-338?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-338. --- should set comsecurity.enableCRLDP when enableRevocation is true

[jira] [Closed] (WSS-400) Support processing an Embedded child of a SecurityTokenReference for the Stax code

2014-10-07 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-400?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-400. --- Support processing an Embedded child of a SecurityTokenReference for the Stax code

[jira] [Closed] (WSS-440) BSPEnforcer doesn't accept valid references of type X509PKIPathv1

2014-10-07 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-440?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-440. --- BSPEnforcer doesn't accept valid references of type X509PKIPathv1

[jira] [Closed] (WSS-485) Provide service endpoint as possible X509 identifier in Crypto implementation

2014-10-07 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-485?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-485. --- Provide service endpoint as possible X509 identifier in Crypto implementation

[jira] [Closed] (WSS-339) OCSP support

2014-10-07 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-339?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-339. --- OCSP support Key: WSS-339 URL:

[jira] [Created] (WSS-515) Add support for creating SAML Assertions with Advice Elements

2014-10-06 Thread Colm O hEigeartaigh (JIRA)
Colm O hEigeartaigh created WSS-515: --- Summary: Add support for creating SAML Assertions with Advice Elements Key: WSS-515 URL: https://issues.apache.org/jira/browse/WSS-515 Project: WSS4J

[jira] [Resolved] (WSS-515) Add support for creating SAML Assertions with Advice Elements

2014-10-06 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-515?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh resolved WSS-515. - Resolution: Fixed Add support for creating SAML Assertions with Advice Elements

[jira] [Closed] (WSS-507) ThreadLocal based Security Provider proxy

2014-10-04 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-507?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-507. --- ThreadLocal based Security Provider proxy -

[jira] [Closed] (WSS-513) Fails to parse Timestamp headers in Thai locale

2014-10-04 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-513?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-513. --- Fails to parse Timestamp headers in Thai locale ---

[jira] [Closed] (WSS-510) Provide a way of requiring a particular SAML subject confirmation method

2014-10-04 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-510?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-510. --- Provide a way of requiring a particular SAML subject confirmation method

[jira] [Closed] (WSS-505) WSSecurityUtil .storeElementInContext throws ArrayIndexOutOfBoundsException

2014-10-04 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-505?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-505. --- WSSecurityUtil .storeElementInContext throws ArrayIndexOutOfBoundsException

[jira] [Closed] (WSS-512) Provide a configurable way of enforcing that SAML Bearer Tokens must have an internal signature

2014-10-04 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-512?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-512. --- Provide a configurable way of enforcing that SAML Bearer Tokens must have an internal signature

[jira] [Closed] (WSS-511) Provide a (default) way of requiring at least one standard Subject Confirmation Method

2014-10-04 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-511?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-511. --- Provide a (default) way of requiring at least one standard Subject Confirmation Method

[jira] [Closed] (WSS-499) Re-enable KerberosTests

2014-10-04 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-499?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-499. --- Re-enable KerberosTests --- Key: WSS-499

[jira] [Updated] (WSS-514) Missing CUSTOM_TOKEN action in WSSecurityUtil#decodeHandlerAction @l961

2014-10-04 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-514?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh updated WSS-514: Fix Version/s: 2.0.3 Missing CUSTOM_TOKEN action in WSSecurityUtil#decodeHandlerAction @l961

[jira] [Resolved] (WSS-514) Missing CUSTOM_TOKEN action in WSSecurityUtil#decodeHandlerAction @l961

2014-10-04 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-514?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh resolved WSS-514. - Resolution: Fixed Missing CUSTOM_TOKEN action in WSSecurityUtil#decodeHandlerAction @l961

[jira] [Updated] (WSS-513) Fails to parse Timestamp headers in Thai locale

2014-09-22 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-513?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh updated WSS-513: Fix Version/s: 1.6.17 2.0.2 Fails to parse Timestamp headers in Thai

[jira] [Commented] (WSS-513) Fails to parse Timestamp headers in Thai locale

2014-09-22 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-513?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14143081#comment-14143081 ] Colm O hEigeartaigh commented on WSS-513: - I am going to use a Locale with

[jira] [Created] (WSS-510) Provide a way of requiring a particular SAML subject confirmation method

2014-09-11 Thread Colm O hEigeartaigh (JIRA)
Colm O hEigeartaigh created WSS-510: --- Summary: Provide a way of requiring a particular SAML subject confirmation method Key: WSS-510 URL: https://issues.apache.org/jira/browse/WSS-510 Project:

[jira] [Resolved] (WSS-510) Provide a way of requiring a particular SAML subject confirmation method

2014-09-11 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-510?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh resolved WSS-510. - Resolution: Fixed Provide a way of requiring a particular SAML subject confirmation method

[jira] [Created] (WSS-511) Provide a (default) way of requiring at least one standard Subject Confirmation Method

2014-09-11 Thread Colm O hEigeartaigh (JIRA)
Colm O hEigeartaigh created WSS-511: --- Summary: Provide a (default) way of requiring at least one standard Subject Confirmation Method Key: WSS-511 URL: https://issues.apache.org/jira/browse/WSS-511

[jira] [Resolved] (WSS-511) Provide a (default) way of requiring at least one standard Subject Confirmation Method

2014-09-11 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-511?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh resolved WSS-511. - Resolution: Fixed Provide a (default) way of requiring at least one standard Subject

[jira] [Created] (WSS-512) Provide a configurable way of enforcing that SAML Bearer Tokens must have an internal signature

2014-09-11 Thread Colm O hEigeartaigh (JIRA)
Colm O hEigeartaigh created WSS-512: --- Summary: Provide a configurable way of enforcing that SAML Bearer Tokens must have an internal signature Key: WSS-512 URL: https://issues.apache.org/jira/browse/WSS-512

[jira] [Resolved] (WSS-512) Provide a configurable way of enforcing that SAML Bearer Tokens must have an internal signature

2014-09-11 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-512?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh resolved WSS-512. - Resolution: Fixed Provide a configurable way of enforcing that SAML Bearer Tokens must have

[jira] [Commented] (WSS-509) SecurityToken::isExpired: add clock skew option

2014-08-28 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-509?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14113616#comment-14113616 ] Colm O hEigeartaigh commented on WSS-509: - What race conditions are you seeing? IMO

[jira] [Closed] (WSS-509) SecurityToken::isExpired: add clock skew option

2014-08-28 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-509?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-509. --- Resolution: Won't Fix SecurityToken::isExpired: add clock skew option

[jira] [Resolved] (WSS-499) Re-enable KerberosTests

2014-08-01 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-499?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh resolved WSS-499. - Resolution: Fixed Re-enable KerberosTests --- Key:

[jira] [Commented] (WSS-507) ThreadLocal based Security Provider proxy

2014-07-28 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-507?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14076076#comment-14076076 ] Colm O hEigeartaigh commented on WSS-507: - Yes for JDK 1.6 compatibility. The code

[jira] [Resolved] (WSS-507) ThreadLocal based Security Provider proxy

2014-07-25 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-507?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh resolved WSS-507. - Resolution: Fixed ThreadLocal based Security Provider proxy

[jira] [Resolved] (WSS-505) WSSecurityUtil .storeElementInContext throws ArrayIndexOutOfBoundsException

2014-07-15 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-505?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh resolved WSS-505. - Resolution: Fixed Fixed. Please test with the latest SNAPSHOT code to see if there are any

[jira] [Updated] (WSS-505) WSSecurityUtil .storeElementInContext throws ArrayIndexOutOfBoundsException

2014-07-15 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-505?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh updated WSS-505: Fix Version/s: 1.6.17 WSSecurityUtil .storeElementInContext throws

[jira] [Closed] (WSS-501) Kerberos token decoder default implementation fails to extract the session when validating a ticket issued by a KDC based on Active Directory

2014-07-08 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-501?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-501. --- Kerberos token decoder default implementation fails to extract the session when validating a

[jira] [Closed] (WSS-504) False control flow leading to warning No Subject DN Certificate Constraints were defined. This could be a security issue

2014-07-08 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-504?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-504. --- False control flow leading to warning No Subject DN Certificate Constraints were defined. This

[jira] [Closed] (WSS-500) Kerberos client/server actions are only supporting NT_HOSTBASED_SERVICE service name form

2014-07-08 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-500?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-500. --- Kerberos client/server actions are only supporting NT_HOSTBASED_SERVICE service name form

[jira] [Closed] (WSS-503) Share an existing global ehcache manager for ws security replay caches

2014-07-08 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-503?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-503. --- Share an existing global ehcache manager for ws security replay caches

[jira] [Closed] (WSS-502) Add an easy way to retrieve signature digest values

2014-07-08 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-502?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-502. --- Add an easy way to retrieve signature digest values

[jira] [Resolved] (WSS-493) NPE calling org.apache.ws.security.components.crypto.Crypto.loadCertificate(java.io.InputStream)

2014-06-18 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-493?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh resolved WSS-493. - Resolution: Incomplete NPE calling

[jira] [Resolved] (WSS-504) False control flow leading to warning No Subject DN Certificate Constraints were defined. This could be a security issue

2014-06-18 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-504?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh resolved WSS-504. - Resolution: Fixed False control flow leading to warning No Subject DN Certificate

[jira] [Updated] (WSS-504) False control flow leading to warning No Subject DN Certificate Constraints were defined. This could be a security issue

2014-06-18 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-504?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh updated WSS-504: Fix Version/s: 1.6.16 False control flow leading to warning No Subject DN Certificate

[jira] [Updated] (WSS-503) Share an existing global ehcache manager for ws security replay caches

2014-06-16 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-503?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh updated WSS-503: Fix Version/s: 2.0.1 Share an existing global ehcache manager for ws security replay caches

[jira] [Updated] (WSS-501) Kerberos token decoder default implementation fails to extract the session when validating a ticket issued by a KDC based on Active Directory

2014-05-28 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-501?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh updated WSS-501: Fix Version/s: 1.6.16 Kerberos token decoder default implementation fails to extract the

[jira] [Updated] (WSS-500) Kerberos client/server actions are only supporting NT_HOSTBASED_SERVICE service name form

2014-05-28 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-500?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh updated WSS-500: Fix Version/s: 1.6.16 Kerberos client/server actions are only supporting

[jira] [Commented] (WSS-501) Kerberos token decoder default implementation fails to extract the session when validating a ticket issued by a KDC based on Active Directory

2014-05-28 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-501?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14011008#comment-14011008 ] Colm O hEigeartaigh commented on WSS-501: - In general, 1.6.x is closed to new

[jira] [Resolved] (WSS-501) Kerberos token decoder default implementation fails to extract the session when validating a ticket issued by a KDC based on Active Directory

2014-05-23 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-501?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh resolved WSS-501. - Resolution: Fixed Patch applied, thanks! I changed the logic a bit in the DOM code to

[jira] [Resolved] (WSS-500) Kerberos client/server actions are only supporting NT_HOSTBASED_SERVICE service name form

2014-05-23 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-500?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh resolved WSS-500. - Resolution: Fixed Kerberos client/server actions are only supporting NT_HOSTBASED_SERVICE

[jira] [Updated] (WSS-500) Kerberos client/server actions are only supporting NT_HOSTBASED_SERVICE service name form

2014-05-23 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-500?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh updated WSS-500: Fix Version/s: 2.0.1 Kerberos client/server actions are only supporting NT_HOSTBASED_SERVICE

[jira] [Created] (WSS-502) Add an easy way to retrieve signature digest values

2014-05-23 Thread Colm O hEigeartaigh (JIRA)
Colm O hEigeartaigh created WSS-502: --- Summary: Add an easy way to retrieve signature digest values Key: WSS-502 URL: https://issues.apache.org/jira/browse/WSS-502 Project: WSS4J Issue

[jira] [Resolved] (WSS-502) Add an easy way to retrieve signature digest values

2014-05-23 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-502?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh resolved WSS-502. - Resolution: Fixed Add an easy way to retrieve signature digest values

[jira] [Closed] (WSS-497) Support for SAML 2.0 EncryptedAssertion Element

2014-05-06 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-497?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-497. --- Support for SAML 2.0 EncryptedAssertion Element ---

[jira] [Closed] (WSS-363) Support pluggable Validation of received tokens as per DOM code

2014-05-06 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-363?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-363. --- Support pluggable Validation of received tokens as per DOM code

[jira] [Closed] (WSS-371) Add support for (custom) GCM algorithm-suites.

2014-05-06 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-371?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-371. --- Add support for (custom) GCM algorithm-suites. --

[jira] [Closed] (WSS-452) Streaming code does not support an EncryptedData security header element without a preceeding ReferenceList

2014-05-06 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-452?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-452. --- Streaming code does not support an EncryptedData security header element without a preceeding

[jira] [Closed] (WSS-446) Enable SignatureConfirmation without a Signature

2014-05-06 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-446?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-446. --- Enable SignatureConfirmation without a Signature

[jira] [Closed] (WSS-374) Support Kerberos token policy validation.

2014-05-06 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-374?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-374. --- Support Kerberos token policy validation. -

[jira] [Closed] (WSS-343) Move 1.6.x code into a new module.

2014-05-06 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-343?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-343. --- Move 1.6.x code into a new module. -- Key:

[jira] [Closed] (WSS-480) Streaming code hangs on a symmetric derived key response

2014-05-06 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-480?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-480. --- Streaming code hangs on a symmetric derived key response

[jira] [Closed] (WSS-494) WSS4j documentation links are broken.

2014-05-06 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-494?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-494. --- WSS4j documentation links are broken. -

[jira] [Closed] (WSS-449) Receiving code can't handle the case of a Thumbprint reference to a BST in the token

2014-05-06 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-449?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-449. --- Receiving code can't handle the case of a Thumbprint reference to a BST in the token

[jira] [Closed] (WSS-360) Port BSP enforcer to streaming code.

2014-05-06 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-360?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-360. --- Port BSP enforcer to streaming code. Key:

[jira] [Closed] (WSS-472) Incorrect Symmetric Key Derivation Length validation

2014-05-06 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-472?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-472. --- Incorrect Symmetric Key Derivation Length validation

[jira] [Closed] (WSS-344) Refactor Crypto functionality to be used by both implementations

2014-05-06 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-344?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-344. --- Refactor Crypto functionality to be used by both implementations

[jira] [Closed] (WSS-412) Unify error messages for the streaming code

2014-05-06 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-412?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-412. --- Unify error messages for the streaming code ---

[jira] [Closed] (WSS-364) Ensure that SecurityEvents let us see what was processed for the non-policy case.

2014-05-06 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-364?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-364. --- Ensure that SecurityEvents let us see what was processed for the non-policy case.

[jira] [Closed] (WSS-457) Incorrect validation of ProtectTokens assertion

2014-05-06 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-457?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-457. --- Incorrect validation of ProtectTokens assertion ---

[jira] [Closed] (WSS-439) Error in using StaX WS-Security + CXF WS-Addressing

2014-05-06 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-439?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-439. --- Error in using StaX WS-Security + CXF WS-Addressing

[jira] [Closed] (WSS-453) Once Token Inclusion handling is not working

2014-05-06 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-453?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-453. --- Once Token Inclusion handling is not working --

[jira] [Closed] (WSS-408) StAX - Exception handling and correct Fault-Codes per WSS spec

2014-05-06 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-408?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-408. --- StAX - Exception handling and correct Fault-Codes per WSS spec

[jira] [Closed] (WSS-448) OnlySignEntireHeadersAndBody policy validation is incorrect

2014-05-06 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-448?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-448. --- OnlySignEntireHeadersAndBody policy validation is incorrect

[jira] [Closed] (WSS-459) RequiredParts + EncryptedParts policy validation not working

2014-05-06 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-459?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-459. --- RequiredParts + EncryptedParts policy validation not working

[jira] [Closed] (WSS-432) Support EncryptedKeySHA1 KeyIdentifier in the StaX code

2014-05-06 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-432?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-432. --- Support EncryptedKeySHA1 KeyIdentifier in the StaX code

[jira] [Closed] (WSS-438) Support Signature Cert Constraints as per the DOM code

2014-05-06 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-438?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-438. --- Support Signature Cert Constraints as per the DOM code

[jira] [Closed] (WSS-354) Add support for specifying different algs for sign or c14n a SAML Assertion in the streaming code.

2014-05-06 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-354?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-354. --- Add support for specifying different algs for sign or c14n a SAML Assertion in the streaming

[jira] [Closed] (WSS-470) AsymmetricBinding + ProtectTokens validation not working

2014-05-06 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-470?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-470. --- AsymmetricBinding + ProtectTokens validation not working

[jira] [Closed] (WSS-386) Introduce proprietary Compress-Transformation for Encryption / Decryption

2014-05-06 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-386?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-386. --- Introduce proprietary Compress-Transformation for Encryption / Decryption

[jira] [Closed] (WSS-458) Allow no security header in certain use-cases

2014-05-06 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-458?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-458. --- Allow no security header in certain use-cases -

[jira] [Closed] (WSS-415) Reject RSA v1.5 Key Transport Algorithm by default

2014-05-06 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-415?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-415. --- Reject RSA v1.5 Key Transport Algorithm by default

[jira] [Closed] (WSS-350) Update package names

2014-05-06 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-350?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-350. --- Update package names Key: WSS-350 URL:

[jira] [Closed] (WSS-342) Refactoring

2014-05-06 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-342?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-342. --- Refactoring --- Key: WSS-342 URL:

[jira] [Closed] (WSS-484) Streaming code can't process a Key reference pointing to an EncryptedData element

2014-05-06 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-484?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-484. --- Streaming code can't process a Key reference pointing to an EncryptedData element

[jira] [Closed] (WSS-349) Refactor Derived Key / SecureConveration functionality to be used by both implementations

2014-05-06 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-349?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-349. --- Refactor Derived Key / SecureConveration functionality to be used by both implementations

[jira] [Closed] (WSS-351) SAML work

2014-05-06 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-351?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-351. --- SAML work - Key: WSS-351 URL:

[jira] [Closed] (WSS-487) Certain action combinations causes WSS4J to hang

2014-05-06 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-487?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-487. --- Certain action combinations causes WSS4J to hang

[jira] [Closed] (WSS-347) Refactor configuration and constants to be used by both implementations

2014-05-06 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-347?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-347. --- Refactor configuration and constants to be used by both implementations

[jira] [Closed] (WSS-414) Ensure that Algorithms are checked in streaming code before they are used

2014-05-06 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-414?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-414. --- Ensure that Algorithms are checked in streaming code before they are used

[jira] [Closed] (WSS-375) Support IssuedToken policy validation

2014-05-06 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-375?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-375. --- Support IssuedToken policy validation -

[jira] [Closed] (WSS-482) EncryptedElements + SignedElements validation not working

2014-05-06 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-482?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-482. --- EncryptedElements + SignedElements validation not working

[jira] [Closed] (WSS-367) Set up a parent pom with dependency management.

2014-05-06 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-367?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-367. --- Set up a parent pom with dependency management. ---

[jira] [Closed] (WSS-369) WS-SecurityPolicy work

2014-05-06 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-369?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-369. --- WS-SecurityPolicy work -- Key: WSS-369

[jira] [Closed] (WSS-462) ProtectionOrderAssertionState.testProtectionOrder is not working

2014-05-06 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-462?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-462. --- ProtectionOrderAssertionState.testProtectionOrder is not working

[jira] [Closed] (WSS-370) Add CXF support for custom Algorithm Suites.

2014-05-06 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-370?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-370. --- Add CXF support for custom Algorithm Suites.

[jira] [Closed] (WSS-381) Support KeyValueTokens

2014-05-06 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-381?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-381. --- Support KeyValueTokens --- Key: WSS-381

[jira] [Closed] (WSS-362) Port Kerberos SPNEGO work to streaming code

2014-05-06 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/WSS-362?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-362. --- Port Kerberos SPNEGO work to streaming code -

<    2   3   4   5   6   7   8   9   10   11   >