STSClient can't process EncryptedKey elements received from an STS
------------------------------------------------------------------

                 Key: CXF-3761
                 URL: https://issues.apache.org/jira/browse/CXF-3761
             Project: CXF
          Issue Type: Bug
    Affects Versions: 2.4.2, 2.3.6
            Reporter: Colm O hEigeartaigh
            Assignee: Colm O hEigeartaigh
             Fix For: 2.3.7, 2.4.3, 2.5



There is a bug in the STSClient when processing a RequestedProofToken received 
from an STS. This element can contain an EncryptedKey child, but the STSClient 
searches in the wrong namespace and so never finds the element.

Secondly, the STSClient doesn't support the scenario where a 
RequestedProofToken contains a ComputedKey, and the associated Entropy element 
has an EncryptedKey child (instead of a BinarySecret).

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Reply via email to