Colm O hEigeartaigh created CXF-4277: ----------------------------------------
Summary: STSClient does not use returned KeyInfo size when creating a secret key Key: CXF-4277 URL: https://issues.apache.org/jira/browse/CXF-4277 Project: CXF Issue Type: Bug Components: WS-* Components Affects Versions: 2.6, 2.5.3, 2.4.7 Reporter: Colm O hEigeartaigh Assignee: Colm O hEigeartaigh Fix For: 2.6.1, 2.5.4, 2.4.8 The STSClient does not use the returned KeyInfo size when creating a secret key. This means that it creates an incorrect secret key in the case where an STS rejects the submitted KeySize, and returns a different KeySize to the client. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira