> Sean,
> Update the junit test result -
> http://nagoya.apache.org/~dims/xmlsec-junit/. Here's my config.xml
> http://nagoya.apache.org/~dims/xmlsec-junit/config.xml. Results are
> just slightly better.
>
> Can you please update config.xml and send us something that passes all
> the tests?


OK - The failures on the interop signature tests look like a bug
somewhere.  I will follow up.

The failures on encryption are because the Sun JCE uses straight
encryption when wrapping keys - it does not support the CMS or AES Key
Wrap algorithms required by the XML-Encryption spec.

So the best we are going to get with the Sun 1.5 JCE will be full
signature support (assuming we can fix the RSA-SHA1 error).  Note however
that RSA key wrapping works fine, so if your requirement is purely around
RSA, you should be OK.

I might also see if I can write something into the unit tests to skip the
symmetric key wrap tests if no provider is available that supports them
(with an output to log.warning).

Cheers,
     Berin



Reply via email to