DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUGĀ· RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT <http://issues.apache.org/bugzilla/show_bug.cgi?id=36640>. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED ANDĀ· INSERTED IN THE BUG DATABASE.
http://issues.apache.org/bugzilla/show_bug.cgi?id=36640 Summary: Signature verification ignores the inclusive namespaces parameter of a excl c14n ds:CanonicalizationMethod Product: Security Version: Java 1.2.1 Platform: All OS/Version: All Status: NEW Severity: normal Priority: P4 Component: Signature AssignedTo: security-dev@xml.apache.org ReportedBy: [EMAIL PROTECTED] If a signature containing a ds:CanonicalizationMethod like the following is passed to the xml-security library, the inclusive namespaces parameter is ignored. <ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"> <InclusiveNamespaces xmlns="http://www.w3.org/2001/10/xml-exc-c14n#" PrefixList="enc ns0 xsd xsi"/> </ds:CanonicalizationMethod> Suggested patch has been attached. -- Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.