Hi, I'm currently testing some interop scenario's and ran into an issue where the IssuerSerial is sent as a hexadecimal number. I couldn't find any definitive spec on this, but found plenty of examples showing the serial in Hex (including the BSP of WS-I).
In the current implementation of xml-sec there is a statement in XML509IssuerSerial.java that parses the serial assuming it is decimal instead. I made a local change to parse it in radix-16 to parse hex numbers as well, but am wondering who is to blame in this situation. Should I report an issue ? Regards, Marcel Ammerlaan.