DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUGĀ·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=44335>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED ANDĀ·
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=44335

           Summary: can't validate after invalid validation
           Product: Security
           Version: Java 1.4.1
          Platform: Other
        OS/Version: Windows XP
            Status: NEW
          Severity: major
          Priority: P2
         Component: Signature
        AssignedTo: security-dev@xml.apache.org
        ReportedBy: [EMAIL PROTECTED]


I've run into a strange problem using xmlsec-1.4.1.

I can sign a document - no problem.

I can validate a VALID signature - no problem.

I can detect an INVALID signature - no problem.


However, once I detect an invalid signature, I validate any further signatures!

I've boiled my code down to a simple case that i've posted at
http://agileshrugged.com/files/soaptester.zip -- It's an eclipse project but
running it outside of eclipse should work if you include all the libraries in
the "lib" directory on your classpath.

There is a JUnit test "SoapUtilTest" in which testSign() and testValidate()
work, but testInvalidThenValid() fails.

I've tried this in JDK 1.4 & 1.6 with no luck.

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

Reply via email to