CXF-7021 - "The WS-SecurityPolicy TransportBinding does not respect the digest 
method of the algorithm suite".


Project: http://git-wip-us.apache.org/repos/asf/cxf/repo
Commit: http://git-wip-us.apache.org/repos/asf/cxf/commit/27a511a9
Tree: http://git-wip-us.apache.org/repos/asf/cxf/tree/27a511a9
Diff: http://git-wip-us.apache.org/repos/asf/cxf/diff/27a511a9

Branch: refs/heads/master-jaxrs-2.1
Commit: 27a511a9c5a3b2f6f3e54028810dbac4c7d3b8bd
Parents: e957885
Author: Colm O hEigeartaigh <[email protected]>
Authored: Wed Aug 24 12:25:02 2016 +0100
Committer: Colm O hEigeartaigh <[email protected]>
Committed: Wed Aug 24 12:25:02 2016 +0100

----------------------------------------------------------------------
 .../ws/security/wss4j/policyhandlers/TransportBindingHandler.java  | 2 ++
 1 file changed, 2 insertions(+)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/cxf/blob/27a511a9/rt/ws/security/src/main/java/org/apache/cxf/ws/security/wss4j/policyhandlers/TransportBindingHandler.java
----------------------------------------------------------------------
diff --git 
a/rt/ws/security/src/main/java/org/apache/cxf/ws/security/wss4j/policyhandlers/TransportBindingHandler.java
 
b/rt/ws/security/src/main/java/org/apache/cxf/ws/security/wss4j/policyhandlers/TransportBindingHandler.java
index 697ea7e..15b2162 100644
--- 
a/rt/ws/security/src/main/java/org/apache/cxf/ws/security/wss4j/policyhandlers/TransportBindingHandler.java
+++ 
b/rt/ws/security/src/main/java/org/apache/cxf/ws/security/wss4j/policyhandlers/TransportBindingHandler.java
@@ -579,6 +579,8 @@ public class TransportBindingHandler extends 
AbstractBindingBuilder {
             
sig.setSignatureAlgorithm(binding.getAlgorithmSuite().getSymmetricSignature());
         }
         
sig.setSigCanonicalization(binding.getAlgorithmSuite().getC14n().getValue());
+        AlgorithmSuiteType algType = 
binding.getAlgorithmSuite().getAlgorithmSuiteType();
+        sig.setDigestAlgo(algType.getDigest());
 
         Document doc = saaj.getSOAPPart();
         sig.prepare(doc, crypto, secHeader);

Reply via email to