[
https://issues.apache.org/jira/browse/WSS-715?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17921377#comment-17921377
]
Jim Ma commented on WSS-715:
----------------------------
[~coheigea] There are many places wss4j calls XML Signature API, for example :
[https://github.com/apache/ws-wss4j/blob/master/ws-security-dom/src/main/java/org/apache/wss4j/dom/processor/SignatureProcessor.java#L102-L114]
org.apache.xml.internal.security.ignoreLineBreaks was setting and took effect ,
but after https://issues.apache.org/jira/browse/WSS-661. It needs to set
"com.sun.org.apache.xml.internal.security.ignoreLineBreaks" to make
wss4j/xmlsec to behavior the same.
> Set com.sun.org.apache.xml.internal.security.ignoreLineBreaks to the JDK
> provider
> ---------------------------------------------------------------------------------
>
> Key: WSS-715
> URL: https://issues.apache.org/jira/browse/WSS-715
> Project: WSS4J
> Issue Type: Improvement
> Components: WSS4J Core
> Affects Versions: 2.3.4, 2.4.3, 3.0.4
> Reporter: Jim Ma
> Assignee: Colm O hEigeartaigh
> Priority: Major
> Fix For: 2.3.5, 4.0.0, 2.4.4, 3.0.5
>
>
> After https://issues.apache.org/jira/browse/WSS-661,the Provider like
> org.apache.jcp.xml.dsig.internal.dom.DOMXMLSignatureFactor will be inserted
> after
> org.jcp.xml.dsig.internal.dom.DOMXMLSignatureFactory from JDK, hence the
> "com.sun.org.apache.xml.internal.security.ignoreLineBreaks" property should
> be set explicitly as this JDK Provider will be selected.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
