[
https://issues.apache.org/jira/browse/CAMEL-6339?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Colm O hEigeartaigh updated CAMEL-6339:
---------------------------------------
Attachment: camel-6339-reworked.patch
Please consider the attached patch for inclusion in Camel. It is a (slightly)
revised version of the original patch. The only additional thing needed is the
keystore which must be put in the
src/test/resource/org/apache/camel/components/xmlsecurity directory.
The changes that I made are as follows:
a) The Santuario provider is now installed + used by default. If not available,
it falls back to the JDK.
b) General tidy-up of code, indentation + added Apache license headers
c) I removed the ability to set a Signature + Object ID by configuration, as
this is not a use-case that I can see being useful. Instead they are generated
at random.
d) I removed schema validation. I don't see this as being useful. If the
request is modified, then signature validation will fail.
e) I enabled Santuario's "secure validation" mode by default, and added some
tests.
Franz, if you have no major objections to the changes, I would suggest we apply
this patch for the 2.12.0 release. Any further changes can be just submitted as
patches, etc.
Colm.
> XML Signature Component in camel/components/xmlsecurity
> -------------------------------------------------------
>
> Key: CAMEL-6339
> URL: https://issues.apache.org/jira/browse/CAMEL-6339
> Project: Camel
> Issue Type: New Feature
> Reporter: Franz Forsthofer
> Fix For: 2.12.0
>
> Attachments: camel-6339-reworked.patch,
> CamelComponentXmlsecurity.html, CamelComponentXmlsecurityImproved.html,
> ExampleDetached.xml, ExampleEnvelopedXmlSig.xml,
> ExampleEnvelopingDigSigTampered.xml,
> ExampleEnvelopingDigSigWithSeveralElementsWithNameRoot.xml,
> ExampleEnvelopingDigSig.xml, keystore.jks, ManifestTest_TamperedContent.xml,
> patch_file_improved2.txt, patch_file_improved.txt, patch_file.txt,
> SpringXmlSignatureTests.xml, XmlSignatureComponentDocumentation.md,
> xslt_test.xsl, xslt_test.xsl
>
>
> Hello,
> I have created a component for XML signature. I put it into the component
> xmlsecurity. The component has the name xmlsecurity. In the attachments you
> will find path_file.txt and CamelComponentxmlsecurity.html. The html file
> contains a description of the endpoint uris.
> Regards Franz
> ---------------------
> Franz Forsthofer
> SAP AG
> e-mail: [email protected]
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
