Rampart does not return failure even when actual signature verification failed 
from openssl functions 
------------------------------------------------------------------------------------------------------

                 Key: RAMPARTC-86
                 URL: https://issues.apache.org/jira/browse/RAMPARTC-86
             Project: Rampart/C
          Issue Type: Bug
          Components: OMXMLSecurity
    Affects Versions: 1.1.0
            Reporter: Manjula Peiris
            Assignee: Malinda Kaushalye Kapuruge
            Priority: Blocker
             Fix For: 1.2.0


This is in omxmlsec/signature.c oxs_sig_verify function.  This function 
discards the status returned by oxs_sig_verify_hmac_sha1 and 
oxs_sig_verify_rsa_sha1.



-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to