Rampart does not return failure even when actual signature verification failed
from openssl functions
------------------------------------------------------------------------------------------------------
Key: RAMPARTC-86
URL: https://issues.apache.org/jira/browse/RAMPARTC-86
Project: Rampart/C
Issue Type: Bug
Components: OMXMLSecurity
Affects Versions: 1.1.0
Reporter: Manjula Peiris
Assignee: Malinda Kaushalye Kapuruge
Priority: Blocker
Fix For: 1.2.0
This is in omxmlsec/signature.c oxs_sig_verify function. This function
discards the status returned by oxs_sig_verify_hmac_sha1 and
oxs_sig_verify_rsa_sha1.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.