[
https://issues.apache.org/jira/browse/RAMPART-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12551483
]
Nandana Mihindukulasooriya commented on RAMPART-78:
---------------------------------------------------
Yes, Rampart config builder seems to ignore the Encryption Crypto.
the 'processSecurityHeader' call is already corrected in the trunk.
results =
engine.processSecurityHeader(rmd.getDocument(),
actorValue,
tokenCallbackHandler,
signatureCrypto,
RampartUtil.getEncryptionCrypto(rpd.getRampartConfig(),
msgCtx.getAxisService().getClassLoader()));
and we correctly look for the encryption crypto in the first and use signature
crypto if only encryption crypto not found.
if(config != null && config.getEncrCryptoConfig() != null) {
CryptoConfig cryptoConfig = config.getEncrCryptoConfig();
...
return CryptoFactory.getInstance(prop, loader);
} else {
//Try using signature crypto infomation
if(config != null && config.getSigCryptoConfig() != null) {
CryptoConfig cryptoConfig = config.getSigCryptoConfig();
...
return CryptoFactory.getInstance(prop, loader);
} else {
return null;
}
}
> Rampart ignores the ramp:encryptionCypto
> ----------------------------------------
>
> Key: RAMPART-78
> URL: https://issues.apache.org/jira/browse/RAMPART-78
> Project: Rampart
> Issue Type: Bug
> Components: rampart-policy
> Affects Versions: 1.1, 1.2, 1.3
> Reporter: Abdelaziz Samari
> Assignee: Nandana Mihindukulasooriya
>
> It seems that rampart ignores the ramp:encryptionCypto in the
> ramp:RampartConfig assertion.
> Theire is no implementation concerning the encryptionCypto in the class
> RampartConfigBuilder.
> I suggest to add th following code in the method build of the class
> RampartConfigBuilder:
> //encryptionCypto
> childElement = element.getFirstChildWithName(new
> QName(RampartConfig.NS, RampartConfig.ENCR_CRYPTO_LN));
>
> if (childElement != null) {
> rampartConfig.setEncrCryptoConfig((CryptoConfig) factory
> .build(childElement.getFirstElement()));
> }
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
