Right now when we send a request that has encrypted Body sub-elements
Rampart 1.4  PolicyBasedResultsValidator line 423 throws a RampartException
because it's only looking for the entire Body to be encrypted.

Is this a known issue in Rampart/Java that it does not support encrypted
parts in the Body?

Request looks like this:  Notice that we only want the content of the echo
element encrypted.
<soapenv:Body wsu:Id="id-9234090"
        xmlns:wsu="
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd
">
        <echo:echo>
            <xenc:EncryptedData Id="EncDataId-30833902"
                Type="http://www.w3.org/2001/04/xmlenc#Content";>
                <xenc:EncryptionMethod    Algorithm="
http://www.w3.org/2001/04/xmlenc#aes256-cbc"; />
                <ds:KeyInfo   xmlns:ds="http://www.w3.org/2000/09/xmldsig#";>
                    <wsse:SecurityTokenReference
                        xmlns:wsse="
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd
">
                        <wsse:Reference URI="#EncKeyId-21292038" />
                    </wsse:SecurityTokenReference>
                </ds:KeyInfo>
                <xenc:CipherData>
                    <xenc:CipherValue>
                        mYMIlDr8nwRJVwAUIOr3jIgNvSRdUmotgpZYzIPV2ww=
                    </xenc:CipherValue>
                </xenc:CipherData>
            </xenc:EncryptedData>
        </echo:echo>
    </soapenv:Body>

Reply via email to