Sorry to do this to everyone -- I think I need to retract this RC.
I found a bug in the recording of the encrypted element, when
decrypting messages. The idea is that the results vector should
include a reference (using a QName, in the current design) to the
element that was encrypted (after it's been decrypted). This way, an
application can check that an encrypted message obeys such-and-such a
policy (e.g., you neglected to encrypt that credit card# -- better
send an alarm to the CSO).
I have a patch, with a test, but I can't commit it to svn due to
apache infrastructure issues (these guys aren't getting much sleep,
are they?)
I also have a 2-line fix for https://issues.apache.org/jira/browse/WSS-102
, which I submit is a low-risk fix that could be characterized as a
regression (again, mea culpa...)
Thanks for your patience. I'll send out notification for RC3 when svn
stabilizes. Let me know if you see anything else that needs to get in.
-Fred
On Apr 29, 2008, at 5:42 PM, Fred Dushin wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Here goes at a second release candidate, for testing against Axis,
Rampart, CXF, and any other projects that are planning on using 1.5.4.
I've committed Nandana's suggestion to the 1.5.4 branch, along with
a few other miscellaneous fixes to the build (removal of BC jars
being the most important one we've discussed recently).
The distribution can be found at the following URL:
http://people.apache.org/~fadushin/stage/wss4j/1.5.4-RC2/dist/
You can also point maven at the following URL to pull down the 1.5.4-
RC2 release POM, source, and class JARs:
http://people.apache.org/~fadushin/stage/wss4j/1.5.4-RC2/maven/
Note that this is a release candidate, for the purposes of testing
against projects (apache or otherwise) that depend on WSS4J. This
is NOT a release. No votes will be taken on these bits, and no
projects should depend on these artifacts!
Happy testing!
- -Fred
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (Darwin)
iD8DBQFIF5Y7KSQw0yA4Kl8RAlJoAJ4sS88yWc93x7ybhAnFy4AyyCxryQCfUWDl
agF49BUv+OmHGV7qPxKLvP4=
=BWft
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
