[
https://issues.apache.org/jira/browse/WSS-146?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12675376#action_12675376
]
Todd Dunst commented on WSS-146:
--------------------------------
Brian,
Thank you so much for posting your patch! I have tried something very similar
to your AssertionWrapper approach. but I am getting the following exception:
java.lang.ClassCastException: org.apache.xerces.dom.ElementNSImpl
in the org.apache.ws.security.util.WSSecurityUtil.prependChildElement call. I
am running a test case which attempts to use the modified library with an Axis2
Soap client. I have also upgraded to v 2.2.3, xerces 2.9.1, and xalan 2.7.1.
I see that you have added a toDOM() method to the SAMLUtil class, and that you
call this method whenever you are converting your OpenSaml assertions to
org.w3c.dom.Element. I am not doing this, and I am wondering if this is why I
am getting the class cast exception?
On another note, do you have a version of your custom WSS4J source with all of
your changes applied that I could try out?
> Upgrade opensaml dependency to 2.x line
> ---------------------------------------
>
> Key: WSS-146
> URL: https://issues.apache.org/jira/browse/WSS-146
> Project: WSS4J
> Issue Type: Improvement
> Reporter: Bob Jacoby
> Assignee: Ruchith Udayanga Fernando
> Priority: Minor
> Attachments: wss4j_opensaml2.1.0.patch,
> wss4j_opensaml2.1.0_correct.patch, wss4j_opensaml2.2.3.patch
>
>
> WSS4J has a dependency on opensaml 1.1. OpenSAML 1.1 is, for the most part,
> no longer supported (https://spaces.internet2.edu/display/OpenSAML/OS1Status).
> 2.1 has been out for a while, and 2.2 was released in Oct. '08. The 2.x line
> is not backwards compatible with 1.1 so unfortunately it's not as simple as
> dropping in the newer jar.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
