[CXF-4277] STSClient does not use returned KeyInfo size when creating a secret key

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.4.7, 2.5.3, 2.6
• Fix Version/s: 2.3.11, 2.4.8, 2.5.4, 2.6.1
• Component/s: WS-* Components
• Estimated Complexity: Unknown
• Assignee: Colm O hEigeartaigh
• Reporter: Colm O hEigeartaigh
• Created: 30/Apr/12 12:42
• Updated: 05/Jun/12 13:31
• Resolved: 30/Apr/12 13:21

Description

The STSClient does not use the returned KeyInfo size when creating a secret key. This means that it creates an incorrect secret key in the case where an STS rejects the submitted KeySize, and returns a different KeySize to the client.