[CXF-4539] WS-Security inbound performance regression

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.4.9, 2.5.5, 2.6.2
• Fix Version/s: 2.4.10, 2.5.6, 2.6.3
• Component/s: WS-* Components
• Estimated Complexity: Unknown
• Assignee: Colm O hEigeartaigh
• Reporter: Colm O hEigeartaigh
• Created: 03/Oct/12 09:10
• Updated: 08/Nov/12 17:14
• Resolved: 03/Oct/12 09:51

Description

There is a significant performance regression in inbound WS-Security in CXF due to CXF-4052:

https://issues.apache.org/jira/browse/CXF-4052

On each invocation, a URL is resolved corresponding to the path of the properties file for the signature verification or decryption Crypto. This carries a performance penalty due to the CXF ResourceManager being involved, even though the Crypto object itself is actually cached.

Issue Links

• is related to: CXF-4052 Crypto cache issues and the PolicyBasedWSS4JInInterceptor used as a singleton