[CXF-6032] NullPointerException while validating cert for SAML HOK

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.0.1
• Fix Version/s: 3.0.2
• Component/s: STS
• Estimated Complexity: Unknown
• Assignee: Colm O hEigeartaigh
• Reporter: bounkong khamphousone
• Created: 01/Oct/14 09:12
• Updated: 16/Feb/15 16:09
• Resolved: 04/Oct/14 22:58

Description

Hi,

I'm working with CXF-STS and I just tried to get a SAML HOK. From the client part i've set the key type to public and I've set ws-security.sts.token.usecert property to true.

From the server side, it occurs a NPE in the WSS4J class : Cryptobase.class@l.323. I've changed the DefaultSubjectProvider call at line 173 in order to give an empty collection instead of null.

Is it a bug or am I missing something?

Since I've changed, I'm able to retrieve my SAML Token.

Best regards,

Bounkong Khamphousone