[CXF-6409] CXF web service cannot process MTOM/XOP-optimized content within a CipherValue element

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.0.4
• Fix Version/s: 3.1.1, 3.0.6
• Component/s: WS-* Components
• Estimated Complexity: Unknown
• Assignee: Colm O hEigeartaigh
• Reporter: Dallas Vaughan
• Created: 18/May/15 21:12
• Updated: 14/Oct/16 14:25
• Resolved: 05/Jun/15 15:15

Description

When a CXF web service endpoint is configured to use WS-Security and MTOM, CXF cannot handle requests from .NET and Metro clients because it cannot process xop:Include elements that are children of enc:CipherValue elements, as both of these clients will optimize any large encrypted (base64-encoded binary) content by serializing it as a MIME part.

This makes it impossible for .NET and Metro clients to communicate with CXF endpoints which have the MTOM and encryption policies specified.