[CXF-7080] XmlSecOutInterceptor doesn't recognise KeyName as a KeyIdentifier

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.1.8, 3.2.0
• Fix Version/s: 3.1.8, 3.0.11, 3.2.0
• Component/s: JAX-RS Security
• Estimated Complexity: Unknown
• Flags: Patch
• Assignee: Colm O hEigeartaigh
• Reporter: Hugo Trippaers
• Created: 08/Oct/16 21:26
• Updated: 21/Oct/16 18:45
• Resolved: 10/Oct/16 16:15

Description

The KeyIdentifier type KeyName is a known element in the KeyInfo structure (https://www.w3.org/TR/xmldsig-core/#sec-KeyName) however the interceptor XmlSecOutInterceptor doesn't recognise it.

This causes the interceptor to assume the keyidentifier is X509KeyIdentifier, which in turn causes the undesired behaviour of the message being signed and sent with a keyidentifier that is not parsed by the endpoint. (Who expects a KeyName).

A small fix is to add KeyName as a valid KeyIdentifier allowing lower level libraries (santuario) to indicate that this KeyIdentifier type is not supported (yet, working on that as well)

Issue Links

• links to: GitHub Pull Request #175