[RAMPART-147] Header parts included in EncryptedParts are not processed by Rampart

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.3
• Fix Version/s: 1.4
• Component/s: rampart-policy
• Assignee: Ruchith B. Gunaratne
• Reporter: Miguel Arauzo
• Created: 01/Apr/08 12:33
• Updated: 27/May/08 05:16
• Resolved: 02/Apr/08 08:44

Description

The method 'processElement' from class org.apache.ws.secpolicy.builders.EncryptedPartsBuilder doesn't add the 'sp:Header' elements to the SignedEncryptedParts instance:

private void processElement(OMElement element, SignedEncryptedParts parent) {

QName name = element.getQName();

if (HEADER.equals(name)) {
Header header = new Header();

OMAttribute nameAttribute = element.getAttribute(NAME);
if( nameAttribute != null )

{ header.setName(nameAttribute.getAttributeValue()); }

OMAttribute namespaceAttribute = element.getAttribute(NAMESPACE);
header.setNamespace(namespaceAttribute.getAttributeValue());

<<== The following code is missing: parent.addHeader(header);

} else if (BODY.equals(name))

{ parent.setBody(true); }

}

The result from this "missing line of code" is that it's impossible to process a message that has some encrypted element besides the SOAP body.