[RAMPART-34] SignedEncryptedSupportingTokens assertion does not work

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Invalid
• Affects Version/s: 1.2
• Fix Version/s: 1.2
• Component/s: rampart-core, rampart-policy
• Environment: Axis2 1.2 , Rampart-Head , Windows XP, Apache Tomcat 5.5.23
• Assignee: Unassigned
• Reporter: Angel Todorov
• Created: 05/May/07 18:41
• Updated: 14/May/07 14:09
• Resolved: 14/May/07 14:09

Description

When trying to encrypt the username/password of the UsernameToken assertion, by using the SignedEncryptedSupportingTokens assertion , I get no result - username and password are sent in plaintext.

This problem can be very easily reproduced by changing the "SignedSupportingTokens" assertion in rampart's sample01, to "SignedEncryptedSupportingTokens". This is really, core, critical functionality. Thank you very much.

Regards,
Angel