Details
-
Type:
Bug
-
Status: Closed
-
Priority:
Major
-
Resolution: Fixed
-
Affects Version/s: Java 1.4.2
-
Fix Version/s: Java 1.4.5, Java 1.5
-
Component/s: Java
-
Security Level: Public (Public issues, viewable by everyone)
-
Labels:None
-
Environment:Operating System: All
Platform: All
Description
Created an attachment (id=23913)
debug log
xml:id attributes are still not correctly handled when using c14n11 for encryption.
Example:
When I encrypt the <data> element in the following xml document, the xml:id attribute is added to the canonical form of the data tag during encryption.
<?xml version="1.0" encoding="UTF-8"?><test xml:id="ref1234">
<data>12345678</data>
</test>
encrypt/decrypt using c14n11 creates the following:
<?xml version="1.0" encoding="UTF-8"?><test xml:id="ref1234">
<data xml:id="ref1234">12345678</data>
</test>
See also attached debug log.
debug log
xml:id attributes are still not correctly handled when using c14n11 for encryption.
Example:
When I encrypt the <data> element in the following xml document, the xml:id attribute is added to the canonical form of the data tag during encryption.
<?xml version="1.0" encoding="UTF-8"?><test xml:id="ref1234">
<data>12345678</data>
</test>
encrypt/decrypt using c14n11 creates the following:
<?xml version="1.0" encoding="UTF-8"?><test xml:id="ref1234">
<data xml:id="ref1234">12345678</data>
</test>
See also attached debug log.
Activity
| Field | Original Value | New Value |
|---|---|---|
| issue.field.bugzillaimportkey | 47459 | 12492465 |
| Component/s | Java [ 12314103 ] | |
| Component/s | Canonicalization [ 12314098 ] |
| Workflow | jira [ 12539370 ] | Default workflow, editable Closed status [ 12565530 ] |
| Assignee | XML Security Developers Mailing List [ security-dev@xml.apache.org ] |
| Workflow | Default workflow, editable Closed status [ 12565530 ] | jira [ 12586416 ] |
I'm marking this issue as fixed for Java 1.4.4. The testcase that is supplied passes with the 1.4.4 release, but fails with the 1.4.3 release. At a guess, it was fixed by this issue:
https://issues.apache.org/bugzilla/show_bug.cgi?id=47761
Colm.
Show
Colm O hEigeartaigh
added a comment -
I'm marking this issue as fixed for Java 1.4.4. The testcase that is supplied passes with the 1.4.4 release, but fails with the 1.4.3 release. At a guess, it was fixed by this issue:
https://issues.apache.org/bugzilla/show_bug.cgi?id=47761
Colm.
| Fix Version/s | Java 1.4.4 [ 12315956 ] |
| Status | Open [ 1 ] | Resolved [ 5 ] |
| Resolution | Fixed [ 1 ] |
I'm re-opening this issue, as I think a regression introduced in 1.4.4 has masked the problem (see SANTUARIO-266).
Colm.
Show
Colm O hEigeartaigh
added a comment -
I'm re-opening this issue, as I think a regression introduced in 1.4.4 has masked the problem (see SANTUARIO-266 ).
Colm.
| Resolution | Fixed [ 1 ] | |
| Status | Resolved [ 5 ] | Reopened [ 4 ] |
| Assignee | Colm O hEigeartaigh [ coheigea ] |
| Summary | c14n11 does include parent xml:id attributes in encrypted data | Java |
| Fix Version/s | Java 1.4.5 [ 12315957 ] | |
| Fix Version/s | Java 1.5 [ 12315958 ] | |
| Fix Version/s | Java 1.4.4 [ 12315956 ] |
| Summary | Java | xml:id attributes are not correctly handled when using c14n11 |
Author: coheigea
Date: Wed Apr 27 10:16:29 2011
New Revision: 1097064
URL: http://svn.apache.org/viewvc?rev=1097064&view=rev
Log:
SANTUARIO-191 - xml:id attributes are not correctly handled when using c14n11
Author: coheigea
Date: Wed Apr 27 10:25:49 2011
New Revision: 1097066
URL: http://svn.apache.org/viewvc?rev=1097066&view=rev
Log:
SANTUARIO-291 - xml:id attributes are not correctly handled when using c14n11.
Show
Colm O hEigeartaigh
added a comment -
Author: coheigea
Date: Wed Apr 27 10:16:29 2011
New Revision: 1097064
URL: http://svn.apache.org/viewvc?rev=1097064&view=rev
Log:
SANTUARIO-191 - xml:id attributes are not correctly handled when using c14n11
Author: coheigea
Date: Wed Apr 27 10:25:49 2011
New Revision: 1097066
URL: http://svn.apache.org/viewvc?rev=1097066&view=rev
Log:
SANTUARIO-291 - xml:id attributes are not correctly handled when using c14n11.
| Status | Reopened [ 4 ] | Resolved [ 5 ] |
| Resolution | Fixed [ 1 ] |
| Status | Resolved [ 5 ] | Closed [ 6 ] |
Can you provide a test-case?
Colm.