[SANTUARIO-344] XMLSignature keeps file-handle on xml-file

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: Java 1.5.1
• Fix Version/s: Java 1.5.3
• Component/s: Java
• Security Level: Public (Public issues, viewable by everyone)
• Environment: Windows (XP, 7)
• Assignee: Colm O hEigeartaigh
• Reporter: Andreas B.
• Created: 10/Sep/12 13:37
• Updated: 16/Oct/12 14:03
• Resolved: 20/Sep/12 15:34

Description

When creating a signature based on a XML file (i.e. calling the method org.apache.xml.security.signature.XMLSignature.sign(Key signingKey)) the filehandle to the signed resource (the XML file) stays open after the method has finished (successfully).

I was able to track it down to the above mentioned method, but then get lost somewhere at org.apache.xml.security.signature.Reference, which seems to use a cache for resource.

Background: I want to delete the source-file after signature generation, which is not possible until the VM stops.