[WSS-201] Some of the processors use the wrong Crypto implementation

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.5.7
• Fix Version/s: 1.5.8, 1.6
• Component/s: WSS4J Core
• Assignee: Colm O hEigeartaigh
• Reporter: Colm O hEigeartaigh
• Created: 02/Jul/09 10:44
• Updated: 02/Jul/09 13:40
• Resolved: 02/Jul/09 13:40

Description

ReferenceListProcessor wrongly uses the signature crypto implementation, rather than the decryption implementation. Also BinarySecurityTokenProcessor assumes that the BST is being processed for a signature and uses the signature crypto instance to parse the certificate(s), whereas it should check for null first.