[WSS-306] It would be nice to have WSSecEncryptedKey generate secret keys by means of KeyGenerator

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.6.1
• Fix Version/s: 1.6.3
• Component/s: WSS4J Core
• Assignee: Colm O hEigeartaigh
• Reporter: Sergey Zhemzhitsky
• Created: 10/Aug/11 10:00
• Updated: 03/Oct/11 08:56
• Resolved: 15/Aug/11 12:45

Description

WSS4J generates secret key itself instead of using http://download.oracle.com/javase/6/docs/api/javax/crypto/KeyGenerator.html#generateKey%28%29

protected byte[] generateEphemeralKey() throws WSSecurityException {
try

{ return WSSecurityUtil.generateNonce(this.keySize / 8); }

catch (Exception e)

{ throw new WSSecurityException("Error in creating the ephemeral key", e); }

}