[WSS-484] Streaming code can't process a Key reference pointing to an EncryptedData element

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.0.0
• Assignee: Marc Giger
• Reporter: Colm O hEigeartaigh
• Created: 06/Nov/13 15:06
• Updated: 06/May/14 09:10
• Resolved: 24/Nov/13 11:37

Description

The streaming code fails when confronted with a security header with contains an EncrypteData structure in the security header (encrypted SAML Token), and a Signature KeyInfo beneath it that references the ID of the Assertion.

Sample header:

https://paste.apache.org/2weX

Also, see the @Ignore'd test here:

http://svn.apache.org/viewvc/cxf/trunk/services/sts/systests/basic/src/test/java/org/apache/cxf/systest/sts/asymmetric/StaxAsymmetricBindingTest.java?view=markup