Uploaded image for project: 'Spring Web Services'
  1. Spring Web Services
  2. SWS-425

Upgrade xmlsec to 1.4.1, since 1.4.0 has problems with UTF-8

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 1.5.4
    • Fix Version/s: 1.5.5
    • Component/s: Core
    • Labels:
      None
    • Environment:
      Spring-WS 1.5.4, WSS4J 1.5.4, Apache XML Security 1.4.0

      Description

      Apache XML Security 1.4.0 has major problems with signed and encrypted messages containing international characters (e. g. payloads containing Czech/Slovak UTF-8-encoded characters. This renders WSS4J support unusable. Version 1.4.1 fixes these problems. See XML Security bugzilla for more details, https://issues.apache.org/bugzilla/show_bug.cgi?id=41462.

      (Note that there is already a newer version 1.4.2, however I have encountered major problems with computation of digest of request messages.)

        Activity

        Hide
        arjen.poutsma Arjen Poutsma added a comment -

        Unfortunately, 1.4.1 has not made it to the Maven repo yet. There is a directory for it (http://repo1.maven.org/maven2/org/apache/santuario/xmlsec/1.4.1/), but no jars...

        Show
        arjen.poutsma Arjen Poutsma added a comment - Unfortunately, 1.4.1 has not made it to the Maven repo yet. There is a directory for it ( http://repo1.maven.org/maven2/org/apache/santuario/xmlsec/1.4.1/ ), but no jars...
        Hide
        novotnyr Robert Novotny added a comment -

        After a short discussion on this issue on XML Security mailing list (see http://www.nabble.com/Upload-1.4.1-and-1.4.2-to-Maven-Repo-td19387238.html), the problem was has been resolved.

        JARs for 1.4.1 and 1.4.2 have been uploaded to Maven repository (http://repo1.maven.org/maven2/org/apache/santuario/xmlsec/1.4.1/).

        Show
        novotnyr Robert Novotny added a comment - After a short discussion on this issue on XML Security mailing list (see http://www.nabble.com/Upload-1.4.1-and-1.4.2-to-Maven-Repo-td19387238.html ), the problem was has been resolved. JARs for 1.4.1 and 1.4.2 have been uploaded to Maven repository ( http://repo1.maven.org/maven2/org/apache/santuario/xmlsec/1.4.1/ ).
        Hide
        arjen.poutsma Arjen Poutsma added a comment -

        Fixed, thanks for your help!

        Show
        arjen.poutsma Arjen Poutsma added a comment - Fixed, thanks for your help!
        Hide
        arjen.poutsma Arjen Poutsma added a comment -

        Closing old issues

        Show
        arjen.poutsma Arjen Poutsma added a comment - Closing old issues

          People

          • Assignee:
            arjen.poutsma Arjen Poutsma
            Reporter:
            novotnyr Robert Novotny
          • Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved: