Details

    • Type: Improvement
    • Status: Closed
    • Priority: Minor
    • Resolution: Complete
    • Affects Version/s: None
    • Fix Version/s: 2.0 M2
    • Component/s: Security
    • Labels:
      None

      Description

      Created on behalf of customer:

      Can the current distribution be upgraded to use the latest XWSS 3.1 distribution? There are issues with DST timezone handing that the newer versions resolve.

        Activity

        Hide
        rajesh_kamisetty Rajesh Kamisetty added a comment -

        XWSS has started adding one hour from 9 PM EST instead of 2 AM EST - applying dst logic 5 hours ahead of time. This resulted in WS-Security Headers carrying incorrect timestamp.

        The relavent bug in XWSS 2.x and 3.0 is documented here :
        https://xwss.dev.java.net/issues/show_bug.cgi?id=28

        Thank you for taking this up.

        Show
        rajesh_kamisetty Rajesh Kamisetty added a comment - XWSS has started adding one hour from 9 PM EST instead of 2 AM EST - applying dst logic 5 hours ahead of time. This resulted in WS-Security Headers carrying incorrect timestamp. The relavent bug in XWSS 2.x and 3.0 is documented here : https://xwss.dev.java.net/issues/show_bug.cgi?id=28 Thank you for taking this up.
        Hide
        arjen.poutsma Arjen Poutsma added a comment -

        Upgrading from XWSS 2 to 3 is not a simple upgrade, as I believe the API is not 100% backwards compatible. Therefore, we need to wait with this for the next major release.

        In the mean time, using the WSS4J security configuration gives a good workaround.

        Show
        arjen.poutsma Arjen Poutsma added a comment - Upgrading from XWSS 2 to 3 is not a simple upgrade, as I believe the API is not 100% backwards compatible. Therefore, we need to wait with this for the next major release. In the mean time, using the WSS4J security configuration gives a good workaround.
        Hide
        tareq Tareq Abedrabbo added a comment -

        I'm only able to locate version 3.0 on sun's maven repo. Anyone knows whether version 3.1 is published to any public repo?

        Show
        tareq Tareq Abedrabbo added a comment - I'm only able to locate version 3.0 on sun's maven repo. Anyone knows whether version 3.1 is published to any public repo?
        Hide
        arjen.poutsma Arjen Poutsma added a comment -

        I can only see 3.0 in the repo's as well. Let's start with that, and hope that we find 3.1 later (and that is compatible).

        Show
        arjen.poutsma Arjen Poutsma added a comment - I can only see 3.0 in the repo's as well. Let's start with that, and hope that we find 3.1 later (and that is compatible).
        Hide
        tareq Tareq Abedrabbo added a comment -

        I updated the XWSS dependency to 3.0 since 3.1 is not available on a public repo yet. For the moment only the old configuration method is available since the new one, based on WS-Policy, seems to have strong dependencies on Metro. If anyone is willing to help with that, I'll be glad to assist.

        Show
        tareq Tareq Abedrabbo added a comment - I updated the XWSS dependency to 3.0 since 3.1 is not available on a public repo yet. For the moment only the old configuration method is available since the new one, based on WS-Policy, seems to have strong dependencies on Metro. If anyone is willing to help with that, I'll be glad to assist.
        Hide
        arjen.poutsma Arjen Poutsma added a comment -

        Closing old issues

        Show
        arjen.poutsma Arjen Poutsma added a comment - Closing old issues

          People

          • Assignee:
            tareq Tareq Abedrabbo
            Reporter:
            support Support Tech
          • Votes:
            4 Vote for this issue
            Watchers:
            5 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved: