Details

    • Type: Improvement
    • Status: Closed
    • Priority: Minor
    • Resolution: Complete
    • Affects Version/s: None
    • Fix Version/s: 2.0 M2
    • Component/s: Security
    • Labels:
      None

      Description

      Created on behalf of customer:

      Can the current distribution be upgraded to use the latest XWSS 3.1 distribution? There are issues with DST timezone handing that the newer versions resolve.

        Activity

        support Support Tech created issue -
        arjen.poutsma Arjen Poutsma made changes -
        Field Original Value New Value
        Fix Version/s 1.6 [ 10981 ]
        Hide
        rajesh_kamisetty Rajesh Kamisetty added a comment -

        XWSS has started adding one hour from 9 PM EST instead of 2 AM EST - applying dst logic 5 hours ahead of time. This resulted in WS-Security Headers carrying incorrect timestamp.

        The relavent bug in XWSS 2.x and 3.0 is documented here :
        https://xwss.dev.java.net/issues/show_bug.cgi?id=28

        Thank you for taking this up.

        Show
        rajesh_kamisetty Rajesh Kamisetty added a comment - XWSS has started adding one hour from 9 PM EST instead of 2 AM EST - applying dst logic 5 hours ahead of time. This resulted in WS-Security Headers carrying incorrect timestamp. The relavent bug in XWSS 2.x and 3.0 is documented here : https://xwss.dev.java.net/issues/show_bug.cgi?id=28 Thank you for taking this up.
        Hide
        arjen.poutsma Arjen Poutsma added a comment -

        Upgrading from XWSS 2 to 3 is not a simple upgrade, as I believe the API is not 100% backwards compatible. Therefore, we need to wait with this for the next major release.

        In the mean time, using the WSS4J security configuration gives a good workaround.

        Show
        arjen.poutsma Arjen Poutsma added a comment - Upgrading from XWSS 2 to 3 is not a simple upgrade, as I believe the API is not 100% backwards compatible. Therefore, we need to wait with this for the next major release. In the mean time, using the WSS4J security configuration gives a good workaround.
        arjen.poutsma Arjen Poutsma made changes -
        Fix Version/s 2.0 GA [ 10981 ]
        Fix Version/s 2.0 M1 [ 11110 ]
        arjen.poutsma Arjen Poutsma made changes -
        Assignee Arjen Poutsma [ arjen.poutsma ] Tareq Abedrabbo [ tareq ]
        arjen.poutsma Arjen Poutsma made changes -
        Fix Version/s 2.0 M2 [ 11390 ]
        Fix Version/s 2.0 M1 [ 11110 ]
        Hide
        tareq Tareq Abedrabbo added a comment -

        I'm only able to locate version 3.0 on sun's maven repo. Anyone knows whether version 3.1 is published to any public repo?

        Show
        tareq Tareq Abedrabbo added a comment - I'm only able to locate version 3.0 on sun's maven repo. Anyone knows whether version 3.1 is published to any public repo?
        Hide
        arjen.poutsma Arjen Poutsma added a comment -

        I can only see 3.0 in the repo's as well. Let's start with that, and hope that we find 3.1 later (and that is compatible).

        Show
        arjen.poutsma Arjen Poutsma added a comment - I can only see 3.0 in the repo's as well. Let's start with that, and hope that we find 3.1 later (and that is compatible).
        Hide
        tareq Tareq Abedrabbo added a comment -

        I updated the XWSS dependency to 3.0 since 3.1 is not available on a public repo yet. For the moment only the old configuration method is available since the new one, based on WS-Policy, seems to have strong dependencies on Metro. If anyone is willing to help with that, I'll be glad to assist.

        Show
        tareq Tareq Abedrabbo added a comment - I updated the XWSS dependency to 3.0 since 3.1 is not available on a public repo yet. For the moment only the old configuration method is available since the new one, based on WS-Policy, seems to have strong dependencies on Metro. If anyone is willing to help with that, I'll be glad to assist.
        tareq Tareq Abedrabbo made changes -
        Resolution Complete [ 8 ]
        Status Open [ 1 ] Resolved [ 5 ]
        Hide
        arjen.poutsma Arjen Poutsma added a comment -

        Closing old issues

        Show
        arjen.poutsma Arjen Poutsma added a comment - Closing old issues
        arjen.poutsma Arjen Poutsma made changes -
        Status Resolved [ 5 ] Closed [ 6 ]
        Transition Time In Source Status Execution Times Last Executer Last Execution Date
        Open Open Resolved Resolved
        315d 16h 16m 1 Tareq Abedrabbo 19/May/10 7:56 PM
        Resolved Resolved Closed Closed
        715d 11h 7m 1 Arjen Poutsma 04/May/12 7:03 AM

          People

          • Assignee:
            tareq Tareq Abedrabbo
            Reporter:
            support Support Tech
          • Votes:
            4 Vote for this issue
            Watchers:
            5 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved: