Kai Rommel created CXF-6955:
-------------------------------

             Summary: WS-RM 3.x encrypted attachments are saved for 
retransmission
                 Key: CXF-6955
                 URL: https://issues.apache.org/jira/browse/CXF-6955
             Project: CXF
          Issue Type: Bug
          Components: WS-* Components
    Affects Versions: 3.0.9, 3.1.6
            Reporter: Kai Rommel


The security processed attachments themselves are reusable for retransmission 
because there is no timestamp attached to them. However, the retransmission 
will currently re-apply security processing to the attachments and that will be 
wrong. 
There are some options to solve the issue:
1.  To re-use the processed attachments, we need to skip security processing 
for the attachments at retransmission. 
2.  Alternatively, we could store the original attachments when ws-sec on 
attachments is configured and apply security processing at each retransmission. 




--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to