Kai Rommel created CXF-6955: ------------------------------- Summary: WS-RM 3.x encrypted attachments are saved for retransmission Key: CXF-6955 URL: https://issues.apache.org/jira/browse/CXF-6955 Project: CXF Issue Type: Bug Components: WS-* Components Affects Versions: 3.0.9, 3.1.6 Reporter: Kai Rommel
The security processed attachments themselves are reusable for retransmission because there is no timestamp attached to them. However, the retransmission will currently re-apply security processing to the attachments and that will be wrong. There are some options to solve the issue: 1. To re-use the processed attachments, we need to skip security processing for the attachments at retransmission. 2. Alternatively, we could store the original attachments when ws-sec on attachments is configured and apply security processing at each retransmission. -- This message was sent by Atlassian JIRA (v6.3.4#6332)