Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

WSSE Decryption dangling references (cleanup) #7

Open
GoogleCodeExporter opened this issue Mar 31, 2015 · 0 comments
Open

WSSE Decryption dangling references (cleanup) #7

GoogleCodeExporter opened this issue Mar 31, 2015 · 0 comments

Comments

@GoogleCodeExporter
Copy link

What steps will reproduce the problem?
1. Decrypt a Signed + Encrypted SOAP message using $WSSE->decryptSoapDoc()
2. As the decryption is done in place, it does not cleanup the DataReferences 
which are now dangling as the previously pointed element has been replaced

Solution: 
1. Initially attempted to fix through xmlseclibs but it's cleaner to patch via 
WSSE to leave undecryptable references in place still
1. Cleanup the parent + ancestors leading to EncryptedKey when all 
DataReferences are removed

What version of the product are you using? On what operating system?
1.1.0-dev (ubuntu 10 LTS)



Original issue reported on code.google.com by [email protected] on 17 Jul 2014 at 12:07

Attachments:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant