Failure to add "#" to beginning of reference in signatures

[glassfishrobot]

The security processing fails to add a "#" to the beginning of a reference included in a signature.

Affected Versions

[2.1.1]

[glassfishrobot]

Reported by mleese

[glassfishrobot]

Was assigned to symonchang

[glassfishrobot]

mleese said:
The following patch corrects this issue:
diff --git a/metro/com/sun/xml/wss/impl/dsig/WSSPolicyConsumerImpl.java b/metro/com/sun/xml/wss/impl/dsig/WSSPolicyConsumerImpl.java
index f095043..4a14de6 100644
— a/metro/com/sun/xml/wss/impl/dsig/WSSPolicyConsumerImpl.java
+++ b/metro/com/sun/xml/wss/impl/dsig/WSSPolicyConsumerImpl.java
@@ -1024,9 +1024,9 @@
attribute.getNamespaceURI().equals(MessageConstants.NAMESPACES_NS)) {
byte [] digestValue = fpContext.getDigestValue();
Reference reference = null;
if(!verify && digestValue != null)

{ + reference = signatureFactory.newReference("#"+targetURI,digestMethod,transformList,null,null,digestValue); - reference = signatureFactory.newReference(targetURI,digestMethod,transformList,null,null,digestValue); }

else

{ + reference = signatureFactory.newReference("#"+targetURI,digestMethod,transformList,null,null,null); - reference = signatureFactory.newReference(targetURI,digestMethod,transformList,null,null,null); }

//Note :: Id is null.

[glassfishrobot]

This issue was imported from java.net JIRA WSIT-1685