eclipse-ee4j / eclipse-ee4j/metro-wsit

Multiple Algorithm suites causes failuers

Open
#201 0 comments 0 reactions 0 assignees View on GitHub
Component: security ERR: Assignee Priority: Major Type: Improvement
Dominant language
Java
Stars
6
Forks
21
Avg merge
10h 2m
Merged PRs (30d)
1

Description

Presence of different algorithm suite in the bootstrap policy which is different
form the application policy causes failuers on the server side . Server is
unable to decrypt the payload.
[http://forums.java.net/jive/thread.jspa?threadID=23180&tstart=0](http://forums.java.net/jive/thread.jspa?threadID=23180&tstart=0)
#### Environment
Operating System: All
Platform: Sun
#### Affected Versions
[current]

Source: [https://github.com/javaee/metro-wsit/issues/394](https://github.com/javaee/metro-wsit/issues/394)
Author: glassfishrobot

Contributor guide

Open the contributing guide

Research direction

Start by reviewing how the bootstrap policy and application policy are processed when they use different algorithm suites, then consult the linked forum discussion and source issue #394. Reproduce the server-side decryption failure and trace the policy handling until the payload decrypts successfully with differing suites.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
backend, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.