eclipse-ee4j / eclipse-ee4j/metro-wsit

I cannot set the signatureKeyAlgorithm to "SHA256withRSA"

Open
#57 3 comments 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
6
Forks
21
Avg merge
10h 2m
Merged PRs (30d)
1

Description

On a WSDL containing
```


:





:


```

In SecurityUtil.getKeyAlgo(String algo) algo is always null so returns the default SHA1 algorithm.

In the equivalent dotNet code I have to explicitly set binding.Security.Message.AlgorithmSuite = SecurityAlgorithmSuite.Basic256Sha256. In CXF there is the property override "ws-security.asymmetric.signature.algorithm"

How can I override this in metro?

Contributor guide

Open the contributing guide

Research direction

Start at SecurityUtil.getKeyAlgo(String algo) and trace how the WSDL AlgorithmSuite signatureAlgorithm reaches it, comparing the shown SHA256withRSA policy with the default SHA1 path. Done means the requested signature algorithm can be honored or overridden in Metro, with the behavior verified against this policy example.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.