This is an automated email from the ASF dual-hosted git repository.
robertlazarski pushed a change to branch master
in repository https://gitbox.apache.org/repos/asf/axis-axis2-java-rampart.git
from 977e51f8 RAMPART-428: harden the test XML parser against XXE
new 8ce0aeb0 RAMPART-427: add the CLIENT_SIDE marker parameter race-free
new c8071bad Address RAMPART-427 review: document init trade-off, guard
config parsing
new e9ccb685 RAMPART-411: add regression test for signing the
BinarySecurityToken
new 205ae0c1 RAMPART-431: skip signing SignedParts headers that are absent
from the message
new 07701083 RAMPART-44 / RAMPART-252: enforce the policy algorithm suite
on inbound messages
new b2cce440 RAMPART-44 / RAMPART-252: add a dedicated algorithm-downgrade
test
The 6 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.../java/org/apache/rampart/RampartEngine.java | 50 +++++++
.../org/apache/rampart/RampartMessageData.java | 56 ++++++--
.../rampart/builder/TransportBindingBuilder.java | 49 ++++---
.../resources/org/apache/rampart/errors.properties | 1 +
.../org/apache/rampart/RampartMessageDataTest.java | 83 +++++++++++
.../test/java/org/apache/rampart/RampartTest.java | 10 +-
.../rampart/AsymmetricBindingBuilderTest.java | 24 ++++
.../org/apache/rampart/PolicyAssertionsTest.java | 37 +++++
.../rampart/TransportBindingBuilderTest.java | 23 ++++
...ng-1.xml => rampart-asymm-binding-1-sha256.xml} | 4 +-
...xml => rampart-asymm-binding-protecttokens.xml} | 152 +++++++++++----------
...art-transport-binding-absent-signed-header.xml} | 134 +++++++++---------
12 files changed, 457 insertions(+), 166 deletions(-)
create mode 100644
modules/rampart-core/src/test/java/org/apache/rampart/RampartMessageDataTest.java
copy modules/rampart-tests/test-resources/policy/{rampart-asymm-binding-1.xml
=> rampart-asymm-binding-1-sha256.xml} (90%)
copy modules/rampart-tests/test-resources/policy/{rampart-asymm-binding-1.xml
=> rampart-asymm-binding-protecttokens.xml} (90%)
copy
modules/rampart-tests/test-resources/policy/{rampart-transport-binding.xml =>
rampart-transport-binding-absent-signed-header.xml} (87%)