[
https://issues.jboss.org/browse/AS7-4664?page=com.atlassian.jira.plugin.s...
]
Pedro Igor commented on AS7-4664:
---------------------------------
The module.xml of the org.picketlink module needs to be changed in order to use Santuario
and not the JDK xmlsec implementation.
The order of the dependencies needs to be changed in a way that javax.api is the last one.
The javax.api must be defined after the org.apache.santuario.xmlsec, otherwise Santuario
xmlsec implementation will not be used.
The module.xml bellow already reflect the necessary changes:
<module xmlns="urn:jboss:module:1.1" name="org.picketlink">
<resources>
<resource-root path="picketlink-jbas7-2.1.0-SNAPSHOT.jar"
/>
<resource-root path="picketlink-core-2.1.0-SNAPSHOT.jar"
/>
</resources>
<dependencies>
<module name="javax.security.auth.message.api" />
<module name="javax.security.jacc.api" />
<module name="javax.transaction.api" />
<module name="javax.xml.bind.api" />
<module name="javax.xml.stream.api" />
<module name="javax.servlet.api" />
<module name="org.jboss.common-core" />
<module name="org.jboss.logging" />
<module name="org.jboss.as.web" />
<module name="org.picketbox" />
<module name="javax.xml.ws.api" />
<module name="org.apache.log4j" />
<module name="org.apache.santuario.xmlsec" />
<module name="org.jboss.security.xacml" />
<module name="javax.api" /> <!-- Moved to be the
last dependency-->
</dependencies>
</module>
For more informations, see
https://community.jboss.org/wiki/PL21xInAS71x.
Upgrade PicketLink Libraries to 2.1.0.Final
-------------------------------------------
Key: AS7-4664
URL:
https://issues.jboss.org/browse/AS7-4664
Project: Application Server 7
Issue Type: Component Upgrade
Components: Security
Reporter: Anil Saldhana
Assignee: Anil Saldhana
Fix For: 7.1.2.Final-redhat1
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see:
http://www.atlassian.com/software/jira